Function at 0x472020
Capabilities:
Contain obfuscated stackstrings
Encode data using base64
Parse pe header

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5e9a48
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x70a8
call fcn.0041ed70
mov eax, dword [0x704200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, ecx
mov dword [ebp - 0x6f44], eax
mov dword [ebp - 0x6fac], 0
lea ecx, [ebp - 0x27a4]
mov byte [eax + 0x170], 0
call fcn.00539300
mov ecx, dword [ebp - 0x6f44]
lea ecx, [ecx + 0x11c]
call fcn.005451e0
xor ecx, ecx
call fcn.0053c790
test eax, eax
je 0x4720ae
push eax
call fcn.0041e473
add esp, 4
mov ecx, dword [ebp - 0x6f44]
push 0
call fcn.00499a20
mov eax, dword [ebp - 0x6f44]
push 1
mov eax, dword [eax + 8]
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.00516e60
mov eax, dword [ebp - 0x6f44]
push 0
push 0x66461c
mov eax, dword [eax + 8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.0051a1d0
push 0xc
lea ecx, [ebp - 0x1f98]
call fcn.00401d20
lea ecx, [ebp - 0x1f98]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2178]
mov dword [ebp - 4], 0
call fcn.00401d20
lea ecx, [ebp - 0x2178]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2120]
mov byte [ebp - 4], 1
call fcn.00401d20
lea ecx, [ebp - 0x2120]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x28b4]
mov byte [ebp - 4], 2
call fcn.00401d20
lea ecx, [ebp - 0x28b4]
call fcn.005453c0
mov byte [ebp - 4], 3
mov esi, 0xa0
mov eax, dword [ebp - 0x6f44]
push 0
push 0
push 0x1009
mov eax, dword [eax + 8]
push dword [esi + eax]
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.0051c470
add esi, 4
cmp esi, 0xb8
jb 0x472170
push 0
push 0
push 0x80
lea ecx, [ebp - 0x2120]
call fcn.00544760
push eax
push 0
push 0
push 0x104
lea ecx, [ebp - 0x2178]
call fcn.00544760
push 0
push 0
push 0x80
lea ecx, [ebp - 0x28b4]
mov esi, eax
call fcn.00544760
mov edx, esi
mov ecx, eax
call fcn.004fa730
mov edi, dword [ebp - 0x6f44]
push 4
mov byte [ebp - 0x6f61], 1
mov dword [edi + 0x38], eax
mov eax, edi
mov eax, dword [eax + 8]
push dword [eax + 0x28]
mov eax, edi
mov ecx, dword [eax + 4]
call fcn.005199a0
mov dword [ebp - 0x6f40], eax
test eax, eax
je 0x472242
mov eax, edi
push 1
lea ecx, [eax + 0x114]
push ecx
lea edx, [eax + 0x10c]
lea ecx, [eax + 0x104]
call fcn.004fabb0
test eax, eax
mov dword [edi + 0x30], eax
setne cl
test eax, eax
jne 0x4722c2
jmp 0x472248
mov cl, byte [ebp - 0x6f61]
mov eax, dword [ebp - 0x6f44]
cmp dword [eax + 0x38], 0
je 0x4722ba
lea ecx, [ebp - 0x2120]
mov dword [eax + 0x30], 1
push ecx
push 1
lea ecx, [eax + 0x104]
call fcn.00403520
mov ecx, eax
call fcn.005452c0
mov ecx, dword [ebp - 0x6f44]
lea eax, [ebp - 0x2178]
push eax
push 1
lea ecx, [ecx + 0x10c]
call fcn.00403520
mov ecx, eax
call fcn.005452c0
mov ecx, dword [ebp - 0x6f44]
lea eax, [ebp - 0x28b4]
push eax
push 1
lea ecx, [ecx + 0x114]
call fcn.00403520
mov ecx, eax
call fcn.005452c0
jmp 0x4722c2
test cl, cl
je 0x472628
push 8
lea ecx, [ebp - 0x284c]
call fcn.00401f60
mov eax, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x284c]
add eax, 0x114
push eax
mov dword [ebp - 0x6f94], eax
call fcn.00403680
push 8
lea ecx, [ebp - 0x2844]
mov byte [ebp - 4], 4
call fcn.00401f60
mov esi, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x2844]
add esi, 0x10c
push esi
mov dword [ebp - 0x6f7c], esi
call fcn.00403680
push 8
lea ecx, [ebp - 0x283c]
mov byte [ebp - 4], 5
call fcn.00401f60
mov edi, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x283c]
add edi, 0x104
push edi
mov dword [ebp - 0x6f54], edi
call fcn.00403680
mov eax, dword [ebp - 0x6f44]
mov ecx, edi
mov byte [ebp - 4], 6
mov eax, dword [eax + 0x30]
add eax, 2
push eax
call fcn.00403520
mov edi, dword [ebp - 0x6f44]
mov ecx, esi
mov eax, dword [edi + 0x30]
add eax, 2
push eax
call fcn.00403520
mov eax, dword [edi + 0x30]
mov edi, dword [ebp - 0x6f94]
add eax, 2
push eax
mov ecx, edi
call fcn.00403520
mov eax, dword [ebp - 0x6f44]
xor esi, esi
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x47241f
nop dword [eax]
push esi
lea ecx, [ebp - 0x283c]
call fcn.004035f0
mov ecx, eax
call fcn.005451c0
mov ecx, dword [ebp - 0x6f54]
push eax
push esi
call fcn.004035f0
mov ecx, eax
call fcn.00544fa0
push esi
lea ecx, [ebp - 0x2844]
call fcn.004035f0
mov ecx, eax
call fcn.005451c0
mov ecx, dword [ebp - 0x6f7c]
push eax
push esi
call fcn.004035f0
mov ecx, eax
call fcn.00544fa0
push esi
lea ecx, [ebp - 0x284c]
call fcn.004035f0
mov ecx, eax
call fcn.005451c0
push eax
push esi
mov ecx, edi
call fcn.004035f0
mov ecx, eax
call fcn.00544fa0
mov eax, dword [ebp - 0x6f44]
inc esi
mov ecx, dword [eax + 0x30]
cmp esi, ecx
jb 0x4723a0
push 0
push 0x664648
push 0x104
push ecx
lea ecx, [eax + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.00544760
mov ecx, eax
call fcn.004f9d80
mov eax, dword [ebp - 0x6f44]
push 0x664648
push dword [eax + 0x30]
lea ecx, [eax + 0x104]
call fcn.004035f0
mov ecx, eax
call fcn.005452f0
mov edi, dword [ebp - 0x6f44]
mov ecx, edi
push 0x66465c
mov eax, dword [edi + 0x30]
lea ecx, [ecx + 0x104]
inc eax
push eax
mov dword [edi + 0x30], eax
call fcn.004035f0
mov ecx, eax
call fcn.005452f0
mov eax, edi
push 0x66465c
push dword [eax + 0x30]
lea ecx, [eax + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.005452f0
lea eax, [ebp - 0x6dc0]
mov dword [ebp - 0x6dc0], 0x400
push eax
push 0
mov eax, edi
push 0
push 0x400
push dword [eax + 0x30]
lea ecx, [eax + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544760
push eax
call dword [0x5fd88c]
mov edx, 0x66465c
mov ecx, 0x80000003
call fcn.0053d490
test al, al
jne 0x47258d
push 0xc
lea ecx, [ebp - 0x29bc]
call fcn.00401d20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov eax, edi
push 0
push 0x6271e8
push dword [eax + 0x30]
lea ecx, [eax + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x29bc]
call fcn.00545300
lea ecx, [ebp - 0x29bc]
mov byte [ebp - 4], 7
call fcn.00544f70
push eax
mov eax, edi
push dword [eax + 0x30]
lea ecx, [eax + 0x104]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
push 0x80000003
call dword [0x5fd06c]
test eax, eax
jne 0x472580
mov eax, edi
mov eax, dword [eax + 0x30]
inc eax
mov dword [edi + 0x30], eax
lea ecx, [ebp - 0x29bc]
call fcn.00545210
jmp 0x472596
mov eax, edi
mov eax, dword [eax + 0x30]
inc eax
mov dword [edi + 0x30], eax
lea ecx, [ebp - 0x283c]
call fcn.00403610
lea ecx, [ebp - 0x2844]
call fcn.00403610
lea ecx, [ebp - 0x284c]
mov byte [ebp - 4], 3
call fcn.00403610
mov esi, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x27a4]
add esi, 0x140
call fcn.00539360
push edx
push eax
mov ecx, esi
call fcn.005441b0
mov ecx, dword [ebp - 0x6f44]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x62fb54
lea ecx, [ecx + 0x134]
call fcn.00544f70
push eax
mov ecx, esi
call fcn.00543350
mov ecx, esi
call fcn.00544f70
or edx, 0xffffffff
mov ecx, eax
call fcn.0052fa20
test al, al
jne 0x472638
mov eax, dword [ebp - 0x6f44]
push 1
mov ecx, eax
call fcn.00499a20
mov esi, eax
jmp 0x48d239
mov ecx, esi
call fcn.00544f70
push eax
call dword [0x5fd494]
or eax, 2
mov ecx, esi
push eax
call fcn.00544f70
push eax
call dword [0x5fd474]
push 0
call dword [0x5fdac8]
push 0xc
lea ecx, [ebp - 0x2220]
call fcn.00401d20
lea ecx, [ebp - 0x2220]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2184]
mov byte [ebp - 4], 8
call fcn.00401d20
lea ecx, [ebp - 0x2184]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x29a4]
mov byte [ebp - 4], 9
call fcn.00401d20
lea ecx, [ebp - 0x29a4]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x25e4]
mov byte [ebp - 4], 0xa
call fcn.00401d20
lea ecx, [ebp - 0x25e4]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x294c]
mov byte [ebp - 4], 0xb
call fcn.00401d20
lea ecx, [ebp - 0x294c]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x24c8]
mov byte [ebp - 4], 0xc
call fcn.00401d20
lea ecx, [ebp - 0x24c8]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x26c8]
mov byte [ebp - 4], 0xd
call fcn.00401d20
lea ecx, [ebp - 0x26c8]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x28a8]
mov byte [ebp - 4], 0xe
call fcn.00401d20
lea ecx, [ebp - 0x28a8]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2958]
mov byte [ebp - 4], 0xf
call fcn.00401d20
lea ecx, [ebp - 0x2958]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x25d8]
mov byte [ebp - 4], 0x10
call fcn.00401d20
lea ecx, [ebp - 0x25d8]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x27c8]
mov byte [ebp - 4], 0x11
call fcn.00401d20
lea ecx, [ebp - 0x27c8]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2940]
mov byte [ebp - 4], 0x12
call fcn.00401d20
lea ecx, [ebp - 0x2940]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x26d4]
mov byte [ebp - 4], 0x13
call fcn.00401d20
lea ecx, [ebp - 0x26d4]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x26e0]
mov byte [ebp - 4], 0x14
call fcn.00401d20
lea ecx, [ebp - 0x26e0]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x271c]
mov byte [ebp - 4], 0x15
call fcn.00401d20
lea ecx, [ebp - 0x271c]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x27d4]
mov byte [ebp - 4], 0x16
call fcn.00401d20
lea ecx, [ebp - 0x27d4]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2934]
mov byte [ebp - 4], 0x17
call fcn.00401d20
lea ecx, [ebp - 0x2934]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2928]
mov byte [ebp - 4], 0x18
call fcn.00401d20
lea ecx, [ebp - 0x2928]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2644]
mov byte [ebp - 4], 0x19
call fcn.00401d20
lea ecx, [ebp - 0x2644]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2638]
mov byte [ebp - 4], 0x1a
call fcn.00401d20
lea ecx, [ebp - 0x2638]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x291c]
mov byte [ebp - 4], 0x1b
call fcn.00401d20
lea ecx, [ebp - 0x291c]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2578]
mov byte [ebp - 4], 0x1c
call fcn.00401d20
lea ecx, [ebp - 0x2578]
call fcn.005453c0
mov byte [ebp - 4], 0x1d
call dword [0x5fd4f8]
mov ecx, eax
call fcn.005302b0
mov edi, eax
mov ecx, str.HKLM
test edi, edi
mov dword [ebp - 0x6fa8], edi
mov eax, str.HKLM64
setne byte [ebp - 0x6f61]
test edi, edi
push 1
cmove eax, ecx
mov ecx, 0x61d050
mov dword [ebp - 0x6f8c], eax
mov eax, str.HKLM32
cmove eax, ecx
lea ecx, [ebp - 0x2220]
mov dword [ebp - 0x6fa4], eax
mov eax, dword [ebp - 0x6f44]
push dword [eax + 0x38]
push 0x1a
call fcn.00544980
mov eax, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x2184]
push 1
push dword [eax + 0x38]
push 0x1c
call fcn.00544980
mov eax, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x25e4]
push 1
push dword [eax + 0x38]
push 2
call fcn.00544980
mov eax, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x24c8]
push 1
push dword [eax + 0x38]
push 0x10
call fcn.00544980
mov eax, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x271c]
push 1
push dword [eax + 0x38]
push 0x23
call fcn.00544980
mov eax, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x28a8]
push 1
push dword [eax + 0x38]
push 7
call fcn.00544980
mov eax, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x2958]
push 1
push dword [eax + 0x38]
push 5
call fcn.00544980
push 0x400
push 0
push 0
push 0x400
lea ecx, [ebp - 0x26c8]
call fcn.00544760
push eax
mov eax, dword [ebp - 0x6f44]
push 0x65f140
push dword [eax + 0x38]
call dword [0x5fd884]
push 0x400
lea ecx, [ebp - 0x26c8]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x26c8]
call fcn.00544f70
push eax
call dword [0x5fd4fc]
push 0x104
push 0
push 0
push 0x104
lea ecx, [ebp - 0x25d8]
call fcn.00544760
push eax
call dword [0x5fd434]
test edi, edi
je 0x472a8d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x62ee68
lea ecx, [ebp - 0x25d8]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x27c8]
call fcn.00544fe0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f150
lea ecx, [ebp - 0x25d8]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2940]
call fcn.00544fe0
jmp 0x472abf
push 0x104
push 0
push 0
push 0x104
lea ecx, [ebp - 0x27c8]
call fcn.00544760
push eax
call dword [0x5fd484]
lea eax, [ebp - 0x27c8]
push eax
lea ecx, [ebp - 0x2940]
call fcn.005452c0
push edi
lea edx, [ebp - 0x26e0]
lea ecx, [ebp - 0x26d4]
call fcn.0052c8e0
push 0
push 0
push 0x2b
lea ecx, [ebp - 0x27d4]
call fcn.00544980
push 0
push 0
push 0x17
lea ecx, [ebp - 0x2644]
call fcn.00544980
push 0
push 0
push 0x19
lea ecx, [ebp - 0x2638]
call fcn.00544980
push 0
push 0
push 0x18
lea ecx, [ebp - 0x2934]
call fcn.00544980
push 1
push 0
push 0x28
lea ecx, [ebp - 0x2578]
call fcn.00544980
lea ecx, [ebp - 0x2578]
call fcn.00545180
push eax
lea ecx, [ebp - 0x2220]
call fcn.00543b90
lea ecx, [ebp - 0x2578]
call fcn.00545180
push eax
lea ecx, [ebp - 0x2184]
call fcn.00543b90
push 1
push 0x65f178
lea ecx, [ebp - 0x29a4]
call fcn.00545040
lea ecx, [ebp - 0x2578]
call fcn.00545180
push eax
lea ecx, [ebp - 0x25e4]
call fcn.00543b90
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x641158
lea ecx, [ebp - 0x2220]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x294c]
call fcn.00544fe0
lea ecx, [ebp - 0x2578]
call fcn.00545180
push eax
lea ecx, [ebp - 0x24c8]
call fcn.00543b90
lea ecx, [ebp - 0x2578]
call fcn.00545180
push eax
lea ecx, [ebp - 0x26c8]
call fcn.00543b90
lea ecx, [ebp - 0x2578]
call fcn.00545180
push eax
lea ecx, [ebp - 0x28a8]
call fcn.00543b90
lea ecx, [ebp - 0x2578]
call fcn.00545180
push eax
lea ecx, [ebp - 0x2958]
call fcn.00543b90
push 2
push 1
lea ecx, [ebp - 0x25d8]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x291c]
call fcn.00542b70
push 1
lea ecx, [ebp - 0x27d4]
call fcn.00544d00
lea eax, [ebp - 0x27d4]
push eax
lea ecx, [ebp - 0x2928]
call fcn.005452c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d048
lea ecx, [ebp - 0x26d4]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x27d4]
call fcn.00543350
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d048
lea ecx, [ebp - 0x26e0]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2928]
call fcn.00543350
mov eax, dword [ebp - 0x6f44]
cmp byte [eax + 0x40], 0
je 0x472cb6
xor esi, esi
jmp 0x48d147
mov eax, dword [eax + 8]
push 3
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.00516e60
mov eax, dword [ebp - 0x6f44]
push 0
push 0x664674
mov eax, dword [eax + 8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.0051a1d0
mov eax, dword [ebp - 0x6f44]
cmp dword [eax + 0x10], 0
jne 0x472d06
mov ecx, eax
call fcn.0046f0e0
mov eax, dword [ebp - 0x6f44]
cmp dword [eax + 0x10], 1
jne 0x472d31
mov esi, dword [0x5fd458]
mov ecx, eax
call fcn.0046c7f0
test al, al
jne 0x472dc1
push 0x64
call esi
mov eax, dword [ebp - 0x6f44]
cmp dword [eax + 0x10], 1
je 0x472d12
mov eax, dword [eax + 8]
push 6
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.00516e60
mov eax, dword [ebp - 0x6f44]
push 0
push 0x6646a4
mov eax, dword [eax + 8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.0051a1d0
mov esi, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x27a4]
add esi, 0x314
call fcn.00539360
push edx
push eax
mov ecx, esi
call fcn.005441b0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6646d4
mov ecx, esi
call fcn.00543350
mov ecx, esi
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.0046eee0
test eax, eax
jne 0x472dcb
mov esi, 3
jmp 0x48d147
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x627794
mov ecx, esi
call fcn.00543350
push 4
lea ecx, [ebp - 0x1f74]
call fcn.00401d40
lea ecx, [ebp - 0x1f74]
call fcn.0053f8e0
push 4
lea ecx, [ebp - 0x254c]
mov byte [ebp - 4], 0x1e
call fcn.00401d40
push 0
push 0x20019
mov ecx, esi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x254c]
call fcn.0053f8c0
push 0xc
lea ecx, [ebp - 0x6cb4]
mov byte [ebp - 4], 0x1f
call fcn.00401d20
lea ecx, [ebp - 0x6cb4]
call fcn.0053f900
push 0xc
lea ecx, [ebp - 0x29e0]
mov byte [ebp - 4], 0x20
call fcn.00401d20
lea ecx, [ebp - 0x29e0]
call fcn.0053f900
push 0x10
lea ecx, [ebp - 0x2a2c]
mov byte [ebp - 4], 0x21
call fcn.00401d60
lea ecx, [ebp - 0x2a2c]
call fcn.0053f950
push 0xc
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0x22
call fcn.00401d20
lea ecx, [ebp - 0x1f8c]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2910]
mov byte [ebp - 4], 0x23
call fcn.00401d20
lea ecx, [ebp - 0x2910]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x1f80]
mov byte [ebp - 4], 0x24
call fcn.00401d20
lea ecx, [ebp - 0x1f80]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2584]
mov byte [ebp - 4], 0x25
call fcn.00401d20
lea ecx, [ebp - 0x2584]
call fcn.005453c0
lea ecx, [ebp - 0x27a4]
mov byte [ebp - 4], 0x26
call fcn.00539360
mov ecx, edx
mov dword [ebp - 0x6ffc], eax
push ecx
mov dword [ebp - 0x7000], ecx
lea ecx, [ebp - 0x2910]
push eax
call fcn.005441b0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f19c
lea ecx, [ebp - 0x2910]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
push 0x6646e4
lea ecx, [ecx + 0x134]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
lea ecx, [ecx + 0x11c]
call fcn.00544fe0
push 0x20
lea ecx, [ebp - 0x1fd4]
call fcn.00401e20
lea ecx, [ebp - 0x1fd4]
call fcn.005332d0
mov ecx, dword [ebp - 0x6f44]
push 0
push 0x22
mov byte [ebp - 4], 0x27
lea ecx, [ecx + 0x11c]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00532c10
test eax, eax
je 0x4731b7
push 0
mov esi, dword [ebp - 0x6f44]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6646f8
push 0
push 1
push 1
push 0
add esi, 0x32c
push 0x664728
mov ecx, esi
call fcn.005438b0
test eax, eax
mov edx, 0x664740
mov ecx, 0x664738
cmove ecx, edx
push ecx
mov ecx, esi
call fcn.00544f70
push eax
push 0x65f1fc
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
push 0
push 0
push 0
push 0
push 0
push 0x65f210
push 0x61d648
push 0x6264cc
push 0x65f224
push 0x65f238
mov ecx, esi
call fcn.00544f70
push eax
push 0x62289c
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
mov eax, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x2584]
push 0
push dword [eax + 0xc]
call fcn.005441b0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f788
lea ecx, [ebp - 0x2584]
call fcn.00544f70
push eax
push 0x664758
mov ecx, esi
call fcn.00544f70
push eax
push 0x62289c
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
push edi
mov ecx, dword [ebp - 0x6f44]
lea eax, [ebp - 0x1f80]
push eax
call fcn.00470d20
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
cmp dword [ebp - 0x6f40], 0
mov ecx, 0x664798
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f788
mov eax, 0x6291b8
cmove eax, ecx
lea ecx, [ebp - 0x28b4]
push eax
push 0x6647ac
push 0x65f788
call fcn.00544f70
push eax
push 0x6647e4
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
lea edx, [ebp - 0x1f80]
lea ecx, [ebp - 0x27a4]
call fcn.00539370
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f250
lea ecx, [ebp - 0x1f80]
call fcn.00544f70
push eax
push 0x664818
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
push 0
push 0x664840
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
lea ecx, [ebp - 0x291c]
call fcn.00544f70
lea ecx, [ebp - 0x25d8]
mov dword [ebp - 0x6fa0], eax
call fcn.00544f70
lea ecx, [ebp - 0x27c8]
mov dword [ebp - 0x6f9c], eax
call fcn.00544f70
mov dword [ebp - 0x6f98], eax
mov al, byte [ebp - 0x6f61]
mov byte [ebp - 0x6f94], al
mov eax, dword [ebp - 0x6f44]
movups xmm0, xmmword [ebp - 0x6fa0]
lea ecx, [eax + 0x2d0]
movups xmmword [eax + 0x17c], xmm0
call fcn.00469eb0
mov esi, dword [ebp - 0x6f44]
add esi, 0x220
mov ecx, esi
call fcn.0050af90
mov ecx, dword [ebp - 0x6f44]
push 0
lea ecx, [ecx + 0x208]
call fcn.0050bfe0
push 0x664af8
mov ecx, esi
call fcn.0050bc30
push 1
mov ecx, esi
call fcn.0050a1e0
mov eax, dword [ebp - 0x6f44]
xor ecx, ecx
test edi, edi
push 4
setne cl
inc ecx
add ecx, dword [eax + 0x30]
mov dword [ebp - 0x6f74], ecx
lea ecx, [ebp - 0x6d10]
call fcn.00401d40
push 8
push 0x664b7c
lea ecx, [ebp - 0x6d10]
call fcn.004019a0
push 8
lea ecx, [ebp - 0x6dac]
mov byte [ebp - 4], 0x28
call fcn.00401f60
mov edi, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x6dac]
mov eax, dword [edi + 0x30]
add eax, 2
push eax
call fcn.004036b0
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x2904]
mov edi, dword [ebp - 0x6dac]
push 0xc
mov dword [ebp - 0x6f70], edi
call fcn.00401d20
push 1
push 0x61d184
lea ecx, [ebp - 0x2904]
call fcn.00545350
mov eax, dword [ebp - 0x6f44]
xor esi, esi
mov byte [ebp - 4], 0x2a
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x473334
add eax, 0x114
mov dword [ebp - 0x6f94], eax
nop dword [eax]
push esi
mov ecx, eax
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
mov ecx, edi
call fcn.005452f0
mov eax, dword [ebp - 0x6f44]
inc esi
add edi, 0xc
mov ecx, dword [eax + 0x30]
mov eax, dword [ebp - 0x6f94]
cmp esi, ecx
jb 0x473300
mov edi, dword [ebp - 0x6f70]
lea eax, [ecx + ecx*2]
push 0x65f3a0
lea ecx, [edi + eax*4]
call fcn.005452f0
cmp dword [ebp - 0x6fa8], 0
je 0x473367
mov eax, dword [ebp - 0x6f44]
push 0x65f3a0
mov eax, dword [eax + 0x30]
inc eax
lea eax, [eax + eax*2]
lea ecx, [edi + eax*4]
call fcn.005452f0
push 4
lea ecx, [ebp - 0x2548]
call fcn.00401d40
lea ecx, [ebp - 0x2548]
call fcn.0050e400
mov ecx, dword [ebp - 0x6f44]
mov byte [ebp - 4], 0x2b
call fcn.0046c7f0
test al, al
jne 0x475dc8
mov eax, dword [ebp - 0x6f44]
test dword [eax + 0x34], 0x400
jne 0x475dc8
push 0
push 0x664bc0
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov eax, dword [ebp - 0x6f44]
push 0
push 0x664bf0
mov eax, dword [eax + 8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.0051a1d0
push 8
lea ecx, [ebp - 0x6d1c]
call fcn.00401f60
push dword [ebp - 0x6f74]
lea ecx, [ebp - 0x6d1c]
call fcn.004036b0
mov eax, dword [ebp - 0x6f44]
xor esi, esi
mov byte [ebp - 4], 0x2c
mov edi, dword [ebp - 0x6d1c]
mov dword [ebp - 0x6f68], edi
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x473474
add eax, 0x104
mov dword [ebp - 0x6f94], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x664c20
push esi
mov ecx, eax
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
push str.HKU_
mov ecx, edi
call fcn.00544fe0
mov eax, dword [ebp - 0x6f44]
inc esi
add edi, 0xc
mov ecx, dword [eax + 0x30]
mov eax, dword [ebp - 0x6f94]
cmp esi, ecx
jb 0x473424
mov edi, dword [ebp - 0x6f68]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6549b0
push dword [ebp - 0x6f8c]
lea eax, [ecx + ecx*2]
lea ecx, [edi + eax*4]
call fcn.00544fe0
cmp dword [ebp - 0x6fa8], 0
je 0x4734db
mov eax, dword [ebp - 0x6f44]
push 0
push 0
push 0
mov eax, dword [eax + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x6549b0
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [edi + eax*4]
call fcn.00544fe0
push 4
lea ecx, [ebp - 0x2224]
call fcn.00401d40
lea ecx, [ebp - 0x2224]
call fcn.0053f8e0
push 4
lea ecx, [ebp - 0x1ff4]
mov byte [ebp - 4], 0x2d
call fcn.00401d40
lea ecx, [ebp - 0x1ff4]
call fcn.0053f8e0
push 0xc
lea ecx, [ebp - 0x23c8]
mov byte [ebp - 4], 0x2e
call fcn.00401d20
lea ecx, [ebp - 0x23c8]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2130]
mov byte [ebp - 4], 0x2f
call fcn.00401d20
lea ecx, [ebp - 0x2130]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x1fa4]
mov byte [ebp - 4], 0x30
call fcn.00401d20
lea ecx, [ebp - 0x1fa4]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2074]
mov byte [ebp - 4], 0x31
call fcn.00401d20
lea ecx, [ebp - 0x2074]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x23bc]
mov byte [ebp - 4], 0x32
call fcn.00401d20
lea ecx, [ebp - 0x23bc]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x22cc]
mov byte [ebp - 4], 0x33
call fcn.00401d20
lea ecx, [ebp - 0x22cc]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2154]
mov byte [ebp - 4], 0x34
call fcn.00401d20
lea ecx, [ebp - 0x2154]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2114]
mov byte [ebp - 4], 0x35
call fcn.00401d20
lea ecx, [ebp - 0x2114]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x22f0]
mov byte [ebp - 4], 0x36
call fcn.00401d20
lea ecx, [ebp - 0x22f0]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2890]
mov byte [ebp - 4], 0x37
call fcn.00401d20
lea ecx, [ebp - 0x2890]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2784]
mov byte [ebp - 4], 0x38
call fcn.00401d20
lea ecx, [ebp - 0x2784]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x289c]
mov byte [ebp - 4], 0x39
call fcn.00401d20
lea ecx, [ebp - 0x289c]
call fcn.005453c0
mov ecx, dword [ebp - 0x6f44]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov byte [ebp - 4], 0x3a
lea ecx, [ecx + 0x140]
push 0x65f32c
mov dword [ebp - 0x2354], 0
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00544fe0
mov esi, dword [ebp - 0x2368]
xor edi, edi
mov dword [ebp - 0x6f4c], edi
mov dword [ebp - 0x6f6c], esi
cmp dword [ebp - 0x6f74], edi
jbe 0x474842
mov eax, dword [ebp - 0x6f44]
lea ecx, [eax + 0x314]
mov dword [ebp - 0x6f54], ecx
lea ecx, [eax + 0x10c]
mov dword [ebp - 0x6f40], ecx
jmp 0x4736e9
mov eax, dword [ebp - 0x6f44]
mov ecx, eax
call fcn.0046c7f0
test al, al
jne 0x474842
movd xmm1, edi
mov eax, edi
cvtdq2pd xmm1, xmm1
shr eax, 0x1f
addsd xmm1, qword [eax*8 + 0x6e3620]
mov eax, dword [ebp - 0x6f74]
mulsd xmm1, qword [0x6e32b0]
movd xmm0, eax
shr eax, 0x1f
cvtdq2pd xmm0, xmm0
addsd xmm0, qword [eax*8 + 0x6e3620]
divsd xmm1, xmm0
addsd xmm1, qword [0x6e3260]
cvttsd2si eax, xmm1
push eax
mov eax, dword [ebp - 0x6f44]
mov eax, dword [eax + 8]
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.00516e60
lea eax, [edi + edi*2]
shl eax, 2
mov dword [ebp - 0x6f7c], eax
add eax, dword [ebp - 0x6f68]
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f94], eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2224]
call fcn.0053f870
test al, al
je 0x47482f
mov ecx, dword [ebp - 0x6f44]
xor esi, esi
mov dword [ebp - 0x6f6c], esi
call fcn.0046c7f0
test al, al
jne 0x47482f
