Function at 0x472210
Capabilities:
Contain obfuscated stackstrings
Encode data using base64
Parse pe header

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ea076
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x70a8
call fcn.0041ed70
mov eax, dword [0x704200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, ecx
mov dword [ebp - 0x6f44], eax
mov dword [ebp - 0x6fac], 0
lea ecx, [ebp - 0x27a4]
mov byte [eax + 0x170], 0
call fcn.00539880
mov ecx, dword [ebp - 0x6f44]
lea ecx, [ecx + 0x11c]
call fcn.00545760
xor ecx, ecx
call fcn.0053cd10
test eax, eax
je 0x47229e
push eax
call fcn.0041e473
add esp, 4
mov ecx, dword [ebp - 0x6f44]
push 0
call fcn.00499c10
mov eax, dword [ebp - 0x6f44]
push 1
mov eax, dword [eax + 8]
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.005173e0
mov eax, dword [ebp - 0x6f44]
push 0
push 0x6645ec
mov eax, dword [eax + 8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.0051a750
push 0xc
lea ecx, [ebp - 0x1f98]
call fcn.00401d20
lea ecx, [ebp - 0x1f98]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2178]
mov dword [ebp - 4], 0
call fcn.00401d20
lea ecx, [ebp - 0x2178]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2120]
mov byte [ebp - 4], 1
call fcn.00401d20
lea ecx, [ebp - 0x2120]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x28b4]
mov byte [ebp - 4], 2
call fcn.00401d20
lea ecx, [ebp - 0x28b4]
call fcn.00545940
mov byte [ebp - 4], 3
mov esi, 0xa0
mov eax, dword [ebp - 0x6f44]
push 0
push 0
push 0x1009
mov eax, dword [eax + 8]
push dword [esi + eax]
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.0051c9f0
add esi, 4
cmp esi, 0xb8
jb 0x472360
push 0
push 0
push 0x80
lea ecx, [ebp - 0x2120]
call fcn.00544ce0
push eax
push 0
push 0
push 0x104
lea ecx, [ebp - 0x2178]
call fcn.00544ce0
push 0
push 0
push 0x80
lea ecx, [ebp - 0x28b4]
mov esi, eax
call fcn.00544ce0
mov edx, esi
mov ecx, eax
call fcn.004faca0
mov edi, dword [ebp - 0x6f44]
push 4
mov byte [ebp - 0x6f61], 1
mov dword [edi + 0x38], eax
mov eax, edi
mov eax, dword [eax + 8]
push dword [eax + 0x28]
mov eax, edi
mov ecx, dword [eax + 4]
call fcn.00519f20
mov dword [ebp - 0x6f40], eax
test eax, eax
je 0x472432
mov eax, edi
push 1
lea ecx, [eax + 0x114]
push ecx
lea edx, [eax + 0x10c]
lea ecx, [eax + 0x104]
call fcn.004fb120
test eax, eax
mov dword [edi + 0x30], eax
setne cl
test eax, eax
jne 0x4724b2
jmp 0x472438
mov cl, byte [ebp - 0x6f61]
mov eax, dword [ebp - 0x6f44]
cmp dword [eax + 0x38], 0
je 0x4724aa
lea ecx, [ebp - 0x2120]
mov dword [eax + 0x30], 1
push ecx
push 1
lea ecx, [eax + 0x104]
call fcn.00403520
mov ecx, eax
call fcn.00545840
mov ecx, dword [ebp - 0x6f44]
lea eax, [ebp - 0x2178]
push eax
push 1
lea ecx, [ecx + 0x10c]
call fcn.00403520
mov ecx, eax
call fcn.00545840
mov ecx, dword [ebp - 0x6f44]
lea eax, [ebp - 0x28b4]
push eax
push 1
lea ecx, [ecx + 0x114]
call fcn.00403520
mov ecx, eax
call fcn.00545840
jmp 0x4724b2
test cl, cl
je 0x472818
push 8
lea ecx, [ebp - 0x284c]
call fcn.00401f60
mov eax, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x284c]
add eax, 0x114
push eax
mov dword [ebp - 0x6f94], eax
call fcn.00403680
push 8
lea ecx, [ebp - 0x2844]
mov byte [ebp - 4], 4
call fcn.00401f60
mov esi, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x2844]
add esi, 0x10c
push esi
mov dword [ebp - 0x6f7c], esi
call fcn.00403680
push 8
lea ecx, [ebp - 0x283c]
mov byte [ebp - 4], 5
call fcn.00401f60
mov edi, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x283c]
add edi, 0x104
push edi
mov dword [ebp - 0x6f54], edi
call fcn.00403680
mov eax, dword [ebp - 0x6f44]
mov ecx, edi
mov byte [ebp - 4], 6
mov eax, dword [eax + 0x30]
add eax, 2
push eax
call fcn.00403520
mov edi, dword [ebp - 0x6f44]
mov ecx, esi
mov eax, dword [edi + 0x30]
add eax, 2
push eax
call fcn.00403520
mov eax, dword [edi + 0x30]
mov edi, dword [ebp - 0x6f94]
add eax, 2
push eax
mov ecx, edi
call fcn.00403520
mov eax, dword [ebp - 0x6f44]
xor esi, esi
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x47260f
nop dword [eax]
push esi
lea ecx, [ebp - 0x283c]
call fcn.004035f0
mov ecx, eax
call fcn.00545740
mov ecx, dword [ebp - 0x6f54]
push eax
push esi
call fcn.004035f0
mov ecx, eax
call fcn.00545520
push esi
lea ecx, [ebp - 0x2844]
call fcn.004035f0
mov ecx, eax
call fcn.00545740
mov ecx, dword [ebp - 0x6f7c]
push eax
push esi
call fcn.004035f0
mov ecx, eax
call fcn.00545520
push esi
lea ecx, [ebp - 0x284c]
call fcn.004035f0
mov ecx, eax
call fcn.00545740
push eax
push esi
mov ecx, edi
call fcn.004035f0
mov ecx, eax
call fcn.00545520
mov eax, dword [ebp - 0x6f44]
inc esi
mov ecx, dword [eax + 0x30]
cmp esi, ecx
jb 0x472590
push 0
push 0x664618
push 0x104
push ecx
lea ecx, [eax + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.00544ce0
mov ecx, eax
call fcn.004fa2f0
mov eax, dword [ebp - 0x6f44]
push 0x664618
push dword [eax + 0x30]
lea ecx, [eax + 0x104]
call fcn.004035f0
mov ecx, eax
call fcn.00545870
mov edi, dword [ebp - 0x6f44]
mov ecx, edi
push 0x66462c
mov eax, dword [edi + 0x30]
lea ecx, [ecx + 0x104]
inc eax
push eax
mov dword [edi + 0x30], eax
call fcn.004035f0
mov ecx, eax
call fcn.00545870
mov eax, edi
push 0x66462c
push dword [eax + 0x30]
lea ecx, [eax + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.00545870
lea eax, [ebp - 0x6dc0]
mov dword [ebp - 0x6dc0], 0x400
push eax
push 0
mov eax, edi
push 0
push 0x400
push dword [eax + 0x30]
lea ecx, [eax + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544ce0
push eax
call dword [0x5fd890]
mov edx, 0x66462c
mov ecx, 0x80000003
call fcn.0053da10
test al, al
jne 0x47277d
push 0xc
lea ecx, [ebp - 0x29bc]
call fcn.00401d20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov eax, edi
push 0
push 0x6271f8
push dword [eax + 0x30]
lea ecx, [eax + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x29bc]
call fcn.00545880
lea ecx, [ebp - 0x29bc]
mov byte [ebp - 4], 7
call fcn.005454f0
push eax
mov eax, edi
push dword [eax + 0x30]
lea ecx, [eax + 0x104]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
push 0x80000003
call dword [0x5fd06c]
test eax, eax
jne 0x472770
mov eax, edi
mov eax, dword [eax + 0x30]
inc eax
mov dword [edi + 0x30], eax
lea ecx, [ebp - 0x29bc]
call fcn.00545790
jmp 0x472786
mov eax, edi
mov eax, dword [eax + 0x30]
inc eax
mov dword [edi + 0x30], eax
lea ecx, [ebp - 0x283c]
call fcn.00403610
lea ecx, [ebp - 0x2844]
call fcn.00403610
lea ecx, [ebp - 0x284c]
mov byte [ebp - 4], 3
call fcn.00403610
mov esi, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x27a4]
add esi, 0x140
call fcn.005398e0
push edx
push eax
mov ecx, esi
call fcn.00544730
mov ecx, dword [ebp - 0x6f44]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x62fb64
lea ecx, [ecx + 0x134]
call fcn.005454f0
push eax
mov ecx, esi
call fcn.005438d0
mov ecx, esi
call fcn.005454f0
or edx, 0xffffffff
mov ecx, eax
call fcn.0052ffa0
test al, al
jne 0x472828
mov eax, dword [ebp - 0x6f44]
push 1
mov ecx, eax
call fcn.00499c10
mov esi, eax
jmp 0x48d429
mov ecx, esi
call fcn.005454f0
push eax
call dword [0x5fd498]
or eax, 2
mov ecx, esi
push eax
call fcn.005454f0
push eax
call dword [0x5fd478]
push 0
call dword [0x5fdacc]
push 0xc
lea ecx, [ebp - 0x2220]
call fcn.00401d20
lea ecx, [ebp - 0x2220]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2184]
mov byte [ebp - 4], 8
call fcn.00401d20
lea ecx, [ebp - 0x2184]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x29a4]
mov byte [ebp - 4], 9
call fcn.00401d20
lea ecx, [ebp - 0x29a4]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x25e4]
mov byte [ebp - 4], 0xa
call fcn.00401d20
lea ecx, [ebp - 0x25e4]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x294c]
mov byte [ebp - 4], 0xb
call fcn.00401d20
lea ecx, [ebp - 0x294c]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x24c8]
mov byte [ebp - 4], 0xc
call fcn.00401d20
lea ecx, [ebp - 0x24c8]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x26c8]
mov byte [ebp - 4], 0xd
call fcn.00401d20
lea ecx, [ebp - 0x26c8]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x28a8]
mov byte [ebp - 4], 0xe
call fcn.00401d20
lea ecx, [ebp - 0x28a8]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2958]
mov byte [ebp - 4], 0xf
call fcn.00401d20
lea ecx, [ebp - 0x2958]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x25d8]
mov byte [ebp - 4], 0x10
call fcn.00401d20
lea ecx, [ebp - 0x25d8]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x27c8]
mov byte [ebp - 4], 0x11
call fcn.00401d20
lea ecx, [ebp - 0x27c8]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2940]
mov byte [ebp - 4], 0x12
call fcn.00401d20
lea ecx, [ebp - 0x2940]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x26d4]
mov byte [ebp - 4], 0x13
call fcn.00401d20
lea ecx, [ebp - 0x26d4]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x26e0]
mov byte [ebp - 4], 0x14
call fcn.00401d20
lea ecx, [ebp - 0x26e0]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x271c]
mov byte [ebp - 4], 0x15
call fcn.00401d20
lea ecx, [ebp - 0x271c]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x27d4]
mov byte [ebp - 4], 0x16
call fcn.00401d20
lea ecx, [ebp - 0x27d4]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2934]
mov byte [ebp - 4], 0x17
call fcn.00401d20
lea ecx, [ebp - 0x2934]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2928]
mov byte [ebp - 4], 0x18
call fcn.00401d20
lea ecx, [ebp - 0x2928]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2644]
mov byte [ebp - 4], 0x19
call fcn.00401d20
lea ecx, [ebp - 0x2644]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2638]
mov byte [ebp - 4], 0x1a
call fcn.00401d20
lea ecx, [ebp - 0x2638]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x291c]
mov byte [ebp - 4], 0x1b
call fcn.00401d20
lea ecx, [ebp - 0x291c]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2578]
mov byte [ebp - 4], 0x1c
call fcn.00401d20
lea ecx, [ebp - 0x2578]
call fcn.00545940
mov byte [ebp - 4], 0x1d
call dword [0x5fd4fc]
mov ecx, eax
call fcn.00530830
mov edi, eax
mov ecx, str.HKLM
test edi, edi
mov dword [ebp - 0x6fa8], edi
mov eax, str.HKLM64
setne byte [ebp - 0x6f61]
test edi, edi
push 1
cmove eax, ecx
mov ecx, 0x61d060
mov dword [ebp - 0x6f8c], eax
mov eax, str.HKLM32
cmove eax, ecx
lea ecx, [ebp - 0x2220]
mov dword [ebp - 0x6fa4], eax
mov eax, dword [ebp - 0x6f44]
push dword [eax + 0x38]
push 0x1a
call fcn.00544f00
mov eax, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x2184]
push 1
push dword [eax + 0x38]
push 0x1c
call fcn.00544f00
mov eax, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x25e4]
push 1
push dword [eax + 0x38]
push 2
call fcn.00544f00
mov eax, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x24c8]
push 1
push dword [eax + 0x38]
push 0x10
call fcn.00544f00
mov eax, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x271c]
push 1
push dword [eax + 0x38]
push 0x23
call fcn.00544f00
mov eax, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x28a8]
push 1
push dword [eax + 0x38]
push 7
call fcn.00544f00
mov eax, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x2958]
push 1
push dword [eax + 0x38]
push 5
call fcn.00544f00
push 0x400
push 0
push 0
push 0x400
lea ecx, [ebp - 0x26c8]
call fcn.00544ce0
push eax
mov eax, dword [ebp - 0x6f44]
push 0x65f110
push dword [eax + 0x38]
call dword [0x5fd888]
push 0x400
lea ecx, [ebp - 0x26c8]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x26c8]
call fcn.005454f0
push eax
call dword [0x5fd500]
push 0x104
push 0
push 0
push 0x104
lea ecx, [ebp - 0x25d8]
call fcn.00544ce0
push eax
call dword [0x5fd428]
test edi, edi
je 0x472c7d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x62ee78
lea ecx, [ebp - 0x25d8]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x27c8]
call fcn.00545560
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f120
lea ecx, [ebp - 0x25d8]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2940]
call fcn.00545560
jmp 0x472caf
push 0x104
push 0
push 0
push 0x104
lea ecx, [ebp - 0x27c8]
call fcn.00544ce0
push eax
call dword [0x5fd488]
lea eax, [ebp - 0x27c8]
push eax
lea ecx, [ebp - 0x2940]
call fcn.00545840
push edi
lea edx, [ebp - 0x26e0]
lea ecx, [ebp - 0x26d4]
call fcn.0052ce60
push 0
push 0
push 0x2b
lea ecx, [ebp - 0x27d4]
call fcn.00544f00
push 0
push 0
push 0x17
lea ecx, [ebp - 0x2644]
call fcn.00544f00
push 0
push 0
push 0x19
lea ecx, [ebp - 0x2638]
call fcn.00544f00
push 0
push 0
push 0x18
lea ecx, [ebp - 0x2934]
call fcn.00544f00
push 1
push 0
push 0x28
lea ecx, [ebp - 0x2578]
call fcn.00544f00
lea ecx, [ebp - 0x2578]
call fcn.00545700
push eax
lea ecx, [ebp - 0x2220]
call fcn.00544110
lea ecx, [ebp - 0x2578]
call fcn.00545700
push eax
lea ecx, [ebp - 0x2184]
call fcn.00544110
push 1
push 0x65f148
lea ecx, [ebp - 0x29a4]
call fcn.005455c0
lea ecx, [ebp - 0x2578]
call fcn.00545700
push eax
lea ecx, [ebp - 0x25e4]
call fcn.00544110
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x641128
lea ecx, [ebp - 0x2220]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x294c]
call fcn.00545560
lea ecx, [ebp - 0x2578]
call fcn.00545700
push eax
lea ecx, [ebp - 0x24c8]
call fcn.00544110
lea ecx, [ebp - 0x2578]
call fcn.00545700
push eax
lea ecx, [ebp - 0x26c8]
call fcn.00544110
lea ecx, [ebp - 0x2578]
call fcn.00545700
push eax
lea ecx, [ebp - 0x28a8]
call fcn.00544110
lea ecx, [ebp - 0x2578]
call fcn.00545700
push eax
lea ecx, [ebp - 0x2958]
call fcn.00544110
push 2
push 1
lea ecx, [ebp - 0x25d8]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x291c]
call fcn.005430f0
push 1
lea ecx, [ebp - 0x27d4]
call fcn.00545280
lea eax, [ebp - 0x27d4]
push eax
lea ecx, [ebp - 0x2928]
call fcn.00545840
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d058
lea ecx, [ebp - 0x26d4]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x27d4]
call fcn.005438d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d058
lea ecx, [ebp - 0x26e0]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2928]
call fcn.005438d0
mov eax, dword [ebp - 0x6f44]
cmp byte [eax + 0x40], 0
je 0x472ea6
xor esi, esi
jmp 0x48d337
mov eax, dword [eax + 8]
push 3
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.005173e0
mov eax, dword [ebp - 0x6f44]
push 0
push 0x664644
mov eax, dword [eax + 8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.0051a750
mov eax, dword [ebp - 0x6f44]
cmp dword [eax + 0x10], 0
jne 0x472ef6
mov ecx, eax
call fcn.0046f2d0
mov eax, dword [ebp - 0x6f44]
cmp dword [eax + 0x10], 1
jne 0x472f21
mov esi, dword [0x5fd45c]
mov ecx, eax
call fcn.0046c9e0
test al, al
jne 0x472fb1
push 0x64
call esi
mov eax, dword [ebp - 0x6f44]
cmp dword [eax + 0x10], 1
je 0x472f02
mov eax, dword [eax + 8]
push 6
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.005173e0
mov eax, dword [ebp - 0x6f44]
push 0
push 0x664674
mov eax, dword [eax + 8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.0051a750
mov esi, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x27a4]
add esi, 0x314
call fcn.005398e0
push edx
push eax
mov ecx, esi
call fcn.00544730
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6646a4
mov ecx, esi
call fcn.005438d0
mov ecx, esi
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.0046f0d0
test eax, eax
jne 0x472fbb
mov esi, 3
jmp 0x48d337
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6277a4
mov ecx, esi
call fcn.005438d0
push 4
lea ecx, [ebp - 0x1f74]
call fcn.00401d40
lea ecx, [ebp - 0x1f74]
call fcn.0053fe60
push 4
lea ecx, [ebp - 0x254c]
mov byte [ebp - 4], 0x1e
call fcn.00401d40
push 0
push 0x20019
mov ecx, esi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x254c]
call fcn.0053fe40
push 0xc
lea ecx, [ebp - 0x6cb4]
mov byte [ebp - 4], 0x1f
call fcn.00401d20
lea ecx, [ebp - 0x6cb4]
call fcn.0053fe80
push 0xc
lea ecx, [ebp - 0x29e0]
mov byte [ebp - 4], 0x20
call fcn.00401d20
lea ecx, [ebp - 0x29e0]
call fcn.0053fe80
push 0x10
lea ecx, [ebp - 0x2a2c]
mov byte [ebp - 4], 0x21
call fcn.00401d60
lea ecx, [ebp - 0x2a2c]
call fcn.0053fed0
push 0xc
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0x22
call fcn.00401d20
lea ecx, [ebp - 0x1f8c]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2910]
mov byte [ebp - 4], 0x23
call fcn.00401d20
lea ecx, [ebp - 0x2910]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x1f80]
mov byte [ebp - 4], 0x24
call fcn.00401d20
lea ecx, [ebp - 0x1f80]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2584]
mov byte [ebp - 4], 0x25
call fcn.00401d20
lea ecx, [ebp - 0x2584]
call fcn.00545940
lea ecx, [ebp - 0x27a4]
mov byte [ebp - 4], 0x26
call fcn.005398e0
mov ecx, edx
mov dword [ebp - 0x6ffc], eax
push ecx
mov dword [ebp - 0x7000], ecx
lea ecx, [ebp - 0x2910]
push eax
call fcn.00544730
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f16c
lea ecx, [ebp - 0x2910]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
push 0x6646b4
lea ecx, [ecx + 0x134]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
lea ecx, [ecx + 0x11c]
call fcn.00545560
push 0x20
lea ecx, [ebp - 0x1fd4]
call fcn.00401e20
lea ecx, [ebp - 0x1fd4]
call fcn.00533850
mov ecx, dword [ebp - 0x6f44]
push 0
push 0x22
mov byte [ebp - 4], 0x27
lea ecx, [ecx + 0x11c]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00533190
test eax, eax
je 0x4733a7
push 0
mov esi, dword [ebp - 0x6f44]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6646c8
push 0
push 1
push 1
push 0
add esi, 0x32c
push 0x6646f8
mov ecx, esi
call fcn.00543e30
test eax, eax
mov edx, 0x664710
mov ecx, 0x664708
cmove ecx, edx
push ecx
mov ecx, esi
call fcn.005454f0
push eax
push 0x65f1cc
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
push 0
push 0
push 0
push 0
push 0
push 0x65f1e0
push 0x61d658
push 0x6264dc
push 0x65f1f4
push 0x65f208
mov ecx, esi
call fcn.005454f0
push eax
push 0x6228ac
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
mov eax, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x2584]
push 0
push dword [eax + 0xc]
call fcn.00544730
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f758
lea ecx, [ebp - 0x2584]
call fcn.005454f0
push eax
push 0x664728
mov ecx, esi
call fcn.005454f0
push eax
push 0x6228ac
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
push edi
mov ecx, dword [ebp - 0x6f44]
lea eax, [ebp - 0x1f80]
push eax
call fcn.00470f10
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
cmp dword [ebp - 0x6f40], 0
mov ecx, 0x664768
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f758
mov eax, 0x6291c8
cmove eax, ecx
lea ecx, [ebp - 0x28b4]
push eax
push 0x66477c
push 0x65f758
call fcn.005454f0
push eax
push 0x6647b4
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
lea edx, [ebp - 0x1f80]
lea ecx, [ebp - 0x27a4]
call fcn.005398f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f220
lea ecx, [ebp - 0x1f80]
call fcn.005454f0
push eax
push 0x6647e8
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
push 0
push 0x664810
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
lea ecx, [ebp - 0x291c]
call fcn.005454f0
lea ecx, [ebp - 0x25d8]
mov dword [ebp - 0x6fa0], eax
call fcn.005454f0
lea ecx, [ebp - 0x27c8]
mov dword [ebp - 0x6f9c], eax
call fcn.005454f0
mov dword [ebp - 0x6f98], eax
mov al, byte [ebp - 0x6f61]
mov byte [ebp - 0x6f94], al
mov eax, dword [ebp - 0x6f44]
movups xmm0, xmmword [ebp - 0x6fa0]
lea ecx, [eax + 0x2d0]
movups xmmword [eax + 0x17c], xmm0
call fcn.0046a0a0
mov esi, dword [ebp - 0x6f44]
add esi, 0x220
mov ecx, esi
call fcn.0050b510
mov ecx, dword [ebp - 0x6f44]
push 0
lea ecx, [ecx + 0x208]
call fcn.0050c560
push 0x664ac8
mov ecx, esi
call fcn.0050c1b0
push 1
mov ecx, esi
call fcn.0050a760
mov eax, dword [ebp - 0x6f44]
xor ecx, ecx
test edi, edi
push 4
setne cl
inc ecx
add ecx, dword [eax + 0x30]
mov dword [ebp - 0x6f74], ecx
lea ecx, [ebp - 0x6d10]
call fcn.00401d40
push 8
push 0x664b4c
lea ecx, [ebp - 0x6d10]
call fcn.004019a0
push 8
lea ecx, [ebp - 0x6dac]
mov byte [ebp - 4], 0x28
call fcn.00401f60
mov edi, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x6dac]
mov eax, dword [edi + 0x30]
add eax, 2
push eax
call fcn.004036b0
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x2904]
mov edi, dword [ebp - 0x6dac]
push 0xc
mov dword [ebp - 0x6f70], edi
call fcn.00401d20
push 1
push 0x61d194
lea ecx, [ebp - 0x2904]
call fcn.005458d0
mov eax, dword [ebp - 0x6f44]
xor esi, esi
mov byte [ebp - 4], 0x2a
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x473524
add eax, 0x114
mov dword [ebp - 0x6f94], eax
nop dword [eax]
push esi
mov ecx, eax
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00545870
mov eax, dword [ebp - 0x6f44]
inc esi
add edi, 0xc
mov ecx, dword [eax + 0x30]
mov eax, dword [ebp - 0x6f94]
cmp esi, ecx
jb 0x4734f0
mov edi, dword [ebp - 0x6f70]
lea eax, [ecx + ecx*2]
push 0x65f370
lea ecx, [edi + eax*4]
call fcn.00545870
cmp dword [ebp - 0x6fa8], 0
je 0x473557
mov eax, dword [ebp - 0x6f44]
push 0x65f370
mov eax, dword [eax + 0x30]
inc eax
lea eax, [eax + eax*2]
lea ecx, [edi + eax*4]
call fcn.00545870
push 4
lea ecx, [ebp - 0x2548]
call fcn.00401d40
lea ecx, [ebp - 0x2548]
call fcn.0050e980
mov ecx, dword [ebp - 0x6f44]
mov byte [ebp - 4], 0x2b
call fcn.0046c9e0
test al, al
jne 0x475fb8
mov eax, dword [ebp - 0x6f44]
test dword [eax + 0x34], 0x400
jne 0x475fb8
push 0
push 0x664b90
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov eax, dword [ebp - 0x6f44]
push 0
push 0x664bc0
mov eax, dword [eax + 8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.0051a750
push 8
lea ecx, [ebp - 0x6d1c]
call fcn.00401f60
push dword [ebp - 0x6f74]
lea ecx, [ebp - 0x6d1c]
call fcn.004036b0
mov eax, dword [ebp - 0x6f44]
xor esi, esi
mov byte [ebp - 4], 0x2c
mov edi, dword [ebp - 0x6d1c]
mov dword [ebp - 0x6f68], edi
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x473664
add eax, 0x104
mov dword [ebp - 0x6f94], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x664bf0
push esi
mov ecx, eax
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
push str.HKU_
mov ecx, edi
call fcn.00545560
mov eax, dword [ebp - 0x6f44]
inc esi
add edi, 0xc
mov ecx, dword [eax + 0x30]
mov eax, dword [ebp - 0x6f94]
cmp esi, ecx
jb 0x473614
mov edi, dword [ebp - 0x6f68]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x654980
push dword [ebp - 0x6f8c]
lea eax, [ecx + ecx*2]
lea ecx, [edi + eax*4]
call fcn.00545560
cmp dword [ebp - 0x6fa8], 0
je 0x4736cb
mov eax, dword [ebp - 0x6f44]
push 0
push 0
push 0
mov eax, dword [eax + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x654980
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [edi + eax*4]
call fcn.00545560
push 4
lea ecx, [ebp - 0x2224]
call fcn.00401d40
lea ecx, [ebp - 0x2224]
call fcn.0053fe60
push 4
lea ecx, [ebp - 0x1ff4]
mov byte [ebp - 4], 0x2d
call fcn.00401d40
lea ecx, [ebp - 0x1ff4]
call fcn.0053fe60
push 0xc
lea ecx, [ebp - 0x23c8]
mov byte [ebp - 4], 0x2e
call fcn.00401d20
lea ecx, [ebp - 0x23c8]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2130]
mov byte [ebp - 4], 0x2f
call fcn.00401d20
lea ecx, [ebp - 0x2130]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x1fa4]
mov byte [ebp - 4], 0x30
call fcn.00401d20
lea ecx, [ebp - 0x1fa4]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2074]
mov byte [ebp - 4], 0x31
call fcn.00401d20
lea ecx, [ebp - 0x2074]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x23bc]
mov byte [ebp - 4], 0x32
call fcn.00401d20
lea ecx, [ebp - 0x23bc]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x22cc]
mov byte [ebp - 4], 0x33
call fcn.00401d20
lea ecx, [ebp - 0x22cc]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2154]
mov byte [ebp - 4], 0x34
call fcn.00401d20
lea ecx, [ebp - 0x2154]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2114]
mov byte [ebp - 4], 0x35
call fcn.00401d20
lea ecx, [ebp - 0x2114]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x22f0]
mov byte [ebp - 4], 0x36
call fcn.00401d20
lea ecx, [ebp - 0x22f0]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2890]
mov byte [ebp - 4], 0x37
call fcn.00401d20
lea ecx, [ebp - 0x2890]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2784]
mov byte [ebp - 4], 0x38
call fcn.00401d20
lea ecx, [ebp - 0x2784]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x289c]
mov byte [ebp - 4], 0x39
call fcn.00401d20
lea ecx, [ebp - 0x289c]
call fcn.00545940
mov ecx, dword [ebp - 0x6f44]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov byte [ebp - 4], 0x3a
lea ecx, [ecx + 0x140]
push 0x65f2fc
mov dword [ebp - 0x2354], 0
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00545560
mov esi, dword [ebp - 0x2368]
xor edi, edi
mov dword [ebp - 0x6f4c], edi
mov dword [ebp - 0x6f6c], esi
cmp dword [ebp - 0x6f74], edi
jbe 0x474a32
mov eax, dword [ebp - 0x6f44]
lea ecx, [eax + 0x314]
mov dword [ebp - 0x6f54], ecx
lea ecx, [eax + 0x10c]
mov dword [ebp - 0x6f40], ecx
jmp 0x4738d9
mov eax, dword [ebp - 0x6f44]
mov ecx, eax
call fcn.0046c9e0
test al, al
jne 0x474a32
movd xmm1, edi
mov eax, edi
cvtdq2pd xmm1, xmm1
shr eax, 0x1f
addsd xmm1, qword [eax*8 + 0x6e3610]
mov eax, dword [ebp - 0x6f74]
mulsd xmm1, qword [0x6e32a8]
movd xmm0, eax
shr eax, 0x1f
cvtdq2pd xmm0, xmm0
addsd xmm0, qword [eax*8 + 0x6e3610]
divsd xmm1, xmm0
addsd xmm1, qword [0x6e3258]
cvttsd2si eax, xmm1
push eax
mov eax, dword [ebp - 0x6f44]
mov eax, dword [eax + 8]
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.005173e0
lea eax, [edi + edi*2]
shl eax, 2
mov dword [ebp - 0x6f7c], eax
add eax, dword [ebp - 0x6f68]
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f94], eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2224]
call fcn.0053fdf0
test al, al
je 0x474a1f
mov ecx, dword [ebp - 0x6f44]
xor esi, esi
mov dword [ebp - 0x6f6c], esi
call fcn.0046c9e0
test al, al
jne 0x474a1f
lea eax, [ebp - 0x6cb4]
push eax
push esi
lea ecx, [ebp - 0x2224]
call fcn.0053f740
test al, al
je 0x474a19
mov ecx, dword [ebp - 0x6f94]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
push 0x61d058
call fcn.005454f0
push eax
lea ecx, [ebp - 0x23c8]
call fcn.00545560
push 0
push 0x20019
lea ecx, [ebp - 0x23c8]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1ff4]
call fcn.0053fdf0
test al, al
je 0x474a05
lea eax, [ebp - 0x2130]
push eax
push 0x6287e4
lea ecx, [ebp - 0x1ff4]
call fcn.0053fb00
test al, al
je 0x474a05
lea eax, [ebp - 0x6ccc]
push eax
push 0x664c5c
lea ecx, [ebp - 0x1ff4]
call fcn.0053fa70
test al, al
je 0x473a5c
cmp dword [ebp - 0x6ccc], 1
je 0x474a05
lea eax, [ebp - 0x23bc]
push eax
push 0x664c7c
lea ecx, [ebp - 0x1ff4]
call fcn.0053fb00
test al, al
je 0x473a8a
lea ecx, [ebp - 0x23bc]
call fcn.00545700
test eax, eax
jne 0x474a05
lea eax, [ebp - 0x23bc]
push eax
push 0x664c98
lea ecx, [ebp - 0x1ff4]
call fcn.0053fb00
test al, al
je 0x473b05
push 0x664cb0
lea ecx, [ebp - 0x23bc]
call fcn.00545820
test al, al
jne 0x474a05
push 0x664cc0
lea ecx, [ebp - 0x23bc]
call fcn.00545820
test al, al
jne 0x474a05
push 0x664cd0
lea ecx, [ebp - 0x23bc]
call fcn.00545820
test al, al
jne 0x474a05
push 0x664ce4
lea ecx, [ebp - 0x23bc]
call fcn.00545820
test al, al
jne 0x474a05
lea eax, [ebp - 0x1fa4]
push eax
push 0x664d04
lea ecx, [ebp - 0x1ff4]
call fcn.0053fb00
lea eax, [ebp - 0x22cc]
push eax
push 0x654ab8
lea ecx, [ebp - 0x1ff4]
call fcn.0053fb00
test al, al
jne 0x473b4a
lea ecx, [ebp - 0x1fa4]
call fcn.00545700
test eax, eax
je 0x474a05
lea eax, [ebp - 0x2154]
push eax
push 0x664d24
lea ecx, [ebp - 0x1ff4]
call fcn.0053fb00
test al, al
je 0x473b74
lea ecx, [ebp - 0x2154]
call fcn.00545700
test eax, eax
jne 0x473b84
push 0x65f35c
lea ecx, [ebp - 0x2154]
call fcn.00545870
lea eax, [ebp - 0x2130]
push eax
lea ecx, [ebp - 0x2114]
call fcn.00545840
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d144
lea ecx, [ebp - 0x2114]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x664d38
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00545560
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
xor edx, edx
mov ecx, eax
call fcn.0053cb60
mov byte [ebp - 0x6f61], al
test al, al
jne 0x473ce5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2114]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x664d38
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00545560
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
xor edx, edx
mov ecx, eax
call fcn.0053cb60
mov byte [ebp - 0x6f61], al
test al, al
jne 0x473ce5
push 0
push 1
push 0xffffffffffffffff
push 1
push 0x61e0f8
lea ecx, [ebp - 0x2114]
call fcn.00543e30
cmp eax, 4
jl 0x473e04
dec eax
lea ecx, [ebp - 0x2114]
push eax
call fcn.005441c0
cmp byte [eax + 8], 0
je 0x473df7
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2114]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x664d38
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00545560
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
xor edx, edx
mov ecx, eax
call fcn.0053cb60
mov byte [ebp - 0x6f61], al
test al, al
je 0x473c51
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d194
lea ecx, [ebp - 0x2114]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2904]
call fcn.00543b40
cmp byte [ebp - 0x6f61], 0
jne 0x473d7a
lea eax, [ebp - 0x2354]
push eax
lea eax, [ebp - 0x2784]
push eax
lea ecx, [ebp - 0x23c8]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.0046ea00
test al, al
je 0x474a05
push 0
lea ecx, [ebp - 0x23c8]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
lea eax, [ebp - 0x2784]
push eax
call fcn.00470310
test al, al
je 0x474a05
mov byte [ebp - 0x6f61], 2
mov ecx, dword [ebp - 0x6f44]
push 0
lea ecx, [ecx + 0x14c]
call fcn.005454f0
push eax
push 0x627220
lea ecx, [ebp - 0x2130]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00470dc0
test al, al
jne 0x474a05
lea ecx, [ebp - 0x1fa4]
call fcn.005454f0
mov ecx, eax
call fcn.00530270
test al, al
je 0x473ea6
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00544f60
push 0
push 0
push 0x61d060
push 0x61e2b0
lea ecx, [ebp - 0x1fa4]
call fcn.00543640
jmp 0x47447f
cmp byte [ebp - 0x6f61], 0
jne 0x473ce5
lea ecx, [ebp - 0x2114]
call fcn.00545760
lea ecx, [ebp - 0x2130]
call fcn.00545700
push 0
push 1
push 1
push 0
push 0x664d4c
lea ecx, [ebp - 0x2130]
call fcn.00543e30
test eax, eax
jne 0x473e88
push eax
push 1
push 1
push eax
push 0x664d60
lea ecx, [ebp - 0x2130]
call fcn.00543e30
test eax, eax
jne 0x473e88
push eax
push 1
push 1
push eax
push 0x664d84
lea ecx, [ebp - 0x2130]
call fcn.00543e30
test eax, eax
jne 0x473e88
push eax
push 1
push 1
push eax
push 0x664da4
lea ecx, [ebp - 0x2130]
call fcn.00543e30
test eax, eax
je 0x473d1e
lea eax, [ebp - 0x2130]
mov byte [ebp - 0x6f61], 2
push eax
lea ecx, [ebp - 0x2114]
call fcn.00545840
jmp 0x473d7a
cmp dword [ebp - 0x2354], 0
je 0x473f68
lea eax, [ebp - 0x6ccc]
mov dword [ebp - 0x6ccc], 0x400
push eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544ce0
push eax
push 0x664d04
push dword [ebp - 0x6cb4]
call dword [0x5fdaa0]
push 0
push 1
push 1
push 0
push 0x61e398
lea ecx, [ebp - 0x1fa4]
call fcn.00543e30
test eax, eax
jne 0x473f68
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x664dcc
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x23bc]
push 0x664df8
push dword [ebp - 0x6f8c]
call fcn.00545560
push 0
push 0x20019
lea ecx, [ebp - 0x23bc]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x473f68
lea eax, [ebp - 0x1fa4]
push eax
push 0x664d04
lea ecx, [ebp - 0x1f74]
call fcn.0053fb00
lea ecx, [ebp - 0x1fa4]
call fcn.00545700
cmp eax, 0xa
jle 0x473f85
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00544f60
lea ecx, [ebp - 0x1fa4]
call fcn.005454f0
push eax
call dword [0x5fd698]
test eax, eax
jne 0x47447f
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x61d1b0
lea ecx, [ebp - 0x2130]
call fcn.005454f0
push eax
push 0x61d058
lea ecx, [ebp - 0x26d4]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00545560
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.005454f0
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544ce0
mov edx, 0x400
mov ecx, eax
call fcn.00530480
test al, al
jne 0x47447f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d1b0
lea ecx, [ebp - 0x2130]
call fcn.005454f0
push eax
push 0x61d058
lea ecx, [ebp - 0x26e0]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00545560
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.005454f0
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544ce0
mov edx, 0x400
mov ecx, eax
call fcn.00530480
test al, al
jne 0x47447f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d1b0
lea ecx, [ebp - 0x2130]
call fcn.005454f0
push eax
push 0x61d058
lea ecx, [ebp - 0x271c]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00545560
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.005454f0
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544ce0
mov edx, 0x400
mov ecx, eax
call fcn.00530480
test al, al
jne 0x47447f
lea ecx, [ebp - 0x2154]
call fcn.00545700
cmp eax, 4
jle 0x474195
push 0
push 1
push 1
push 0
push 0x664e9c
lea ecx, [ebp - 0x2154]
call fcn.00543e30
cmp eax, 1
je 0x474195
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d1b0
lea ecx, [ebp - 0x2130]
call fcn.005454f0
push eax
push 0x61d058
lea ecx, [ebp - 0x2154]
call fcn.005454f0
push eax
push 0x61d058
lea ecx, [ebp - 0x271c]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00545560
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.005454f0
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544ce0
mov edx, 0x400
mov ecx, eax
call fcn.00530480
test al, al
jne 0x47447f
mov eax, dword [ebp - 0x6f44]
cmp edi, dword [eax + 0x30]
jae 0x4743f7
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d1b0
lea ecx, [ebp - 0x2130]
call fcn.005454f0
push eax
push 0x61d058
lea ecx, [ebp - 0x2220]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
push edi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00545560
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.005454f0
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544ce0
mov edx, 0x400
mov ecx, eax
call fcn.00530480
test al, al
jne 0x47447f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d1b0
lea ecx, [ebp - 0x2130]
call fcn.005454f0
push eax
push 0x61d058
lea ecx, [ebp - 0x2184]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
push edi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00545560
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.005454f0
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544ce0
mov edx, 0x400
mov ecx, eax
call fcn.00530480
test al, al
jne 0x47447f
lea ecx, [ebp - 0x2154]
call fcn.00545700
cmp eax, 4
jle 0x4743f7
push 0
push 1
push 1
push 0
push 0x664e9c
lea ecx, [ebp - 0x2154]
call fcn.00543e30
cmp eax, 1
je 0x4743f7
push 0
push 0
push 0
push 0
push 0
push 0x61d1b0
lea ecx, [ebp - 0x2130]
call fcn.005454f0
push eax
push 0x61d058
lea ecx, [ebp - 0x2154]
call fcn.005454f0
push eax
push 0x61d058
lea ecx, [ebp - 0x2220]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
push edi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00545560
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.005454f0
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544ce0
mov edx, 0x400
mov ecx, eax
call fcn.00530480
test al, al
jne 0x47447f
push 0
push 0
push 0
push 0
push 0
push 0x61d1b0
lea ecx, [ebp - 0x2130]
call fcn.005454f0
push eax
push 0x61d058
lea ecx, [ebp - 0x2154]
call fcn.005454f0
push eax
push 0x61d058
lea ecx, [ebp - 0x2184]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
push edi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00545560
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.005454f0
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544ce0
mov edx, 0x400
mov ecx, eax
call fcn.00530480
test al, al
jne 0x47447f
lea ecx, [ebp - 0x22cc]
call fcn.00545700
lea ecx, [ebp - 0x1fa4]
cmp eax, 0xa
jle 0x47447a
lea eax, [ebp - 0x22cc]
push eax
call fcn.00545840
push 0
push 0
push 0x61d060
push 0x61e2b0
lea ecx, [ebp - 0x1fa4]
call fcn.00543640
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00544f60
push 0
push 1
push 0xffffffffffffffff
push 1
push 0x61e398
lea ecx, [ebp - 0x1fa4]
call fcn.00543e30
cmp eax, 2
jle 0x47446b
add eax, 0xfffffffe
lea ecx, [ebp - 0x1fa4]
push eax
call fcn.00544110
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00545210
jmp 0x47447f
call fcn.00545760
lea ecx, [ebp - 0x1fa4]
call fcn.005454f0
mov ecx, eax
call fcn.00536230
test al, al
je 0x4744a0
lea ecx, [ebp - 0x1fa4]
call fcn.00545760
lea eax, [ebp - 0x2074]
mov dword [ebp - 0x6f6c], 0
push eax
push 0x648f6c
lea ecx, [ebp - 0x1ff4]
call fcn.0053fb00
test al, al
je 0x4744fd
push 0
lea ecx, [ebp - 0x2074]
call fcn.005454f0
push eax
push 0x104
lea ecx, [ebp - 0x2074]
call fcn.00544ce0
lea ecx, [ebp - 0x2074]
call fcn.005454f0
push eax
call dword [0x5fd6a0]
mov dword [ebp - 0x6f6c], eax
jmp 0x474553
cmp dword [ebp - 0x2354], 0
je 0x474560
lea eax, [ebp - 0x6d30]
mov dword [ebp - 0x6d30], 0x400
push eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0x2074]
call fcn.00544ce0
push eax
push 0x664eb4
push dword [ebp - 0x6cb4]
call dword [0x5fdaa0]
push dword [ebp - 0x6d30]
lea ecx, [ebp - 0x2074]
call fcn.005457a0
xor ecx, ecx
mov word [eax], cx
cmp dword [ebp - 0x2354], 0
jne 0x4746aa
lea ecx, [ebp - 0x2074]
call fcn.00545700
test eax, eax
jne 0x4746aa
push eax
lea ecx, [ebp - 0x22cc]
call fcn.005454f0
push eax
push 0x800
lea ecx, [ebp - 0x2074]
call fcn.00544ce0
push 0x800
lea ecx, [ebp - 0x2074]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x22cc]
call fcn.005454f0
push eax
call dword [0x5fd4f4]
lea ecx, [ebp - 0x2074]
call fcn.00545700
test eax, eax
je 0x4746aa
push 0
push 1
push 0xffffffffffffffff
push 0
push str..exe
lea ecx, [ebp - 0x2074]
call fcn.00543e30
test eax, eax
je 0x4745f1
add eax, 3
lea ecx, [ebp - 0x2074]
push eax
call fcn.005441c0
lea ecx, [ebp - 0x2074]
call fcn.005454f0
mov edi, dword [0x5fd684]
push eax
call edi
test eax, eax
jne 0x4746aa
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x61e398
lea ecx, [ebp - 0x2074]
call fcn.00543e30
cmp eax, 2
jle 0x474638
add eax, 0xfffffffe
lea ecx, [ebp - 0x2074]
push eax
call fcn.00544110
lea ecx, [ebp - 0x2074]
call fcn.005454f0
push eax
call edi
test eax, eax
jne 0x4746aa
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x61e2b0
lea ecx, [ebp - 0x2074]
call fcn.00543e30
test eax, eax
je 0x474671
push eax
lea ecx, [ebp - 0x2074]
call fcn.00544110
lea ecx, [ebp - 0x2074]
call fcn.005454f0
push eax
call edi
test eax, eax
jne 0x4746aa
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x61e0f8
lea ecx, [ebp - 0x2074]
call fcn.00543e30
test eax, eax
je 0x4746aa
push eax
lea ecx, [ebp - 0x2074]
call fcn.00544110
push 0x5c
lea ecx, [ebp - 0x1fa4]
call fcn.00543470
mov eax, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x2130]
push 0
mov eax, dword [eax + 8]
push dword [eax + 0xa0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
call fcn.005454f0
push eax
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.00519660
mov edi, eax
cmp edi, 0xffffffff
je 0x4749ff
push 1
lea ecx, [ebp - 0x2154]
call fcn.005454f0
push eax
mov eax, dword [ebp - 0x6f44]
push edi
mov ecx, dword [eax + 8]
push dword [ecx + 0xa0]
mov ecx, dword [eax + 4]
call fcn.00517fc0
lea ecx, [ebp - 0x2074]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
je 0x474765
push 0
push 0x10
push dword [ebp - 0x6f6c]
lea ecx, [ebp - 0x2074]
call fcn.005454f0
push eax
mov eax, dword [ebp - 0x6f44]
push edi
mov eax, dword [eax + 8]
push dword [eax + 0xa0]
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.00518a50
mov ecx, dword [ebp - 0x6f70]
add ecx, dword [ebp - 0x6f7c]
push 2
call fcn.005454f0
push eax
mov eax, dword [ebp - 0x6f44]
push edi
mov eax, dword [eax + 8]
push dword [eax + 0xa0]
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.00517fc0
mov eax, dword [ebp - 0x6f44]
push edi
push edi
mov eax, dword [eax + 8]
push dword [eax + 0xa0]
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.00518c30
lea ecx, [ebp - 0x2114]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
mov eax, dword [ebp - 0x6f44]
push edi
mov eax, dword [eax + 8]
push dword [eax + 0xa0]
call fcn.00471520
test eax, eax
jne 0x4747fd
cmp byte [ebp - 0x6f61], 1
mov ecx, 2
movzx eax, byte [ebp - 0x6f61]
cmove eax, ecx
mov byte [ebp - 0x6f61], al
push edi
lea ecx, [ebp - 0x22f0]
call fcn.00544660
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x23c8]
call fcn.005454f0
push eax
push 0x65e72c
lea ecx, [ebp - 0x22f0]
call fcn.005454f0
mov edi, dword [0x5fd50c]
push eax
call edi
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.005454f0
push eax
push 0x629180
lea ecx, [ebp - 0x22f0]
call fcn.005454f0
push eax
call edi
lea ecx, [ebp - 0x2114]
call fcn.00545700
test eax, eax
je 0x4748c3
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2114]
call fcn.005454f0
push eax
push 0x65f334
lea ecx, [ebp - 0x22f0]
call fcn.005454f0
push eax
call edi
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
push 0x622e08
lea ecx, [ebp - 0x2114]
call fcn.005454f0
push eax
push 0x664ecc
call edi
lea ecx, [ebp - 0x22cc]
call fcn.00545700
test eax, eax
je 0x4748fd
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x22cc]
call fcn.005454f0
push eax
push 0x65f310
lea ecx, [ebp - 0x22f0]
call fcn.005454f0
push eax
call edi
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f70]
add ecx, dword [ebp - 0x6f7c]
push eax
call fcn.005454f0
push eax
push 0x65e748
lea ecx, [ebp - 0x22f0]
call fcn.005454f0
push eax
call edi
cmp dword [ebp - 0x2354], 0
je 0x47495c
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x22f0]
push 0x65f344
call fcn.005454f0
push eax
call edi
mov eax, dword [ebp - 0x6f44]
mov ecx, 0x664f0c
mov edi, dword [ebp - 0x6f44]
push 0
push 0
inc dword [eax + 0x24]
xor eax, eax
cmp byte [ebp - 0x6f61], 1
sete al
add dword [edi + 0x28], eax
mov eax, 0x664ef8
cmp byte [ebp - 0x6f61], 1
cmovne eax, ecx
mov ecx, dword [ebp - 0x6f70]
add ecx, dword [ebp - 0x6f7c]
push eax
push 0x664544
call fcn.005454f0
push eax
push 0x664f24
lea ecx, [ebp - 0x1fa4]
call fcn.005454f0
push eax
push 0x664f48
lea ecx, [ebp - 0x23c8]
call fcn.005454f0
push eax
push 0x664f6c
lea ecx, [ebp - 0x2130]
call fcn.005454f0
push eax
push 0x664f94
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
mov edi, dword [ebp - 0x6f4c]
mov ecx, dword [ebp - 0x6f44]
inc esi
call fcn.0046c9e0
test al, al
je 0x4739a0
mov dword [ebp - 0x6f6c], esi
inc edi
mov dword [ebp - 0x6f4c], edi
cmp edi, dword [ebp - 0x6f74]
jb 0x4738d3
mov ecx, dword [ebp - 0x6f44]
call fcn.0046c9e0
test al, al
je 0x474af3
lea ecx, [ebp - 0x289c]
call fcn.00545790
lea ecx, [ebp - 0x2784]
call fcn.00545790
lea ecx, [ebp - 0x2890]
call fcn.00545790
lea ecx, [ebp - 0x22f0]
call fcn.00545790
lea ecx, [ebp - 0x2114]
call fcn.00545790
lea ecx, [ebp - 0x2154]
call fcn.00545790
lea ecx, [ebp - 0x22cc]
call fcn.00545790
lea ecx, [ebp - 0x23bc]
call fcn.00545790
lea ecx, [ebp - 0x2074]
call fcn.00545790
lea ecx, [ebp - 0x1fa4]
call fcn.00545790
lea ecx, [ebp - 0x2130]
call fcn.00545790
lea ecx, [ebp - 0x23c8]
call fcn.00545790
lea ecx, [ebp - 0x1ff4]
call fcn.0053fda0
lea ecx, [ebp - 0x2224]
call fcn.0053fda0
lea ecx, [ebp - 0x6d1c]
mov byte [ebp - 4], 0x2b
call fcn.00403610
jmp 0x475fc4
mov eax, dword [ebp - 0x6f44]
cmp dword [eax + 0x208], 0
je 0x474b21
mov ecx, dword [ebp - 0x6f44]
add eax, 0x208
push 0
push eax
lea ecx, [ecx + 0x220]
call fcn.00509b90
mov eax, dword [ebp - 0x6f44]
mov ecx, eax
call fcn.0046c9e0
test al, al
jne 0x474a45
push 0xc
lea ecx, [ebp - 0x29b0]
call fcn.00401d20
lea ecx, [ebp - 0x29b0]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x26ec]
mov byte [ebp - 4], 0x3b
call fcn.00401d20
lea ecx, [ebp - 0x26ec]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x26f8]
mov byte [ebp - 4], 0x3c
call fcn.00401d20
lea ecx, [ebp - 0x26f8]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x27bc]
mov byte [ebp - 4], 0x3d
call fcn.00401d20
lea ecx, [ebp - 0x27bc]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x279c]
mov byte [ebp - 4], 0x3e
call fcn.00401d20
lea ecx, [ebp - 0x279c]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2754]
mov byte [ebp - 4], 0x3f
call fcn.00401d20
lea ecx, [ebp - 0x2754]
call fcn.00545940
mov eax, dword [ebp - 0x6f44]
mov edi, 1
mov byte [ebp - 4], 0x40
lea ecx, [eax + 0x30c]
mov dword [ebp - 0x6f54], edi
mov dword [ebp - 0x6f94], ecx
cmp dword [ecx], edi
jbe 0x47592f
mov esi, dword [ebp - 0x6f94]
lea ecx, [eax + 0x314]
mov dword [ebp - 0x6f7c], ecx
nop
mov ecx, eax
call fcn.0046c9e0
test al, al
jne 0x475923
lea eax, [edi + edi*4]
xor edx, edx
add eax, eax
div dword [esi]
add eax, 0x10
movd xmm0, eax
shr eax, 0x1f
cvtdq2pd xmm0, xmm0
addsd xmm0, qword [eax*8 + 0x6e3610]
cvttsd2si eax, xmm0
push eax
mov eax, dword [ebp - 0x6f44]
mov eax, dword [eax + 8]
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.005173e0
mov ecx, dword [ebp - 0x6f44]
push edi
call fcn.00470100
test al, al
je 0x47590e
mov ecx, dword [ebp - 0x6f44]
push edi
lea ecx, [ecx + 0x2e8]
call fcn.00403920
push eax
lea ecx, [ebp - 0x23c8]
call fcn.00545840
push 0
push 0x20019
lea ecx, [ebp - 0x23c8]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1ff4]
call fcn.0053fdf0
test al, al
je 0x47590e
lea eax, [ebp - 0x2130]
push eax
push 0x6287e4
lea ecx, [ebp - 0x1ff4]
call fcn.0053fb00
test al, al
je 0x47590e
lea eax, [ebp - 0x1fa4]
push eax
push 0x664d04
lea ecx, [ebp - 0x1ff4]
call fcn.0053fb00
lea eax, [ebp - 0x22cc]
push eax
push 0x654ab8
lea ecx, [ebp - 0x1ff4]
call fcn.0053fb00
test al, al
jne 0x474d1a
lea ecx, [ebp - 0x1fa4]
call fcn.00545700
test eax, eax
je 0x47590e
lea eax, [ebp - 0x2154]
push eax
push 0x664d24
lea ecx, [ebp - 0x1ff4]
call fcn.0053fb00
test al, al
je 0x474d44
lea ecx, [ebp - 0x2154]
call fcn.00545700
test eax, eax
jne 0x474d54
push 0x65f35c
lea ecx, [ebp - 0x2154]
call fcn.00545870
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x630c44
lea ecx, [ebp - 0x2130]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x279c]
call fcn.00543b40
push 0
push 1
push 1
push 0
push str.msiexec
lea ecx, [ebp - 0x22cc]
call fcn.00543e30
test eax, eax
setne byte [ebp - 0x6f40]
test eax, eax
jne 0x474de2
lea eax, [ebp - 0x6ccc]
push eax
push 0x664fc0
lea ecx, [ebp - 0x1ff4]
call fcn.0053fa70
test al, al
je 0x474de2
mov eax, dword [ebp - 0x6f40]
mov ecx, 1
cmp dword [ebp - 0x6ccc], 1
movzx eax, al
cmove eax, ecx
mov dword [ebp - 0x6f40], eax
lea eax, [ebp - 0x2130]
push eax
lea ecx, [ebp - 0x2114]
call fcn.00545840
lea ecx, [ebp - 0x1fa4]
call fcn.005454f0
mov ecx, eax
call fcn.00530270
test al, al
je 0x474e35
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00544f60
push 0
push 0
push 0x61d060
push 0x61e2b0
lea ecx, [ebp - 0x1fa4]
call fcn.00543640
jmp 0x47545d
cmp byte [ebp - 0x6f40], 0
je 0x474ef7
lea eax, [ebp - 0x6ccc]
mov dword [ebp - 0x6ccc], 0x400
push eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544ce0
push eax
push 0x664d04
push dword [ebp - 0x6cb4]
call dword [0x5fdaa0]
push 0
push 1
push 1
push 0
push 0x61e398
lea ecx, [ebp - 0x1fa4]
call fcn.00543e30
test eax, eax
jne 0x474ef7
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x664dcc
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x23bc]
push 0x664df8
push dword [ebp - 0x6f8c]
call fcn.00545560
push 0
push 0x20019
lea ecx, [ebp - 0x23bc]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x474ef7
lea eax, [ebp - 0x1fa4]
push eax
push 0x664d04
lea ecx, [ebp - 0x1f74]
call fcn.0053fb00
lea ecx, [ebp - 0x1fa4]
call fcn.00545700
cmp eax, 0xa
jle 0x474f14
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00544f60
push 0
push 1
push 1
push 0
push 0x61e398
lea ecx, [ebp - 0x1fa4]
call fcn.00543e30
test eax, eax
jne 0x47545d
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x61d1b0
lea ecx, [ebp - 0x2114]
call fcn.005454f0
push eax
push 0x61d058
lea ecx, [ebp - 0x26d4]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00545560
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.005454f0
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544ce0
mov edx, 0x400
mov ecx, eax
call fcn.00530480
test al, al
jne 0x47545d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d1b0
lea ecx, [ebp - 0x2114]
call fcn.005454f0
push eax
push 0x61d058
lea ecx, [ebp - 0x26e0]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00545560
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.005454f0
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544ce0
mov edx, 0x400
mov ecx, eax
call fcn.00530480
test al, al
jne 0x47545d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d1b0
lea ecx, [ebp - 0x2114]
call fcn.005454f0
push eax
push 0x61d058
lea ecx, [ebp - 0x271c]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00545560
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.005454f0
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544ce0
mov edx, 0x400
mov ecx, eax
call fcn.00530480
test al, al
jne 0x47545d
lea ecx, [ebp - 0x2154]
call fcn.00545700
cmp eax, 4
jle 0x47512a
push 0
push 1
push 1
push 0
push 0x664e9c
lea ecx, [ebp - 0x2154]
call fcn.00543e30
cmp eax, 1
je 0x47512a
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d1b0
lea ecx, [ebp - 0x2114]
call fcn.005454f0
push eax
push 0x61d058
lea ecx, [ebp - 0x2154]
call fcn.005454f0
push eax
push 0x61d058
lea ecx, [ebp - 0x271c]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00545560
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.005454f0
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544ce0
mov edx, 0x400
mov ecx, eax
call fcn.00530480
test al, al
jne 0x47545d
push 1
push 0x6227c4
push dword [ebp - 0x6d10]
lea ecx, [ebp - 0x23c8]
push 1
call fcn.005454f0
push eax
lea ecx, [ebp - 0x27bc]
call fcn.005455c0
mov ecx, eax
call fcn.005428e0
test eax, eax
je 0x4753cc
lea ecx, [ebp - 0x27bc]
call fcn.005454f0
lea edx, [ebp - 0x26ec]
mov ecx, eax
call fcn.004fa230
test al, al
je 0x4753cc
lea ecx, [ebp - 0x27bc]
call fcn.005454f0
lea edx, [ebp - 0x26f8]
mov ecx, eax
call fcn.004faa40
test al, al
je 0x4753cc
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d1b0
lea ecx, [ebp - 0x2114]
call fcn.005454f0
push eax
push 0x61d058
lea ecx, [ebp - 0x2220]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x26f8]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00545560
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.005454f0
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544ce0
mov edx, 0x400
mov ecx, eax
call fcn.00530480
test al, al
jne 0x4753dc
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d1b0
lea ecx, [ebp - 0x2114]
call fcn.005454f0
push eax
push 0x61d058
lea ecx, [ebp - 0x2184]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x26f8]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00545560
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.005454f0
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544ce0
mov edx, 0x400
mov ecx, eax
call fcn.00530480
test al, al
jne 0x4753dc
lea ecx, [ebp - 0x2154]
call fcn.00545700
cmp eax, 4
jle 0x4753dc
push 0
push 1
push 1
push 0
push 0x664e9c
lea ecx, [ebp - 0x2154]
call fcn.00543e30
cmp eax, 1