lea eax, [ebp - 0x6cb4]
push eax
push esi
lea ecx, [ebp - 0x2224]
call fcn.0053f1c0
test al, al
je 0x474829
mov ecx, dword [ebp - 0x6f94]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
push 0x61d048
call fcn.00544f70
push eax
lea ecx, [ebp - 0x23c8]
call fcn.00544fe0
push 0
push 0x20019
lea ecx, [ebp - 0x23c8]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1ff4]
call fcn.0053f870
test al, al
je 0x474815
lea eax, [ebp - 0x2130]
push eax
push 0x6287d4
lea ecx, [ebp - 0x1ff4]
call fcn.0053f580
test al, al
je 0x474815
lea eax, [ebp - 0x6ccc]
push eax
push 0x664c8c
lea ecx, [ebp - 0x1ff4]
call fcn.0053f4f0
test al, al
je 0x47386c
cmp dword [ebp - 0x6ccc], 1
je 0x474815
lea eax, [ebp - 0x23bc]
push eax
push 0x664cac
lea ecx, [ebp - 0x1ff4]
call fcn.0053f580
test al, al
je 0x47389a
lea ecx, [ebp - 0x23bc]
call fcn.00545180
test eax, eax
jne 0x474815
lea eax, [ebp - 0x23bc]
push eax
push 0x664cc8
lea ecx, [ebp - 0x1ff4]
call fcn.0053f580
test al, al
je 0x473915
push 0x664ce0
lea ecx, [ebp - 0x23bc]
call fcn.005452a0
test al, al
jne 0x474815
push 0x664cf0
lea ecx, [ebp - 0x23bc]
call fcn.005452a0
test al, al
jne 0x474815
push 0x664d00
lea ecx, [ebp - 0x23bc]
call fcn.005452a0
test al, al
jne 0x474815
push 0x664d14
lea ecx, [ebp - 0x23bc]
call fcn.005452a0
test al, al
jne 0x474815
lea eax, [ebp - 0x1fa4]
push eax
push 0x664d34
lea ecx, [ebp - 0x1ff4]
call fcn.0053f580
lea eax, [ebp - 0x22cc]
push eax
push 0x654ae8
lea ecx, [ebp - 0x1ff4]
call fcn.0053f580
test al, al
jne 0x47395a
lea ecx, [ebp - 0x1fa4]
call fcn.00545180
test eax, eax
je 0x474815
lea eax, [ebp - 0x2154]
push eax
push 0x664d54
lea ecx, [ebp - 0x1ff4]
call fcn.0053f580
test al, al
je 0x473984
lea ecx, [ebp - 0x2154]
call fcn.00545180
test eax, eax
jne 0x473994
push 0x65f38c
lea ecx, [ebp - 0x2154]
call fcn.005452f0
lea eax, [ebp - 0x2130]
push eax
lea ecx, [ebp - 0x2114]
call fcn.005452c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d134
lea ecx, [ebp - 0x2114]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x664d68
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00544fe0
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
xor edx, edx
mov ecx, eax
call fcn.0053c5e0
mov byte [ebp - 0x6f61], al
test al, al
jne 0x473af5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2114]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x664d68
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00544fe0
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
xor edx, edx
mov ecx, eax
call fcn.0053c5e0
mov byte [ebp - 0x6f61], al
test al, al
jne 0x473af5
push 0
push 1
push 0xffffffffffffffff
push 1
push 0x61e0e4
lea ecx, [ebp - 0x2114]
call fcn.005438b0
cmp eax, 4
jl 0x473c14
dec eax
lea ecx, [ebp - 0x2114]
push eax
call fcn.00543c40
cmp byte [eax + 8], 0
je 0x473c07
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2114]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x664d68
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00544fe0
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
xor edx, edx
mov ecx, eax
call fcn.0053c5e0
mov byte [ebp - 0x6f61], al
test al, al
je 0x473a61
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d184
lea ecx, [ebp - 0x2114]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2904]
call fcn.005435c0
cmp byte [ebp - 0x6f61], 0
jne 0x473b8a
lea eax, [ebp - 0x2354]
push eax
lea eax, [ebp - 0x2784]
push eax
lea ecx, [ebp - 0x23c8]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.0046e810
test al, al
je 0x474815
push 0
lea ecx, [ebp - 0x23c8]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
lea eax, [ebp - 0x2784]
push eax
call fcn.00470120
test al, al
je 0x474815
mov byte [ebp - 0x6f61], 2
mov ecx, dword [ebp - 0x6f44]
push 0
lea ecx, [ecx + 0x14c]
call fcn.00544f70
push eax
push 0x627210
lea ecx, [ebp - 0x2130]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00470bd0
test al, al
jne 0x474815
lea ecx, [ebp - 0x1fa4]
call fcn.00544f70
mov ecx, eax
call fcn.0052fcf0
test al, al
je 0x473cb6
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.005449e0
push 0
push 0
push 0x61d050
push 0x61e29c
lea ecx, [ebp - 0x1fa4]
call fcn.005430c0
jmp 0x47428f
cmp byte [ebp - 0x6f61], 0
jne 0x473af5
lea ecx, [ebp - 0x2114]
call fcn.005451e0
lea ecx, [ebp - 0x2130]
call fcn.00545180
push 0
push 1
push 1
push 0
push 0x664d7c
lea ecx, [ebp - 0x2130]
call fcn.005438b0
test eax, eax
jne 0x473c98
push eax
push 1
push 1
push eax
push 0x664d90
lea ecx, [ebp - 0x2130]
call fcn.005438b0
test eax, eax
jne 0x473c98
push eax
push 1
push 1
push eax
push 0x664db4
lea ecx, [ebp - 0x2130]
call fcn.005438b0
test eax, eax
jne 0x473c98
push eax
push 1
push 1
push eax
push 0x664dd4
lea ecx, [ebp - 0x2130]
call fcn.005438b0
test eax, eax
je 0x473b2e
lea eax, [ebp - 0x2130]
mov byte [ebp - 0x6f61], 2
push eax
lea ecx, [ebp - 0x2114]
call fcn.005452c0
jmp 0x473b8a
cmp dword [ebp - 0x2354], 0
je 0x473d78
lea eax, [ebp - 0x6ccc]
mov dword [ebp - 0x6ccc], 0x400
push eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544760
push eax
push 0x664d34
push dword [ebp - 0x6cb4]
call dword [0x5fda9c]
push 0
push 1
push 1
push 0
push 0x61e384
lea ecx, [ebp - 0x1fa4]
call fcn.005438b0
test eax, eax
jne 0x473d78
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x664dfc
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x23bc]
push 0x664e28
push dword [ebp - 0x6f8c]
call fcn.00544fe0
push 0
push 0x20019
lea ecx, [ebp - 0x23bc]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x473d78
lea eax, [ebp - 0x1fa4]
push eax
push 0x664d34
lea ecx, [ebp - 0x1f74]
call fcn.0053f580
lea ecx, [ebp - 0x1fa4]
call fcn.00545180
cmp eax, 0xa
jle 0x473d95
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.005449e0
lea ecx, [ebp - 0x1fa4]
call fcn.00544f70
push eax
call dword [0x5fd694]
test eax, eax
jne 0x47428f
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x61d1a0
lea ecx, [ebp - 0x2130]
call fcn.00544f70
push eax
push 0x61d048
lea ecx, [ebp - 0x26d4]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00544fe0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00544f70
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544760
mov edx, 0x400
mov ecx, eax
call fcn.0052ff00
test al, al
jne 0x47428f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d1a0
lea ecx, [ebp - 0x2130]
call fcn.00544f70
push eax
push 0x61d048
lea ecx, [ebp - 0x26e0]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00544fe0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00544f70
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544760
mov edx, 0x400
mov ecx, eax
call fcn.0052ff00
test al, al
jne 0x47428f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d1a0
lea ecx, [ebp - 0x2130]
call fcn.00544f70
push eax
push 0x61d048
lea ecx, [ebp - 0x271c]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00544fe0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00544f70
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544760
mov edx, 0x400
mov ecx, eax
call fcn.0052ff00
test al, al
jne 0x47428f
lea ecx, [ebp - 0x2154]
call fcn.00545180
cmp eax, 4
jle 0x473fa5
push 0
push 1
push 1
push 0
push 0x664ecc
lea ecx, [ebp - 0x2154]
call fcn.005438b0
cmp eax, 1
je 0x473fa5
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d1a0
lea ecx, [ebp - 0x2130]
call fcn.00544f70
push eax
push 0x61d048
lea ecx, [ebp - 0x2154]
call fcn.00544f70
push eax
push 0x61d048
lea ecx, [ebp - 0x271c]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00544fe0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00544f70
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544760
mov edx, 0x400
mov ecx, eax
call fcn.0052ff00
test al, al
jne 0x47428f
mov eax, dword [ebp - 0x6f44]
cmp edi, dword [eax + 0x30]
jae 0x474207
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d1a0
lea ecx, [ebp - 0x2130]
call fcn.00544f70
push eax
push 0x61d048
lea ecx, [ebp - 0x2220]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
push edi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00544fe0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00544f70
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544760
mov edx, 0x400
mov ecx, eax
call fcn.0052ff00
test al, al
jne 0x47428f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d1a0
lea ecx, [ebp - 0x2130]
call fcn.00544f70
push eax
push 0x61d048
lea ecx, [ebp - 0x2184]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
push edi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00544fe0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00544f70
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544760
mov edx, 0x400
mov ecx, eax
call fcn.0052ff00
test al, al
jne 0x47428f
lea ecx, [ebp - 0x2154]
call fcn.00545180
cmp eax, 4
jle 0x474207
push 0
push 1
push 1
push 0
push 0x664ecc
lea ecx, [ebp - 0x2154]
call fcn.005438b0
cmp eax, 1
je 0x474207
push 0
push 0
push 0
push 0
push 0
push 0x61d1a0
lea ecx, [ebp - 0x2130]
call fcn.00544f70
push eax
push 0x61d048
lea ecx, [ebp - 0x2154]
call fcn.00544f70
push eax
push 0x61d048
lea ecx, [ebp - 0x2220]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
push edi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00544fe0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00544f70
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544760
mov edx, 0x400
mov ecx, eax
call fcn.0052ff00
test al, al
jne 0x47428f
push 0
push 0
push 0
push 0
push 0
push 0x61d1a0
lea ecx, [ebp - 0x2130]
call fcn.00544f70
push eax
push 0x61d048
lea ecx, [ebp - 0x2154]
call fcn.00544f70
push eax
push 0x61d048
lea ecx, [ebp - 0x2184]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
push edi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00544fe0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00544f70
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544760
mov edx, 0x400
mov ecx, eax
call fcn.0052ff00
test al, al
jne 0x47428f
lea ecx, [ebp - 0x22cc]
call fcn.00545180
lea ecx, [ebp - 0x1fa4]
cmp eax, 0xa
jle 0x47428a
lea eax, [ebp - 0x22cc]
push eax
call fcn.005452c0
push 0
push 0
push 0x61d050
push 0x61e29c
lea ecx, [ebp - 0x1fa4]
call fcn.005430c0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.005449e0
push 0
push 1
push 0xffffffffffffffff
push 1
push 0x61e384
lea ecx, [ebp - 0x1fa4]
call fcn.005438b0
cmp eax, 2
jle 0x47427b
add eax, 0xfffffffe
lea ecx, [ebp - 0x1fa4]
push eax
call fcn.00543b90
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00544c90
jmp 0x47428f
call fcn.005451e0
lea ecx, [ebp - 0x1fa4]
call fcn.00544f70
mov ecx, eax
call fcn.00535cb0
test al, al
je 0x4742b0
lea ecx, [ebp - 0x1fa4]
call fcn.005451e0
lea eax, [ebp - 0x2074]
mov dword [ebp - 0x6f6c], 0
push eax
push 0x648f9c
lea ecx, [ebp - 0x1ff4]
call fcn.0053f580
test al, al
je 0x47430d
push 0
lea ecx, [ebp - 0x2074]
call fcn.00544f70
push eax
push 0x104
lea ecx, [ebp - 0x2074]
call fcn.00544760
lea ecx, [ebp - 0x2074]
call fcn.00544f70
push eax
call dword [0x5fd69c]
mov dword [ebp - 0x6f6c], eax
jmp 0x474363
cmp dword [ebp - 0x2354], 0
je 0x474370
lea eax, [ebp - 0x6d30]
mov dword [ebp - 0x6d30], 0x400
push eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0x2074]
call fcn.00544760
push eax
push 0x664ee4
push dword [ebp - 0x6cb4]
call dword [0x5fda9c]
push dword [ebp - 0x6d30]
lea ecx, [ebp - 0x2074]
call fcn.00545220
xor ecx, ecx
mov word [eax], cx
cmp dword [ebp - 0x2354], 0
jne 0x4744ba
lea ecx, [ebp - 0x2074]
call fcn.00545180
test eax, eax
jne 0x4744ba
push eax
lea ecx, [ebp - 0x22cc]
call fcn.00544f70
push eax
push 0x800
lea ecx, [ebp - 0x2074]
call fcn.00544760
push 0x800
lea ecx, [ebp - 0x2074]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x22cc]
call fcn.00544f70
push eax
call dword [0x5fd4f0]
lea ecx, [ebp - 0x2074]
call fcn.00545180
test eax, eax
je 0x4744ba
push 0
push 1
push 0xffffffffffffffff
push 0
push str..exe
lea ecx, [ebp - 0x2074]
call fcn.005438b0
test eax, eax
je 0x474401
add eax, 3
lea ecx, [ebp - 0x2074]
push eax
call fcn.00543c40
lea ecx, [ebp - 0x2074]
call fcn.00544f70
mov edi, dword [0x5fd680]
push eax
call edi
test eax, eax
jne 0x4744ba
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x61e384
lea ecx, [ebp - 0x2074]
call fcn.005438b0
cmp eax, 2
jle 0x474448
add eax, 0xfffffffe
lea ecx, [ebp - 0x2074]
push eax
call fcn.00543b90
lea ecx, [ebp - 0x2074]
call fcn.00544f70
push eax
call edi
test eax, eax
jne 0x4744ba
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x61e29c
lea ecx, [ebp - 0x2074]
call fcn.005438b0
test eax, eax
je 0x474481
push eax
lea ecx, [ebp - 0x2074]
call fcn.00543b90
lea ecx, [ebp - 0x2074]
call fcn.00544f70
push eax
call edi
test eax, eax
jne 0x4744ba
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x61e0e4
lea ecx, [ebp - 0x2074]
call fcn.005438b0
test eax, eax
je 0x4744ba
push eax
lea ecx, [ebp - 0x2074]
call fcn.00543b90
push 0x5c
lea ecx, [ebp - 0x1fa4]
call fcn.00542ef0
mov eax, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x2130]
push 0
mov eax, dword [eax + 8]
push dword [eax + 0xa0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
call fcn.00544f70
push eax
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.005190e0
mov edi, eax
cmp edi, 0xffffffff
je 0x47480f
push 1
lea ecx, [ebp - 0x2154]
call fcn.00544f70
push eax
mov eax, dword [ebp - 0x6f44]
push edi
mov ecx, dword [eax + 8]
push dword [ecx + 0xa0]
mov ecx, dword [eax + 4]
call fcn.00517a40
lea ecx, [ebp - 0x2074]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
je 0x474575
push 0
push 0x10
push dword [ebp - 0x6f6c]
lea ecx, [ebp - 0x2074]
call fcn.00544f70
push eax
mov eax, dword [ebp - 0x6f44]
push edi
mov eax, dword [eax + 8]
push dword [eax + 0xa0]
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.005184d0
mov ecx, dword [ebp - 0x6f70]
add ecx, dword [ebp - 0x6f7c]
push 2
call fcn.00544f70
push eax
mov eax, dword [ebp - 0x6f44]
push edi
mov eax, dword [eax + 8]
push dword [eax + 0xa0]
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.00517a40
mov eax, dword [ebp - 0x6f44]
push edi
push edi
mov eax, dword [eax + 8]
push dword [eax + 0xa0]
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.005186b0
lea ecx, [ebp - 0x2114]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
mov eax, dword [ebp - 0x6f44]
push edi
mov eax, dword [eax + 8]
push dword [eax + 0xa0]
call fcn.00471330
test eax, eax
jne 0x47460d
cmp byte [ebp - 0x6f61], 1
mov ecx, 2
movzx eax, byte [ebp - 0x6f61]
cmove eax, ecx
mov byte [ebp - 0x6f61], al
push edi
lea ecx, [ebp - 0x22f0]
call fcn.005440e0
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x23c8]
call fcn.00544f70
push eax
push 0x65e75c
lea ecx, [ebp - 0x22f0]
call fcn.00544f70
mov edi, dword [0x5fd508]
push eax
call edi
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00544f70
push eax
push 0x629170
lea ecx, [ebp - 0x22f0]
call fcn.00544f70
push eax
call edi
lea ecx, [ebp - 0x2114]
call fcn.00545180
test eax, eax
je 0x4746d3
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2114]
call fcn.00544f70
push eax
push 0x65f364
lea ecx, [ebp - 0x22f0]
call fcn.00544f70
push eax
call edi
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
push 0x622df8
lea ecx, [ebp - 0x2114]
call fcn.00544f70
push eax
push 0x664efc
call edi
lea ecx, [ebp - 0x22cc]
call fcn.00545180
test eax, eax
je 0x47470d
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x22cc]
call fcn.00544f70
push eax
push 0x65f340
lea ecx, [ebp - 0x22f0]
call fcn.00544f70
push eax
call edi
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f70]
add ecx, dword [ebp - 0x6f7c]
push eax
call fcn.00544f70
push eax
push 0x65e778
lea ecx, [ebp - 0x22f0]
call fcn.00544f70
push eax
call edi
cmp dword [ebp - 0x2354], 0
je 0x47476c
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x22f0]
push 0x65f374
call fcn.00544f70
push eax
call edi
mov eax, dword [ebp - 0x6f44]
mov ecx, 0x664f3c
mov edi, dword [ebp - 0x6f44]
push 0
push 0
inc dword [eax + 0x24]
xor eax, eax
cmp byte [ebp - 0x6f61], 1
sete al
add dword [edi + 0x28], eax
mov eax, 0x664f28
cmp byte [ebp - 0x6f61], 1
cmovne eax, ecx
mov ecx, dword [ebp - 0x6f70]
add ecx, dword [ebp - 0x6f7c]
push eax
push 0x664574
call fcn.00544f70
push eax
push 0x664f54
lea ecx, [ebp - 0x1fa4]
call fcn.00544f70
push eax
push 0x664f78
lea ecx, [ebp - 0x23c8]
call fcn.00544f70
push eax
push 0x664f9c
lea ecx, [ebp - 0x2130]
call fcn.00544f70
push eax
push 0x664fc4
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
mov edi, dword [ebp - 0x6f4c]
mov ecx, dword [ebp - 0x6f44]
inc esi
call fcn.0046c7f0
test al, al
je 0x4737b0
mov dword [ebp - 0x6f6c], esi
inc edi
mov dword [ebp - 0x6f4c], edi
cmp edi, dword [ebp - 0x6f74]
jb 0x4736e3
mov ecx, dword [ebp - 0x6f44]
call fcn.0046c7f0
test al, al
je 0x474903
lea ecx, [ebp - 0x289c]
call fcn.00545210
lea ecx, [ebp - 0x2784]
call fcn.00545210
lea ecx, [ebp - 0x2890]
call fcn.00545210
lea ecx, [ebp - 0x22f0]
call fcn.00545210
lea ecx, [ebp - 0x2114]
call fcn.00545210
lea ecx, [ebp - 0x2154]
call fcn.00545210
lea ecx, [ebp - 0x22cc]
call fcn.00545210
lea ecx, [ebp - 0x23bc]
call fcn.00545210
lea ecx, [ebp - 0x2074]
call fcn.00545210
lea ecx, [ebp - 0x1fa4]
call fcn.00545210
lea ecx, [ebp - 0x2130]
call fcn.00545210
lea ecx, [ebp - 0x23c8]
call fcn.00545210
lea ecx, [ebp - 0x1ff4]
call fcn.0053f820
lea ecx, [ebp - 0x2224]
call fcn.0053f820
lea ecx, [ebp - 0x6d1c]
mov byte [ebp - 4], 0x2b
call fcn.00403610
jmp 0x475dd4
mov eax, dword [ebp - 0x6f44]
cmp dword [eax + 0x208], 0
je 0x474931
mov ecx, dword [ebp - 0x6f44]
add eax, 0x208
push 0
push eax
lea ecx, [ecx + 0x220]
call fcn.00509610
mov eax, dword [ebp - 0x6f44]
mov ecx, eax
call fcn.0046c7f0
test al, al
jne 0x474855
push 0xc
lea ecx, [ebp - 0x29b0]
call fcn.00401d20
lea ecx, [ebp - 0x29b0]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x26ec]
mov byte [ebp - 4], 0x3b
call fcn.00401d20
lea ecx, [ebp - 0x26ec]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x26f8]
mov byte [ebp - 4], 0x3c
call fcn.00401d20
lea ecx, [ebp - 0x26f8]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x27bc]
mov byte [ebp - 4], 0x3d
call fcn.00401d20
lea ecx, [ebp - 0x27bc]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x279c]
mov byte [ebp - 4], 0x3e
call fcn.00401d20
lea ecx, [ebp - 0x279c]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2754]
mov byte [ebp - 4], 0x3f
call fcn.00401d20
lea ecx, [ebp - 0x2754]
call fcn.005453c0
mov eax, dword [ebp - 0x6f44]
mov edi, 1
mov byte [ebp - 4], 0x40
lea ecx, [eax + 0x30c]
mov dword [ebp - 0x6f54], edi
mov dword [ebp - 0x6f94], ecx
cmp dword [ecx], edi
jbe 0x47573f
mov esi, dword [ebp - 0x6f94]
lea ecx, [eax + 0x314]
mov dword [ebp - 0x6f7c], ecx
nop
mov ecx, eax
call fcn.0046c7f0
test al, al
jne 0x475733
lea eax, [edi + edi*4]
xor edx, edx
add eax, eax
div dword [esi]
add eax, 0x10
movd xmm0, eax
shr eax, 0x1f
cvtdq2pd xmm0, xmm0
addsd xmm0, qword [eax*8 + 0x6e3620]
cvttsd2si eax, xmm0
push eax
mov eax, dword [ebp - 0x6f44]
mov eax, dword [eax + 8]
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.00516e60
mov ecx, dword [ebp - 0x6f44]
push edi
call fcn.0046ff10
test al, al
je 0x47571e
mov ecx, dword [ebp - 0x6f44]
push edi
lea ecx, [ecx + 0x2e8]
call fcn.00403920
push eax
lea ecx, [ebp - 0x23c8]
call fcn.005452c0
push 0
push 0x20019
lea ecx, [ebp - 0x23c8]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1ff4]
call fcn.0053f870
test al, al
je 0x47571e
lea eax, [ebp - 0x2130]
push eax
push 0x6287d4
lea ecx, [ebp - 0x1ff4]
call fcn.0053f580
test al, al
je 0x47571e
lea eax, [ebp - 0x1fa4]
push eax
push 0x664d34
lea ecx, [ebp - 0x1ff4]
call fcn.0053f580
lea eax, [ebp - 0x22cc]
push eax
push 0x654ae8
lea ecx, [ebp - 0x1ff4]
call fcn.0053f580
test al, al
jne 0x474b2a
lea ecx, [ebp - 0x1fa4]
call fcn.00545180
test eax, eax
je 0x47571e
lea eax, [ebp - 0x2154]
push eax
push 0x664d54
lea ecx, [ebp - 0x1ff4]
call fcn.0053f580
test al, al
je 0x474b54
lea ecx, [ebp - 0x2154]
call fcn.00545180
test eax, eax
jne 0x474b64
push 0x65f38c
lea ecx, [ebp - 0x2154]
call fcn.005452f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x630c34
lea ecx, [ebp - 0x2130]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x279c]
call fcn.005435c0
push 0
push 1
push 1
push 0
push str.msiexec
lea ecx, [ebp - 0x22cc]
call fcn.005438b0
test eax, eax
setne byte [ebp - 0x6f40]
test eax, eax
jne 0x474bf2
lea eax, [ebp - 0x6ccc]
push eax
push 0x664ff0
lea ecx, [ebp - 0x1ff4]
call fcn.0053f4f0
test al, al
je 0x474bf2
mov eax, dword [ebp - 0x6f40]
mov ecx, 1
cmp dword [ebp - 0x6ccc], 1
movzx eax, al
cmove eax, ecx
mov dword [ebp - 0x6f40], eax
lea eax, [ebp - 0x2130]
push eax
lea ecx, [ebp - 0x2114]
call fcn.005452c0
lea ecx, [ebp - 0x1fa4]
call fcn.00544f70
mov ecx, eax
call fcn.0052fcf0
test al, al
je 0x474c45
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.005449e0
push 0
push 0
push 0x61d050
push 0x61e29c
lea ecx, [ebp - 0x1fa4]
call fcn.005430c0
jmp 0x47526d
cmp byte [ebp - 0x6f40], 0
je 0x474d07
lea eax, [ebp - 0x6ccc]
mov dword [ebp - 0x6ccc], 0x400
push eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544760
push eax
push 0x664d34
push dword [ebp - 0x6cb4]
call dword [0x5fda9c]
push 0
push 1
push 1
push 0
push 0x61e384
lea ecx, [ebp - 0x1fa4]
call fcn.005438b0
test eax, eax
jne 0x474d07
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x664dfc
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x23bc]
push 0x664e28
push dword [ebp - 0x6f8c]
call fcn.00544fe0
push 0
push 0x20019
lea ecx, [ebp - 0x23bc]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x474d07
lea eax, [ebp - 0x1fa4]
push eax
push 0x664d34
lea ecx, [ebp - 0x1f74]
call fcn.0053f580
lea ecx, [ebp - 0x1fa4]
call fcn.00545180
cmp eax, 0xa
jle 0x474d24
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.005449e0
push 0
push 1
push 1
push 0
push 0x61e384
lea ecx, [ebp - 0x1fa4]
call fcn.005438b0
test eax, eax
jne 0x47526d
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x61d1a0
lea ecx, [ebp - 0x2114]
call fcn.00544f70
push eax
push 0x61d048
lea ecx, [ebp - 0x26d4]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00544fe0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00544f70
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544760
mov edx, 0x400
mov ecx, eax
call fcn.0052ff00
test al, al
jne 0x47526d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d1a0
lea ecx, [ebp - 0x2114]
call fcn.00544f70
push eax
push 0x61d048
lea ecx, [ebp - 0x26e0]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00544fe0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00544f70
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544760
mov edx, 0x400
mov ecx, eax
call fcn.0052ff00
test al, al
jne 0x47526d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d1a0
lea ecx, [ebp - 0x2114]
call fcn.00544f70
push eax
push 0x61d048
lea ecx, [ebp - 0x271c]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00544fe0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00544f70
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544760
mov edx, 0x400
mov ecx, eax
call fcn.0052ff00
test al, al
jne 0x47526d
lea ecx, [ebp - 0x2154]
call fcn.00545180
cmp eax, 4
jle 0x474f3a
push 0
push 1
push 1
push 0
push 0x664ecc
lea ecx, [ebp - 0x2154]
call fcn.005438b0
cmp eax, 1
je 0x474f3a
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d1a0
lea ecx, [ebp - 0x2114]
call fcn.00544f70
push eax
push 0x61d048
lea ecx, [ebp - 0x2154]
call fcn.00544f70
push eax
push 0x61d048
lea ecx, [ebp - 0x271c]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00544fe0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00544f70
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544760
mov edx, 0x400
mov ecx, eax
call fcn.0052ff00
test al, al
jne 0x47526d
push 1
push 0x6227b4
push dword [ebp - 0x6d10]
lea ecx, [ebp - 0x23c8]
push 1
call fcn.00544f70
push eax
lea ecx, [ebp - 0x27bc]
call fcn.00545040
mov ecx, eax
call fcn.00542360
test eax, eax
je 0x4751dc
lea ecx, [ebp - 0x27bc]
call fcn.00544f70
lea edx, [ebp - 0x26ec]
mov ecx, eax
call fcn.004f9cc0
test al, al
je 0x4751dc
lea ecx, [ebp - 0x27bc]
call fcn.00544f70
lea edx, [ebp - 0x26f8]
mov ecx, eax
call fcn.004fa4d0
test al, al
je 0x4751dc
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d1a0
lea ecx, [ebp - 0x2114]
call fcn.00544f70
push eax
push 0x61d048
lea ecx, [ebp - 0x2220]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x26f8]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00544fe0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00544f70
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544760
mov edx, 0x400
mov ecx, eax
call fcn.0052ff00
test al, al
jne 0x4751ec
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d1a0
lea ecx, [ebp - 0x2114]
call fcn.00544f70
push eax
push 0x61d048
lea ecx, [ebp - 0x2184]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x26f8]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00544fe0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00544f70
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544760
mov edx, 0x400
mov ecx, eax
call fcn.0052ff00
test al, al
jne 0x4751ec
lea ecx, [ebp - 0x2154]
call fcn.00545180
cmp eax, 4
jle 0x4751ec
push 0
push 1
push 1
push 0
push 0x664ecc
lea ecx, [ebp - 0x2154]
call fcn.005438b0
cmp eax, 1
je 0x4751ec
push 0
push 0
push 0
push 0
push 0
push 0x61d1a0
lea ecx, [ebp - 0x2114]
call fcn.00544f70
push eax
push 0x61d048
lea ecx, [ebp - 0x2154]
call fcn.00544f70
push eax
push 0x61d048
lea ecx, [ebp - 0x2220]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x26f8]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00544fe0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00544f70
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544760
mov edx, 0x400
mov ecx, eax
call fcn.0052ff00
test al, al
jne 0x4751ec
push 0
push 0
push 0
push 0
push 0
push 0x61d1a0
lea ecx, [ebp - 0x2114]
call fcn.00544f70
push eax
push 0x61d048
lea ecx, [ebp - 0x2154]
call fcn.00544f70
push eax
push 0x61d048
lea ecx, [ebp - 0x2184]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x26f8]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00544fe0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00544f70
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00544760
mov edx, 0x400
mov ecx, eax
call fcn.0052ff00
jmp 0x4751ec
push 0x65f3a0
lea ecx, [ebp - 0x26ec]
call fcn.005452f0
lea ecx, [ebp - 0x22cc]
call fcn.00545180
cmp eax, 0xa
jle 0x47526d
lea eax, [ebp - 0x22cc]
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.005452c0
push 0
push 0
push 0x61d050
push 0x61e29c
lea ecx, [ebp - 0x1fa4]
call fcn.005430c0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.005449e0
push 0
push 1
push 0xffffffffffffffff
push 1
push 0x61e384
lea ecx, [ebp - 0x1fa4]
call fcn.005438b0
cmp eax, 2
jle 0x475260
add eax, 0xfffffffe
lea ecx, [ebp - 0x1fa4]
push eax
call fcn.00543b90
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00544c90
lea ecx, [ebp - 0x1fa4]
call fcn.00544f70
mov ecx, eax
call fcn.00535cb0
test al, al
je 0x47528e
lea ecx, [ebp - 0x1fa4]
call fcn.005451e0
lea eax, [ebp - 0x2074]
xor edi, edi
push eax
push 0x648f9c
lea ecx, [ebp - 0x1ff4]
call fcn.0053f580
test al, al
je 0x475795
push edi
lea ecx, [ebp - 0x2074]
call fcn.00544f70
push eax
push 0x104
lea ecx, [ebp - 0x2074]
call fcn.00544760
lea ecx, [ebp - 0x2074]
call fcn.00544f70
push eax
call dword [0x5fd69c]
cmp byte [ebp - 0x6f40], 0
mov edi, eax
jne 0x47543d
lea ecx, [ebp - 0x2074]
call fcn.00545180
test eax, eax
jne 0x47543d
push eax
lea ecx, [ebp - 0x22cc]
call fcn.00544f70
push eax
push 0x800
lea ecx, [ebp - 0x2074]
call fcn.00544760
push 0x800
lea ecx, [ebp - 0x2074]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x22cc]
call fcn.00544f70
push eax
call dword [0x5fd4f0]
lea ecx, [ebp - 0x2074]
call fcn.00545180
test eax, eax
je 0x47543d
push 0
push 1
push 0xffffffffffffffff
push 0
push str..exe
lea ecx, [ebp - 0x2074]
call fcn.005438b0
test eax, eax
je 0x47537e
add eax, 3
lea ecx, [ebp - 0x2074]
push eax
call fcn.00543c40
lea ecx, [ebp - 0x2074]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
jne 0x47543d
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x61e384
lea ecx, [ebp - 0x2074]
call fcn.005438b0
cmp eax, 2
jle 0x4753c3
add eax, 0xfffffffe
lea ecx, [ebp - 0x2074]
push eax
call fcn.00543b90
lea ecx, [ebp - 0x2074]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
jne 0x47543d
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x61e29c
lea ecx, [ebp - 0x2074]
call fcn.005438b0
test eax, eax
je 0x475400
push eax
lea ecx, [ebp - 0x2074]
call fcn.00543b90
lea ecx, [ebp - 0x2074]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
jne 0x47543d
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x61e0e4
lea ecx, [ebp - 0x2074]
call fcn.005438b0
test eax, eax
je 0x47543d
push eax
lea ecx, [ebp - 0x2074]
call fcn.00543b90
push 0x5c
lea ecx, [ebp - 0x1fa4]
call fcn.00542ef0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2114]
mov byte [ebp - 0x6f4c], 1
call fcn.00544f70
mov ecx, dword [ebp - 0x6f7c]
push eax
push 0x664d68
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00544fe0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
lea eax, [ebp - 0x6ccc]
push eax
push 0x665014
lea ecx, [ebp - 0x1f74]
call fcn.0053f4f0
test al, al
je 0x4754e2
mov eax, dword [ebp - 0x6f4c]
mov ecx, 2
cmp dword [ebp - 0x6ccc], 0
movzx eax, al
cmove eax, ecx
mov dword [ebp - 0x6f4c], eax
push edi
lea ecx, [ebp - 0x2074]
call fcn.00544f70
push eax
xor eax, eax
lea ecx, [ebp - 0x26ec]
cmp byte [ebp - 0x6f4c], 1
push 0
sete al
push eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2154]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2130]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
mov eax, dword [ebp - 0x6f44]
push 0xffffffffffffffff
push 0xffffffffffffffff
mov eax, dword [eax + 8]
push dword [eax + 0xa0]
call fcn.00499eb0
push eax
lea ecx, [ebp - 0x22f0]
call fcn.005440e0
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x23c8]
call fcn.00544f70
push eax
push 0x65e75c
lea ecx, [ebp - 0x22f0]
call fcn.00544f70
mov edi, dword [0x5fd508]
push eax
call edi
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00544f70
push eax
push 0x629170
lea ecx, [ebp - 0x22f0]
call fcn.00544f70
push eax
call edi
lea ecx, [ebp - 0x2114]
call fcn.00545180
test eax, eax
je 0x475606
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2114]
call fcn.00544f70
push eax
push 0x65f364
lea ecx, [ebp - 0x22f0]
call fcn.00544f70
push eax
call edi
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
push 0x622df8
lea ecx, [ebp - 0x2114]
call fcn.00544f70
push eax
push 0x664efc
call edi
lea ecx, [ebp - 0x22cc]
call fcn.00545180
test eax, eax
je 0x475640
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x22cc]
call fcn.00544f70
push eax
push 0x65f340
lea ecx, [ebp - 0x22f0]
call fcn.00544f70
push eax
call edi
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x26ec]
call fcn.00544f70
push eax
push 0x65e778
lea ecx, [ebp - 0x22f0]
call fcn.00544f70
push eax
call edi
cmp byte [ebp - 0x6f40], 0
je 0x475699
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x22f0]
push 0x65f374
call fcn.00544f70
push eax
call edi
cmp byte [ebp - 0x6f4c], 1
mov ecx, 0x664f3c
push 0
push 0
mov eax, 0x664f28
cmovne eax, ecx
lea ecx, [ebp - 0x26ec]
push eax
push 0x664574
call fcn.00544f70
push eax
push 0x664f54
lea ecx, [ebp - 0x1fa4]
call fcn.00544f70
push eax
push 0x664f78
lea ecx, [ebp - 0x23c8]
call fcn.00544f70
push eax
push 0x664f9c
lea ecx, [ebp - 0x2130]
call fcn.00544f70
push eax
push 0x664fc4
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
mov edi, dword [ebp - 0x6f54]
mov eax, dword [ebp - 0x6f44]
inc edi
mov dword [ebp - 0x6f54], edi
cmp edi, dword [esi]
jb 0x474a20
mov eax, dword [ebp - 0x6f44]
mov esi, dword [ebp - 0x6f6c]
mov ecx, eax
call fcn.0046c7f0
test al, al
je 0x4757f4
lea ecx, [ebp - 0x2754]
call fcn.00545210
lea ecx, [ebp - 0x279c]
call fcn.00545210
lea ecx, [ebp - 0x27bc]
call fcn.00545210
lea ecx, [ebp - 0x26f8]
call fcn.00545210
lea ecx, [ebp - 0x26ec]
call fcn.00545210
lea ecx, [ebp - 0x29b0]
call fcn.00545210
jmp 0x474855
cmp byte [ebp - 0x6f40], 0
je 0x4752ed
lea eax, [ebp - 0x6d2c]
mov dword [ebp - 0x6d2c], 0x400
push eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0x2074]
call fcn.00544760
push eax
push 0x664ee4
push dword [ebp - 0x6cb4]
call dword [0x5fda9c]
push dword [ebp - 0x6d2c]
lea ecx, [ebp - 0x2074]
call fcn.00545220
xor ecx, ecx
mov word [eax], cx
jmp 0x47543d
lea ecx, [ebp - 0x279c]
call fcn.00545180
cmp eax, 6
jle 0x4758b1
push 0x2000
lea eax, [ebp - 0x6dbc]
mov dword [ebp - 0x6dbc], 0x1000
push eax
push 0
push 0
push 0x1000
lea ecx, [ebp - 0x2754]
call fcn.00544760
push eax
lea ecx, [ebp - 0x279c]
call fcn.00544f70
push eax
call dword [0x5fd66c]
test eax, eax
je 0x47585b
lea eax, [ebp - 0x279c]
push eax
lea ecx, [ebp - 0x2754]
call fcn.005452c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x665030
lea ecx, [ebp - 0x2754]
call fcn.00543350
push 0
push 0
push 0x624ffc
push 0x622030
push 6
lea ecx, [ebp - 0x2754]
call fcn.00544f70
xor edx, edx
mov ecx, eax
call fcn.00511770
push eax
lea ecx, [ebp - 0x2548]
call fcn.0050e3b0
mov eax, dword [ebp - 0x6f44]
push 0x1e
mov eax, dword [eax + 8]
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.00516e60
mov eax, dword [ebp - 0x6f44]
push 0
push 0x6650b0
mov eax, dword [eax + 8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.0051a1d0
push 0xc
lea ecx, [ebp - 0x2360]
call fcn.00401d20
lea ecx, [ebp - 0x2360]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x24e0]
mov byte [ebp - 4], 0x41
call fcn.00401d20
lea ecx, [ebp - 0x24e0]
call fcn.005453c0
mov ecx, dword [ebp - 0x6f44]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6650e4
lea ecx, [ecx + 0x314]
mov byte [ebp - 4], 0x42
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00544fe0
push 4
lea ecx, [ebp - 0x2368]
call fcn.00401d40
lea ecx, [ebp - 0x2368]
call fcn.0053f8e0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
mov byte [ebp - 4], 0x43
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x475da2
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f7c], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.0053f1c0
test al, al
je 0x475da2
mov eax, dword [ebp - 0x6f44]
lea ecx, [eax + 0x10c]
mov dword [ebp - 0x6f54], ecx
jmp 0x4759e6
mov eax, dword [ebp - 0x6f44]
mov ecx, eax
call fcn.0046c7f0
test al, al
jne 0x475da2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d184
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x24e0]
push 0x61d184
call fcn.00544fe0
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x24e0]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2904]
call fcn.005438b0
test eax, eax
jne 0x475d7a
mov ecx, dword [ebp - 0x6f44]
push eax
lea ecx, [ecx + 0x14c]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
push 0x627210
push dword [ebp - 0x6cb4]
call fcn.00470bd0
test al, al
jne 0x475d7a
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x24e0]
xor edi, edi
call fcn.005452f0
push 0x6650f4
lea ecx, [ebp - 0x24e0]
call fcn.00545260
test al, al
je 0x475abc
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push 0x61d1a0
lea ecx, [ebp - 0x24e0]
call fcn.005435c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24e0]
call fcn.00544f70
push eax
push 0x61d048
lea ecx, [ebp - 0x26d4]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2360]
call fcn.00544fe0
lea ecx, [ebp - 0x2360]
call fcn.00530040
test al, al
je 0x475b2e
push esi
push 0
lea eax, [ebp - 0x1fd4]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x2360]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00471430
mov edi, eax
cmp dword [ebp - 0x6fa8], 0
je 0x475bad
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24e0]
call fcn.00544f70
push eax
push 0x61d048
lea ecx, [ebp - 0x26e0]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2360]
call fcn.00544fe0
lea ecx, [ebp - 0x2360]
call fcn.00530040
test al, al
je 0x475bad
push esi
push 0
lea eax, [ebp - 0x1fd4]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x2360]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00471430
add edi, eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24e0]
call fcn.00544f70
push eax
push 0x61d048
lea ecx, [ebp - 0x271c]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2360]
call fcn.00544fe0
lea ecx, [ebp - 0x2360]
call fcn.00530040
test al, al
je 0x475c1f
push esi
push 0
lea eax, [ebp - 0x1fd4]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x2360]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00471430
add edi, eax
mov eax, dword [ebp - 0x6f44]
xor esi, esi
mov dword [ebp - 0x6f6c], esi
cmp dword [eax + 0x30], esi
jbe 0x475d54
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24e0]
call fcn.00544f70
push eax
push 0x61d048
lea ecx, [ebp - 0x2220]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push esi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2360]
call fcn.00544fe0
lea ecx, [ebp - 0x2360]
call fcn.00530040
test al, al
je 0x475cba
push esi
push 0
lea eax, [ebp - 0x1fd4]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x2360]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00471430
add edi, eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24e0]
call fcn.00544f70
push eax
push 0x61d048
lea ecx, [ebp - 0x2184]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push esi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2360]
call fcn.00544fe0
lea ecx, [ebp - 0x2360]
call fcn.00530040
test al, al
je 0x475d3e
push esi
push 0
lea eax, [ebp - 0x1fd4]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x2360]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00471430
add edi, eax
mov eax, dword [ebp - 0x6f44]
inc esi
cmp esi, dword [eax + 0x30]
jb 0x475c36
mov dword [ebp - 0x6f6c], esi
test edi, edi
jle 0x475d7a
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
push 0x622df8
push dword [ebp - 0x6cb4]
push 0x664efc
call dword [0x5fd508]
mov eax, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f7c], eax
call fcn.0053f1c0
test al, al
jne 0x4759e0
lea ecx, [ebp - 0x2368]
call fcn.0053f820
lea ecx, [ebp - 0x24e0]
call fcn.00545210
lea ecx, [ebp - 0x2360]
call fcn.00545210
jmp 0x47574e
mov eax, dword [ebp - 0x2368]
mov dword [ebp - 0x6f6c], eax
push 8
lea ecx, [ebp - 0x6dcc]
call fcn.00401f60
mov edi, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x6dcc]
mov eax, dword [edi + 0x30]
add eax, 2
push eax
call fcn.004036b0
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x2148]
mov esi, dword [ebp - 0x6dcc]
push 0xc
mov dword [ebp - 0x6f68], esi
call fcn.00401d20
lea ecx, [ebp - 0x2148]
call fcn.005453c0
mov ecx, edi
mov byte [ebp - 4], 0x45
call fcn.0046c7f0
test al, al
mov eax, edi
jne 0x4786b5
test dword [eax + 0x34], 0x400
jne 0x4786b5
push 0
push 0x665110
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x665140
push dword [eax + 0x38]
call fcn.0051a1d0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x23
push dword [eax + 0x34]
call fcn.00516e60
mov eax, edi
xor esi, esi
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x475ee0
mov edi, dword [ebp - 0x6f68]
add eax, 0x104
mov dword [ebp - 0x6f94], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x665170
push esi
mov ecx, eax
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
push str.HKU_
mov ecx, edi
call fcn.00544fe0
mov eax, dword [ebp - 0x6f44]
inc esi
add edi, 0xc
mov ecx, dword [eax + 0x30]
mov eax, dword [ebp - 0x6f94]
cmp esi, ecx
jb 0x475e96
mov esi, dword [ebp - 0x6f68]
lea eax, [ecx + ecx*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6651d0
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00544fe0
cmp dword [ebp - 0x6fa8], 0
mov edi, dword [ebp - 0x6f44]
je 0x475f4d
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x6651d0
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00544fe0
push 0xc
lea ecx, [ebp - 0x209c]
call fcn.00401d20
lea ecx, [ebp - 0x209c]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x23e0]
mov byte [ebp - 4], 0x46
call fcn.00401d20
lea ecx, [ebp - 0x23e0]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x27ec]
mov byte [ebp - 4], 0x47
call fcn.00401d20
lea ecx, [ebp - 0x27ec]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x21b4]
mov byte [ebp - 4], 0x48
call fcn.00401d20
lea ecx, [ebp - 0x21b4]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2314]
mov byte [ebp - 4], 0x49
call fcn.00401d20
lea ecx, [ebp - 0x2314]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x255c]
mov byte [ebp - 4], 0x4a
call fcn.00401d20
lea ecx, [ebp - 0x255c]
call fcn.005453c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x665230
push 0x61d048
lea ecx, [edi + 0x140]
mov byte [ebp - 4], 0x4b
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00544fe0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa4]
call fcn.00518e70
push 0
push 0x665250
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
xor esi, esi
mov dword [ebp - 0x6f54], esi
cmp dword [ebp - 0x6f74], esi
jbe 0x4763ee
mov eax, dword [ebp - 0x6f44]
mov edi, dword [ebp - 0x6f70]
mov dword [ebp - 0x6f40], edi
lea ecx, [eax + 0x10c]
mov dword [ebp - 0x6f94], ecx
lea ecx, [eax + 0x17c]
mov dword [ebp - 0x6f48], ecx
mov ecx, dword [ebp - 0x6f68]
sub ecx, edi
mov dword [ebp - 0x6f4c], ecx
jmp 0x4760a6
mov eax, dword [ebp - 0x6f44]
mov ecx, eax
call fcn.0046c7f0
test al, al
jne 0x4763ee
mov eax, dword [ebp - 0x6f44]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
cmp esi, dword [eax + 0x30]
jae 0x4760f0
lea ecx, [ebp - 0x26c8]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f94]
push eax
push esi
call fcn.004035f0
mov ecx, eax
jmp 0x4760fb
push 0x62745c
lea ecx, [ebp - 0x25d8]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x23e0]
call fcn.00544fe0
mov eax, dword [ebp - 0x6f4c]
add eax, edi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f7c], eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x4763d2
lea eax, [ebp - 0x6cb4]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f6c], esi
call fcn.0053f120
test al, al
je 0x4763cc
nop
mov ecx, dword [ebp - 0x6f44]
call fcn.0046c7f0
test al, al
jne 0x4763c6
mov eax, dword [ebp - 0x6cb4]
cmp word [eax], 0
je 0x4763aa
mov ecx, dword [ebp - 0x6f44]
push 0
lea ecx, [ecx + 0x14c]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
push 0x65c70c
push dword [ebp - 0x6cb4]
call fcn.00470bd0
test al, al
jne 0x4763aa
lea eax, [ebp - 0x209c]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f74]
call fcn.0053f580
test al, al
je 0x4763aa
mov edx, dword [ebp - 0x6f48]
lea ecx, [ebp - 0x209c]
push 3
xor edi, edi
call fcn.005373a0
test al, al
je 0x47626f
push edi
push 1
push 1
push edi
lea ecx, [ebp - 0x23e0]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x209c]
call fcn.005438b0
mov ecx, dword [ebp - 0x6f7c]
mov edi, eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
push 0x624a08
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2148]
call fcn.00544fe0
push 0
lea ecx, [ebp - 0x2148]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
lea eax, [ebp - 0x209c]
push eax
call fcn.00470120
test al, al
mov eax, 1
cmovne edi, eax
push 0
lea ecx, [ebp - 0x209c]
call fcn.00544f70
push eax
push 0
push edi
lea ecx, [ebp - 0x209c]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
push dword [ebp - 0x6cb4]
mov eax, dword [ebp - 0x6f44]
push 0xffffffffffffffff
push 0xb
mov eax, dword [eax + 8]
push dword [eax + 0xa4]
call fcn.00499eb0
mov dword [ebp - 0x6f6c], eax
cmp eax, 0xffffffff
je 0x4763a4
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x209c]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f7c]
push eax
call fcn.00544f70
push eax
push 0xb
push dword [ebp - 0x6f6c]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00499cc0
lea eax, [ebp - 0x209c]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f74]
call fcn.0053f580
push 0
push 0
push 0
test edi, edi
mov ecx, 0x66455c
push 0x621864
mov eax, 0x6291b8
cmove eax, ecx
lea ecx, [ebp - 0x209c]
push eax
push 0x664574
call fcn.00544f70
mov edi, dword [ebp - 0x6f40]
mov ecx, edi
push eax
push 0x665294
call fcn.00544f70
push eax
push 0x6645d4
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f80]
push 0x6652b0
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
jmp 0x4763aa
mov edi, dword [ebp - 0x6f40]
lea eax, [ebp - 0x6cb4]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0053f120
test al, al
jne 0x476160
mov dword [ebp - 0x6f6c], esi
mov esi, dword [ebp - 0x6f54]
inc esi
add edi, 0xc
mov dword [ebp - 0x6f54], esi
mov dword [ebp - 0x6f40], edi
cmp esi, dword [ebp - 0x6f74]
jb 0x4760a0
mov ecx, dword [ebp - 0x6f44]
call fcn.0046c7f0
test al, al
jne 0x478669
mov eax, dword [ebp - 0x6f44]
xor esi, esi
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x47646d
mov edi, dword [ebp - 0x6f68]
add eax, 0x10c
mov dword [ebp - 0x6f48], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x28a8]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f48]
push eax
push esi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00544fe0
mov eax, dword [ebp - 0x6f44]
inc esi
add edi, 0xc
mov ecx, dword [eax + 0x30]
cmp esi, ecx
jb 0x476421
mov edi, dword [ebp - 0x6f68]
lea eax, [ebp - 0x2934]
push eax
lea eax, [ecx + ecx*2]
lea ecx, [edi + eax*4]
call fcn.005452c0
push 0
push 0x6652d0
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
push 0x4c
lea ecx, [ebp - 0x2b70]
call fcn.00401e30
lea ecx, [ebp - 0x2b70]
call fcn.00538040
mov eax, dword [ebp - 0x6f44]
mov esi, dword [ebp - 0x6f70]
sub edi, esi
mov byte [ebp - 4], 0x4c
mov dword [ebp - 0x6f40], 0
lea ecx, [eax + 0x10c]
mov dword [ebp - 0x6f4c], esi
mov dword [ebp - 0x6f48], ecx
lea ecx, [eax + 0x17c]
mov dword [ebp - 0x6f94], ecx
mov dword [ebp - 0x6f7c], edi
nop
mov ecx, eax
call fcn.0046c7f0
test al, al
jne 0x47699b
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
add edi, esi
push 0
push 0x63a57c
mov ecx, edi
mov dword [ebp - 0x6f54], edi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x209c]
call fcn.00544fe0
push 0x260
lea ecx, [ebp - 0x3778]
call fcn.00401d70
push 3
lea ecx, [ebp - 0x209c]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x3778]
call fcn.004016d0
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov byte [ebp - 4], 0x4d
push 0
push 0
cmp ecx, dword [eax + 0x30]
jae 0x4765a6
lea ecx, [ebp - 0x26c8]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f48]
push eax
push dword [ebp - 0x6f40]
call fcn.004035f0
mov ecx, eax
jmp 0x4765b1
push 0x62745c
lea ecx, [ebp - 0x25d8]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x23e0]
call fcn.00544fe0
lea ecx, [ebp - 0x3778]
call fcn.00401810
test al, al
je 0x47695f
mov ecx, dword [ebp - 0x6f44]
call fcn.0046c7f0
test al, al
jne 0x47695f
push 1
lea ecx, [ebp - 0x3778]
call fcn.00401870
push eax
lea ecx, [ebp - 0x21b4]
call fcn.005452f0
push 0x642ee0
lea ecx, [ebp - 0x21b4]
call fcn.005452a0
test al, al
jne 0x47694c
mov ecx, dword [ebp - 0x6f44]
push 0
lea ecx, [ecx + 0x14c]
call fcn.00544f70
push eax
push 0x65c744
lea ecx, [ebp - 0x21b4]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00470bd0
test al, al
jne 0x47694c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x3778]
call fcn.00401870
push eax
push 0x61d048
mov ecx, edi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x255c]
call fcn.00544fe0
lea eax, [ebp - 0x255c]
push eax
lea ecx, [ebp - 0x2314]
call fcn.005452c0
push 0
push 0
lea ecx, [ebp - 0x3778]
call fcn.00401880
mov edx, 0x664540
mov ecx, eax
call fcn.00541930
test eax, eax
jne 0x476780
push eax
lea ecx, [ebp - 0x255c]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2b70]
call fcn.00537f00
test al, al
je 0x476780
lea ecx, [ebp - 0x2b70]
call fcn.00537e80
push eax
lea ecx, [ebp - 0x2314]
call fcn.005452f0
lea ecx, [ebp - 0x2b70]
call fcn.00537e20
mov ecx, eax
call fcn.00541aa0
test eax, eax
je 0x47673b
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2b70]
call fcn.00537e20
push eax
push 0x61e0e4
lea ecx, [ebp - 0x2314]
call fcn.005435c0
push 3
push 1
lea ecx, [ebp - 0x2314]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x209c]
call fcn.00545040
mov edx, dword [ebp - 0x6f94]
mov ecx, eax
call fcn.005373a0
test al, al
jne 0x476792
lea ecx, [ebp - 0x2b70]
call fcn.00537e80
push eax
lea ecx, [ebp - 0x209c]
call fcn.005452f0
jmp 0x476792
lea eax, [ebp - 0x255c]
push eax
lea ecx, [ebp - 0x209c]
call fcn.005452c0
push 0
push 0
push 0x61d050
push 0x61e29c
lea ecx, [ebp - 0x209c]
call fcn.005430c0
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x23e0]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x209c]
call fcn.005438b0
push 0
lea ecx, [ebp - 0x255c]
mov esi, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
lea eax, [ebp - 0x209c]
push eax
call fcn.00470120
test al, al
lea ecx, [ebp - 0x209c]
mov eax, 1
push 0
cmovne esi, eax
call fcn.00544f70
push eax
push 0
push esi
lea ecx, [ebp - 0x209c]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f4c]
push eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x21b4]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
mov eax, dword [ebp - 0x6f44]
push 0xffffffffffffffff
push 0xc
mov eax, dword [eax + 8]
push dword [eax + 0xa4]
call fcn.00499eb0
mov edi, eax
cmp edi, 0xffffffff
je 0x476940
push 0
push 0
push 0
test esi, esi
mov eax, 0x66455c
push 0x621864
mov ecx, 0x6291b8
cmove ecx, eax
push ecx
push 0x664574
lea ecx, [ebp - 0x209c]
call fcn.00544f70
mov esi, dword [ebp - 0x6f4c]
mov ecx, esi
push eax
push 0x665308
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x21b4]
call fcn.00544f70
push eax
push 0x6652b0
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x3778]
call fcn.00401870
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x61d048
call fcn.00544f70
push eax
lea ecx, [ebp - 0x209c]
call fcn.00544fe0
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x209c]
call fcn.00544f70
push eax
push 0
push 0xc
push edi
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00499cc0
jmp 0x476946
mov esi, dword [ebp - 0x6f4c]
mov edi, dword [ebp - 0x6f54]
lea ecx, [ebp - 0x3778]
call fcn.004017d0
test al, al
jne 0x4765d5
lea ecx, [ebp - 0x3778]
mov byte [ebp - 4], 0x4c
call fcn.00401720
mov edi, dword [ebp - 0x6f40]
add esi, 0xc
mov eax, dword [ebp - 0x6f44]
inc edi
mov dword [ebp - 0x6f40], edi
mov dword [ebp - 0x6f4c], esi
cmp edi, dword [eax + 0x30]
mov edi, dword [ebp - 0x6f7c]
jbe 0x4764f0
jmp 0x4769a1
mov eax, dword [ebp - 0x6f44]
mov ecx, eax
call fcn.0046c7f0
test al, al
jne 0x47865e
push 0
push 0x665320
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
push 0xc
lea ecx, [ebp - 0x2430]
call fcn.00401d20
lea ecx, [ebp - 0x2430]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2198]
mov byte [ebp - 4], 0x4e
call fcn.00401d20
lea ecx, [ebp - 0x2198]
call fcn.005453c0
push 4
lea ecx, [ebp - 0x6cd8]
mov byte [ebp - 4], 0x4f
call fcn.00401d40
lea ecx, [ebp - 0x6cd8]
call fcn.00401990
push 4
lea ecx, [ebp - 0x6cd4]
mov byte [ebp - 4], 0x50
call fcn.00401d40
lea ecx, [ebp - 0x6cd4]
call fcn.00401990
lea eax, [ebp - 0x6cd4]
mov byte [ebp - 4], 0x51
mov esi, dword [0x5fdad4]
push eax
push 0x617720
push 1
push 0
push 0x617730
call esi
test eax, eax
js 0x477263
lea ecx, [ebp - 0x70a8]
call fcn.00401c80
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x7058]
movups xmmword [ebp - 0x6fa0], xmm0
call fcn.00401c80
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x7088]