je 0x4753dc
push 0
push 0
push 0
push 0
push 0
push 0x61d1b0
lea ecx, [ebp - 0x2114]
call fcn.005454f0
push eax
push 0x61d058
lea ecx, [ebp - 0x2154]
call fcn.005454f0
push eax
push 0x61d058
lea ecx, [ebp - 0x2220]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x26f8]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00545560
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.005454f0
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544ce0
mov edx, 0x400
mov ecx, eax
call fcn.00530480
test al, al
jne 0x4753dc
push 0
push 0
push 0
push 0
push 0
push 0x61d1b0
lea ecx, [ebp - 0x2114]
call fcn.005454f0
push eax
push 0x61d058
lea ecx, [ebp - 0x2154]
call fcn.005454f0
push eax
push 0x61d058
lea ecx, [ebp - 0x2184]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x26f8]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00545560
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.005454f0
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544ce0
mov edx, 0x400
mov ecx, eax
call fcn.00530480
jmp 0x4753dc
push 0x65f370
lea ecx, [ebp - 0x26ec]
call fcn.00545870
lea ecx, [ebp - 0x22cc]
call fcn.00545700
cmp eax, 0xa
jle 0x47545d
lea eax, [ebp - 0x22cc]
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00545840
push 0
push 0
push 0x61d060
push 0x61e2b0
lea ecx, [ebp - 0x1fa4]
call fcn.00543640
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00544f60
push 0
push 1
push 0xffffffffffffffff
push 1
push 0x61e398
lea ecx, [ebp - 0x1fa4]
call fcn.00543e30
cmp eax, 2
jle 0x475450
add eax, 0xfffffffe
lea ecx, [ebp - 0x1fa4]
push eax
call fcn.00544110
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00545210
lea ecx, [ebp - 0x1fa4]
call fcn.005454f0
mov ecx, eax
call fcn.00536230
test al, al
je 0x47547e
lea ecx, [ebp - 0x1fa4]
call fcn.00545760
lea eax, [ebp - 0x2074]
xor edi, edi
push eax
push 0x648f6c
lea ecx, [ebp - 0x1ff4]
call fcn.0053fb00
test al, al
je 0x475985
push edi
lea ecx, [ebp - 0x2074]
call fcn.005454f0
push eax
push 0x104
lea ecx, [ebp - 0x2074]
call fcn.00544ce0
lea ecx, [ebp - 0x2074]
call fcn.005454f0
push eax
call dword [0x5fd6a0]
cmp byte [ebp - 0x6f40], 0
mov edi, eax
jne 0x47562d
lea ecx, [ebp - 0x2074]
call fcn.00545700
test eax, eax
jne 0x47562d
push eax
lea ecx, [ebp - 0x22cc]
call fcn.005454f0
push eax
push 0x800
lea ecx, [ebp - 0x2074]
call fcn.00544ce0
push 0x800
lea ecx, [ebp - 0x2074]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x22cc]
call fcn.005454f0
push eax
call dword [0x5fd4f4]
lea ecx, [ebp - 0x2074]
call fcn.00545700
test eax, eax
je 0x47562d
push 0
push 1
push 0xffffffffffffffff
push 0
push str..exe
lea ecx, [ebp - 0x2074]
call fcn.00543e30
test eax, eax
je 0x47556e
add eax, 3
lea ecx, [ebp - 0x2074]
push eax
call fcn.005441c0
lea ecx, [ebp - 0x2074]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
jne 0x47562d
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x61e398
lea ecx, [ebp - 0x2074]
call fcn.00543e30
cmp eax, 2
jle 0x4755b3
add eax, 0xfffffffe
lea ecx, [ebp - 0x2074]
push eax
call fcn.00544110
lea ecx, [ebp - 0x2074]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
jne 0x47562d
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x61e2b0
lea ecx, [ebp - 0x2074]
call fcn.00543e30
test eax, eax
je 0x4755f0
push eax
lea ecx, [ebp - 0x2074]
call fcn.00544110
lea ecx, [ebp - 0x2074]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
jne 0x47562d
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x61e0f8
lea ecx, [ebp - 0x2074]
call fcn.00543e30
test eax, eax
je 0x47562d
push eax
lea ecx, [ebp - 0x2074]
call fcn.00544110
push 0x5c
lea ecx, [ebp - 0x1fa4]
call fcn.00543470
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2114]
mov byte [ebp - 0x6f4c], 1
call fcn.005454f0
mov ecx, dword [ebp - 0x6f7c]
push eax
push 0x664d38
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00545560
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
lea eax, [ebp - 0x6ccc]
push eax
push 0x664fe4
lea ecx, [ebp - 0x1f74]
call fcn.0053fa70
test al, al
je 0x4756d2
mov eax, dword [ebp - 0x6f4c]
mov ecx, 2
cmp dword [ebp - 0x6ccc], 0
movzx eax, al
cmove eax, ecx
mov dword [ebp - 0x6f4c], eax
push edi
lea ecx, [ebp - 0x2074]
call fcn.005454f0
push eax
xor eax, eax
lea ecx, [ebp - 0x26ec]
cmp byte [ebp - 0x6f4c], 1
push 0
sete al
push eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2154]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2130]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
mov eax, dword [ebp - 0x6f44]
push 0xffffffffffffffff
push 0xffffffffffffffff
mov eax, dword [eax + 8]
push dword [eax + 0xa0]
call fcn.0049a0a0
push eax
lea ecx, [ebp - 0x22f0]
call fcn.00544660
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x23c8]
call fcn.005454f0
push eax
push 0x65e72c
lea ecx, [ebp - 0x22f0]
call fcn.005454f0
mov edi, dword [0x5fd50c]
push eax
call edi
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.005454f0
push eax
push 0x629180
lea ecx, [ebp - 0x22f0]
call fcn.005454f0
push eax
call edi
lea ecx, [ebp - 0x2114]
call fcn.00545700
test eax, eax
je 0x4757f6
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2114]
call fcn.005454f0
push eax
push 0x65f334
lea ecx, [ebp - 0x22f0]
call fcn.005454f0
push eax
call edi
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
push 0x622e08
lea ecx, [ebp - 0x2114]
call fcn.005454f0
push eax
push 0x664ecc
call edi
lea ecx, [ebp - 0x22cc]
call fcn.00545700
test eax, eax
je 0x475830
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x22cc]
call fcn.005454f0
push eax
push 0x65f310
lea ecx, [ebp - 0x22f0]
call fcn.005454f0
push eax
call edi
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x26ec]
call fcn.005454f0
push eax
push 0x65e748
lea ecx, [ebp - 0x22f0]
call fcn.005454f0
push eax
call edi
cmp byte [ebp - 0x6f40], 0
je 0x475889
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x22f0]
push 0x65f344
call fcn.005454f0
push eax
call edi
cmp byte [ebp - 0x6f4c], 1
mov ecx, 0x664f0c
push 0
push 0
mov eax, 0x664ef8
cmovne eax, ecx
lea ecx, [ebp - 0x26ec]
push eax
push 0x664544
call fcn.005454f0
push eax
push 0x664f24
lea ecx, [ebp - 0x1fa4]
call fcn.005454f0
push eax
push 0x664f48
lea ecx, [ebp - 0x23c8]
call fcn.005454f0
push eax
push 0x664f6c
lea ecx, [ebp - 0x2130]
call fcn.005454f0
push eax
push 0x664f94
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
mov edi, dword [ebp - 0x6f54]
mov eax, dword [ebp - 0x6f44]
inc edi
mov dword [ebp - 0x6f54], edi
cmp edi, dword [esi]
jb 0x474c10
mov eax, dword [ebp - 0x6f44]
mov esi, dword [ebp - 0x6f6c]
mov ecx, eax
call fcn.0046c9e0
test al, al
je 0x4759e4
lea ecx, [ebp - 0x2754]
call fcn.00545790
lea ecx, [ebp - 0x279c]
call fcn.00545790
lea ecx, [ebp - 0x27bc]
call fcn.00545790
lea ecx, [ebp - 0x26f8]
call fcn.00545790
lea ecx, [ebp - 0x26ec]
call fcn.00545790
lea ecx, [ebp - 0x29b0]
call fcn.00545790
jmp 0x474a45
cmp byte [ebp - 0x6f40], 0
je 0x4754dd
lea eax, [ebp - 0x6d2c]
mov dword [ebp - 0x6d2c], 0x400
push eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0x2074]
call fcn.00544ce0
push eax
push 0x664eb4
push dword [ebp - 0x6cb4]
call dword [0x5fdaa0]
push dword [ebp - 0x6d2c]
lea ecx, [ebp - 0x2074]
call fcn.005457a0
xor ecx, ecx
mov word [eax], cx
jmp 0x47562d
lea ecx, [ebp - 0x279c]
call fcn.00545700
cmp eax, 6
jle 0x475aa1
push 0x2000
lea eax, [ebp - 0x6dbc]
mov dword [ebp - 0x6dbc], 0x1000
push eax
push 0
push 0
push 0x1000
lea ecx, [ebp - 0x2754]
call fcn.00544ce0
push eax
lea ecx, [ebp - 0x279c]
call fcn.005454f0
push eax
call dword [0x5fd670]
test eax, eax
je 0x475a4b
lea eax, [ebp - 0x279c]
push eax
lea ecx, [ebp - 0x2754]
call fcn.00545840
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x665000
lea ecx, [ebp - 0x2754]
call fcn.005438d0
push 0
push 0
push 0x62500c
push 0x622040
push 6
lea ecx, [ebp - 0x2754]
call fcn.005454f0
xor edx, edx
mov ecx, eax
call fcn.00511cf0
push eax
lea ecx, [ebp - 0x2548]
call fcn.0050e930
mov eax, dword [ebp - 0x6f44]
push 0x1e
mov eax, dword [eax + 8]
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.005173e0
mov eax, dword [ebp - 0x6f44]
push 0
push 0x665080
mov eax, dword [eax + 8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.0051a750
push 0xc
lea ecx, [ebp - 0x2360]
call fcn.00401d20
lea ecx, [ebp - 0x2360]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x24e0]
mov byte [ebp - 4], 0x41
call fcn.00401d20
lea ecx, [ebp - 0x24e0]
call fcn.00545940
mov ecx, dword [ebp - 0x6f44]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6650b4
lea ecx, [ecx + 0x314]
mov byte [ebp - 4], 0x42
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00545560
push 4
lea ecx, [ebp - 0x2368]
call fcn.00401d40
lea ecx, [ebp - 0x2368]
call fcn.0053fe60
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
mov byte [ebp - 4], 0x43
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x475f92
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f7c], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.0053f740
test al, al
je 0x475f92
mov eax, dword [ebp - 0x6f44]
lea ecx, [eax + 0x10c]
mov dword [ebp - 0x6f54], ecx
jmp 0x475bd6
mov eax, dword [ebp - 0x6f44]
mov ecx, eax
call fcn.0046c9e0
test al, al
jne 0x475f92
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d194
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x24e0]
push 0x61d194
call fcn.00545560
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x24e0]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2904]
call fcn.00543e30
test eax, eax
jne 0x475f6a
mov ecx, dword [ebp - 0x6f44]
push eax
lea ecx, [ecx + 0x14c]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
push 0x627220
push dword [ebp - 0x6cb4]
call fcn.00470dc0
test al, al
jne 0x475f6a
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x24e0]
xor edi, edi
call fcn.00545870
push 0x6650c4
lea ecx, [ebp - 0x24e0]
call fcn.005457e0
test al, al
je 0x475cac
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push 0x61d1b0
lea ecx, [ebp - 0x24e0]
call fcn.00543b40
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24e0]
call fcn.005454f0
push eax
push 0x61d058
lea ecx, [ebp - 0x26d4]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2360]
call fcn.00545560
lea ecx, [ebp - 0x2360]
call fcn.005305c0
test al, al
je 0x475d1e
push esi
push 0
lea eax, [ebp - 0x1fd4]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x2360]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00471620
mov edi, eax
cmp dword [ebp - 0x6fa8], 0
je 0x475d9d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24e0]
call fcn.005454f0
push eax
push 0x61d058
lea ecx, [ebp - 0x26e0]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2360]
call fcn.00545560
lea ecx, [ebp - 0x2360]
call fcn.005305c0
test al, al
je 0x475d9d
push esi
push 0
lea eax, [ebp - 0x1fd4]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x2360]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00471620
add edi, eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24e0]
call fcn.005454f0
push eax
push 0x61d058
lea ecx, [ebp - 0x271c]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2360]
call fcn.00545560
lea ecx, [ebp - 0x2360]
call fcn.005305c0
test al, al
je 0x475e0f
push esi
push 0
lea eax, [ebp - 0x1fd4]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x2360]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00471620
add edi, eax
mov eax, dword [ebp - 0x6f44]
xor esi, esi
mov dword [ebp - 0x6f6c], esi
cmp dword [eax + 0x30], esi
jbe 0x475f44
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24e0]
call fcn.005454f0
push eax
push 0x61d058
lea ecx, [ebp - 0x2220]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push esi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2360]
call fcn.00545560
lea ecx, [ebp - 0x2360]
call fcn.005305c0
test al, al
je 0x475eaa
push esi
push 0
lea eax, [ebp - 0x1fd4]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x2360]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00471620
add edi, eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24e0]
call fcn.005454f0
push eax
push 0x61d058
lea ecx, [ebp - 0x2184]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push esi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2360]
call fcn.00545560
lea ecx, [ebp - 0x2360]
call fcn.005305c0
test al, al
je 0x475f2e
push esi
push 0
lea eax, [ebp - 0x1fd4]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x2360]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00471620
add edi, eax
mov eax, dword [ebp - 0x6f44]
inc esi
cmp esi, dword [eax + 0x30]
jb 0x475e26
mov dword [ebp - 0x6f6c], esi
test edi, edi
jle 0x475f6a
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
push 0x622e08
push dword [ebp - 0x6cb4]
push 0x664ecc
call dword [0x5fd50c]
mov eax, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f7c], eax
call fcn.0053f740
test al, al
jne 0x475bd0
lea ecx, [ebp - 0x2368]
call fcn.0053fda0
lea ecx, [ebp - 0x24e0]
call fcn.00545790
lea ecx, [ebp - 0x2360]
call fcn.00545790
jmp 0x47593e
mov eax, dword [ebp - 0x2368]
mov dword [ebp - 0x6f6c], eax
push 8
lea ecx, [ebp - 0x6dcc]
call fcn.00401f60
mov edi, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x6dcc]
mov eax, dword [edi + 0x30]
add eax, 2
push eax
call fcn.004036b0
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x2148]
mov esi, dword [ebp - 0x6dcc]
push 0xc
mov dword [ebp - 0x6f68], esi
call fcn.00401d20
lea ecx, [ebp - 0x2148]
call fcn.00545940
mov ecx, edi
mov byte [ebp - 4], 0x45
call fcn.0046c9e0
test al, al
mov eax, edi
jne 0x4788a5
test dword [eax + 0x34], 0x400
jne 0x4788a5
push 0
push 0x6650e0
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x665110
push dword [eax + 0x38]
call fcn.0051a750
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x23
push dword [eax + 0x34]
call fcn.005173e0
mov eax, edi
xor esi, esi
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x4760d0
mov edi, dword [ebp - 0x6f68]
add eax, 0x104
mov dword [ebp - 0x6f94], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x665140
push esi
mov ecx, eax
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
push str.HKU_
mov ecx, edi
call fcn.00545560
mov eax, dword [ebp - 0x6f44]
inc esi
add edi, 0xc
mov ecx, dword [eax + 0x30]
mov eax, dword [ebp - 0x6f94]
cmp esi, ecx
jb 0x476086
mov esi, dword [ebp - 0x6f68]
lea eax, [ecx + ecx*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6651a0
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00545560
cmp dword [ebp - 0x6fa8], 0
mov edi, dword [ebp - 0x6f44]
je 0x47613d
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x6651a0
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00545560
push 0xc
lea ecx, [ebp - 0x209c]
call fcn.00401d20
lea ecx, [ebp - 0x209c]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x23e0]
mov byte [ebp - 4], 0x46
call fcn.00401d20
lea ecx, [ebp - 0x23e0]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x27ec]
mov byte [ebp - 4], 0x47
call fcn.00401d20
lea ecx, [ebp - 0x27ec]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x21b4]
mov byte [ebp - 4], 0x48
call fcn.00401d20
lea ecx, [ebp - 0x21b4]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2314]
mov byte [ebp - 4], 0x49
call fcn.00401d20
lea ecx, [ebp - 0x2314]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x255c]
mov byte [ebp - 4], 0x4a
call fcn.00401d20
lea ecx, [ebp - 0x255c]
call fcn.00545940
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x665200
push 0x61d058
lea ecx, [edi + 0x140]
mov byte [ebp - 4], 0x4b
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00545560
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa4]
call fcn.005193f0
push 0
push 0x665220
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
xor esi, esi
mov dword [ebp - 0x6f54], esi
cmp dword [ebp - 0x6f74], esi
jbe 0x4765de
mov eax, dword [ebp - 0x6f44]
mov edi, dword [ebp - 0x6f70]
mov dword [ebp - 0x6f40], edi
lea ecx, [eax + 0x10c]
mov dword [ebp - 0x6f94], ecx
lea ecx, [eax + 0x17c]
mov dword [ebp - 0x6f48], ecx
mov ecx, dword [ebp - 0x6f68]
sub ecx, edi
mov dword [ebp - 0x6f4c], ecx
jmp 0x476296
mov eax, dword [ebp - 0x6f44]
mov ecx, eax
call fcn.0046c9e0
test al, al
jne 0x4765de
mov eax, dword [ebp - 0x6f44]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
cmp esi, dword [eax + 0x30]
jae 0x4762e0
lea ecx, [ebp - 0x26c8]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f94]
push eax
push esi
call fcn.004035f0
mov ecx, eax
jmp 0x4762eb
push 0x62746c
lea ecx, [ebp - 0x25d8]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x23e0]
call fcn.00545560
mov eax, dword [ebp - 0x6f4c]
add eax, edi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f7c], eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x4765c2
lea eax, [ebp - 0x6cb4]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f6c], esi
call fcn.0053f6a0
test al, al
je 0x4765bc
nop
mov ecx, dword [ebp - 0x6f44]
call fcn.0046c9e0
test al, al
jne 0x4765b6
mov eax, dword [ebp - 0x6cb4]
cmp word [eax], 0
je 0x47659a
mov ecx, dword [ebp - 0x6f44]
push 0
lea ecx, [ecx + 0x14c]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
push 0x65c6dc
push dword [ebp - 0x6cb4]
call fcn.00470dc0
test al, al
jne 0x47659a
lea eax, [ebp - 0x209c]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f74]
call fcn.0053fb00
test al, al
je 0x47659a
mov edx, dword [ebp - 0x6f48]
lea ecx, [ebp - 0x209c]
push 3
xor edi, edi
call fcn.00537920
test al, al
je 0x47645f
push edi
push 1
push 1
push edi
lea ecx, [ebp - 0x23e0]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x209c]
call fcn.00543e30
mov ecx, dword [ebp - 0x6f7c]
mov edi, eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
push 0x624a18
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2148]
call fcn.00545560
push 0
lea ecx, [ebp - 0x2148]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
lea eax, [ebp - 0x209c]
push eax
call fcn.00470310
test al, al
mov eax, 1
cmovne edi, eax
push 0
lea ecx, [ebp - 0x209c]
call fcn.005454f0
push eax
push 0
push edi
lea ecx, [ebp - 0x209c]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
push dword [ebp - 0x6cb4]
mov eax, dword [ebp - 0x6f44]
push 0xffffffffffffffff
push 0xb
mov eax, dword [eax + 8]
push dword [eax + 0xa4]
call fcn.0049a0a0
mov dword [ebp - 0x6f6c], eax
cmp eax, 0xffffffff
je 0x476594
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x209c]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f7c]
push eax
call fcn.005454f0
push eax
push 0xb
push dword [ebp - 0x6f6c]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00499eb0
lea eax, [ebp - 0x209c]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f74]
call fcn.0053fb00
push 0
push 0
push 0
test edi, edi
mov ecx, 0x66452c
push 0x621874
mov eax, 0x6291c8
cmove eax, ecx
lea ecx, [ebp - 0x209c]
push eax
push 0x664544
call fcn.005454f0
mov edi, dword [ebp - 0x6f40]
mov ecx, edi
push eax
push 0x665264
call fcn.005454f0
push eax
push 0x6645a4
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f80]
push 0x665280
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
jmp 0x47659a
mov edi, dword [ebp - 0x6f40]
lea eax, [ebp - 0x6cb4]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0053f6a0
test al, al
jne 0x476350
mov dword [ebp - 0x6f6c], esi
mov esi, dword [ebp - 0x6f54]
inc esi
add edi, 0xc
mov dword [ebp - 0x6f54], esi
mov dword [ebp - 0x6f40], edi
cmp esi, dword [ebp - 0x6f74]
jb 0x476290
mov ecx, dword [ebp - 0x6f44]
call fcn.0046c9e0
test al, al
jne 0x478859
mov eax, dword [ebp - 0x6f44]
xor esi, esi
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x47665d
mov edi, dword [ebp - 0x6f68]
add eax, 0x10c
mov dword [ebp - 0x6f48], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x28a8]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f48]
push eax
push esi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00545560
mov eax, dword [ebp - 0x6f44]
inc esi
add edi, 0xc
mov ecx, dword [eax + 0x30]
cmp esi, ecx
jb 0x476611
mov edi, dword [ebp - 0x6f68]
lea eax, [ebp - 0x2934]
push eax
lea eax, [ecx + ecx*2]
lea ecx, [edi + eax*4]
call fcn.00545840
push 0
push 0x6652a0
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
push 0x4c
lea ecx, [ebp - 0x2b70]
call fcn.00401e30
lea ecx, [ebp - 0x2b70]
call fcn.005385c0
mov eax, dword [ebp - 0x6f44]
mov esi, dword [ebp - 0x6f70]
sub edi, esi
mov byte [ebp - 4], 0x4c
mov dword [ebp - 0x6f40], 0
lea ecx, [eax + 0x10c]
mov dword [ebp - 0x6f4c], esi
mov dword [ebp - 0x6f48], ecx
lea ecx, [eax + 0x17c]
mov dword [ebp - 0x6f94], ecx
mov dword [ebp - 0x6f7c], edi
nop
mov ecx, eax
call fcn.0046c9e0
test al, al
jne 0x476b8b
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
add edi, esi
push 0
push 0x63a58c
mov ecx, edi
mov dword [ebp - 0x6f54], edi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x209c]
call fcn.00545560
push 0x260
lea ecx, [ebp - 0x3778]
call fcn.00401d70
push 3
lea ecx, [ebp - 0x209c]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x3778]
call fcn.004016d0
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov byte [ebp - 4], 0x4d
push 0
push 0
cmp ecx, dword [eax + 0x30]
jae 0x476796
lea ecx, [ebp - 0x26c8]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f48]
push eax
push dword [ebp - 0x6f40]
call fcn.004035f0
mov ecx, eax
jmp 0x4767a1
push 0x62746c
lea ecx, [ebp - 0x25d8]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x23e0]
call fcn.00545560
lea ecx, [ebp - 0x3778]
call fcn.00401810
test al, al
je 0x476b4f
mov ecx, dword [ebp - 0x6f44]
call fcn.0046c9e0
test al, al
jne 0x476b4f
push 1
lea ecx, [ebp - 0x3778]
call fcn.00401870
push eax
lea ecx, [ebp - 0x21b4]
call fcn.00545870
push 0x642eb0
lea ecx, [ebp - 0x21b4]
call fcn.00545820
test al, al
jne 0x476b3c
mov ecx, dword [ebp - 0x6f44]
push 0
lea ecx, [ecx + 0x14c]
call fcn.005454f0
push eax
push 0x65c714
lea ecx, [ebp - 0x21b4]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00470dc0
test al, al
jne 0x476b3c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x3778]
call fcn.00401870
push eax
push 0x61d058
mov ecx, edi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x255c]
call fcn.00545560
lea eax, [ebp - 0x255c]
push eax
lea ecx, [ebp - 0x2314]
call fcn.00545840
push 0
push 0
lea ecx, [ebp - 0x3778]
call fcn.00401880
mov edx, 0x664510
mov ecx, eax
call fcn.00541eb0
test eax, eax
jne 0x476970
push eax
lea ecx, [ebp - 0x255c]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2b70]
call fcn.00538480
test al, al
je 0x476970
lea ecx, [ebp - 0x2b70]
call fcn.00538400
push eax
lea ecx, [ebp - 0x2314]
call fcn.00545870
lea ecx, [ebp - 0x2b70]
call fcn.005383a0
mov ecx, eax
call fcn.00542020
test eax, eax
je 0x47692b
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2b70]
call fcn.005383a0
push eax
push 0x61e0f8
lea ecx, [ebp - 0x2314]
call fcn.00543b40
push 3
push 1
lea ecx, [ebp - 0x2314]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x209c]
call fcn.005455c0
mov edx, dword [ebp - 0x6f94]
mov ecx, eax
call fcn.00537920
test al, al
jne 0x476982
lea ecx, [ebp - 0x2b70]
call fcn.00538400
push eax
lea ecx, [ebp - 0x209c]
call fcn.00545870
jmp 0x476982
lea eax, [ebp - 0x255c]
push eax
lea ecx, [ebp - 0x209c]
call fcn.00545840
push 0
push 0
push 0x61d060
push 0x61e2b0
lea ecx, [ebp - 0x209c]
call fcn.00543640
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x23e0]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x209c]
call fcn.00543e30
push 0
lea ecx, [ebp - 0x255c]
mov esi, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
lea eax, [ebp - 0x209c]
push eax
call fcn.00470310
test al, al
lea ecx, [ebp - 0x209c]
mov eax, 1
push 0
cmovne esi, eax
call fcn.005454f0
push eax
push 0
push esi
lea ecx, [ebp - 0x209c]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f4c]
push eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x21b4]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
mov eax, dword [ebp - 0x6f44]
push 0xffffffffffffffff
push 0xc
mov eax, dword [eax + 8]
push dword [eax + 0xa4]
call fcn.0049a0a0
mov edi, eax
cmp edi, 0xffffffff
je 0x476b30
push 0
push 0
push 0
test esi, esi
mov eax, 0x66452c
push 0x621874
mov ecx, 0x6291c8
cmove ecx, eax
push ecx
push 0x664544
lea ecx, [ebp - 0x209c]
call fcn.005454f0
mov esi, dword [ebp - 0x6f4c]
mov ecx, esi
push eax
push 0x6652d8
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x21b4]
call fcn.005454f0
push eax
push 0x665280
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x3778]
call fcn.00401870
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x61d058
call fcn.005454f0
push eax
lea ecx, [ebp - 0x209c]
call fcn.00545560
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x209c]
call fcn.005454f0
push eax
push 0
push 0xc
push edi
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00499eb0
jmp 0x476b36
mov esi, dword [ebp - 0x6f4c]
mov edi, dword [ebp - 0x6f54]
lea ecx, [ebp - 0x3778]
call fcn.004017d0
test al, al
jne 0x4767c5
lea ecx, [ebp - 0x3778]
mov byte [ebp - 4], 0x4c
call fcn.00401720
mov edi, dword [ebp - 0x6f40]
add esi, 0xc
mov eax, dword [ebp - 0x6f44]
inc edi
mov dword [ebp - 0x6f40], edi
mov dword [ebp - 0x6f4c], esi
cmp edi, dword [eax + 0x30]
mov edi, dword [ebp - 0x6f7c]
jbe 0x4766e0
jmp 0x476b91
mov eax, dword [ebp - 0x6f44]
mov ecx, eax
call fcn.0046c9e0
test al, al
jne 0x47884e
push 0
push 0x6652f0
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
push 0xc
lea ecx, [ebp - 0x2430]
call fcn.00401d20
lea ecx, [ebp - 0x2430]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2198]
mov byte [ebp - 4], 0x4e
call fcn.00401d20
lea ecx, [ebp - 0x2198]
call fcn.00545940
push 4
lea ecx, [ebp - 0x6cd8]
mov byte [ebp - 4], 0x4f
call fcn.00401d40
lea ecx, [ebp - 0x6cd8]
call fcn.00401990
push 4
lea ecx, [ebp - 0x6cd4]
mov byte [ebp - 4], 0x50
call fcn.00401d40
lea ecx, [ebp - 0x6cd4]
call fcn.00401990
lea eax, [ebp - 0x6cd4]
mov byte [ebp - 4], 0x51
mov esi, dword [0x5fdad8]
push eax
push 0x617730
push 1
push 0
push 0x617740
call esi
test eax, eax
js 0x477453
lea ecx, [ebp - 0x70a8]
call fcn.00401c80
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x7058]
movups xmmword [ebp - 0x6fa0], xmm0
call fcn.00401c80
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x7088]
movups xmmword [ebp - 0x6f60], xmm0
call fcn.00401c80
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x70b8]
movups xmmword [ebp - 0x6f88], xmm0
call fcn.00401c80
mov edi, eax
mov byte [ebp - 4], 0x55
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x6fa0]
mov ecx, dword [ebp - 0x6cd4]
mov edx, esp
sub esp, 0x10
mov eax, esp
sub esp, 0x10
mov esi, dword [ecx]
movups xmmword [edx], xmm0
movups xmm0, xmmword [ebp - 0x6f60]
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x6f88]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [edi]
push ecx
movups xmmword [eax], xmm0
mov eax, dword [esi + 0x28]
call eax
shr eax, 0x1f
lea ecx, [ebp - 0x70b8]
mov dword [ebp - 0x6f48], eax
call fcn.00401d10
lea ecx, [ebp - 0x7088]
call fcn.00401d10
lea ecx, [ebp - 0x7058]
call fcn.00401d10
lea ecx, [ebp - 0x70a8]
mov byte [ebp - 4], 0x51
call fcn.00401d10
cmp byte [ebp - 0x6f48], 0
jne 0x477963
push 4
lea ecx, [ebp - 0x6cdc]
call fcn.00401d40
lea ecx, [ebp - 0x6cdc]
call fcn.00401990
push 0x61d058
lea ecx, [ebp - 0x6ff4]
mov byte [ebp - 4], 0x56
call fcn.00401a70
mov byte [ebp - 4], 0x57
mov ecx, dword [ebp - 0x6cd4]
mov esi, dword [ecx]
lea ecx, [ebp - 0x6cdc]
push ecx
mov ecx, eax
call fcn.00401b30
push eax
push dword [ebp - 0x6cd4]
mov eax, dword [esi + 0x1c]
call eax
shr eax, 0x1f
lea ecx, [ebp - 0x6ff4]
mov dword [ebp - 0x6f48], eax
mov byte [ebp - 4], 0x56
call fcn.00401b20
cmp byte [ebp - 0x6f48], 0
je 0x476daa
lea ecx, [ebp - 0x6cdc]
mov byte [ebp - 4], 0x51
call fcn.00402c60
jmp 0x477963
push 4
lea ecx, [ebp - 0x6cf8]
call fcn.00401d40
lea ecx, [ebp - 0x6cf8]
call fcn.00401990
mov byte [ebp - 4], 0x58
lea edx, [ebp - 0x6cf8]
mov eax, dword [ebp - 0x6cdc]
push edx
push 1
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x38]
call eax
test eax, eax
jns 0x476e00
lea ecx, [ebp - 0x6cf8]
call fcn.00402c60
lea ecx, [ebp - 0x6cdc]
mov byte [ebp - 4], 0x51
call fcn.00402c60
jmp 0x477963
mov eax, dword [ebp - 0x6cf8]
lea edx, [ebp - 0x256c]
mov dword [ebp - 0x256c], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
mov eax, dword [ebp - 0x256c]
test eax, eax
je 0x477434
mov esi, 1
mov dword [ebp - 0x6f54], esi
cmp eax, esi
jl 0x477434
mov eax, dword [ebp - 0x6f44]
mov edi, dword [0x5fd580]
lea ecx, [eax + 0x17c]
mov dword [ebp - 0x6f94], ecx
jmp 0x476e66
mov eax, dword [ebp - 0x6f44]
mov ecx, eax
call fcn.0046c9e0
test al, al
jne 0x477434
push 4
lea ecx, [ebp - 0x6cbc]
call fcn.00401d40
lea ecx, [ebp - 0x6cbc]
call fcn.00401990
push 3
push esi
lea ecx, [ebp - 0x7068]
mov byte [ebp - 4], 0x59
call fcn.00401c90
mov esi, eax
mov byte [ebp - 4], 0x5a
lea edx, [ebp - 0x6cbc]
mov ecx, dword [ebp - 0x6cf8]
movups xmm0, xmmword [esi]
push edx
sub esp, 0x10
mov eax, dword [ecx]
mov edx, esp
push ecx
mov eax, dword [eax + 0x20]
movups xmmword [edx], xmm0
call eax
shr eax, 0x1f
lea ecx, [ebp - 0x7068]
mov dword [ebp - 0x6f48], eax
mov byte [ebp - 4], 0x59
call fcn.00401d10
cmp byte [ebp - 0x6f48], 0
jne 0x47740c
mov eax, dword [ebp - 0x6cbc]
lea edx, [ebp - 0x6d14]
mov dword [ebp - 0x6d14], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
test eax, eax
js 0x47740c
mov eax, dword [ebp - 0x6d14]
test eax, eax
je 0x47740c
push eax
lea ecx, [ebp - 0x21b4]
call fcn.00545870
push dword [ebp - 0x6d14]
call edi
mov ecx, dword [ebp - 0x6f44]
push 0
lea ecx, [ecx + 0x14c]
call fcn.005454f0
push eax
push 0x66534c
lea ecx, [ebp - 0x21b4]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00470dc0
test al, al
jne 0x47740c
push 4
lea ecx, [ebp - 0x6cd0]
call fcn.00401d40
lea ecx, [ebp - 0x6cd0]
call fcn.00401990
mov byte [ebp - 4], 0x5b
lea edx, [ebp - 0x6cd0]
mov eax, dword [ebp - 0x6cbc]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x4c]
call eax
test eax, eax
js 0x477401
push 4
lea ecx, [ebp - 0x6cc8]
call fcn.00401d40
lea ecx, [ebp - 0x6cc8]
call fcn.00401990
mov byte [ebp - 4], 0x5c
lea edx, [ebp - 0x6cc8]
mov eax, dword [ebp - 0x6cd0]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x44]
call eax
test eax, eax
js 0x4773f6
mov eax, dword [ebp - 0x6cc8]
lea edx, [ebp - 0x2464]
mov dword [ebp - 0x2464], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
cmp dword [ebp - 0x2464], 0
je 0x4773f6
lea ecx, [ebp - 0x2198]
call fcn.00545760
mov esi, 1
cmp dword [ebp - 0x2464], esi
jl 0x4771f4
nop word [eax + eax]
push 4
lea ecx, [ebp - 0x6cc4]
call fcn.00401d40
lea ecx, [ebp - 0x6cc4]
call fcn.00401990
mov byte [ebp - 4], 0x5d
lea edx, [ebp - 0x6cc4]
mov eax, dword [ebp - 0x6cc8]
push edx
push esi
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x20]
call eax
test eax, eax
js 0x4771d8
mov eax, dword [ebp - 0x6cc4]
lea edx, [ebp - 0x28b8]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x24]
call eax
test eax, eax
js 0x4771d8
cmp dword [ebp - 0x28b8], 0
jne 0x4771d8
push 4
lea ecx, [ebp - 0x6ce8]
call fcn.00401d40
lea ecx, [ebp - 0x6ce8]
call fcn.00401990
mov byte [ebp - 4], 0x5e
lea edx, [ebp - 0x6ce8]
mov eax, dword [ebp - 0x6cc4]
push edx
push 0x617770
push eax
mov ecx, dword [eax]
mov eax, dword [ecx]
call eax
test eax, eax
js 0x4771cd
mov eax, dword [ebp - 0x6ce8]
lea edx, [ebp - 0x6d00]
mov dword [ebp - 0x6d00], 0
mov dword [ebp - 0x6d08], 0
push edx
mov ecx, dword [eax]
push eax
mov eax, dword [ecx + 0x28]
call eax
mov eax, dword [ebp - 0x6d00]
test eax, eax
je 0x4771cd
push eax
lea ecx, [ebp - 0x2314]
call fcn.00545870
mov eax, dword [ebp - 0x6ce8]
lea edx, [ebp - 0x6d08]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x30]
call eax
mov ecx, dword [ebp - 0x6d08]
call fcn.00542020
test eax, eax
je 0x47718e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6d08]
lea ecx, [ebp - 0x2314]
push 0x61e0f8
call fcn.00543b40
push 3
push 1
lea ecx, [ebp - 0x2314]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2198]
call fcn.005455c0
mov edx, dword [ebp - 0x6f94]
mov ecx, eax
call fcn.00537920
test al, al
jne 0x47719f
push dword [ebp - 0x6d00]
lea ecx, [ebp - 0x2198]
call fcn.00545870
push 0
push 1
push 0x61d060
push 0x61e2b0
lea ecx, [ebp - 0x2198]
call fcn.00543640
push dword [ebp - 0x6d00]
call edi
mov eax, dword [ebp - 0x6d08]
test eax, eax
je 0x4771cd
push eax
call edi
lea ecx, [ebp - 0x6ce8]
call fcn.00402c60
lea ecx, [ebp - 0x6cc4]
mov byte [ebp - 4], 0x5c
call fcn.00402c60
inc esi
cmp esi, dword [ebp - 0x2464]
jle 0x477030
lea ecx, [ebp - 0x2198]
call fcn.005451f0
test al, al
jne 0x4773f6
mov eax, dword [ebp - 0x6cdc]
lea edx, [ebp - 0x6dc4]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x20]
call eax
test eax, eax
js 0x4772a8
mov eax, dword [ebp - 0x6f44]
movsd xmm0, qword [eax + 0x378]
comisd xmm0, xmmword [0x6e3250]
jbe 0x477244
mov eax, dword [eax + 0x184]
jmp 0x47724a
mov eax, dword [eax + 0x180]
push eax
lea ecx, [ebp - 0x2430]
call fcn.00545870
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x21b4]
call fcn.005454f0
push eax
push 0x61d058
push dword [ebp - 0x6dc4]
lea ecx, [ebp - 0x2430]
push 0x6288b8
call fcn.00543b40
push 1
push 0
push 0x61d058
push 0x61d0e0
lea ecx, [ebp - 0x2430]
call fcn.00543640
jmp 0x4772b3
lea ecx, [ebp - 0x2430]
call fcn.00545760
push 0
push 1
push 1
push 0
push 0x66536c
lea ecx, [ebp - 0x2198]
call fcn.00543e30
push 0
lea ecx, [ebp - 0x2430]
mov esi, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
lea eax, [ebp - 0x2198]
push eax
call fcn.00470310
test al, al
lea ecx, [ebp - 0x2198]
mov eax, 1
push 0
cmovne esi, eax
call fcn.005454f0
push eax
push 0
push esi
lea ecx, [ebp - 0x2198]
call fcn.005454f0
push eax
push 0x65f370
lea ecx, [ebp - 0x21b4]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
mov eax, dword [ebp - 0x6f44]
push 0xffffffffffffffff
push 0xd
mov eax, dword [eax + 8]
push dword [eax + 0xa4]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x4773f6
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f370
lea ecx, [ebp - 0x2198]
call fcn.005454f0
push eax
push 0
push 0xd
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00499eb0
push 0
push 0
push 0
push 0
test esi, esi
mov ecx, 0x66452c
push 0x621874
mov eax, 0x6291c8
cmove eax, ecx
lea ecx, [ebp - 0x2314]
push eax
push 0x664544
call fcn.005454f0
push eax
push 0x665264
push 0x66537c
lea ecx, [ebp - 0x21b4]
call fcn.005454f0
push eax
push 0x6653b4
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
lea ecx, [ebp - 0x6cc8]
call fcn.00402c60
lea ecx, [ebp - 0x6cd0]
call fcn.00402c60
lea ecx, [ebp - 0x6cbc]
mov byte [ebp - 4], 0x58
call fcn.00402c60
mov esi, dword [ebp - 0x6f54]
inc esi
mov dword [ebp - 0x6f54], esi
cmp esi, dword [ebp - 0x256c]
jle 0x476e60
lea ecx, [ebp - 0x6cf8]
call fcn.00402c60
lea ecx, [ebp - 0x6cdc]
mov byte [ebp - 4], 0x51
call fcn.00402c60
jmp 0x477963
lea eax, [ebp - 0x6cd8]
push eax
push 0x6802d0
push 1
push 0
push 0x68026c
call esi
test eax, eax
js 0x477963
push 4
lea ecx, [ebp - 0x6cf4]
call fcn.00401d40
lea ecx, [ebp - 0x6cf4]
call fcn.00401990
mov byte [ebp - 4], 0x5f
lea edx, [ebp - 0x6cf4]
mov eax, dword [ebp - 0x6cd8]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x14]
call eax
test eax, eax
js 0x477954
mov eax, dword [ebp - 0x6cf4]
lea edx, [ebp - 0x2474]
push edx
mov dword [ebp - 0x2474], 0
lea edx, [ebp - 0x6d0c]
push edx
mov ecx, dword [eax]
push 5
push eax
mov eax, dword [ecx + 0xc]
call eax
test eax, eax
js 0x477954
mov eax, dword [ebp - 0x6f44]
mov esi, dword [0x5fdac0]
lea ecx, [eax + 0x17c]
mov dword [ebp - 0x6f48], ecx
jmp 0x477506
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [ebp - 0x2474]
test ecx, ecx
je 0x477954
xor edi, edi
test ecx, ecx
je 0x477926
jmp 0x477526
mov eax, dword [ebp - 0x6f44]
mov ecx, eax
call fcn.0046c9e0
test al, al
jne 0x477926
mov eax, dword [ebp - 0x6d0c]
lea ecx, [ebp - 0x21b4]
push dword [eax + edi*4]
call fcn.00545870
mov eax, dword [ebp - 0x6d0c]
push dword [eax + edi*4]
call esi
mov ecx, dword [ebp - 0x6f44]
push 0
lea ecx, [ecx + 0x14c]
call fcn.005454f0
push eax
push 0x66534c
lea ecx, [ebp - 0x21b4]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00470dc0
test al, al
jne 0x477919
push 4
lea ecx, [ebp - 0x6cc0]
call fcn.00401d40
lea ecx, [ebp - 0x6cc0]
call fcn.00401990
mov byte [ebp - 4], 0x60
lea ecx, [ebp - 0x21b4]
mov eax, dword [ebp - 0x6cd8]
mov esi, dword [eax]
lea eax, [ebp - 0x6cc0]
push eax
push 0x680398
call fcn.005454f0
push eax
push dword [ebp - 0x6cd8]
mov eax, dword [esi + 0x18]
call eax
test eax, eax
js 0x477904
mov eax, dword [ebp - 0x6cc0]
lea edx, [ebp - 0x6cfc]
mov dword [ebp - 0x6cfc], 0
mov dword [ebp - 0x6d04], 0
push edx
mov ecx, dword [eax]
push eax
mov eax, dword [ecx + 0x84]
call eax
cmp dword [ebp - 0x6cfc], 0
je 0x477904
mov eax, dword [ebp - 0x6cc0]
lea edx, [ebp - 0x6d04]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x8c]
call eax
push dword [ebp - 0x6cfc]
lea ecx, [ebp - 0x2314]
call fcn.00545870
mov ecx, dword [ebp - 0x6d04]
call fcn.00542020
test eax, eax
je 0x4776a2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6d04]
lea ecx, [ebp - 0x2314]
push 0x61e0f8
call fcn.00543b40
push 3
push 1
lea ecx, [ebp - 0x2314]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2198]
call fcn.005455c0
mov edx, dword [ebp - 0x6f48]
mov ecx, eax
call fcn.00537920
test al, al
jne 0x4776b3
push dword [ebp - 0x6cfc]
lea ecx, [ebp - 0x2198]
call fcn.00545870
push 0
push 1
push 0x61d060
push 0x61e2b0
lea ecx, [ebp - 0x2198]
call fcn.00543640
push dword [ebp - 0x6cfc]
mov esi, dword [0x5fdac0]
call esi
mov eax, dword [ebp - 0x6d04]
test eax, eax
je 0x4776e7
push eax
call esi
lea ecx, [ebp - 0x2198]
call fcn.005451f0
test al, al
je 0x47770a
lea ecx, [ebp - 0x6cc0]
mov byte [ebp - 4], 0x5f
call fcn.00402c60
jmp 0x477919
push 0
push 1
push 1
push 0
push 0x66536c
lea ecx, [ebp - 0x2198]
call fcn.00543e30
xor ecx, ecx
test eax, eax
lea eax, [ebp - 0x21b4]
setg cl
mov dword [ebp - 0x6f94], ecx
lea ecx, [ebp - 0x2430]
push eax
call fcn.00545840
push 0
push 1
push 0xffffffffffffffff
push 0
push 0x6288c8
lea ecx, [ebp - 0x2430]
call fcn.00543e30
test eax, eax
jne 0x477778
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x6288c8
lea ecx, [ebp - 0x2430]
call fcn.00543b40
mov eax, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x2430]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6653d4
push dword [eax + 0x180]
call fcn.005438d0
push 0
lea ecx, [ebp - 0x2430]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
lea eax, [ebp - 0x2198]
push eax
call fcn.00470310
test al, al
je 0x4777d3
mov esi, 1
jmp 0x477805
lea ecx, [ebp - 0x2198]
call fcn.005454f0
push eax
push 0
call dword [0x5fdb00]
test eax, eax
je 0x4777ff
lea ecx, [ebp - 0x6cc0]
mov byte [ebp - 4], 0x5f
call fcn.00402c60
jmp 0x477919
mov esi, dword [ebp - 0x6f94]
push 0
lea ecx, [ebp - 0x2198]
call fcn.005454f0
push eax
push 0
push esi
lea ecx, [ebp - 0x2198]
call fcn.005454f0
push eax
push 0x65f370
lea ecx, [ebp - 0x21b4]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
mov eax, dword [ebp - 0x6f44]
push 0xffffffffffffffff
push 0xd
mov eax, dword [eax + 8]
push dword [eax + 0xa4]
call fcn.0049a0a0
mov dword [ebp - 0x6f94], eax
cmp eax, 0xffffffff
je 0x477904
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f370
lea ecx, [ebp - 0x2198]
call fcn.005454f0
push eax
push 0
push 0xd
push dword [ebp - 0x6f94]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00499eb0
push 0
push 0
push 0
push 0
test esi, esi
mov ecx, 0x66452c
push 0x621874
mov eax, 0x6291c8
cmove eax, ecx
lea ecx, [ebp - 0x2314]
push eax
push 0x664544
call fcn.005454f0
push eax
push 0x665264
push 0x66537c
lea ecx, [ebp - 0x21b4]
call fcn.005454f0
push eax
push 0x6653b4
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
lea ecx, [ebp - 0x6cc0]
mov byte [ebp - 4], 0x5f
call fcn.00402c60
mov esi, dword [0x5fdac0]
inc edi
cmp edi, dword [ebp - 0x2474]
jb 0x477520
push dword [ebp - 0x6d0c]
call esi
mov eax, dword [ebp - 0x6cf4]
lea edx, [ebp - 0x2474]
push edx
lea edx, [ebp - 0x6d0c]
push edx
mov ecx, dword [eax]
push 5
push eax
mov eax, dword [ecx + 0xc]
call eax
test eax, eax
jns 0x477500
lea ecx, [ebp - 0x6cf4]
mov byte [ebp - 4], 0x51
call fcn.00402c60
mov ecx, dword [ebp - 0x6f44]
call fcn.0046c9e0
test al, al
jne 0x478822
push 0x18
lea ecx, [ebp - 0x2864]
call fcn.00401d50
lea ecx, [ebp - 0x2864]
call fcn.00542700
push 0
push 0x6653f0
lea ecx, [ebp - 0x1fd4]
mov byte [ebp - 4], 0x61
call fcn.00532850
mov eax, dword [ebp - 0x6f44]
xor esi, esi
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x477a0e
mov edi, dword [ebp - 0x6f68]
add eax, 0x104
mov dword [ebp - 0x6f48], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x652798
push esi
mov ecx, eax
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
push str.HKU_
mov ecx, edi
call fcn.00545560
mov eax, dword [ebp - 0x6f44]
inc esi
add edi, 0xc
mov ecx, dword [eax + 0x30]
mov eax, dword [ebp - 0x6f48]
cmp esi, ecx
jb 0x4779c4
mov esi, dword [ebp - 0x6f68]
lea eax, [ecx + ecx*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x665420
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00545560
cmp dword [ebp - 0x6fa8], 0
je 0x477a7b
mov eax, dword [ebp - 0x6f44]
push 0
push 0
push 0
mov eax, dword [eax + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x665420
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00545560
xor edi, edi
mov dword [ebp - 0x6f7c], edi
cmp dword [ebp - 0x6f74], edi
jbe 0x477e90
mov eax, dword [ebp - 0x6f44]
mov esi, dword [ebp - 0x6f70]
mov dword [ebp - 0x6f40], esi
lea ecx, [eax + 0x17c]
mov dword [ebp - 0x6f4c], ecx
mov ecx, dword [ebp - 0x6f68]
sub ecx, esi
mov dword [ebp - 0x6f48], ecx
jmp 0x477ac6
mov eax, dword [ebp - 0x6f44]
mov ecx, eax
call fcn.0046c9e0
test al, al
jne 0x477e90
mov eax, dword [ebp - 0x6f48]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f54], eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x477e74
lea eax, [ebp - 0x23e0]
push eax
push 0x65c788
lea ecx, [ebp - 0x1f74]
call fcn.0053fb00
test al, al
je 0x477e74
lea ecx, [ebp - 0x23e0]
call fcn.00545700
cmp eax, 2
jl 0x477e74
push 0x18
lea ecx, [ebp - 0x29d4]
call fcn.00401d50
push 0
push 0x621af8
lea ecx, [ebp - 0x23e0]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x29d4]
call fcn.00542680
xor edi, edi
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0x29d4]
mov dword [ebp - 0x6f6c], edi
call fcn.005425f0
test eax, eax
je 0x477e5f
mov eax, dword [ebp - 0x6f44]
add eax, 0x14c
mov dword [ebp - 0x6f94], eax
push edi
lea ecx, [ebp - 0x29d4]
call fcn.00542600
push eax
lea ecx, [ebp - 0x21b4]
call fcn.00545870
mov ecx, dword [ebp - 0x6f94]
push 0
call fcn.005454f0
push eax
push 0x66548c
lea ecx, [ebp - 0x21b4]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00470dc0
test al, al
jne 0x477e45
push edi
lea ecx, [ebp - 0x29d4]
call fcn.00542600
push eax
lea ecx, [ebp - 0x209c]
call fcn.00545870
lea ecx, [ebp - 0x209c]
call fcn.005451f0
test al, al
jne 0x477e45
push 0
push 1
push 0xffffffffffffffff
push 0
push str..dll
lea ecx, [ebp - 0x209c]
call fcn.00543e30
lea ecx, [ebp - 0x209c]
mov esi, eax
call fcn.00545700
sub eax, 3
cmp esi, eax
je 0x477c5a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str..dll
lea ecx, [ebp - 0x209c]
call fcn.00543b40
mov edx, dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x209c]
push 3
call fcn.00537920
lea ecx, [ebp - 0x209c]
call fcn.005454f0
push eax
push 0
call dword [0x5fdb00]
test eax, eax
jne 0x477e3f
push eax
push 1
push 1
push eax
push 0x66536c
lea ecx, [ebp - 0x209c]
call fcn.00543e30
push 0
push 0
push 0
push 0
push 0
push 0
xor ecx, ecx
test eax, eax
push 0
push 0
setg cl
push 0
mov dword [ebp - 0x6f6c], ecx
lea ecx, [ebp - 0x29d4]
push edi
call fcn.00542600
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x6654a8
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2148]
call fcn.00545560
push 0
lea ecx, [ebp - 0x2148]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
lea eax, [ebp - 0x209c]
push eax
call fcn.00470310
mov esi, dword [ebp - 0x6f6c]
lea ecx, [ebp - 0x209c]
test al, al
mov eax, 1
push 0
cmovne esi, eax
call fcn.005454f0
push eax
push 0
push esi
lea ecx, [ebp - 0x209c]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x21b4]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
mov eax, dword [ebp - 0x6f44]
push 0xffffffffffffffff
push 0xe
mov eax, dword [eax + 8]
push dword [eax + 0xa4]
call fcn.0049a0a0
mov dword [ebp - 0x6f6c], eax
cmp eax, 0xffffffff
je 0x477e3f
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0x65c788
call fcn.005454f0
push eax
lea ecx, [ebp - 0x209c]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
call fcn.005454f0
push eax
push 0xe
push dword [ebp - 0x6f6c]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00499eb0
push 0
push 0
push 0
test esi, esi
mov ecx, 0x66452c
push 0x621874
mov eax, 0x6291c8
cmove eax, ecx
lea ecx, [ebp - 0x209c]
push eax
push 0x664544
call fcn.005454f0
mov esi, dword [ebp - 0x6f40]
mov ecx, esi
push eax
push 0x6652d8
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x21b4]
call fcn.005454f0
push eax
push 0x665280
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
jmp 0x477e45
mov esi, dword [ebp - 0x6f40]
lea ecx, [ebp - 0x29d4]
inc edi
call fcn.005425f0
cmp edi, eax
jb 0x477b93
mov dword [ebp - 0x6f6c], edi
lea ecx, [ebp - 0x29d4]
mov byte [ebp - 4], 0x61
call fcn.00542660
mov edi, dword [ebp - 0x6f7c]
inc edi
add esi, 0xc
mov dword [ebp - 0x6f7c], edi
mov dword [ebp - 0x6f40], esi
cmp edi, dword [ebp - 0x6f74]
jb 0x477ac0
mov ecx, dword [ebp - 0x6f44]
call fcn.0046c9e0
test al, al
jne 0x478817
push 0
push 0x6654d0
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
push 4
lea ecx, [ebp - 0x22bc]
mov dword [ebp - 0x6f98], 0x665508
mov dword [ebp - 0x6f94], 0x665590
call fcn.00401d40
lea ecx, [ebp - 0x22bc]
call fcn.0053fe60
push 4
lea ecx, [ebp - 0x2408]
mov byte [ebp - 4], 0x63
call fcn.00401d40
lea ecx, [ebp - 0x2408]
call fcn.0053fe60
push 0xc
lea ecx, [ebp - 0x20cc]
mov byte [ebp - 4], 0x64
call fcn.00401d20
lea ecx, [ebp - 0x20cc]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2710]
mov byte [ebp - 4], 0x65
call fcn.00401d20
lea ecx, [ebp - 0x2710]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2778]
mov byte [ebp - 4], 0x66
call fcn.00401d20
lea ecx, [ebp - 0x2778]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x6db8]
mov byte [ebp - 4], 0x67
call fcn.00401d20
lea ecx, [ebp - 0x6db8]
call fcn.0053fe80
mov eax, dword [ebp - 0x6f44]
xor ecx, ecx
add eax, 0x314
mov byte [ebp - 4], 0x68
mov dword [ebp - 0x6f4c], ecx
mov dword [ebp - 0x6f40], eax
nop word [eax + eax]
mov edi, dword [ebp + ecx*4 - 0x6f98]
lea ecx, [ebp - 0x1f74]
push 0
push 0x20019
push edi
mov dword [ebp - 0x6f54], edi
call fcn.0053fdf0
test al, al
je 0x4787a0
lea eax, [ebp - 0x6cb4]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f6c], esi
call fcn.0053f740
test al, al
je 0x4787a0
nop dword [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x2120]
push 0x61d058
push edi
call fcn.00545560
push 0
push 0x20019
lea ecx, [ebp - 0x2120]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x22bc]
call fcn.0053fdf0
test al, al
je 0x478778
lea eax, [ebp - 0x6db8]
mov dword [ebp - 0x6f7c], 0
push eax
push 0
lea ecx, [ebp - 0x22bc]
call fcn.0053f740
test al, al
je 0x47841f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6db8]
lea ecx, [ebp - 0x2778]
push 0x61d058
push dword [ebp - 0x6cb4]
push 0x61d058
push edi
call fcn.00545560
push 0
push 0x20019
lea ecx, [ebp - 0x2778]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2408]
call fcn.0053fdf0
test al, al
je 0x4783f1
lea eax, [ebp - 0x20cc]
push eax
push 0x665618
lea ecx, [ebp - 0x2408]
call fcn.0053fb00
test al, al
je 0x4783f1
lea ecx, [ebp - 0x20cc]
call fcn.005451f0
test al, al
jne 0x4783f1
mov ecx, dword [ebp - 0x6f44]
push 0
lea ecx, [ecx + 0x14c]
call fcn.005454f0
push eax
push 0x65c7a4
lea ecx, [ebp - 0x20cc]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00470dc0
test al, al
jne 0x4783f1
push 0
push 1
push 1
push 0
push 0x665630
lea ecx, [ebp - 0x20cc]
call fcn.00543e30
test eax, eax
je 0x478151
push 0
push 1
push 1
push 0
push 0x665640
lea ecx, [ebp - 0x20cc]
call fcn.00543e30
test eax, eax
jne 0x4783f1
push 0
push 1
push 1
push 0
push 0x665650
lea ecx, [ebp - 0x20cc]
call fcn.00543e30
test eax, eax
je 0x47818d
push 0
push 1
push 1
push 0
push 0x66567c
lea ecx, [ebp - 0x20cc]
call fcn.00543e30
test eax, eax
jne 0x4783f1
push 0
push 1
push 1
push 0
push 0x6656a8
lea ecx, [ebp - 0x20cc]
call fcn.00543e30
test eax, eax
je 0x4781c9
push 0
push 1
push 1
push 0
push 0x6656e0
lea ecx, [ebp - 0x20cc]
call fcn.00543e30
test eax, eax
jne 0x4783f1
push 0
push 1
push 1
push 0
push 0x665718
lea ecx, [ebp - 0x20cc]
call fcn.00543e30
test eax, eax
je 0x478205
push 0
push 1
push 1
push 0
push 0x665744
lea ecx, [ebp - 0x20cc]
call fcn.00543e30
test eax, eax
jne 0x4783f1
push 0
push 1
push 1
push 0
push 0x66576c
lea ecx, [ebp - 0x20cc]
call fcn.00543e30
test eax, eax
je 0x478241
push 0
push 1
push 1
push 0
push 0x6657a4
lea ecx, [ebp - 0x20cc]
call fcn.00543e30
test eax, eax
jne 0x4783f1
xor edi, edi
lea ecx, [ebp - 0x20cc]
push edi
push 0x6657d8
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2864]
call fcn.00542450
lea ecx, [ebp - 0x2864]
xor esi, esi
call fcn.005425f0
test eax, eax
je 0x4782f9
push 1
push esi
lea ecx, [ebp - 0x2864]
call fcn.00542600
push eax
lea ecx, [ebp - 0x2710]
call fcn.005455c0
mov ecx, eax
call fcn.005451f0
test al, al
jne 0x4782e2
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x664d38
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2710]
call fcn.005438d0
lea ecx, [ebp - 0x2710]
call fcn.005454f0
xor edx, edx
mov ecx, eax
call fcn.0053cb60
test al, al
jne 0x4782f4
lea ecx, [ebp - 0x2864]
inc esi
call fcn.005425f0
cmp esi, eax
jb 0x478275
jmp 0x4782f9
mov edi, 1
push 0
push 0
push 0
push edi
lea ecx, [ebp - 0x2778]
call fcn.005454f0
push eax
push 0x65f370
lea ecx, [ebp - 0x20cc]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
mov eax, dword [ebp - 0x6f44]
push 0xffffffffffffffff
push 0xf
mov eax, dword [eax + 8]
push dword [eax + 0xa4]
call fcn.0049a0a0
mov esi, eax
cmp esi, 0xffffffff
je 0x4783eb
push 0
push 0
push 0
push 0
push 0
push 0x665618
push 0x65f370
push 0
lea ecx, [ebp - 0x2778]
call fcn.005454f0
push eax
push 0xf
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00499eb0
push 0
push 0
push 0
push 0x621874
test edi, edi
mov ecx, 0x66452c
mov eax, 0x6291c8
cmove eax, ecx
lea ecx, [ebp - 0x2778]
push eax
push 0x664544
push 0x6657e0
call fcn.005454f0
push eax
push 0x665818
push 0x66537c
lea ecx, [ebp - 0x20cc]
call fcn.005454f0
push eax
push 0x665280
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
mov edi, dword [ebp - 0x6f54]
mov eax, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x6db8]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x22bc]
mov dword [ebp - 0x6f7c], eax
call fcn.0053f740
test al, al
jne 0x478055
mov esi, dword [ebp - 0x6f6c]
lea eax, [ebp - 0x20cc]
push eax
push 0x665618
lea ecx, [ebp - 0x22bc]
call fcn.0053fb00
test al, al
je 0x478778
lea ecx, [ebp - 0x20cc]
call fcn.005451f0
test al, al
jne 0x478778
mov ecx, dword [ebp - 0x6f44]
push 0
lea ecx, [ecx + 0x14c]
call fcn.005454f0
push eax
push 0x65c7a4
lea ecx, [ebp - 0x20cc]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00470dc0
test al, al
jne 0x478778
push 0
push 1
push 1
push 0
push 0x665630
lea ecx, [ebp - 0x20cc]
call fcn.00543e30
test eax, eax
je 0x4784c5
push 0
push 1
push 1
push 0
push 0x665640
lea ecx, [ebp - 0x20cc]
call fcn.00543e30
test eax, eax
jne 0x478778
push 0
push 1
push 1
push 0
push 0x665650
lea ecx, [ebp - 0x20cc]
call fcn.00543e30
test eax, eax
je 0x478501
push 0
push 1
push 1
push 0
push 0x66567c
lea ecx, [ebp - 0x20cc]
call fcn.00543e30
test eax, eax
jne 0x478778
push 0
push 1
push 1
push 0
push 0x6656a8
lea ecx, [ebp - 0x20cc]
call fcn.00543e30
test eax, eax
je 0x47853d
push 0
push 1
push 1
push 0
push 0x6656e0
lea ecx, [ebp - 0x20cc]
call fcn.00543e30
test eax, eax
jne 0x478778
push 0
push 1
push 1
push 0
push 0x665718
lea ecx, [ebp - 0x20cc]
call fcn.00543e30
test eax, eax
je 0x478579
push 0
push 1
push 1
push 0
push 0x665744
lea ecx, [ebp - 0x20cc]
call fcn.00543e30
test eax, eax
jne 0x478778
push 0
push 1
push 1
push 0
push 0x66576c
lea ecx, [ebp - 0x20cc]
call fcn.00543e30
test eax, eax
je 0x4785b5
push 0
push 1
push 1
push 0
push 0x6657a4
lea ecx, [ebp - 0x20cc]
call fcn.00543e30
test eax, eax
jne 0x478778
push 0
push 0x6657d8
lea ecx, [ebp - 0x20cc]
mov dword [ebp - 0x6f48], 0
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2864]
call fcn.00542450
lea ecx, [ebp - 0x2864]
xor edi, edi
call fcn.005425f0
test eax, eax
je 0x47955a
push 1
push edi
lea ecx, [ebp - 0x2864]
call fcn.00542600
push eax
lea ecx, [ebp - 0x2710]
call fcn.005455c0
mov ecx, eax
call fcn.005451f0
test al, al
jne 0x478663
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x664d38
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2710]
call fcn.005438d0
lea ecx, [ebp - 0x2710]
call fcn.005454f0
xor edx, edx
mov ecx, eax
call fcn.0053cb60
test al, al
jne 0x479550
lea ecx, [ebp - 0x2864]
inc edi
call fcn.005425f0
cmp edi, eax
jb 0x4785f2
mov edi, dword [ebp - 0x6f48]
push 0
push 0
push 0
push edi
lea ecx, [ebp - 0x2120]
call fcn.005454f0
push eax
push 0x65f370
lea ecx, [ebp - 0x20cc]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
mov eax, dword [ebp - 0x6f44]
push 0xffffffffffffffff
push 0xf
mov eax, dword [eax + 8]
push dword [eax + 0xa4]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x478778
push 0
push 0
push 0
push 0
push 0
push 0x665618
push 0x65f370
push 0
lea ecx, [ebp - 0x2120]
call fcn.005454f0
push eax
push 0xf
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00499eb0
push 0
push 0
push 0
push 0x621874
test edi, edi
mov ecx, 0x66452c
mov eax, 0x6291c8
cmove eax, ecx
lea ecx, [ebp - 0x2120]
push eax
push 0x664544
push 0x6657e0
call fcn.005454f0
push eax
push 0x665818
push 0x66537c
lea ecx, [ebp - 0x20cc]
call fcn.005454f0
push eax
push 0x665280
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
lea eax, [ebp - 0x6cb4]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f6c], esi
call fcn.0053f740
mov edi, dword [ebp - 0x6f54]
test al, al
jne 0x477fe0
mov ecx, dword [ebp - 0x6f4c]
inc ecx
mov dword [ebp - 0x6f4c], ecx
cmp ecx, 2
jb 0x477f90
mov eax, dword [ebp - 0x6f44]
push 1
mov eax, dword [eax + 8]
push dword [eax + 0xa4]
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.005193f0
lea ecx, [ebp - 0x6db8]
call fcn.0053fe70
lea ecx, [ebp - 0x2778]
call fcn.00545790
lea ecx, [ebp - 0x2710]
call fcn.00545790
lea ecx, [ebp - 0x20cc]
call fcn.00545790
lea ecx, [ebp - 0x2408]
call fcn.0053fda0
lea ecx, [ebp - 0x22bc]
call fcn.0053fda0
lea ecx, [ebp - 0x2864]
call fcn.00542660
lea ecx, [ebp - 0x6cd4]
call fcn.00402c60
lea ecx, [ebp - 0x6cd8]
call fcn.00402c60
lea ecx, [ebp - 0x2198]
call fcn.00545790
lea ecx, [ebp - 0x2430]
call fcn.00545790
lea ecx, [ebp - 0x2b70]
call fcn.005380e0
lea ecx, [ebp - 0x255c]
call fcn.00545790
lea ecx, [ebp - 0x2314]
call fcn.00545790
lea ecx, [ebp - 0x21b4]
call fcn.00545790
lea ecx, [ebp - 0x27ec]
call fcn.00545790
lea ecx, [ebp - 0x23e0]
call fcn.00545790
lea ecx, [ebp - 0x209c]
mov byte [ebp - 4], 0x45
call fcn.00545790
mov eax, dword [ebp - 0x6f44]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65fc30
push 0x61d058
lea ecx, [eax + 0x140]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00545560
mov ecx, dword [ebp - 0x6f44]
call fcn.0046c9e0
mov edi, dword [ebp - 0x6f44]
test al, al
jne 0x47967b
test dword [edi + 0x34], 0x1000
jne 0x47967b
movsd xmm0, qword [edi + 0x378]
ucomisd xmm0, qword [0x6e32a8]
lahf
test ah, 0x44
jp 0x47967b
push 0
push 0x665840
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x665888
push dword [eax + 0x38]
call fcn.0051a750
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x26
push dword [eax + 0x34]
call fcn.005173e0
push 0xc
lea ecx, [ebp - 0x21f0]
call fcn.00401d20
lea ecx, [ebp - 0x21f0]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x28c4]
mov byte [ebp - 4], 0x69
call fcn.00401d20
lea ecx, [ebp - 0x28c4]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2568]
mov byte [ebp - 4], 0x6a
call fcn.00401d20
lea ecx, [ebp - 0x2568]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2680]
mov byte [ebp - 4], 0x6b
call fcn.00401d20
lea ecx, [ebp - 0x2680]
call fcn.00545940
push 0
push 0x6658c0
lea ecx, [ebp - 0x1fd4]
mov byte [ebp - 4], 0x6c
call fcn.00532850
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.005193f0
xor esi, esi
mov dword [ebp - 0x6f40], esi
cmp dword [edi + 0x30], esi
jbe 0x478c61
lea ecx, [edi + 0x104]
nop dword [eax + eax]
push esi
call fcn.004035f0
mov ecx, eax
call fcn.005451f0
test al, al
jne 0x478c4b
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x665900
push 0x6659a8
push esi
lea ecx, [edi + 0x104]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
push str.HKU_
lea ecx, [ebp - 0x21f0]
call fcn.00545560
push 0
push 0x20019
lea ecx, [ebp - 0x21f0]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x478c4b
xor esi, esi
nop dword [eax + eax]
lea eax, [ebp - 0x6cb4]
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0053f740
test al, al
je 0x478c3f
push 8
push 0
push 0x6227c4
push 0x665a40
push 1
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x2680]
call fcn.005455c0
mov ecx, eax
call fcn.00542a40
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x665a5c
lea ecx, [ebp - 0x2680]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x478c35
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x21f0]
push 0x61d058
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2568]
call fcn.00545560
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2568]
call fcn.005454f0
push eax
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2680]
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 4
push 0x18
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x478c35
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
push 0
lea ecx, [ebp - 0x2568]
call fcn.005454f0
push eax
push 0x18
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x665a90
push dword [ebp - 0x6cb4]
lea ecx, [edi + 0x114]
push 0x665acc
push dword [ebp - 0x6f40]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x2680]
call fcn.005454f0
push eax
push 0x665b00
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
inc esi
cmp esi, 2
jb 0x478a80
mov dword [ebp - 0x6f6c], esi
mov esi, dword [ebp - 0x6f40]
inc esi
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f40], esi
cmp esi, dword [edi + 0x30]
jb 0x478a00
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47964b
push 0
push 0x665b30
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x478fae
lea ecx, [edi + 0x104]
push esi
call fcn.004035f0
mov ecx, eax
call fcn.005451f0
test al, al
jne 0x478f9e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x665900
push 0x6659a8
push esi
lea ecx, [edi + 0x104]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
push str.HKU_
lea ecx, [ebp - 0x21f0]
call fcn.00545560
push 0
push 0x20019
lea ecx, [ebp - 0x21f0]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
lea eax, [ebp - 0x6cb4]
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.0053f740
test al, al
je 0x478e32
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x665cc0
push 0x65fed4
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x478f9e
push 0
push 0
push 0
push 0
push 0x665b88
push esi
lea ecx, [edi + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x65fed4
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x478f9e
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [edi + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
push 0
lea ecx, [ebp - 0x21f0]
call fcn.005454f0
push eax
push 0x1a
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x665a90
push 0x665b88
push 0x665cfc
push esi
lea ecx, [edi + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
push 0x6645a4
push 0x65fed4
push 0x665d14
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x665d40
push 0x6659a8
push esi
lea ecx, [edi + 0x104]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
push str.HKU_
lea ecx, [ebp - 0x21f0]
call fcn.00545560
lea ecx, [ebp - 0x21f0]
call fcn.005454f0
xor edx, edx
mov ecx, eax
call fcn.0053cb60
test al, al
je 0x478f9e
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x665cc0
push 0x660080
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x478f9e
push 0
push 0
push 0
push 0
push 0x665c30
push esi
lea ecx, [edi + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x660080
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x478f9e
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [edi + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
push 0
lea ecx, [ebp - 0x21f0]
call fcn.005454f0
push eax
push 0x1a
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x665a90
push 0x665c30
push 0x665cfc
push esi
lea ecx, [edi + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
push 0x6645a4
push 0x660080
push 0x665d14
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
inc esi
lea ecx, [edi + 0x104]
cmp esi, dword [edi + 0x30]
jb 0x478c93
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47964b
xor eax, eax
mov dword [ebp - 0x6f80], 0x65710c
mov dword [ebp - 0x6f7c], 0x657134
mov dword [ebp - 0x6f98], 0x66019c
mov dword [ebp - 0x6f94], 0x6602b0
mov dword [ebp - 0x6f58], 0x665de0
mov dword [ebp - 0x6f54], 0x665e68
mov dword [ebp - 0x6f40], eax
cmp dword [edi + 0x30], eax
jbe 0x4791fc
lea edx, [edi + 0x104]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x665ef8
push 0x665fa0
push 0x666038
push eax
mov ecx, edx
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
push str.HKU_
lea ecx, [ebp - 0x21f0]
call fcn.00545560
lea ecx, [ebp - 0x21f0]
call fcn.005454f0
xor edx, edx
mov ecx, eax
call fcn.0053cb60
test al, al
je 0x4791e0
xor esi, esi
nop dword [eax + eax]
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x4791da
lea ecx, [ebp - 0x21f0]
call fcn.005454f0
mov edx, dword [ebp + esi*4 - 0x6f80]
mov ecx, eax
call fcn.0053cb60
test al, al
je 0x4791d0
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x665cc0
push dword [ebp + esi*4 - 0x6f98]
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x4791d0
push 0
push 0
push 0
push 0
push dword [ebp + esi*4 - 0x6f58]
lea ecx, [edi + 0x114]
push dword [ebp - 0x6f40]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
push dword [ebp + esi*4 - 0x6f98]
mov eax, dword [edi + 8]
mov ecx, edi
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x4791d0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + esi*4 - 0x6f80]
lea ecx, [edi + 0x114]
push dword [ebp - 0x6f40]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
push 0
lea ecx, [ebp - 0x21f0]
call fcn.005454f0
push eax
push 0x1a
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x665a90
push dword [ebp + esi*4 - 0x6f58]
lea ecx, [edi + 0x114]
push 0x665cfc
push dword [ebp - 0x6f40]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
push 0x6645a4
push dword [ebp + esi*4 - 0x6f98]
lea ecx, [ebp - 0x1f80]
push 0x665d14
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
inc esi
cmp esi, 2
jb 0x479070
mov dword [ebp - 0x6f6c], esi
mov eax, dword [ebp - 0x6f40]
lea edx, [edi + 0x104]
inc eax
mov dword [ebp - 0x6f40], eax
cmp eax, dword [edi + 0x30]
jb 0x479010
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47964b
mov dword [ebp - 0x6f80], 0x657388
lea ecx, [edi + 0x14c]
mov dword [ebp - 0x6f7c], 0x6573a4
xor esi, esi
mov dword [ebp - 0x6f98], 0x6603dc
mov dword [ebp - 0x6f94], 0x660408
mov dword [ebp - 0x6f58], 0x6660d8
mov dword [ebp - 0x6f54], 0x666160
nop
push 0
call fcn.005454f0
push eax
push 0x665cc0
push dword [ebp + esi*4 - 0x6f98]
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x479385
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + esi*4 - 0x6f80]
lea ecx, [ebp - 0x25d8]
push 0x657320
call fcn.005454f0
push eax
lea ecx, [ebp - 0x21f0]
call fcn.00545560
lea ecx, [ebp - 0x21f0]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
je 0x479385
mov eax, dword [edi + 8]
mov ecx, edi
push 0
push 0
push 0
push 0
push dword [ebp + esi*4 - 0x6f58]
push 0x65f370
push dword [ebp + esi*4 - 0x6f98]
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x479385
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f370
lea ecx, [ebp - 0x21f0]
call fcn.005454f0
push eax
push 0
push 0x1a
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x665a90
push dword [ebp + esi*4 - 0x6f58]
lea ecx, [ebp - 0x1f80]
push 0x665cfc
push 0x66537c
push dword [ebp + esi*4 - 0x6f98]
push 0x665d14
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
inc esi
lea ecx, [edi + 0x14c]
cmp esi, 2
jb 0x479250
push 4
lea ecx, [ebp - 0x2364]
mov dword [ebp - 0x6f6c], esi
call fcn.00401d40
lea ecx, [ebp - 0x2364]
call fcn.0053fe60
push 4
lea ecx, [ebp - 0x240c]
mov byte [ebp - 4], 0x6d
call fcn.00401d40
lea ecx, [ebp - 0x240c]
call fcn.0053fe60
xor eax, eax
mov byte [ebp - 4], 0x6e
mov dword [ebp - 0x6f40], eax
cmp dword [edi + 0x30], eax
jbe 0x479622
lea edx, [edi + 0x104]
nop word [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666278
push 0x666300
push 0x666378
push eax
mov ecx, edx
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
push str.HKU_
lea ecx, [ebp - 0x21f0]
call fcn.00545560
push 0
push 0x20019
lea ecx, [ebp - 0x21f0]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2364]
call fcn.0053fdf0
test al, al
je 0x479606
lea eax, [ebp - 0x6cb4]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x2364]
mov dword [ebp - 0x6f6c], esi
call fcn.0053f740
test al, al
je 0x479606
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x66639c
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x21f0]
push 0x61d058
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2568]
call fcn.00545560
push 0
push 0x20019
lea ecx, [ebp - 0x2568]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x240c]
call fcn.0053fdf0
test al, al
je 0x479529
lea ecx, [ebp - 0x240c]
call fcn.0053f640
cmp eax, 2
jb 0x479529
push 0
push 0
push 0
push 0
push 0x6661f0
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x660618
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
jne 0x479561
lea eax, [ebp - 0x6cb4]
inc esi
push eax
push esi
lea ecx, [ebp - 0x2364]
mov dword [ebp - 0x6f6c], esi
call fcn.0053f740
test al, al
jne 0x479476
jmp 0x479606
mov edi, 1
jmp 0x47867d
xor edi, edi
jmp 0x47867d
mov esi, dword [ebp - 0x6f40]
lea ecx, [edi + 0x114]
push 0
push 0
push 0
push 0
push 0
push 0
push esi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
push 0
lea ecx, [ebp - 0x2568]
call fcn.005454f0
push eax
push 0x1a
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x665a90
push 0x6661f0
push 0x665cfc
push esi
lea ecx, [edi + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
push 0x6645a4
push 0x6663d8
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
mov eax, dword [ebp - 0x6f40]
lea edx, [edi + 0x104]
inc eax
mov dword [ebp - 0x6f40], eax
cmp eax, dword [edi + 0x30]
jb 0x4793f0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.005193f0
lea ecx, [ebp - 0x240c]
call fcn.0053fda0
lea ecx, [ebp - 0x2364]
call fcn.0053fda0
lea ecx, [ebp - 0x2680]
call fcn.00545790
lea ecx, [ebp - 0x2568]
call fcn.00545790
lea ecx, [ebp - 0x28c4]
call fcn.00545790
lea ecx, [ebp - 0x21f0]
mov byte [ebp - 4], 0x45
call fcn.00545790
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47bf16
test dword [edi + 0x34], 0x1000
jne 0x47bf16
push 0
push 0x666430
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x665888
push dword [eax + 0x38]
call fcn.0051a750
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x26
push dword [eax + 0x34]
call fcn.005173e0
push 0xc
lea ecx, [ebp - 0x20e4]
call fcn.00401d20
lea ecx, [ebp - 0x20e4]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2028]
mov byte [ebp - 4], 0x6f
call fcn.00401d20
lea ecx, [ebp - 0x2028]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x23d4]
mov byte [ebp - 4], 0x70
call fcn.00401d20
lea ecx, [ebp - 0x23d4]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2000]
mov byte [ebp - 4], 0x71
call fcn.00401d20
lea ecx, [ebp - 0x2000]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x22d8]
mov byte [ebp - 4], 0x72
call fcn.00401d20
lea ecx, [ebp - 0x22d8]
call fcn.00545940
push 0x24
lea ecx, [ebp - 0x2540]
mov byte [ebp - 4], 0x73
call fcn.00402080
lea ecx, [ebp - 0x2540]
call fcn.00513b80
mov byte [ebp - 4], 0x74
xor esi, esi
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
mov dword [ebp - 0x6f54], esi
push dword [eax + 0xa8]
call fcn.005193f0
push esi
push 0x666470
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov dword [ebp - 0x6f40], esi
cmp dword [edi + 0x30], esi
jbe 0x479dae
mov esi, dword [ebp - 0x6f70]
mov dword [ebp - 0x6f7c], esi
nop dword [eax]
lea ecx, [ebp - 0x22d8]
call fcn.005451f0
test al, al
je 0x47980c
lea eax, [ebp - 0x22d8]
push eax
push 1
lea ecx, [ebp - 0x2184]
call fcn.005454f0
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
mov edx, esi
mov ecx, eax
call fcn.004ecf90
mov esi, dword [ebp - 0x6f7c]
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x479da8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6664c0
lea ecx, [ebp - 0x2184]
call fcn.005454f0
push eax
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00545560
push 0x260
lea ecx, [ebp - 0x58b8]
call fcn.00401d70
push 1
lea ecx, [ebp - 0x20e4]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x58b8]
call fcn.004016d0
push 3
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x75
call fcn.00544180
lea ecx, [ebp - 0x58b8]
call fcn.00401810
test al, al
je 0x479d7a
nop
push 1
lea ecx, [ebp - 0x58b8]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2028]
call fcn.00545870
push 0x6664fc
lea ecx, [ebp - 0x2028]
call fcn.005457e0
test al, al
je 0x4798fe
push 0
push 1
push 1
push 0
push 0x66650c
lea ecx, [ebp - 0x2028]
call fcn.00543e30
cmp eax, 1
jne 0x479d67
inc dword [ebp - 0x6f54]
lea ecx, [ebp - 0x58b8]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666520
push 1
call fcn.00401870
push eax
lea ecx, [ebp - 0x20e4]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00545560
push 0x100
lea ecx, [ebp - 0x2028]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2540]
call fcn.00513940
test al, al
je 0x479d67
lea eax, [ebp - 0x2000]
push eax
push 0x622ccc
push 0x666548
lea ecx, [ebp - 0x2540]
call fcn.00513110
test eax, eax
je 0x479b28
push 0
push 1
push 1
push 0
push 0x66655c
lea ecx, [ebp - 0x2000]
call fcn.00543e30
test eax, eax
jne 0x479b28
push eax
push 1
push 1
push eax
push 0x66657c
lea ecx, [ebp - 0x2000]
call fcn.00543e30
test eax, eax
jne 0x479b28
push 0x666598
lea ecx, [ebp - 0x2000]
call fcn.00545820
test al, al
jne 0x479b28
push 0
push 1
push 1
push 0
push 0x6665b0
lea ecx, [ebp - 0x2000]
call fcn.00543e30
test eax, eax
jne 0x479b28
push eax
push 1
push 1
push eax
push 0x6665cc
lea ecx, [ebp - 0x2000]
call fcn.00543e30
test eax, eax
jne 0x479b28
push eax
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x6665e4
lea ecx, [ebp - 0x2000]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x479b28
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2000]
call fcn.005454f0
push eax
mov ecx, esi
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x666620
push 0
push 0x6f
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x479b28
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2028]
call fcn.005454f0
push eax
push 0x666548
push 0x6f
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666634
lea ecx, [ebp - 0x2028]
call fcn.005454f0
push eax
push 0x665cfc
mov ecx, esi
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x2000]
call fcn.005454f0
push eax
push 0x666668
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
lea eax, [ebp - 0x2a54]
mov dword [ebp - 0x6f2c], 0
push eax
push 0x622ccc
xorps xmm0, xmm0
lea ecx, [ebp - 0x2540]
push 0x666688
movups xmmword [ebp - 0x6f3c], xmm0
call fcn.00513210
test al, al
je 0x479d67
lea eax, [ebp - 0x2a54]
push eax
lea eax, [ebp - 0x6f3c]
push eax
lea ecx, [ebp - 0x2540]
call fcn.00512860
test al, al
je 0x479d67
lea eax, [ebp - 0x2000]
push eax
lea eax, [ebp - 0x6f3c]
push eax
lea ecx, [ebp - 0x2540]
call fcn.00512b70
test eax, eax
je 0x479d46
push 0
push 1
push 1
push 0
push 0x66655c
lea ecx, [ebp - 0x2000]
call fcn.00543e30
test eax, eax
jne 0x479d67
push eax
push 1
push 1
push eax
push 0x6666b4
lea ecx, [ebp - 0x2000]
call fcn.00543e30
test eax, eax
jne 0x479d67
push eax
push 1
push 1
push eax
push 0x66657c
lea ecx, [ebp - 0x2000]
call fcn.00543e30
test eax, eax
jne 0x479d67
push eax
push 1
push 1
push eax
push 0x6666d8
lea ecx, [ebp - 0x2000]
call fcn.00543e30
test eax, eax
jne 0x479d67
push eax
push 1
push 1
push eax
push 0x6665cc
lea ecx, [ebp - 0x2000]
call fcn.00543e30
test eax, eax
jne 0x479d67
push eax
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x6666f4
lea ecx, [ebp - 0x2000]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x479d46
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2000]
call fcn.005454f0
push eax
mov ecx, esi
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x666720
push 0
push 0x6f
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x479d46
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2028]
call fcn.005454f0
push eax
push 0x666688
push 0x6f
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666634
lea ecx, [ebp - 0x2028]
call fcn.005454f0
push eax
push 0x665cfc
mov ecx, esi
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x2000]
call fcn.005454f0
push eax
push 0x66673c
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
lea eax, [ebp - 0x2a54]
push eax
lea eax, [ebp - 0x6f3c]
push eax
lea ecx, [ebp - 0x2540]
call fcn.00512860
test al, al
jne 0x479b81
lea ecx, [ebp - 0x58b8]
call fcn.004017d0
test al, al
jne 0x4798b0
lea ecx, [ebp - 0x58b8]
mov byte [ebp - 4], 0x74
call fcn.00401720
mov eax, dword [ebp - 0x6f40]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f7c], esi
mov dword [ebp - 0x6f40], eax
cmp eax, dword [edi + 0x30]
jb 0x4797c0
mov esi, dword [ebp - 0x6f54]
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47bed0
test esi, esi
jne 0x479de6
lea ecx, [ebp - 0x22d8]
call fcn.005451f0
test al, al
je 0x479de6
push esi
push 0x666770
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
jmp 0x47bed0
push 0
push 0x6667c0
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f54], 0
jbe 0x47a180
mov esi, dword [ebp - 0x6f70]
mov dword [ebp - 0x6f40], esi
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47a180
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6664c0
lea ecx, [ebp - 0x2184]
call fcn.005454f0
push eax
push dword [ebp - 0x6f54]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00545560
push 0x260
lea ecx, [ebp - 0x4cd8]
call fcn.00401d70
push 1
lea ecx, [ebp - 0x20e4]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x4cd8]
call fcn.004016d0
push 3
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x76
call fcn.00544180
lea ecx, [ebp - 0x4cd8]
call fcn.00401810
test al, al
je 0x47a152
nop dword [eax + eax]
push 1
lea ecx, [ebp - 0x4cd8]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2028]
call fcn.00545870
push 0x6664fc
lea ecx, [ebp - 0x2028]
call fcn.005457e0
test al, al
je 0x479f0e
push 0
push 1
push 1
push 0
push 0x66650c
lea ecx, [ebp - 0x2028]
call fcn.00543e30
cmp eax, 1
jne 0x47a13f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666520
push 1
lea ecx, [ebp - 0x4cd8]
call fcn.00401870
push eax
lea ecx, [ebp - 0x20e4]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00545560
push 0x100
lea ecx, [ebp - 0x2028]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2540]
call fcn.00513940
test al, al
je 0x47a13f
lea eax, [ebp - 0x2000]
push eax
push 0x622ccc
push 0x666800
lea ecx, [ebp - 0x2540]
call fcn.00513110
test eax, eax
je 0x47a13f
push 0
push 1
push 1
push 0
push 0x66655c
lea ecx, [ebp - 0x2000]
call fcn.00543e30
test eax, eax
jne 0x47a13f
push eax
push 1
push 1
push eax
push 0x6666b4
lea ecx, [ebp - 0x2000]
call fcn.00543e30
test eax, eax
jne 0x47a13f
push eax
push 1
push 1
push eax
push 0x66657c
lea ecx, [ebp - 0x2000]
call fcn.00543e30
test eax, eax
jne 0x47a13f
push eax
push 1
push 1
push eax
push 0x6666d8
lea ecx, [ebp - 0x2000]
call fcn.00543e30
test eax, eax
jne 0x47a13f
push eax
push 1
push 1
push eax
push 0x6665cc
lea ecx, [ebp - 0x2000]
call fcn.00543e30
test eax, eax
jne 0x47a13f
push eax
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x666870
lea ecx, [ebp - 0x2000]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x47a13f
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2000]
call fcn.005454f0
push eax
mov ecx, esi
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6668b0
push 0
push 0x70
push dword [eax + 0xa8]
call fcn.0049a0a0
mov esi, eax
cmp esi, 0xffffffff
je 0x47a139
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2028]
call fcn.005454f0
push eax
push 0x6668e0
push 0x70
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666634
lea ecx, [ebp - 0x2028]
call fcn.005454f0
mov esi, dword [ebp - 0x6f40]
mov ecx, esi
push eax
push 0x665cfc
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x2000]
call fcn.005454f0
push eax
push 0x666940
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
jmp 0x47a13f
mov esi, dword [ebp - 0x6f40]
lea ecx, [ebp - 0x4cd8]
call fcn.004017d0
test al, al
jne 0x479ec0
lea ecx, [ebp - 0x4cd8]
mov byte [ebp - 4], 0x74
call fcn.00401720
mov eax, dword [ebp - 0x6f54]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f54], eax
cmp eax, dword [edi + 0x30]
jb 0x479e18
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47bed0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666988
lea ecx, [edi + 0x314]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00545560
push 0
push 0x6669e0
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f54], 0
jbe 0x47a7b1
mov esi, dword [ebp - 0x6f70]
mov dword [ebp - 0x6f40], esi
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47a7b1
push 0xc
lea ecx, [ebp - 0x2734]
call fcn.00401d20
lea ecx, [ebp - 0x2734]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x276c]
mov byte [ebp - 4], 0x77
call fcn.00401d20
lea ecx, [ebp - 0x276c]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2728]
mov byte [ebp - 4], 0x78
call fcn.00401d20
lea ecx, [ebp - 0x2728]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x268c]
mov byte [ebp - 4], 0x79
call fcn.00401d20
lea ecx, [ebp - 0x268c]
call fcn.00545940
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6664c0
lea ecx, [ebp - 0x2184]
mov byte [ebp - 4], 0x7a
call fcn.005454f0
push eax
push dword [ebp - 0x6f54]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00545560
push 0x260
lea ecx, [ebp - 0x4818]
call fcn.00401d70
push 1
lea ecx, [ebp - 0x20e4]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x4818]
call fcn.004016d0
push 3
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x7b
call fcn.00544180
lea ecx, [ebp - 0x4818]
call fcn.00401810
test al, al
je 0x47a757
nop dword [eax]
nop dword [eax + eax]
push 1
lea ecx, [ebp - 0x4818]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2028]
call fcn.00545870
push 0x6664fc
lea ecx, [ebp - 0x2028]
call fcn.005457e0
test al, al
je 0x47a35e
push 0
push 1
push 1
push 0
push 0x66650c
lea ecx, [ebp - 0x2028]
call fcn.00543e30
cmp eax, 1
jne 0x47a744
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666520
push 1
lea ecx, [ebp - 0x4818]
call fcn.00401870
push eax
lea ecx, [ebp - 0x20e4]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00545560
push 0x100
lea ecx, [ebp - 0x2028]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2540]
call fcn.00513940
test al, al
je 0x47a744
lea eax, [ebp - 0x2a68]
mov dword [ebp - 0x6ec8], 0
push eax
push 0x622ccc
xorps xmm0, xmm0
lea ecx, [ebp - 0x2540]
push 0x666a14
movups xmmword [ebp - 0x6ed8], xmm0
call fcn.00513210
test al, al
je 0x47a744
lea eax, [ebp - 0x2a68]
push eax
lea eax, [ebp - 0x6ed8]
push eax
lea ecx, [ebp - 0x2540]
call fcn.00512c30
test al, al
je 0x47a744
nop word [eax + eax]
lea eax, [ebp - 0x2734]
push eax
lea eax, [ebp - 0x6ed8]
push eax
lea ecx, [ebp - 0x2540]
call fcn.005131d0
test al, al
je 0x47a723
lea ecx, [ebp - 0x2734]
call fcn.005454f0
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.005454f0
mov edx, esi
mov ecx, eax
call fcn.0053cb60
test al, al
jne 0x47a71d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666a40
lea ecx, [ebp - 0x2734]
call fcn.005454f0
push eax
push 0x666a64
lea ecx, [ebp - 0x2728]
call fcn.00545560
lea eax, [ebp - 0x276c]
push eax
push 0x622ccc
lea ecx, [ebp - 0x2728]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2540]
call fcn.00513110
test eax, eax
je 0x47a71d
lea ecx, [ebp - 0x276c]
call fcn.005454f0
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.005454f0
mov edx, esi
mov ecx, eax
call fcn.0053cb60
test al, al
jne 0x47a71d
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x665a5c
lea ecx, [ebp - 0x276c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x47a71d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666a94
lea ecx, [ebp - 0x2734]
call fcn.005454f0
push eax
push 0x666a64
lea ecx, [ebp - 0x2728]
call fcn.00545560
lea eax, [ebp - 0x268c]
push eax
push 0x622ccc
lea ecx, [ebp - 0x2728]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2540]
call fcn.00513110
test eax, eax
je 0x47a5c8
push 0
push 1
push 1
push 5
push 0x61e398
lea ecx, [ebp - 0x268c]
call fcn.00543e30
test eax, eax
jne 0x47a5c8
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x666aa4
push 1
lea ecx, [ebp - 0x4818]
call fcn.00401870
push eax
lea ecx, [ebp - 0x20e4]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x268c]
call fcn.005438d0
lea ecx, [ebp - 0x268c]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
je 0x47a71d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2734]
call fcn.005454f0
push eax
push 0x666a64
lea ecx, [ebp - 0x2728]
call fcn.00545560
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x268c]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x276c]
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0
push 0x71
push dword [eax + 0xa8]
call fcn.0049a0a0
mov esi, eax
cmp esi, 0xffffffff
je 0x47a71d
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x268c]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2028]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2728]
call fcn.005454f0
push eax
push 0x71
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0x666634
lea ecx, [ebp - 0x268c]
call fcn.005454f0
mov esi, dword [ebp - 0x6f40]
mov ecx, esi
push eax
push 0x6652d8
call fcn.005454f0
push eax
push 0x666ac0
lea ecx, [ebp - 0x2734]
call fcn.005454f0
push eax
push 0x6264dc
lea ecx, [ebp - 0x276c]
call fcn.005454f0
push eax
push 0x666ae4
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
jmp 0x47a723
mov esi, dword [ebp - 0x6f40]
lea eax, [ebp - 0x2a68]
push eax
lea eax, [ebp - 0x6ed8]
push eax
lea ecx, [ebp - 0x2540]
call fcn.00512c30
test al, al
jne 0x47a420
lea ecx, [ebp - 0x4818]
call fcn.004017d0
test al, al
jne 0x47a310
lea ecx, [ebp - 0x4818]
call fcn.00401720
lea ecx, [ebp - 0x268c]
call fcn.00545790
lea ecx, [ebp - 0x2728]
call fcn.00545790
lea ecx, [ebp - 0x276c]
call fcn.00545790
lea ecx, [ebp - 0x2734]
mov byte [ebp - 4], 0x74
call fcn.00545790
mov eax, dword [ebp - 0x6f54]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f54], eax
cmp eax, dword [edi + 0x30]
jb 0x47a1f1
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47bed0
push 0
push 0x666b10
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x6d9c]
push 1
push 0
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6da4], eax
mov dword [ebp - 0x6da0], 0x72
call fcn.005458d0
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0x7c
call fcn.005454f0
lea ecx, [edi + 0x14c]
mov dword [ebp - 0x6d90], eax
mov dword [ebp - 0x6d8c], 0
call fcn.005454f0
mov dword [ebp - 0x6d88], eax
lea ecx, [ebp - 0x6d7c]
lea eax, [ebp - 0x1fd4]
push 1
mov dword [ebp - 0x6d84], eax
mov eax, dword [edi + 4]
push 0x666b60
mov dword [ebp - 0x6d80], eax
call fcn.005458d0
push 0xc
lea ecx, [ebp - 0x224c]
mov byte [ebp - 4], 0x7d
call fcn.00401d20
lea ecx, [ebp - 0x224c]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2234]
mov byte [ebp - 4], 0x7e
call fcn.00401d20
lea ecx, [ebp - 0x2234]
call fcn.00545940
mov ecx, edi
mov byte [ebp - 4], 0x7f
call fcn.0046c9e0
test al, al
jne 0x47beaf
xor esi, esi
mov dword [ebp - 0x6f40], esi
cmp dword [edi + 0x30], esi
jbe 0x47aa47
nop dword [eax]
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47aa47
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00545700
cmp eax, 3
jl 0x47aa37
lea eax, [ebp - 0x6d9c]
push eax
push 1
lea ecx, [ebp - 0x2184]
call fcn.005454f0
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
mov edx, esi
mov ecx, eax
call fcn.004ecf90
mov esi, dword [ebp - 0x6f40]
test al, al
je 0x47aa37
push esi
lea ecx, [edi + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24c8]
mov dword [ebp - 0x6d8c], eax
call fcn.005454f0
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x224c]
call fcn.00545560
lea ecx, [ebp - 0x224c]
call fcn.005454f0
mov ecx, eax
call fcn.00530270
test al, al
je 0x47aa37
lea ecx, [ebp - 0x224c]
call fcn.005454f0
push eax
lea eax, [ebp - 0x6da4]
mov ecx, edi
push eax
call fcn.0048d880
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47aa47
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25e4]
call fcn.005454f0
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x224c]
call fcn.00545560
lea ecx, [ebp - 0x224c]
call fcn.005454f0
mov ecx, eax
call fcn.00530270
test al, al
je 0x47aa37
push 0
lea ecx, [ebp - 0x224c]
call fcn.00545210
lea ecx, [ebp - 0x224c]
call fcn.005454f0
push eax
lea eax, [ebp - 0x6da4]
mov ecx, edi
push eax
call fcn.0048d880
inc esi
mov dword [ebp - 0x6f40], esi
cmp esi, dword [edi + 0x30]
jb 0x47a8b0
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47beaf
lea ecx, [ebp - 0x2638]
mov dword [ebp - 0x6d8c], 0x65f370
call fcn.005454f0
push eax
lea eax, [ebp - 0x6da4]
mov ecx, edi
push eax
call fcn.0048d880
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47beaf
lea eax, [ebp - 0x2644]
push eax
lea ecx, [ebp - 0x224c]
call fcn.00545840
push 0
lea ecx, [ebp - 0x224c]
call fcn.00545210
lea ecx, [ebp - 0x224c]
call fcn.005454f0
push eax
lea eax, [ebp - 0x6da4]
mov ecx, edi
push eax
call fcn.0048d880
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47beaf
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x47ab3a
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666b80
push esi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00545560
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x47aaf0
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666c10
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00545560
cmp dword [ebp - 0x6fa8], 0
je 0x47aba1
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x666c10
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00545560
cmp dword [ebp - 0x6f74], 0
mov dword [ebp - 0x6f54], 0
jbe 0x47adac
mov eax, dword [ebp - 0x6f68]
mov esi, dword [ebp - 0x6f70]
sub eax, esi
mov dword [ebp - 0x6f7c], eax
nop dword [eax]
push 0
push 0x20019
lea ecx, [eax + esi]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x47ad8a
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47adac
lea eax, [ebp - 0x2234]
push eax
push 0x61d060
lea ecx, [ebp - 0x1f74]
call fcn.0053fb00
test al, al
je 0x47ad8a
push 0
push 1
push 1
push 0
push 0x666c9c
lea ecx, [ebp - 0x2234]
call fcn.00543e30
lea ecx, [ebp - 0x2234]
mov dword [ebp - 0x6f48], eax
call fcn.00545700
mov edx, dword [ebp - 0x6f48]
lea ecx, [edx + 0xa]
cmp eax, ecx
jle 0x47ad8a
lea eax, [edx + 0xb]
push eax
lea ecx, [ebp - 0x2234]
call fcn.00544110
push 3
lea ecx, [ebp - 0x2234]
call fcn.005434c0
lea ecx, [ebp - 0x2234]
call fcn.005451f0
test al, al
jne 0x47ad8a
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x664434
lea ecx, [ebp - 0x2234]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x47ad8a
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2234]
call fcn.005454f0
push eax
mov ecx, esi
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6609f0
push 0
push 0x72
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x47ad8a
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.005454f0
mov ecx, dword [ebp - 0x6f7c]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.005454f0
push eax
push 0x72
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666634
mov ecx, esi
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x2234]
call fcn.005454f0
push eax
push 0x666cb8
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
mov eax, dword [ebp - 0x6f54]
add esi, 0xc
inc eax
cmp eax, dword [ebp - 0x6f74]
mov dword [ebp - 0x6f54], eax
mov eax, dword [ebp - 0x6f7c]
jb 0x47abd0
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47beaf
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x47ae20
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666d10
push esi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00545560
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x47add6
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666d58
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00545560
cmp dword [ebp - 0x6fa8], 0
je 0x47ae87
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x666d58
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00545560
push 0
push 0x666da0
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov esi, dword [ebp - 0x6f74]
mov dword [ebp - 0x6f7c], 0
test esi, esi
je 0x47b0e4
mov eax, dword [ebp - 0x6f68]
mov esi, dword [ebp - 0x6f70]
sub eax, esi
mov dword [ebp - 0x6f54], eax
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47b0de
mov ecx, dword [ebp - 0x6f54]
push 0
push 0x20019
lea ecx, [ecx + esi]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
lea eax, [ebp - 0x2000]
push eax
push 0x660ba4
lea ecx, [ebp - 0x1f74]
call fcn.0053fb00
test al, al
je 0x47b0c2
lea eax, [ebp - 0x21a8]
mov dword [ebp - 0x21a8], 0
push eax
push 0x660c44
lea ecx, [ebp - 0x1f74]
call fcn.0053fa70
test al, al
je 0x47af46
cmp dword [ebp - 0x21a8], 0
jne 0x47b0c2
push 0
push 1
push 1
push 0
push 0x66655c
lea ecx, [ebp - 0x2000]
call fcn.00543e30
test eax, eax
jne 0x47b0c2
push eax
push 1
push 1
push eax
push 0x66657c
lea ecx, [ebp - 0x2000]
call fcn.00543e30
test eax, eax
jne 0x47b0c2
push eax
push 1
push 1
push eax
push 0x6665cc
lea ecx, [ebp - 0x2000]
call fcn.00543e30
test eax, eax
jne 0x47b0c2
push eax
push 1
push 1
push eax
push 0x6665b0
lea ecx, [ebp - 0x2000]
call fcn.00543e30
test eax, eax
jne 0x47b0c2
push eax
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x666de0
lea ecx, [ebp - 0x2000]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x47b0c2
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2000]
call fcn.005454f0
push eax
mov ecx, esi
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x660ba4
push 0
push 0x74
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x47b0c2
push 0
push 0
push 0
push 0
push 0
push 0x660ba4
mov ecx, esi
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.005454f0
push eax
push 0x74
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666634
mov ecx, esi
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x2000]
call fcn.005454f0
push eax
push 0x666e20
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f7c], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x47aec5
mov esi, dword [ebp - 0x6f74]
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47beaf
push 0xc
lea ecx, [ebp - 0x2698]
call fcn.00401d20
lea ecx, [ebp - 0x2698]
call fcn.00545940
mov byte [ebp - 4], 0x80
mov dword [ebp - 0x6f7c], 0
test esi, esi
je 0x47b3bd
mov eax, dword [ebp - 0x6f68]
mov esi, dword [ebp - 0x6f70]
sub eax, esi
mov dword [ebp - 0x6f54], eax
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47b3b7
mov ecx, dword [ebp - 0x6f54]
push 0
push 0x20019
lea ecx, [ecx + esi]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
lea eax, [ebp - 0x2000]
push eax
push 0x660ce4
lea ecx, [ebp - 0x1f74]
call fcn.0053fb00
test al, al
je 0x47b39b
lea eax, [ebp - 0x21a8]
mov dword [ebp - 0x21a8], 0
push eax
push 0x660de4
lea ecx, [ebp - 0x1f74]
call fcn.0053fa70
test al, al
je 0x47b1b6
cmp dword [ebp - 0x21a8], 0
je 0x47b39b
push 0
push 1
push 1
push 0
push 0x66655c
lea ecx, [ebp - 0x2000]
call fcn.00543e30
test eax, eax
jne 0x47b39b
push eax
push 1
push 1
push eax
push 0x66657c
lea ecx, [ebp - 0x2000]
call fcn.00543e30
test eax, eax
jne 0x47b39b
push eax
push 1
push 1
push eax
push 0x6665cc
lea ecx, [ebp - 0x2000]
call fcn.00543e30
test eax, eax
jne 0x47b39b
push eax
push 1
push 1
push eax
push 0x6665b0
lea ecx, [ebp - 0x2000]
call fcn.00543e30
test eax, eax
jne 0x47b39b
push eax
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x666de0
lea ecx, [ebp - 0x2000]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x47b39b
lea eax, [ebp - 0x2698]
push eax
push 0x660db0
lea ecx, [ebp - 0x1f74]
call fcn.0053fb00
test al, al
je 0x47b39b
lea ecx, [ebp - 0x2698]
call fcn.005451f0
test al, al
jne 0x47b39b
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666e70
lea ecx, [ebp - 0x2698]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2234]
call fcn.00545560
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2000]
call fcn.005454f0
push eax
mov ecx, esi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2234]
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0
push 0x74
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x47b39b
push 0
push 0
push 0
push 0
push 0
push 0x660ce4
mov ecx, esi
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.005454f0
push eax
push 0x74
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666634
mov ecx, esi
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x2000]
call fcn.005454f0
push eax
push 0x666e98
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f7c], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x47b135
mov esi, dword [ebp - 0x6f74]
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47bea4
mov dword [ebp - 0x6f7c], 0
test esi, esi
je 0x47b64c
mov esi, dword [ebp - 0x6f70]
mov eax, dword [ebp - 0x6f68]
sub eax, esi
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f48], eax
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47b64c
mov eax, dword [ebp - 0x6f48]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f54], eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x47b62a
lea eax, [ebp - 0x21a8]
mov dword [ebp - 0x21a8], 0
push eax
push 0x666ef8
lea ecx, [ebp - 0x1f74]
call fcn.0053fa70
test al, al
je 0x47b62a
cmp dword [ebp - 0x21a8], 4
jne 0x47b62a
mov ecx, dword [ebp - 0x6f54]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666f1c
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00545560
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x47b62a
lea eax, [ebp - 0x6cb4]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f6c], esi
call fcn.0053f6a0
test al, al
je 0x47b624
nop word [eax + eax]
lea eax, [ebp - 0x2000]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f74]
call fcn.0053fb00
test al, al
je 0x47b602
lea ecx, [ebp - 0x2000]
call fcn.005451f0
test al, al
jne 0x47b602
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2000]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x660fa0
push 0
push 0x74
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f94], eax
cmp eax, 0xffffffff
je 0x47b602
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push 0
call fcn.005454f0
push eax
push 0x74
push dword [ebp - 0x6f94]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666634
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x2000]
call fcn.005454f0
push eax
push 0x666f48
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
lea eax, [ebp - 0x6cb4]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0053f6a0
test al, al
jne 0x47b4f0
mov dword [ebp - 0x6f6c], esi
mov esi, dword [ebp - 0x6f40]
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f7c], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x47b3f8
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47bea4
push 0
push 0x666f90
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f54], 0
jbe 0x47ba5d
mov esi, dword [ebp - 0x6f70]
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47ba5d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6664c0
lea ecx, [ebp - 0x2184]
call fcn.005454f0
push eax
push dword [ebp - 0x6f54]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00545560
push 0x260
lea ecx, [ebp - 0x3c38]
call fcn.00401d70
push 1
lea ecx, [ebp - 0x20e4]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x3c38]
call fcn.004016d0
push 3
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x81
call fcn.00544180
lea ecx, [ebp - 0x3c38]
call fcn.00401810
test al, al
je 0x47ba35
nop word [eax + eax]
push 1
lea ecx, [ebp - 0x3c38]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2028]
call fcn.00545870
push 0x6664fc
lea ecx, [ebp - 0x2028]
call fcn.005457e0
test al, al
je 0x47b77e
push 0
push 1
push 1
push 0
push 0x66650c
lea ecx, [ebp - 0x2028]
call fcn.00543e30
cmp eax, 1
jne 0x47ba22
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666520
push 1
lea ecx, [ebp - 0x3c38]
call fcn.00401870
push eax
lea ecx, [ebp - 0x20e4]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00545560
lea ecx, [ebp - 0x2028]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
je 0x47b8d0
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x665cc0
push 0x6610a4
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x47b8d0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2028]
call fcn.005454f0
push eax
mov ecx, esi
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6610a4
push 0
push 0x73
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x47ba22
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2028]
call fcn.005454f0
push eax
push 0
push 0x73
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666fc8
lea ecx, [ebp - 0x2028]
call fcn.005454f0
push eax
push 0x665cfc
mov ecx, esi
call fcn.005454f0
push eax
push 0x6645a4
push 0x6610a4
push 0x667000
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x665cc0
push 0x6611a0
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x47ba22
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667024
push 1
lea ecx, [ebp - 0x3c38]
call fcn.00401870
push eax
lea ecx, [ebp - 0x20e4]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00545560
lea ecx, [ebp - 0x2028]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
je 0x47ba22
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2028]
call fcn.005454f0
push eax
mov ecx, esi
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6611a0
push 0
push 0x73
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x47ba22
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2028]
call fcn.005454f0
push eax
push 0
push 0x73
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666fc8
lea ecx, [ebp - 0x2028]
call fcn.005454f0
push eax
push 0x665cfc
mov ecx, esi
call fcn.005454f0
push eax
push 0x6645a4
push 0x6611a0
push 0x667000
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
lea ecx, [ebp - 0x3c38]
call fcn.004017d0
test al, al
jne 0x47b730
lea ecx, [ebp - 0x3c38]
mov byte [ebp - 4], 0x80
call fcn.00401720
mov eax, dword [ebp - 0x6f54]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f54], eax
cmp eax, dword [edi + 0x30]
jb 0x47b687
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47bea4
lea eax, [ebp - 0x22d8]
push eax
lea ecx, [ebp - 0x2028]
call fcn.00545840
push 1
lea ecx, [ebp - 0x2028]
call fcn.00545210
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667040
lea ecx, [ebp - 0x2028]
call fcn.00543b40
lea ecx, [ebp - 0x2028]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
je 0x47bc54
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x665cc0
push 0x661270
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x47bc54
push 0
lea ecx, [ebp - 0x2028]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2540]
call fcn.00513940
test al, al
je 0x47bc54
lea eax, [ebp - 0x29f4]
push eax
push 0x622ccc
push 0x666548
lea ecx, [ebp - 0x2540]
call fcn.00513210
test al, al
jne 0x47bb97
lea eax, [ebp - 0x29f4]
push eax
push 0x622ccc
push 0x666688
lea ecx, [ebp - 0x2540]
call fcn.00513210
test al, al
jne 0x47bb97
lea eax, [ebp - 0x29f4]
push eax
push 0x622ccc
push 0x660828
lea ecx, [ebp - 0x2540]
call fcn.00513210
test al, al
jne 0x47bb97
lea eax, [ebp - 0x29f4]
push eax
push 0x622ccc
push 0x666a14
lea ecx, [ebp - 0x2540]
call fcn.00513210
test al, al
je 0x47bc54
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2028]
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x65f370
push 0x661270
push 0
push 0x73
push dword [eax + 0xa8]
call fcn.0049a0a0
mov esi, eax
cmp esi, 0xffffffff
je 0x47bc54
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f370
lea ecx, [ebp - 0x2028]
call fcn.005454f0
push eax
push 0
push 0x73
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666634
lea ecx, [ebp - 0x2028]
call fcn.005454f0
push eax
push 0x665cfc
push 0x66537c
push 0x667068
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x665cc0
push 0x661370
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x47bea4
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x47bce0
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666d10
push esi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00545560
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x47bc96
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666d10
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00545560
cmp dword [ebp - 0x6fa8], 0
je 0x47bd47
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x666d10
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00545560
cmp dword [ebp - 0x6f74], 0
mov dword [ebp - 0x6f7c], 0