movups xmmword [ebp - 0x6f60], xmm0
call fcn.00401c80
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x70b8]
movups xmmword [ebp - 0x6f88], xmm0
call fcn.00401c80
mov edi, eax
mov byte [ebp - 4], 0x55
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x6fa0]
mov ecx, dword [ebp - 0x6cd4]
mov edx, esp
sub esp, 0x10
mov eax, esp
sub esp, 0x10
mov esi, dword [ecx]
movups xmmword [edx], xmm0
movups xmm0, xmmword [ebp - 0x6f60]
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x6f88]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [edi]
push ecx
movups xmmword [eax], xmm0
mov eax, dword [esi + 0x28]
call eax
shr eax, 0x1f
lea ecx, [ebp - 0x70b8]
mov dword [ebp - 0x6f48], eax
call fcn.00401d10
lea ecx, [ebp - 0x7088]
call fcn.00401d10
lea ecx, [ebp - 0x7058]
call fcn.00401d10
lea ecx, [ebp - 0x70a8]
mov byte [ebp - 4], 0x51
call fcn.00401d10
cmp byte [ebp - 0x6f48], 0
jne 0x477773
push 4
lea ecx, [ebp - 0x6cdc]
call fcn.00401d40
lea ecx, [ebp - 0x6cdc]
call fcn.00401990
push 0x61d048
lea ecx, [ebp - 0x6ff4]
mov byte [ebp - 4], 0x56
call fcn.00401a70
mov byte [ebp - 4], 0x57
mov ecx, dword [ebp - 0x6cd4]
mov esi, dword [ecx]
lea ecx, [ebp - 0x6cdc]
push ecx
mov ecx, eax
call fcn.00401b30
push eax
push dword [ebp - 0x6cd4]
mov eax, dword [esi + 0x1c]
call eax
shr eax, 0x1f
lea ecx, [ebp - 0x6ff4]
mov dword [ebp - 0x6f48], eax
mov byte [ebp - 4], 0x56
call fcn.00401b20
cmp byte [ebp - 0x6f48], 0
je 0x476bba
lea ecx, [ebp - 0x6cdc]
mov byte [ebp - 4], 0x51
call fcn.00402c60
jmp 0x477773
push 4
lea ecx, [ebp - 0x6cf8]
call fcn.00401d40
lea ecx, [ebp - 0x6cf8]
call fcn.00401990
mov byte [ebp - 4], 0x58
lea edx, [ebp - 0x6cf8]
mov eax, dword [ebp - 0x6cdc]
push edx
push 1
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x38]
call eax
test eax, eax
jns 0x476c10
lea ecx, [ebp - 0x6cf8]
call fcn.00402c60
lea ecx, [ebp - 0x6cdc]
mov byte [ebp - 4], 0x51
call fcn.00402c60
jmp 0x477773
mov eax, dword [ebp - 0x6cf8]
lea edx, [ebp - 0x256c]
mov dword [ebp - 0x256c], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
mov eax, dword [ebp - 0x256c]
test eax, eax
je 0x477244
mov esi, 1
mov dword [ebp - 0x6f54], esi
cmp eax, esi
jl 0x477244
mov eax, dword [ebp - 0x6f44]
mov edi, dword [0x5fd57c]
lea ecx, [eax + 0x17c]
mov dword [ebp - 0x6f94], ecx
jmp 0x476c76
mov eax, dword [ebp - 0x6f44]
mov ecx, eax
call fcn.0046c7f0
test al, al
jne 0x477244
push 4
lea ecx, [ebp - 0x6cbc]
call fcn.00401d40
lea ecx, [ebp - 0x6cbc]
call fcn.00401990
push 3
push esi
lea ecx, [ebp - 0x7068]
mov byte [ebp - 4], 0x59
call fcn.00401c90
mov esi, eax
mov byte [ebp - 4], 0x5a
lea edx, [ebp - 0x6cbc]
mov ecx, dword [ebp - 0x6cf8]
movups xmm0, xmmword [esi]
push edx
sub esp, 0x10
mov eax, dword [ecx]
mov edx, esp
push ecx
mov eax, dword [eax + 0x20]
movups xmmword [edx], xmm0
call eax
shr eax, 0x1f
lea ecx, [ebp - 0x7068]
mov dword [ebp - 0x6f48], eax
mov byte [ebp - 4], 0x59
call fcn.00401d10
cmp byte [ebp - 0x6f48], 0
jne 0x47721c
mov eax, dword [ebp - 0x6cbc]
lea edx, [ebp - 0x6d14]
mov dword [ebp - 0x6d14], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
test eax, eax
js 0x47721c
mov eax, dword [ebp - 0x6d14]
test eax, eax
je 0x47721c
push eax
lea ecx, [ebp - 0x21b4]
call fcn.005452f0
push dword [ebp - 0x6d14]
call edi
mov ecx, dword [ebp - 0x6f44]
push 0
lea ecx, [ecx + 0x14c]
call fcn.00544f70
push eax
push 0x66537c
lea ecx, [ebp - 0x21b4]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00470bd0
test al, al
jne 0x47721c
push 4
lea ecx, [ebp - 0x6cd0]
call fcn.00401d40
lea ecx, [ebp - 0x6cd0]
call fcn.00401990
mov byte [ebp - 4], 0x5b
lea edx, [ebp - 0x6cd0]
mov eax, dword [ebp - 0x6cbc]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x4c]
call eax
test eax, eax
js 0x477211
push 4
lea ecx, [ebp - 0x6cc8]
call fcn.00401d40
lea ecx, [ebp - 0x6cc8]
call fcn.00401990
mov byte [ebp - 4], 0x5c
lea edx, [ebp - 0x6cc8]
mov eax, dword [ebp - 0x6cd0]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x44]
call eax
test eax, eax
js 0x477206
mov eax, dword [ebp - 0x6cc8]
lea edx, [ebp - 0x2464]
mov dword [ebp - 0x2464], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
cmp dword [ebp - 0x2464], 0
je 0x477206
lea ecx, [ebp - 0x2198]
call fcn.005451e0
mov esi, 1
cmp dword [ebp - 0x2464], esi
jl 0x477004
nop word [eax + eax]
push 4
lea ecx, [ebp - 0x6cc4]
call fcn.00401d40
lea ecx, [ebp - 0x6cc4]
call fcn.00401990
mov byte [ebp - 4], 0x5d
lea edx, [ebp - 0x6cc4]
mov eax, dword [ebp - 0x6cc8]
push edx
push esi
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x20]
call eax
test eax, eax
js 0x476fe8
mov eax, dword [ebp - 0x6cc4]
lea edx, [ebp - 0x28b8]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x24]
call eax
test eax, eax
js 0x476fe8
cmp dword [ebp - 0x28b8], 0
jne 0x476fe8
push 4
lea ecx, [ebp - 0x6ce8]
call fcn.00401d40
lea ecx, [ebp - 0x6ce8]
call fcn.00401990
mov byte [ebp - 4], 0x5e
lea edx, [ebp - 0x6ce8]
mov eax, dword [ebp - 0x6cc4]
push edx
push 0x617760
push eax
mov ecx, dword [eax]
mov eax, dword [ecx]
call eax
test eax, eax
js 0x476fdd
mov eax, dword [ebp - 0x6ce8]
lea edx, [ebp - 0x6d00]
mov dword [ebp - 0x6d00], 0
mov dword [ebp - 0x6d08], 0
push edx
mov ecx, dword [eax]
push eax
mov eax, dword [ecx + 0x28]
call eax
mov eax, dword [ebp - 0x6d00]
test eax, eax
je 0x476fdd
push eax
lea ecx, [ebp - 0x2314]
call fcn.005452f0
mov eax, dword [ebp - 0x6ce8]
lea edx, [ebp - 0x6d08]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x30]
call eax
mov ecx, dword [ebp - 0x6d08]
call fcn.00541aa0
test eax, eax
je 0x476f9e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6d08]
lea ecx, [ebp - 0x2314]
push 0x61e0e4
call fcn.005435c0
push 3
push 1
lea ecx, [ebp - 0x2314]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2198]
call fcn.00545040
mov edx, dword [ebp - 0x6f94]
mov ecx, eax
call fcn.005373a0
test al, al
jne 0x476faf
push dword [ebp - 0x6d00]
lea ecx, [ebp - 0x2198]
call fcn.005452f0
push 0
push 1
push 0x61d050
push 0x61e29c
lea ecx, [ebp - 0x2198]
call fcn.005430c0
push dword [ebp - 0x6d00]
call edi
mov eax, dword [ebp - 0x6d08]
test eax, eax
je 0x476fdd
push eax
call edi
lea ecx, [ebp - 0x6ce8]
call fcn.00402c60
lea ecx, [ebp - 0x6cc4]
mov byte [ebp - 4], 0x5c
call fcn.00402c60
inc esi
cmp esi, dword [ebp - 0x2464]
jle 0x476e40
lea ecx, [ebp - 0x2198]
call fcn.00544c70
test al, al
jne 0x477206
mov eax, dword [ebp - 0x6cdc]
lea edx, [ebp - 0x6dc4]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x20]
call eax
test eax, eax
js 0x4770b8
mov eax, dword [ebp - 0x6f44]
movsd xmm0, qword [eax + 0x378]
comisd xmm0, xmmword [0x6e3258]
jbe 0x477054
mov eax, dword [eax + 0x184]
jmp 0x47705a
mov eax, dword [eax + 0x180]
push eax
lea ecx, [ebp - 0x2430]
call fcn.005452f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x21b4]
call fcn.00544f70
push eax
push 0x61d048
push dword [ebp - 0x6dc4]
lea ecx, [ebp - 0x2430]
push 0x6288a8
call fcn.005435c0
push 1
push 0
push 0x61d048
push 0x61d0d0
lea ecx, [ebp - 0x2430]
call fcn.005430c0
jmp 0x4770c3
lea ecx, [ebp - 0x2430]
call fcn.005451e0
push 0
push 1
push 1
push 0
push 0x66539c
lea ecx, [ebp - 0x2198]
call fcn.005438b0
push 0
lea ecx, [ebp - 0x2430]
mov esi, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
lea eax, [ebp - 0x2198]
push eax
call fcn.00470120
test al, al
lea ecx, [ebp - 0x2198]
mov eax, 1
push 0
cmovne esi, eax
call fcn.00544f70
push eax
push 0
push esi
lea ecx, [ebp - 0x2198]
call fcn.00544f70
push eax
push 0x65f3a0
lea ecx, [ebp - 0x21b4]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
mov eax, dword [ebp - 0x6f44]
push 0xffffffffffffffff
push 0xd
mov eax, dword [eax + 8]
push dword [eax + 0xa4]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x477206
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f3a0
lea ecx, [ebp - 0x2198]
call fcn.00544f70
push eax
push 0
push 0xd
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00499cc0
push 0
push 0
push 0
push 0
test esi, esi
mov ecx, 0x66455c
push 0x621864
mov eax, 0x6291b8
cmove eax, ecx
lea ecx, [ebp - 0x2314]
push eax
push 0x664574
call fcn.00544f70
push eax
push 0x665294
push 0x6653ac
lea ecx, [ebp - 0x21b4]
call fcn.00544f70
push eax
push 0x6653e4
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
lea ecx, [ebp - 0x6cc8]
call fcn.00402c60
lea ecx, [ebp - 0x6cd0]
call fcn.00402c60
lea ecx, [ebp - 0x6cbc]
mov byte [ebp - 4], 0x58
call fcn.00402c60
mov esi, dword [ebp - 0x6f54]
inc esi
mov dword [ebp - 0x6f54], esi
cmp esi, dword [ebp - 0x256c]
jle 0x476c70
lea ecx, [ebp - 0x6cf8]
call fcn.00402c60
lea ecx, [ebp - 0x6cdc]
mov byte [ebp - 4], 0x51
call fcn.00402c60
jmp 0x477773
lea eax, [ebp - 0x6cd8]
push eax
push 0x6802b0
push 1
push 0
push 0x68024c
call esi
test eax, eax
js 0x477773
push 4
lea ecx, [ebp - 0x6cf4]
call fcn.00401d40
lea ecx, [ebp - 0x6cf4]
call fcn.00401990
mov byte [ebp - 4], 0x5f
lea edx, [ebp - 0x6cf4]
mov eax, dword [ebp - 0x6cd8]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x14]
call eax
test eax, eax
js 0x477764
mov eax, dword [ebp - 0x6cf4]
lea edx, [ebp - 0x2474]
push edx
mov dword [ebp - 0x2474], 0
lea edx, [ebp - 0x6d0c]
push edx
mov ecx, dword [eax]
push 5
push eax
mov eax, dword [ecx + 0xc]
call eax
test eax, eax
js 0x477764
mov eax, dword [ebp - 0x6f44]
mov esi, dword [0x5fdabc]
lea ecx, [eax + 0x17c]
mov dword [ebp - 0x6f48], ecx
jmp 0x477316
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [ebp - 0x2474]
test ecx, ecx
je 0x477764
xor edi, edi
test ecx, ecx
je 0x477736
jmp 0x477336
mov eax, dword [ebp - 0x6f44]
mov ecx, eax
call fcn.0046c7f0
test al, al
jne 0x477736
mov eax, dword [ebp - 0x6d0c]
lea ecx, [ebp - 0x21b4]
push dword [eax + edi*4]
call fcn.005452f0
mov eax, dword [ebp - 0x6d0c]
push dword [eax + edi*4]
call esi
mov ecx, dword [ebp - 0x6f44]
push 0
lea ecx, [ecx + 0x14c]
call fcn.00544f70
push eax
push 0x66537c
lea ecx, [ebp - 0x21b4]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00470bd0
test al, al
jne 0x477729
push 4
lea ecx, [ebp - 0x6cc0]
call fcn.00401d40
lea ecx, [ebp - 0x6cc0]
call fcn.00401990
mov byte [ebp - 4], 0x60
lea ecx, [ebp - 0x21b4]
mov eax, dword [ebp - 0x6cd8]
mov esi, dword [eax]
lea eax, [ebp - 0x6cc0]
push eax
push 0x680378
call fcn.00544f70
push eax
push dword [ebp - 0x6cd8]
mov eax, dword [esi + 0x18]
call eax
test eax, eax
js 0x477714
mov eax, dword [ebp - 0x6cc0]
lea edx, [ebp - 0x6cfc]
mov dword [ebp - 0x6cfc], 0
mov dword [ebp - 0x6d04], 0
push edx
mov ecx, dword [eax]
push eax
mov eax, dword [ecx + 0x84]
call eax
cmp dword [ebp - 0x6cfc], 0
je 0x477714
mov eax, dword [ebp - 0x6cc0]
lea edx, [ebp - 0x6d04]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x8c]
call eax
push dword [ebp - 0x6cfc]
lea ecx, [ebp - 0x2314]
call fcn.005452f0
mov ecx, dword [ebp - 0x6d04]
call fcn.00541aa0
test eax, eax
je 0x4774b2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6d04]
lea ecx, [ebp - 0x2314]
push 0x61e0e4
call fcn.005435c0
push 3
push 1
lea ecx, [ebp - 0x2314]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2198]
call fcn.00545040
mov edx, dword [ebp - 0x6f48]
mov ecx, eax
call fcn.005373a0
test al, al
jne 0x4774c3
push dword [ebp - 0x6cfc]
lea ecx, [ebp - 0x2198]
call fcn.005452f0
push 0
push 1
push 0x61d050
push 0x61e29c
lea ecx, [ebp - 0x2198]
call fcn.005430c0
push dword [ebp - 0x6cfc]
mov esi, dword [0x5fdabc]
call esi
mov eax, dword [ebp - 0x6d04]
test eax, eax
je 0x4774f7
push eax
call esi
lea ecx, [ebp - 0x2198]
call fcn.00544c70
test al, al
je 0x47751a
lea ecx, [ebp - 0x6cc0]
mov byte [ebp - 4], 0x5f
call fcn.00402c60
jmp 0x477729
push 0
push 1
push 1
push 0
push 0x66539c
lea ecx, [ebp - 0x2198]
call fcn.005438b0
xor ecx, ecx
test eax, eax
lea eax, [ebp - 0x21b4]
setg cl
mov dword [ebp - 0x6f94], ecx
lea ecx, [ebp - 0x2430]
push eax
call fcn.005452c0
push 0
push 1
push 0xffffffffffffffff
push 0
push 0x6288b8
lea ecx, [ebp - 0x2430]
call fcn.005438b0
test eax, eax
jne 0x477588
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x6288b8
lea ecx, [ebp - 0x2430]
call fcn.005435c0
mov eax, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x2430]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x665404
push dword [eax + 0x180]
call fcn.00543350
push 0
lea ecx, [ebp - 0x2430]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
lea eax, [ebp - 0x2198]
push eax
call fcn.00470120
test al, al
je 0x4775e3
mov esi, 1
jmp 0x477615
lea ecx, [ebp - 0x2198]
call fcn.00544f70
push eax
push 0
call dword [0x5fdafc]
test eax, eax
je 0x47760f
lea ecx, [ebp - 0x6cc0]
mov byte [ebp - 4], 0x5f
call fcn.00402c60
jmp 0x477729
mov esi, dword [ebp - 0x6f94]
push 0
lea ecx, [ebp - 0x2198]
call fcn.00544f70
push eax
push 0
push esi
lea ecx, [ebp - 0x2198]
call fcn.00544f70
push eax
push 0x65f3a0
lea ecx, [ebp - 0x21b4]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
mov eax, dword [ebp - 0x6f44]
push 0xffffffffffffffff
push 0xd
mov eax, dword [eax + 8]
push dword [eax + 0xa4]
call fcn.00499eb0
mov dword [ebp - 0x6f94], eax
cmp eax, 0xffffffff
je 0x477714
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f3a0
lea ecx, [ebp - 0x2198]
call fcn.00544f70
push eax
push 0
push 0xd
push dword [ebp - 0x6f94]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00499cc0
push 0
push 0
push 0
push 0
test esi, esi
mov ecx, 0x66455c
push 0x621864
mov eax, 0x6291b8
cmove eax, ecx
lea ecx, [ebp - 0x2314]
push eax
push 0x664574
call fcn.00544f70
push eax
push 0x665294
push 0x6653ac
lea ecx, [ebp - 0x21b4]
call fcn.00544f70
push eax
push 0x6653e4
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
lea ecx, [ebp - 0x6cc0]
mov byte [ebp - 4], 0x5f
call fcn.00402c60
mov esi, dword [0x5fdabc]
inc edi
cmp edi, dword [ebp - 0x2474]
jb 0x477330
push dword [ebp - 0x6d0c]
call esi
mov eax, dword [ebp - 0x6cf4]
lea edx, [ebp - 0x2474]
push edx
lea edx, [ebp - 0x6d0c]
push edx
mov ecx, dword [eax]
push 5
push eax
mov eax, dword [ecx + 0xc]
call eax
test eax, eax
jns 0x477310
lea ecx, [ebp - 0x6cf4]
mov byte [ebp - 4], 0x51
call fcn.00402c60
mov ecx, dword [ebp - 0x6f44]
call fcn.0046c7f0
test al, al
jne 0x478632
push 0x18
lea ecx, [ebp - 0x2864]
call fcn.00401d50
lea ecx, [ebp - 0x2864]
call fcn.00542180
push 0
push 0x665420
lea ecx, [ebp - 0x1fd4]
mov byte [ebp - 4], 0x61
call fcn.005322d0
mov eax, dword [ebp - 0x6f44]
xor esi, esi
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x47781e
mov edi, dword [ebp - 0x6f68]
add eax, 0x104
mov dword [ebp - 0x6f48], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6527c8
push esi
mov ecx, eax
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
push str.HKU_
mov ecx, edi
call fcn.00544fe0
mov eax, dword [ebp - 0x6f44]
inc esi
add edi, 0xc
mov ecx, dword [eax + 0x30]
mov eax, dword [ebp - 0x6f48]
cmp esi, ecx
jb 0x4777d4
mov esi, dword [ebp - 0x6f68]
lea eax, [ecx + ecx*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x665450
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00544fe0
cmp dword [ebp - 0x6fa8], 0
je 0x47788b
mov eax, dword [ebp - 0x6f44]
push 0
push 0
push 0
mov eax, dword [eax + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x665450
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00544fe0
xor edi, edi
mov dword [ebp - 0x6f7c], edi
cmp dword [ebp - 0x6f74], edi
jbe 0x477ca0
mov eax, dword [ebp - 0x6f44]
mov esi, dword [ebp - 0x6f70]
mov dword [ebp - 0x6f40], esi
lea ecx, [eax + 0x17c]
mov dword [ebp - 0x6f4c], ecx
mov ecx, dword [ebp - 0x6f68]
sub ecx, esi
mov dword [ebp - 0x6f48], ecx
jmp 0x4778d6
mov eax, dword [ebp - 0x6f44]
mov ecx, eax
call fcn.0046c7f0
test al, al
jne 0x477ca0
mov eax, dword [ebp - 0x6f48]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f54], eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x477c84
lea eax, [ebp - 0x23e0]
push eax
push 0x65c7b8
lea ecx, [ebp - 0x1f74]
call fcn.0053f580
test al, al
je 0x477c84
lea ecx, [ebp - 0x23e0]
call fcn.00545180
cmp eax, 2
jl 0x477c84
push 0x18
lea ecx, [ebp - 0x29d4]
call fcn.00401d50
push 0
push 0x621ae8
lea ecx, [ebp - 0x23e0]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x29d4]
call fcn.00542100
xor edi, edi
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0x29d4]
mov dword [ebp - 0x6f6c], edi
call fcn.00542070
test eax, eax
je 0x477c6f
mov eax, dword [ebp - 0x6f44]
add eax, 0x14c
mov dword [ebp - 0x6f94], eax
push edi
lea ecx, [ebp - 0x29d4]
call fcn.00542080
push eax
lea ecx, [ebp - 0x21b4]
call fcn.005452f0
mov ecx, dword [ebp - 0x6f94]
push 0
call fcn.00544f70
push eax
push 0x6654bc
lea ecx, [ebp - 0x21b4]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00470bd0
test al, al
jne 0x477c55
push edi
lea ecx, [ebp - 0x29d4]
call fcn.00542080
push eax
lea ecx, [ebp - 0x209c]
call fcn.005452f0
lea ecx, [ebp - 0x209c]
call fcn.00544c70
test al, al
jne 0x477c55
push 0
push 1
push 0xffffffffffffffff
push 0
push str..dll
lea ecx, [ebp - 0x209c]
call fcn.005438b0
lea ecx, [ebp - 0x209c]
mov esi, eax
call fcn.00545180
sub eax, 3
cmp esi, eax
je 0x477a6a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str..dll
lea ecx, [ebp - 0x209c]
call fcn.005435c0
mov edx, dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x209c]
push 3
call fcn.005373a0
lea ecx, [ebp - 0x209c]
call fcn.00544f70
push eax
push 0
call dword [0x5fdafc]
test eax, eax
jne 0x477c4f
push eax
push 1
push 1
push eax
push 0x66539c
lea ecx, [ebp - 0x209c]
call fcn.005438b0
push 0
push 0
push 0
push 0
push 0
push 0
xor ecx, ecx
test eax, eax
push 0
push 0
setg cl
push 0
mov dword [ebp - 0x6f6c], ecx
lea ecx, [ebp - 0x29d4]
push edi
call fcn.00542080
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x6654d8
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2148]
call fcn.00544fe0
push 0
lea ecx, [ebp - 0x2148]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
lea eax, [ebp - 0x209c]
push eax
call fcn.00470120
mov esi, dword [ebp - 0x6f6c]
lea ecx, [ebp - 0x209c]
test al, al
mov eax, 1
push 0
cmovne esi, eax
call fcn.00544f70
push eax
push 0
push esi
lea ecx, [ebp - 0x209c]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x21b4]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
mov eax, dword [ebp - 0x6f44]
push 0xffffffffffffffff
push 0xe
mov eax, dword [eax + 8]
push dword [eax + 0xa4]
call fcn.00499eb0
mov dword [ebp - 0x6f6c], eax
cmp eax, 0xffffffff
je 0x477c4f
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0x65c7b8
call fcn.00544f70
push eax
lea ecx, [ebp - 0x209c]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
call fcn.00544f70
push eax
push 0xe
push dword [ebp - 0x6f6c]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00499cc0
push 0
push 0
push 0
test esi, esi
mov ecx, 0x66455c
push 0x621864
mov eax, 0x6291b8
cmove eax, ecx
lea ecx, [ebp - 0x209c]
push eax
push 0x664574
call fcn.00544f70
mov esi, dword [ebp - 0x6f40]
mov ecx, esi
push eax
push 0x665308
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x21b4]
call fcn.00544f70
push eax
push 0x6652b0
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
jmp 0x477c55
mov esi, dword [ebp - 0x6f40]
lea ecx, [ebp - 0x29d4]
inc edi
call fcn.00542070
cmp edi, eax
jb 0x4779a3
mov dword [ebp - 0x6f6c], edi
lea ecx, [ebp - 0x29d4]
mov byte [ebp - 4], 0x61
call fcn.005420e0
mov edi, dword [ebp - 0x6f7c]
inc edi
add esi, 0xc
mov dword [ebp - 0x6f7c], edi
mov dword [ebp - 0x6f40], esi
cmp edi, dword [ebp - 0x6f74]
jb 0x4778d0
mov ecx, dword [ebp - 0x6f44]
call fcn.0046c7f0
test al, al
jne 0x478627
push 0
push 0x665500
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
push 4
lea ecx, [ebp - 0x22bc]
mov dword [ebp - 0x6f98], 0x665538
mov dword [ebp - 0x6f94], 0x6655c0
call fcn.00401d40
lea ecx, [ebp - 0x22bc]
call fcn.0053f8e0
push 4
lea ecx, [ebp - 0x2408]
mov byte [ebp - 4], 0x63
call fcn.00401d40
lea ecx, [ebp - 0x2408]
call fcn.0053f8e0
push 0xc
lea ecx, [ebp - 0x20cc]
mov byte [ebp - 4], 0x64
call fcn.00401d20
lea ecx, [ebp - 0x20cc]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2710]
mov byte [ebp - 4], 0x65
call fcn.00401d20
lea ecx, [ebp - 0x2710]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2778]
mov byte [ebp - 4], 0x66
call fcn.00401d20
lea ecx, [ebp - 0x2778]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x6db8]
mov byte [ebp - 4], 0x67
call fcn.00401d20
lea ecx, [ebp - 0x6db8]
call fcn.0053f900
mov eax, dword [ebp - 0x6f44]
xor ecx, ecx
add eax, 0x314
mov byte [ebp - 4], 0x68
mov dword [ebp - 0x6f4c], ecx
mov dword [ebp - 0x6f40], eax
nop word [eax + eax]
mov edi, dword [ebp + ecx*4 - 0x6f98]
lea ecx, [ebp - 0x1f74]
push 0
push 0x20019
push edi
mov dword [ebp - 0x6f54], edi
call fcn.0053f870
test al, al
je 0x4785b0
lea eax, [ebp - 0x6cb4]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f6c], esi
call fcn.0053f1c0
test al, al
je 0x4785b0
nop dword [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x2120]
push 0x61d048
push edi
call fcn.00544fe0
push 0
push 0x20019
lea ecx, [ebp - 0x2120]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x22bc]
call fcn.0053f870
test al, al
je 0x478588
lea eax, [ebp - 0x6db8]
mov dword [ebp - 0x6f7c], 0
push eax
push 0
lea ecx, [ebp - 0x22bc]
call fcn.0053f1c0
test al, al
je 0x47822f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6db8]
lea ecx, [ebp - 0x2778]
push 0x61d048
push dword [ebp - 0x6cb4]
push 0x61d048
push edi
call fcn.00544fe0
push 0
push 0x20019
lea ecx, [ebp - 0x2778]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2408]
call fcn.0053f870
test al, al
je 0x478201
lea eax, [ebp - 0x20cc]
push eax
push 0x665648
lea ecx, [ebp - 0x2408]
call fcn.0053f580
test al, al
je 0x478201
lea ecx, [ebp - 0x20cc]
call fcn.00544c70
test al, al
jne 0x478201
mov ecx, dword [ebp - 0x6f44]
push 0
lea ecx, [ecx + 0x14c]
call fcn.00544f70
push eax
push 0x65c7d4
lea ecx, [ebp - 0x20cc]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00470bd0
test al, al
jne 0x478201
push 0
push 1
push 1
push 0
push 0x665660
lea ecx, [ebp - 0x20cc]
call fcn.005438b0
test eax, eax
je 0x477f61
push 0
push 1
push 1
push 0
push 0x665670
lea ecx, [ebp - 0x20cc]
call fcn.005438b0
test eax, eax
jne 0x478201
push 0
push 1
push 1
push 0
push 0x665680
lea ecx, [ebp - 0x20cc]
call fcn.005438b0
test eax, eax
je 0x477f9d
push 0
push 1
push 1
push 0
push 0x6656ac
lea ecx, [ebp - 0x20cc]
call fcn.005438b0
test eax, eax
jne 0x478201
push 0
push 1
push 1
push 0
push 0x6656d8
lea ecx, [ebp - 0x20cc]
call fcn.005438b0
test eax, eax
je 0x477fd9
push 0
push 1
push 1
push 0
push 0x665710
lea ecx, [ebp - 0x20cc]
call fcn.005438b0
test eax, eax
jne 0x478201
push 0
push 1
push 1
push 0
push 0x665748
lea ecx, [ebp - 0x20cc]
call fcn.005438b0
test eax, eax
je 0x478015
push 0
push 1
push 1
push 0
push 0x665774
lea ecx, [ebp - 0x20cc]
call fcn.005438b0
test eax, eax
jne 0x478201
push 0
push 1
push 1
push 0
push 0x66579c
lea ecx, [ebp - 0x20cc]
call fcn.005438b0
test eax, eax
je 0x478051
push 0
push 1
push 1
push 0
push 0x6657d4
lea ecx, [ebp - 0x20cc]
call fcn.005438b0
test eax, eax
jne 0x478201
xor edi, edi
lea ecx, [ebp - 0x20cc]
push edi
push 0x665808
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2864]
call fcn.00541ed0
lea ecx, [ebp - 0x2864]
xor esi, esi
call fcn.00542070
test eax, eax
je 0x478109
push 1
push esi
lea ecx, [ebp - 0x2864]
call fcn.00542080
push eax
lea ecx, [ebp - 0x2710]
call fcn.00545040
mov ecx, eax
call fcn.00544c70
test al, al
jne 0x4780f2
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x664d68
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2710]
call fcn.00543350
lea ecx, [ebp - 0x2710]
call fcn.00544f70
xor edx, edx
mov ecx, eax
call fcn.0053c5e0
test al, al
jne 0x478104
lea ecx, [ebp - 0x2864]
inc esi
call fcn.00542070
cmp esi, eax
jb 0x478085
jmp 0x478109
mov edi, 1
push 0
push 0
push 0
push edi
lea ecx, [ebp - 0x2778]
call fcn.00544f70
push eax
push 0x65f3a0
lea ecx, [ebp - 0x20cc]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
mov eax, dword [ebp - 0x6f44]
push 0xffffffffffffffff
push 0xf
mov eax, dword [eax + 8]
push dword [eax + 0xa4]
call fcn.00499eb0
mov esi, eax
cmp esi, 0xffffffff
je 0x4781fb
push 0
push 0
push 0
push 0
push 0
push 0x665648
push 0x65f3a0
push 0
lea ecx, [ebp - 0x2778]
call fcn.00544f70
push eax
push 0xf
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00499cc0
push 0
push 0
push 0
push 0x621864
test edi, edi
mov ecx, 0x66455c
mov eax, 0x6291b8
cmove eax, ecx
lea ecx, [ebp - 0x2778]
push eax
push 0x664574
push 0x665810
call fcn.00544f70
push eax
push 0x665848
push 0x6653ac
lea ecx, [ebp - 0x20cc]
call fcn.00544f70
push eax
push 0x6652b0
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
mov edi, dword [ebp - 0x6f54]
mov eax, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x6db8]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x22bc]
mov dword [ebp - 0x6f7c], eax
call fcn.0053f1c0
test al, al
jne 0x477e65
mov esi, dword [ebp - 0x6f6c]
lea eax, [ebp - 0x20cc]
push eax
push 0x665648
lea ecx, [ebp - 0x22bc]
call fcn.0053f580
test al, al
je 0x478588
lea ecx, [ebp - 0x20cc]
call fcn.00544c70
test al, al
jne 0x478588
mov ecx, dword [ebp - 0x6f44]
push 0
lea ecx, [ecx + 0x14c]
call fcn.00544f70
push eax
push 0x65c7d4
lea ecx, [ebp - 0x20cc]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00470bd0
test al, al
jne 0x478588
push 0
push 1
push 1
push 0
push 0x665660
lea ecx, [ebp - 0x20cc]
call fcn.005438b0
test eax, eax
je 0x4782d5
push 0
push 1
push 1
push 0
push 0x665670
lea ecx, [ebp - 0x20cc]
call fcn.005438b0
test eax, eax
jne 0x478588
push 0
push 1
push 1
push 0
push 0x665680
lea ecx, [ebp - 0x20cc]
call fcn.005438b0
test eax, eax
je 0x478311
push 0
push 1
push 1
push 0
push 0x6656ac
lea ecx, [ebp - 0x20cc]
call fcn.005438b0
test eax, eax
jne 0x478588
push 0
push 1
push 1
push 0
push 0x6656d8
lea ecx, [ebp - 0x20cc]