jbe 0x47be91
mov eax, dword [ebp - 0x6f70]
sub eax, esi
mov dword [ebp - 0x6f54], eax
nop dword [eax]
mov ecx, esi
call fcn.005454f0
xor edx, edx
mov ecx, eax
call fcn.0053cb60
test al, al
je 0x47be75
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47be91
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
lea ecx, [ecx + esi]
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x661370
push 0
push 0x73
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x47be75
mov ecx, dword [ebp - 0x6f54]
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ecx + esi]
call fcn.005454f0
push eax
push 0
mov ecx, esi
call fcn.005454f0
push eax
push 0x73
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666fc8
mov ecx, esi
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x665cfc
lea ecx, [ecx + esi]
call fcn.005454f0
push eax
push 0x6645a4
push 0x661370
push 0x667000
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f7c], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x47bd70
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.005193f0
lea ecx, [ebp - 0x2698]
call fcn.00545790
lea ecx, [ebp - 0x2234]
call fcn.00545790
lea ecx, [ebp - 0x224c]
call fcn.00545790
lea ecx, [ebp - 0x6da4]
call fcn.00402710
lea ecx, [ebp - 0x2540]
call fcn.00401e40
lea ecx, [ebp - 0x22d8]
call fcn.00545790
lea ecx, [ebp - 0x2000]
call fcn.00545790
lea ecx, [ebp - 0x23d4]
call fcn.00545790
lea ecx, [ebp - 0x2028]
call fcn.00545790
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x45
call fcn.00545790
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47f34d
test dword [edi + 0x34], 0x1000
jne 0x47f34d
push 0
push 0x6670c0
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x667100
push dword [eax + 0x38]
call fcn.0051a750
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x28
push dword [eax + 0x34]
call fcn.005173e0
mov eax, dword [edi + 0x30]
xor esi, esi
mov dword [ebp - 0x6fe8], 0x66713c
mov dword [ebp - 0x6fe4], 0x66714c
mov dword [ebp - 0x6fe0], 0x66715c
mov dword [ebp - 0x6fdc], 0x667174
mov dword [ebp - 0x6fd8], 0x667188
mov dword [ebp - 0x6fd4], 0x645d60
mov dword [ebp - 0x6fd0], 0x666598
mov dword [ebp - 0x6fcc], 0x6665cc
mov dword [ebp - 0x6fc4], 0x66143c
mov dword [ebp - 0x6fc0], 0x661478
mov dword [ebp - 0x6fbc], 0x661460
mov dword [ebp - 0x6fb8], 0x645d48
mov dword [ebp - 0x6fb4], 0x6614fc
mov dword [ebp - 0x6fb0], 0x66157c
test eax, eax
je 0x47c05a
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x645cf0
push esi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00545560
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x47c010
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6671a0
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00545560
cmp dword [ebp - 0x6fa8], 0
je 0x47c0c1
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x6671a0
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00545560
push 0xc
lea ecx, [ebp - 0x2010]
call fcn.00401d20
lea ecx, [ebp - 0x2010]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2398]
mov byte [ebp - 4], 0x82
call fcn.00401d20
lea ecx, [ebp - 0x2398]
call fcn.00545940
mov byte [ebp - 4], 0x83
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.005193f0
push 0
push 0x667200
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov esi, dword [ebp - 0x6f74]
mov dword [ebp - 0x6f7c], 0
test esi, esi
je 0x47c368
mov esi, dword [ebp - 0x6f70]
mov eax, dword [ebp - 0x6f68]
sub eax, esi
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f48], eax
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47c362
mov eax, dword [ebp - 0x6f48]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f94], eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x47c340
xor esi, esi
lea eax, [ebp - 0x2010]
push eax
push dword [ebp + esi*4 - 0x6fc4]
lea ecx, [ebp - 0x1f74]
call fcn.0053fb00
test al, al
je 0x47c32a
lea ecx, [ebp - 0x2010]
call fcn.005451f0
test al, al
jne 0x47c32a
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x66725c
lea ecx, [ebp - 0x2010]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x47c32a
xor eax, eax
mov dword [ebp - 0x6f54], eax
nop dword [eax + eax]
push 0
push 1
push 1
push 0
push dword [ebp + eax*4 - 0x6fe8]
lea ecx, [ebp - 0x2010]
call fcn.00543e30
dec eax
cmp eax, 0x10
jbe 0x47c32a
mov eax, dword [ebp - 0x6f54]
inc eax
mov dword [ebp - 0x6f54], eax
cmp eax, 8
jb 0x47c200
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.005454f0
push eax
push dword [ebp + esi*4 - 0x6fc4]
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x1f
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f54], eax
cmp eax, 0xffffffff
je 0x47c32a
push 0
push 0
push 0
lea ecx, [ebp - 0x2010]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
push dword [ebp + esi*4 - 0x6fc4]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f94]
push eax
push 0
call fcn.005454f0
push eax
push 0x1f
push dword [ebp - 0x6f54]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666634
lea ecx, [ebp - 0x2010]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x667280
call fcn.005454f0
push eax
push 0x6645a4
push dword [ebp + esi*4 - 0x6fc4]
lea ecx, [ebp - 0x1f80]
push 0x665280
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
inc esi
cmp esi, 6
jb 0x47c191
mov dword [ebp - 0x6f6c], esi
mov esi, dword [ebp - 0x6f40]
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f7c], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x47c150
mov esi, dword [ebp - 0x6f74]
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47f333
push 0x18
lea ecx, [ebp - 0x265c]
call fcn.00401d50
lea ecx, [ebp - 0x265c]
call fcn.00542700
mov byte [ebp - 4], 0x84
mov dword [ebp - 0x6f4c], 0
test esi, esi
je 0x47c65f
mov esi, dword [ebp - 0x6f70]
mov eax, dword [ebp - 0x6f68]
sub eax, esi
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f48], eax
nop
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47c65f
mov eax, dword [ebp - 0x6f48]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f94], eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
lea ecx, [ebp - 0x1f74]
call fcn.0053fdc0
test eax, eax
je 0x47c63d
lea eax, [ebp - 0x2010]
push eax
push 0x645e0c
lea ecx, [ebp - 0x1f74]
call fcn.0053fb00
test al, al
je 0x47c63d
push 1
push 0x621af8
lea ecx, [ebp - 0x2010]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x265c]
call fcn.00542450
xor esi, esi
lea ecx, [ebp - 0x265c]
mov dword [ebp - 0x6f6c], esi
call fcn.005425f0
test eax, eax
je 0x47c637
push esi
lea ecx, [ebp - 0x265c]
call fcn.00542600
push eax
lea ecx, [ebp - 0x2010]
call fcn.00545870
lea ecx, [ebp - 0x2010]
call fcn.005451f0
test al, al
jne 0x47c61d
xor eax, eax
mov byte [ebp - 0x6f7c], 1
mov dword [ebp - 0x6f54], eax
nop dword [eax]
push 0
push 1
push 1
push 0
push dword [ebp + eax*4 - 0x6fe8]
lea ecx, [ebp - 0x2010]
call fcn.00543e30
push 0
lea ecx, [edi + 0x14c]
mov esi, eax
call fcn.005454f0
push eax
push 0x66725c
lea ecx, [ebp - 0x2010]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
lea ecx, [esi - 1]
mov edx, 0x10
cmp edx, ecx
mov edx, dword [ebp - 0x6f7c]
sbb cl, cl
and cl, dl
xor edx, edx
test al, al
movzx ecx, cl
cmove edx, ecx
test dl, dl
je 0x47c617
mov eax, dword [ebp - 0x6f54]
inc eax
mov dword [ebp - 0x6f7c], edx
mov dword [ebp - 0x6f54], eax
cmp eax, 7
jb 0x47c4a0
test dl, dl
je 0x47c617
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x645e0c
push 1
push 0x1f
push dword [eax + 0xa8]
call fcn.0049a0a0
mov esi, eax
cmp esi, 0xffffffff
je 0x47c617
push 0
push 0
lea ecx, [ebp - 0x2010]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2010]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
push 0x645e0c
call fcn.005454f0
mov ecx, dword [ebp - 0x6f94]
push eax
push 0
call fcn.005454f0
push eax
push 0x1f
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666634
lea ecx, [ebp - 0x2010]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x667280
call fcn.005454f0
push eax
push 0x6645a4
push 0x645e0c
push 0x665280
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
mov esi, dword [ebp - 0x6f6c]
inc esi
lea ecx, [ebp - 0x265c]
mov dword [ebp - 0x6f6c], esi
call fcn.005425f0
cmp esi, eax
jb 0x47c462
mov esi, dword [ebp - 0x6f40]
mov eax, dword [ebp - 0x6f4c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f4c], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x47c3c0
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47f328
push 4
lea ecx, [ebp - 0x1fe4]
call fcn.00401d40
lea ecx, [ebp - 0x1fe4]
call fcn.0053fe60
push 4
lea ecx, [ebp - 0x2084]
mov byte [ebp - 4], 0x85
call fcn.00401d40
lea ecx, [ebp - 0x2084]
call fcn.0053fe60
mov byte [ebp - 4], 0x86
xor esi, esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x47c70b
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646198
push esi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00545560
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x47c6c1
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667298
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00545560
cmp dword [ebp - 0x6fa8], 0
je 0x47c772
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x667298
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00545560
push 0xc
lea ecx, [ebp - 0x2108]
call fcn.00401d20
lea ecx, [ebp - 0x2108]
call fcn.00545940
push 0
push 0x667300
lea ecx, [ebp - 0x1fd4]
mov byte [ebp - 4], 0x87
call fcn.00532850
cmp dword [ebp - 0x6f74], 0
mov dword [ebp - 0x6f7c], 0
jbe 0x47cae9
mov esi, dword [ebp - 0x6f70]
mov eax, dword [ebp - 0x6f68]
sub eax, esi
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f48], eax
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47cae9
mov eax, dword [ebp - 0x6f48]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f94], eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x47cac7
lea eax, [ebp - 0x6cb4]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f6c], esi
call fcn.0053f740
test al, al
je 0x47cac1
mov ecx, dword [ebp - 0x6f94]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
push 0x61d058
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00545560
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fe4]
call fcn.0053fdf0
test al, al
je 0x47ca9f
lea eax, [ebp - 0x2108]
push eax
push 0x6287e4
lea ecx, [ebp - 0x1fe4]
call fcn.0053fb00
push 0
lea ecx, [ebp - 0x2108]
call fcn.005457a0
cmp word [eax], 0x40
jne 0x47c8fa
push 0
lea ecx, [ebp - 0x2108]
call fcn.005454f0
push eax
push 0x80
lea ecx, [ebp - 0x2108]
call fcn.00544ce0
push 0
push 0x80
lea ecx, [ebp - 0x2108]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2108]
call fcn.005454f0
push eax
call dword [0x5fd6a4]
lea eax, [ebp - 0x2010]
push eax
push 0x657bbc
lea ecx, [ebp - 0x1fe4]
call fcn.0053fb00
lea ecx, [ebp - 0x2108]
call fcn.005451f0
test al, al
je 0x47c933
lea ecx, [ebp - 0x2010]
call fcn.005451f0
test al, al
jne 0x47ca9f
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x667354
lea ecx, [ebp - 0x2010]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x47ca9f
xor eax, eax
mov dword [ebp - 0x6f54], eax
nop dword [eax]
push 0
push 1
push 1
push 0
push dword [ebp + eax*4 - 0x6fe8]
lea ecx, [ebp - 0x2010]
call fcn.00543e30
dec eax
cmp eax, 0x10
jbe 0x47ca9f
mov eax, dword [ebp - 0x6f54]
inc eax
mov dword [ebp - 0x6f54], eax
cmp eax, 7
jb 0x47c970
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2108]
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x20
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f54], eax
cmp eax, 0xffffffff
je 0x47ca9f
push 0
push 0
push 0
lea ecx, [ebp - 0x2010]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
push 0
call fcn.005454f0
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
push 0x20
push dword [ebp - 0x6f54]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666634
lea ecx, [ebp - 0x2010]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x667280
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x2108]
call fcn.005454f0
push eax
push 0x665280
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
lea eax, [ebp - 0x6cb4]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0053f740
test al, al
jne 0x47c833
mov dword [ebp - 0x6f6c], esi
mov esi, dword [ebp - 0x6f40]
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f7c], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x47c7d1
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47f307
push 0
push 0x667380
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
push 0xc
lea ecx, [ebp - 0x20b4]
call fcn.00401d20
lea ecx, [ebp - 0x20b4]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2380]
mov byte [ebp - 4], 0x88
call fcn.00401d20
lea ecx, [ebp - 0x2380]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x20f0]
mov byte [ebp - 4], 0x89
call fcn.00401d20
lea ecx, [ebp - 0x20f0]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x21fc]
mov byte [ebp - 4], 0x8a
call fcn.00401d20
lea ecx, [ebp - 0x21fc]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2374]
mov byte [ebp - 4], 0x8b
call fcn.00401d20
lea ecx, [ebp - 0x2374]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x20c0]
mov byte [ebp - 4], 0x8c
call fcn.00401d20
lea ecx, [ebp - 0x20c0]
call fcn.00545940
push 0xfc8
lea ecx, [ebp - 0x6880]
mov byte [ebp - 4], 0x8d
call fcn.00401dc0
lea ecx, [ebp - 0x6880]
call fcn.00538890
mov byte [ebp - 4], 0x8e
xor esi, esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x47cc3a
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x661988
push esi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00545560
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x47cbf0
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x661c58
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00545560
cmp dword [ebp - 0x6fa8], 0
je 0x47cca1
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x661c58
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00545560
cmp dword [ebp - 0x6f74], 0
mov dword [ebp - 0x6f54], 0
jbe 0x47d1cd
mov esi, dword [ebp - 0x6f70]
mov eax, dword [ebp - 0x6f68]
sub eax, esi
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f48], eax
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47d1cd
mov ecx, dword [ebp - 0x6f48]
push 1
lea ecx, [ecx + esi]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.005455c0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x47d1ab
lea eax, [ebp - 0x6cb4]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f6c], esi
call fcn.0053f6a0
test al, al
je 0x47d1a5
nop word [eax + eax]
mov ecx, dword [ebp - 0x6cb4]
call fcn.0053d990
test al, al
je 0x47d183
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [edi + 0x314]
push 0x6673c0
call fcn.005454f0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00545560
lea ecx, [ebp - 0x20c0]
call fcn.005454f0
xor edx, edx
mov ecx, eax
call fcn.0053cb60
test al, al
jne 0x47d183
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00545560
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x20c0]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2380]
call fcn.00543e30
test eax, eax
jne 0x47d183
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
lea ecx, [ebp - 0x20c0]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2380]
call fcn.00543b40
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x2374]
call fcn.00545870
lea eax, [ebp - 0x20b4]
mov ecx, edi
push eax
lea eax, [ebp - 0x20f0]
push eax
lea eax, [ebp - 0x2374]
push eax
call fcn.00471db0
lea ecx, [ebp - 0x20f0]
call fcn.005451f0
test al, al
je 0x47ce7a
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x20f0]
call fcn.00545870
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x6673d8
lea ecx, [ebp - 0x20f0]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x47d183
push 0
push 1
push 1
push 0
push 0x6673ec
lea ecx, [ebp - 0x20f0]
call fcn.00543e30
cmp eax, 1
je 0x47d183
push 0
push 1
push 1
push 0
push 0x667408
lea ecx, [ebp - 0x20f0]
call fcn.00543e30
cmp eax, 1
je 0x47d183
push 0
push 1
push 1
push 0
push 0x61d060
lea ecx, [ebp - 0x20f0]
call fcn.00543e30
cmp eax, 1
je 0x47d183
lea ecx, [ebp - 0x20b4]
call fcn.005451f0
lea ecx, [ebp - 0x20b4]
test al, al
je 0x47cf2c
push 0x667430
call fcn.00545870
jmp 0x47cf4c
push 0
push 0
push 0x61d060
push 0x61e2b0
call fcn.00543640
push 0
lea ecx, [ebp - 0x20b4]
call fcn.00544f60
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x624a18
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2148]
call fcn.00545560
push 0
lea ecx, [ebp - 0x2148]
call fcn.005454f0
push eax
lea eax, [ebp - 0x20b4]
mov ecx, edi
push eax
call fcn.00470310
lea ecx, [ebp - 0x20b4]
call fcn.005454f0
push eax
push 0
call dword [0x5fdb00]
test eax, eax
jne 0x47d183
lea ecx, [ebp - 0x20b4]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x6880]
call fcn.005386f0
test al, al
je 0x47d07c
push 0x61d060
push str.CompanyName
lea ecx, [ebp - 0x6880]
call fcn.00538710
push eax
lea ecx, [ebp - 0x21fc]
call fcn.00545870
push 0
push 1
push 1
push 0
push str.Microsoft
lea ecx, [ebp - 0x21fc]
call fcn.00543e30
cmp eax, 1
je 0x47d183
push 0
push 1
push 1
push 0
push 0x66748c
lea ecx, [ebp - 0x21fc]
call fcn.00543e30
cmp eax, 1
je 0x47d183
push 0
push 1
push 1
push 0
push 0x6674a8
lea ecx, [ebp - 0x21fc]
call fcn.00543e30
cmp eax, 1
je 0x47d183
push 0
push 1
push 1
push 0
push 0x658170
lea ecx, [ebp - 0x21fc]
call fcn.00543e30
cmp eax, 1
je 0x47d183
push 0
lea ecx, [ebp - 0x20b4]
call fcn.005454f0
push eax
push 0
push 1
lea ecx, [ebp - 0x20b4]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x20f0]
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x21
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f94], eax
cmp eax, 0xffffffff
je 0x47d183
mov ecx, dword [ebp - 0x6f40]
push 0
push dword [ebp - 0x6cb4]
push 0
push 0
push 0
push 0
call fcn.005454f0
push eax
lea ecx, [ebp - 0x20b4]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
push 0x21
push dword [ebp - 0x6f94]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666634
lea ecx, [ebp - 0x20b4]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x6674d0
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x20f0]
call fcn.005454f0
push eax
push 0x665280
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
lea eax, [ebp - 0x6cb4]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0053f6a0
test al, al
jne 0x47cd50
mov dword [ebp - 0x6f6c], esi
mov esi, dword [ebp - 0x6f40]
mov eax, dword [ebp - 0x6f54]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f54], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x47ccd2
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47f2ba
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x47d241
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f4a8
push esi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00545560
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x47d1f7
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f500
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00545560
cmp dword [ebp - 0x6fa8], 0
je 0x47d2a8
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x65f500
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00545560
cmp dword [ebp - 0x6f74], 0
mov dword [ebp - 0x6fc0], 0x6674e8
mov dword [ebp - 0x6fbc], 0x667528
mov dword [ebp - 0x6fb8], 0x667548
mov dword [ebp - 0x6fb4], 0x667564
mov dword [ebp - 0x6fb0], 0x667580
mov dword [ebp - 0x6f7c], 0
jbe 0x47d8c4
mov ecx, dword [ebp - 0x6f70]
mov eax, esi
sub eax, ecx
mov dword [ebp - 0x6f40], ecx
mov dword [ebp - 0x6f48], eax
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47d8c4
xor esi, esi
mov dword [ebp - 0x6f6c], esi
nop
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47d8a4
mov ecx, dword [ebp - 0x6f48]
add ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + esi*4 - 0x6fc0]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00545560
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x47d894
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f54], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.0053f740
test al, al
je 0x47d894
mov esi, dword [ebp - 0x6f40]
nop dword [eax]
mov ecx, dword [ebp - 0x6cb4]
call fcn.0053d990
test al, al
je 0x47d866
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [edi + 0x314]
push 0x6673c0
call fcn.005454f0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00545560
lea ecx, [ebp - 0x20c0]
call fcn.005454f0
xor edx, edx
mov ecx, eax
call fcn.0053cb60
test al, al
jne 0x47d866
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
mov ecx, esi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00545560
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x20c0]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2380]
call fcn.00543e30
test eax, eax
jne 0x47d866
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
lea ecx, [ebp - 0x20c0]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2380]
call fcn.00543b40
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x2374]
call fcn.00545870
lea eax, [ebp - 0x20b4]
mov ecx, edi
push eax
lea eax, [ebp - 0x20f0]
push eax
lea eax, [ebp - 0x2374]
push eax
call fcn.00471db0
lea ecx, [ebp - 0x20f0]
call fcn.005451f0
lea ecx, [ebp - 0x20f0]
test al, al
je 0x47d4eb
push dword [ebp - 0x6cb4]
call fcn.00545870
jmp 0x47d5ab
push 0
push 1
push 1
push 0
push 0x6673ec
call fcn.00543e30
cmp eax, 1
je 0x47d866
push 0
push 1
push 1
push 0
push 0x667408
lea ecx, [ebp - 0x20f0]
call fcn.00543e30
cmp eax, 1
je 0x47d866
push 0
push 1
push 1
push 0
push 0x667594
lea ecx, [ebp - 0x20f0]
call fcn.00543e30
cmp eax, 1
je 0x47d866
push 0
push 1
push 1
push 0
push 0x6675b0
lea ecx, [ebp - 0x20f0]
call fcn.00543e30
cmp eax, 1
je 0x47d866
push 0
push 1
push 1
push 0
push 0x6675d8
lea ecx, [ebp - 0x20f0]
call fcn.00543e30
cmp eax, 1
je 0x47d866
push 0
push 1
push 1
push 0
push 0x6675f8
lea ecx, [ebp - 0x20f0]
call fcn.00543e30
cmp eax, 1
je 0x47d866
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x6673d8
lea ecx, [ebp - 0x20f0]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x47d866
lea ecx, [ebp - 0x20b4]
call fcn.005451f0
lea ecx, [ebp - 0x20b4]
test al, al
je 0x47d5fa
push 0x667430
call fcn.00545870
jmp 0x47d61a
push 0
push 0
push 0x61d060
push 0x61e2b0
call fcn.00543640
push 0
lea ecx, [ebp - 0x20b4]
call fcn.00544f60
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x61d058
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2148]
call fcn.00545560
push 0
lea ecx, [ebp - 0x2148]
call fcn.005454f0
push eax
lea eax, [ebp - 0x20b4]
mov ecx, edi
push eax
call fcn.00470310
lea ecx, [ebp - 0x20b4]
call fcn.005454f0
push eax
push 0
call dword [0x5fdb00]
test eax, eax
jne 0x47d866
lea ecx, [ebp - 0x20b4]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x6880]
call fcn.005386f0
test al, al
je 0x47d76b
push 0x61d060
push str.CompanyName
lea ecx, [ebp - 0x6880]
call fcn.00538710
push eax
lea ecx, [ebp - 0x21fc]
call fcn.00545870
push 0
push 1
push 1
push 0
push str.Microsoft
lea ecx, [ebp - 0x21fc]
call fcn.00543e30
cmp eax, 1
je 0x47d866
push 0
push 1
push 1
push 0
push 0x66748c
lea ecx, [ebp - 0x21fc]
call fcn.00543e30
cmp eax, 1
je 0x47d866
push 0
push 1
push 1
push 0
push 0x6674a8
lea ecx, [ebp - 0x21fc]
call fcn.00543e30
cmp eax, 1
je 0x47d866
push 0
push 1
push 1
push 0
push 0x667628
lea ecx, [ebp - 0x21fc]
call fcn.00543e30
cmp eax, 1
je 0x47d866
push 0
push 1
push 1
push 0
push 0x658170
lea ecx, [ebp - 0x21fc]
call fcn.00543e30
cmp eax, 1
je 0x47d866
push 0
lea ecx, [ebp - 0x20b4]
call fcn.005454f0
push eax
push 0
push 1
lea ecx, [ebp - 0x20b4]
call fcn.005454f0
push eax
mov ecx, esi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x20f0]
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x21
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f94], eax
cmp eax, 0xffffffff
je 0x47d866
push 0
push dword [ebp - 0x6cb4]
mov ecx, esi
push 0
push 0
push 0
push 0
call fcn.005454f0
push eax
lea ecx, [ebp - 0x20b4]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.005454f0
push eax
push 0x21
push dword [ebp - 0x6f94]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666634
lea ecx, [ebp - 0x20b4]
call fcn.005454f0
push eax
push 0x6674d0
mov ecx, esi
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x20f0]
call fcn.005454f0
push eax
push 0x665280
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
mov eax, dword [ebp - 0x6f54]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f54], eax
call fcn.0053f740
test al, al
jne 0x47d3c0
mov esi, dword [ebp - 0x6f6c]
inc esi
mov dword [ebp - 0x6f6c], esi
cmp esi, 5
jb 0x47d320
mov esi, dword [ebp - 0x6f7c]
add dword [ebp - 0x6f40], 0xc
inc esi
mov dword [ebp - 0x6f7c], esi
cmp esi, dword [ebp - 0x6f74]
jb 0x47d307
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47f2ba
push 0
push 0x667650
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x6df8]
push 1
push 0x642a24
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6e00], eax
mov dword [ebp - 0x6dfc], 0x23
call fcn.005458d0
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0x8f
call fcn.005454f0
lea ecx, [edi + 0x14c]
mov dword [ebp - 0x6dec], eax
mov dword [ebp - 0x6de8], 0
call fcn.005454f0
mov dword [ebp - 0x6de4], eax
lea ecx, [ebp - 0x6dd8]
lea eax, [ebp - 0x1fd4]
push 1
mov dword [ebp - 0x6de0], eax
mov eax, dword [edi + 4]
push 0x6431a0
mov dword [ebp - 0x6ddc], eax
call fcn.005458d0
push 0xc
lea ecx, [ebp - 0x2270]
mov byte [ebp - 4], 0x90
call fcn.00401d20
lea ecx, [ebp - 0x2270]
call fcn.00545940
xor esi, esi
mov byte [ebp - 4], 0x91
cmp dword [edi + 0x30], esi
jbe 0x47dade
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47dade
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00545700
cmp eax, 3
jl 0x47dad4
push esi
lea ecx, [edi + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24c8]
mov dword [ebp - 0x6de8], eax
call fcn.005454f0
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2270]
call fcn.00545560
lea ecx, [ebp - 0x2270]
call fcn.005454f0
mov ecx, eax
call fcn.00530270
test al, al
je 0x47dad4
lea ecx, [ebp - 0x2270]
call fcn.005454f0
push eax
lea eax, [ebp - 0x6e00]
mov ecx, edi
push eax
call fcn.0048d880
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47dade
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25e4]
call fcn.005454f0
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2270]
call fcn.00545560
lea ecx, [ebp - 0x2270]
call fcn.005454f0
mov ecx, eax
call fcn.00530270
test al, al
je 0x47dad4
push 0
lea ecx, [ebp - 0x2270]
call fcn.00545210
lea ecx, [ebp - 0x2270]
call fcn.005454f0
push eax
lea eax, [ebp - 0x6e00]
mov ecx, edi
push eax
call fcn.0048d880
inc esi
cmp esi, dword [edi + 0x30]
jb 0x47d992
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47f2a4
lea ecx, [ebp - 0x2638]
mov dword [ebp - 0x6de8], 0x65f370
call fcn.005454f0
push eax
lea eax, [ebp - 0x6e00]
mov ecx, edi
push eax
call fcn.0048d880
mov ecx, edi
call fcn.0046c9e0
lea ecx, [ebp - 0x2270]
test al, al
jne 0x47f2aa
lea eax, [ebp - 0x2644]
push eax
call fcn.00545840
push 0
lea ecx, [ebp - 0x2270]
call fcn.00545210
lea ecx, [ebp - 0x2270]
call fcn.005454f0
push eax
lea eax, [ebp - 0x6e00]
mov ecx, edi
push eax
call fcn.0048d880
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47f2a4
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x47dbcd
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667698
push esi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00545560
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x47db83
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667720
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00545560
cmp dword [ebp - 0x6fa8], 0
je 0x47dc34
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x667720
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00545560
mov edx, dword [ebp - 0x6f74]
test edx, edx
je 0x47de21
mov eax, dword [ebp - 0x6f68]
mov esi, dword [ebp - 0x6f70]
sub eax, esi
mov dword [ebp - 0x6f7c], eax
mov dword [ebp - 0x6f54], edx
nop dword [eax]
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x47de0b
lea eax, [ebp - 0x20c0]
push eax
push 0x61d060
lea ecx, [ebp - 0x1f74]
call fcn.0053fb00
test al, al
je 0x47de0b
push 0
push 1
push 1
push 0
push 0x6677a8
lea ecx, [ebp - 0x20c0]
call fcn.00543e30
lea ecx, [ebp - 0x20c0]
mov dword [ebp - 0x6f48], eax
call fcn.00545700
mov edx, dword [ebp - 0x6f48]
lea ecx, [edx + 0xc]
cmp eax, ecx
jle 0x47de0b
lea eax, [edx + 0xd]
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00544110
push 3
lea ecx, [ebp - 0x20c0]
call fcn.005434c0
lea ecx, [ebp - 0x20c0]
call fcn.005451f0
test al, al
jne 0x47de0b
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x6644f4
lea ecx, [ebp - 0x20c0]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x47de0b
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x20c0]
call fcn.005454f0
push eax
mov ecx, esi
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6609f0
push 1
push 0x23
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x47de0b
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.005454f0
mov ecx, dword [ebp - 0x6f7c]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.005454f0
push eax
push 0x23
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666634
mov ecx, esi
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x20c0]
call fcn.005454f0
push eax
push 0x666cb8
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
sub dword [ebp - 0x6f54], 1
jne 0x47dc60
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47f2a4
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x47de9a
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
nop dword [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6677c8
push esi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00545560
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x47de50
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667828
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00545560
cmp dword [ebp - 0x6fa8], 0
je 0x47df01
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x667828
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00545560
push 0
push 0x667890
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov esi, dword [ebp - 0x6f74]
mov dword [ebp - 0x6f54], 0
test esi, esi
je 0x47e410
mov esi, dword [ebp - 0x6f70]
mov eax, dword [ebp - 0x6f68]
sub eax, esi
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f7c], eax
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47e40a
mov eax, dword [edi + 0x30]
cmp eax, 2
jbe 0x47df6b
add eax, 0xfffffffe
cmp dword [ebp - 0x6f54], eax
je 0x47e3e8
mov ecx, dword [ebp - 0x6f7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
add ecx, esi
push 0x6678e4
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00545560
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x47e3e8
lea eax, [ebp - 0x273c]
mov dword [ebp - 0x273c], 0
push eax
push 0x645cdc
lea ecx, [ebp - 0x1f74]
call fcn.0053fa70
test al, al
je 0x47e3e8
cmp dword [ebp - 0x273c], 0
je 0x47e3e8
mov ecx, dword [ebp - 0x6f7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667900
lea ecx, [ecx + esi]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00545560
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x47e3e8
lea eax, [ebp - 0x2010]
push eax
push 0x645d48
lea ecx, [ebp - 0x1f74]
call fcn.0053fb00
test al, al
je 0x47e1cb
lea ecx, [ebp - 0x2010]
call fcn.005451f0
test al, al
jne 0x47e1cb
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x66790c
lea ecx, [ebp - 0x2010]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x47e1cb
xor esi, esi
push 0
push 1
push 1
push 0
push dword [ebp + esi*4 - 0x6fe8]
lea ecx, [ebp - 0x2010]
call fcn.00543e30
dec eax
cmp eax, 0x10
jbe 0x47e1c5
inc esi
cmp esi, 7
jb 0x47e0b4
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.005454f0
mov esi, dword [ebp - 0x6f40]
mov ecx, esi
push eax
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x645d48
push 1
push 0x25
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x47e1cb
push 0
push 0
push 0
lea ecx, [ebp - 0x2010]
call fcn.005454f0
push eax
push 0
push 0x645d48
mov ecx, esi
call fcn.005454f0
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
push 0x25
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666634
lea ecx, [ebp - 0x2010]
call fcn.005454f0
push eax
push 0x667280
mov ecx, esi
call fcn.005454f0
push eax
push 0x6645a4
push 0x667930
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
jmp 0x47e1cb
mov esi, dword [ebp - 0x6f40]
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47e40a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x645de0
lea ecx, [ebp - 0x1f98]
call fcn.00543b40
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x47e3e8
lea eax, [ebp - 0x6cb4]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f6c], esi
call fcn.0053f6a0
test al, al
je 0x47e3e2
nop dword [eax]
mov eax, dword [ebp - 0x6cb4]
cmp word [eax], 0
je 0x47e3c0
push eax
lea ecx, [ebp - 0x2010]
call fcn.00545870
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x66790c
lea ecx, [ebp - 0x2010]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x47e3dc
xor eax, eax
mov dword [ebp - 0x6f4c], eax
push 0
push 1
push 1
push 0
push dword [ebp + eax*4 - 0x6fe8]
lea ecx, [ebp - 0x2010]
call fcn.00543e30
dec eax
cmp eax, 0x10
jbe 0x47e3c0
mov eax, dword [ebp - 0x6f4c]
inc eax
mov dword [ebp - 0x6f4c], eax
cmp eax, 7
jb 0x47e2a2
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x661f10
push 1
push 0x25
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x47e3c0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2010]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.005454f0
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
push 0x25
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666634
lea ecx, [ebp - 0x2010]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x667280
call fcn.005454f0
push eax
push 0x6645a4
push 0x66795c
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
lea eax, [ebp - 0x6cb4]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0053f6a0
test al, al
jne 0x47e250
mov dword [ebp - 0x6f6c], esi
mov esi, dword [ebp - 0x6f40]
mov eax, dword [ebp - 0x6f54]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f54], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x47df45
mov esi, dword [ebp - 0x6f74]
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47f2a4
mov dword [ebp - 0x6f54], 0
test esi, esi
je 0x47e869
mov esi, dword [ebp - 0x6f70]
mov eax, dword [ebp - 0x6f68]
sub eax, esi
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f48], eax
nop dword [eax + eax]
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47e869
mov eax, dword [edi + 0x30]
cmp eax, 2
jbe 0x47e476
add eax, 0xfffffffe
cmp dword [ebp - 0x6f54], eax
je 0x47e847
mov eax, dword [ebp - 0x6f48]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
add eax, esi
push 0
push 0x667998
mov ecx, eax
mov dword [ebp - 0x6f7c], eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00545560
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x47e847
lea eax, [ebp - 0x2738]
mov dword [ebp - 0x2738], 0
push eax
push 0x646158
lea ecx, [ebp - 0x1f74]
call fcn.0053fa70
test al, al
je 0x47e847
cmp dword [ebp - 0x2738], 0
je 0x47e847
mov ecx, dword [ebp - 0x6f7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6679cc
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00545560
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x47e847
lea eax, [ebp - 0x6cb4]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f6c], esi
call fcn.0053f740
test al, al
je 0x47e841
mov ecx, dword [ebp - 0x6f7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
push 0x6679e8
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00545560
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fe4]
call fcn.0053fdf0
test al, al
je 0x47e81f
lea eax, [ebp - 0x2108]
push eax
push 0x6287e4
lea ecx, [ebp - 0x1fe4]
call fcn.0053fb00
push 0
lea ecx, [ebp - 0x2108]
call fcn.005457a0
cmp word [eax], 0x40
jne 0x47e64c
push 0
lea ecx, [ebp - 0x2108]
call fcn.005454f0
push eax
push 0x80
lea ecx, [ebp - 0x2108]
call fcn.00544ce0
push 0
push 0x80
lea ecx, [ebp - 0x2108]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2108]
call fcn.005454f0
push eax
call dword [0x5fd6a4]
lea eax, [ebp - 0x2010]
push eax
push 0x657bbc
lea ecx, [ebp - 0x1fe4]
call fcn.0053fb00
lea ecx, [ebp - 0x2108]
call fcn.005451f0
test al, al
je 0x47e685
lea ecx, [ebp - 0x2010]
call fcn.005451f0
test al, al
jne 0x47e81f
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x66790c
lea ecx, [ebp - 0x2010]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x47e83b
xor eax, eax
mov dword [ebp - 0x6f4c], eax
nop dword [eax + eax]
push 0
push 1
push 1
push 0
push dword [ebp + eax*4 - 0x6fe8]
lea ecx, [ebp - 0x2010]
call fcn.00543e30
dec eax
cmp eax, 0x10
jbe 0x47e81f
mov eax, dword [ebp - 0x6f4c]
inc eax
mov dword [ebp - 0x6f4c], eax
cmp eax, 7
jb 0x47e6c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666e70
lea ecx, [ebp - 0x2108]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00545560
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x25
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f94], eax
cmp eax, 0xffffffff
je 0x47e81f
push 0
push 0
push 0
lea ecx, [ebp - 0x2010]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
push 0
call fcn.005454f0
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
push 0x25
push dword [ebp - 0x6f94]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666634
lea ecx, [ebp - 0x2010]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x667280
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x2108]
call fcn.005454f0
push eax
push 0x667a04
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
lea eax, [ebp - 0x6cb4]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0053f740
test al, al
jne 0x47e585
mov dword [ebp - 0x6f6c], esi
mov esi, dword [ebp - 0x6f40]
mov eax, dword [ebp - 0x6f54]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f54], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x47e450
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x47e8ce
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667a3c
push esi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00545560
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x47e884
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667a68
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00545560
cmp dword [ebp - 0x6fa8], 0
je 0x47e935
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x667a68
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00545560
push 0xc
lea ecx, [ebp - 0x26a4]
call fcn.00401d20
lea ecx, [ebp - 0x26a4]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x25a8]
mov byte [ebp - 4], 0x92
call fcn.00401d20
lea ecx, [ebp - 0x25a8]
call fcn.00545940
push 0
push 0x667bb0
lea ecx, [ebp - 0x1fd4]
mov byte [ebp - 4], 0x93
call fcn.00532850
cmp dword [ebp - 0x6f74], 0
mov dword [ebp - 0x6f54], 0
jbe 0x47ed55
mov esi, dword [ebp - 0x6f70]
mov eax, dword [ebp - 0x6f68]
sub eax, esi
mov dword [ebp - 0x6f7c], esi
mov dword [ebp - 0x6f40], eax
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47ed55
mov eax, dword [edi + 0x30]
cmp eax, 2
jbe 0x47e9d6
add eax, 0xfffffffe
cmp dword [ebp - 0x6f54], eax
je 0x47ed33
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667c10
lea ecx, [ecx + esi]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00545560
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x47eb6b
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x667c64
push 0x661fb0
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x47eb6b
lea eax, [ebp - 0x26a4]
push eax
push 0x661fc8
lea ecx, [ebp - 0x1f74]
call fcn.0053fb00
lea eax, [ebp - 0x28c8]
push eax
push 0x661fe0
lea ecx, [ebp - 0x1f74]
call fcn.0053fa70
lea ecx, [ebp - 0x26a4]
call fcn.005451f0
test al, al
jne 0x47eb6b
cmp dword [ebp - 0x28c8], 0
je 0x47eb6b
push 0
push 0
push 0
push 0
push 0x667a98
mov ecx, esi
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x661fb0
push 1
push 0x24
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x47eb6b
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.005454f0
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
push 0x24
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x665a90
push 0x667a98
push 0x665cfc
mov ecx, esi
call fcn.005454f0
push eax
push 0x6645a4
push 0x661fb0
push 0x667000
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x667c64
push 0x6620a0
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x47ed33
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667c88
lea ecx, [ecx + esi]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00545560
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x47ed33
lea eax, [ebp - 0x25a8]
push eax
push 0x63a464
lea ecx, [ebp - 0x1f74]
call fcn.0053fb00
test al, al
je 0x47ed33
lea ecx, [ebp - 0x26a4]
call fcn.005451f0
test al, al
jne 0x47ed33
push 0
push 0
push 0x61d060
push 0x61e394
lea ecx, [ebp - 0x25a8]
call fcn.00543640
push 0
push 1
push 1
push 0
push 0x63a470
lea ecx, [ebp - 0x25a8]
call fcn.00543e30
lea ecx, [ebp - 0x25a8]
mov esi, eax
call fcn.00545700
sub eax, 0xb
cmp esi, eax
mov esi, dword [ebp - 0x6f7c]
je 0x47ed33
push 0
push 0
push 0
push 0
push 0x667b18
mov ecx, esi
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6620a0
push 1
push 0x24
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x47ed33
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.005454f0
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
push 0x24
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x665a90
push 0x667b18
push 0x665cfc
mov ecx, esi
call fcn.005454f0
push eax
push 0x6645a4
push 0x6620a0
push 0x667000
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
mov eax, dword [ebp - 0x6f54]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f7c], esi
mov dword [ebp - 0x6f54], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x47e9b0
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47f28e
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x667c64
push 0x662140
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x47f28e
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x47edf0
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6460c0
push esi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00545560
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x47eda6
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6460c0
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00545560
cmp dword [ebp - 0x6fa8], 0
je 0x47ee57
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x6460c0
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00545560
cmp dword [ebp - 0x6f74], 0
mov dword [ebp - 0x6f7c], 0
jbe 0x47f029
mov eax, dword [ebp - 0x6f70]
sub eax, esi
mov dword [ebp - 0x6f54], eax
nop dword [eax]
mov ecx, esi
call fcn.005454f0
xor edx, edx
mov ecx, eax
call fcn.0053cb60
test al, al
je 0x47f00d
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47f029
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x661ea0
mov ecx, esi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2120]
call fcn.00545560
lea ecx, [ebp - 0x2120]
call fcn.005454f0
mov edx, 0x645cdc
mov ecx, eax
call fcn.0053cb60
test al, al
jne 0x47ef36
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x657274
mov ecx, esi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2120]
call fcn.00545560
lea ecx, [ebp - 0x2120]
call fcn.005454f0
xor edx, edx
mov ecx, eax
call fcn.0053cb60
test al, al
je 0x47f00d
mov ecx, dword [ebp - 0x6f54]
push 0
push 0
push 0
push 0
add ecx, esi
push 0x667cd0
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x662140
push 1
push 0x24
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x47f00d
mov ecx, dword [ebp - 0x6f54]
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [esi + ecx]
call fcn.005454f0
push eax
push 0
mov ecx, esi
call fcn.005454f0
push eax
push 0x24
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
mov ecx, dword [ebp - 0x6f54]
push 0
push 0
push 0
push 0
push 0
push 0x665a90
push 0x667cd0
push 0x665cfc
lea ecx, [esi + ecx]
call fcn.005454f0
push eax
push 0x6645a4
push 0x662140
push 0x667000
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f7c], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x47ee80
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47f28e
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x667c64
push 0x662204
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x47f28e
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x47f0ca
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
nop word [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667d78
push esi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00545560
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x47f080
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667d78
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00545560
cmp dword [ebp - 0x6fa8], 0
je 0x47f131
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x667d78
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00545560
mov edx, dword [ebp - 0x6f74]
test edx, edx
je 0x47f274
mov eax, dword [ebp - 0x6f68]
mov esi, dword [ebp - 0x6f70]
sub eax, esi
mov dword [ebp - 0x6f7c], eax
mov dword [ebp - 0x6f54], edx
nop dword [eax]
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fe4]
call fcn.0053fdf0
test al, al
je 0x47f25e
lea ecx, [ebp - 0x1fe4]
call fcn.0053f640
cmp eax, 1
jbe 0x47f25e
push 0
push 0
push 0
push 0
push 0x667de0
mov ecx, esi
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x662204
push 1
push 0x24
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x47f25e
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.005454f0
mov ecx, dword [ebp - 0x6f7c]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.005454f0
push eax
push 0x24
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x665a90
push 0x667de0
push 0x665cfc
mov ecx, esi
call fcn.005454f0
push eax
push 0x6645a4
push 0x667e50
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
sub dword [ebp - 0x6f54], 1
jne 0x47f160
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.005193f0
mov ecx, edi
call fcn.00470a40
lea ecx, [ebp - 0x25a8]
call fcn.00545790
lea ecx, [ebp - 0x26a4]
call fcn.00545790
lea ecx, [ebp - 0x2270]
call fcn.00545790
lea ecx, [ebp - 0x6e00]
call fcn.00402710
lea ecx, [ebp - 0x6880]
call fcn.00401d90
lea ecx, [ebp - 0x20c0]
call fcn.00545790
lea ecx, [ebp - 0x2374]
call fcn.00545790
lea ecx, [ebp - 0x21fc]
call fcn.00545790
lea ecx, [ebp - 0x20f0]
call fcn.00545790
lea ecx, [ebp - 0x2380]
call fcn.00545790
lea ecx, [ebp - 0x20b4]
call fcn.00545790
lea ecx, [ebp - 0x2108]
call fcn.00545790
lea ecx, [ebp - 0x2084]
call fcn.0053fda0
lea ecx, [ebp - 0x1fe4]
call fcn.0053fda0
lea ecx, [ebp - 0x265c]
call fcn.00542660
lea ecx, [ebp - 0x2398]
call fcn.00545790
lea ecx, [ebp - 0x2010]
mov byte [ebp - 4], 0x45
call fcn.00545790
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x481c76
test dword [edi + 0x34], 0x1000
jne 0x481c76
push 0
push 0x667eb0
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x667ee8
push dword [eax + 0x38]
call fcn.0051a750
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x2d
push dword [eax + 0x34]
call fcn.005173e0
push 0xc
lea ecx, [ebp - 0x20d8]
call fcn.00401d20
lea ecx, [ebp - 0x20d8]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2034]
mov byte [ebp - 4], 0x94
call fcn.00401d20
lea ecx, [ebp - 0x2034]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x23a4]
mov byte [ebp - 4], 0x95
call fcn.00401d20
lea ecx, [ebp - 0x23a4]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x1ff0]
mov byte [ebp - 4], 0x96
call fcn.00401d20
lea ecx, [ebp - 0x1ff0]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x22a0]
mov byte [ebp - 4], 0x97
call fcn.00401d20
lea ecx, [ebp - 0x22a0]
call fcn.00545940
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0x251c]
xor esi, esi
push 0x24
mov dword [ebp - 0x6f54], esi
call fcn.00402080
lea ecx, [ebp - 0x251c]
call fcn.00513b80
mov byte [ebp - 4], 0x99
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.005193f0
push esi
push 0x667f20
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov dword [ebp - 0x6f4c], esi
cmp dword [edi + 0x30], esi
jbe 0x47fae5
mov esi, dword [ebp - 0x6f70]
mov dword [ebp - 0x6f40], esi
nop
lea ecx, [ebp - 0x22a0]
call fcn.005451f0
test al, al
je 0x47f4dc
lea eax, [ebp - 0x22a0]
push eax
push 0
lea ecx, [ebp - 0x2184]
call fcn.005454f0
push dword [ebp - 0x6f4c]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
mov edx, esi
mov ecx, eax
call fcn.004ecf90
mov esi, dword [ebp - 0x6f40]
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47fadf
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667f6c
lea ecx, [ebp - 0x2184]
call fcn.005454f0
push eax
push dword [ebp - 0x6f4c]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x20d8]
call fcn.00545560
push 0x260
lea ecx, [ebp - 0x4f38]
call fcn.00401d70
push 1
lea ecx, [ebp - 0x20d8]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x4f38]
call fcn.004016d0
push 3
lea ecx, [ebp - 0x20d8]
mov byte [ebp - 4], 0x9a
call fcn.00544180
lea ecx, [ebp - 0x4f38]
call fcn.00401810
test al, al
je 0x47fab1
nop
push 1
lea ecx, [ebp - 0x4f38]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2034]
call fcn.00545870
push 0x6664fc
lea ecx, [ebp - 0x2034]
call fcn.005457e0
test al, al
je 0x47f5ce
push 0
push 1
push 1
push 0
push 0x66650c
lea ecx, [ebp - 0x2034]
call fcn.00543e30
cmp eax, 1
jne 0x47fa9e
inc dword [ebp - 0x6f54]
lea ecx, [ebp - 0x4f38]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666520
push 1
call fcn.00401870
push eax
lea ecx, [ebp - 0x20d8]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2034]
call fcn.00545560
push 0x100
lea ecx, [ebp - 0x2034]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x251c]
call fcn.00513940
test al, al
je 0x47fa9e
lea eax, [ebp - 0x1ff0]
push eax
push 0x622ccc
push 0x666548
lea ecx, [ebp - 0x251c]
call fcn.00513110
test eax, eax
je 0x47f826
push 0
push 1
push 1
push 0
push 0x66655c
lea ecx, [ebp - 0x1ff0]
call fcn.00543e30
test eax, eax
jne 0x47f826
push eax
push 1
push 1
push eax
push 0x66657c
lea ecx, [ebp - 0x1ff0]
call fcn.00543e30
test eax, eax
jne 0x47f826
push eax
push 1
push 1
push eax
push 0x6665cc
lea ecx, [ebp - 0x1ff0]
call fcn.00543e30
test eax, eax
jne 0x47f826
push 0x666598
lea ecx, [ebp - 0x1ff0]
call fcn.00545820
test al, al
jne 0x47f826
push 0
push 1
push 1
push 0
push 0x6665b0
lea ecx, [ebp - 0x1ff0]
call fcn.00543e30
test eax, eax
jne 0x47f826
lea ecx, [edi + 0x14c]
push eax
call fcn.005454f0
push eax
push 0x667fa8
lea ecx, [ebp - 0x1ff0]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x47f826
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x667fd4
lea ecx, [ebp - 0x1ff0]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x47f826
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff0]
call fcn.005454f0
push eax
mov ecx, esi
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x666620
push 2
push 0x2a
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x47f826
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2034]
call fcn.005454f0
push eax
push 0x666548
push 0x2a
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666634
lea ecx, [ebp - 0x2034]
call fcn.005454f0
push eax
push 0x665cfc
mov ecx, esi
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x1ff0]
call fcn.005454f0
push eax
push 0x666668
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
lea eax, [ebp - 0x2a7c]
mov dword [ebp - 0x6edc], 0
push eax
push 0x622ccc
xorps xmm0, xmm0
lea ecx, [ebp - 0x251c]
push 0x666688
movups xmmword [ebp - 0x6eec], xmm0
call fcn.00513210
test al, al
je 0x47fa9e
lea eax, [ebp - 0x2a7c]
push eax
lea eax, [ebp - 0x6eec]
push eax
lea ecx, [ebp - 0x251c]
call fcn.00512860
test al, al
je 0x47fa9e
nop
lea eax, [ebp - 0x1ff0]
push eax
lea eax, [ebp - 0x6eec]
push eax
lea ecx, [ebp - 0x251c]
call fcn.00512b70
test eax, eax
je 0x47fa7d
push 0
push 1
push 1
push 0
push 0x66655c
lea ecx, [ebp - 0x1ff0]
call fcn.00543e30
test eax, eax
jne 0x47fa7d
push eax
push 1
push 1
push eax
push 0x66657c
lea ecx, [ebp - 0x1ff0]
call fcn.00543e30
test eax, eax
jne 0x47fa7d
push eax
push 1
push 1
push eax
push 0x6665cc
lea ecx, [ebp - 0x1ff0]
call fcn.00543e30
test eax, eax
jne 0x47fa7d
push 0x666598
lea ecx, [ebp - 0x1ff0]
call fcn.00545820
test al, al
jne 0x47fa7d
push 0
push 1
push 1
push 0
push 0x6665b0
lea ecx, [ebp - 0x1ff0]
call fcn.00543e30
test eax, eax
jne 0x47fa7d
push eax
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x667fa8
lea ecx, [ebp - 0x1ff0]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x47fa77
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x667fd4
lea ecx, [ebp - 0x1ff0]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x47fa77
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff0]
call fcn.005454f0
mov esi, dword [ebp - 0x6f40]
mov ecx, esi
push eax
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x666720
push 2
push 0x2a
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x47fa7d
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2034]
call fcn.005454f0
push eax
push 0x666688
push 0x2a
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666634
lea ecx, [ebp - 0x2034]
call fcn.005454f0
push eax
push 0x665cfc
mov ecx, esi
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x1ff0]
call fcn.005454f0
push eax
push 0x66673c
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
jmp 0x47fa7d
mov esi, dword [ebp - 0x6f40]
lea eax, [ebp - 0x2a7c]
push eax
lea eax, [ebp - 0x6eec]
push eax
lea ecx, [ebp - 0x251c]
call fcn.00512860
test al, al
jne 0x47f880
lea ecx, [ebp - 0x4f38]
call fcn.004017d0
test al, al
jne 0x47f580
lea ecx, [ebp - 0x4f38]
mov byte [ebp - 4], 0x99
call fcn.00401720
mov eax, dword [ebp - 0x6f4c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f4c], eax
cmp eax, dword [edi + 0x30]
jb 0x47f490
mov esi, dword [ebp - 0x6f54]
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x481c30
test esi, esi
jne 0x47fb1d
lea ecx, [ebp - 0x22a0]
call fcn.005451f0
test al, al
je 0x47fb1d
push esi
push 0x668000
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
jmp 0x481c30
push 0
push 0x668060
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f54], 0
jbe 0x47fee5
mov esi, dword [ebp - 0x6f70]
mov dword [ebp - 0x6f40], esi
nop
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x47fee5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667f6c
lea ecx, [ebp - 0x2184]
call fcn.005454f0
push eax
push dword [ebp - 0x6f54]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x20d8]
call fcn.00545560
push 0x260
lea ecx, [ebp - 0x5658]
call fcn.00401d70
push 1
lea ecx, [ebp - 0x20d8]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x5658]
call fcn.004016d0
push 3
lea ecx, [ebp - 0x20d8]
mov byte [ebp - 4], 0x9b
call fcn.00544180
lea ecx, [ebp - 0x5658]
call fcn.00401810
test al, al
je 0x47feb7
push 1
lea ecx, [ebp - 0x5658]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2034]
call fcn.00545870
push 0x6664fc
lea ecx, [ebp - 0x2034]
call fcn.005457e0
test al, al
je 0x47fc41
push 0
push 1
push 1
push 0
push 0x66650c
lea ecx, [ebp - 0x2034]
call fcn.00543e30
cmp eax, 1
jne 0x47fea4
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666520
push 1
lea ecx, [ebp - 0x5658]
call fcn.00401870
push eax
lea ecx, [ebp - 0x20d8]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2034]
call fcn.00545560
push 0x100
lea ecx, [ebp - 0x2034]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x251c]
call fcn.00513940
test al, al
je 0x47fea4
lea eax, [ebp - 0x1ff0]
push eax
push 0x622ccc
push 0x666800
lea ecx, [ebp - 0x251c]
call fcn.00513110
test eax, eax
je 0x47fea4
push 0
push 1
push 1
push 0
push 0x66655c
lea ecx, [ebp - 0x1ff0]
call fcn.00543e30
test eax, eax
jne 0x47fea4
push eax
push 1
push 1
push eax
push 0x6666b4
lea ecx, [ebp - 0x1ff0]
call fcn.00543e30
test eax, eax
jne 0x47fea4
push eax
push 1
push 1
push eax
push 0x66657c
lea ecx, [ebp - 0x1ff0]
call fcn.00543e30
test eax, eax
jne 0x47fea4
push eax
push 1
push 1
push eax
push 0x6665cc
lea ecx, [ebp - 0x1ff0]
call fcn.00543e30
test eax, eax
jne 0x47fea4
push eax
push 1
push 1
push eax
push 0x6666d8
lea ecx, [ebp - 0x1ff0]
call fcn.00543e30
test eax, eax
jne 0x47fea4
push eax
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x6680a0
lea ecx, [ebp - 0x1ff0]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x47fe9e
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x6680d0
lea ecx, [ebp - 0x1ff0]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x47fe9e
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff0]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6668b0
push 2
push 0x2b
push dword [eax + 0xa8]
call fcn.0049a0a0
mov esi, eax
cmp esi, 0xffffffff
je 0x47fe9e
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2034]
call fcn.005454f0
push eax
push 0x6668e0
push 0x2b
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666634
lea ecx, [ebp - 0x2034]
call fcn.005454f0
mov esi, dword [ebp - 0x6f40]
mov ecx, esi
push eax
push 0x665cfc
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x1ff0]
call fcn.005454f0
push eax
push 0x666940
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
jmp 0x47fea4
mov esi, dword [ebp - 0x6f40]
lea ecx, [ebp - 0x5658]
call fcn.004017d0
test al, al
jne 0x47fbf3
lea ecx, [ebp - 0x5658]
mov byte [ebp - 4], 0x99
call fcn.00401720
mov eax, dword [ebp - 0x6f54]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f54], eax
cmp eax, dword [edi + 0x30]
jb 0x47fb50
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x481c30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668100
lea ecx, [edi + 0x314]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00545560
push 0
push 0x668140
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f54], 0
jbe 0x480511
mov esi, dword [ebp - 0x6f70]
mov dword [ebp - 0x6f40], esi
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x480511
push 0xc
lea ecx, [ebp - 0x2704]
call fcn.00401d20
lea ecx, [ebp - 0x2704]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2760]
mov byte [ebp - 4], 0x9c
call fcn.00401d20
lea ecx, [ebp - 0x2760]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2748]
mov byte [ebp - 4], 0x9d
call fcn.00401d20
lea ecx, [ebp - 0x2748]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2668]
mov byte [ebp - 4], 0x9e
call fcn.00401d20
lea ecx, [ebp - 0x2668]
call fcn.00545940
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667f6c
lea ecx, [ebp - 0x2184]
mov byte [ebp - 4], 0x9f
call fcn.005454f0
push eax
push dword [ebp - 0x6f54]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x20d8]
call fcn.00545560
push 0x260
lea ecx, [ebp - 0x3e98]
call fcn.00401d70
push 1
lea ecx, [ebp - 0x20d8]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x3e98]
call fcn.004016d0
push 3
lea ecx, [ebp - 0x20d8]
mov byte [ebp - 4], 0xa0
call fcn.00544180
lea ecx, [ebp - 0x3e98]
call fcn.00401810
test al, al
je 0x4804b7
nop dword [eax]
push 1
lea ecx, [ebp - 0x3e98]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2034]
call fcn.00545870
push 0x6664fc
lea ecx, [ebp - 0x2034]
call fcn.005457e0
test al, al
je 0x4800be
push 0
push 1
push 1
push 0
push 0x66650c
lea ecx, [ebp - 0x2034]
call fcn.00543e30
cmp eax, 1
jne 0x4804a4
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666520
push 1
lea ecx, [ebp - 0x3e98]
call fcn.00401870
push eax
lea ecx, [ebp - 0x20d8]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2034]
call fcn.00545560
push 0x100
lea ecx, [ebp - 0x2034]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x251c]
call fcn.00513940
test al, al
je 0x4804a4
lea eax, [ebp - 0x2a90]
mov dword [ebp - 0x6ef0], 0
push eax
push 0x622ccc
xorps xmm0, xmm0
lea ecx, [ebp - 0x251c]
push 0x666a14
movups xmmword [ebp - 0x6f00], xmm0
call fcn.00513210
test al, al
je 0x4804a4
lea eax, [ebp - 0x2a90]
push eax
lea eax, [ebp - 0x6f00]
push eax
lea ecx, [ebp - 0x251c]
call fcn.00512c30
test al, al
je 0x4804a4
nop word [eax + eax]
lea eax, [ebp - 0x2704]
push eax
lea eax, [ebp - 0x6f00]
push eax
lea ecx, [ebp - 0x251c]
call fcn.005131d0
test al, al
je 0x480483
lea ecx, [ebp - 0x2704]
call fcn.005454f0
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.005454f0
mov edx, esi
mov ecx, eax
call fcn.0053cb60
test al, al
jne 0x48047d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666a40
lea ecx, [ebp - 0x2704]
call fcn.005454f0
push eax
push 0x666a64
lea ecx, [ebp - 0x2748]
call fcn.00545560
lea eax, [ebp - 0x2760]
push eax
push 0x622ccc
lea ecx, [ebp - 0x2748]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x251c]
call fcn.00513110
test eax, eax
je 0x48047d
lea ecx, [ebp - 0x2760]
call fcn.005454f0
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.005454f0
mov edx, esi
mov ecx, eax
call fcn.0053cb60
test al, al
jne 0x48047d
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x668170
lea ecx, [ebp - 0x2760]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x48047d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666a94
lea ecx, [ebp - 0x2704]
call fcn.005454f0
push eax
push 0x666a64
lea ecx, [ebp - 0x2748]
call fcn.00545560
lea eax, [ebp - 0x2668]
push eax
push 0x622ccc
lea ecx, [ebp - 0x2748]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x251c]
call fcn.00513110
test eax, eax
je 0x480328
push 0
push 1
push 1
push 5
push 0x61e398
lea ecx, [ebp - 0x2668]
call fcn.00543e30
test eax, eax
jne 0x480328
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x666aa4
push 1
lea ecx, [ebp - 0x3e98]
call fcn.00401870
push eax
lea ecx, [ebp - 0x20d8]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2668]
call fcn.005438d0
lea ecx, [ebp - 0x2668]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
je 0x48047d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2704]
call fcn.005454f0
push eax
push 0x666a64
lea ecx, [ebp - 0x2748]
call fcn.00545560
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2668]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2760]
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 2
push 0x2c
push dword [eax + 0xa8]
call fcn.0049a0a0
mov esi, eax
cmp esi, 0xffffffff
je 0x48047d
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2668]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2034]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2748]
call fcn.005454f0
push eax
push 0x2c
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0x666634
lea ecx, [ebp - 0x2668]
call fcn.005454f0
mov esi, dword [ebp - 0x6f40]
mov ecx, esi
push eax
push 0x6652d8
call fcn.005454f0
push eax
push 0x666ac0
lea ecx, [ebp - 0x2704]
call fcn.005454f0
push eax
push 0x6264dc
lea ecx, [ebp - 0x2760]
call fcn.005454f0
push eax
push 0x666ae4
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
jmp 0x480483
mov esi, dword [ebp - 0x6f40]
lea eax, [ebp - 0x2a90]
push eax
lea eax, [ebp - 0x6f00]
push eax
lea ecx, [ebp - 0x251c]
call fcn.00512c30
test al, al
jne 0x480180
lea ecx, [ebp - 0x3e98]
call fcn.004017d0
test al, al
jne 0x480070
lea ecx, [ebp - 0x3e98]
call fcn.00401720
lea ecx, [ebp - 0x2668]
call fcn.00545790
lea ecx, [ebp - 0x2748]
call fcn.00545790
lea ecx, [ebp - 0x2760]
call fcn.00545790
lea ecx, [ebp - 0x2704]
mov byte [ebp - 4], 0x99
call fcn.00545790
mov eax, dword [ebp - 0x6f54]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f54], eax
cmp eax, dword [edi + 0x30]
jb 0x47ff56
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x481c30
push 0
push 0x6681a0
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x6d68]
push 1
push 0
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6d70], eax
mov dword [ebp - 0x6d6c], 0x2d
call fcn.005458d0
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0xa1
call fcn.005454f0
lea ecx, [edi + 0x14c]
mov dword [ebp - 0x6d5c], eax
mov dword [ebp - 0x6d58], 0
call fcn.005454f0
mov dword [ebp - 0x6d54], eax
lea ecx, [ebp - 0x6d48]
lea eax, [ebp - 0x1fd4]
push 1
mov dword [ebp - 0x6d50], eax
mov eax, dword [edi + 4]
push 0x638794
mov dword [ebp - 0x6d4c], eax
call fcn.005458d0
push 0xc
lea ecx, [ebp - 0x2258]
mov byte [ebp - 4], 0xa2
call fcn.00401d20
lea ecx, [ebp - 0x2258]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2240]
mov byte [ebp - 4], 0xa3
call fcn.00401d20
lea ecx, [ebp - 0x2240]
call fcn.00545940
mov ecx, edi
mov byte [ebp - 4], 0xa4
call fcn.0046c9e0
test al, al
jne 0x481c0f
xor esi, esi
mov dword [ebp - 0x6f40], esi
cmp dword [edi + 0x30], esi
jbe 0x4807a7
nop dword [eax]
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x4807a7
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00545700
cmp eax, 3
jl 0x480797
lea eax, [ebp - 0x6d68]
push eax
push 0
lea ecx, [ebp - 0x2184]
call fcn.005454f0
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
mov edx, esi
mov ecx, eax
call fcn.004ecf90
mov esi, dword [ebp - 0x6f40]
test al, al
je 0x480797
push esi
lea ecx, [edi + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24c8]
mov dword [ebp - 0x6d58], eax
call fcn.005454f0
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2258]
call fcn.00545560
lea ecx, [ebp - 0x2258]
call fcn.005454f0
mov ecx, eax
call fcn.00530270
test al, al
je 0x480797
lea ecx, [ebp - 0x2258]
call fcn.005454f0
push eax
lea eax, [ebp - 0x6d70]
mov ecx, edi
push eax
call fcn.0048d880
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x4807a7
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25e4]
call fcn.005454f0
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2258]
call fcn.00545560
lea ecx, [ebp - 0x2258]
call fcn.005454f0
mov ecx, eax
call fcn.00530270
test al, al
je 0x480797
push 0
lea ecx, [ebp - 0x2258]
call fcn.00545210
lea ecx, [ebp - 0x2258]
call fcn.005454f0
push eax
lea eax, [ebp - 0x6d70]
mov ecx, edi
push eax
call fcn.0048d880
inc esi
mov dword [ebp - 0x6f40], esi
cmp esi, dword [edi + 0x30]
jb 0x480610
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x481c0f
lea ecx, [ebp - 0x2638]
mov dword [ebp - 0x6d58], 0x65f370
call fcn.005454f0
push eax
lea eax, [ebp - 0x6d70]
mov ecx, edi
push eax
call fcn.0048d880
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x481c0f
lea eax, [ebp - 0x2644]
push eax
lea ecx, [ebp - 0x2258]
call fcn.00545840
push 0
lea ecx, [ebp - 0x2258]
call fcn.00545210
lea ecx, [ebp - 0x2258]
call fcn.005454f0
push eax
lea eax, [ebp - 0x6d70]
mov ecx, edi
push eax
call fcn.0048d880
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x481c0f
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x48089a
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6681f0
push esi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00545560
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x480850
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668280
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00545560
cmp dword [ebp - 0x6fa8], 0
je 0x480901
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x668280
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00545560
cmp dword [ebp - 0x6f74], 0
mov dword [ebp - 0x6f54], 0
jbe 0x480b0c
mov eax, dword [ebp - 0x6f68]
mov esi, dword [ebp - 0x6f70]
sub eax, esi
mov dword [ebp - 0x6f7c], eax
nop dword [eax]
push 0
push 0x20019
lea ecx, [eax + esi]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x480aea
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x480b0c
lea eax, [ebp - 0x2240]
push eax
push 0x61d060
lea ecx, [ebp - 0x1f74]
call fcn.0053fb00
test al, al
je 0x480aea
push 0
push 1
push 1
push 0
push 0x66830c
lea ecx, [ebp - 0x2240]
call fcn.00543e30
lea ecx, [ebp - 0x2240]
mov dword [ebp - 0x6f48], eax
call fcn.00545700
mov edx, dword [ebp - 0x6f48]
lea ecx, [edx + 0xa]
cmp eax, ecx
jle 0x480aea
lea eax, [edx + 0xb]
push eax
lea ecx, [ebp - 0x2240]
call fcn.00544110
push 3
lea ecx, [ebp - 0x2240]
call fcn.005434c0
lea ecx, [ebp - 0x2240]
call fcn.005451f0
test al, al
jne 0x480aea
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x6643ec
lea ecx, [ebp - 0x2240]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x480aea
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2240]
call fcn.005454f0
push eax
mov ecx, esi
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6609f0
push 2
push 0x2d
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x480aea
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.005454f0
mov ecx, dword [ebp - 0x6f7c]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.005454f0
push eax
push 0x2d
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666634
mov ecx, esi
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x2240]
call fcn.005454f0
push eax
push 0x666cb8
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
mov eax, dword [ebp - 0x6f54]
add esi, 0xc
inc eax
cmp eax, dword [ebp - 0x6f74]
mov dword [ebp - 0x6f54], eax
mov eax, dword [ebp - 0x6f7c]
jb 0x480930
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x481c0f
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x480b80
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668328
push esi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00545560
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x480b36
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668370
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00545560
cmp dword [ebp - 0x6fa8], 0
je 0x480be7
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x668370
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00545560
push 0
push 0x6683c0
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov esi, dword [ebp - 0x6f74]
mov dword [ebp - 0x6f7c], 0
test esi, esi
je 0x480e44
mov eax, dword [ebp - 0x6f68]
mov esi, dword [ebp - 0x6f70]
sub eax, esi
mov dword [ebp - 0x6f54], eax
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x480e3e
mov ecx, dword [ebp - 0x6f54]
push 0
push 0x20019
lea ecx, [ecx + esi]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
lea eax, [ebp - 0x1ff0]
push eax
push 0x660ba4
lea ecx, [ebp - 0x1f74]
call fcn.0053fb00
test al, al
je 0x480e22
lea eax, [ebp - 0x2188]
mov dword [ebp - 0x2188], 0
push eax
push 0x660c44
lea ecx, [ebp - 0x1f74]
call fcn.0053fa70
test al, al
je 0x480ca6
cmp dword [ebp - 0x2188], 0
jne 0x480e22
push 0
push 1
push 1
push 0
push 0x66655c
lea ecx, [ebp - 0x1ff0]
call fcn.00543e30
test eax, eax
jne 0x480e22
push eax
push 1
push 1
push eax
push 0x66657c
lea ecx, [ebp - 0x1ff0]
call fcn.00543e30
test eax, eax
jne 0x480e22
push eax
push 1
push 1
push eax
push 0x6665cc
lea ecx, [ebp - 0x1ff0]
call fcn.00543e30
test eax, eax
jne 0x480e22
push eax
push 1
push 1
push eax
push 0x6665b0
lea ecx, [ebp - 0x1ff0]
call fcn.00543e30
test eax, eax
jne 0x480e22
push eax
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x6683fc
lea ecx, [ebp - 0x1ff0]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x480e22
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff0]
call fcn.005454f0
push eax
mov ecx, esi
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x660ba4
push 2
push 0x2f
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x480e22
push 0
push 0
push 0
push 0
push 0
push 0x660ba4
mov ecx, esi
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.005454f0
push eax
push 0x2f
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666634
mov ecx, esi
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x1ff0]
call fcn.005454f0
push eax
push 0x668428
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f7c], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x480c25
mov esi, dword [ebp - 0x6f74]
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x481c0f
push 0xc
lea ecx, [ebp - 0x2674]
call fcn.00401d20
lea ecx, [ebp - 0x2674]
call fcn.00545940
mov byte [ebp - 4], 0xa5
mov dword [ebp - 0x6f7c], 0
test esi, esi
je 0x48111d
mov eax, dword [ebp - 0x6f68]
mov esi, dword [ebp - 0x6f70]
sub eax, esi
mov dword [ebp - 0x6f54], eax
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x481117
mov ecx, dword [ebp - 0x6f54]
push 0
push 0x20019
lea ecx, [ecx + esi]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
lea eax, [ebp - 0x1ff0]
push eax
push 0x660ce4
lea ecx, [ebp - 0x1f74]
call fcn.0053fb00
test al, al
je 0x4810fb
lea eax, [ebp - 0x2188]
mov dword [ebp - 0x2188], 0
push eax
push 0x660de4
lea ecx, [ebp - 0x1f74]
call fcn.0053fa70
test al, al
je 0x480f16
cmp dword [ebp - 0x2188], 0
je 0x4810fb
push 0
push 1
push 1
push 0
push 0x66655c
lea ecx, [ebp - 0x1ff0]
call fcn.00543e30
test eax, eax
jne 0x4810fb
push eax
push 1
push 1
push eax
push 0x66657c
lea ecx, [ebp - 0x1ff0]
call fcn.00543e30
test eax, eax
jne 0x4810fb
push eax
push 1
push 1
push eax
push 0x6665cc
lea ecx, [ebp - 0x1ff0]
call fcn.00543e30
test eax, eax
jne 0x4810fb
push eax
push 1
push 1
push eax
push 0x6665b0
lea ecx, [ebp - 0x1ff0]
call fcn.00543e30
test eax, eax
jne 0x4810fb
push eax
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x6683fc
lea ecx, [ebp - 0x1ff0]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x4810fb
lea eax, [ebp - 0x2674]
push eax
push 0x660db0
lea ecx, [ebp - 0x1f74]
call fcn.0053fb00
test al, al
je 0x4810fb
lea ecx, [ebp - 0x2674]
call fcn.005451f0
test al, al
jne 0x4810fb
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666e70
lea ecx, [ebp - 0x2674]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2240]
call fcn.00545560
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff0]
call fcn.005454f0
push eax
mov ecx, esi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2240]
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 2
push 0x2f
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x4810fb
push 0
push 0
push 0
push 0
push 0
push 0x660ce4
mov ecx, esi
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.005454f0
push eax
push 0x2f
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666634
mov ecx, esi
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x1ff0]
call fcn.005454f0
push eax
push 0x668478
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f7c], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x480e95
mov esi, dword [ebp - 0x6f74]
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x481c04
mov dword [ebp - 0x6f7c], 0
test esi, esi
je 0x4813ac
mov esi, dword [ebp - 0x6f70]
mov eax, dword [ebp - 0x6f68]
sub eax, esi
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f48], eax
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x4813ac
mov eax, dword [ebp - 0x6f48]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f54], eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x48138a
lea eax, [ebp - 0x2188]
mov dword [ebp - 0x2188], 0
push eax
push 0x666ef8
lea ecx, [ebp - 0x1f74]
call fcn.0053fa70
test al, al
je 0x48138a
cmp dword [ebp - 0x2188], 4
jne 0x48138a
mov ecx, dword [ebp - 0x6f54]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666f1c
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00545560
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x48138a
lea eax, [ebp - 0x6cb4]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f6c], esi
call fcn.0053f6a0
test al, al
je 0x481384
nop word [eax + eax]
lea eax, [ebp - 0x1ff0]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f74]
call fcn.0053fb00
test al, al
je 0x481362
lea ecx, [ebp - 0x1ff0]
call fcn.005451f0
test al, al
jne 0x481362
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff0]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x660fa0
push 2
push 0x2f
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f94], eax
cmp eax, 0xffffffff
je 0x481362
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push 0
call fcn.005454f0
push eax
push 0x2f
push dword [ebp - 0x6f94]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666634
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x1ff0]
call fcn.005454f0
push eax
push 0x6684d8
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
lea eax, [ebp - 0x6cb4]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0053f6a0
test al, al
jne 0x481250
mov dword [ebp - 0x6f6c], esi
mov esi, dword [ebp - 0x6f40]
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f7c], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x481158
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x481c04
push 0
push 0x668520
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f54], 0
jbe 0x4817bd
mov esi, dword [ebp - 0x6f70]
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x4817bd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667f6c
lea ecx, [ebp - 0x2184]
call fcn.005454f0
push eax
push dword [ebp - 0x6f54]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x20d8]
call fcn.00545560
push 0x260
lea ecx, [ebp - 0x39d8]
call fcn.00401d70
push 1
lea ecx, [ebp - 0x20d8]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x39d8]
call fcn.004016d0
push 3
lea ecx, [ebp - 0x20d8]
mov byte [ebp - 4], 0xa6
call fcn.00544180
lea ecx, [ebp - 0x39d8]
call fcn.00401810
test al, al
je 0x481795
nop word [eax + eax]
push 1
lea ecx, [ebp - 0x39d8]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2034]
call fcn.00545870
push 0x6664fc
lea ecx, [ebp - 0x2034]
call fcn.005457e0
test al, al
je 0x4814de
push 0
push 1
push 1
push 0
push 0x66650c
lea ecx, [ebp - 0x2034]
call fcn.00543e30
cmp eax, 1
jne 0x481782
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666520
push 1
lea ecx, [ebp - 0x39d8]
call fcn.00401870
push eax
lea ecx, [ebp - 0x20d8]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2034]
call fcn.00545560
lea ecx, [ebp - 0x2034]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
je 0x481630
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x668558
push 0x6610a4
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x481630
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2034]
call fcn.005454f0
push eax
mov ecx, esi
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6610a4
push 2
push 0x2e
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x481782
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2034]
call fcn.005454f0
push eax
push 0
push 0x2e
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666fc8
lea ecx, [ebp - 0x2034]
call fcn.005454f0
push eax
push 0x665cfc
mov ecx, esi
call fcn.005454f0
push eax
push 0x6645a4
push 0x6610a4
push 0x667000
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x668558
push 0x6611a0
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x481782
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667024
push 1
lea ecx, [ebp - 0x39d8]
call fcn.00401870
push eax
lea ecx, [ebp - 0x20d8]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2034]
call fcn.00545560
lea ecx, [ebp - 0x2034]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
je 0x481782
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2034]
call fcn.005454f0
push eax
mov ecx, esi
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6611a0
push 2
push 0x2e
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x481782
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2034]
call fcn.005454f0
push eax
push 0
push 0x2e
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666fc8
lea ecx, [ebp - 0x2034]
call fcn.005454f0
push eax
push 0x665cfc
mov ecx, esi
call fcn.005454f0
push eax
push 0x6645a4
push 0x6611a0
push 0x667000
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
lea ecx, [ebp - 0x39d8]
call fcn.004017d0
test al, al
jne 0x481490
lea ecx, [ebp - 0x39d8]
mov byte [ebp - 4], 0xa5
call fcn.00401720
mov eax, dword [ebp - 0x6f54]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f54], eax
cmp eax, dword [edi + 0x30]
jb 0x4813e7
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x481c04
lea eax, [ebp - 0x22a0]
push eax
lea ecx, [ebp - 0x2034]
call fcn.00545840
push 1
lea ecx, [ebp - 0x2034]
call fcn.00545210
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667040
lea ecx, [ebp - 0x2034]
call fcn.00543b40
lea ecx, [ebp - 0x2034]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
je 0x4819b4
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x668558
push 0x661270
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x4819b4
push 0
lea ecx, [ebp - 0x2034]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x251c]
call fcn.00513940
test al, al
je 0x4819b4
lea eax, [ebp - 0x2a08]
push eax
push 0x622ccc
push 0x666548
lea ecx, [ebp - 0x251c]
call fcn.00513210
test al, al
jne 0x4818f7
lea eax, [ebp - 0x2a08]
push eax
push 0x622ccc
push 0x666688
lea ecx, [ebp - 0x251c]
call fcn.00513210
test al, al
jne 0x4818f7
lea eax, [ebp - 0x2a08]
push eax
push 0x622ccc
push 0x660828
lea ecx, [ebp - 0x251c]
call fcn.00513210
test al, al
jne 0x4818f7
lea eax, [ebp - 0x2a08]
push eax
push 0x622ccc
push 0x666a14
lea ecx, [ebp - 0x251c]
call fcn.00513210
test al, al
je 0x4819b4
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2034]
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x65f370
push 0x661270
push 2
push 0x2e
push dword [eax + 0xa8]
call fcn.0049a0a0
mov esi, eax
cmp esi, 0xffffffff
je 0x4819b4
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f370
lea ecx, [ebp - 0x2034]
call fcn.005454f0
push eax
push 0
push 0x2e
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666634
lea ecx, [ebp - 0x2034]
call fcn.005454f0
push eax
push 0x665cfc
push 0x66537c
push 0x667068
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x668558
push 0x662b48
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x481c04
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x481a40
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668328
push esi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00545560
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4819f6
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668328
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00545560
cmp dword [ebp - 0x6fa8], 0
je 0x481aa7
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x668328
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00545560
cmp dword [ebp - 0x6f74], 0
mov dword [ebp - 0x6f7c], 0
jbe 0x481bf1
mov eax, dword [ebp - 0x6f70]
sub eax, esi
mov dword [ebp - 0x6f54], eax
nop dword [eax]
mov ecx, esi
call fcn.005454f0
xor edx, edx
mov ecx, eax
call fcn.0053cb60
test al, al
je 0x481bd5
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x481bf1
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
lea ecx, [esi + ecx]
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x662b48
push 2
push 0x2e
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x481bd5
mov ecx, dword [ebp - 0x6f54]
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [esi + ecx]
call fcn.005454f0
push eax
push 0
mov ecx, esi
call fcn.005454f0
push eax
push 0x2e
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666fc8
mov ecx, esi
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x665cfc
lea ecx, [esi + ecx]
call fcn.005454f0
push eax
push 0x6645a4
push 0x662b48
push 0x667000
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f7c], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x481ad0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.005193f0
lea ecx, [ebp - 0x2674]
call fcn.00545790
lea ecx, [ebp - 0x2240]
call fcn.00545790
lea ecx, [ebp - 0x2258]
call fcn.00545790
lea ecx, [ebp - 0x6d70]
call fcn.00402710
lea ecx, [ebp - 0x251c]
call fcn.00401e40
lea ecx, [ebp - 0x22a0]
call fcn.00545790
lea ecx, [ebp - 0x1ff0]
call fcn.00545790
lea ecx, [ebp - 0x23a4]
call fcn.00545790
lea ecx, [ebp - 0x2034]
call fcn.00545790
lea ecx, [ebp - 0x20d8]
mov byte [ebp - 4], 0x45
call fcn.00545790
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x483ecc
test dword [edi + 0x34], 0x1000
jne 0x483ecc
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x668584
push dword [eax + 0x38]
call fcn.0051a750
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x2f
push dword [eax + 0x34]
call fcn.005173e0
push 0xc
lea ecx, [ebp - 0x216c]
call fcn.00401d20
lea ecx, [ebp - 0x216c]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x204c]
mov byte [ebp - 4], 0xa7
call fcn.00401d20
lea ecx, [ebp - 0x204c]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x24b0]
mov byte [ebp - 4], 0xa8
call fcn.00401d20
lea ecx, [ebp - 0x24b0]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2160]
mov byte [ebp - 4], 0xa9
call fcn.00401d20
lea ecx, [ebp - 0x2160]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x232c]
mov byte [ebp - 4], 0xaa
call fcn.00401d20
lea ecx, [ebp - 0x232c]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x227c]
mov byte [ebp - 4], 0xab
call fcn.00401d20
lea ecx, [ebp - 0x227c]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2308]
mov byte [ebp - 4], 0xac
call fcn.00401d20
lea ecx, [ebp - 0x2308]
call fcn.00545940
mov byte [ebp - 4], 0xad
lea ecx, [ebp - 0x2884]
xor esi, esi
push 0x20
mov dword [ebp - 0x6f7c], esi
call fcn.00401e20
lea ecx, [ebp - 0x2884]
call fcn.00533850
mov byte [ebp - 4], 0xae
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.005193f0
push esi
push 0x6685b0
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov dword [ebp - 0x6f4c], esi
cmp dword [edi + 0x30], esi
jbe 0x4821c9
mov eax, dword [ebp - 0x6f70]
lea esi, [edi + 0x10c]
mov dword [ebp - 0x6f40], eax
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x4821c3
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646a7c
lea ecx, [ebp - 0x2220]
call fcn.005454f0
push eax
push dword [ebp - 0x6f4c]
mov ecx, esi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x232c]
call fcn.00545560
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646aa0
lea ecx, [ebp - 0x232c]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x227c]
call fcn.00545560
lea ecx, [ebp - 0x227c]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
je 0x4821a6
lea ecx, [ebp - 0x2308]
call fcn.005451f0
test al, al
je 0x481ec4
lea eax, [ebp - 0x2308]
push eax
lea ecx, [ebp - 0x2220]
call fcn.005454f0
push dword [ebp - 0x6f4c]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
mov edx, esi
mov ecx, eax
call fcn.004ecd90
lea eax, [ebp - 0x216c]
xor esi, esi
push eax
lea ecx, [ebp - 0x227c]
mov dword [ebp - 0x6f54], esi
call fcn.005454f0
xor edx, edx
mov ecx, eax
call fcn.004ecbb0
test al, al
je 0x4821a0
nop
lea ecx, [ebp - 0x216c]
call fcn.005454f0
mov ecx, eax
call fcn.00530270
test al, al
je 0x482176
inc dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x2418]
push 0xc
call fcn.00401d20
lea ecx, [ebp - 0x2418]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x25f0]
mov byte [ebp - 4], 0xaf
call fcn.00401d20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646a68
lea ecx, [ebp - 0x216c]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x25f0]
call fcn.00545880
lea eax, [ebp - 0x2418]
mov byte [ebp - 4], 0xb0
push eax
lea ecx, [ebp - 0x25f0]
call fcn.005454f0
mov edx, 0x662c34
mov ecx, eax
call fcn.004ec920
test al, al
je 0x48215c
push 0
push 1
push 1
push 0
push 0x66655c
lea ecx, [ebp - 0x2418]
call fcn.00543e30
test eax, eax
jne 0x48215c
push eax
push 1
push 1
push eax
push 0x66657c
lea ecx, [ebp - 0x2418]
call fcn.00543e30
test eax, eax
jne 0x48215c
push eax
push 1
push 1
push eax
push 0x6665cc
lea ecx, [ebp - 0x2418]
call fcn.00543e30
test eax, eax
jne 0x48215c
push eax
push 1
push 1
push eax
push 0x6665b0
lea ecx, [ebp - 0x2418]
call fcn.00543e30
test eax, eax
jne 0x48215c
push eax
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x668624
lea ecx, [ebp - 0x2418]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x48215c
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2418]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x662c10
push 3
push 0x33
push dword [eax + 0xa8]
call fcn.0049a0a0
mov esi, eax
cmp esi, 0xffffffff
jne 0x48209f
lea ecx, [ebp - 0x25f0]
call fcn.00545790
lea ecx, [ebp - 0x2418]
mov byte [ebp - 4], 0xae
call fcn.00545790
mov esi, dword [ebp - 0x6f54]
jmp 0x482176
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.005454f0
push eax
lea ecx, [ebp - 0x25f0]
call fcn.005454f0
push eax
push 0
push 0x33
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666634
lea ecx, [ebp - 0x25f0]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x6652d8
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x2418]
call fcn.005454f0
push eax
push 0x668650
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
lea ecx, [ebp - 0x25f0]
call fcn.00545790
lea ecx, [ebp - 0x2418]
mov byte [ebp - 4], 0xae
call fcn.00545790
mov esi, dword [ebp - 0x6f54]
jmp 0x482176
lea ecx, [ebp - 0x25f0]
call fcn.00545790
lea ecx, [ebp - 0x2418]
mov byte [ebp - 4], 0xae
call fcn.00545790
lea eax, [ebp - 0x216c]
inc esi
push eax
lea ecx, [ebp - 0x227c]
mov dword [ebp - 0x6f54], esi
call fcn.005454f0
mov edx, esi
mov ecx, eax
call fcn.004ecbb0
test al, al
jne 0x481ef0
lea esi, [edi + 0x10c]
mov eax, dword [ebp - 0x6f4c]
add dword [ebp - 0x6f40], 0xc
inc eax
mov dword [ebp - 0x6f4c], eax
cmp eax, dword [edi + 0x30]
jb 0x481de4
mov esi, dword [ebp - 0x6f7c]
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x483e70
test esi, esi
jne 0x482201
lea ecx, [ebp - 0x2308]
call fcn.005451f0
test al, al
je 0x482201
push esi
push 0x668680
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
jmp 0x483e70
push fcn.00545790
push fcn.00545940
push 2
push 0xc
lea eax, [ebp - 0x2c]
push eax
call fcn.0041eab1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6686d8
lea ecx, [ebp - 0x26d4]
mov byte [ebp - 4], 0xb1
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2c]
call fcn.00545560
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6686d8
lea ecx, [ebp - 0x26e0]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x20]
call fcn.00545560
push 0xc
lea ecx, [ebp - 0x24ec]
call fcn.00401d20
push 1
push 0x668728
lea ecx, [ebp - 0x24ec]
call fcn.005458d0
push 0
push 0x6687f0
lea ecx, [ebp - 0x1fd4]
mov byte [ebp - 4], 0xb2
call fcn.00532850
xor esi, esi
mov dword [ebp - 0x6f7c], esi
cmp dword [edi + 0x30], esi
jbe 0x48263e
mov eax, dword [ebp - 0x6f70]
mov dword [ebp - 0x6f40], eax
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48263e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646a7c
lea ecx, [ebp - 0x2220]
call fcn.005454f0
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x232c]
call fcn.00545560
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646aa0
lea ecx, [ebp - 0x232c]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x227c]
call fcn.00545560
lea ecx, [ebp - 0x227c]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
je 0x482627
lea eax, [ebp - 0x216c]
xor esi, esi
push eax
lea ecx, [ebp - 0x227c]
mov dword [ebp - 0x6f54], esi
call fcn.005454f0
xor edx, edx
mov ecx, eax
call fcn.004ecbb0
test al, al
je 0x482621
nop
lea ecx, [ebp - 0x216c]
call fcn.005454f0
mov ecx, eax
call fcn.00530270
test al, al
je 0x4825f7
push 0xc
lea ecx, [ebp - 0x243c]
call fcn.00401d20
lea ecx, [ebp - 0x243c]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x25fc]
mov byte [ebp - 4], 0xb3
call fcn.00401d20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646a68
lea ecx, [ebp - 0x216c]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x25fc]
call fcn.00545880
lea eax, [ebp - 0x243c]
mov byte [ebp - 4], 0xb4
push eax
lea ecx, [ebp - 0x25fc]
call fcn.005454f0
mov edx, 0x662d50
mov ecx, eax
call fcn.004ec920
test al, al
je 0x4825dd
push 0x658170
lea ecx, [ebp - 0x243c]
call fcn.00545820
test al, al
jne 0x4825dd
push 0x657a78
lea ecx, [ebp - 0x243c]
call fcn.00545820
test al, al
jne 0x4825dd
push 0x6585f8
lea ecx, [ebp - 0x243c]
call fcn.00545820
test al, al
jne 0x4825dd
push 0x66882c
lea ecx, [ebp - 0x243c]
call fcn.00545820
test al, al
jne 0x4825dd
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x668844
lea ecx, [ebp - 0x243c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x4825dd
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x243c]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x662d10
push 3
push 0x34
push dword [eax + 0xa8]
call fcn.0049a0a0
mov esi, eax
cmp esi, 0xffffffff
jne 0x482520
lea ecx, [ebp - 0x25fc]
call fcn.00545790
lea ecx, [ebp - 0x243c]
mov byte [ebp - 4], 0xb2
call fcn.00545790
mov esi, dword [ebp - 0x6f54]
jmp 0x4825f7
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.005454f0
push eax
lea ecx, [ebp - 0x25fc]
call fcn.005454f0
push eax
push 0
push 0x34
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666634
lea ecx, [ebp - 0x25fc]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x6652d8
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x243c]
call fcn.005454f0
push eax
push 0x668878
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
lea ecx, [ebp - 0x25fc]
call fcn.00545790
lea ecx, [ebp - 0x243c]
mov byte [ebp - 4], 0xb2
call fcn.00545790
mov esi, dword [ebp - 0x6f54]
jmp 0x4825f7
lea ecx, [ebp - 0x25fc]
call fcn.00545790
lea ecx, [ebp - 0x243c]
mov byte [ebp - 4], 0xb2
call fcn.00545790
lea eax, [ebp - 0x216c]
inc esi
push eax
lea ecx, [ebp - 0x227c]
mov dword [ebp - 0x6f54], esi
call fcn.005454f0
mov edx, esi
mov ecx, eax
call fcn.004ecbb0
test al, al
jne 0x482390
mov esi, dword [ebp - 0x6f7c]
add dword [ebp - 0x6f40], 0xc
inc esi
mov dword [ebp - 0x6f7c], esi
cmp esi, dword [edi + 0x30]
jb 0x4822c8
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x483e4f
lea esi, [ebp - 0x2c]
mov dword [ebp - 0x6f7c], 0
mov dword [ebp - 0x6f54], esi
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x4829ac
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6688a4
mov ecx, esi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x204c]
call fcn.00545560
push 0x260
lea ecx, [ebp - 0x4a78]
call fcn.00401d70
push 1
lea ecx, [ebp - 0x204c]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x4a78]
call fcn.004016d0
push 1
lea ecx, [ebp - 0x204c]
mov byte [ebp - 4], 0xb5
call fcn.005454f0
push eax
lea ecx, [ebp - 0x4a78]
call fcn.00401820
test al, al
je 0x48297e
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d194
push 1
lea ecx, [ebp - 0x4a78]
call fcn.00401870
push eax
push 0x61d194
lea ecx, [ebp - 0x2160]
call fcn.00545560
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2160]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x24ec]
call fcn.00543e30
test eax, eax
jne 0x482965
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 1
lea ecx, [ebp - 0x4a78]
call fcn.00401870
push eax
push 0x61d058
mov ecx, esi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x204c]
call fcn.00545560
lea ecx, [ebp - 0x2160]
call fcn.00545760
push 0
push 0x80
lea ecx, [ebp - 0x204c]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2884]
call fcn.00533190
test eax, eax
je 0x482822
push 0
lea eax, [ebp - 0x2160]
push eax
lea ecx, [ebp - 0x2884]
call fcn.00532fd0
test eax, eax
je 0x482822
push 0
push 1
push 1
push 0
push 0x6688b4
lea ecx, [ebp - 0x2160]
call fcn.00543e30
mov esi, eax
push 0
lea ecx, [esi + 0xa]
push ecx
push 1
push 0
push 0x6688cc
lea ecx, [ebp - 0x2160]
call fcn.00543e30
test esi, esi
je 0x482817
test eax, eax
je 0x482817
sub eax, esi
lea ecx, [ebp - 0x2160]
sub eax, 0xb
push eax
lea eax, [esi + 0xb]
push eax
call fcn.005440d0
jmp 0x482822
lea ecx, [ebp - 0x2160]
call fcn.00545760
lea ecx, [ebp - 0x2160]
call fcn.005451f0
test al, al
je 0x482859
push 1
lea ecx, [ebp - 0x4a78]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2160]
call fcn.00545870
push 0
lea ecx, [ebp - 0x2160]
call fcn.00545280
jmp 0x482866
push 3
lea ecx, [ebp - 0x2160]
call fcn.005434c0
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x668844
lea ecx, [ebp - 0x204c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x482965
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x204c]
call fcn.005454f0
push eax
push 0x65f370
lea ecx, [ebp - 0x2160]
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 3
push 0x34
push dword [eax + 0xa8]
call fcn.0049a0a0
mov esi, eax
cmp esi, 0xffffffff
je 0x482965
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f370
lea ecx, [ebp - 0x204c]
call fcn.005454f0
push eax
push 0
push 0x34
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666634
lea ecx, [ebp - 0x204c]
call fcn.005454f0
push eax
push 0x6652d8
push 0x65f370
push 0x6645a4
lea ecx, [ebp - 0x2160]
call fcn.005454f0
push eax
push 0x6688e8
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
lea ecx, [ebp - 0x4a78]
call fcn.004017d0
mov esi, dword [ebp - 0x6f54]
test al, al
jne 0x4826f0
lea ecx, [ebp - 0x4a78]
mov byte [ebp - 4], 0xb2
call fcn.00401720
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f54], esi
mov dword [ebp - 0x6f7c], eax
cmp eax, 2
jb 0x482660
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x483e4f
push 0x24
lea ecx, [ebp - 0x2830]
call fcn.00402080
lea ecx, [ebp - 0x2830]
call fcn.00513b80
push 0xc
lea ecx, [ebp - 0x2264]
mov byte [ebp - 4], 0xb6
call fcn.00401d20
lea ecx, [ebp - 0x2264]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2424]
mov byte [ebp - 4], 0xb7
call fcn.00401d20
lea ecx, [ebp - 0x2424]
call fcn.00545940
push 0
push 0x668910
lea ecx, [ebp - 0x1fd4]
mov byte [ebp - 4], 0xb8
call fcn.00532850
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668944
lea ecx, [edi + 0x314]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00545560
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f7c], 0
jbe 0x482eb2
mov esi, dword [ebp - 0x6f70]
mov dword [ebp - 0x6f4c], esi
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x482eb2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668980
lea ecx, [ebp - 0x2220]
call fcn.005454f0
push eax
push dword [ebp - 0x6f7c]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x216c]
call fcn.00545560
lea eax, [ebp - 0x204c]
xor edx, edx
push eax
lea ecx, [ebp - 0x216c]
mov dword [ebp - 0x6f54], edx
call fcn.005454f0
xor edx, edx
mov ecx, eax
call fcn.004ecbb0
test al, al
je 0x482e93
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6632d0
lea ecx, [ebp - 0x204c]
call fcn.00543b40
push 0x100
lea ecx, [ebp - 0x204c]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2830]
call fcn.00513940
test al, al
je 0x482e66
push 0
lea eax, [ebp - 0x2a40]
mov dword [ebp - 0x6eb4], 0
push eax
xorps xmm0, xmm0
lea ecx, [ebp - 0x2830]
push 0x662f68
movups xmmword [ebp - 0x6ec4], xmm0
call fcn.00513340
test al, al
je 0x482e66
lea eax, [ebp - 0x2a40]
push eax
lea eax, [ebp - 0x6ec4]
push eax
lea ecx, [ebp - 0x2830]
call fcn.00512860
test al, al
je 0x482e66
lea eax, [ebp - 0x2264]
push eax
push 0x662f9c
lea eax, [ebp - 0x6ec4]
push eax
lea ecx, [ebp - 0x2830]
call fcn.005130c0
test eax, eax
je 0x482e45
push 0
push 1
push 1
push 0
push 0x6689bc
lea ecx, [ebp - 0x2264]
call fcn.00543e30
lea ecx, [ebp - 0x2264]
mov esi, eax
call fcn.00545700
sub eax, 0x12
cmp esi, eax
je 0x482e3f
push 0
push 1
push 1
push 0
push 0x6689e4
lea ecx, [ebp - 0x2264]
call fcn.00543e30
lea ecx, [ebp - 0x2264]
mov esi, eax
call fcn.00545700
sub eax, 0xb
cmp esi, eax
je 0x482e3f
push 0
push 1
push 1
push 0
push 0x668a00
lea ecx, [ebp - 0x2264]
call fcn.00543e30
lea ecx, [ebp - 0x2264]
mov esi, eax
call fcn.00545700
sub eax, 0xb
cmp esi, eax
je 0x482e3f
lea eax, [ebp - 0x6ec4]
push eax
lea eax, [ebp - 0x2b84]
push eax
push 0x668a1c
lea ecx, [ebp - 0x2830]
call fcn.00513340
test al, al
je 0x482e3f
lea eax, [ebp - 0x2264]
push eax
push 0x668a38
lea eax, [ebp - 0x2b84]
push eax
lea ecx, [ebp - 0x2830]
call fcn.005130c0
test eax, eax
je 0x482e3f
push 0x6664fc
lea ecx, [ebp - 0x2264]
call fcn.00545820
test al, al
jne 0x482e3f
lea eax, [ebp - 0x2424]
push eax
push 0x662f78
lea eax, [ebp - 0x6ec4]
push eax
lea ecx, [ebp - 0x2830]
call fcn.005130c0
test eax, eax
jne 0x482cf4
lea eax, [ebp - 0x2424]
push eax
push 0x662f90
lea eax, [ebp - 0x6ec4]
push eax
lea ecx, [ebp - 0x2830]
call fcn.005130c0
test eax, eax
je 0x482e3f
lea ecx, [ebp - 0x2264]
call fcn.005454f0
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.005454f0
mov edx, esi
mov ecx, eax
call fcn.0053cb60
test al, al
jne 0x482e3f
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x668a44
lea ecx, [ebp - 0x2264]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x482e3f
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2424]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f4c]
push eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2264]
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 3
push 0x35
push dword [eax + 0xa8]
call fcn.0049a0a0
mov esi, eax
cmp esi, 0xffffffff
je 0x482e3f
lea ecx, [ebp - 0x204c]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f4c]
push eax
push 0
push 0
push 0
push 0
push 0
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2424]
call fcn.005454f0
push eax
push 0
push 0x35
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666634
lea ecx, [ebp - 0x2424]
call fcn.005454f0
mov esi, dword [ebp - 0x6f4c]
mov ecx, esi
push eax
push 0x6652d8
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x2264]
call fcn.005454f0
push eax
push 0x665b00
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
jmp 0x482e45
mov esi, dword [ebp - 0x6f4c]
lea eax, [ebp - 0x2a40]
push eax
lea eax, [ebp - 0x6ec4]
push eax
lea ecx, [ebp - 0x2830]
call fcn.00512860
test al, al
jne 0x482b92
inc dword [ebp - 0x6f54]
lea eax, [ebp - 0x204c]
push eax
lea ecx, [ebp - 0x216c]
call fcn.005454f0
mov edx, dword [ebp - 0x6f54]
mov ecx, eax
call fcn.004ecbb0
test al, al
jne 0x482af2
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f4c], esi
mov dword [ebp - 0x6f7c], eax
cmp eax, dword [edi + 0x30]
jb 0x482a71
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x483e2e
push 0
push 0x668a70
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x6e60]
push 1
push 0
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6e68], eax
mov dword [ebp - 0x6e64], 0x37
call fcn.005458d0
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0xb9
call fcn.005454f0
lea ecx, [edi + 0x14c]
mov dword [ebp - 0x6e54], eax
mov dword [ebp - 0x6e50], 0
call fcn.005454f0
mov dword [ebp - 0x6e4c], eax
lea ecx, [ebp - 0x6e40]
lea eax, [ebp - 0x1fd4]
push 1
mov dword [ebp - 0x6e48], eax
mov eax, dword [edi + 4]
push 0x638c24
mov dword [ebp - 0x6e44], eax
call fcn.005458d0
mov ecx, edi
mov byte [ebp - 4], 0xba
call fcn.0046c9e0
test al, al
jne 0x483e23
push 0xc
lea ecx, [ebp - 0x23b0]