call fcn.005438b0
test eax, eax
je 0x47834d
push 0
push 1
push 1
push 0
push 0x665710
lea ecx, [ebp - 0x20cc]
call fcn.005438b0
test eax, eax
jne 0x478588
push 0
push 1
push 1
push 0
push 0x665748
lea ecx, [ebp - 0x20cc]
call fcn.005438b0
test eax, eax
je 0x478389
push 0
push 1
push 1
push 0
push 0x665774
lea ecx, [ebp - 0x20cc]
call fcn.005438b0
test eax, eax
jne 0x478588
push 0
push 1
push 1
push 0
push 0x66579c
lea ecx, [ebp - 0x20cc]
call fcn.005438b0
test eax, eax
je 0x4783c5
push 0
push 1
push 1
push 0
push 0x6657d4
lea ecx, [ebp - 0x20cc]
call fcn.005438b0
test eax, eax
jne 0x478588
push 0
push 0x665808
lea ecx, [ebp - 0x20cc]
mov dword [ebp - 0x6f48], 0
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2864]
call fcn.00541ed0
lea ecx, [ebp - 0x2864]
xor edi, edi
call fcn.00542070
test eax, eax
je 0x47936a
push 1
push edi
lea ecx, [ebp - 0x2864]
call fcn.00542080
push eax
lea ecx, [ebp - 0x2710]
call fcn.00545040
mov ecx, eax
call fcn.00544c70
test al, al
jne 0x478473
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x664d68
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2710]
call fcn.00543350
lea ecx, [ebp - 0x2710]
call fcn.00544f70
xor edx, edx
mov ecx, eax
call fcn.0053c5e0
test al, al
jne 0x479360
lea ecx, [ebp - 0x2864]
inc edi
call fcn.00542070
cmp edi, eax
jb 0x478402
mov edi, dword [ebp - 0x6f48]
push 0
push 0
push 0
push edi
lea ecx, [ebp - 0x2120]
call fcn.00544f70
push eax
push 0x65f3a0
lea ecx, [ebp - 0x20cc]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
mov eax, dword [ebp - 0x6f44]
push 0xffffffffffffffff
push 0xf
mov eax, dword [eax + 8]
push dword [eax + 0xa4]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x478588
push 0
push 0
push 0
push 0
push 0
push 0x665648
push 0x65f3a0
push 0
lea ecx, [ebp - 0x2120]
call fcn.00544f70
push eax
push 0xf
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00499cc0
push 0
push 0
push 0
push 0x621864
test edi, edi
mov ecx, 0x66455c
mov eax, 0x6291b8
cmove eax, ecx
lea ecx, [ebp - 0x2120]
push eax
push 0x664574
push 0x665810
call fcn.00544f70
push eax
push 0x665848
push 0x6653ac
lea ecx, [ebp - 0x20cc]
call fcn.00544f70
push eax
push 0x6652b0
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
lea eax, [ebp - 0x6cb4]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f6c], esi
call fcn.0053f1c0
mov edi, dword [ebp - 0x6f54]
test al, al
jne 0x477df0
mov ecx, dword [ebp - 0x6f4c]
inc ecx
mov dword [ebp - 0x6f4c], ecx
cmp ecx, 2
jb 0x477da0
mov eax, dword [ebp - 0x6f44]
push 1
mov eax, dword [eax + 8]
push dword [eax + 0xa4]
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.00518e70
lea ecx, [ebp - 0x6db8]
call fcn.0053f8f0
lea ecx, [ebp - 0x2778]
call fcn.00545210
lea ecx, [ebp - 0x2710]
call fcn.00545210
lea ecx, [ebp - 0x20cc]
call fcn.00545210
lea ecx, [ebp - 0x2408]
call fcn.0053f820
lea ecx, [ebp - 0x22bc]
call fcn.0053f820
lea ecx, [ebp - 0x2864]
call fcn.005420e0
lea ecx, [ebp - 0x6cd4]
call fcn.00402c60
lea ecx, [ebp - 0x6cd8]
call fcn.00402c60
lea ecx, [ebp - 0x2198]
call fcn.00545210
lea ecx, [ebp - 0x2430]
call fcn.00545210
lea ecx, [ebp - 0x2b70]
call fcn.00537b60
lea ecx, [ebp - 0x255c]
call fcn.00545210
lea ecx, [ebp - 0x2314]
call fcn.00545210
lea ecx, [ebp - 0x21b4]
call fcn.00545210
lea ecx, [ebp - 0x27ec]
call fcn.00545210
lea ecx, [ebp - 0x23e0]
call fcn.00545210
lea ecx, [ebp - 0x209c]
mov byte [ebp - 4], 0x45
call fcn.00545210
mov eax, dword [ebp - 0x6f44]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65fc60
push 0x61d048
lea ecx, [eax + 0x140]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00544fe0
mov ecx, dword [ebp - 0x6f44]
call fcn.0046c7f0
mov edi, dword [ebp - 0x6f44]
test al, al
jne 0x47948b
test dword [edi + 0x34], 0x1000
jne 0x47948b
movsd xmm0, qword [edi + 0x378]
ucomisd xmm0, qword [0x6e32b0]
lahf
test ah, 0x44
jp 0x47948b
push 0
push 0x665870
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x6658b8
push dword [eax + 0x38]
call fcn.0051a1d0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x26
push dword [eax + 0x34]
call fcn.00516e60
push 0xc
lea ecx, [ebp - 0x21f0]
call fcn.00401d20
lea ecx, [ebp - 0x21f0]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x28c4]
mov byte [ebp - 4], 0x69
call fcn.00401d20
lea ecx, [ebp - 0x28c4]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2568]
mov byte [ebp - 4], 0x6a
call fcn.00401d20
lea ecx, [ebp - 0x2568]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2680]
mov byte [ebp - 4], 0x6b
call fcn.00401d20
lea ecx, [ebp - 0x2680]
call fcn.005453c0
push 0
push 0x6658f0
lea ecx, [ebp - 0x1fd4]
mov byte [ebp - 4], 0x6c
call fcn.005322d0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.00518e70
xor esi, esi
mov dword [ebp - 0x6f40], esi
cmp dword [edi + 0x30], esi
jbe 0x478a71
lea ecx, [edi + 0x104]
nop dword [eax + eax]
push esi
call fcn.004035f0
mov ecx, eax
call fcn.00544c70
test al, al
jne 0x478a5b
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x665930
push 0x6659d8
push esi
lea ecx, [edi + 0x104]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
push str.HKU_
lea ecx, [ebp - 0x21f0]
call fcn.00544fe0
push 0
push 0x20019
lea ecx, [ebp - 0x21f0]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x478a5b
xor esi, esi
nop dword [eax + eax]
lea eax, [ebp - 0x6cb4]
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0053f1c0
test al, al
je 0x478a4f
push 8
push 0
push 0x6227b4
push 0x665a70
push 1
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x2680]
call fcn.00545040
mov ecx, eax
call fcn.005424c0
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x665a8c
lea ecx, [ebp - 0x2680]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x478a45
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x21f0]
push 0x61d048
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2568]
call fcn.00544fe0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2568]
call fcn.00544f70
push eax
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2680]
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 4
push 0x18
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x478a45
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
push 0
lea ecx, [ebp - 0x2568]
call fcn.00544f70
push eax
push 0x18
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x665ac0
push dword [ebp - 0x6cb4]
lea ecx, [edi + 0x114]
push 0x665afc
push dword [ebp - 0x6f40]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x2680]
call fcn.00544f70
push eax
push 0x665b30
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
inc esi
cmp esi, 2
jb 0x478890
mov dword [ebp - 0x6f6c], esi
mov esi, dword [ebp - 0x6f40]
inc esi
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f40], esi
cmp esi, dword [edi + 0x30]
jb 0x478810
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47945b
push 0
push 0x665b60
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x478dbe
lea ecx, [edi + 0x104]
push esi
call fcn.004035f0
mov ecx, eax
call fcn.00544c70
test al, al
jne 0x478dae
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x665930
push 0x6659d8
push esi
lea ecx, [edi + 0x104]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
push str.HKU_
lea ecx, [ebp - 0x21f0]
call fcn.00544fe0
push 0
push 0x20019
lea ecx, [ebp - 0x21f0]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
lea eax, [ebp - 0x6cb4]
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.0053f1c0
test al, al
je 0x478c42
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x665cf0
push 0x65ff04
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x478dae
push 0
push 0
push 0
push 0
push 0x665bb8
push esi
lea ecx, [edi + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x65ff04
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x478dae
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [edi + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
push 0
lea ecx, [ebp - 0x21f0]
call fcn.00544f70
push eax
push 0x1a
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x665ac0
push 0x665bb8
push 0x665d2c
push esi
lea ecx, [edi + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
push 0x6645d4
push 0x65ff04
push 0x665d44
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x665d70
push 0x6659d8
push esi
lea ecx, [edi + 0x104]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
push str.HKU_
lea ecx, [ebp - 0x21f0]
call fcn.00544fe0
lea ecx, [ebp - 0x21f0]
call fcn.00544f70
xor edx, edx
mov ecx, eax
call fcn.0053c5e0
test al, al
je 0x478dae
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x665cf0
push 0x6600b0
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x478dae
push 0
push 0
push 0
push 0
push 0x665c60
push esi
lea ecx, [edi + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6600b0
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x478dae
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [edi + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
push 0
lea ecx, [ebp - 0x21f0]
call fcn.00544f70
push eax
push 0x1a
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x665ac0
push 0x665c60
push 0x665d2c
push esi
lea ecx, [edi + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
push 0x6645d4
push 0x6600b0
push 0x665d44
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
inc esi
lea ecx, [edi + 0x104]
cmp esi, dword [edi + 0x30]
jb 0x478aa3
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47945b
xor eax, eax
mov dword [ebp - 0x6f80], 0x65713c
mov dword [ebp - 0x6f7c], 0x657164
mov dword [ebp - 0x6f98], 0x6601cc
mov dword [ebp - 0x6f94], 0x6602e0
mov dword [ebp - 0x6f58], 0x665e10
mov dword [ebp - 0x6f54], 0x665e98
mov dword [ebp - 0x6f40], eax
cmp dword [edi + 0x30], eax
jbe 0x47900c
lea edx, [edi + 0x104]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x665f28
push 0x665fd0
push 0x666068
push eax
mov ecx, edx
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
push str.HKU_
lea ecx, [ebp - 0x21f0]
call fcn.00544fe0
lea ecx, [ebp - 0x21f0]
call fcn.00544f70
xor edx, edx
mov ecx, eax
call fcn.0053c5e0
test al, al
je 0x478ff0
xor esi, esi
nop dword [eax + eax]
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x478fea
lea ecx, [ebp - 0x21f0]
call fcn.00544f70
mov edx, dword [ebp + esi*4 - 0x6f80]
mov ecx, eax
call fcn.0053c5e0
test al, al
je 0x478fe0
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x665cf0
push dword [ebp + esi*4 - 0x6f98]
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x478fe0
push 0
push 0
push 0
push 0
push dword [ebp + esi*4 - 0x6f58]
lea ecx, [edi + 0x114]
push dword [ebp - 0x6f40]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
push dword [ebp + esi*4 - 0x6f98]
mov eax, dword [edi + 8]
mov ecx, edi
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x478fe0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + esi*4 - 0x6f80]
lea ecx, [edi + 0x114]
push dword [ebp - 0x6f40]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
push 0
lea ecx, [ebp - 0x21f0]
call fcn.00544f70
push eax
push 0x1a
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x665ac0
push dword [ebp + esi*4 - 0x6f58]
lea ecx, [edi + 0x114]
push 0x665d2c
push dword [ebp - 0x6f40]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
push 0x6645d4
push dword [ebp + esi*4 - 0x6f98]
lea ecx, [ebp - 0x1f80]
push 0x665d44
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
inc esi
cmp esi, 2
jb 0x478e80
mov dword [ebp - 0x6f6c], esi
mov eax, dword [ebp - 0x6f40]
lea edx, [edi + 0x104]
inc eax
mov dword [ebp - 0x6f40], eax
cmp eax, dword [edi + 0x30]
jb 0x478e20
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47945b
mov dword [ebp - 0x6f80], 0x6573b8
lea ecx, [edi + 0x14c]
mov dword [ebp - 0x6f7c], 0x6573d4
xor esi, esi
mov dword [ebp - 0x6f98], 0x66040c
mov dword [ebp - 0x6f94], 0x660438
mov dword [ebp - 0x6f58], 0x666108
mov dword [ebp - 0x6f54], 0x666190
nop
push 0
call fcn.00544f70
push eax
push 0x665cf0
push dword [ebp + esi*4 - 0x6f98]
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x479195
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + esi*4 - 0x6f80]
lea ecx, [ebp - 0x25d8]
push 0x657350
call fcn.00544f70
push eax
lea ecx, [ebp - 0x21f0]
call fcn.00544fe0
lea ecx, [ebp - 0x21f0]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
je 0x479195
mov eax, dword [edi + 8]
mov ecx, edi
push 0
push 0
push 0
push 0
push dword [ebp + esi*4 - 0x6f58]
push 0x65f3a0
push dword [ebp + esi*4 - 0x6f98]
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x479195
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f3a0
lea ecx, [ebp - 0x21f0]
call fcn.00544f70
push eax
push 0
push 0x1a
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x665ac0
push dword [ebp + esi*4 - 0x6f58]
lea ecx, [ebp - 0x1f80]
push 0x665d2c
push 0x6653ac
push dword [ebp + esi*4 - 0x6f98]
push 0x665d44
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
inc esi
lea ecx, [edi + 0x14c]
cmp esi, 2
jb 0x479060
push 4
lea ecx, [ebp - 0x2364]
mov dword [ebp - 0x6f6c], esi
call fcn.00401d40
lea ecx, [ebp - 0x2364]
call fcn.0053f8e0
push 4
lea ecx, [ebp - 0x240c]
mov byte [ebp - 4], 0x6d
call fcn.00401d40
lea ecx, [ebp - 0x240c]
call fcn.0053f8e0
xor eax, eax
mov byte [ebp - 4], 0x6e
mov dword [ebp - 0x6f40], eax
cmp dword [edi + 0x30], eax
jbe 0x479432
lea edx, [edi + 0x104]
nop word [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6662a8
push 0x666330
push 0x6663a8
push eax
mov ecx, edx
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
push str.HKU_
lea ecx, [ebp - 0x21f0]
call fcn.00544fe0
push 0
push 0x20019
lea ecx, [ebp - 0x21f0]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2364]
call fcn.0053f870
test al, al
je 0x479416
lea eax, [ebp - 0x6cb4]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x2364]
mov dword [ebp - 0x6f6c], esi
call fcn.0053f1c0
test al, al
je 0x479416
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6663cc
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x21f0]
push 0x61d048
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2568]
call fcn.00544fe0
push 0
push 0x20019
lea ecx, [ebp - 0x2568]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x240c]
call fcn.0053f870
test al, al
je 0x479339
lea ecx, [ebp - 0x240c]
call fcn.0053f0c0
cmp eax, 2
jb 0x479339
push 0
push 0
push 0
push 0
push 0x666220
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x660648
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
jne 0x479371
lea eax, [ebp - 0x6cb4]
inc esi
push eax
push esi
lea ecx, [ebp - 0x2364]
mov dword [ebp - 0x6f6c], esi
call fcn.0053f1c0
test al, al
jne 0x479286
jmp 0x479416
mov edi, 1
jmp 0x47848d
xor edi, edi
jmp 0x47848d
mov esi, dword [ebp - 0x6f40]
lea ecx, [edi + 0x114]
push 0
push 0
push 0
push 0
push 0
push 0
push esi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
push 0
lea ecx, [ebp - 0x2568]
call fcn.00544f70
push eax
push 0x1a
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x665ac0
push 0x666220
push 0x665d2c
push esi
lea ecx, [edi + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
push 0x6645d4
push 0x666408
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
mov eax, dword [ebp - 0x6f40]
lea edx, [edi + 0x104]
inc eax
mov dword [ebp - 0x6f40], eax
cmp eax, dword [edi + 0x30]
jb 0x479200
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.00518e70
lea ecx, [ebp - 0x240c]
call fcn.0053f820
lea ecx, [ebp - 0x2364]
call fcn.0053f820
lea ecx, [ebp - 0x2680]
call fcn.00545210
lea ecx, [ebp - 0x2568]
call fcn.00545210
lea ecx, [ebp - 0x28c4]
call fcn.00545210
lea ecx, [ebp - 0x21f0]
mov byte [ebp - 4], 0x45
call fcn.00545210
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47bd26
test dword [edi + 0x34], 0x1000
jne 0x47bd26
push 0
push 0x666460
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x6658b8
push dword [eax + 0x38]
call fcn.0051a1d0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x26
push dword [eax + 0x34]
call fcn.00516e60
push 0xc
lea ecx, [ebp - 0x20e4]
call fcn.00401d20
lea ecx, [ebp - 0x20e4]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2028]
mov byte [ebp - 4], 0x6f
call fcn.00401d20
lea ecx, [ebp - 0x2028]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x23d4]
mov byte [ebp - 4], 0x70
call fcn.00401d20
lea ecx, [ebp - 0x23d4]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2000]
mov byte [ebp - 4], 0x71
call fcn.00401d20
lea ecx, [ebp - 0x2000]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x22d8]
mov byte [ebp - 4], 0x72
call fcn.00401d20
lea ecx, [ebp - 0x22d8]
call fcn.005453c0
push 0x24
lea ecx, [ebp - 0x2540]
mov byte [ebp - 4], 0x73
call fcn.00402080
lea ecx, [ebp - 0x2540]
call fcn.00513600
mov byte [ebp - 4], 0x74
xor esi, esi
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
mov dword [ebp - 0x6f54], esi
push dword [eax + 0xa8]
call fcn.00518e70
push esi
push 0x6664a0
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov dword [ebp - 0x6f40], esi
cmp dword [edi + 0x30], esi
jbe 0x479bbe
mov esi, dword [ebp - 0x6f70]
mov dword [ebp - 0x6f7c], esi
nop dword [eax]
lea ecx, [ebp - 0x22d8]
call fcn.00544c70
test al, al
je 0x47961c
lea eax, [ebp - 0x22d8]
push eax
push 1
lea ecx, [ebp - 0x2184]
call fcn.00544f70
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
mov edx, esi
mov ecx, eax
call fcn.004eca20
mov esi, dword [ebp - 0x6f7c]
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x479bb8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6664f0
lea ecx, [ebp - 0x2184]
call fcn.00544f70
push eax
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00544fe0
push 0x260
lea ecx, [ebp - 0x58b8]
call fcn.00401d70
push 1
lea ecx, [ebp - 0x20e4]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x58b8]
call fcn.004016d0
push 3
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x75
call fcn.00543c00
lea ecx, [ebp - 0x58b8]
call fcn.00401810
test al, al
je 0x479b8a
nop
push 1
lea ecx, [ebp - 0x58b8]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2028]
call fcn.005452f0
push 0x66652c
lea ecx, [ebp - 0x2028]
call fcn.00545260
test al, al
je 0x47970e
push 0
push 1
push 1
push 0
push 0x66653c
lea ecx, [ebp - 0x2028]
call fcn.005438b0
cmp eax, 1
jne 0x479b77
inc dword [ebp - 0x6f54]
lea ecx, [ebp - 0x58b8]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666550
push 1
call fcn.00401870
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2028]
call fcn.00544fe0
push 0x100
lea ecx, [ebp - 0x2028]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2540]
call fcn.005133c0
test al, al
je 0x479b77
lea eax, [ebp - 0x2000]
push eax
push 0x622cbc
push 0x666578
lea ecx, [ebp - 0x2540]
call fcn.00512b90
test eax, eax
je 0x479938
push 0
push 1
push 1
push 0
push 0x66658c
lea ecx, [ebp - 0x2000]
call fcn.005438b0
test eax, eax
jne 0x479938
push eax
push 1
push 1
push eax
push 0x6665ac
lea ecx, [ebp - 0x2000]
call fcn.005438b0
test eax, eax
jne 0x479938
push 0x6665c8
lea ecx, [ebp - 0x2000]
call fcn.005452a0
test al, al
jne 0x479938
push 0
push 1
push 1
push 0
push 0x6665e0
lea ecx, [ebp - 0x2000]
call fcn.005438b0
test eax, eax
jne 0x479938
push eax
push 1
push 1
push eax
push 0x6665fc
lea ecx, [ebp - 0x2000]
call fcn.005438b0
test eax, eax
jne 0x479938
push eax
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x666614
lea ecx, [ebp - 0x2000]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x479938
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2000]
call fcn.00544f70
push eax
mov ecx, esi
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x666650
push 0
push 0x6f
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x479938
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2028]
call fcn.00544f70
push eax
push 0x666578
push 0x6f
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666664
lea ecx, [ebp - 0x2028]
call fcn.00544f70
push eax
push 0x665d2c
mov ecx, esi
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x2000]
call fcn.00544f70
push eax
push 0x666698
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
lea eax, [ebp - 0x2a54]
mov dword [ebp - 0x6f2c], 0
push eax
push 0x622cbc
xorps xmm0, xmm0
lea ecx, [ebp - 0x2540]
push 0x6666b8
movups xmmword [ebp - 0x6f3c], xmm0
call fcn.00512c90
test al, al
je 0x479b77
lea eax, [ebp - 0x2a54]
push eax
lea eax, [ebp - 0x6f3c]
push eax
lea ecx, [ebp - 0x2540]
call fcn.005122e0
test al, al
je 0x479b77
lea eax, [ebp - 0x2000]
push eax
lea eax, [ebp - 0x6f3c]
push eax
lea ecx, [ebp - 0x2540]
call fcn.005125f0
test eax, eax
je 0x479b56
push 0
push 1
push 1
push 0
push 0x66658c
lea ecx, [ebp - 0x2000]
call fcn.005438b0
test eax, eax
jne 0x479b77
push eax
push 1
push 1
push eax
push 0x6666e4
lea ecx, [ebp - 0x2000]
call fcn.005438b0
test eax, eax
jne 0x479b77
push eax
push 1
push 1
push eax
push 0x6665ac
lea ecx, [ebp - 0x2000]
call fcn.005438b0
test eax, eax
jne 0x479b77
push eax
push 1
push 1
push eax
push 0x666708
lea ecx, [ebp - 0x2000]
call fcn.005438b0
test eax, eax
jne 0x479b77
push eax
push 1
push 1
push eax
push 0x6665fc
lea ecx, [ebp - 0x2000]
call fcn.005438b0
test eax, eax
jne 0x479b77
push eax
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x666724
lea ecx, [ebp - 0x2000]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x479b56
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2000]
call fcn.00544f70
push eax
mov ecx, esi
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x666750
push 0
push 0x6f
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x479b56
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2028]
call fcn.00544f70
push eax
push 0x6666b8
push 0x6f
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666664
lea ecx, [ebp - 0x2028]
call fcn.00544f70
push eax
push 0x665d2c
mov ecx, esi
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x2000]
call fcn.00544f70
push eax
push 0x66676c
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
lea eax, [ebp - 0x2a54]
push eax
lea eax, [ebp - 0x6f3c]
push eax
lea ecx, [ebp - 0x2540]
call fcn.005122e0
test al, al
jne 0x479991
lea ecx, [ebp - 0x58b8]
call fcn.004017d0
test al, al
jne 0x4796c0
lea ecx, [ebp - 0x58b8]
mov byte [ebp - 4], 0x74
call fcn.00401720
mov eax, dword [ebp - 0x6f40]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f7c], esi
mov dword [ebp - 0x6f40], eax
cmp eax, dword [edi + 0x30]
jb 0x4795d0
mov esi, dword [ebp - 0x6f54]
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47bce0
test esi, esi
jne 0x479bf6
lea ecx, [ebp - 0x22d8]
call fcn.00544c70
test al, al
je 0x479bf6
push esi
push 0x6667a0
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
jmp 0x47bce0
push 0
push 0x6667f0
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f54], 0
jbe 0x479f90
mov esi, dword [ebp - 0x6f70]
mov dword [ebp - 0x6f40], esi
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x479f90
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6664f0
lea ecx, [ebp - 0x2184]
call fcn.00544f70
push eax
push dword [ebp - 0x6f54]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00544fe0
push 0x260
lea ecx, [ebp - 0x4cd8]
call fcn.00401d70
push 1
lea ecx, [ebp - 0x20e4]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x4cd8]
call fcn.004016d0
push 3
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x76
call fcn.00543c00
lea ecx, [ebp - 0x4cd8]
call fcn.00401810
test al, al
je 0x479f62
nop dword [eax + eax]
push 1
lea ecx, [ebp - 0x4cd8]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2028]
call fcn.005452f0
push 0x66652c
lea ecx, [ebp - 0x2028]
call fcn.00545260
test al, al
je 0x479d1e
push 0
push 1
push 1
push 0
push 0x66653c
lea ecx, [ebp - 0x2028]
call fcn.005438b0
cmp eax, 1
jne 0x479f4f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666550
push 1
lea ecx, [ebp - 0x4cd8]
call fcn.00401870
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2028]
call fcn.00544fe0
push 0x100
lea ecx, [ebp - 0x2028]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2540]
call fcn.005133c0
test al, al
je 0x479f4f
lea eax, [ebp - 0x2000]
push eax
push 0x622cbc
push 0x666830
lea ecx, [ebp - 0x2540]
call fcn.00512b90
test eax, eax
je 0x479f4f
push 0
push 1
push 1
push 0
push 0x66658c
lea ecx, [ebp - 0x2000]
call fcn.005438b0
test eax, eax
jne 0x479f4f
push eax
push 1
push 1
push eax
push 0x6666e4
lea ecx, [ebp - 0x2000]
call fcn.005438b0
test eax, eax
jne 0x479f4f
push eax
push 1
push 1
push eax
push 0x6665ac
lea ecx, [ebp - 0x2000]
call fcn.005438b0
test eax, eax
jne 0x479f4f
push eax
push 1
push 1
push eax
push 0x666708
lea ecx, [ebp - 0x2000]
call fcn.005438b0
test eax, eax
jne 0x479f4f
push eax
push 1
push 1
push eax
push 0x6665fc
lea ecx, [ebp - 0x2000]
call fcn.005438b0
test eax, eax
jne 0x479f4f
push eax
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x6668a0
lea ecx, [ebp - 0x2000]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x479f4f
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2000]
call fcn.00544f70
push eax
mov ecx, esi
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6668e0
push 0
push 0x70
push dword [eax + 0xa8]
call fcn.00499eb0
mov esi, eax
cmp esi, 0xffffffff
je 0x479f49
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2028]
call fcn.00544f70
push eax
push 0x666910
push 0x70
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666664
lea ecx, [ebp - 0x2028]
call fcn.00544f70
mov esi, dword [ebp - 0x6f40]
mov ecx, esi
push eax
push 0x665d2c
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x2000]
call fcn.00544f70
push eax
push 0x666970
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
jmp 0x479f4f
mov esi, dword [ebp - 0x6f40]
lea ecx, [ebp - 0x4cd8]
call fcn.004017d0
test al, al
jne 0x479cd0
lea ecx, [ebp - 0x4cd8]
mov byte [ebp - 4], 0x74
call fcn.00401720
mov eax, dword [ebp - 0x6f54]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f54], eax