call fcn.00401d20
lea ecx, [ebp - 0x23b0]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x23ec]
mov byte [ebp - 4], 0xbb
call fcn.00401d20
lea ecx, [ebp - 0x23ec]
call fcn.00545940
xor esi, esi
mov byte [ebp - 4], 0xbc
mov dword [ebp - 0x6f40], esi
cmp dword [edi + 0x30], esi
jbe 0x483145
nop
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x483145
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00545700
cmp eax, 3
jl 0x483135
lea eax, [ebp - 0x6e60]
push eax
lea ecx, [ebp - 0x2220]
call fcn.005454f0
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
mov edx, esi
mov ecx, eax
call fcn.004ecd90
mov esi, dword [ebp - 0x6f40]
test al, al
je 0x483135
push esi
lea ecx, [edi + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24c8]
mov dword [ebp - 0x6e50], eax
call fcn.005454f0
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x23b0]
call fcn.00545560
lea ecx, [ebp - 0x23b0]
call fcn.005454f0
mov ecx, eax
call fcn.00530270
test al, al
je 0x483135
lea ecx, [ebp - 0x23b0]
call fcn.005454f0
push eax
lea eax, [ebp - 0x6e68]
mov ecx, edi
push eax
call fcn.0048d880
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x483145
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25e4]
call fcn.005454f0
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x23b0]
call fcn.00545560
lea ecx, [ebp - 0x23b0]
call fcn.005454f0
mov ecx, eax
call fcn.00530270
test al, al
je 0x483135
push 0
lea ecx, [ebp - 0x23b0]
call fcn.00545210
lea ecx, [ebp - 0x23b0]
call fcn.005454f0
push eax
lea eax, [ebp - 0x6e68]
mov ecx, edi
push eax
call fcn.0048d880
inc esi
mov dword [ebp - 0x6f40], esi
cmp esi, dword [edi + 0x30]
jb 0x482fb0
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x483e0d
lea ecx, [ebp - 0x2638]
mov dword [ebp - 0x6e50], 0x65f370
call fcn.005454f0
push eax
lea eax, [ebp - 0x6e68]
mov ecx, edi
push eax
call fcn.0048d880
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x483e0d
push 0
push 1
lea ecx, [ebp - 0x2644]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x23b0]
call fcn.005455c0
mov ecx, eax
call fcn.00545210
lea ecx, [ebp - 0x23b0]
call fcn.005454f0
push eax
lea eax, [ebp - 0x6e68]
mov ecx, edi
push eax
call fcn.0048d880
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x483e0d
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x48323a
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668aa0
push esi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00545560
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4831f0
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668ae8
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00545560
cmp dword [ebp - 0x6fa8], 0
je 0x4832a1
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x668ae8
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00545560
push 4
lea ecx, [ebp - 0x22c0]
call fcn.00401d40
lea ecx, [ebp - 0x22c0]
call fcn.0053fe60
cmp dword [ebp - 0x6f74], 0
mov byte [ebp - 4], 0xbd
mov dword [ebp - 0x6f7c], 0
jbe 0x4835e8
mov eax, dword [ebp - 0x6f70]
mov ecx, esi
sub ecx, eax
mov dword [ebp - 0x6f40], eax
mov dword [ebp - 0x6f94], ecx
nop word [eax + eax]
add eax, ecx
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f54], eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x22c0]
call fcn.0053fdf0
test al, al
je 0x4835ba
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x4835e8
xor esi, esi
mov ecx, edi
mov dword [ebp - 0x6f6c], esi
call fcn.0046c9e0
test al, al
jne 0x4835ba
lea eax, [ebp - 0x6cb4]
push eax
push esi
lea ecx, [ebp - 0x22c0]
call fcn.0053f740
test al, al
je 0x4835b4
mov ecx, dword [ebp - 0x6f54]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668b30
push dword [ebp - 0x6cb4]
push 0x61d058
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00545560
mov ecx, dword [ebp - 0x6f54]
push 0
call fcn.00545700
push eax
push 1
push 0
push 0x668b58
lea ecx, [ebp - 0x1f98]
call fcn.00543e30
test eax, eax
je 0x4835a4
lea eax, [ebp - 0x23ec]
push eax
push 0x61d060
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f990
test al, al
je 0x4835a4
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2308]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x23ec]
call fcn.00543e30
mov dword [ebp - 0x6f48], eax
test eax, eax
je 0x4835a4
lea ecx, [ebp - 0x2308]
call fcn.00545700
add eax, dword [ebp - 0x6f48]
lea ecx, [ebp - 0x23ec]
push eax
call fcn.00544110
push 3
push 0
push 0
push 0x61d060
push 0x61e2b0
lea ecx, [ebp - 0x23ec]
call fcn.00543640
mov ecx, eax
call fcn.005434c0
lea ecx, [ebp - 0x23ec]
call fcn.00545700
cmp eax, 3
jl 0x4835a4
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x664410
lea ecx, [ebp - 0x23ec]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x4835a4
mov ecx, dword [ebp - 0x6f54]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
push 0x61d058
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00545560
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x23ec]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6609f0
push 3
push 0x37
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x4835a4
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.005454f0
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
push 0x37
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666634
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x23ec]
call fcn.005454f0
push eax
push 0x666cb8
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
mov ecx, edi
inc esi
call fcn.0046c9e0
test al, al
je 0x483340
mov dword [ebp - 0x6f6c], esi
mov ecx, dword [ebp - 0x6f7c]
mov eax, dword [ebp - 0x6f40]
inc ecx
add eax, 0xc
mov dword [ebp - 0x6f7c], ecx
cmp ecx, dword [ebp - 0x6f74]
mov ecx, dword [ebp - 0x6f94]
mov dword [ebp - 0x6f40], eax
jb 0x4832f0
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x483e02
push 0
push 0x668b70
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
push 0xc
lea ecx, [ebp - 0x24f8]
call fcn.00401d20
lea ecx, [ebp - 0x24f8]
call fcn.00545940
mov byte [ebp - 4], 0xbe
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f7c], 0
jbe 0x483ddd
mov esi, dword [ebp - 0x6f70]
nop
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x483ddd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668980
lea ecx, [ebp - 0x2220]
call fcn.005454f0
push eax
push dword [ebp - 0x6f7c]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x216c]
call fcn.00545560
lea eax, [ebp - 0x24f8]
xor edx, edx
push eax
lea ecx, [ebp - 0x216c]
mov dword [ebp - 0x6f54], edx
call fcn.005454f0
xor edx, edx
mov ecx, eax
call fcn.004ecbb0
test al, al
je 0x483dc4
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646a18
lea ecx, [ebp - 0x24f8]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x204c]
call fcn.00545560
lea ecx, [ebp - 0x204c]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
je 0x483807
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x668ba8
push 0x663230
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x483807
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x204c]
call fcn.005454f0
push eax
mov ecx, esi
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x663230
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x483807
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x204c]
call fcn.005454f0
push eax
push 0
push 0x38
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666fc8
lea ecx, [ebp - 0x204c]
call fcn.005454f0
push eax
push 0x6652d8
mov ecx, esi
call fcn.005454f0
push eax
push 0x6645a4
push 0x663230
push 0x667000
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646a34
lea ecx, [ebp - 0x24f8]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x204c]
call fcn.00545560
lea ecx, [ebp - 0x204c]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
jne 0x483873
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x6632d0
lea ecx, [ebp - 0x24f8]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x204c]
call fcn.00545560
lea ecx, [ebp - 0x204c]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
je 0x483989
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x668ba8
push 0x663290
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x483989
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x204c]
call fcn.005454f0
push eax
mov ecx, esi
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x663290
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x483989
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x204c]
call fcn.005454f0
push eax
push 0
push 0x38
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666fc8
lea ecx, [ebp - 0x204c]
call fcn.005454f0
push eax
push 0x6652d8
mov ecx, esi
call fcn.005454f0
push eax
push 0x6645a4
push 0x663290
push 0x667000
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646a4c
lea ecx, [ebp - 0x24f8]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x204c]
call fcn.00545560
lea ecx, [ebp - 0x204c]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
jne 0x4839f5
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x663210
lea ecx, [ebp - 0x24f8]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x204c]
call fcn.00545560
lea ecx, [ebp - 0x204c]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
je 0x483b0b
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x668ba8
push 0x6631c8
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x483b0b
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x204c]
call fcn.005454f0
push eax
mov ecx, esi
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6631c8
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x483b0b
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x204c]
call fcn.005454f0
push eax
push 0
push 0x38
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666fc8
lea ecx, [ebp - 0x204c]
call fcn.005454f0
push eax
push 0x6652d8
mov ecx, esi
call fcn.005454f0
push eax
push 0x6645a4
push 0x6631c8
push 0x667000
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646a68
lea ecx, [ebp - 0x24f8]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x204c]
call fcn.00545560
lea ecx, [ebp - 0x204c]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
je 0x483c51
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x668ba8
push 0x6632f4
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x483c51
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x204c]
call fcn.005454f0
push eax
mov ecx, esi
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6632f4
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x483c51
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x204c]
call fcn.005454f0
push eax
push 0
push 0x38
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666fc8
lea ecx, [ebp - 0x204c]
call fcn.005454f0
push eax
push 0x6652d8
mov ecx, esi
call fcn.005454f0
push eax
push 0x6645a4
push 0x6632f4
push 0x667000
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668bd4
lea ecx, [ebp - 0x24f8]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x204c]
call fcn.00545560
lea ecx, [ebp - 0x204c]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
je 0x483d97
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x668ba8
push 0x668be8
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x483d97
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x204c]
call fcn.005454f0
push eax
mov ecx, esi
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x668be8
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x483d97
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x204c]
call fcn.005454f0
push eax
push 0
push 0x38
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666fc8
lea ecx, [ebp - 0x204c]
call fcn.005454f0
push eax
push 0x6652d8
mov ecx, esi
call fcn.005454f0
push eax
push 0x6645a4
push 0x668be8
push 0x667000
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
inc dword [ebp - 0x6f54]
lea eax, [ebp - 0x24f8]
push eax
lea ecx, [ebp - 0x216c]
call fcn.005454f0
mov edx, dword [ebp - 0x6f54]
mov ecx, eax
call fcn.004ecbb0
test al, al
jne 0x4836c1
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f7c], eax
cmp eax, dword [edi + 0x30]
jb 0x483640
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.005193f0
mov ecx, edi
call fcn.0046c9e0
lea ecx, [ebp - 0x24f8]
call fcn.00545790
lea ecx, [ebp - 0x22c0]
call fcn.0053fda0
lea ecx, [ebp - 0x23ec]
call fcn.00545790
lea ecx, [ebp - 0x23b0]
call fcn.00545790
lea ecx, [ebp - 0x6e68]
call fcn.00402710
lea ecx, [ebp - 0x2424]
call fcn.00545790
lea ecx, [ebp - 0x2264]
call fcn.00545790
lea ecx, [ebp - 0x2830]
call fcn.00401e40
lea ecx, [ebp - 0x24ec]
call fcn.00545790
push fcn.00545790
push 2
push 0xc
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0xae
push eax
call fcn.0041e708
lea ecx, [ebp - 0x2884]
call fcn.00401e00
lea ecx, [ebp - 0x2308]
call fcn.00545790
lea ecx, [ebp - 0x227c]
call fcn.00545790
lea ecx, [ebp - 0x232c]
call fcn.00545790
lea ecx, [ebp - 0x2160]
call fcn.00545790
lea ecx, [ebp - 0x24b0]
call fcn.00545790
lea ecx, [ebp - 0x204c]
call fcn.00545790
lea ecx, [ebp - 0x216c]
mov byte [ebp - 4], 0x45
call fcn.00545790
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48797b
test dword [edi + 0x34], 0x1000
jne 0x48797b
push 0
push 0x668c30
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x668c7c
push dword [eax + 0x38]
call fcn.0051a750
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x32
push dword [eax + 0x34]
call fcn.005173e0
push 0xc
lea ecx, [ebp - 0x2068]
call fcn.00401d20
lea ecx, [ebp - 0x2068]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x1fe0]
mov byte [ebp - 4], 0xbf
call fcn.00401d20
lea ecx, [ebp - 0x1fe0]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x24d4]
mov byte [ebp - 4], 0xc0
call fcn.00401d20
lea ecx, [ebp - 0x24d4]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x201c]
mov byte [ebp - 4], 0xc1
call fcn.00401d20
lea ecx, [ebp - 0x201c]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2090]
mov byte [ebp - 4], 0xc2
call fcn.00401d20
lea ecx, [ebp - 0x2090]
call fcn.00545940
push 0x24
lea ecx, [ebp - 0x25cc]
mov byte [ebp - 4], 0xc3
call fcn.00402080
lea ecx, [ebp - 0x25cc]
call fcn.00513b80
push 0x260
lea ecx, [ebp - 0x2df8]
mov byte [ebp - 4], 0xc4
call fcn.00401d70
lea ecx, [ebp - 0x2df8]
call fcn.004016a0
push 0x260
lea ecx, [ebp - 0x32b8]
mov byte [ebp - 4], 0xc5
call fcn.00401d70
lea ecx, [ebp - 0x32b8]
call fcn.004016a0
push 0xc
lea ecx, [ebp - 0x21c0]
mov byte [ebp - 4], 0xc6
call fcn.00401d20
lea ecx, [ebp - 0x21c0]
call fcn.00403a70
push 0xc
lea ecx, [ebp - 0x2350]
mov byte [ebp - 4], 0xc7
call fcn.00401d20
push 0xc
push 0
lea ecx, [ebp - 0x2350]
call fcn.004039b0
push 0xc
lea ecx, [ebp - 0x2058]
mov byte [ebp - 4], 0xc8
call fcn.00401d20
push 0xc
push 0
lea ecx, [ebp - 0x2058]
call fcn.004039b0
push 0xc
lea ecx, [ebp - 0x21e4]
mov byte [ebp - 4], 0xc9
call fcn.00401d20
lea ecx, [ebp - 0x21e4]
call fcn.00403a70
push 0xc
lea ecx, [ebp - 0x2208]
mov byte [ebp - 4], 0xca
call fcn.00401d20
push 0xc
push 0
lea ecx, [ebp - 0x2208]
call fcn.004031a0
xor esi, esi
mov byte [ebp - 4], 0xcb
push 0x20
lea ecx, [ebp - 0x280c]
mov dword [ebp - 0x6f4c], esi
call fcn.00401e20
lea ecx, [ebp - 0x280c]
call fcn.00533850
mov byte [ebp - 4], 0xcc
mov ecx, dword [edi + 0x30]
mov dword [ebp - 0x6f54], esi
test ecx, ecx
je 0x484781
lea eax, [edi + 0x10c]
mov dword [ebp - 0x6f7c], eax
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d1a8
lea ecx, [ebp - 0x2184]
call fcn.005454f0
push eax
push dword [ebp - 0x6f54]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00545560
push 5
lea ecx, [ebp - 0x1fe0]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2df8]
call fcn.00401820
test al, al
je 0x484769
mov edi, dword [ebp - 0x6f54]
nop
push 1
push 1
lea ecx, [ebp - 0x2df8]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2090]
call fcn.005455c0
push 0x658170
lea ecx, [ebp - 0x2090]
call fcn.00545820
test al, al
jne 0x48474a
push str.Microsoft
lea ecx, [ebp - 0x2090]
call fcn.00545820
test al, al
jne 0x48474a
push 0x668cb4
lea ecx, [ebp - 0x2090]
call fcn.00545820
test al, al
jne 0x48474a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668cc8
push 1
lea ecx, [ebp - 0x2df8]
call fcn.00401870
push eax
push 0x61d058
lea ecx, [ebp - 0x2184]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f7c]
push eax
push edi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2068]
call fcn.00545560
lea ecx, [ebp - 0x2068]
call fcn.005454f0
push eax
call dword [0x5fd684]
test al, al
jne 0x4845a2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668d00
push 1
lea ecx, [ebp - 0x2df8]
call fcn.00401870
push eax
push 0x61d058
lea ecx, [ebp - 0x2184]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f7c]
push eax
push edi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2068]
call fcn.00545560
lea ecx, [ebp - 0x2068]
call fcn.005454f0
push eax
call dword [0x5fd684]
test al, al
jne 0x4845a2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d1a8
push 1
lea ecx, [ebp - 0x2df8]
call fcn.00401870
push eax
push 0x61d058
lea ecx, [ebp - 0x2184]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f7c]
push eax
push edi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00545560
push 5
lea ecx, [ebp - 0x1fe0]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x32b8]
call fcn.00401820
test al, al
je 0x48474a
push 2
lea ecx, [ebp - 0x1fe0]
call fcn.00544180
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668cc8
push 1
lea ecx, [ebp - 0x32b8]
call fcn.00401870
push eax
push 0x61d058
lea ecx, [ebp - 0x1fe0]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2068]
call fcn.00545560
lea ecx, [ebp - 0x2068]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
jne 0x4843ae
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x668d00
push 1
lea ecx, [ebp - 0x32b8]
call fcn.00401870
push eax
push 0x61d058
lea ecx, [ebp - 0x1fe0]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2068]
call fcn.00545560
lea ecx, [ebp - 0x2068]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
je 0x48458a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668d44
lea eax, [esi + 1]
push 1
lea ecx, [ebp - 0x32b8]
mov dword [ebp - 0x6f40], eax
call fcn.00401870
push eax
push 0x61d058
lea ecx, [ebp - 0x1fe0]
call fcn.005454f0
push eax
push esi
push 2
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x21c0]
call fcn.004037b0
mov ecx, eax
call fcn.00403920
mov ecx, eax
call fcn.00545560
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x32b8]
call fcn.00401870
push eax
push 0x61d058
push 1
lea ecx, [ebp - 0x2df8]
call fcn.00401870
push eax
push esi
push 2
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2350]
call fcn.004037b0
mov ecx, eax
call fcn.00403920
mov ecx, eax
call fcn.00545560
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x32b8]
call fcn.00401870
push eax
push 0x61e0f8
push 1
lea ecx, [ebp - 0x2df8]
call fcn.00401870
push eax
push esi
push 2
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2058]
call fcn.004037b0
mov ecx, eax
call fcn.00403920
mov ecx, eax
call fcn.00545560
push esi
push 2
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2208]
call fcn.004030c0
mov ecx, eax
call fcn.00403180
push 2
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x21e4]
mov dword [eax], edi
call fcn.004037b0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668d5c
push esi
lea ecx, [ebp - 0x21c0]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2068]
call fcn.00545560
lea ecx, [ebp - 0x2068]
call fcn.005454f0
mov dl, 1
mov ecx, eax
call fcn.005325a0
push 0
push eax
lea ecx, [ebp - 0x2068]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x280c]
call fcn.00533190
test eax, eax
je 0x484584
push 0
push esi
lea ecx, [ebp - 0x21e4]
call fcn.00403920
push eax
lea ecx, [ebp - 0x280c]
call fcn.00532fd0
test eax, eax
je 0x484584
push 3
push esi
lea ecx, [ebp - 0x21e4]
call fcn.00403920
mov ecx, eax
call fcn.005434c0
mov esi, dword [ebp - 0x6f40]
lea ecx, [ebp - 0x32b8]
call fcn.004017d0
test al, al
jne 0x484308
jmp 0x48474a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668d44
lea eax, [esi + 1]
push 1
lea ecx, [ebp - 0x2df8]
mov dword [ebp - 0x6f40], eax
call fcn.00401870
push eax
push 0x61d058
lea ecx, [ebp - 0x2184]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f7c]
push eax
push edi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
push esi
push 2
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x21c0]
call fcn.004037b0
mov ecx, eax
call fcn.00403920
mov ecx, eax
call fcn.00545560
push 1
push 1
lea ecx, [ebp - 0x2df8]
call fcn.00401870
push eax
push esi
push 2
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2350]
call fcn.004037b0
mov ecx, eax
call fcn.00403920
mov ecx, eax
call fcn.005455c0
push 1
push 1
lea ecx, [ebp - 0x2df8]
call fcn.00401870
push eax
push esi
push 2
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2058]
call fcn.004037b0
mov ecx, eax
call fcn.00403920
mov ecx, eax
call fcn.005455c0
push esi
push 2
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2208]
call fcn.004030c0
mov ecx, eax
call fcn.00403180
push 2
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x21e4]
mov dword [eax], edi
call fcn.004037b0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668d5c
push esi
lea ecx, [ebp - 0x21c0]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2068]
call fcn.00545560
lea ecx, [ebp - 0x2068]
call fcn.005454f0
mov dl, 1
mov ecx, eax
call fcn.005325a0
push 0
push eax
lea ecx, [ebp - 0x2068]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x280c]
call fcn.00533190
test eax, eax
je 0x484744
push 0
push esi
lea ecx, [ebp - 0x21e4]
call fcn.00403920
push eax
lea ecx, [ebp - 0x280c]
call fcn.00532fd0
test eax, eax
je 0x484744
push 3
push esi
lea ecx, [ebp - 0x21e4]
call fcn.00403920
mov ecx, eax
call fcn.005434c0
mov esi, dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2df8]
call fcn.004017d0
test al, al
jne 0x484150
mov edi, dword [ebp - 0x6f44]
mov dword [ebp - 0x6f4c], esi
mov eax, dword [ebp - 0x6f54]
mov ecx, dword [edi + 0x30]
inc eax
mov dword [ebp - 0x6f54], eax
cmp eax, ecx
jb 0x4840e0
mov dword [ebp - 0x6f40], 0
test ecx, ecx
je 0x484997
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668d78
lea ecx, [ebp - 0x2220]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
push ecx
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2068]
call fcn.00545560
lea ecx, [ebp - 0x2068]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
jne 0x484849
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x668dd0
lea ecx, [ebp - 0x2220]
call fcn.005454f0
push eax
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2068]
call fcn.00545560
lea ecx, [ebp - 0x2068]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
je 0x484981
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668e38
lea ecx, [ebp - 0x2220]
inc esi
call fcn.005454f0
push eax
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x21c0]
push 2
push esi
call fcn.004037b0
mov ecx, eax
call fcn.00403920
mov ecx, eax
call fcn.00545560
push 1
push 0x668e58
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x2350]
push 2
push esi
call fcn.004037b0
mov ecx, eax
call fcn.00403920
mov ecx, eax
call fcn.005455c0
push 1
push 0x668e90
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x2058]
push 2
push esi
call fcn.004037b0
mov ecx, eax
call fcn.00403920
mov ecx, eax
call fcn.005455c0
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x2208]
push 2
push esi
call fcn.004030c0
mov ecx, eax
call fcn.00403180
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov dword [eax], ecx
lea ecx, [ebp - 0x2184]
push 0x668eac
call fcn.005454f0
push eax
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
push dword [ebp - 0x6f4c]
push 2
push esi
lea ecx, [ebp - 0x21e4]
call fcn.004037b0
mov ecx, eax
call fcn.00403920
mov ecx, eax
call fcn.00545560
mov dword [ebp - 0x6f4c], esi
mov eax, dword [ebp - 0x6f40]
inc eax
mov dword [ebp - 0x6f40], eax
cmp eax, dword [edi + 0x30]
jb 0x484793
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x4878dd
lea ecx, [ebp - 0x1fd4]
push 0
test esi, esi
jne 0x4849c1
push 0x668ef0
call fcn.00532850
jmp 0x4878dd
push 0x668f70
call fcn.00532850
mov dword [ebp - 0x6f40], 0
test esi, esi
je 0x4850dd
nop dword [eax]
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x4850dd
push 0x668e90
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00545820
mov byte [ebp - 0x6f61], al
lea ecx, [ebp - 0x21c0]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
je 0x484a37
push 0x668fdc
jmp 0x484a3c
push 0x668fe8
push dword [ebp - 0x6f40]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2068]
call fcn.00545560
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2208]
call fcn.00403180
push 0x260
lea ecx, [ebp - 0x53f8]
mov eax, dword [eax]
mov dword [ebp - 0x6f7c], eax
call fcn.00401d70
push 1
lea ecx, [ebp - 0x2068]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x53f8]
call fcn.004016d0
push 3
lea ecx, [ebp - 0x2068]
mov byte [ebp - 4], 0xcd
call fcn.00544180
lea ecx, [ebp - 0x53f8]
call fcn.00401810
test al, al
je 0x4850b9
mov esi, dword [ebp - 0x6f40]
nop word [eax + eax]
push 1
lea ecx, [ebp - 0x53f8]
call fcn.00401870
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00545870
cmp byte [ebp - 0x6f61], 0
jne 0x484b27
push 0x6664fc
lea ecx, [ebp - 0x1fe0]
call fcn.005457e0
test al, al
je 0x484b27
push 0
push 1
push 1
push 0
push 0x66650c
lea ecx, [ebp - 0x1fe0]
call fcn.00543e30
cmp eax, 1
jne 0x4850a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666520
push 1
lea ecx, [ebp - 0x53f8]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2068]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00545560
push 0x100
lea ecx, [ebp - 0x1fe0]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x25cc]
call fcn.00513940
test al, al
je 0x4850a0
lea eax, [ebp - 0x201c]
push eax
push 0x622ccc
push 0x666548
lea ecx, [ebp - 0x25cc]
call fcn.00513110
test eax, eax
je 0x484dd8
push 0
push 1
push 1
push 0
push 0x66655c
lea ecx, [ebp - 0x201c]
call fcn.00543e30
test eax, eax
jne 0x484dd8
push eax
push 1
push 1
push eax
push 0x66657c
lea ecx, [ebp - 0x201c]
call fcn.00543e30
test eax, eax
jne 0x484dd8
push eax
push 1
push 1
push eax
push 0x6665cc
lea ecx, [ebp - 0x201c]
call fcn.00543e30
test eax, eax
jne 0x484dd8
push 0x666598
lea ecx, [ebp - 0x201c]
call fcn.00545820
test al, al
jne 0x484dd8
push 0
push 1
push 1
push 0
push 0x6665b0
lea ecx, [ebp - 0x201c]
call fcn.00543e30
test eax, eax
jne 0x484dd8
push eax
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x668ff8
lea ecx, [ebp - 0x201c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x484dd8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d170
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
push 0x669044
lea ecx, [ebp - 0x2584]
call fcn.00545560
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [ebp - 0x6f70]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 1
lea ecx, [ebp - 0x201c]
mov dword [ebp - 0x6f54], eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2584]
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x3e
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x484dd8
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push 0
push 0
push 0
push 0
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.005454f0
push eax
push 0x666548
push 0x3e
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0x666634
lea ecx, [ebp - 0x1fe0]
call fcn.005454f0
push eax
push 0x665cfc
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x664588
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x201c]
call fcn.005454f0
push eax
push 0x666668
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
lea eax, [ebp - 0x2aa4]
mov dword [ebp - 0x6f04], 0
push eax
push 0x622ccc
xorps xmm0, xmm0
lea ecx, [ebp - 0x25cc]
push 0x666688
movups xmmword [ebp - 0x6f14], xmm0
call fcn.00513210
test al, al
je 0x4850a0
lea eax, [ebp - 0x2aa4]
push eax
lea eax, [ebp - 0x6f14]
push eax
lea ecx, [ebp - 0x25cc]
call fcn.00512860
test al, al
je 0x4850a0
lea eax, [ebp - 0x201c]
push eax
lea eax, [ebp - 0x6f14]
push eax
lea ecx, [ebp - 0x25cc]
call fcn.00512b70
test eax, eax
je 0x48507f
push 0
push 1
push 1
push 0
push 0x66655c
lea ecx, [ebp - 0x201c]
call fcn.00543e30
test eax, eax
jne 0x48507f
push eax
push 1
push 1
push eax
push 0x66657c
lea ecx, [ebp - 0x201c]
call fcn.00543e30
test eax, eax
jne 0x48507f
push eax
push 1
push 1
push eax
push 0x6665cc
lea ecx, [ebp - 0x201c]
call fcn.00543e30
test eax, eax
jne 0x48507f
push 0x666598
lea ecx, [ebp - 0x201c]
call fcn.00545820
test al, al
jne 0x48507f
push 0
push 1
push 1
push 0
push 0x6665b0
lea ecx, [ebp - 0x201c]
call fcn.00543e30
test eax, eax
jne 0x48507f
push eax
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x668ff8
lea ecx, [ebp - 0x201c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x48507f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d170
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
push 0x66905c
lea ecx, [ebp - 0x2584]
call fcn.00545560
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [ebp - 0x6f70]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 1
lea ecx, [ebp - 0x201c]
mov dword [ebp - 0x6f54], eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2584]
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x3e
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x48507f
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push 0
push 0
push 0
push 0
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.005454f0
push eax
push 0x666688
push 0x3e
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0x666634
lea ecx, [ebp - 0x1fe0]
call fcn.005454f0
push eax
push 0x665cfc
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x664588
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x201c]
call fcn.005454f0
push eax
push 0x66907c
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
lea eax, [ebp - 0x2aa4]
push eax
lea eax, [ebp - 0x6f14]
push eax
lea ecx, [ebp - 0x25cc]
call fcn.00512860
test al, al
jne 0x484e31
lea ecx, [ebp - 0x53f8]
call fcn.004017d0
test al, al
jne 0x484ad0
mov esi, dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x53f8]
mov byte [ebp - 4], 0xcc
call fcn.00401720
mov eax, dword [ebp - 0x6f40]
inc eax
mov dword [ebp - 0x6f40], eax
cmp eax, esi
jb 0x4849e0
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x4878dd
push 0
push 0x6690b0
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov dword [ebp - 0x6f40], 0
test esi, esi
je 0x485549
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x485549
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2208]
call fcn.00403180
push 0x668e90
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2058]
mov eax, dword [eax]
mov dword [ebp - 0x6f48], eax
call fcn.00403920
mov ecx, eax
call fcn.00545820
mov byte [ebp - 0x6f61], al
lea ecx, [ebp - 0x21c0]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
je 0x485180
push 0x668fdc
jmp 0x485185
push 0x668fe8
push dword [ebp - 0x6f40]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2068]
call fcn.00545560
push 0x260
lea ecx, [ebp - 0x5198]
call fcn.00401d70
push 1
lea ecx, [ebp - 0x2068]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x5198]
call fcn.004016d0
push 3
lea ecx, [ebp - 0x2068]
mov byte [ebp - 4], 0xce
call fcn.00544180
lea ecx, [ebp - 0x5198]
call fcn.00401810
test al, al
je 0x485525
mov esi, dword [ebp - 0x6f40]
nop word [eax + eax]
push 1
lea ecx, [ebp - 0x5198]
call fcn.00401870
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00545870
cmp byte [ebp - 0x6f61], 0
jne 0x485257
push 0x6664fc
lea ecx, [ebp - 0x1fe0]
call fcn.005457e0
test al, al
je 0x485257
push 0
push 1
push 1
push 0
push 0x66650c
lea ecx, [ebp - 0x1fe0]
call fcn.00543e30
cmp eax, 1
jne 0x48550c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666520
push 1
lea ecx, [ebp - 0x5198]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2068]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00545560
push 0x100
lea ecx, [ebp - 0x1fe0]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x25cc]
call fcn.00513940
test al, al
je 0x48550c
lea eax, [ebp - 0x201c]
push eax
push 0x622ccc
push 0x666800
lea ecx, [ebp - 0x25cc]
call fcn.00513110
test eax, eax
je 0x48550c
push 0
push 1
push 1
push 0
push 0x66655c
lea ecx, [ebp - 0x201c]
call fcn.00543e30
test eax, eax
jne 0x48550c
push eax
push 1
push 1
push eax
push 0x6666b4
lea ecx, [ebp - 0x201c]
call fcn.00543e30
test eax, eax
jne 0x48550c
push eax
push 1
push 1
push eax
push 0x66657c
lea ecx, [ebp - 0x201c]
call fcn.00543e30
test eax, eax
jne 0x48550c
push eax
push 1
push 1
push eax
push 0x6665cc
lea ecx, [ebp - 0x201c]
call fcn.00543e30
test eax, eax
jne 0x48550c
push eax
push 1
push 1
push eax
push 0x6666d8
lea ecx, [ebp - 0x201c]
call fcn.00543e30
test eax, eax
jne 0x48550c
push eax
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x669110
lea ecx, [ebp - 0x201c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x48550c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d170
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
push 0x669164
lea ecx, [ebp - 0x2584]
call fcn.00545560
mov eax, dword [ebp - 0x6f48]
mov ecx, dword [ebp - 0x6f70]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 1
lea ecx, [ebp - 0x201c]
mov dword [ebp - 0x6f54], eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2584]
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x3f
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f94], eax
cmp eax, 0xffffffff
je 0x48550c
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push 0
push 0
push 0
push 0
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.005454f0
push eax
push 0x6668e0
push 0x3f
push dword [ebp - 0x6f94]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0x666634
lea ecx, [ebp - 0x1fe0]
call fcn.005454f0
push eax
push 0x665cfc
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x664588
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x201c]
call fcn.005454f0
push eax
push 0x669198
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
lea ecx, [ebp - 0x5198]
call fcn.004017d0
test al, al
jne 0x485200
mov esi, dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x5198]
mov byte [ebp - 4], 0xcc
call fcn.00401720
mov eax, dword [ebp - 0x6f40]
inc eax
mov dword [ebp - 0x6f40], eax
cmp eax, esi
jb 0x485110
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x4878dd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6691e0
lea ecx, [edi + 0x314]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00545560
push 0
push 0x669220
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov dword [ebp - 0x6f40], 0
test esi, esi
je 0x485bb8
nop dword [eax]
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x485bb8
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2208]
call fcn.00403180
push 0xc
lea ecx, [ebp - 0x26b0]
mov eax, dword [eax]
mov dword [ebp - 0x6f48], eax
call fcn.00401d20
lea ecx, [ebp - 0x26b0]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x26bc]
mov byte [ebp - 4], 0xcf
call fcn.00401d20
lea ecx, [ebp - 0x26bc]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2608]
mov byte [ebp - 4], 0xd0
call fcn.00401d20
lea ecx, [ebp - 0x2608]
call fcn.00545940
push 0x668e90
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2058]
mov byte [ebp - 4], 0xd1
call fcn.00403920
mov ecx, eax
call fcn.00545820
mov byte [ebp - 0x6f61], al
lea ecx, [ebp - 0x21c0]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
je 0x485674
push 0x668fdc
jmp 0x485679
push 0x668fe8
push dword [ebp - 0x6f40]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2068]
call fcn.00545560
push 0x260
lea ecx, [ebp - 0x45b8]
call fcn.00401d70
push 1
lea ecx, [ebp - 0x2068]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x45b8]
call fcn.004016d0
push 3
lea ecx, [ebp - 0x2068]
mov byte [ebp - 4], 0xd2
call fcn.00544180
lea ecx, [ebp - 0x45b8]
call fcn.00401810
test al, al
je 0x485b73
nop dword [eax]
nop dword [eax + eax]
push 1
lea ecx, [ebp - 0x45b8]
call fcn.00401870
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00545870
cmp byte [ebp - 0x6f61], 0
jne 0x485747
push 0x6664fc
lea ecx, [ebp - 0x1fe0]
call fcn.005457e0
test al, al
je 0x485747
push 0
push 1
push 1
push 0
push 0x66650c
lea ecx, [ebp - 0x1fe0]
call fcn.00543e30
cmp eax, 1
jne 0x485b5a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666520
push 1
lea ecx, [ebp - 0x45b8]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2068]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00545560
push 0x100
lea ecx, [ebp - 0x1fe0]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x25cc]
call fcn.00513940
test al, al
je 0x485b5a
lea eax, [ebp - 0x2ab8]
mov dword [ebp - 0x6f18], 0
push eax
push 0x622ccc
xorps xmm0, xmm0
lea ecx, [ebp - 0x25cc]
push 0x666a14
movups xmmword [ebp - 0x6f28], xmm0
call fcn.00513210
test al, al
je 0x485b5a
lea eax, [ebp - 0x2ab8]
push eax
lea eax, [ebp - 0x6f28]
push eax
lea ecx, [ebp - 0x25cc]
call fcn.00512c30
test al, al
je 0x485b5a
lea eax, [ebp - 0x26b0]
push eax
lea eax, [ebp - 0x6f28]
push eax
lea ecx, [ebp - 0x25cc]
call fcn.005131d0
test al, al
je 0x485b39
lea ecx, [ebp - 0x26b0]
call fcn.005454f0
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.005454f0
mov edx, esi
mov ecx, eax
call fcn.0053cb60
test al, al
jne 0x485b39
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666a40
lea ecx, [ebp - 0x26b0]
call fcn.005454f0
push eax
push 0x666a64
lea ecx, [ebp - 0x26bc]
call fcn.00545560
lea eax, [ebp - 0x2090]
push eax
push 0x622ccc
lea ecx, [ebp - 0x26bc]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x25cc]
call fcn.00513110
test eax, eax
je 0x485b39
lea ecx, [ebp - 0x2090]
call fcn.005454f0
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.005454f0
mov edx, esi
mov ecx, eax
call fcn.0053cb60
test al, al
jne 0x485b39
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x669278
lea ecx, [ebp - 0x2090]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x485b39
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666a94
lea ecx, [ebp - 0x26b0]
call fcn.005454f0
push eax
push 0x666a64
lea ecx, [ebp - 0x26bc]
call fcn.00545560
lea eax, [ebp - 0x2608]
push eax
push 0x622ccc
lea ecx, [ebp - 0x26bc]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x25cc]
call fcn.00513110
test eax, eax
je 0x4859a8
push 0
push 1
push 1
push 5
push 0x61e398
lea ecx, [ebp - 0x2608]
call fcn.00543e30
test eax, eax
jne 0x4859a8
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x666aa4
push 1
lea ecx, [ebp - 0x45b8]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2068]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2608]
call fcn.005438d0
lea ecx, [ebp - 0x2608]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
je 0x485b39
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x26b0]
call fcn.005454f0
push eax
push 0x666a64
lea ecx, [ebp - 0x26bc]
call fcn.00545560
mov eax, dword [ebp - 0x6f48]
mov ecx, dword [ebp - 0x6f70]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x2608]
call fcn.005454f0
push eax
mov ecx, esi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2090]
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x40
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f94], eax
cmp eax, 0xffffffff
je 0x485b39
push 0
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
push 0
push 0
lea ecx, [ebp - 0x2608]
call fcn.005454f0
push eax
push 0
mov ecx, esi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x26bc]
call fcn.005454f0
push eax
push 0x40
push dword [ebp - 0x6f94]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0x666634
lea ecx, [ebp - 0x2608]
call fcn.005454f0
push eax
push 0x6652d8
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
push 0x664588
mov ecx, esi
call fcn.005454f0
push eax
push 0x666ac0
lea ecx, [ebp - 0x26b0]
call fcn.005454f0
push eax
push 0x6264dc
lea ecx, [ebp - 0x2090]
call fcn.005454f0
push eax
push 0x6692c0
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
lea eax, [ebp - 0x2ab8]
push eax
lea eax, [ebp - 0x6f28]
push eax
lea ecx, [ebp - 0x25cc]
call fcn.00512c30
test al, al
jne 0x485800
lea ecx, [ebp - 0x45b8]
call fcn.004017d0
test al, al
jne 0x4856f0
mov esi, dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x45b8]
call fcn.00401720
lea ecx, [ebp - 0x2608]
call fcn.00545790
lea ecx, [ebp - 0x26bc]
call fcn.00545790
lea ecx, [ebp - 0x26b0]
mov byte [ebp - 4], 0xcc
call fcn.00545790
mov eax, dword [ebp - 0x6f40]
inc eax
mov dword [ebp - 0x6f40], eax
cmp eax, esi
jb 0x4855b0
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x4878dd
push 0
push 0x6692f0
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x6e2c]
push 1
push 0
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6e34], eax
mov dword [ebp - 0x6e30], 0x41
call fcn.005458d0
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0xd3
call fcn.005454f0
lea ecx, [edi + 0x14c]
mov dword [ebp - 0x6e20], eax
mov dword [ebp - 0x6e1c], 0
call fcn.005454f0
mov dword [ebp - 0x6e18], eax
lea ecx, [ebp - 0x6e0c]
lea eax, [ebp - 0x1fd4]
mov dword [ebp - 0x6e14], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0x6e10], eax
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2344]
mov byte [ebp - 4], 0xd4
call fcn.00401d20
lea ecx, [ebp - 0x2344]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x22e4]
mov byte [ebp - 4], 0xd5
call fcn.00401d20
lea ecx, [ebp - 0x22e4]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2338]
mov byte [ebp - 4], 0xd6
call fcn.00401d20
lea ecx, [ebp - 0x2338]
call fcn.00545940
mov ecx, edi
mov byte [ebp - 4], 0xd7
call fcn.0046c9e0
test al, al
jne 0x4878b1
mov dword [ebp - 0x6f40], 0
test esi, esi
je 0x485f5c
nop word [eax + eax]
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x485f5c
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x21e4]
call fcn.00403920
mov ecx, eax
call fcn.00545700
cmp eax, 5
jl 0x485f3f
mov esi, dword [ebp - 0x6f40]
lea ecx, [ebp - 0x21e4]
push esi
call fcn.00403920
push eax
lea ecx, [ebp - 0x6e2c]
call fcn.00545840
push esi
lea ecx, [ebp - 0x2208]
call fcn.00403180
mov ecx, dword [ebp - 0x6f70]
mov eax, dword [eax]
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
call fcn.005454f0
push esi
lea ecx, [ebp - 0x2058]
mov dword [ebp - 0x6e1c], eax
call fcn.00403920
push eax
lea ecx, [ebp - 0x6e0c]
call fcn.00545840
push esi
lea ecx, [ebp - 0x2208]
call fcn.00403180
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24c8]
mov esi, eax
call fcn.005454f0
push eax
push dword [esi]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2344]
call fcn.00545560
lea ecx, [ebp - 0x2344]
call fcn.005454f0
mov ecx, eax
call fcn.00530270
test al, al
je 0x485f39
lea ecx, [ebp - 0x2344]
call fcn.005454f0
push eax
lea eax, [ebp - 0x6e34]
mov ecx, edi
push eax
call fcn.0048d880
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x485f56
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2208]
call fcn.00403180
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25e4]
mov esi, eax
call fcn.005454f0
push eax
push dword [esi]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2344]
call fcn.00545560
lea ecx, [ebp - 0x2344]
call fcn.005454f0
mov ecx, eax
call fcn.00530270
test al, al
je 0x485f39
push 0
lea ecx, [ebp - 0x2344]
call fcn.00545210
lea ecx, [ebp - 0x2344]
call fcn.005454f0
push eax
lea eax, [ebp - 0x6e34]
mov ecx, edi
push eax
call fcn.0048d880
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x6e2c]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2338]
call fcn.00543e30
test eax, eax
jne 0x485f39
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x61d194
lea ecx, [ebp - 0x6e2c]
call fcn.005454f0
push eax
push 0x61d194
lea ecx, [ebp - 0x2338]
call fcn.00543b40
lea ecx, [ebp - 0x2638]
mov dword [ebp - 0x6e1c], 0x65f370
call fcn.005454f0
push eax
lea eax, [ebp - 0x6e34]
mov ecx, edi
push eax
call fcn.0048d880
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x485f56
lea eax, [ebp - 0x2644]
push eax
lea ecx, [ebp - 0x2344]
call fcn.00545840
push 0
lea ecx, [ebp - 0x2344]
call fcn.00545210
lea ecx, [ebp - 0x2344]
call fcn.005454f0
push eax
lea eax, [ebp - 0x6e34]
mov ecx, edi
push eax
call fcn.0048d880
mov esi, dword [ebp - 0x6f4c]
mov eax, dword [ebp - 0x6f40]
inc eax
mov dword [ebp - 0x6f40], eax
cmp eax, esi
jb 0x485cd0
jmp 0x485f5c
mov esi, dword [ebp - 0x6f4c]
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x4878b1
push 4
lea ecx, [ebp - 0x2124]
call fcn.00401d40
lea ecx, [ebp - 0x2124]
call fcn.0053fe60
xor eax, eax
mov byte [ebp - 4], 0xd8
mov dword [ebp - 0x6f7c], eax
test esi, esi
je 0x4863a0
xor esi, esi
mov dword [ebp - 0x6f6c], esi
nop
push eax
lea ecx, [ebp - 0x2208]
call fcn.00403180
mov eax, dword [eax]
mov dword [ebp - 0x6f40], eax
test esi, esi
jne 0x486009
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push 0x668aa0
push eax
lea ecx, [edi + 0x104]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
push str.HKU_
lea ecx, [ebp - 0x1f98]
call fcn.00545560
mov eax, dword [ebp - 0x6f40]
mov ecx, dword [ebp - 0x6f70]
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
call fcn.005454f0
mov dword [ebp - 0x6f54], eax
jmp 0x486068
cmp esi, 1
jne 0x48602f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668aa0
push dword [ebp - 0x6f8c]
jmp 0x486053
cmp esi, 2
jne 0x48605e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668aa0
push dword [ebp - 0x6fa4]
lea ecx, [ebp - 0x1f98]
call fcn.00545560
mov dword [ebp - 0x6f54], 0x65f370
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2124]
call fcn.0053fdf0
test al, al
je 0x486377
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f94], 0
push eax
push 0
lea ecx, [ebp - 0x2124]
call fcn.0053f740
test al, al
je 0x486377
mov esi, dword [ebp - 0x6f7c]
nop word [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668b30
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x61d058
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00545560
push 0
push 0x20019
lea ecx, [ebp - 0x1fe0]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x486349
lea eax, [ebp - 0x22e4]
push eax
push 0x61d060
lea ecx, [ebp - 0x1f74]
call fcn.0053fb00
test al, al
je 0x486349
lea ecx, [ebp - 0x22e4]
call fcn.005451f0
test al, al
jne 0x486349
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x22e4]
call fcn.00544f60
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x21e4]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x22e4]
call fcn.00543e30
test eax, eax
je 0x486349
push esi
lea ecx, [ebp - 0x21e4]
call fcn.00403920
mov ecx, eax
call fcn.00545700
inc eax
lea ecx, [ebp - 0x22e4]
push eax
call fcn.00544110
push 0
push 0
push 0x61d060
push 0x61e2b0
push 3
lea ecx, [ebp - 0x22e4]
call fcn.005434c0
mov ecx, eax
call fcn.00543640
lea ecx, [ebp - 0x22e4]
call fcn.005451f0
test al, al
jne 0x486349
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x61d058
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00545560
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x664468
lea ecx, [ebp - 0x22e4]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x486349
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x22e4]
call fcn.005454f0
push eax
push dword [ebp - 0x6f54]
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6609f0
push 5
push 0x41
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x486349
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
push 0
push 0
push 0
push 0
push dword [ebp - 0x6f54]
lea ecx, [ebp - 0x1fe0]
push 0
call fcn.005454f0
push eax
push 0x41
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666634
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
push 0x664588
push dword [ebp - 0x6f54]
lea ecx, [ebp - 0x22e4]
push 0x6645a4
call fcn.005454f0
push eax
push 0x666cb8
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
mov eax, dword [ebp - 0x6f94]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x2124]
mov dword [ebp - 0x6f94], eax
call fcn.0053f740
test al, al
jne 0x4860c0
mov esi, dword [ebp - 0x6f6c]
mov eax, dword [ebp - 0x6f7c]
inc esi
mov dword [ebp - 0x6f6c], esi
cmp esi, 3
jb 0x485fa0
inc eax
mov dword [ebp - 0x6f7c], eax
cmp eax, dword [ebp - 0x6f4c]
jb 0x485f97
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x4878a6
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x48641a
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
nop word [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x66935c
push esi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00545560
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4863d0
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x669384
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00545560
cmp dword [ebp - 0x6fa8], 0
je 0x486481
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x669384
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00545560
push 0
push 0x6693b0
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
lea ecx, [ebp - 0x2338]
call fcn.00545760
cmp dword [ebp - 0x6f74], 0
jbe 0x486c92
mov ecx, dword [ebp - 0x6f70]
mov eax, esi
mov edx, dword [ebp - 0x6f74]
sub eax, ecx
mov dword [ebp - 0x6f48], eax
mov eax, dword [ebp - 0x6f4c]
mov dword [ebp - 0x6f40], ecx
mov dword [ebp - 0x6f54], edx
xor esi, esi
mov dword [ebp - 0x6f6c], esi
test eax, eax
je 0x486c7a
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x486c62
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x2350]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f48]
add ecx, dword [ebp - 0x6f40]
push eax
push 0x61d058
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2120]
call fcn.00545560
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2120]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2338]
call fcn.00543e30
test eax, eax
jne 0x486c51
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x61d194
lea ecx, [ebp - 0x2120]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2338]
call fcn.00543b40
push 0
push 0x20019
lea ecx, [ebp - 0x2120]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x4867aa
lea eax, [ebp - 0x201c]
push eax
push 0x660ba4
lea ecx, [ebp - 0x1f74]
call fcn.0053fb00
test al, al
je 0x4867aa
lea eax, [ebp - 0x218c]
mov dword [ebp - 0x218c], 0
push eax
push 0x660c44
lea ecx, [ebp - 0x1f74]
call fcn.0053fa70
test al, al
je 0x4865fe
cmp dword [ebp - 0x218c], 0
jne 0x4867aa
push 0
push 1
push 1
push 0
push 0x66655c
lea ecx, [ebp - 0x201c]
call fcn.00543e30
test eax, eax
jne 0x4867aa
push eax
push 1
push 1
push eax
push 0x66657c
lea ecx, [ebp - 0x201c]
call fcn.00543e30
test eax, eax
jne 0x4867aa
push eax
push 1
push 1
push eax
push 0x6665cc
lea ecx, [ebp - 0x201c]
call fcn.00543e30
test eax, eax
jne 0x4867aa
push eax
push 1
push 1
push eax
push 0x6665b0
lea ecx, [ebp - 0x201c]
call fcn.00543e30
test eax, eax
jne 0x4867aa
push eax
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x669410
lea ecx, [ebp - 0x201c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x4867aa
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x201c]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x660ba4
push 5
push 0x43