cmp eax, dword [edi + 0x30]
jb 0x479c28
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47bce0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6669b8
lea ecx, [edi + 0x314]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00544fe0
push 0
push 0x666a10
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f54], 0
jbe 0x47a5c1
mov esi, dword [ebp - 0x6f70]
mov dword [ebp - 0x6f40], esi
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47a5c1
push 0xc
lea ecx, [ebp - 0x2734]
call fcn.00401d20
lea ecx, [ebp - 0x2734]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x276c]
mov byte [ebp - 4], 0x77
call fcn.00401d20
lea ecx, [ebp - 0x276c]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2728]
mov byte [ebp - 4], 0x78
call fcn.00401d20
lea ecx, [ebp - 0x2728]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x268c]
mov byte [ebp - 4], 0x79
call fcn.00401d20
lea ecx, [ebp - 0x268c]
call fcn.005453c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6664f0
lea ecx, [ebp - 0x2184]
mov byte [ebp - 4], 0x7a
call fcn.00544f70
push eax
push dword [ebp - 0x6f54]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00544fe0
push 0x260
lea ecx, [ebp - 0x4818]
call fcn.00401d70
push 1
lea ecx, [ebp - 0x20e4]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x4818]
call fcn.004016d0
push 3
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x7b
call fcn.00543c00
lea ecx, [ebp - 0x4818]
call fcn.00401810
test al, al
je 0x47a567
nop dword [eax]
nop dword [eax + eax]
push 1
lea ecx, [ebp - 0x4818]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2028]
call fcn.005452f0
push 0x66652c
lea ecx, [ebp - 0x2028]
call fcn.00545260
test al, al
je 0x47a16e
push 0
push 1
push 1
push 0
push 0x66653c
lea ecx, [ebp - 0x2028]
call fcn.005438b0
cmp eax, 1
jne 0x47a554
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666550
push 1
lea ecx, [ebp - 0x4818]
call fcn.00401870
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2028]
call fcn.00544fe0
push 0x100
lea ecx, [ebp - 0x2028]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2540]
call fcn.005133c0
test al, al
je 0x47a554
lea eax, [ebp - 0x2a68]
mov dword [ebp - 0x6ec8], 0
push eax
push 0x622cbc
xorps xmm0, xmm0
lea ecx, [ebp - 0x2540]
push 0x666a44
movups xmmword [ebp - 0x6ed8], xmm0
call fcn.00512c90
test al, al
je 0x47a554
lea eax, [ebp - 0x2a68]
push eax
lea eax, [ebp - 0x6ed8]
push eax
lea ecx, [ebp - 0x2540]
call fcn.005126b0
test al, al
je 0x47a554
nop word [eax + eax]
lea eax, [ebp - 0x2734]
push eax
lea eax, [ebp - 0x6ed8]
push eax
lea ecx, [ebp - 0x2540]
call fcn.00512c50
test al, al
je 0x47a533
lea ecx, [ebp - 0x2734]
call fcn.00544f70
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.00544f70
mov edx, esi
mov ecx, eax
call fcn.0053c5e0
test al, al
jne 0x47a52d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666a70
lea ecx, [ebp - 0x2734]
call fcn.00544f70
push eax
push 0x666a94
lea ecx, [ebp - 0x2728]
call fcn.00544fe0
lea eax, [ebp - 0x276c]
push eax
push 0x622cbc
lea ecx, [ebp - 0x2728]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2540]
call fcn.00512b90
test eax, eax
je 0x47a52d
lea ecx, [ebp - 0x276c]
call fcn.00544f70
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.00544f70
mov edx, esi
mov ecx, eax
call fcn.0053c5e0
test al, al
jne 0x47a52d
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x665a8c
lea ecx, [ebp - 0x276c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x47a52d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666ac4
lea ecx, [ebp - 0x2734]
call fcn.00544f70
push eax
push 0x666a94
lea ecx, [ebp - 0x2728]
call fcn.00544fe0
lea eax, [ebp - 0x268c]
push eax
push 0x622cbc
lea ecx, [ebp - 0x2728]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2540]
call fcn.00512b90
test eax, eax
je 0x47a3d8
push 0
push 1
push 1
push 5
push 0x61e384
lea ecx, [ebp - 0x268c]
call fcn.005438b0
test eax, eax
jne 0x47a3d8
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x666ad4
push 1
lea ecx, [ebp - 0x4818]
call fcn.00401870
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x268c]
call fcn.00543350
lea ecx, [ebp - 0x268c]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
je 0x47a52d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2734]
call fcn.00544f70
push eax
push 0x666a94
lea ecx, [ebp - 0x2728]
call fcn.00544fe0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x268c]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x276c]
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0
push 0x71
push dword [eax + 0xa8]
call fcn.00499eb0
mov esi, eax
cmp esi, 0xffffffff
je 0x47a52d
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x268c]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2028]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2728]
call fcn.00544f70
push eax
push 0x71
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0x666664
lea ecx, [ebp - 0x268c]
call fcn.00544f70
mov esi, dword [ebp - 0x6f40]
mov ecx, esi
push eax
push 0x665308
call fcn.00544f70
push eax
push 0x666af0
lea ecx, [ebp - 0x2734]
call fcn.00544f70
push eax
push 0x6264cc
lea ecx, [ebp - 0x276c]
call fcn.00544f70
push eax
push 0x666b14
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
jmp 0x47a533
mov esi, dword [ebp - 0x6f40]
lea eax, [ebp - 0x2a68]
push eax
lea eax, [ebp - 0x6ed8]
push eax
lea ecx, [ebp - 0x2540]
call fcn.005126b0
test al, al
jne 0x47a230
lea ecx, [ebp - 0x4818]
call fcn.004017d0
test al, al
jne 0x47a120
lea ecx, [ebp - 0x4818]
call fcn.00401720
lea ecx, [ebp - 0x268c]
call fcn.00545210
lea ecx, [ebp - 0x2728]
call fcn.00545210
lea ecx, [ebp - 0x276c]
call fcn.00545210
lea ecx, [ebp - 0x2734]
mov byte [ebp - 4], 0x74
call fcn.00545210
mov eax, dword [ebp - 0x6f54]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f54], eax
cmp eax, dword [edi + 0x30]
jb 0x47a001
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47bce0
push 0
push 0x666b40
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x6d9c]
push 1
push 0
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6da4], eax
mov dword [ebp - 0x6da0], 0x72
call fcn.00545350
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0x7c
call fcn.00544f70
lea ecx, [edi + 0x14c]
mov dword [ebp - 0x6d90], eax
mov dword [ebp - 0x6d8c], 0
call fcn.00544f70
mov dword [ebp - 0x6d88], eax
lea ecx, [ebp - 0x6d7c]
lea eax, [ebp - 0x1fd4]
push 1
mov dword [ebp - 0x6d84], eax
mov eax, dword [edi + 4]
push 0x666b90
mov dword [ebp - 0x6d80], eax
call fcn.00545350
push 0xc
lea ecx, [ebp - 0x224c]
mov byte [ebp - 4], 0x7d
call fcn.00401d20
lea ecx, [ebp - 0x224c]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2234]
mov byte [ebp - 4], 0x7e
call fcn.00401d20
lea ecx, [ebp - 0x2234]
call fcn.005453c0
mov ecx, edi
mov byte [ebp - 4], 0x7f
call fcn.0046c7f0
test al, al
jne 0x47bcbf
xor esi, esi
mov dword [ebp - 0x6f40], esi
cmp dword [edi + 0x30], esi
jbe 0x47a857
nop dword [eax]
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47a857
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00545180
cmp eax, 3
jl 0x47a847
lea eax, [ebp - 0x6d9c]
push eax
push 1
lea ecx, [ebp - 0x2184]
call fcn.00544f70
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
mov edx, esi
mov ecx, eax
call fcn.004eca20
mov esi, dword [ebp - 0x6f40]
test al, al
je 0x47a847
push esi
lea ecx, [edi + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24c8]
mov dword [ebp - 0x6d8c], eax
call fcn.00544f70
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x224c]
call fcn.00544fe0
lea ecx, [ebp - 0x224c]
call fcn.00544f70
mov ecx, eax
call fcn.0052fcf0
test al, al
je 0x47a847
lea ecx, [ebp - 0x224c]
call fcn.00544f70
push eax
lea eax, [ebp - 0x6da4]
mov ecx, edi
push eax
call fcn.0048d690
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47a857
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25e4]
call fcn.00544f70
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x224c]
call fcn.00544fe0
lea ecx, [ebp - 0x224c]
call fcn.00544f70
mov ecx, eax
call fcn.0052fcf0
test al, al
je 0x47a847
push 0
lea ecx, [ebp - 0x224c]
call fcn.00544c90
lea ecx, [ebp - 0x224c]
call fcn.00544f70
push eax
lea eax, [ebp - 0x6da4]
mov ecx, edi
push eax
call fcn.0048d690
inc esi
mov dword [ebp - 0x6f40], esi
cmp esi, dword [edi + 0x30]
jb 0x47a6c0
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47bcbf
lea ecx, [ebp - 0x2638]
mov dword [ebp - 0x6d8c], 0x65f3a0
call fcn.00544f70
push eax
lea eax, [ebp - 0x6da4]
mov ecx, edi
push eax
call fcn.0048d690
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47bcbf
lea eax, [ebp - 0x2644]
push eax
lea ecx, [ebp - 0x224c]
call fcn.005452c0
push 0
lea ecx, [ebp - 0x224c]
call fcn.00544c90
lea ecx, [ebp - 0x224c]
call fcn.00544f70
push eax
lea eax, [ebp - 0x6da4]
mov ecx, edi
push eax
call fcn.0048d690
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47bcbf
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x47a94a
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666bb0
push esi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00544fe0
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x47a900
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666c40
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00544fe0
cmp dword [ebp - 0x6fa8], 0
je 0x47a9b1
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x666c40
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00544fe0
cmp dword [ebp - 0x6f74], 0
mov dword [ebp - 0x6f54], 0
jbe 0x47abbc
mov eax, dword [ebp - 0x6f68]
mov esi, dword [ebp - 0x6f70]
sub eax, esi
mov dword [ebp - 0x6f7c], eax
nop dword [eax]
push 0
push 0x20019
lea ecx, [eax + esi]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x47ab9a
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47abbc
lea eax, [ebp - 0x2234]
push eax
push 0x61d050
lea ecx, [ebp - 0x1f74]
call fcn.0053f580
test al, al
je 0x47ab9a
push 0
push 1
push 1
push 0
push 0x666ccc
lea ecx, [ebp - 0x2234]
call fcn.005438b0
lea ecx, [ebp - 0x2234]
mov dword [ebp - 0x6f48], eax
call fcn.00545180
mov edx, dword [ebp - 0x6f48]
lea ecx, [edx + 0xa]
cmp eax, ecx
jle 0x47ab9a
lea eax, [edx + 0xb]
push eax
lea ecx, [ebp - 0x2234]
call fcn.00543b90
push 3
lea ecx, [ebp - 0x2234]
call fcn.00542f40
lea ecx, [ebp - 0x2234]
call fcn.00544c70
test al, al
jne 0x47ab9a
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x664464
lea ecx, [ebp - 0x2234]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x47ab9a
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2234]
call fcn.00544f70
push eax
mov ecx, esi
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x660a20
push 0
push 0x72
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x47ab9a
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00544f70
mov ecx, dword [ebp - 0x6f7c]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.00544f70
push eax
push 0x72
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666664
mov ecx, esi
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x2234]
call fcn.00544f70
push eax
push 0x666ce8
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
mov eax, dword [ebp - 0x6f54]
add esi, 0xc
inc eax
cmp eax, dword [ebp - 0x6f74]
mov dword [ebp - 0x6f54], eax
mov eax, dword [ebp - 0x6f7c]
jb 0x47a9e0
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47bcbf
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x47ac30
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666d40
push esi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00544fe0
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x47abe6
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666d88
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00544fe0
cmp dword [ebp - 0x6fa8], 0
je 0x47ac97
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x666d88
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00544fe0
push 0
push 0x666dd0
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov esi, dword [ebp - 0x6f74]
mov dword [ebp - 0x6f7c], 0
test esi, esi
je 0x47aef4
mov eax, dword [ebp - 0x6f68]
mov esi, dword [ebp - 0x6f70]
sub eax, esi
mov dword [ebp - 0x6f54], eax
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47aeee
mov ecx, dword [ebp - 0x6f54]
push 0
push 0x20019
lea ecx, [ecx + esi]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
lea eax, [ebp - 0x2000]
push eax
push 0x660bd4
lea ecx, [ebp - 0x1f74]
call fcn.0053f580
test al, al
je 0x47aed2
lea eax, [ebp - 0x21a8]
mov dword [ebp - 0x21a8], 0
push eax
push 0x660c74
lea ecx, [ebp - 0x1f74]
call fcn.0053f4f0
test al, al
je 0x47ad56
cmp dword [ebp - 0x21a8], 0
jne 0x47aed2
push 0
push 1
push 1
push 0
push 0x66658c
lea ecx, [ebp - 0x2000]
call fcn.005438b0
test eax, eax
jne 0x47aed2
push eax
push 1
push 1
push eax
push 0x6665ac
lea ecx, [ebp - 0x2000]
call fcn.005438b0
test eax, eax
jne 0x47aed2
push eax
push 1
push 1
push eax
push 0x6665fc
lea ecx, [ebp - 0x2000]
call fcn.005438b0
test eax, eax
jne 0x47aed2
push eax
push 1
push 1
push eax
push 0x6665e0
lea ecx, [ebp - 0x2000]
call fcn.005438b0
test eax, eax
jne 0x47aed2
push eax
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x666e10
lea ecx, [ebp - 0x2000]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x47aed2
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2000]
call fcn.00544f70
push eax
mov ecx, esi
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x660bd4
push 0
push 0x74
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x47aed2
push 0
push 0
push 0
push 0
push 0
push 0x660bd4
mov ecx, esi
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.00544f70
push eax
push 0x74
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666664
mov ecx, esi
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x2000]
call fcn.00544f70
push eax
push 0x666e50
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f7c], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x47acd5
mov esi, dword [ebp - 0x6f74]
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47bcbf
push 0xc
lea ecx, [ebp - 0x2698]
call fcn.00401d20
lea ecx, [ebp - 0x2698]
call fcn.005453c0
mov byte [ebp - 4], 0x80
mov dword [ebp - 0x6f7c], 0
test esi, esi
je 0x47b1cd
mov eax, dword [ebp - 0x6f68]
mov esi, dword [ebp - 0x6f70]
sub eax, esi
mov dword [ebp - 0x6f54], eax
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47b1c7
mov ecx, dword [ebp - 0x6f54]
push 0
push 0x20019
lea ecx, [ecx + esi]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
lea eax, [ebp - 0x2000]
push eax
push 0x660d14
lea ecx, [ebp - 0x1f74]
call fcn.0053f580
test al, al
je 0x47b1ab
lea eax, [ebp - 0x21a8]
mov dword [ebp - 0x21a8], 0
push eax
push 0x660e14
lea ecx, [ebp - 0x1f74]
call fcn.0053f4f0
test al, al
je 0x47afc6
cmp dword [ebp - 0x21a8], 0
je 0x47b1ab
push 0
push 1
push 1
push 0
push 0x66658c
lea ecx, [ebp - 0x2000]
call fcn.005438b0
test eax, eax
jne 0x47b1ab
push eax
push 1
push 1
push eax
push 0x6665ac
lea ecx, [ebp - 0x2000]
call fcn.005438b0
test eax, eax
jne 0x47b1ab
push eax
push 1
push 1
push eax
push 0x6665fc
lea ecx, [ebp - 0x2000]
call fcn.005438b0
test eax, eax
jne 0x47b1ab
push eax
push 1
push 1
push eax
push 0x6665e0
lea ecx, [ebp - 0x2000]
call fcn.005438b0
test eax, eax
jne 0x47b1ab
push eax
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x666e10
lea ecx, [ebp - 0x2000]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x47b1ab
lea eax, [ebp - 0x2698]
push eax
push 0x660de0
lea ecx, [ebp - 0x1f74]
call fcn.0053f580
test al, al
je 0x47b1ab
lea ecx, [ebp - 0x2698]
call fcn.00544c70
test al, al
jne 0x47b1ab
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666ea0
lea ecx, [ebp - 0x2698]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2234]
call fcn.00544fe0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2000]
call fcn.00544f70
push eax
mov ecx, esi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2234]
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0
push 0x74
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x47b1ab
push 0
push 0
push 0
push 0
push 0
push 0x660d14
mov ecx, esi
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.00544f70
push eax
push 0x74
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666664
mov ecx, esi
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x2000]
call fcn.00544f70
push eax
push 0x666ec8
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f7c], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x47af45
mov esi, dword [ebp - 0x6f74]
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47bcb4
mov dword [ebp - 0x6f7c], 0
test esi, esi
je 0x47b45c
mov esi, dword [ebp - 0x6f70]
mov eax, dword [ebp - 0x6f68]
sub eax, esi
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f48], eax
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47b45c
mov eax, dword [ebp - 0x6f48]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f54], eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x47b43a
lea eax, [ebp - 0x21a8]
mov dword [ebp - 0x21a8], 0
push eax
push 0x666f28
lea ecx, [ebp - 0x1f74]
call fcn.0053f4f0
test al, al
je 0x47b43a
cmp dword [ebp - 0x21a8], 4
jne 0x47b43a
mov ecx, dword [ebp - 0x6f54]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666f4c
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00544fe0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x47b43a
lea eax, [ebp - 0x6cb4]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f6c], esi
call fcn.0053f120
test al, al
je 0x47b434
nop word [eax + eax]
lea eax, [ebp - 0x2000]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f74]
call fcn.0053f580
test al, al
je 0x47b412
lea ecx, [ebp - 0x2000]
call fcn.00544c70
test al, al
jne 0x47b412
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2000]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x660fd0
push 0
push 0x74
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f94], eax
cmp eax, 0xffffffff
je 0x47b412
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push 0
call fcn.00544f70
push eax
push 0x74
push dword [ebp - 0x6f94]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666664
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x2000]
call fcn.00544f70
push eax
push 0x666f78
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
lea eax, [ebp - 0x6cb4]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0053f120
test al, al
jne 0x47b300
mov dword [ebp - 0x6f6c], esi
mov esi, dword [ebp - 0x6f40]
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f7c], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x47b208
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47bcb4
push 0
push 0x666fc0
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f54], 0
jbe 0x47b86d
mov esi, dword [ebp - 0x6f70]
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47b86d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6664f0
lea ecx, [ebp - 0x2184]
call fcn.00544f70
push eax
push dword [ebp - 0x6f54]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00544fe0
push 0x260
lea ecx, [ebp - 0x3c38]
call fcn.00401d70
push 1
lea ecx, [ebp - 0x20e4]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x3c38]
call fcn.004016d0
push 3
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x81
call fcn.00543c00
lea ecx, [ebp - 0x3c38]
call fcn.00401810
test al, al
je 0x47b845
nop word [eax + eax]
push 1
lea ecx, [ebp - 0x3c38]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2028]
call fcn.005452f0
push 0x66652c
lea ecx, [ebp - 0x2028]
call fcn.00545260
test al, al
je 0x47b58e
push 0
push 1
push 1
push 0
push 0x66653c
lea ecx, [ebp - 0x2028]
call fcn.005438b0
cmp eax, 1
jne 0x47b832
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666550
push 1
lea ecx, [ebp - 0x3c38]
call fcn.00401870
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2028]
call fcn.00544fe0
lea ecx, [ebp - 0x2028]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
je 0x47b6e0
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x665cf0
push 0x6610d4
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x47b6e0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2028]
call fcn.00544f70
push eax
mov ecx, esi
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6610d4
push 0
push 0x73
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x47b832
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2028]
call fcn.00544f70
push eax
push 0
push 0x73
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666ff8
lea ecx, [ebp - 0x2028]
call fcn.00544f70
push eax
push 0x665d2c
mov ecx, esi
call fcn.00544f70
push eax
push 0x6645d4
push 0x6610d4
push 0x667030
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x665cf0
push 0x6611d0
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x47b832
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667054
push 1
lea ecx, [ebp - 0x3c38]
call fcn.00401870
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2028]
call fcn.00544fe0
lea ecx, [ebp - 0x2028]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
je 0x47b832
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2028]
call fcn.00544f70
push eax
mov ecx, esi
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6611d0
push 0
push 0x73
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x47b832
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2028]
call fcn.00544f70
push eax
push 0
push 0x73
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666ff8
lea ecx, [ebp - 0x2028]
call fcn.00544f70
push eax
push 0x665d2c
mov ecx, esi
call fcn.00544f70
push eax
push 0x6645d4
push 0x6611d0
push 0x667030
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
lea ecx, [ebp - 0x3c38]
call fcn.004017d0
test al, al
jne 0x47b540
lea ecx, [ebp - 0x3c38]
mov byte [ebp - 4], 0x80
call fcn.00401720
mov eax, dword [ebp - 0x6f54]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f54], eax
cmp eax, dword [edi + 0x30]
jb 0x47b497
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47bcb4
lea eax, [ebp - 0x22d8]
push eax
lea ecx, [ebp - 0x2028]
call fcn.005452c0
push 1
lea ecx, [ebp - 0x2028]
call fcn.00544c90
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667070
lea ecx, [ebp - 0x2028]
call fcn.005435c0
lea ecx, [ebp - 0x2028]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
je 0x47ba64
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x665cf0
push 0x6612a0
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x47ba64
push 0
lea ecx, [ebp - 0x2028]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2540]
call fcn.005133c0
test al, al
je 0x47ba64
lea eax, [ebp - 0x29f4]
push eax
push 0x622cbc
push 0x666578
lea ecx, [ebp - 0x2540]
call fcn.00512c90
test al, al
jne 0x47b9a7
lea eax, [ebp - 0x29f4]
push eax
push 0x622cbc
push 0x6666b8
lea ecx, [ebp - 0x2540]
call fcn.00512c90
test al, al
jne 0x47b9a7
lea eax, [ebp - 0x29f4]
push eax
push 0x622cbc
push 0x660858
lea ecx, [ebp - 0x2540]
call fcn.00512c90
test al, al
jne 0x47b9a7
lea eax, [ebp - 0x29f4]
push eax
push 0x622cbc
push 0x666a44
lea ecx, [ebp - 0x2540]
call fcn.00512c90
test al, al
je 0x47ba64
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2028]
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x65f3a0
push 0x6612a0
push 0
push 0x73
push dword [eax + 0xa8]
call fcn.00499eb0
mov esi, eax
cmp esi, 0xffffffff
je 0x47ba64
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f3a0
lea ecx, [ebp - 0x2028]
call fcn.00544f70
push eax
push 0
push 0x73
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666664
lea ecx, [ebp - 0x2028]
call fcn.00544f70
push eax
push 0x665d2c
push 0x6653ac
push 0x667098
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x665cf0
push 0x6613a0
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x47bcb4
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x47baf0
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666d40
push esi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00544fe0
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x47baa6
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666d40
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00544fe0
cmp dword [ebp - 0x6fa8], 0
je 0x47bb57
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x666d40
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00544fe0
cmp dword [ebp - 0x6f74], 0
mov dword [ebp - 0x6f7c], 0
jbe 0x47bca1
mov eax, dword [ebp - 0x6f70]
sub eax, esi
mov dword [ebp - 0x6f54], eax
nop dword [eax]
mov ecx, esi
call fcn.00544f70
xor edx, edx
mov ecx, eax
call fcn.0053c5e0
test al, al
je 0x47bc85
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47bca1
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
lea ecx, [ecx + esi]
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6613a0
push 0
push 0x73
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x47bc85
mov ecx, dword [ebp - 0x6f54]
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ecx + esi]
call fcn.00544f70
push eax
push 0
mov ecx, esi
call fcn.00544f70
push eax
push 0x73
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666ff8
mov ecx, esi
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x665d2c
lea ecx, [ecx + esi]
call fcn.00544f70
push eax
push 0x6645d4
push 0x6613a0
push 0x667030
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f7c], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x47bb80
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.00518e70
lea ecx, [ebp - 0x2698]
call fcn.00545210
lea ecx, [ebp - 0x2234]
call fcn.00545210
lea ecx, [ebp - 0x224c]
call fcn.00545210
lea ecx, [ebp - 0x6da4]
call fcn.00402710
lea ecx, [ebp - 0x2540]
call fcn.00401e40
lea ecx, [ebp - 0x22d8]
call fcn.00545210
lea ecx, [ebp - 0x2000]
call fcn.00545210
lea ecx, [ebp - 0x23d4]
call fcn.00545210
lea ecx, [ebp - 0x2028]
call fcn.00545210
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x45
call fcn.00545210
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47f15d
test dword [edi + 0x34], 0x1000
jne 0x47f15d
push 0
push 0x6670f0
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x667130
push dword [eax + 0x38]
call fcn.0051a1d0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x28
push dword [eax + 0x34]
call fcn.00516e60
mov eax, dword [edi + 0x30]
xor esi, esi
mov dword [ebp - 0x6fe8], 0x66716c
mov dword [ebp - 0x6fe4], 0x66717c
mov dword [ebp - 0x6fe0], 0x66718c
mov dword [ebp - 0x6fdc], 0x6671a4
mov dword [ebp - 0x6fd8], 0x6671b8
mov dword [ebp - 0x6fd4], 0x645d90
mov dword [ebp - 0x6fd0], 0x6665c8
mov dword [ebp - 0x6fcc], 0x6665fc
mov dword [ebp - 0x6fc4], 0x66146c
mov dword [ebp - 0x6fc0], 0x6614a8
mov dword [ebp - 0x6fbc], 0x661490
mov dword [ebp - 0x6fb8], 0x645d78
mov dword [ebp - 0x6fb4], 0x66152c
mov dword [ebp - 0x6fb0], 0x6615ac
test eax, eax
je 0x47be6a
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x645d20
push esi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00544fe0
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x47be20
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6671d0
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00544fe0
cmp dword [ebp - 0x6fa8], 0
je 0x47bed1
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x6671d0
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00544fe0
push 0xc
lea ecx, [ebp - 0x2010]
call fcn.00401d20
lea ecx, [ebp - 0x2010]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2398]
mov byte [ebp - 4], 0x82
call fcn.00401d20
lea ecx, [ebp - 0x2398]
call fcn.005453c0
mov byte [ebp - 4], 0x83
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.00518e70
push 0
push 0x667230
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov esi, dword [ebp - 0x6f74]
mov dword [ebp - 0x6f7c], 0
test esi, esi
je 0x47c178
mov esi, dword [ebp - 0x6f70]
mov eax, dword [ebp - 0x6f68]
sub eax, esi
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f48], eax
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47c172
mov eax, dword [ebp - 0x6f48]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f94], eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x47c150
xor esi, esi
lea eax, [ebp - 0x2010]
push eax
push dword [ebp + esi*4 - 0x6fc4]
lea ecx, [ebp - 0x1f74]
call fcn.0053f580
test al, al
je 0x47c13a
lea ecx, [ebp - 0x2010]
call fcn.00544c70
test al, al
jne 0x47c13a
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x66728c
lea ecx, [ebp - 0x2010]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x47c13a
xor eax, eax
mov dword [ebp - 0x6f54], eax
nop dword [eax + eax]
push 0
push 1
push 1
push 0
push dword [ebp + eax*4 - 0x6fe8]
lea ecx, [ebp - 0x2010]
call fcn.005438b0
dec eax
cmp eax, 0x10
jbe 0x47c13a
mov eax, dword [ebp - 0x6f54]
inc eax
mov dword [ebp - 0x6f54], eax
cmp eax, 8
jb 0x47c010
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.00544f70
push eax
push dword [ebp + esi*4 - 0x6fc4]
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x1f
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f54], eax
cmp eax, 0xffffffff
je 0x47c13a
push 0
push 0
push 0
lea ecx, [ebp - 0x2010]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
push dword [ebp + esi*4 - 0x6fc4]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f94]
push eax
push 0
call fcn.00544f70
push eax
push 0x1f
push dword [ebp - 0x6f54]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666664
lea ecx, [ebp - 0x2010]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x6672b0
call fcn.00544f70
push eax
push 0x6645d4
push dword [ebp + esi*4 - 0x6fc4]
lea ecx, [ebp - 0x1f80]
push 0x6652b0
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
inc esi
cmp esi, 6
jb 0x47bfa1
mov dword [ebp - 0x6f6c], esi
mov esi, dword [ebp - 0x6f40]
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f7c], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x47bf60
mov esi, dword [ebp - 0x6f74]
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47f143
push 0x18
lea ecx, [ebp - 0x265c]
call fcn.00401d50
lea ecx, [ebp - 0x265c]
call fcn.00542180
mov byte [ebp - 4], 0x84
mov dword [ebp - 0x6f4c], 0
test esi, esi
je 0x47c46f
mov esi, dword [ebp - 0x6f70]
mov eax, dword [ebp - 0x6f68]
sub eax, esi
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f48], eax
nop
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47c46f
mov eax, dword [ebp - 0x6f48]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f94], eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
lea ecx, [ebp - 0x1f74]
call fcn.0053f840
test eax, eax
je 0x47c44d
lea eax, [ebp - 0x2010]
push eax
push 0x645e3c
lea ecx, [ebp - 0x1f74]
call fcn.0053f580
test al, al
je 0x47c44d
push 1
push 0x621ae8
lea ecx, [ebp - 0x2010]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x265c]
call fcn.00541ed0
xor esi, esi
lea ecx, [ebp - 0x265c]
mov dword [ebp - 0x6f6c], esi
call fcn.00542070
test eax, eax
je 0x47c447
push esi
lea ecx, [ebp - 0x265c]
call fcn.00542080
push eax
lea ecx, [ebp - 0x2010]
call fcn.005452f0
lea ecx, [ebp - 0x2010]
call fcn.00544c70
test al, al
jne 0x47c42d
xor eax, eax
mov byte [ebp - 0x6f7c], 1
mov dword [ebp - 0x6f54], eax
nop dword [eax]
push 0
push 1
push 1
push 0
push dword [ebp + eax*4 - 0x6fe8]
lea ecx, [ebp - 0x2010]
call fcn.005438b0
push 0
lea ecx, [edi + 0x14c]
mov esi, eax
call fcn.00544f70
push eax
push 0x66728c
lea ecx, [ebp - 0x2010]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
lea ecx, [esi - 1]
mov edx, 0x10
cmp edx, ecx
mov edx, dword [ebp - 0x6f7c]
sbb cl, cl
and cl, dl
xor edx, edx
test al, al
movzx ecx, cl
cmove edx, ecx
test dl, dl
je 0x47c427
mov eax, dword [ebp - 0x6f54]
inc eax
mov dword [ebp - 0x6f7c], edx
mov dword [ebp - 0x6f54], eax
cmp eax, 7
jb 0x47c2b0
test dl, dl
je 0x47c427
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x645e3c
push 1
push 0x1f
push dword [eax + 0xa8]
call fcn.00499eb0
mov esi, eax
cmp esi, 0xffffffff
je 0x47c427
push 0
push 0
lea ecx, [ebp - 0x2010]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2010]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
push 0x645e3c
call fcn.00544f70
mov ecx, dword [ebp - 0x6f94]
push eax
push 0
call fcn.00544f70
push eax
push 0x1f
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666664
lea ecx, [ebp - 0x2010]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x6672b0
call fcn.00544f70
push eax
push 0x6645d4
push 0x645e3c
push 0x6652b0
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
mov esi, dword [ebp - 0x6f6c]
inc esi
lea ecx, [ebp - 0x265c]
mov dword [ebp - 0x6f6c], esi
call fcn.00542070
cmp esi, eax
jb 0x47c272
mov esi, dword [ebp - 0x6f40]
mov eax, dword [ebp - 0x6f4c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f4c], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x47c1d0
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47f138
push 4
lea ecx, [ebp - 0x1fe4]
call fcn.00401d40
lea ecx, [ebp - 0x1fe4]
call fcn.0053f8e0
push 4
lea ecx, [ebp - 0x2084]
mov byte [ebp - 4], 0x85
call fcn.00401d40
lea ecx, [ebp - 0x2084]
call fcn.0053f8e0
mov byte [ebp - 4], 0x86
xor esi, esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x47c51b
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6461c8
push esi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00544fe0
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x47c4d1
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6672c8
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00544fe0
cmp dword [ebp - 0x6fa8], 0
je 0x47c582
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x6672c8
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00544fe0
push 0xc
lea ecx, [ebp - 0x2108]
call fcn.00401d20
lea ecx, [ebp - 0x2108]
call fcn.005453c0
push 0
push 0x667330
lea ecx, [ebp - 0x1fd4]
mov byte [ebp - 4], 0x87
call fcn.005322d0
cmp dword [ebp - 0x6f74], 0
mov dword [ebp - 0x6f7c], 0
jbe 0x47c8f9
mov esi, dword [ebp - 0x6f70]
mov eax, dword [ebp - 0x6f68]
sub eax, esi
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f48], eax
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47c8f9
mov eax, dword [ebp - 0x6f48]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f94], eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x47c8d7
lea eax, [ebp - 0x6cb4]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f6c], esi
call fcn.0053f1c0
test al, al
je 0x47c8d1
mov ecx, dword [ebp - 0x6f94]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
push 0x61d048
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00544fe0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fe4]
call fcn.0053f870
test al, al
je 0x47c8af
lea eax, [ebp - 0x2108]
push eax
push 0x6287d4
lea ecx, [ebp - 0x1fe4]
call fcn.0053f580
push 0
lea ecx, [ebp - 0x2108]
call fcn.00545220
cmp word [eax], 0x40
jne 0x47c70a
push 0
lea ecx, [ebp - 0x2108]
call fcn.00544f70
push eax
push 0x80
lea ecx, [ebp - 0x2108]
call fcn.00544760
push 0
push 0x80
lea ecx, [ebp - 0x2108]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2108]
call fcn.00544f70
push eax
call dword [0x5fd6a0]
lea eax, [ebp - 0x2010]
push eax
push 0x657bec
lea ecx, [ebp - 0x1fe4]
call fcn.0053f580
lea ecx, [ebp - 0x2108]
call fcn.00544c70
test al, al
je 0x47c743
lea ecx, [ebp - 0x2010]
call fcn.00544c70
test al, al
jne 0x47c8af
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x667384
lea ecx, [ebp - 0x2010]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x47c8af
xor eax, eax
mov dword [ebp - 0x6f54], eax
nop dword [eax]
push 0
push 1
push 1
push 0
push dword [ebp + eax*4 - 0x6fe8]
lea ecx, [ebp - 0x2010]
call fcn.005438b0
dec eax
cmp eax, 0x10
jbe 0x47c8af
mov eax, dword [ebp - 0x6f54]
inc eax
mov dword [ebp - 0x6f54], eax
cmp eax, 7
jb 0x47c780
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2108]
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x20
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f54], eax
cmp eax, 0xffffffff
je 0x47c8af
push 0
push 0
push 0
lea ecx, [ebp - 0x2010]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
push 0
call fcn.00544f70
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
push 0x20
push dword [ebp - 0x6f54]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666664
lea ecx, [ebp - 0x2010]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x6672b0
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x2108]
call fcn.00544f70
push eax
push 0x6652b0
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
lea eax, [ebp - 0x6cb4]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0053f1c0
test al, al
jne 0x47c643
mov dword [ebp - 0x6f6c], esi
mov esi, dword [ebp - 0x6f40]
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f7c], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x47c5e1
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47f117
push 0
push 0x6673b0
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
push 0xc
lea ecx, [ebp - 0x20b4]
call fcn.00401d20
lea ecx, [ebp - 0x20b4]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2380]
mov byte [ebp - 4], 0x88
call fcn.00401d20
lea ecx, [ebp - 0x2380]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x20f0]
mov byte [ebp - 4], 0x89
call fcn.00401d20
lea ecx, [ebp - 0x20f0]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x21fc]
mov byte [ebp - 4], 0x8a
call fcn.00401d20
lea ecx, [ebp - 0x21fc]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2374]
mov byte [ebp - 4], 0x8b
call fcn.00401d20
lea ecx, [ebp - 0x2374]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x20c0]
mov byte [ebp - 4], 0x8c
call fcn.00401d20
lea ecx, [ebp - 0x20c0]
call fcn.005453c0
push 0xfc8
lea ecx, [ebp - 0x6880]
mov byte [ebp - 4], 0x8d
call fcn.00401dc0
lea ecx, [ebp - 0x6880]
call fcn.00538310
mov byte [ebp - 4], 0x8e
xor esi, esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x47ca4a
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6619b8
push esi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00544fe0
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x47ca00
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x661c88
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00544fe0
cmp dword [ebp - 0x6fa8], 0
je 0x47cab1
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x661c88
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00544fe0
cmp dword [ebp - 0x6f74], 0
mov dword [ebp - 0x6f54], 0
jbe 0x47cfdd
mov esi, dword [ebp - 0x6f70]
mov eax, dword [ebp - 0x6f68]
sub eax, esi
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f48], eax
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47cfdd
mov ecx, dword [ebp - 0x6f48]
push 1
lea ecx, [ecx + esi]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00545040
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x47cfbb
lea eax, [ebp - 0x6cb4]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f6c], esi
call fcn.0053f120
test al, al
je 0x47cfb5
nop word [eax + eax]
mov ecx, dword [ebp - 0x6cb4]
call fcn.0053d410
test al, al
je 0x47cf93
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [edi + 0x314]
push 0x6673f0
call fcn.00544f70
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00544fe0
lea ecx, [ebp - 0x20c0]
call fcn.00544f70
xor edx, edx
mov ecx, eax
call fcn.0053c5e0
test al, al
jne 0x47cf93
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00544fe0
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x20c0]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2380]
call fcn.005438b0
test eax, eax
jne 0x47cf93
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2380]
call fcn.005435c0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x2374]
call fcn.005452f0
lea eax, [ebp - 0x20b4]
mov ecx, edi
push eax
lea eax, [ebp - 0x20f0]
push eax
lea eax, [ebp - 0x2374]
push eax
call fcn.00471bc0
lea ecx, [ebp - 0x20f0]
call fcn.00544c70
test al, al
je 0x47cc8a
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x20f0]
call fcn.005452f0
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x667408
lea ecx, [ebp - 0x20f0]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x47cf93
push 0
push 1
push 1
push 0
push 0x66741c
lea ecx, [ebp - 0x20f0]
call fcn.005438b0
cmp eax, 1
je 0x47cf93
push 0
push 1
push 1
push 0
push 0x667438
lea ecx, [ebp - 0x20f0]
call fcn.005438b0
cmp eax, 1
je 0x47cf93
push 0
push 1
push 1
push 0
push 0x61d050
lea ecx, [ebp - 0x20f0]
call fcn.005438b0
cmp eax, 1
je 0x47cf93
lea ecx, [ebp - 0x20b4]
call fcn.00544c70
lea ecx, [ebp - 0x20b4]
test al, al
je 0x47cd3c
push 0x667460
call fcn.005452f0
jmp 0x47cd5c
push 0
push 0
push 0x61d050
push 0x61e29c
call fcn.005430c0
push 0
lea ecx, [ebp - 0x20b4]
call fcn.005449e0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x624a08
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2148]
call fcn.00544fe0
push 0
lea ecx, [ebp - 0x2148]
call fcn.00544f70
push eax
lea eax, [ebp - 0x20b4]
mov ecx, edi
push eax
call fcn.00470120
lea ecx, [ebp - 0x20b4]
call fcn.00544f70
push eax
push 0
call dword [0x5fdafc]
test eax, eax
jne 0x47cf93
lea ecx, [ebp - 0x20b4]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x6880]
call fcn.00538170
test al, al
je 0x47ce8c
push 0x61d050
push str.CompanyName
lea ecx, [ebp - 0x6880]
call fcn.00538190
push eax
lea ecx, [ebp - 0x21fc]
call fcn.005452f0
push 0
push 1
push 1
push 0
push str.Microsoft
lea ecx, [ebp - 0x21fc]
call fcn.005438b0
cmp eax, 1
je 0x47cf93
push 0
push 1
push 1
push 0
push 0x6674bc
lea ecx, [ebp - 0x21fc]
call fcn.005438b0
cmp eax, 1
je 0x47cf93
push 0
push 1
push 1
push 0
push 0x6674d8
lea ecx, [ebp - 0x21fc]
call fcn.005438b0
cmp eax, 1
je 0x47cf93
push 0
push 1
push 1
push 0
push 0x6581a0
lea ecx, [ebp - 0x21fc]
call fcn.005438b0
cmp eax, 1
je 0x47cf93
push 0
lea ecx, [ebp - 0x20b4]
call fcn.00544f70
push eax
push 0
push 1
lea ecx, [ebp - 0x20b4]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x20f0]
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x21
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f94], eax
cmp eax, 0xffffffff
je 0x47cf93
mov ecx, dword [ebp - 0x6f40]
push 0
push dword [ebp - 0x6cb4]
push 0
push 0
push 0
push 0
call fcn.00544f70
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
push 0x21
push dword [ebp - 0x6f94]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666664
lea ecx, [ebp - 0x20b4]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x667500
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x20f0]
call fcn.00544f70
push eax
push 0x6652b0
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
lea eax, [ebp - 0x6cb4]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0053f120
test al, al
jne 0x47cb60
mov dword [ebp - 0x6f6c], esi
mov esi, dword [ebp - 0x6f40]
mov eax, dword [ebp - 0x6f54]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f54], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x47cae2
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47f0ca
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x47d051
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f4d8
push esi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00544fe0
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x47d007
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f530
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00544fe0
cmp dword [ebp - 0x6fa8], 0
je 0x47d0b8
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x65f530
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00544fe0
cmp dword [ebp - 0x6f74], 0
mov dword [ebp - 0x6fc0], 0x667518
mov dword [ebp - 0x6fbc], 0x667558
mov dword [ebp - 0x6fb8], 0x667578
mov dword [ebp - 0x6fb4], 0x667594
mov dword [ebp - 0x6fb0], 0x6675b0
mov dword [ebp - 0x6f7c], 0
jbe 0x47d6d4
mov ecx, dword [ebp - 0x6f70]
mov eax, esi
sub eax, ecx
mov dword [ebp - 0x6f40], ecx
mov dword [ebp - 0x6f48], eax
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47d6d4
xor esi, esi
mov dword [ebp - 0x6f6c], esi
nop
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47d6b4
mov ecx, dword [ebp - 0x6f48]
add ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + esi*4 - 0x6fc0]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00544fe0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x47d6a4
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f54], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.0053f1c0
test al, al
je 0x47d6a4
mov esi, dword [ebp - 0x6f40]
nop dword [eax]
mov ecx, dword [ebp - 0x6cb4]
call fcn.0053d410
test al, al
je 0x47d676
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [edi + 0x314]
push 0x6673f0
call fcn.00544f70
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00544fe0
lea ecx, [ebp - 0x20c0]
call fcn.00544f70
xor edx, edx
mov ecx, eax
call fcn.0053c5e0
test al, al
jne 0x47d676
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
mov ecx, esi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00544fe0
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x20c0]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2380]
call fcn.005438b0
test eax, eax
jne 0x47d676
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2380]
call fcn.005435c0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x2374]
call fcn.005452f0
lea eax, [ebp - 0x20b4]
mov ecx, edi
push eax
lea eax, [ebp - 0x20f0]
push eax
lea eax, [ebp - 0x2374]
push eax
call fcn.00471bc0
lea ecx, [ebp - 0x20f0]
call fcn.00544c70
lea ecx, [ebp - 0x20f0]
test al, al
je 0x47d2fb
push dword [ebp - 0x6cb4]
call fcn.005452f0
jmp 0x47d3bb
push 0
push 1
push 1
push 0
push 0x66741c
call fcn.005438b0
cmp eax, 1
je 0x47d676
push 0
push 1
push 1
push 0
push 0x667438
lea ecx, [ebp - 0x20f0]
call fcn.005438b0
cmp eax, 1
je 0x47d676
push 0
push 1
push 1
push 0
push 0x6675c4
lea ecx, [ebp - 0x20f0]
call fcn.005438b0
cmp eax, 1
je 0x47d676
push 0
push 1
push 1
push 0
push 0x6675e0
lea ecx, [ebp - 0x20f0]
call fcn.005438b0
cmp eax, 1
je 0x47d676
push 0
push 1
push 1
push 0
push 0x667608
lea ecx, [ebp - 0x20f0]
call fcn.005438b0
cmp eax, 1
je 0x47d676
push 0
push 1
push 1
push 0
push 0x667628
lea ecx, [ebp - 0x20f0]
call fcn.005438b0
cmp eax, 1
je 0x47d676
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x667408
lea ecx, [ebp - 0x20f0]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x47d676
lea ecx, [ebp - 0x20b4]
call fcn.00544c70
lea ecx, [ebp - 0x20b4]
test al, al
je 0x47d40a
push 0x667460
call fcn.005452f0
jmp 0x47d42a
push 0
push 0
push 0x61d050
push 0x61e29c
call fcn.005430c0
push 0
lea ecx, [ebp - 0x20b4]
call fcn.005449e0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x61d048
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2148]
call fcn.00544fe0
push 0
lea ecx, [ebp - 0x2148]
call fcn.00544f70
push eax
lea eax, [ebp - 0x20b4]
mov ecx, edi
push eax
call fcn.00470120
lea ecx, [ebp - 0x20b4]
call fcn.00544f70
push eax
push 0
call dword [0x5fdafc]
test eax, eax
jne 0x47d676
lea ecx, [ebp - 0x20b4]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x6880]
call fcn.00538170
test al, al
je 0x47d57b
push 0x61d050
push str.CompanyName
lea ecx, [ebp - 0x6880]
call fcn.00538190
push eax
lea ecx, [ebp - 0x21fc]
call fcn.005452f0
push 0
push 1
push 1
push 0
push str.Microsoft
lea ecx, [ebp - 0x21fc]
call fcn.005438b0
cmp eax, 1
je 0x47d676
push 0
push 1
push 1
push 0
push 0x6674bc
lea ecx, [ebp - 0x21fc]
call fcn.005438b0
cmp eax, 1
je 0x47d676
push 0
push 1
push 1
push 0
push 0x6674d8
lea ecx, [ebp - 0x21fc]
call fcn.005438b0
cmp eax, 1
je 0x47d676
push 0
push 1
push 1
push 0
push 0x667658
lea ecx, [ebp - 0x21fc]
call fcn.005438b0
cmp eax, 1
je 0x47d676
push 0
push 1
push 1
push 0
push 0x6581a0
lea ecx, [ebp - 0x21fc]
call fcn.005438b0
cmp eax, 1
je 0x47d676
push 0
lea ecx, [ebp - 0x20b4]
call fcn.00544f70
push eax
push 0
push 1
lea ecx, [ebp - 0x20b4]
call fcn.00544f70
push eax
mov ecx, esi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x20f0]
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x21
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f94], eax
cmp eax, 0xffffffff
je 0x47d676
push 0
push dword [ebp - 0x6cb4]
mov ecx, esi
push 0
push 0
push 0
push 0
call fcn.00544f70
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00544f70
push eax
push 0x21
push dword [ebp - 0x6f94]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666664
lea ecx, [ebp - 0x20b4]
call fcn.00544f70
push eax
push 0x667500
mov ecx, esi
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x20f0]
call fcn.00544f70
push eax
push 0x6652b0
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
mov eax, dword [ebp - 0x6f54]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f54], eax
call fcn.0053f1c0
test al, al
jne 0x47d1d0
mov esi, dword [ebp - 0x6f6c]
inc esi
mov dword [ebp - 0x6f6c], esi
cmp esi, 5
jb 0x47d130
mov esi, dword [ebp - 0x6f7c]
add dword [ebp - 0x6f40], 0xc
inc esi
mov dword [ebp - 0x6f7c], esi
cmp esi, dword [ebp - 0x6f74]
jb 0x47d117
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47f0ca
push 0
push 0x667680
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x6df8]
push 1
push 0x642a54
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6e00], eax
mov dword [ebp - 0x6dfc], 0x23
call fcn.00545350
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0x8f
call fcn.00544f70
lea ecx, [edi + 0x14c]
mov dword [ebp - 0x6dec], eax
mov dword [ebp - 0x6de8], 0
call fcn.00544f70
mov dword [ebp - 0x6de4], eax
lea ecx, [ebp - 0x6dd8]
lea eax, [ebp - 0x1fd4]
push 1
mov dword [ebp - 0x6de0], eax
mov eax, dword [edi + 4]
push 0x6431d0
mov dword [ebp - 0x6ddc], eax
call fcn.00545350
push 0xc
lea ecx, [ebp - 0x2270]
mov byte [ebp - 4], 0x90
call fcn.00401d20
lea ecx, [ebp - 0x2270]
call fcn.005453c0
xor esi, esi
mov byte [ebp - 4], 0x91
cmp dword [edi + 0x30], esi
jbe 0x47d8ee
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47d8ee
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00545180
cmp eax, 3
jl 0x47d8e4
push esi
lea ecx, [edi + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24c8]
mov dword [ebp - 0x6de8], eax
call fcn.00544f70
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2270]
call fcn.00544fe0
lea ecx, [ebp - 0x2270]
call fcn.00544f70
mov ecx, eax
call fcn.0052fcf0
test al, al
je 0x47d8e4
lea ecx, [ebp - 0x2270]
call fcn.00544f70
push eax
lea eax, [ebp - 0x6e00]
mov ecx, edi
push eax
call fcn.0048d690
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47d8ee
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25e4]
call fcn.00544f70
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2270]
call fcn.00544fe0
lea ecx, [ebp - 0x2270]
call fcn.00544f70
mov ecx, eax
call fcn.0052fcf0
test al, al
je 0x47d8e4
push 0
lea ecx, [ebp - 0x2270]
call fcn.00544c90
lea ecx, [ebp - 0x2270]
call fcn.00544f70
push eax
lea eax, [ebp - 0x6e00]
mov ecx, edi
push eax
call fcn.0048d690
inc esi
cmp esi, dword [edi + 0x30]
jb 0x47d7a2
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47f0b4
lea ecx, [ebp - 0x2638]
mov dword [ebp - 0x6de8], 0x65f3a0
call fcn.00544f70
push eax
lea eax, [ebp - 0x6e00]
mov ecx, edi
push eax
call fcn.0048d690
mov ecx, edi
call fcn.0046c7f0
lea ecx, [ebp - 0x2270]
test al, al
jne 0x47f0ba
lea eax, [ebp - 0x2644]
push eax
call fcn.005452c0
push 0
lea ecx, [ebp - 0x2270]
call fcn.00544c90
lea ecx, [ebp - 0x2270]
call fcn.00544f70
push eax
lea eax, [ebp - 0x6e00]
mov ecx, edi
push eax
call fcn.0048d690
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47f0b4
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x47d9dd
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6676c8
push esi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00544fe0
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x47d993