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f94], eax
cmp eax, 0xffffffff
je 0x4867aa
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
push 0
push 0
push 0x660ba4
call fcn.005454f0
push eax
push 0
lea ecx, [ebp - 0x2120]
call fcn.005454f0
push eax
push 0x43
push dword [ebp - 0x6f94]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666634
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x664588
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x201c]
call fcn.005454f0
push eax
push 0x669460
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
lea eax, [ebp - 0x201c]
push eax
push 0x660ce4
lea ecx, [ebp - 0x1f74]
call fcn.0053fb00
test al, al
je 0x486a10
lea eax, [ebp - 0x218c]
mov dword [ebp - 0x218c], 0
push eax
push 0x660de4
lea ecx, [ebp - 0x1f74]
call fcn.0053fa70
test al, al
je 0x4867fb
cmp dword [ebp - 0x218c], 0
je 0x486a10
push 0
push 1
push 1
push 0
push 0x66655c
lea ecx, [ebp - 0x201c]
call fcn.00543e30
test eax, eax
jne 0x486a10
push eax
push 1
push 1
push eax
push 0x66657c
lea ecx, [ebp - 0x201c]
call fcn.00543e30
test eax, eax
jne 0x486a10
push eax
push 1
push 1
push eax
push 0x6665cc
lea ecx, [ebp - 0x201c]
call fcn.00543e30
test eax, eax
jne 0x486a10
push eax
push 1
push 1
push eax
push 0x6665b0
lea ecx, [ebp - 0x201c]
call fcn.00543e30
test eax, eax
jne 0x486a10
push eax
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x669410
lea ecx, [ebp - 0x201c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x486a10
lea eax, [ebp - 0x2090]
push eax
push 0x660db0
lea ecx, [ebp - 0x1f74]
call fcn.0053fb00
test al, al
je 0x486a10
lea ecx, [ebp - 0x2090]
call fcn.005451f0
test al, al
jne 0x486a10
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666e70
lea ecx, [ebp - 0x2090]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x22e4]
call fcn.00545560
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x201c]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x22e4]
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x43
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f94], eax
cmp eax, 0xffffffff
je 0x486a10
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
push 0
push 0
push 0x660ce4
call fcn.005454f0
push eax
push 0
lea ecx, [ebp - 0x2120]
call fcn.005454f0
push eax
push 0x43
push dword [ebp - 0x6f94]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666634
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x664588
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x201c]
call fcn.005454f0
push eax
push 0x6694a0
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
lea eax, [ebp - 0x218c]
mov dword [ebp - 0x218c], 0
push eax
push 0x666ef8
lea ecx, [ebp - 0x1f74]
call fcn.0053fa70
test al, al
je 0x486c51
cmp dword [ebp - 0x218c], 4
jne 0x486c51
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666f1c
lea ecx, [ebp - 0x2120]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00545560
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2124]
call fcn.0053fdf0
test al, al
je 0x486c51
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f94], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.0053f6a0
test al, al
je 0x486c51
lea eax, [ebp - 0x201c]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f74]
call fcn.0053fb00
test al, al
je 0x486c29
lea ecx, [ebp - 0x201c]
call fcn.005451f0
test al, al
jne 0x486c29
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x669410
lea ecx, [ebp - 0x201c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x486c29
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x201c]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x660fa0
push 5
push 0x43
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f7c], eax
cmp eax, 0xffffffff
je 0x486c29
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
call fcn.005454f0
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
push 0x43
push dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666634
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x664588
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x201c]
call fcn.005454f0
push eax
push 0x6694ec
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
mov eax, dword [ebp - 0x6f94]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f94], eax
call fcn.0053f6a0
test al, al
jne 0x486ac2
mov eax, dword [ebp - 0x6f4c]
inc esi
cmp esi, eax
jb 0x4864e3
jmp 0x486c68
mov eax, dword [ebp - 0x6f4c]
mov ecx, dword [ebp - 0x6f40]
mov edx, dword [ebp - 0x6f54]
mov dword [ebp - 0x6f6c], esi
add ecx, 0xc
sub edx, 1
mov dword [ebp - 0x6f40], ecx
mov dword [ebp - 0x6f54], edx
jne 0x4864d3
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x4878a6
push 0
push 0x669520
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov esi, dword [ebp - 0x6f4c]
mov dword [ebp - 0x6f40], 0
test esi, esi
je 0x487269
nop dword [eax + eax]
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x487269
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2208]
call fcn.00403180
push 0x668e90
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2058]
mov eax, dword [eax]
mov dword [ebp - 0x6f94], eax
call fcn.00403920
mov ecx, eax
call fcn.00545820
mov byte [ebp - 0x6f61], al
lea ecx, [ebp - 0x21c0]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
je 0x486d40
push 0x668fdc
jmp 0x486d45
push 0x668fe8
push dword [ebp - 0x6f40]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2068]
call fcn.00545560
push 0x260
lea ecx, [ebp - 0x4358]
call fcn.00401d70
push 1
lea ecx, [ebp - 0x2068]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x4358]
call fcn.004016d0
push 3
lea ecx, [ebp - 0x2068]
mov byte [ebp - 4], 0xd9
call fcn.00544180
lea ecx, [ebp - 0x4358]
call fcn.00401810
test al, al
je 0x487245
mov esi, dword [ebp - 0x6f40]
nop word [eax + eax]
push 1
lea ecx, [ebp - 0x4358]
call fcn.00401870
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00545870
cmp byte [ebp - 0x6f61], 0
jne 0x486e17
push 0x6664fc
lea ecx, [ebp - 0x1fe0]
call fcn.005457e0
test al, al
je 0x486e17
push 0
push 1
push 1
push 0
push 0x66650c
lea ecx, [ebp - 0x1fe0]
call fcn.00543e30
cmp eax, 1
jne 0x48722c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666520
push 1
lea ecx, [ebp - 0x4358]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2068]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00545560
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x669578
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
push 0x6695a0
lea ecx, [ebp - 0x2090]
call fcn.00545560
lea ecx, [ebp - 0x1fe0]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
je 0x48703f
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x6695b0
lea ecx, [ebp - 0x2090]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x48703f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x669578
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
push 0x6695a0
lea ecx, [ebp - 0x2090]
call fcn.00545560
mov eax, dword [ebp - 0x6f94]
mov ecx, dword [ebp - 0x6f70]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x1fe0]
mov dword [ebp - 0x6f54], eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2090]
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x42
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x48722c
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push 0
push 0
push 0
push 0
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.005454f0
push eax
push 0
push 0x42
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0x666fc8
lea ecx, [ebp - 0x1fe0]
call fcn.005454f0
push eax
push 0x665cfc
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x664588
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x2090]
call fcn.005454f0
push eax
push 0x667000
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6695fc
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
push 0x6695a0
lea ecx, [ebp - 0x2090]
call fcn.00545560
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x6695b0
lea ecx, [ebp - 0x2090]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x48722c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667024
push 1
lea ecx, [ebp - 0x4358]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2068]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00545560
lea ecx, [ebp - 0x1fe0]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
je 0x48722c
mov eax, dword [ebp - 0x6f94]
mov ecx, dword [ebp - 0x6f70]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x1fe0]
mov dword [ebp - 0x6f54], eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2090]
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x42
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x48722c
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push 0
push 0
push 0
push 0
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.005454f0
push eax
push 0
push 0x42
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0x666fc8
lea ecx, [ebp - 0x1fe0]
call fcn.005454f0
push eax
push 0x665cfc
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x664588
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x2090]
call fcn.005454f0
push eax
push 0x667000
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
lea ecx, [ebp - 0x4358]
call fcn.004017d0
test al, al
jne 0x486dc0
mov esi, dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x4358]
mov byte [ebp - 4], 0xd8
call fcn.00401720
mov eax, dword [ebp - 0x6f40]
inc eax
mov dword [ebp - 0x6f40], eax
cmp eax, esi
jb 0x486cd0
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x4878a6
mov dword [ebp - 0x6f40], 0
test esi, esi
je 0x48758e
nop word [eax + eax]
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48758e
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x21e4]
call fcn.00403920
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00545840
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x1fe0]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2338]
call fcn.00543e30
test eax, eax
jne 0x487579
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x61d194
lea ecx, [ebp - 0x1fe0]
call fcn.005454f0
push eax
push 0x61d194
lea ecx, [ebp - 0x2338]
call fcn.00543b40
push 1
lea ecx, [ebp - 0x1fe0]
call fcn.00545210
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667040
lea ecx, [ebp - 0x1fe0]
call fcn.00543b40
lea ecx, [ebp - 0x1fe0]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
je 0x487579
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x669618
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
push 0x6695a0
lea ecx, [ebp - 0x2090]
call fcn.00545560
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x6695b0
lea ecx, [ebp - 0x2090]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x487579
push 0
lea ecx, [ebp - 0x1fe0]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x25cc]
call fcn.00513940
test al, al
je 0x487579
lea eax, [ebp - 0x2a1c]
push eax
push 0x622ccc
push 0x666548
lea ecx, [ebp - 0x25cc]
call fcn.00513210
test al, al
jne 0x487471
lea eax, [ebp - 0x2a1c]
push eax
push 0x622ccc
push 0x666688
lea ecx, [ebp - 0x25cc]
call fcn.00513210
test al, al
jne 0x487471
lea eax, [ebp - 0x2a1c]
push eax
push 0x622ccc
push 0x660828
lea ecx, [ebp - 0x25cc]
call fcn.00513210
test al, al
jne 0x487471
lea eax, [ebp - 0x2a1c]
push eax
push 0x622ccc
push 0x666a14
lea ecx, [ebp - 0x25cc]
call fcn.00513210
test al, al
je 0x487579
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fe0]
call fcn.005454f0
push eax
push 0x65f370
lea ecx, [ebp - 0x2090]
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x42
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x487579
push 0
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
push 0
push 0
push 0
push 0
push 0x65f370
lea ecx, [ebp - 0x1fe0]
call fcn.005454f0
push eax
push 0
push 0x42
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0x666634
lea ecx, [ebp - 0x1fe0]
call fcn.005454f0
push eax
push 0x665cfc
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
push 0x664588
push 0x66537c
lea ecx, [ebp - 0x2090]
call fcn.005454f0
push eax
push 0x667000
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
mov eax, dword [ebp - 0x6f40]
inc eax
mov dword [ebp - 0x6f40], eax
cmp eax, esi
jb 0x487290
lea ecx, [ebp - 0x2338]
call fcn.00545760
mov esi, dword [ebp - 0x6f74]
test esi, esi
je 0x487893
mov ecx, dword [ebp - 0x6f70]
mov edx, esi
mov eax, dword [ebp - 0x6f68]
sub eax, ecx
mov dword [ebp - 0x6f40], ecx
mov dword [ebp - 0x6f48], eax
mov eax, dword [ebp - 0x6f4c]
mov dword [ebp - 0x6f94], edx
nop
xor esi, esi
mov dword [ebp - 0x6f6c], esi
test eax, eax
je 0x48787b
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x487863
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2338]
call fcn.00543e30
test eax, eax
jne 0x487852
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x61d194
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
push 0x61d194
lea ecx, [ebp - 0x2338]
call fcn.00543b40
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x2350]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f48]
add ecx, dword [ebp - 0x6f40]
push eax
push 0x61d058
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2120]
call fcn.00545560
push 0
push 0x20019
lea ecx, [ebp - 0x2120]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x487852
xor dl, dl
lea ecx, [ebp - 0x1f74]
call fcn.0053d3f0
test al, al
jne 0x487852
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x669644
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
push 0x6695a0
lea ecx, [ebp - 0x2090]
call fcn.00545560
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x6695b0
lea ecx, [ebp - 0x2090]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x487852
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2120]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2090]
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x42
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f54], eax
cmp eax, 0xffffffff
je 0x487852
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
push 0
push 0
push 0
call fcn.005454f0
push eax
push 0
lea ecx, [ebp - 0x2120]
call fcn.005454f0
push eax
push 0x42
push dword [ebp - 0x6f54]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0x666fc8
lea ecx, [ebp - 0x2120]
call fcn.005454f0
push eax
push 0x665cfc
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x664588
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x2090]
call fcn.005454f0
push eax
push 0x667000
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
mov eax, dword [ebp - 0x6f4c]
inc esi
cmp esi, eax
jb 0x4875e0
jmp 0x487869
mov eax, dword [ebp - 0x6f4c]
mov ecx, dword [ebp - 0x6f40]
mov edx, dword [ebp - 0x6f94]
mov dword [ebp - 0x6f6c], esi
add ecx, 0xc
sub edx, 1
mov dword [ebp - 0x6f40], ecx
mov dword [ebp - 0x6f94], edx
jne 0x4875d0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.005193f0
lea ecx, [ebp - 0x2124]
call fcn.0053fda0
lea ecx, [ebp - 0x2338]
call fcn.00545790
lea ecx, [ebp - 0x22e4]
call fcn.00545790
lea ecx, [ebp - 0x2344]
call fcn.00545790
lea ecx, [ebp - 0x6e34]
call fcn.00402710
lea ecx, [ebp - 0x280c]
call fcn.00401e00
lea ecx, [ebp - 0x2208]
call fcn.00402fa0
lea ecx, [ebp - 0x21e4]
call fcn.00403940
lea ecx, [ebp - 0x2058]
call fcn.00403940
lea ecx, [ebp - 0x2350]
call fcn.00403940
lea ecx, [ebp - 0x21c0]
call fcn.00403940
lea ecx, [ebp - 0x32b8]
call fcn.00401720
lea ecx, [ebp - 0x2df8]
call fcn.00401720
lea ecx, [ebp - 0x25cc]
call fcn.00401e40
lea ecx, [ebp - 0x2090]
call fcn.00545790
lea ecx, [ebp - 0x201c]
call fcn.00545790
lea ecx, [ebp - 0x24d4]
call fcn.00545790
lea ecx, [ebp - 0x1fe0]
call fcn.00545790
lea ecx, [ebp - 0x2068]
mov byte [ebp - 4], 0x45
call fcn.00545790
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48a585
test dword [edi + 0x34], 0x1000
jne 0x48a585
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x669658
push dword [eax + 0x38]
call fcn.0051a750
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x34
push dword [eax + 0x34]
call fcn.005173e0
push 0xc
lea ecx, [ebp - 0x22ac]
call fcn.00401d20
push 0xa
push 0
lea ecx, [ebp - 0x22ac]
call fcn.004039b0
push 0xc
lea ecx, [ebp - 0x2214]
mov byte [ebp - 4], 0xda
call fcn.00401d20
push 0xa
push 0
lea ecx, [ebp - 0x2214]
call fcn.004039b0
push 0xc
lea ecx, [ebp - 0x238c]
mov byte [ebp - 4], 0xdb
call fcn.00401d20
push 0xa
push 0
lea ecx, [ebp - 0x238c]
call fcn.004039b0
push 0xc
lea ecx, [ebp - 0x20a8]
mov byte [ebp - 4], 0xdc
call fcn.00401d20
lea ecx, [ebp - 0x20a8]
call fcn.00403a70
push 0xc
lea ecx, [ebp - 0x2294]
mov byte [ebp - 4], 0xdd
call fcn.00401d20
push 0xa
push 0
lea ecx, [ebp - 0x2294]
call fcn.004031a0
push 0x260
lea ecx, [ebp - 0x3058]
mov byte [ebp - 4], 0xde
call fcn.00401d70
lea ecx, [ebp - 0x3058]
call fcn.004016a0
push 0x260
lea ecx, [ebp - 0x3518]
mov byte [ebp - 4], 0xdf
call fcn.00401d70
lea ecx, [ebp - 0x3518]
call fcn.004016a0
push 0xc
lea ecx, [ebp - 0x2080]
mov byte [ebp - 4], 0xe0
call fcn.00401d20
lea ecx, [ebp - 0x2080]
call fcn.00545940
xor esi, esi
mov byte [ebp - 4], 0xe1
cmp dword [edi + 0x30], esi
jbe 0x487e92
lea eax, [edi + 0x10c]
mov dword [ebp - 0x6f48], eax
nop dword [eax]
push 1
push 1
lea ecx, [ebp - 0x3058]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2080]
call fcn.005455c0
push 0x658170
lea ecx, [ebp - 0x2080]
call fcn.00545820
test al, al
jne 0x487e88
push str.Microsoft
lea ecx, [ebp - 0x2080]
call fcn.00545820
test al, al
jne 0x487e88
push 0x668cb4
lea ecx, [ebp - 0x2080]
call fcn.00545820
test al, al
jne 0x487e88
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d1a8
lea ecx, [ebp - 0x2220]
call fcn.005454f0
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2178]
call fcn.00545560
push 5
lea ecx, [ebp - 0x2178]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x3058]
call fcn.00401820
test al, al
je 0x487df1
mov edi, dword [ebp - 0x6f48]
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x66968c
push 1
lea ecx, [ebp - 0x3058]
call fcn.00401870
push eax
push 0x61d058
lea ecx, [ebp - 0x2220]
call fcn.005454f0
push eax
push esi
mov ecx, edi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2178]
call fcn.00545560
lea ecx, [ebp - 0x2178]
call fcn.005454f0
push eax
call dword [0x5fd698]
test eax, eax
je 0x487dd8
push 1
lea ecx, [ebp - 0x3058]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2080]
call fcn.00545870
push eax
lea eax, [ebp - 0x20a8]
push eax
push esi
lea eax, [ebp - 0x2294]
push eax
lea eax, [ebp - 0x238c]
push eax
lea eax, [ebp - 0x2214]
push eax
push 0
lea ecx, [ebp - 0x2178]
call fcn.00545210
lea edx, [ebp - 0x22ac]
mov ecx, eax
call fcn.004ec2b0
test al, al
jne 0x487dd8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d1a8
lea ecx, [ebp - 0x2178]
call fcn.00543b40
push 5
lea ecx, [ebp - 0x2178]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x3518]
call fcn.00401820
test al, al
je 0x487dd8
nop word [eax + eax]
push 0
push 1
lea ecx, [ebp - 0x3518]
call fcn.00401870
mov edx, 0x6696a0
mov ecx, eax
call fcn.00541eb0
test eax, eax
je 0x487dc5
push 0
push 0
push 0
push 0
push 0
push 0x66968c
push 1
lea ecx, [ebp - 0x3518]
call fcn.00401870
push eax
push 0x61d058
push 1
lea ecx, [ebp - 0x3058]
call fcn.00401870
push eax
push 0x61d058
lea ecx, [ebp - 0x2220]
call fcn.005454f0
push eax
push esi
mov ecx, edi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2178]
call fcn.00545560
lea ecx, [ebp - 0x2178]
call fcn.005454f0
push eax
call dword [0x5fd698]
test eax, eax
je 0x487dc5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x3518]
call fcn.00401870
push eax
push 0x61e0f8
push 1
lea ecx, [ebp - 0x3058]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2080]
call fcn.00545560
lea eax, [ebp - 0x2080]
push eax
lea eax, [ebp - 0x20a8]
push eax
push esi
lea eax, [ebp - 0x2294]
push eax
lea eax, [ebp - 0x238c]
push eax
lea eax, [ebp - 0x2214]
push eax
push 0
lea ecx, [ebp - 0x2178]
call fcn.00545210
lea edx, [ebp - 0x22ac]
mov ecx, eax
call fcn.004ec2b0
lea ecx, [ebp - 0x3518]
call fcn.004017d0
test al, al
jne 0x487cb0
lea ecx, [ebp - 0x3058]
call fcn.004017d0
test al, al
jne 0x487ba0
mov edi, dword [ebp - 0x6f44]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6696b0
lea ecx, [ebp - 0x24c8]
call fcn.005454f0
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2178]
call fcn.00545560
lea ecx, [ebp - 0x2178]
call fcn.005454f0
push eax
call dword [0x5fd698]
test eax, eax
je 0x487e88
push 0x66970c
lea ecx, [ebp - 0x2080]
call fcn.00545870
push eax
lea eax, [ebp - 0x20a8]
push eax
push esi
lea eax, [ebp - 0x2294]
push eax
lea eax, [ebp - 0x238c]
push eax
lea eax, [ebp - 0x2214]
push eax
lea edx, [ebp - 0x22ac]
lea ecx, [ebp - 0x2178]
call fcn.004ec2b0
inc esi
cmp esi, dword [edi + 0x30]
jb 0x487ad0
lea ecx, [ebp - 0x22ac]
call fcn.00403760
mov esi, eax
mov ecx, edi
mov dword [ebp - 0x6f4c], esi
call fcn.0046c9e0
test al, al
jne 0x48a529
test esi, esi
jne 0x487ece
push esi
push 0x669730
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
jmp 0x48a529
push 0xc
lea ecx, [ebp - 0x21d8]
call fcn.00401d20
lea ecx, [ebp - 0x21d8]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2040]
mov byte [ebp - 4], 0xe2
call fcn.00401d20
lea ecx, [ebp - 0x2040]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2590]
mov byte [ebp - 4], 0xe3
call fcn.00401d20
lea ecx, [ebp - 0x2590]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x21cc]
mov byte [ebp - 4], 0xe4
call fcn.00401d20
lea ecx, [ebp - 0x21cc]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2454]
mov byte [ebp - 4], 0xe5
call fcn.00401d20
lea ecx, [ebp - 0x2454]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x22fc]
mov byte [ebp - 4], 0xe6
call fcn.00401d20
lea ecx, [ebp - 0x22fc]
call fcn.00545940
push 0x20
lea ecx, [ebp - 0x2978]
mov byte [ebp - 4], 0xe7
call fcn.00401e20
lea ecx, [ebp - 0x2978]
call fcn.00533850
mov byte [ebp - 4], 0xe8
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.005193f0
push 0
push 0x6697b0
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
xor esi, esi
mov dword [ebp - 0x6f40], esi
cmp dword [ebp - 0x6f4c], esi
jbe 0x4883d0
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x2294]
call fcn.00403180
push 0
push 0
push 0
mov eax, dword [eax]
lea ecx, [ebp - 0x22ac]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d058
push esi
mov dword [ebp - 0x6f48], eax
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2454]
call fcn.00545560
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646aa0
lea ecx, [ebp - 0x2454]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x22fc]
call fcn.00545560
lea ecx, [ebp - 0x22fc]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
je 0x4883bd
lea eax, [ebp - 0x21d8]
xor edx, edx
push eax
lea ecx, [ebp - 0x22fc]
mov dword [ebp - 0x6f54], edx
call fcn.005454f0
xor edx, edx
mov ecx, eax
call fcn.004ecbb0
test al, al
je 0x4883bd
lea ecx, [ebp - 0x21d8]
call fcn.005454f0
mov ecx, eax
call fcn.00530270
test al, al
je 0x488390
push 0xc
lea ecx, [ebp - 0x2448]
call fcn.00401d20
lea ecx, [ebp - 0x2448]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2614]
mov byte [ebp - 4], 0xe9
call fcn.00401d20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646a68
lea ecx, [ebp - 0x21d8]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2614]
call fcn.00545880
lea eax, [ebp - 0x2448]
mov byte [ebp - 4], 0xea
push eax
lea ecx, [ebp - 0x2614]
call fcn.005454f0
mov edx, 0x662c34
mov ecx, eax
call fcn.004ec920
test al, al
je 0x488376
push 0
push 1
push 1
push 0
push 0x66655c
lea ecx, [ebp - 0x2448]
call fcn.00543e30
test eax, eax
jne 0x488376
push eax
push 1
push 1
push eax
push 0x66657c
lea ecx, [ebp - 0x2448]
call fcn.00543e30
test eax, eax
jne 0x488376
push eax
push 1
push 1
push eax
push 0x6665cc
lea ecx, [ebp - 0x2448]
call fcn.00543e30
test eax, eax
jne 0x488376
push eax
push 1
push 1
push eax
push 0x6665b0
lea ecx, [ebp - 0x2448]
call fcn.00543e30
test eax, eax
jne 0x488376
push eax
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x669820
lea ecx, [ebp - 0x2448]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x488376
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x66986c
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2080]
call fcn.00545560
mov eax, dword [ebp - 0x6f48]
mov ecx, dword [ebp - 0x6f70]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x2448]
call fcn.005454f0
push eax
mov ecx, esi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2080]
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x47
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f94], eax
cmp eax, 0xffffffff
jne 0x48828b
lea ecx, [ebp - 0x2614]
call fcn.00545790
lea ecx, [ebp - 0x2448]
mov byte [ebp - 4], 0xe8
call fcn.00545790
mov esi, dword [ebp - 0x6f40]
jmp 0x488390
push 0
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2614]
call fcn.005454f0
push eax
push 0
push 0x47
push dword [ebp - 0x6f94]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0x666634
lea ecx, [ebp - 0x2614]
call fcn.005454f0
push eax
push 0x6652d8
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
push 0x664588
mov ecx, esi
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x2448]
call fcn.005454f0
push eax
push 0x668650
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
lea ecx, [ebp - 0x2614]
call fcn.00545790
lea ecx, [ebp - 0x2448]
mov byte [ebp - 4], 0xe8
call fcn.00545790
mov esi, dword [ebp - 0x6f40]
jmp 0x488390
lea ecx, [ebp - 0x2614]
call fcn.00545790
lea ecx, [ebp - 0x2448]
mov byte [ebp - 4], 0xe8
call fcn.00545790
inc dword [ebp - 0x6f54]
lea eax, [ebp - 0x21d8]
push eax
lea ecx, [ebp - 0x22fc]
call fcn.005454f0
mov edx, dword [ebp - 0x6f54]
mov ecx, eax
call fcn.004ecbb0
test al, al
jne 0x488091
inc esi
mov dword [ebp - 0x6f40], esi
cmp esi, dword [ebp - 0x6f4c]
jb 0x487fd0
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48a4dc
push 0xc
lea ecx, [ebp - 0x259c]
call fcn.00401d20
push 1
push 0x668728
lea ecx, [ebp - 0x259c]
call fcn.005458d0
push 0
push 0x669890
lea ecx, [ebp - 0x1fd4]
mov byte [ebp - 4], 0xeb
call fcn.00532850
xor esi, esi
mov dword [ebp - 0x6f40], esi
cmp dword [ebp - 0x6f4c], esi
jbe 0x488817
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x2294]
call fcn.00403180
push 0
push 0
push 0
mov eax, dword [eax]
lea ecx, [ebp - 0x22ac]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d058
push esi
mov dword [ebp - 0x6f48], eax
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2454]
call fcn.00545560
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646aa0
lea ecx, [ebp - 0x2454]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x22fc]
call fcn.00545560
lea ecx, [ebp - 0x22fc]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
je 0x488804
lea eax, [ebp - 0x21d8]
xor edx, edx
push eax
lea ecx, [ebp - 0x22fc]
mov dword [ebp - 0x6f54], edx
call fcn.005454f0
xor edx, edx
mov ecx, eax
call fcn.004ecbb0
test al, al
je 0x488804
lea ecx, [ebp - 0x21d8]
call fcn.005454f0
mov ecx, eax
call fcn.00530270
test al, al
je 0x4887d7
push 0xc
lea ecx, [ebp - 0x2480]
call fcn.00401d20
lea ecx, [ebp - 0x2480]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2620]
mov byte [ebp - 4], 0xec
call fcn.00401d20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646a68
lea ecx, [ebp - 0x21d8]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2620]
call fcn.00545880
lea eax, [ebp - 0x2480]
mov byte [ebp - 4], 0xed
push eax
lea ecx, [ebp - 0x2620]
call fcn.005454f0
mov edx, 0x662d50
mov ecx, eax
call fcn.004ec920
test al, al
je 0x4887bd
push 0x658170
lea ecx, [ebp - 0x2480]
call fcn.00545820
test al, al
jne 0x4887bd
push 0x657a78
lea ecx, [ebp - 0x2480]
call fcn.00545820
test al, al
jne 0x4887bd
push 0x6585f8
lea ecx, [ebp - 0x2480]
call fcn.00545820
test al, al
jne 0x4887bd
push 0x66882c
lea ecx, [ebp - 0x2480]
call fcn.00545820
test al, al
jne 0x4887bd
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x6698f0
lea ecx, [ebp - 0x2480]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x4887bd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x669940
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2080]
call fcn.00545560
mov eax, dword [ebp - 0x6f48]
mov ecx, dword [ebp - 0x6f70]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x2480]
call fcn.005454f0
push eax
mov ecx, esi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2080]
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x48
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f94], eax
cmp eax, 0xffffffff
jne 0x4886d2
lea ecx, [ebp - 0x2620]
call fcn.00545790
lea ecx, [ebp - 0x2480]
mov byte [ebp - 4], 0xeb
call fcn.00545790
mov esi, dword [ebp - 0x6f40]
jmp 0x4887d7
push 0
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2620]
call fcn.005454f0
push eax
push 0
push 0x48
push dword [ebp - 0x6f94]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0x666634
lea ecx, [ebp - 0x2620]
call fcn.005454f0
push eax
push 0x6652d8
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
push 0x664588
mov ecx, esi
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x2480]
call fcn.005454f0
push eax
push 0x668878
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
lea ecx, [ebp - 0x2620]
call fcn.00545790
lea ecx, [ebp - 0x2480]
mov byte [ebp - 4], 0xeb
call fcn.00545790
mov esi, dword [ebp - 0x6f40]
jmp 0x4887d7
lea ecx, [ebp - 0x2620]
call fcn.00545790
lea ecx, [ebp - 0x2480]
mov byte [ebp - 4], 0xeb
call fcn.00545790
inc dword [ebp - 0x6f54]
lea eax, [ebp - 0x21d8]
push eax
lea ecx, [ebp - 0x22fc]
call fcn.005454f0
mov edx, dword [ebp - 0x6f54]
mov ecx, eax
call fcn.004ecbb0
test al, al
jne 0x4884f1
inc esi
mov dword [ebp - 0x6f40], esi
cmp esi, dword [ebp - 0x6f4c]
jb 0x488430
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48a4d1
push 0xc
lea ecx, [ebp - 0x2460]
call fcn.00401d20
lea ecx, [ebp - 0x2460]
call fcn.00545940
xor esi, esi
mov byte [ebp - 4], 0xee
mov dword [ebp - 0x6f54], esi
cmp dword [ebp - 0x6f4c], esi
jbe 0x488c48
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x2214]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2460]
call fcn.00543e30
test eax, eax
jne 0x488c35
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x621af8
push esi
lea ecx, [ebp - 0x2214]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2460]
call fcn.00543b40
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6688a4
push esi
lea ecx, [ebp - 0x2214]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00545560
push 0x260
lea ecx, [ebp - 0x40f8]
call fcn.00401d70
push 1
lea ecx, [ebp - 0x2040]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x40f8]
call fcn.004016d0
push 1
lea ecx, [ebp - 0x2040]
mov byte [ebp - 4], 0xef
call fcn.005454f0
push eax
lea ecx, [ebp - 0x40f8]
call fcn.00401820
test al, al
je 0x488c26
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d194
push 1
lea ecx, [ebp - 0x40f8]
call fcn.00401870
push eax
push 0x61d194
lea ecx, [ebp - 0x21cc]
call fcn.00545560
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x21cc]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x259c]
call fcn.00543e30
test eax, eax
jne 0x488c13
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 1
lea ecx, [ebp - 0x40f8]
call fcn.00401870
push eax
push 0x61d058
push esi
lea ecx, [ebp - 0x2214]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00545560
lea ecx, [ebp - 0x21cc]
call fcn.00545760
push 0
push 0x80
lea ecx, [ebp - 0x2040]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2978]
call fcn.00533190
test eax, eax
je 0x488a88
push 0
lea eax, [ebp - 0x21cc]
push eax
lea ecx, [ebp - 0x2978]
call fcn.00532fd0
test eax, eax
je 0x488a88
push 0
push 1
push 1
push 0
push 0x6688b4
lea ecx, [ebp - 0x21cc]
call fcn.00543e30
mov esi, eax
push 0
lea ecx, [esi + 0xa]
push ecx
push 1
push 0
push 0x6688cc
lea ecx, [ebp - 0x21cc]
call fcn.00543e30
test esi, esi
je 0x488a77
test eax, eax
je 0x488a77
sub eax, esi
lea ecx, [ebp - 0x21cc]
sub eax, 0xb
push eax
lea eax, [esi + 0xb]
push eax
call fcn.005440d0
jmp 0x488a82
lea ecx, [ebp - 0x21cc]
call fcn.00545760
mov esi, dword [ebp - 0x6f54]
lea ecx, [ebp - 0x21cc]
call fcn.005451f0
test al, al
je 0x488abf
push 1
lea ecx, [ebp - 0x40f8]
call fcn.00401870
push eax
lea ecx, [ebp - 0x21cc]
call fcn.00545870
push 0
lea ecx, [ebp - 0x21cc]
call fcn.00545280
jmp 0x488acc
push 3
lea ecx, [ebp - 0x21cc]
call fcn.005434c0
push 0x669974
lea ecx, [ebp - 0x21cc]
call fcn.00545820
test al, al
jne 0x488c13
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x6698f0
lea ecx, [ebp - 0x2040]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x488c13
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2040]
call fcn.005454f0
push eax
push 0x65f370
lea ecx, [ebp - 0x21cc]
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x48
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x488c13
push 0
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
push 0
push 0
push 0
push 0
push 0x65f370
lea ecx, [ebp - 0x2040]
call fcn.005454f0
push eax
push 0
push 0x48
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0x666634
lea ecx, [ebp - 0x2040]
call fcn.005454f0
push eax
push 0x6652d8
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
push 0x664588
push 0x65f370
push 0x6645a4
lea ecx, [ebp - 0x21cc]
call fcn.005454f0
push eax
push 0x6688e8
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
lea ecx, [ebp - 0x40f8]
call fcn.004017d0
test al, al
jne 0x488940
lea ecx, [ebp - 0x40f8]
mov byte [ebp - 4], 0xee
call fcn.00401720
inc esi
mov dword [ebp - 0x6f54], esi
cmp esi, dword [ebp - 0x6f4c]
jb 0x488856
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48a4c6
push 0x24
lea ecx, [ebp - 0x28ec]
call fcn.00402080
lea ecx, [ebp - 0x28ec]
call fcn.00513b80
push 0xc
lea ecx, [ebp - 0x2288]
mov byte [ebp - 4], 0xf0
call fcn.00401d20
lea ecx, [ebp - 0x2288]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x24a4]
mov byte [ebp - 4], 0xf1
call fcn.00401d20
lea ecx, [ebp - 0x24a4]
call fcn.00545940
push 0
push 0x6699c0
lea ecx, [ebp - 0x1fd4]
mov byte [ebp - 4], 0xf2
call fcn.00532850
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x669a10
lea ecx, [edi + 0x314]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00545560
xor esi, esi
mov dword [ebp - 0x6f54], esi
cmp dword [ebp - 0x6f4c], esi
jbe 0x4891b3
push esi
lea ecx, [ebp - 0x2294]
call fcn.00403180
mov ecx, edi
mov eax, dword [eax]
mov dword [ebp - 0x6f48], eax
call fcn.0046c9e0
test al, al
jne 0x4891b3
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x669a44
push esi
lea ecx, [ebp - 0x22ac]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x21d8]
call fcn.00545560
lea eax, [ebp - 0x2040]
mov dword [ebp - 0x6f7c], 0
push eax
lea ecx, [ebp - 0x21d8]
call fcn.005454f0
xor edx, edx
mov ecx, eax
call fcn.004ecbb0
test al, al
je 0x4891a0
mov esi, dword [ebp - 0x6f7c]
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6632d0
lea ecx, [ebp - 0x2040]
call fcn.00543b40
push 0x100
lea ecx, [ebp - 0x2040]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x28ec]
call fcn.00513940
test al, al
je 0x489170
push 0
lea eax, [ebp - 0x2acc]
mov dword [ebp - 0x6ea0], 0
push eax
xorps xmm0, xmm0
lea ecx, [ebp - 0x28ec]
push 0x662f68
movups xmmword [ebp - 0x6eb0], xmm0
call fcn.00513340
test al, al
je 0x489170
lea eax, [ebp - 0x2acc]
push eax
lea eax, [ebp - 0x6eb0]
push eax
lea ecx, [ebp - 0x28ec]
call fcn.00512860
test al, al
je 0x489170
lea eax, [ebp - 0x2288]
push eax
push 0x662f9c
lea eax, [ebp - 0x6eb0]
push eax
lea ecx, [ebp - 0x28ec]
call fcn.005130c0
test eax, eax
je 0x489149
push 0
push 1
push 1
push 0
push 0x6689bc
lea ecx, [ebp - 0x2288]
call fcn.00543e30
lea ecx, [ebp - 0x2288]
mov esi, eax
call fcn.00545700
sub eax, 0x12
cmp esi, eax
je 0x489149
push 0
push 1
push 1
push 0
push 0x6689e4
lea ecx, [ebp - 0x2288]
call fcn.00543e30
lea ecx, [ebp - 0x2288]
mov esi, eax
call fcn.00545700
sub eax, 0xb
cmp esi, eax
je 0x489149
push 0
push 1
push 1
push 0
push 0x668a00
lea ecx, [ebp - 0x2288]
call fcn.00543e30
lea ecx, [ebp - 0x2288]
mov esi, eax
call fcn.00545700
sub eax, 0xb
cmp esi, eax
je 0x489149
lea eax, [ebp - 0x6eb0]
push eax
lea eax, [ebp - 0x2b98]
push eax
push 0x668a1c
lea ecx, [ebp - 0x28ec]
call fcn.00513340
test al, al
je 0x489149
lea eax, [ebp - 0x2288]
push eax
push 0x668a38
lea eax, [ebp - 0x2b98]
push eax
lea ecx, [ebp - 0x28ec]
call fcn.005130c0
test eax, eax
je 0x489149
push 0x6664fc
lea ecx, [ebp - 0x2288]
call fcn.00545820
test al, al
jne 0x489149
push 0x669a60
lea ecx, [ebp - 0x2288]
call fcn.00545820
test al, al
jne 0x489149
lea eax, [ebp - 0x24a4]
push eax
push 0x662f78
lea eax, [ebp - 0x6eb0]
push eax
lea ecx, [ebp - 0x28ec]
call fcn.005130c0
test eax, eax
jne 0x488faa
lea eax, [ebp - 0x24a4]
push eax
push 0x662f90
lea eax, [ebp - 0x6eb0]
push eax
lea ecx, [ebp - 0x28ec]
call fcn.005130c0
test eax, eax
je 0x489149
push str.null
lea ecx, [ebp - 0x24a4]
call fcn.00545820
test al, al
jne 0x489149
lea ecx, [ebp - 0x2288]
call fcn.005454f0
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.005454f0
mov edx, esi
mov ecx, eax
call fcn.0053cb60
test al, al
jne 0x489149
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x669a90
lea ecx, [ebp - 0x2288]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x489149
mov eax, dword [ebp - 0x6f48]
mov ecx, dword [ebp - 0x6f70]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x24a4]
call fcn.005454f0
push eax
mov ecx, esi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2288]
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x49
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f94], eax
cmp eax, 0xffffffff
je 0x489149
lea ecx, [ebp - 0x2040]
call fcn.005454f0
push eax
push dword [ebp - 0x6f54]
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x24a4]
call fcn.005454f0
push eax
push 0
push 0x49
push dword [ebp - 0x6f94]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0x666634
lea ecx, [ebp - 0x24a4]
call fcn.005454f0
push eax
push 0x6652d8
push dword [ebp - 0x6f54]
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
push 0x664588
mov ecx, esi
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x2288]
call fcn.005454f0
push eax
push 0x665b00
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
lea eax, [ebp - 0x2acc]
push eax
lea eax, [ebp - 0x6eb0]
push eax
lea ecx, [ebp - 0x28ec]
call fcn.00512860
test al, al
jne 0x488e30
mov esi, dword [ebp - 0x6f7c]
lea eax, [ebp - 0x2040]
inc esi
push eax
lea ecx, [ebp - 0x21d8]
mov dword [ebp - 0x6f7c], esi
call fcn.005454f0
mov edx, esi
mov ecx, eax
call fcn.004ecbb0
test al, al
jne 0x488d90
mov esi, dword [ebp - 0x6f54]
inc esi
mov dword [ebp - 0x6f54], esi
cmp esi, dword [ebp - 0x6f4c]
jb 0x488d01
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48a4a5
push 0
push 0x669ae0
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x6e94]
push 1
push 0
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6e9c], eax
mov dword [ebp - 0x6e98], 0x4b
call fcn.005458d0
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0xf3
call fcn.005454f0
lea ecx, [edi + 0x14c]
mov dword [ebp - 0x6e88], eax
mov dword [ebp - 0x6e84], 0
call fcn.005454f0
mov dword [ebp - 0x6e80], eax
lea ecx, [ebp - 0x6e74]
lea eax, [ebp - 0x1fd4]
mov dword [ebp - 0x6e7c], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0x6e78], eax
call fcn.00545940
mov ecx, edi
mov byte [ebp - 4], 0xf4
call fcn.0046c9e0
test al, al
jne 0x48a49a
push 0xc
lea ecx, [ebp - 0x2470]
call fcn.00401d20
lea ecx, [ebp - 0x2470]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x23f8]
mov byte [ebp - 4], 0xf5
call fcn.00401d20
lea ecx, [ebp - 0x23f8]
call fcn.00545940
lea ecx, [ebp - 0x2460]
mov byte [ebp - 4], 0xf6
call fcn.00545760
xor esi, esi
cmp dword [ebp - 0x6f4c], esi
jbe 0x489543
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x489543
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x2214]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2460]
call fcn.00543e30
test eax, eax
jne 0x489536
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x621af8
push esi
lea ecx, [ebp - 0x2214]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2460]
call fcn.00543b40
push esi
lea ecx, [ebp - 0x2294]
call fcn.00403180
push 0
push 0
push 0
mov eax, dword [eax]
lea ecx, [ebp - 0x238c]
push 0
push 0
push 0
push 0
push 0
push 0
push esi
mov dword [ebp - 0x6f54], eax
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
push 0x61d058
push esi
lea ecx, [ebp - 0x2214]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x6e94]
call fcn.00545560
push dword [ebp - 0x6f54]
lea ecx, [edi + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push esi
lea ecx, [ebp - 0x20a8]
mov dword [ebp - 0x6e84], eax
call fcn.00403920
push eax
lea ecx, [ebp - 0x6e74]
call fcn.00545840
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24c8]
call fcn.005454f0
push eax
push dword [ebp - 0x6f54]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2470]
call fcn.00545560
lea ecx, [ebp - 0x2470]
call fcn.005454f0
mov ecx, eax
call fcn.00530270
test al, al
je 0x489536
lea ecx, [ebp - 0x2470]
call fcn.005454f0
push eax
lea eax, [ebp - 0x6e9c]
mov ecx, edi
push eax
call fcn.0048d880
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x489543
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25e4]
call fcn.005454f0
push eax
push dword [ebp - 0x6f54]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2470]
call fcn.00545560
lea ecx, [ebp - 0x2470]
call fcn.005454f0
mov ecx, eax
call fcn.00530270
test al, al
je 0x489536
push 0
lea ecx, [ebp - 0x2470]
call fcn.00545210
lea ecx, [ebp - 0x2470]
call fcn.005454f0
push eax
lea eax, [ebp - 0x6e9c]
mov ecx, edi
push eax
call fcn.0048d880
lea ecx, [ebp - 0x2638]
mov dword [ebp - 0x6e84], 0x65f370
call fcn.005454f0
push eax
lea eax, [ebp - 0x6e9c]
mov ecx, edi
push eax
call fcn.0048d880
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x489543
push 0
push 1
lea ecx, [ebp - 0x2644]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2470]
call fcn.005455c0
mov ecx, eax
call fcn.00545210
lea ecx, [ebp - 0x2470]
call fcn.005454f0
push eax
lea eax, [ebp - 0x6e9c]
mov ecx, edi
push eax
call fcn.0048d880
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x489543
inc esi
cmp esi, dword [ebp - 0x6f4c]
jb 0x4892b0
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48a484
lea ecx, [ebp - 0x2460]
call fcn.00545760
push 4
lea ecx, [ebp - 0x2228]
call fcn.00401d40
lea ecx, [ebp - 0x2228]
call fcn.0053fe60
xor eax, eax
mov byte [ebp - 4], 0xf7
mov dword [ebp - 0x6f54], eax
cmp dword [ebp - 0x6f4c], eax
jbe 0x4899cc
nop dword [eax]
xor esi, esi
mov dword [ebp - 0x6f6c], esi
nop dword [eax + eax]
push eax
lea ecx, [ebp - 0x2294]
call fcn.00403180
mov eax, dword [eax]
mov dword [ebp - 0x6f94], eax
test esi, esi
jne 0x4895e1
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push 0x668aa0
push eax
lea ecx, [edi + 0x104]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
push str.HKU_
jmp 0x48962b
cmp esi, 1
jne 0x489607
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668aa0
push dword [ebp - 0x6f8c]
jmp 0x48962b
cmp esi, 2
jne 0x489636
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668aa0
push dword [ebp - 0x6fa4]
lea ecx, [ebp - 0x1f98]
call fcn.00545560
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2228]
call fcn.0053fdf0
test al, al
je 0x4899a3
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f40], 0
push eax
push 0
lea ecx, [ebp - 0x2228]
call fcn.0053f740
test al, al
je 0x4899a3
mov esi, dword [ebp - 0x6f54]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668b30
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x61d058
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00545560
push 0
push 0x20019
lea ecx, [ebp - 0x2040]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x489975
lea eax, [ebp - 0x23f8]
push eax
push 0x61d060
lea ecx, [ebp - 0x1f74]
call fcn.0053fb00
test al, al
je 0x489975
lea ecx, [ebp - 0x23f8]
call fcn.005451f0
test al, al
jne 0x489975
push dword [ebp - 0x6f94]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x23f8]
call fcn.00544f60
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x238c]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
push 0x61d058
push esi
lea ecx, [ebp - 0x2214]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2080]
call fcn.00545560
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2080]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x23f8]
call fcn.00543e30
test eax, eax
je 0x489975
lea ecx, [ebp - 0x2080]
call fcn.00545700
inc eax
lea ecx, [ebp - 0x23f8]
push eax
call fcn.00544110
push 0
push 0
push 0x61d060
push 0x61e2b0
push 3
lea ecx, [ebp - 0x23f8]
call fcn.005434c0
mov ecx, eax
call fcn.00543640
lea ecx, [ebp - 0x23f8]
call fcn.005451f0
test al, al
jne 0x489975
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x61d058
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00545560
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x6644b0
lea ecx, [ebp - 0x23f8]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x489975
mov eax, dword [ebp - 0x6f94]
mov ecx, dword [ebp - 0x6f70]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 1
lea ecx, [ebp - 0x23f8]
mov dword [ebp - 0x6f7c], eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f7c]
push eax
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6609f0
push 5
push 0x4b
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x489975
push 0
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f7c]
push eax
push 0
push 0
push 0
push 0
call fcn.005454f0
push eax
push 0
lea ecx, [ebp - 0x2040]
call fcn.005454f0
push eax
push 0x4b
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666634
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f7c]
push eax
push 0x664588
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x23f8]
call fcn.005454f0
push eax
push 0x666cb8
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
mov eax, dword [ebp - 0x6f40]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x2228]
mov dword [ebp - 0x6f40], eax
call fcn.0053f740
test al, al
jne 0x489688
mov esi, dword [ebp - 0x6f6c]
mov eax, dword [ebp - 0x6f54]
inc esi
mov dword [ebp - 0x6f6c], esi
cmp esi, 3
jb 0x4895a0
inc eax
mov dword [ebp - 0x6f54], eax
cmp eax, dword [ebp - 0x6f4c]
jb 0x489590
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48a479
push 0
push 0x669b30
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
push 0xc
lea ecx, [ebp - 0x24bc]
call fcn.00401d20
lea ecx, [ebp - 0x24bc]
call fcn.00545940
xor esi, esi
mov byte [ebp - 4], 0xf8
cmp dword [ebp - 0x6f4c], esi
jbe 0x48a454
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x2294]
call fcn.00403180
mov ecx, edi
mov eax, dword [eax]
mov dword [ebp - 0x6f40], eax
call fcn.0046c9e0
test al, al
jne 0x48a454
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x669a44
push esi
lea ecx, [ebp - 0x22ac]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x21d8]
call fcn.00545560
lea eax, [ebp - 0x24bc]
xor edx, edx
push eax
lea ecx, [ebp - 0x21d8]
mov dword [ebp - 0x6f7c], edx
call fcn.005454f0
xor edx, edx
mov ecx, eax
call fcn.004ecbb0
test al, al
je 0x48a447
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x669b88
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
push 0x6695a0
lea ecx, [ebp - 0x2080]
call fcn.00545560
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646a18
lea ecx, [ebp - 0x24bc]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00545560
lea ecx, [ebp - 0x2040]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
je 0x489c72
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x669b98
lea ecx, [ebp - 0x2080]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x489c72
mov eax, dword [ebp - 0x6f40]
mov ecx, dword [ebp - 0x6f70]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2040]
mov dword [ebp - 0x6f54], eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2080]
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x489c72
push 0
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push 0
push 0
push 0
push 0
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2040]
call fcn.005454f0
push eax
push 0
push 0x4c
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666fc8
lea ecx, [ebp - 0x2040]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x6652d8
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x2080]
call fcn.005454f0
push eax
push 0x667000
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x669be4
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
push 0x6695a0
lea ecx, [ebp - 0x2080]
call fcn.00545560
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646a34
lea ecx, [ebp - 0x24bc]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00545560
lea ecx, [ebp - 0x2040]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
jne 0x489d19
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x6632d0
lea ecx, [ebp - 0x24bc]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00545560
lea ecx, [ebp - 0x2040]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
je 0x489e7a
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x669b98
lea ecx, [ebp - 0x2080]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x489e7a
mov eax, dword [ebp - 0x6f40]
mov ecx, dword [ebp - 0x6f70]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2040]
mov dword [ebp - 0x6f54], eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2080]
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x489e7a
push 0
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push 0
push 0
push 0
push 0
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2040]
call fcn.005454f0
push eax
push 0
push 0x4c
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666fc8
lea ecx, [ebp - 0x2040]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x6652d8
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x2080]
call fcn.005454f0
push eax
push 0x667000
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x669bfc
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
push 0x6695a0
lea ecx, [ebp - 0x2080]
call fcn.00545560
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646a4c
lea ecx, [ebp - 0x24bc]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00545560
lea ecx, [ebp - 0x2040]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
jne 0x489f21
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x663210
lea ecx, [ebp - 0x24bc]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00545560
lea ecx, [ebp - 0x2040]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
je 0x48a082
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x669b98
lea ecx, [ebp - 0x2080]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x48a082
mov eax, dword [ebp - 0x6f40]
mov ecx, dword [ebp - 0x6f70]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2040]
mov dword [ebp - 0x6f54], eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2080]
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x48a082
push 0
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push 0
push 0
push 0
push 0
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2040]
call fcn.005454f0
push eax
push 0