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667750
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00544fe0
cmp dword [ebp - 0x6fa8], 0
je 0x47da44
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x667750
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00544fe0
mov edx, dword [ebp - 0x6f74]
test edx, edx
je 0x47dc31
mov eax, dword [ebp - 0x6f68]
mov esi, dword [ebp - 0x6f70]
sub eax, esi
mov dword [ebp - 0x6f7c], eax
mov dword [ebp - 0x6f54], edx
nop dword [eax]
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x47dc1b
lea eax, [ebp - 0x20c0]
push eax
push 0x61d050
lea ecx, [ebp - 0x1f74]
call fcn.0053f580
test al, al
je 0x47dc1b
push 0
push 1
push 1
push 0
push 0x6677d8
lea ecx, [ebp - 0x20c0]
call fcn.005438b0
lea ecx, [ebp - 0x20c0]
mov dword [ebp - 0x6f48], eax
call fcn.00545180
mov edx, dword [ebp - 0x6f48]
lea ecx, [edx + 0xc]
cmp eax, ecx
jle 0x47dc1b
lea eax, [edx + 0xd]
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00543b90
push 3
lea ecx, [ebp - 0x20c0]
call fcn.00542f40
lea ecx, [ebp - 0x20c0]
call fcn.00544c70
test al, al
jne 0x47dc1b
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x664524
lea ecx, [ebp - 0x20c0]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x47dc1b
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x20c0]
call fcn.00544f70
push eax
mov ecx, esi
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x660a20
push 1
push 0x23
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x47dc1b
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00544f70
mov ecx, dword [ebp - 0x6f7c]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.00544f70
push eax
push 0x23
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666664
mov ecx, esi
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x20c0]
call fcn.00544f70
push eax
push 0x666ce8
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
sub dword [ebp - 0x6f54], 1
jne 0x47da70
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47f0b4
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x47dcaa
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
nop dword [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6677f8
push esi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00544fe0
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x47dc60
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667858
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00544fe0
cmp dword [ebp - 0x6fa8], 0
je 0x47dd11
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x667858
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00544fe0
push 0
push 0x6678c0
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov esi, dword [ebp - 0x6f74]
mov dword [ebp - 0x6f54], 0
test esi, esi
je 0x47e220
mov esi, dword [ebp - 0x6f70]
mov eax, dword [ebp - 0x6f68]
sub eax, esi
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f7c], eax
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47e21a
mov eax, dword [edi + 0x30]
cmp eax, 2
jbe 0x47dd7b
add eax, 0xfffffffe
cmp dword [ebp - 0x6f54], eax
je 0x47e1f8
mov ecx, dword [ebp - 0x6f7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
add ecx, esi
push 0x667914
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00544fe0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x47e1f8
lea eax, [ebp - 0x273c]
mov dword [ebp - 0x273c], 0
push eax
push 0x645d0c
lea ecx, [ebp - 0x1f74]
call fcn.0053f4f0
test al, al
je 0x47e1f8
cmp dword [ebp - 0x273c], 0
je 0x47e1f8
mov ecx, dword [ebp - 0x6f7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667930
lea ecx, [ecx + esi]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00544fe0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x47e1f8
lea eax, [ebp - 0x2010]
push eax
push 0x645d78
lea ecx, [ebp - 0x1f74]
call fcn.0053f580
test al, al
je 0x47dfdb
lea ecx, [ebp - 0x2010]
call fcn.00544c70
test al, al
jne 0x47dfdb
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x66793c
lea ecx, [ebp - 0x2010]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x47dfdb
xor esi, esi
push 0
push 1
push 1
push 0
push dword [ebp + esi*4 - 0x6fe8]
lea ecx, [ebp - 0x2010]
call fcn.005438b0
dec eax
cmp eax, 0x10
jbe 0x47dfd5
inc esi
cmp esi, 7
jb 0x47dec4
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.00544f70
mov esi, dword [ebp - 0x6f40]
mov ecx, esi
push eax
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x645d78
push 1
push 0x25
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x47dfdb
push 0
push 0
push 0
lea ecx, [ebp - 0x2010]
call fcn.00544f70
push eax
push 0
push 0x645d78
mov ecx, esi
call fcn.00544f70
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
push 0x25
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666664
lea ecx, [ebp - 0x2010]
call fcn.00544f70
push eax
push 0x6672b0
mov ecx, esi
call fcn.00544f70
push eax
push 0x6645d4
push 0x667960
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
jmp 0x47dfdb
mov esi, dword [ebp - 0x6f40]
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47e21a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x645e10
lea ecx, [ebp - 0x1f98]
call fcn.005435c0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x47e1f8
lea eax, [ebp - 0x6cb4]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f6c], esi
call fcn.0053f120
test al, al
je 0x47e1f2
nop dword [eax]
mov eax, dword [ebp - 0x6cb4]
cmp word [eax], 0
je 0x47e1d0
push eax
lea ecx, [ebp - 0x2010]
call fcn.005452f0
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x66793c
lea ecx, [ebp - 0x2010]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x47e1ec
xor eax, eax
mov dword [ebp - 0x6f4c], eax
push 0
push 1
push 1
push 0
push dword [ebp + eax*4 - 0x6fe8]
lea ecx, [ebp - 0x2010]
call fcn.005438b0
dec eax
cmp eax, 0x10
jbe 0x47e1d0
mov eax, dword [ebp - 0x6f4c]
inc eax
mov dword [ebp - 0x6f4c], eax
cmp eax, 7
jb 0x47e0b2
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x661f40
push 1
push 0x25
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x47e1d0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2010]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.00544f70
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
push 0x25
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666664
lea ecx, [ebp - 0x2010]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x6672b0
call fcn.00544f70
push eax
push 0x6645d4
push 0x66798c
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
lea eax, [ebp - 0x6cb4]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0053f120
test al, al
jne 0x47e060
mov dword [ebp - 0x6f6c], esi
mov esi, dword [ebp - 0x6f40]
mov eax, dword [ebp - 0x6f54]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f54], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x47dd55
mov esi, dword [ebp - 0x6f74]
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47f0b4
mov dword [ebp - 0x6f54], 0
test esi, esi
je 0x47e679
mov esi, dword [ebp - 0x6f70]
mov eax, dword [ebp - 0x6f68]
sub eax, esi
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f48], eax
nop dword [eax + eax]
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47e679
mov eax, dword [edi + 0x30]
cmp eax, 2
jbe 0x47e286
add eax, 0xfffffffe
cmp dword [ebp - 0x6f54], eax
je 0x47e657
mov eax, dword [ebp - 0x6f48]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
add eax, esi
push 0
push 0x6679c8
mov ecx, eax
mov dword [ebp - 0x6f7c], eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00544fe0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x47e657
lea eax, [ebp - 0x2738]
mov dword [ebp - 0x2738], 0
push eax
push 0x646188
lea ecx, [ebp - 0x1f74]
call fcn.0053f4f0
test al, al
je 0x47e657
cmp dword [ebp - 0x2738], 0
je 0x47e657
mov ecx, dword [ebp - 0x6f7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6679fc
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00544fe0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x47e657
lea eax, [ebp - 0x6cb4]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f6c], esi
call fcn.0053f1c0
test al, al
je 0x47e651
mov ecx, dword [ebp - 0x6f7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
push 0x667a18
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00544fe0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fe4]
call fcn.0053f870
test al, al
je 0x47e62f
lea eax, [ebp - 0x2108]
push eax
push 0x6287d4
lea ecx, [ebp - 0x1fe4]
call fcn.0053f580
push 0
lea ecx, [ebp - 0x2108]
call fcn.00545220
cmp word [eax], 0x40
jne 0x47e45c
push 0
lea ecx, [ebp - 0x2108]
call fcn.00544f70
push eax
push 0x80
lea ecx, [ebp - 0x2108]
call fcn.00544760
push 0
push 0x80
lea ecx, [ebp - 0x2108]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2108]
call fcn.00544f70
push eax
call dword [0x5fd6a0]
lea eax, [ebp - 0x2010]
push eax
push 0x657bec
lea ecx, [ebp - 0x1fe4]
call fcn.0053f580
lea ecx, [ebp - 0x2108]
call fcn.00544c70
test al, al
je 0x47e495
lea ecx, [ebp - 0x2010]
call fcn.00544c70
test al, al
jne 0x47e62f
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x66793c
lea ecx, [ebp - 0x2010]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x47e64b
xor eax, eax
mov dword [ebp - 0x6f4c], eax
nop dword [eax + eax]
push 0
push 1
push 1
push 0
push dword [ebp + eax*4 - 0x6fe8]
lea ecx, [ebp - 0x2010]
call fcn.005438b0
dec eax
cmp eax, 0x10
jbe 0x47e62f
mov eax, dword [ebp - 0x6f4c]
inc eax
mov dword [ebp - 0x6f4c], eax
cmp eax, 7
jb 0x47e4d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666ea0
lea ecx, [ebp - 0x2108]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00544fe0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x25
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f94], eax
cmp eax, 0xffffffff
je 0x47e62f
push 0
push 0
push 0
lea ecx, [ebp - 0x2010]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
push 0
call fcn.00544f70
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
push 0x25
push dword [ebp - 0x6f94]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666664
lea ecx, [ebp - 0x2010]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x6672b0
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x2108]
call fcn.00544f70
push eax
push 0x667a34
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
lea eax, [ebp - 0x6cb4]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0053f1c0
test al, al
jne 0x47e395
mov dword [ebp - 0x6f6c], esi
mov esi, dword [ebp - 0x6f40]
mov eax, dword [ebp - 0x6f54]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f54], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x47e260
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x47e6de
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667a6c
push esi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00544fe0
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x47e694
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667a98
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00544fe0
cmp dword [ebp - 0x6fa8], 0
je 0x47e745
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x667a98
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00544fe0
push 0xc
lea ecx, [ebp - 0x26a4]
call fcn.00401d20
lea ecx, [ebp - 0x26a4]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x25a8]
mov byte [ebp - 4], 0x92
call fcn.00401d20
lea ecx, [ebp - 0x25a8]
call fcn.005453c0
push 0
push 0x667be0
lea ecx, [ebp - 0x1fd4]
mov byte [ebp - 4], 0x93
call fcn.005322d0
cmp dword [ebp - 0x6f74], 0
mov dword [ebp - 0x6f54], 0
jbe 0x47eb65
mov esi, dword [ebp - 0x6f70]
mov eax, dword [ebp - 0x6f68]
sub eax, esi
mov dword [ebp - 0x6f7c], esi
mov dword [ebp - 0x6f40], eax
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47eb65
mov eax, dword [edi + 0x30]
cmp eax, 2
jbe 0x47e7e6
add eax, 0xfffffffe
cmp dword [ebp - 0x6f54], eax
je 0x47eb43
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667c40
lea ecx, [ecx + esi]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00544fe0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x47e97b
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x667c94
push 0x661fe0
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x47e97b
lea eax, [ebp - 0x26a4]
push eax
push 0x661ff8
lea ecx, [ebp - 0x1f74]
call fcn.0053f580
lea eax, [ebp - 0x28c8]
push eax
push 0x662010
lea ecx, [ebp - 0x1f74]
call fcn.0053f4f0
lea ecx, [ebp - 0x26a4]
call fcn.00544c70
test al, al
jne 0x47e97b
cmp dword [ebp - 0x28c8], 0
je 0x47e97b
push 0
push 0
push 0
push 0
push 0x667ac8
mov ecx, esi
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x661fe0
push 1
push 0x24
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x47e97b
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00544f70
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
push 0x24
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x665ac0
push 0x667ac8
push 0x665d2c
mov ecx, esi
call fcn.00544f70
push eax
push 0x6645d4
push 0x661fe0
push 0x667030
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x667c94
push 0x6620d0
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x47eb43
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667cb8
lea ecx, [ecx + esi]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00544fe0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x47eb43
lea eax, [ebp - 0x25a8]
push eax
push 0x63a454
lea ecx, [ebp - 0x1f74]
call fcn.0053f580
test al, al
je 0x47eb43
lea ecx, [ebp - 0x26a4]
call fcn.00544c70
test al, al
jne 0x47eb43
push 0
push 0
push 0x61d050
push 0x61e380
lea ecx, [ebp - 0x25a8]
call fcn.005430c0
push 0
push 1
push 1
push 0
push 0x63a460
lea ecx, [ebp - 0x25a8]
call fcn.005438b0
lea ecx, [ebp - 0x25a8]
mov esi, eax
call fcn.00545180
sub eax, 0xb
cmp esi, eax
mov esi, dword [ebp - 0x6f7c]
je 0x47eb43
push 0
push 0
push 0
push 0
push 0x667b48
mov ecx, esi
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6620d0
push 1
push 0x24
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x47eb43
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00544f70
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
push 0x24
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x665ac0
push 0x667b48
push 0x665d2c
mov ecx, esi
call fcn.00544f70
push eax
push 0x6645d4
push 0x6620d0
push 0x667030
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
mov eax, dword [ebp - 0x6f54]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f7c], esi
mov dword [ebp - 0x6f54], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x47e7c0
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47f09e
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x667c94
push 0x662170
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x47f09e
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x47ec00
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6460f0
push esi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00544fe0
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x47ebb6
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6460f0
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00544fe0
cmp dword [ebp - 0x6fa8], 0
je 0x47ec67
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x6460f0
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00544fe0
cmp dword [ebp - 0x6f74], 0
mov dword [ebp - 0x6f7c], 0
jbe 0x47ee39
mov eax, dword [ebp - 0x6f70]
sub eax, esi
mov dword [ebp - 0x6f54], eax
nop dword [eax]
mov ecx, esi
call fcn.00544f70
xor edx, edx
mov ecx, eax
call fcn.0053c5e0
test al, al
je 0x47ee1d
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47ee39
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x661ed0
mov ecx, esi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2120]
call fcn.00544fe0
lea ecx, [ebp - 0x2120]
call fcn.00544f70
mov edx, 0x645d0c
mov ecx, eax
call fcn.0053c5e0
test al, al
jne 0x47ed46
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6572a4
mov ecx, esi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2120]
call fcn.00544fe0
lea ecx, [ebp - 0x2120]
call fcn.00544f70
xor edx, edx
mov ecx, eax
call fcn.0053c5e0
test al, al
je 0x47ee1d
mov ecx, dword [ebp - 0x6f54]
push 0
push 0
push 0
push 0
add ecx, esi
push 0x667d00
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x662170
push 1
push 0x24
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x47ee1d
mov ecx, dword [ebp - 0x6f54]
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [esi + ecx]
call fcn.00544f70
push eax
push 0
mov ecx, esi
call fcn.00544f70
push eax
push 0x24
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
mov ecx, dword [ebp - 0x6f54]
push 0
push 0
push 0
push 0
push 0
push 0x665ac0
push 0x667d00
push 0x665d2c
lea ecx, [esi + ecx]
call fcn.00544f70
push eax
push 0x6645d4
push 0x662170
push 0x667030
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f7c], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x47ec90
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47f09e
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x667c94
push 0x662234
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x47f09e
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x47eeda
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
nop word [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667da8
push esi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00544fe0
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x47ee90
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667da8
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00544fe0
cmp dword [ebp - 0x6fa8], 0
je 0x47ef41
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x667da8
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00544fe0
mov edx, dword [ebp - 0x6f74]
test edx, edx
je 0x47f084
mov eax, dword [ebp - 0x6f68]
mov esi, dword [ebp - 0x6f70]
sub eax, esi
mov dword [ebp - 0x6f7c], eax
mov dword [ebp - 0x6f54], edx
nop dword [eax]
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fe4]
call fcn.0053f870
test al, al
je 0x47f06e
lea ecx, [ebp - 0x1fe4]
call fcn.0053f0c0
cmp eax, 1
jbe 0x47f06e
push 0
push 0
push 0
push 0
push 0x667e10
mov ecx, esi
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x662234
push 1
push 0x24
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x47f06e
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00544f70
mov ecx, dword [ebp - 0x6f7c]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.00544f70
push eax
push 0x24
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x665ac0
push 0x667e10
push 0x665d2c
mov ecx, esi
call fcn.00544f70
push eax
push 0x6645d4
push 0x667e80
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
sub dword [ebp - 0x6f54], 1
jne 0x47ef70
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.00518e70
mov ecx, edi
call fcn.00470850
lea ecx, [ebp - 0x25a8]
call fcn.00545210
lea ecx, [ebp - 0x26a4]
call fcn.00545210
lea ecx, [ebp - 0x2270]
call fcn.00545210
lea ecx, [ebp - 0x6e00]
call fcn.00402710
lea ecx, [ebp - 0x6880]
call fcn.00401d90
lea ecx, [ebp - 0x20c0]
call fcn.00545210
lea ecx, [ebp - 0x2374]
call fcn.00545210
lea ecx, [ebp - 0x21fc]
call fcn.00545210
lea ecx, [ebp - 0x20f0]
call fcn.00545210
lea ecx, [ebp - 0x2380]
call fcn.00545210
lea ecx, [ebp - 0x20b4]
call fcn.00545210
lea ecx, [ebp - 0x2108]
call fcn.00545210
lea ecx, [ebp - 0x2084]
call fcn.0053f820
lea ecx, [ebp - 0x1fe4]
call fcn.0053f820
lea ecx, [ebp - 0x265c]
call fcn.005420e0
lea ecx, [ebp - 0x2398]
call fcn.00545210
lea ecx, [ebp - 0x2010]
mov byte [ebp - 4], 0x45
call fcn.00545210
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x481a86
test dword [edi + 0x34], 0x1000
jne 0x481a86
push 0
push 0x667ee0
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x667f18
push dword [eax + 0x38]
call fcn.0051a1d0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x2d
push dword [eax + 0x34]
call fcn.00516e60
push 0xc
lea ecx, [ebp - 0x20d8]
call fcn.00401d20
lea ecx, [ebp - 0x20d8]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2034]
mov byte [ebp - 4], 0x94
call fcn.00401d20
lea ecx, [ebp - 0x2034]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x23a4]
mov byte [ebp - 4], 0x95
call fcn.00401d20
lea ecx, [ebp - 0x23a4]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x1ff0]
mov byte [ebp - 4], 0x96
call fcn.00401d20
lea ecx, [ebp - 0x1ff0]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x22a0]
mov byte [ebp - 4], 0x97
call fcn.00401d20
lea ecx, [ebp - 0x22a0]
call fcn.005453c0
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0x251c]
xor esi, esi
push 0x24
mov dword [ebp - 0x6f54], esi
call fcn.00402080
lea ecx, [ebp - 0x251c]
call fcn.00513600
mov byte [ebp - 4], 0x99
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.00518e70
push esi
push 0x667f50
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov dword [ebp - 0x6f4c], esi
cmp dword [edi + 0x30], esi
jbe 0x47f8f5
mov esi, dword [ebp - 0x6f70]
mov dword [ebp - 0x6f40], esi
nop
lea ecx, [ebp - 0x22a0]
call fcn.00544c70
test al, al
je 0x47f2ec
lea eax, [ebp - 0x22a0]
push eax
push 0
lea ecx, [ebp - 0x2184]
call fcn.00544f70
push dword [ebp - 0x6f4c]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
mov edx, esi
mov ecx, eax
call fcn.004eca20
mov esi, dword [ebp - 0x6f40]
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47f8ef
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667f9c
lea ecx, [ebp - 0x2184]
call fcn.00544f70
push eax
push dword [ebp - 0x6f4c]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x20d8]
call fcn.00544fe0
push 0x260
lea ecx, [ebp - 0x4f38]
call fcn.00401d70
push 1
lea ecx, [ebp - 0x20d8]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x4f38]
call fcn.004016d0
push 3
lea ecx, [ebp - 0x20d8]
mov byte [ebp - 4], 0x9a
call fcn.00543c00
lea ecx, [ebp - 0x4f38]
call fcn.00401810
test al, al
je 0x47f8c1
nop
push 1
lea ecx, [ebp - 0x4f38]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2034]
call fcn.005452f0
push 0x66652c
lea ecx, [ebp - 0x2034]
call fcn.00545260
test al, al
je 0x47f3de
push 0
push 1
push 1
push 0
push 0x66653c
lea ecx, [ebp - 0x2034]
call fcn.005438b0
cmp eax, 1
jne 0x47f8ae
inc dword [ebp - 0x6f54]
lea ecx, [ebp - 0x4f38]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666550
push 1
call fcn.00401870
push eax
lea ecx, [ebp - 0x20d8]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2034]
call fcn.00544fe0
push 0x100
lea ecx, [ebp - 0x2034]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x251c]
call fcn.005133c0
test al, al
je 0x47f8ae
lea eax, [ebp - 0x1ff0]
push eax
push 0x622cbc
push 0x666578
lea ecx, [ebp - 0x251c]
call fcn.00512b90
test eax, eax
je 0x47f636
push 0
push 1
push 1
push 0
push 0x66658c
lea ecx, [ebp - 0x1ff0]
call fcn.005438b0
test eax, eax
jne 0x47f636
push eax
push 1
push 1
push eax
push 0x6665ac
lea ecx, [ebp - 0x1ff0]
call fcn.005438b0
test eax, eax
jne 0x47f636
push eax
push 1
push 1
push eax
push 0x6665fc
lea ecx, [ebp - 0x1ff0]
call fcn.005438b0
test eax, eax
jne 0x47f636
push 0x6665c8
lea ecx, [ebp - 0x1ff0]
call fcn.005452a0
test al, al
jne 0x47f636
push 0
push 1
push 1
push 0
push 0x6665e0
lea ecx, [ebp - 0x1ff0]
call fcn.005438b0
test eax, eax
jne 0x47f636
lea ecx, [edi + 0x14c]
push eax
call fcn.00544f70
push eax
push 0x667fd8
lea ecx, [ebp - 0x1ff0]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x47f636
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x668004
lea ecx, [ebp - 0x1ff0]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x47f636
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff0]
call fcn.00544f70
push eax
mov ecx, esi
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x666650
push 2
push 0x2a
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x47f636
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2034]
call fcn.00544f70
push eax
push 0x666578
push 0x2a
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666664
lea ecx, [ebp - 0x2034]
call fcn.00544f70
push eax
push 0x665d2c
mov ecx, esi
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x1ff0]
call fcn.00544f70
push eax
push 0x666698
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
lea eax, [ebp - 0x2a7c]
mov dword [ebp - 0x6edc], 0
push eax
push 0x622cbc
xorps xmm0, xmm0
lea ecx, [ebp - 0x251c]
push 0x6666b8
movups xmmword [ebp - 0x6eec], xmm0
call fcn.00512c90
test al, al
je 0x47f8ae
lea eax, [ebp - 0x2a7c]
push eax
lea eax, [ebp - 0x6eec]
push eax
lea ecx, [ebp - 0x251c]
call fcn.005122e0
test al, al
je 0x47f8ae
nop
lea eax, [ebp - 0x1ff0]
push eax
lea eax, [ebp - 0x6eec]
push eax
lea ecx, [ebp - 0x251c]
call fcn.005125f0
test eax, eax
je 0x47f88d
push 0
push 1
push 1
push 0
push 0x66658c
lea ecx, [ebp - 0x1ff0]
call fcn.005438b0
test eax, eax
jne 0x47f88d
push eax
push 1
push 1
push eax
push 0x6665ac
lea ecx, [ebp - 0x1ff0]
call fcn.005438b0
test eax, eax
jne 0x47f88d
push eax
push 1
push 1
push eax
push 0x6665fc
lea ecx, [ebp - 0x1ff0]
call fcn.005438b0
test eax, eax
jne 0x47f88d
push 0x6665c8
lea ecx, [ebp - 0x1ff0]
call fcn.005452a0
test al, al
jne 0x47f88d
push 0
push 1
push 1
push 0
push 0x6665e0
lea ecx, [ebp - 0x1ff0]
call fcn.005438b0
test eax, eax
jne 0x47f88d
push eax
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x667fd8
lea ecx, [ebp - 0x1ff0]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x47f887
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x668004
lea ecx, [ebp - 0x1ff0]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x47f887
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff0]
call fcn.00544f70
mov esi, dword [ebp - 0x6f40]
mov ecx, esi
push eax
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x666750
push 2
push 0x2a
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x47f88d
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2034]
call fcn.00544f70
push eax
push 0x