push 0x4c
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666fc8
lea ecx, [ebp - 0x2040]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x6652d8
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x2080]
call fcn.005454f0
push eax
push 0x667000
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x669c2c
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
push 0x6695a0
lea ecx, [ebp - 0x2080]
call fcn.00545560
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646a68
lea ecx, [ebp - 0x24bc]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00545560
lea ecx, [ebp - 0x2040]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
je 0x48a24e
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x669b98
lea ecx, [ebp - 0x2080]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x48a24e
mov eax, dword [ebp - 0x6f40]
mov ecx, dword [ebp - 0x6f70]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2040]
mov dword [ebp - 0x6f54], eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2080]
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x48a24e
push 0
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push 0
push 0
push 0
push 0
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2040]
call fcn.005454f0
push eax
push 0
push 0x4c
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666fc8
lea ecx, [ebp - 0x2040]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x6652d8
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x2080]
call fcn.005454f0
push eax
push 0x667000
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x669c40
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
push 0x6695a0
lea ecx, [ebp - 0x2080]
call fcn.00545560
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668bd4
lea ecx, [ebp - 0x24bc]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00545560
lea ecx, [ebp - 0x2040]
call fcn.005454f0
push eax
call dword [0x5fd684]
test eax, eax
je 0x48a41a
push 0
lea ecx, [edi + 0x14c]
call fcn.005454f0
push eax
push 0x669b98
lea ecx, [ebp - 0x2080]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00470dc0
test al, al
jne 0x48a41a
mov eax, dword [ebp - 0x6f40]
mov ecx, dword [ebp - 0x6f70]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2040]
mov dword [ebp - 0x6f54], eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2080]
call fcn.005454f0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.0049a0a0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x48a41a
push 0
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push 0
push 0
push 0
push 0
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2040]
call fcn.005454f0
push eax
push 0
push 0x4c
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.00499eb0
push 0
push 0
push 0
push 0
push 0
push 0x666fc8
lea ecx, [ebp - 0x2040]
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x6652d8
call fcn.005454f0
push eax
push 0x6645a4
lea ecx, [ebp - 0x2080]
call fcn.005454f0
push eax
push 0x667000
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
inc dword [ebp - 0x6f7c]
lea eax, [ebp - 0x24bc]
push eax
lea ecx, [ebp - 0x21d8]
call fcn.005454f0
mov edx, dword [ebp - 0x6f7c]
mov ecx, eax
call fcn.004ecbb0
test al, al
jne 0x489aa6
inc esi
cmp esi, dword [ebp - 0x6f4c]
jb 0x489a20
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.005193f0
mov ecx, edi
call fcn.0046c9e0
lea ecx, [ebp - 0x24bc]
call fcn.00545790
lea ecx, [ebp - 0x2228]
call fcn.0053fda0
lea ecx, [ebp - 0x23f8]
call fcn.00545790
lea ecx, [ebp - 0x2470]
call fcn.00545790
lea ecx, [ebp - 0x6e9c]
call fcn.00402710
lea ecx, [ebp - 0x24a4]
call fcn.00545790
lea ecx, [ebp - 0x2288]
call fcn.00545790
lea ecx, [ebp - 0x28ec]
call fcn.00401e40
lea ecx, [ebp - 0x2460]
call fcn.00545790
lea ecx, [ebp - 0x259c]
call fcn.00545790
lea ecx, [ebp - 0x2978]
call fcn.00401e00
lea ecx, [ebp - 0x22fc]
call fcn.00545790
lea ecx, [ebp - 0x2454]
call fcn.00545790
lea ecx, [ebp - 0x21cc]
call fcn.00545790
lea ecx, [ebp - 0x2590]
call fcn.00545790
lea ecx, [ebp - 0x2040]
call fcn.00545790
lea ecx, [ebp - 0x21d8]
call fcn.00545790
lea ecx, [ebp - 0x2080]
call fcn.00545790
lea ecx, [ebp - 0x3518]
call fcn.00401720
lea ecx, [ebp - 0x3058]
call fcn.00401720
lea ecx, [ebp - 0x2294]
call fcn.00402fa0
lea ecx, [ebp - 0x20a8]
call fcn.00403940
lea ecx, [ebp - 0x238c]
call fcn.00403940
lea ecx, [ebp - 0x2214]
call fcn.00403940
lea ecx, [ebp - 0x22ac]
mov byte [ebp - 4], 0x45
call fcn.00403940
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48c843
test dword [edi + 0x34], 0x40
jne 0x48c843
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x669c64
push dword [eax + 0x38]
call fcn.0051a750
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x37
push dword [eax + 0x34]
call fcn.005173e0
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x48a62f
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f4a8
push esi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00545560
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x48a5e5
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f500
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00545560
cmp dword [ebp - 0x6fa8], 0
je 0x48a696
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x65f500
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00545560
push 0xc
lea ecx, [ebp - 0x1fb0]
mov dword [ebp - 0x6fc4], 0x65f558
mov dword [ebp - 0x6fc0], 0x65f568
mov dword [ebp - 0x6fbc], 0x669c90
mov dword [ebp - 0x6fb8], 0x669cb0
mov dword [ebp - 0x6fb4], 0x669cc8
mov dword [ebp - 0x6fb0], 0x669cdc
call fcn.00401d20
lea ecx, [ebp - 0x1fb0]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x22b8]
mov byte [ebp - 4], 0xf9
call fcn.00401d20
lea ecx, [ebp - 0x22b8]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x21a4]
mov byte [ebp - 4], 0xfa
call fcn.00401d20
lea ecx, [ebp - 0x21a4]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x2320]
mov byte [ebp - 4], 0xfb
call fcn.00401d20
lea ecx, [ebp - 0x2320]
call fcn.00545940
cmp dword [ebp - 0x6f74], 0
mov byte [ebp - 4], 0xfc
mov dword [ebp - 0x6f94], 0
jbe 0x48a8ff
mov dword [ebp - 0x6f54], esi
nop
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48a8ff
xor esi, esi
mov dword [ebp - 0x6f6c], esi
nop word [eax + eax]
mov ecx, dword [ebp - 0x6f54]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + esi*4 - 0x6fc4]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00545560
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x48a8cf
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f48], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.0053f6a0
test al, al
je 0x48a8cf
mov esi, dword [ebp - 0x6f48]
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48a8c9
lea eax, [ebp - 0x1fb0]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f74]
call fcn.0053fb00
test al, al
je 0x48a8ad
lea ecx, [ebp - 0x1fb0]
call fcn.005451f0
test al, al
jne 0x48a8ad
push 3
lea edx, [edi + 0x17c]
lea ecx, [ebp - 0x1fb0]
call fcn.00537920
test al, al
je 0x48a8ad
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x624a18
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2148]
call fcn.00545560
push 0
lea ecx, [ebp - 0x2148]
call fcn.005454f0
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.00470310
lea eax, [ebp - 0x6cb4]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0053f6a0
test al, al
jne 0x48a804
mov esi, dword [ebp - 0x6f6c]
inc esi
mov dword [ebp - 0x6f6c], esi
cmp esi, 6
jb 0x48a780
mov esi, dword [ebp - 0x6f94]
add dword [ebp - 0x6f54], 0xc
inc esi
mov dword [ebp - 0x6f94], esi
cmp esi, dword [ebp - 0x6f74]
jb 0x48a760
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x39
push dword [eax + 0x34]
call fcn.005173e0
push 4
lea ecx, [ebp - 0x6cb8]
call fcn.00401d40
lea ecx, [ebp - 0x6cb8]
call fcn.00401990
lea eax, [ebp - 0x6cb8]
mov byte [ebp - 4], 0xfd
push eax
push 0x617730
push 1
push 0
push 0x617740
call dword [0x5fdad8]
test eax, eax
js 0x48ac0d
lea ecx, [ebp - 0x7098]
call fcn.00401c80
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x7038]
movups xmmword [ebp - 0x6fa0], xmm0
call fcn.00401c80
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x7048]
movups xmmword [ebp - 0x6f60], xmm0
call fcn.00401c80
mov dword [ebp - 4], 0x100
lea ecx, [ebp - 0x7078]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x6f88], xmm0
call fcn.00401c80
mov edi, eax
mov byte [ebp - 4], 1
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x6fa0]
mov ecx, dword [ebp - 0x6cb8]
mov edx, esp
sub esp, 0x10
mov eax, esp
sub esp, 0x10
mov esi, dword [ecx]
movups xmmword [edx], xmm0
movups xmm0, xmmword [ebp - 0x6f60]
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x6f88]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [edi]
push ecx
movups xmmword [eax], xmm0
mov eax, dword [esi + 0x28]
call eax
shr eax, 0x1f
lea ecx, [ebp - 0x7078]
mov dword [ebp - 0x6f48], eax
call fcn.00401d10
lea ecx, [ebp - 0x7048]
mov dword [ebp - 4], 0xff
call fcn.00401d10
lea ecx, [ebp - 0x7038]
call fcn.00401d10
lea ecx, [ebp - 0x7098]
mov byte [ebp - 4], 0xfd
call fcn.00401d10
cmp byte [ebp - 0x6f48], 0
jne 0x48ac07
push 4
lea ecx, [ebp - 0x6ce4]
call fcn.00401d40
lea ecx, [ebp - 0x6ce4]
call fcn.00401990
push 0x61d058
lea ecx, [ebp - 0x6ff8]
mov dword [ebp - 4], 0x102
call fcn.00401a70
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x6cb8]
mov esi, dword [ecx]
lea ecx, [ebp - 0x6ce4]
push ecx
mov ecx, eax
call fcn.00401b30
push eax
push dword [ebp - 0x6cb8]
mov eax, dword [esi + 0x1c]
call eax
shr eax, 0x1f
lea ecx, [ebp - 0x6ff8]
mov dword [ebp - 0x6f48], eax
mov byte [ebp - 4], 2
call fcn.00401b20
cmp byte [ebp - 0x6f48], 0
jne 0x48abf5
push 4
lea ecx, [ebp - 0x6ce0]
call fcn.00401d40
lea ecx, [ebp - 0x6ce0]
call fcn.00401990
mov byte [ebp - 4], 4
lea edx, [ebp - 0x6ce0]
mov eax, dword [ebp - 0x6ce4]
push edx
push 0
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x28]
call eax
test eax, eax
js 0x48abea
mov eax, dword [ebp - 0x6ce0]
lea edx, [ebp - 0x2550]
mov dword [ebp - 0x2550], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
mov eax, dword [ebp - 0x2550]
test eax, eax
je 0x48abea
mov esi, 1
mov dword [ebp - 0x6f94], esi
cmp eax, esi
jl 0x48abea
mov edi, dword [ebp - 0x6f44]
push 4
lea ecx, [ebp - 0x6cf0]
call fcn.00401d40
lea ecx, [ebp - 0x6cf0]
call fcn.00401990
push 3
push esi
lea ecx, [ebp - 0x7028]
mov byte [ebp - 4], 5
call fcn.00401c90
mov esi, eax
mov byte [ebp - 4], 6
lea edx, [ebp - 0x6cf0]
mov ecx, dword [ebp - 0x6ce0]
movups xmm0, xmmword [esi]
push edx
sub esp, 0x10
mov eax, dword [ecx]
mov edx, esp
push ecx
mov eax, dword [eax + 0x20]
movups xmmword [edx], xmm0
call eax
shr eax, 0x1f
lea ecx, [ebp - 0x7028]
mov dword [ebp - 0x6f48], eax
mov byte [ebp - 4], 5
call fcn.00401d10
cmp byte [ebp - 0x6f48], 0
jne 0x48abb5
push dword [ebp - 0x6cf0]
mov ecx, edi
call fcn.0046df20
test al, al
je 0x48abdf
lea ecx, [ebp - 0x6cf0]
mov byte [ebp - 4], 4
call fcn.00402c60
mov esi, dword [ebp - 0x6f94]
inc esi
mov dword [ebp - 0x6f94], esi
cmp esi, dword [ebp - 0x2550]
jle 0x48ab33
jmp 0x48abea
lea ecx, [ebp - 0x6cf0]
call fcn.00402c60
lea ecx, [ebp - 0x6ce0]
call fcn.00402c60
lea ecx, [ebp - 0x6ce4]
mov dword [ebp - 4], 0xfd
call fcn.00402c60
mov edi, dword [ebp - 0x6f44]
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48c808
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x3c
push dword [eax + 0x34]
call fcn.005173e0
push 0x18
lea ecx, [ebp - 0x2498]
call fcn.00401d50
lea ecx, [ebp - 0x2498]
call fcn.00542700
mov dword [ebp - 4], 0x107
xor esi, esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x48acba
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
nop word [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x669d08
push esi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00545560
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x48ac70
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x640438
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00545560
cmp dword [ebp - 0x6fa8], 0
je 0x48ad21
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x640438
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00545560
cmp dword [ebp - 0x6f74], 0
mov dword [ebp - 0x6fc8], 0x63a464
mov dword [ebp - 0x6fc4], 0x63a434
mov dword [ebp - 0x6fc0], 0x6280dc
mov dword [ebp - 0x6fbc], 0x6404a8
mov dword [ebp - 0x6fb8], 0x640338
mov dword [ebp - 0x6fb4], 0x63a48c
mov dword [ebp - 0x6fb0], 0x65c788
mov dword [ebp - 0x6f94], 0
jbe 0x48af28
mov dword [ebp - 0x6f54], esi
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48af28
xor esi, esi
mov dword [ebp - 0x6f6c], esi
nop dword [eax + eax]
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48af08
mov eax, dword [ebp + esi*4 - 0x6fc8]
lea ecx, [ebp - 0x1fb0]
push ecx
mov ecx, dword [ebp - 0x6f54]
push eax
mov dword [ebp - 0x6f7c], eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f990
test al, al
je 0x48af08
push 0
push 0x61e158
lea ecx, [ebp - 0x1fb0]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2498]
call fcn.00542450
lea ecx, [ebp - 0x2498]
mov dword [ebp - 0x6f48], 0
call fcn.005425f0
test eax, eax
je 0x48aef8
mov esi, dword [ebp - 0x6f48]
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48aef2
push 3
push 1
push esi
lea ecx, [ebp - 0x2498]
call fcn.00542600
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.005455c0
mov ecx, eax
call fcn.005434c0
mov ecx, eax
call fcn.00545700
test eax, eax
je 0x48aede
push 3
lea edx, [edi + 0x17c]
lea ecx, [ebp - 0x1fb0]
call fcn.00537920
test al, al
je 0x48aede
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x2498]
call fcn.00542600
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x624a18
push dword [ebp - 0x6f7c]
push 0x624a18
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2148]
call fcn.00545560
push 0
lea ecx, [ebp - 0x2148]
call fcn.005454f0
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.00470310
lea ecx, [ebp - 0x2498]
inc esi
call fcn.005425f0
cmp esi, eax
jb 0x48ae24
mov esi, dword [ebp - 0x6f6c]
inc esi
mov dword [ebp - 0x6f6c], esi
cmp esi, 7
jb 0x48ada0
mov esi, dword [ebp - 0x6f94]
add dword [ebp - 0x6f54], 0xc
inc esi
mov dword [ebp - 0x6f94], esi
cmp esi, dword [ebp - 0x6f74]
jb 0x48ad84
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48c7f6
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x3e
push dword [eax + 0x34]
call fcn.005173e0
push 0xc
lea ecx, [ebp - 0x20fc]
call fcn.00401d20
lea ecx, [ebp - 0x20fc]
call fcn.00545940
mov esi, dword [ebp - 0x6f6c]
xor eax, eax
mov byte [ebp - 4], 8
mov dword [ebp - 0x6f94], eax
test eax, eax
jne 0x48af7c
push 0x6466c8
jmp 0x48af93
cmp esi, 1
jne 0x48af9e
cmp byte [edi + 0x188], 0
je 0x48b0c8
push 0x669d78
lea ecx, [ebp - 0x1f98]
call fcn.00545870
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x48b0b2
lea eax, [ebp - 0x6cb4]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0053f740
test al, al
je 0x48b0b2
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48b0b2
lea eax, [ebp - 0x1fb0]
push eax
lea eax, [ebp - 0x21a4]
push eax
push 1
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x20fc]
call fcn.005455c0
push eax
mov ecx, edi
call fcn.00471db0
test al, al
je 0x48b096
push 0
lea ecx, [ebp - 0x20fc]
call fcn.005454f0
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.00470310
test al, al
je 0x48b096
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x61d058
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2148]
call fcn.00545560
push 0
lea ecx, [ebp - 0x2148]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00545760
push eax
mov ecx, edi
call fcn.00470310
lea eax, [ebp - 0x6cb4]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0053f740
test al, al
jne 0x48afe1
mov eax, dword [ebp - 0x6f94]
inc eax
mov dword [ebp - 0x6f94], eax
cmp eax, 2
jb 0x48af71
mov ecx, edi
call fcn.00470a40
test al, al
je 0x48c7eb
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x41
push dword [eax + 0x34]
call fcn.005173e0
push 4
lea ecx, [ebp - 0x1fb4]
call fcn.00401d40
lea ecx, [ebp - 0x1fb4]
call fcn.0053fe60
push 4
lea ecx, [ebp - 0x205c]
mov byte [ebp - 4], 9
call fcn.00401d40
lea ecx, [ebp - 0x205c]
call fcn.0053fe60
push 4
lea ecx, [ebp - 0x2004]
mov byte [ebp - 4], 0xa
call fcn.00401d40
lea ecx, [ebp - 0x2004]
call fcn.0053fe60
mov byte [ebp - 4], 0xb
lea esi, [ebp - 0x6ff0]
mov dword [ebp - 0x6ff0], 0x669e24
mov dword [ebp - 0x6fec], 0x669e40
mov dword [ebp - 0x6fe8], 0x669e88
mov dword [ebp - 0x6fe4], 0x669ec8
mov dword [ebp - 0x6fe0], 0x669f34
mov dword [ebp - 0x6fdc], 0x669f58
mov dword [ebp - 0x6fd8], 0x669fa8
mov dword [ebp - 0x6fd4], 0x669fd8
mov dword [ebp - 0x6fd0], 0x66a030
mov dword [ebp - 0x6fcc], 0x66a070
mov dword [ebp - 0x6f54], 0
mov dword [ebp - 0x6f40], esi
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48b487
push 0
push 0x20019
push dword [esi]
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x48b468
mov ecx, edi
xor esi, esi
call fcn.0046c9e0
test al, al
jne 0x48b462
lea eax, [ebp - 0x6cb4]
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0053f740
test al, al
je 0x48b462
lea ecx, [ebp - 0x1fb0]
call fcn.00545760
lea ecx, [ebp - 0x2148]
call fcn.00545760
lea ecx, [ebp - 0x20fc]
call fcn.00545760
test dword [ebp - 0x6f54], 1
jne 0x48b317
mov eax, dword [ebp - 0x6f40]
lea ecx, [ebp - 0x1f98]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.Command
push dword [ebp - 0x6cb4]
push 0x61d058
push dword [eax]
call fcn.00545560
lea eax, [ebp - 0x1fb0]
push eax
push 0x61d060
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fb4]
call fcn.0053f990
test al, al
je 0x48b2cc
lea ecx, [ebp - 0x1fb0]
call fcn.00545700
test eax, eax
je 0x48b2cc
push 3
lea edx, [edi + 0x17c]
lea ecx, [ebp - 0x1fb0]
call fcn.00537920
test al, al
jne 0x48b3dd
lea ecx, [ebp - 0x1fb0]
jmp 0x48b3d8
lea eax, [ebp - 0x20fc]
push eax
push str.DelegateExecute
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fb4]
call fcn.0053f990
test al, al
je 0x48b306
lea ecx, [ebp - 0x20fc]
call fcn.00545700
test eax, eax
jne 0x48b3b2
lea eax, [ebp - 0x20fc]
push eax
push 0x66a0dc
jmp 0x48b388
mov ecx, dword [ebp - 0x6cb4]
call fcn.0053d990
test al, al
je 0x48b34c
lea eax, [ebp - 0x1fb0]
push eax
lea eax, [ebp - 0x21a4]
push eax
push 1
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x20fc]
call fcn.005455c0
jmp 0x48b3c6
mov eax, dword [ebp - 0x6f40]
lea ecx, [ebp - 0x1f98]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
push 0x61d058
push dword [eax]
call fcn.00545560
lea eax, [ebp - 0x20fc]
push eax
push 0x61d060
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fb4]
call fcn.0053f990
test al, al
je 0x48b3dd
lea ecx, [ebp - 0x20fc]
call fcn.00545700
test eax, eax
je 0x48b3dd
lea eax, [ebp - 0x1fb0]
push eax
lea eax, [ebp - 0x21a4]
push eax
lea eax, [ebp - 0x20fc]
push eax
mov ecx, edi
call fcn.00471db0
test al, al
jne 0x48b3dd
lea ecx, [ebp - 0x20fc]
call fcn.00545760
push 0
lea ecx, [ebp - 0x20fc]
call fcn.005454f0
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.00470310
test al, al
je 0x48b452
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x61d058
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2148]
call fcn.00545560
push 0
lea ecx, [ebp - 0x2148]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00545760
push eax
mov ecx, edi
call fcn.00470310
mov ecx, edi
inc esi
call fcn.0046c9e0
test al, al
je 0x48b1f1
mov esi, dword [ebp - 0x6f40]
mov eax, dword [ebp - 0x6f54]
add esi, 4
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f54], eax
cmp eax, 0xa
jb 0x48b1b5
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48c7ca
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x46
push dword [eax + 0x34]
call fcn.005173e0
xor esi, esi
mov dword [ebp - 0x6ff0], 0x645688
mov dword [ebp - 0x6fec], 0x645728
mov dword [ebp - 0x6f54], esi
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48b5d3
push 0
push 0x20019
push dword [ebp + esi*4 - 0x6ff0]
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x48b5c3
mov ecx, edi
xor esi, esi
call fcn.0046c9e0
test al, al
jne 0x48b5bd
lea eax, [ebp - 0x6cb4]
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0053f740
test al, al
je 0x48b5bd
mov eax, dword [ebp - 0x6f54]
lea ecx, [ebp - 0x2148]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
push 0x61d058
push dword [ebp + eax*4 - 0x6ff0]
call fcn.00545560
lea eax, [ebp - 0x1fb0]
push eax
push str.Debugger
lea ecx, [ebp - 0x2148]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fb4]
call fcn.0053f990
test al, al
je 0x48b5ad
push 3
lea edx, [edi + 0x17c]
lea ecx, [ebp - 0x1fb0]
call fcn.00537920
test al, al
je 0x48b5ad
push 0
lea ecx, [ebp - 0x2148]
call fcn.005454f0
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.00470310
mov ecx, edi
inc esi
call fcn.0046c9e0
test al, al
je 0x48b503
mov esi, dword [ebp - 0x6f54]
inc esi
mov dword [ebp - 0x6f54], esi
cmp esi, 2
jb 0x48b4c2
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48c7ca
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x48
push dword [eax + 0x34]
call fcn.005173e0
push 0x6455f8
lea ecx, [ebp - 0x2120]
mov dword [ebp - 0x6ff0], 0x66a0f4
mov dword [ebp - 0x6fec], 0x66a118
mov dword [ebp - 0x6fe8], 0x66a148
mov dword [ebp - 0x6fe4], 0x66a174
call fcn.00545870
push 0xc
lea ecx, [ebp - 0x2404]
call fcn.00401d20
push 1
push 0x61e394
lea ecx, [ebp - 0x2404]
call fcn.005458d0
push 0
push 0x20019
lea ecx, [ebp - 0x2120]
mov byte [ebp - 4], 0xc
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x48b89d
xor esi, esi
mov dword [ebp - 0x6f54], esi
nop dword [eax + eax]
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48b89d
cmp esi, 1
jne 0x48b6da
push 0x66a198
lea ecx, [ebp - 0x2120]
call fcn.00545870
push 0
push 0x20019
lea ecx, [ebp - 0x2120]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x48b89d
push 0x621af8
lea ecx, [ebp - 0x2404]
call fcn.00545870
lea eax, [ebp - 0x1fb0]
push eax
push dword [ebp + esi*4 - 0x6ff0]
lea ecx, [ebp - 0x1f74]
call fcn.0053fb00
test al, al
je 0x48b88d
lea ecx, [ebp - 0x1fb0]
call fcn.005451f0
test al, al
jne 0x48b88d
push 0x621d84
lea ecx, [ebp - 0x1fb0]
call fcn.00545820
test al, al
jne 0x48b88d
push 1
lea ecx, [ebp - 0x2404]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2498]
call fcn.00542450
lea ecx, [ebp - 0x2498]
xor esi, esi
call fcn.005425f0
test eax, eax
je 0x48b887
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48b887
push 3
push 1
push esi
lea ecx, [ebp - 0x2498]
call fcn.00542600
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.005455c0
mov ecx, eax
call fcn.005434c0
mov ecx, eax
call fcn.005451f0
test al, al
jne 0x48b873
lea ecx, [ebp - 0x1fb0]
call fcn.00545700
cmp eax, 5
jl 0x48b7cd
push 0
push 1
push 1
push 0
push 0x61d05c
lea ecx, [ebp - 0x1fb0]
call fcn.00543e30
test eax, eax
jne 0x48b7f3
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str..dll
lea ecx, [ebp - 0x1fb0]
call fcn.00543b40
push 3
lea edx, [edi + 0x17c]
lea ecx, [ebp - 0x1fb0]
call fcn.00537920
test al, al
je 0x48b873
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x2498]
call fcn.00542600
push eax
mov eax, dword [ebp - 0x6f54]
lea ecx, [ebp - 0x2120]
push 0x624a18
push dword [ebp + eax*4 - 0x6ff0]
push 0x624a18
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2148]
call fcn.00545560
push 0
lea ecx, [ebp - 0x2148]
call fcn.005454f0
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.00470310
lea ecx, [ebp - 0x2498]
inc esi
call fcn.005425f0
cmp esi, eax
jb 0x48b760
mov esi, dword [ebp - 0x6f54]
inc esi
mov dword [ebp - 0x6f54], esi
cmp esi, 4
jb 0x48b680
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48c7bf
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x4b
push dword [eax + 0x34]
call fcn.005173e0
movsd xmm0, qword [0x6e3258]
mov eax, 0x66a258
comisd xmm0, xmmword [edi + 0x378]
mov ecx, 0x66a1f0
cmovbe ecx, eax
mov eax, dword [edi + 0x30]
xor esi, esi
mov dword [ebp - 0x6f7c], ecx
test eax, eax
je 0x48b94e
mov eax, dword [ebp - 0x6f68]
lea edx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push ecx
push esi
mov ecx, edx
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00545560
add dword [ebp - 0x6f54], 0xc
lea edx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
mov ecx, dword [ebp - 0x6f7c]
cmp esi, eax
jb 0x48b900
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push ecx
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00545560
cmp dword [ebp - 0x6fa8], 0
je 0x48b9b2
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6f7c]
inc eax
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00545560
cmp dword [ebp - 0x6f74], 0
mov dword [ebp - 0x6f7c], 0
jbe 0x48bb93
mov dword [ebp - 0x6f54], esi
nop
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48bb93
push 0
push 0x20019
mov ecx, esi
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053fdf0
test al, al
je 0x48bb71
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f94], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.0053f6a0
test al, al
je 0x48bb71
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48bb6b
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1fb0]
call fcn.00545870
lea ecx, [ebp - 0x1fb0]
call fcn.00545700
mov esi, eax
cmp esi, 3
jl 0x48bb43
push 1
lea ecx, [ebp - 0x1fb0]
call fcn.005457a0
cmp word [eax], 0x3a
jne 0x48bb43
push 2
lea ecx, [ebp - 0x1fb0]
call fcn.005457a0
cmp word [eax], 0x5c
jne 0x48bb43
movsd xmm0, qword [edi + 0x378]
comisd xmm0, xmmword [0x6e3260]
jbe 0x48baf3
cmp esi, 0x14
jle 0x48baf3
push 0
push 1
push 0xffffffffffffffff
push 0
push 0x66a2f0
lea ecx, [ebp - 0x1fb0]
call fcn.00543e30
mov edx, eax
lea ecx, [esi - 0xf]
cmp edx, ecx
jge 0x48badd
push 0
push 1
push 0xffffffffffffffff
push 0
push 0x66a314
lea ecx, [ebp - 0x1fb0]
call fcn.00543e30
mov edx, eax
lea eax, [esi - 0x13]
cmp edx, eax
jle 0x48baf3
lea eax, [edx - 1]
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.005441c0
mov ecx, dword [ebp - 0x6f54]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
push 0x624a18
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2148]
call fcn.00545560
push 0
lea ecx, [ebp - 0x2148]
call fcn.005454f0
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.00470310
mov esi, dword [ebp - 0x6f94]
lea eax, [ebp - 0x6cb4]
inc esi
lea ecx, [ebp - 0x1f74]
push eax
push esi
mov dword [ebp - 0x6f94], esi
call fcn.0053f6a0
test al, al
jne 0x48ba27
mov esi, dword [ebp - 0x6f54]
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f54], esi
mov dword [ebp - 0x6f7c], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x48b9d0
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48c7bf
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x50
push dword [eax + 0x34]
call fcn.005173e0
push 0xc
lea ecx, [ebp - 0x213c]
call fcn.00401d20
push 0xbb8
push 0
lea ecx, [ebp - 0x213c]
call fcn.004039b0
mov byte [ebp - 4], 0xd
xor esi, esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x48bc38
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x10c]
mov dword [ebp - 0x6f54], eax
push esi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
push dword [ebp - 0x6f54]
lea ecx, [edi + 0x104]
push esi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
mov edx, 0x6300a8
mov ecx, eax
call fcn.004fa750
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x10c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x48bbf0
mov ecx, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0x16
lea ecx, [ecx + eax*4]
call fcn.00544f00
mov eax, dword [ebp - 0x6f68]
xor esi, esi
mov dword [ebp - 0x6f54], eax
nop dword [eax]
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48bc98
mov ecx, dword [ebp - 0x6f54]
lea eax, [ebp - 0x213c]
push 1
push eax
call fcn.005454f0
push eax
mov ecx, edi
call fcn.0046dc00
test al, al
je 0x48bc98
add dword [ebp - 0x6f54], 0xc
inc esi
cmp esi, dword [edi + 0x30]
jbe 0x48bc60
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48c7b4
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x51
push dword [eax + 0x34]
call fcn.005173e0
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x48bd4e
lea eax, [edi + 0x10c]
push esi
mov ecx, eax
call fcn.004035f0
mov ecx, eax
call fcn.005451f0
test al, al
jne 0x48bd3e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x294c]
call fcn.005454f0
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00545560
push 1
lea eax, [ebp - 0x213c]
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.0046dc00
test al, al
je 0x48bd4e
inc esi
lea eax, [edi + 0x10c]
cmp esi, dword [edi + 0x30]
jb 0x48bcc8
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48c7b4
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x52
push dword [eax + 0x34]
call fcn.005173e0
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x48be09
lea eax, [edi + 0x10c]
nop
push esi
mov ecx, eax
call fcn.004035f0
mov ecx, eax
call fcn.005451f0
test al, al
jne 0x48bdf9
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x66a33c
lea ecx, [ebp - 0x2220]
call fcn.005454f0
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00545560
push 1
lea eax, [ebp - 0x213c]
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.0046dc00
test al, al
je 0x48be09
inc esi
lea eax, [edi + 0x10c]
cmp esi, dword [edi + 0x30]
jb 0x48bd80
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48c7b4
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x53
push dword [eax + 0x34]
call fcn.005173e0
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x48bebe
lea eax, [edi + 0x10c]
nop dword [eax]
push esi
mov ecx, eax
call fcn.004035f0
mov ecx, eax
call fcn.005451f0
test al, al
jne 0x48beb2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24c8]
call fcn.005454f0
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00545560
push 0
lea eax, [ebp - 0x213c]
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.005454f0
push eax
mov ecx, edi
call fcn.0046dc00
test al, al
je 0x48bebe
inc esi
lea eax, [edi + 0x10c]
cmp esi, dword [edi + 0x30]
jb 0x48be40
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48c7b4
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x48bf2e
mov ecx, dword [ebp - 0x6f68]
lea eax, [edi + 0x10c]
mov dword [ebp - 0x6f54], ecx
push esi
mov ecx, eax
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
push eax
push dword [ebp - 0x6f54]
lea ecx, [edi + 0x104]
push esi
call fcn.004035f0
mov ecx, eax
call fcn.005454f0
mov edx, 0x6275a8
mov ecx, eax
call fcn.004fa750
add dword [ebp - 0x6f54], 0xc
lea eax, [edi + 0x10c]
inc esi
cmp esi, dword [edi + 0x30]
jb 0x48bee6
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x54
push dword [eax + 0x34]
call fcn.005173e0
mov eax, dword [edi + 0x30]
mov ecx, dword [ebp - 0x6f68]
push 0
push 0
lea eax, [eax + eax*2]
push 0x19
lea ecx, [ecx + eax*4]
call fcn.00544f00
xor esi, esi
nop word [eax + eax]
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48bf98
mov ecx, dword [ebp - 0x6f68]
lea eax, [ebp - 0x213c]
push 0
push eax
call fcn.005454f0
push eax
mov ecx, edi
call fcn.0046dc00
test al, al
je 0x48bf98
add dword [ebp - 0x6f68], 0xc
inc esi
cmp esi, dword [edi + 0x30]
jbe 0x48bf60
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48c7b4
push 0xc
lea ecx, [ebp - 0x2790]
call fcn.00401d20
lea ecx, [ebp - 0x2790]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x262c]
mov byte [ebp - 4], 0xe
call fcn.00401d20
lea ecx, [ebp - 0x262c]
call fcn.00545940
push 0x4c
lea ecx, [ebp - 0x2b20]
mov byte [ebp - 4], 0xf
call fcn.00401e30
lea ecx, [ebp - 0x2b20]
call fcn.005385c0
lea ecx, [ebp - 0x213c]
mov byte [ebp - 4], 0x10
call fcn.00403760
xor esi, esi
mov dword [ebp - 0x6f48], eax
test eax, eax
je 0x48c195
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48c195
push 0x629204
push 1
push 1
push esi
lea ecx, [ebp - 0x213c]
call fcn.00403920
mov ecx, eax
call fcn.00545410
push eax
lea ecx, [ebp - 0x2790]
call fcn.005455c0
mov ecx, eax
call fcn.00545820
test al, al
je 0x48c15b
push 0
push esi
lea ecx, [ebp - 0x213c]
call fcn.00403920
mov ecx, eax
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2b20]
call fcn.00538480
test al, al
je 0x48c15b
push esi
lea ecx, [ebp - 0x213c]
call fcn.00403920
push eax
lea ecx, [ebp - 0x262c]
call fcn.00545840
push 1
lea ecx, [ebp - 0x2b20]
call fcn.00538400
push eax
push esi
lea ecx, [ebp - 0x213c]
call fcn.00403920
mov ecx, eax
call fcn.005455c0
mov ecx, eax
call fcn.005451f0
test al, al
jne 0x48c188
lea ecx, [ebp - 0x2b20]
call fcn.005383a0
mov ecx, eax
call fcn.00542020
push 0
push 0
test eax, eax
je 0x48c13c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2b20]
call fcn.005383a0
push eax
push 0x61e0f8
push esi
lea ecx, [ebp - 0x213c]
call fcn.00403920
mov ecx, eax
call fcn.00543b40
push 3
push esi
lea ecx, [ebp - 0x213c]
call fcn.00403920
lea edx, [edi + 0x17c]
mov ecx, eax
call fcn.00537920
test al, al
je 0x48c188
jmp 0x48c166
push 0x61d060
push 0x61e2b0
push esi
lea ecx, [ebp - 0x213c]
call fcn.00403920
mov ecx, eax
call fcn.00543640
jmp 0x48c166
lea ecx, [ebp - 0x262c]
call fcn.00545760
push 0
lea ecx, [ebp - 0x262c]
call fcn.005454f0
push eax
push esi
lea ecx, [ebp - 0x213c]
call fcn.00403920
push eax
mov ecx, edi
call fcn.00470310
inc esi
cmp esi, dword [ebp - 0x6f48]
jb 0x48c016
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48c793
mov ecx, edi
call fcn.00470a40
test al, al
je 0x48c793
push 0
push 0
lea ecx, [ebp - 0x213c]
call fcn.00403800
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x55
push dword [eax + 0x34]
call fcn.005173e0
push 0xc
lea ecx, [ebp - 0x6d28]
call fcn.00401d20
lea ecx, [ebp - 0x6d28]
call fcn.0053fe80
push 0xc
lea ecx, [ebp - 0x6d3c]
mov byte [ebp - 4], 0x11
call fcn.00401d20
lea ecx, [ebp - 0x6d3c]
call fcn.0053fe80
push 0
push 0x20019
push 0x654314
lea ecx, [ebp - 0x1fb4]
mov byte [ebp - 4], 0x12
call fcn.0053fdf0
test al, al
je 0x48c5aa
lea eax, [ebp - 0x6d28]
mov dword [ebp - 0x6f94], 0
push eax
push 0
lea ecx, [ebp - 0x1fb4]
call fcn.0053f740
test al, al
je 0x48c5aa
nop
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48c5aa
push dword [ebp - 0x6d28]
lea ecx, [ebp - 0x21a4]
call fcn.00545870
push 0x66a370
lea ecx, [ebp - 0x21a4]
call fcn.005457e0
test al, al
je 0x48c2a4
push 0xa
push 1
push 1
push 0
push 0x66a394
lea ecx, [ebp - 0x21a4]
call fcn.00543e30
test eax, eax
je 0x48c582
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x66a3ac
push dword [ebp - 0x6d28]
lea ecx, [ebp - 0x1f98]
push 0x66a3c0
call fcn.00545560
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x205c]
call fcn.0053fdf0
test al, al
je 0x48c582
mov ecx, edi
xor esi, esi
call fcn.0046c9e0
test al, al
jne 0x48c582
lea eax, [ebp - 0x6d3c]
push eax
push esi
lea ecx, [ebp - 0x205c]
call fcn.0053f740
test al, al
je 0x48c582
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6d3c]
lea ecx, [ebp - 0x1f98]
push 0x66a3dc
push dword [ebp - 0x6d28]
push 0x66a3c0
call fcn.00545560
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2004]
call fcn.0053fdf0
test al, al
je 0x48c572
lea eax, [ebp - 0x2834]
push eax
push 0x6280c4
lea ecx, [ebp - 0x2004]
call fcn.0053fa70
test al, al
je 0x48c572
cmp dword [ebp - 0x2834], 0xb
jne 0x48c3f1
lea eax, [ebp - 0x1fb0]
push eax
push 0x6287b4
lea ecx, [ebp - 0x2004]
call fcn.0053fb00
test al, al
je 0x48c572
push 0
lea ecx, [ebp - 0x1fb0]
call fcn.005454f0
push eax
push 0x1000
lea ecx, [ebp - 0x1fb0]
call fcn.00544ce0
lea edx, [edi + 0x17c]
mov ecx, eax
call fcn.005365c0
jmp 0x48c4ab
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64d0c0
lea ecx, [ebp - 0x1f98]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x22b8]
call fcn.00545560
lea eax, [ebp - 0x1fb0]
push eax
push 0x64d160
lea ecx, [ebp - 0x22b8]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f990
test al, al
je 0x48c457
lea ecx, [ebp - 0x1fb0]
call fcn.005451f0
test al, al
je 0x48c498
lea eax, [ebp - 0x1fb0]
push eax
push 0x64d160
lea ecx, [ebp - 0x2004]
call fcn.0053fb00
test al, al
je 0x48c481
lea ecx, [ebp - 0x1fb0]
call fcn.005451f0
test al, al
je 0x48c498
lea eax, [ebp - 0x1fb0]
push eax
push 0x6287b4
lea ecx, [ebp - 0x2004]
call fcn.0053fb00
push 3
lea edx, [edi + 0x17c]
lea ecx, [ebp - 0x1fb0]
call fcn.00537920
test al, al
je 0x48c572
lea ecx, [ebp - 0x1fb0]
call fcn.005454f0
push eax
push 0
call dword [0x5fdb00]
test eax, eax
je 0x48c4e7
push 1
push 0
lea ecx, [ebp - 0x7018]
call fcn.005458d0
mov byte [ebp - 4], 0x13
or dword [ebp - 0x6fac], 1
jmp 0x48c507
lea eax, [ebp - 0x1f98]
push eax
lea ecx, [ebp - 0x700c]
call fcn.00545910
mov dword [ebp - 4], 0x114
or dword [ebp - 0x6fac], 2
push eax
lea ecx, [ebp - 0x2148]
call fcn.00545840
mov eax, dword [ebp - 0x6fac]
test al, 2
je 0x48c537
and eax, 0xfffffffd
lea ecx, [ebp - 0x700c]
mov dword [ebp - 0x6fac], eax
call fcn.00545790
mov eax, dword [ebp - 0x6fac]
mov dword [ebp - 4], 0x112
test al, 1
je 0x48c556
and eax, 0xfffffffe
lea ecx, [ebp - 0x7018]
mov dword [ebp - 0x6fac], eax
call fcn.00545790
push 0
lea ecx, [ebp - 0x2148]
call fcn.005454f0
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.00470310
mov ecx, edi
inc esi
call fcn.0046c9e0
test al, al
je 0x48c308
mov eax, dword [ebp - 0x6f94]
lea ecx, [ebp - 0x6d28]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1fb4]
mov dword [ebp - 0x6f94], eax
call fcn.0053f740
test al, al
jne 0x48c250
mov ecx, edi
call fcn.00470a40
test al, al
je 0x48c77d
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x58
push dword [eax + 0x34]
call fcn.005173e0
push 4
lea ecx, [ebp - 0x6cec]
call fcn.00401d40
lea ecx, [ebp - 0x6cec]
call fcn.004015e0
lea eax, [ebp - 0x2544]
mov byte [ebp - 4], 0x15
push eax
push 0x1f40
lea eax, [ebp - 0x1f70]
mov dword [ebp - 0x6ca8], 0x428
push eax
mov dword [ebp - 0x2544], 0
call dword [0x5fd37c]
test eax, eax
je 0x48c6d8
xor esi, esi
test dword [ebp - 0x2544], 0xfffffffc
jbe 0x48c6d8
nop dword [eax]
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48c6d8
push dword [ebp + esi*4 - 0x1f70]
push 0x18
call dword [0x5fd474]
push eax
lea ecx, [ebp - 0x6cec]
call fcn.00401610
lea ecx, [ebp - 0x6cec]
call fcn.00401640
test al, al
jne 0x48c6c6
lea eax, [ebp - 0x6ca8]
push eax
push dword [ebp - 0x6cec]
call dword [0x5fd384]
test eax, eax
je 0x48c6bb
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48c6bb
lea eax, [ebp - 0x6a88]
mov ecx, edi
push eax
lea eax, [ebp - 0x213c]
push eax
call fcn.0046db80
test al, al
je 0x48c6bb
lea eax, [ebp - 0x6ca8]
push eax
push dword [ebp - 0x6cec]
call dword [0x5fd2e0]
test eax, eax
jne 0x48c680
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48c6d8
mov eax, dword [ebp - 0x2544]
inc esi
shr eax, 2
cmp esi, eax
jb 0x48c630
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48c772
lea ecx, [ebp - 0x213c]
call fcn.00403760
mov ecx, dword [edi + 8]
push 0x5a
mov dword [ebp - 0x6f7c], eax
push dword [ecx + 0x34]
mov ecx, dword [edi + 4]
call fcn.005173e0
xor esi, esi
cmp dword [ebp - 0x6f7c], esi
jbe 0x48c76b
mov dword [ebp - 0x6f54], esi
mov ecx, edi
call fcn.0046c9e0
test al, al
jne 0x48c76b
mov eax, dword [ebp - 0x6f54]
xor edx, edx
div dword [ebp - 0x6f7c]
mov ecx, dword [edi + 4]
add eax, 0x5a
push eax
mov eax, dword [edi + 8]
push dword [eax + 0x34]
call fcn.005173e0
push 0
push 0
push esi
lea ecx, [ebp - 0x213c]
call fcn.00403920
push eax
mov ecx, edi
call fcn.00470310
add dword [ebp - 0x6f54], 0xa
inc esi
cmp esi, dword [ebp - 0x6f7c]
jb 0x48c718
mov ecx, edi
call fcn.00470a40
lea ecx, [ebp - 0x6cec]
call fcn.004015f0
lea ecx, [ebp - 0x6d3c]
call fcn.0053fe70
lea ecx, [ebp - 0x6d28]
call fcn.0053fe70
lea ecx, [ebp - 0x2b20]
call fcn.005380e0
lea ecx, [ebp - 0x262c]
call fcn.00545790
lea ecx, [ebp - 0x2790]
call fcn.00545790
lea ecx, [ebp - 0x213c]
call fcn.00403940
lea ecx, [ebp - 0x2404]
call fcn.00545790
lea ecx, [ebp - 0x2004]
call fcn.0053fda0
lea ecx, [ebp - 0x205c]
call fcn.0053fda0
lea ecx, [ebp - 0x1fb4]
call fcn.0053fda0
lea ecx, [ebp - 0x20fc]
call fcn.00545790
lea ecx, [ebp - 0x2498]
mov dword [ebp - 4], 0xfd
call fcn.00542660
lea ecx, [ebp - 0x6cb8]
call fcn.00402c60
lea ecx, [ebp - 0x2320]
call fcn.00545790
lea ecx, [ebp - 0x21a4]
call fcn.00545790
lea ecx, [ebp - 0x22b8]
call fcn.00545790
lea ecx, [ebp - 0x1fb0]
mov byte [ebp - 4], 0x45
call fcn.00545790
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0
push 0x1004
push dword [eax + 0xb8]
call fcn.0051c9f0
push 0xc
lea ecx, [ebp - 0x27b0]
mov dword [ebp - 0x6f54], eax
call fcn.00401d20
lea ecx, [ebp - 0x27b0]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x27e0]
mov dword [ebp - 4], 0x116
call fcn.00401d20
lea ecx, [ebp - 0x27e0]
call fcn.00545940
push 0xc
lea ecx, [ebp - 0x28f8]
mov byte [ebp - 4], 0x17
call fcn.00401d20
lea ecx, [ebp - 0x28f8]
call fcn.00545940
push 0
push 0x66a400
lea ecx, [ebp - 0x1fd4]
mov byte [ebp - 4], 0x18
call fcn.00532850
xor esi, esi
cmp dword [ebp - 0x6f54], esi
jbe 0x48c9f4
nop word [eax + eax]
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push esi
push dword [eax + 0xb8]
call fcn.00519090
cmp eax, 0x51
jne 0x48c9e7
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push esi
push dword [eax + 0xb8]
call fcn.00518fe0
push eax
lea ecx, [ebp - 0x2178]
call fcn.00545520
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push esi
push dword [eax + 0xb8]
call fcn.00518fe0
push eax
lea ecx, [ebp - 0x27b0]
call fcn.00545520
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 2
push esi
push dword [eax + 0xb8]
call fcn.00518fe0
push eax
lea ecx, [ebp - 0x27e0]
call fcn.00545520
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 3
push esi
push dword [eax + 0xb8]
call fcn.00518fe0
push eax
lea ecx, [ebp - 0x28f8]
call fcn.00545520
push 0
push 0
push 0
push 0x666634
lea ecx, [ebp - 0x28f8]
call fcn.005454f0
push eax
push 0x66a46c
lea ecx, [ebp - 0x27e0]
call fcn.005454f0
push eax
push 0x66a490
lea ecx, [ebp - 0x27b0]
call fcn.005454f0
push eax
push 0x66a4b8
lea ecx, [ebp - 0x2178]
call fcn.005454f0
push eax
push 0x6652d8
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
inc esi
cmp esi, dword [ebp - 0x6f54]
jb 0x48c8e0
push 0
push 0x66a4e0
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
push 0x18
lea ecx, [ebp - 0x2998]
call fcn.00401d50
lea ecx, [ebp - 0x2998]
call fcn.00542700
xor esi, esi
mov byte [ebp - 4], 0x19
cmp dword [ebp - 0x6f54], esi
jbe 0x48cbde
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push esi
push dword [eax + 0xb8]
call fcn.00519090
cmp eax, 0x52
jne 0x48cbd1
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push esi
push dword [eax + 0xb8]
call fcn.00518fe0
push eax
lea ecx, [ebp - 0x2178]
call fcn.00545520
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push esi
push dword [eax + 0xb8]
call fcn.00518fe0
push eax
lea ecx, [ebp - 0x27b0]
call fcn.00545520
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 2
push esi
push dword [eax + 0xb8]
call fcn.00518fe0
push eax
lea ecx, [ebp - 0x27e0]
call fcn.00545520
push 1
push 0x624a18
lea ecx, [ebp - 0x2178]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2998]
call fcn.00542450
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2998]
call fcn.00542600
push eax
push 0x66a51c
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea ecx, [ebp - 0x2998]
call fcn.005425f0
cmp eax, 1
jbe 0x48cb3d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2998]
call fcn.00542600
push eax
push 0x66a530
lea ecx, [ebp - 0x1f80]
call fcn.00543b40
lea ecx, [ebp - 0x2998]
call fcn.005425f0
cmp eax, 2
jbe 0x48cb7f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 2
lea ecx, [ebp - 0x2998]
call fcn.00542600
push eax
push 0x66a548
lea ecx, [ebp - 0x1f80]
call fcn.00543b40
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666634
lea ecx, [ebp - 0x27e0]
call fcn.005454f0
push eax
push 0x66a490
lea ecx, [ebp - 0x27b0]
call fcn.005454f0
push eax
push 0x66a4b8
lea ecx, [ebp - 0x1f80]
call fcn.00543b40
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
inc esi
cmp esi, dword [ebp - 0x6f54]
jb 0x48ca30
push 0
push 0x66a560
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x663e38
call fcn.00519660
push 0
push 0x66a5b0
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x663e68
call fcn.00519660
push 0
push 0x66a640
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
movsd xmm0, qword [edi + 0x378]
comisd xmm0, xmmword [0x6e3260]
jbe 0x48cc86
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x663e88
call fcn.00519660
push 0
push 0x66a6c0
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x663ebc
call fcn.00519660
push 0
push 0x66a750
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x663eec
call fcn.00519660
push 0
push 0x66a7e0
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x663f18
call fcn.00519660
push 0
push 0x66a870
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x663f50
call fcn.00519660
push 0
push 0x66a900
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x663f98
call fcn.00519660
push 0
push 0x66a9a0
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov eax, dword [edi + 8]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
mov ecx, dword [edi + 4]
push 0x663fe0
call fcn.00519660
push 0
push 0x66aa40
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x664028
call fcn.00519660
push 0
push 0x66aae0
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x664060
call fcn.00519660
push 0
push 0x66ab70
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x6640a8
call fcn.00519660
push 0
push 0x66ac10
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x664108
call fcn.00519660
push 0
push 0x66aca0
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x66414c
call fcn.00519660
push 0
push 0x66ad40
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov eax, dword [edi + 8]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
mov ecx, dword [edi + 4]
push 0x53
push 0xffffffffffffffff
push 0
push 0x664188
call fcn.00519660
push 0
push 0x66ade0
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x66ae78
call fcn.00519660
push 0
push 0x66aed0
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x6641c8
call fcn.00519660
push 0
push 0x66af80
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
movsd xmm0, qword [edi + 0x378]
lea ecx, [ebp - 0x1fd4]
xor eax, eax
comisd xmm0, xmmword [0x6e3260]
seta al
add eax, 8
add dword [edi + 0x24], eax
call fcn.005336e0
test eax, eax
je 0x48d101
lea ecx, [ebp - 0x2980]
call fcn.00539880
lea ecx, [ebp - 0x2980]
call fcn.005398e0
mov edi, eax
lea ecx, [ebp - 0x2980]
sub edi, dword [ebp - 0x6ffc]
mov esi, edx
lea edx, [ebp - 0x1f80]
sbb esi, dword [ebp - 0x7000]
call fcn.005398f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f758
lea ecx, [ebp - 0x1f80]
call fcn.005454f0
push eax
push 0x66b010
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
push esi
push edi
xor edx, edx
lea ecx, [ebp - 0x1f80]
call fcn.00538f50
mov ecx, dword [ebp - 0x6f44]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f220
call fcn.0046c9e0
test al, al
mov edx, 0x66b0b0
mov ecx, 0x66b068
cmove ecx, edx
push ecx
push 0x66b0f0
lea ecx, [ebp - 0x1f80]
call fcn.005454f0
push eax
push 0x66b100
lea ecx, [ebp - 0x1f80]
call fcn.00545560
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
push 0
push 0x66b130
lea ecx, [ebp - 0x1fd4]
call fcn.00532850
lea ecx, [ebp - 0x1fd4]
call fcn.005336f0
mov edi, eax
lea ecx, [ebp - 0x1f80]
add edi, 0x26
mov esi, edx
adc esi, 0
push esi
push edi
call fcn.005448c0
lea ecx, [ebp - 0x1f80]
call fcn.00545700
add eax, eax
add edi, eax
adc esi, 0
push esi
push edi
lea ecx, [ebp - 0x1f80]
call fcn.005448c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x66b16c
lea ecx, [ebp - 0x1f80]
call fcn.00543b40
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532a70
mov edi, dword [ebp - 0x6f44]
jmp 0x48d10c
lea ecx, [edi + 0x11c]
call fcn.00545760
lea ecx, [ebp - 0x1f74]
call fcn.0053e820
lea ecx, [ebp - 0x254c]
call fcn.0053e820
push 5
lea ecx, [edi + 0x314]
call fcn.00544110
lea ecx, [edi + 0x314]
call fcn.005454f0
push eax
push 0x80000002
call dword [0x5fd068]
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x64
push dword [eax + 0x34]
call fcn.005173e0
push 0
mov ecx, edi
call fcn.0046c9e0
test al, al
mov edx, 0x66b1b0
mov eax, dword [edi + 8]
mov ecx, 0x66b194
cmove ecx, edx
push ecx
mov ecx, dword [edi + 4]
push dword [eax + 0x38]
call fcn.0051a750
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x66b1d0
lea ecx, [edi + 0x134]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2178]
call fcn.00545560
lea ecx, [ebp - 0x2178]
call fcn.005454f0
mov esi, 2
mov ecx, eax
mov edx, esi
call fcn.00533cc0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x66b1e0
lea ecx, [edi + 0x134]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2178]
call fcn.00545560
lea ecx, [ebp - 0x2178]
call fcn.005454f0
mov edx, esi
mov ecx, eax
call fcn.00533cc0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x66b1f0
lea ecx, [edi + 0x134]
call fcn.005454f0
push eax
lea ecx, [ebp - 0x2178]
call fcn.00545560
lea ecx, [ebp - 0x2178]
call fcn.005454f0
mov edx, esi
mov ecx, eax
call fcn.00533cc0
lea ecx, [edi + 0x220]
call fcn.0050b510
lea ecx, [ebp - 0x2998]
xor esi, esi
call fcn.00542660
lea ecx, [ebp - 0x28f8]
call fcn.00545790
lea ecx, [ebp - 0x27e0]
call fcn.00545790
lea ecx, [ebp - 0x27b0]
call fcn.00545790
lea ecx, [ebp - 0x2148]
call fcn.00545790
lea ecx, [ebp - 0x6dcc]
call fcn.00403610
lea ecx, [ebp - 0x2548]
call fcn.0050e960
lea ecx, [ebp - 0x2904]
call fcn.00545790
lea ecx, [ebp - 0x6dac]
call fcn.00403610
lea ecx, [ebp - 0x6d10]
call fcn.00401a50
lea ecx, [ebp - 0x1fd4]
call fcn.00401e00
lea ecx, [ebp - 0x2584]
call fcn.00545790
lea ecx, [ebp - 0x1f80]
call fcn.00545790
lea ecx, [ebp - 0x2910]
call fcn.00545790
lea ecx, [ebp - 0x1f8c]
call fcn.00545790
lea ecx, [ebp - 0x2a2c]
call fcn.0053fec0
lea ecx, [ebp - 0x29e0]
call fcn.0053fe70
lea ecx, [ebp - 0x6cb4]
call fcn.0053fe70
lea ecx, [ebp - 0x254c]
call fcn.0053fda0
lea ecx, [ebp - 0x1f74]
call fcn.0053fda0
lea ecx, [ebp - 0x2578]
call fcn.00545790
lea ecx, [ebp - 0x291c]
call fcn.00545790
lea ecx, [ebp - 0x2638]
call fcn.00545790
lea ecx, [ebp - 0x2644]
call fcn.00545790
lea ecx, [ebp - 0x2928]
call fcn.00545790
lea ecx, [ebp - 0x2934]
call fcn.00545790
lea ecx, [ebp - 0x27d4]
call fcn.00545790
lea ecx, [ebp - 0x271c]
call fcn.00545790
lea ecx, [ebp - 0x26e0]
call fcn.00545790
lea ecx, [ebp - 0x26d4]
call fcn.00545790
lea ecx, [ebp - 0x2940]
call fcn.00545790
lea ecx, [ebp - 0x27c8]
call fcn.00545790
lea ecx, [ebp - 0x25d8]
call fcn.00545790
lea ecx, [ebp - 0x2958]
call fcn.00545790
lea ecx, [ebp - 0x28a8]
call fcn.00545790
lea ecx, [ebp - 0x26c8]
call fcn.00545790
lea ecx, [ebp - 0x24c8]
call fcn.00545790
lea ecx, [ebp - 0x294c]
call fcn.00545790
lea ecx, [ebp - 0x25e4]
call fcn.00545790
lea ecx, [ebp - 0x29a4]
call fcn.00545790
lea ecx, [ebp - 0x2184]
call fcn.00545790
lea ecx, [ebp - 0x2220]
call fcn.00545790
lea ecx, [ebp - 0x28b4]
call fcn.00545790
lea ecx, [ebp - 0x2120]
call fcn.00545790
lea ecx, [ebp - 0x2178]
call fcn.00545790
lea ecx, [ebp - 0x1f98]
call fcn.00545790
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e465
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret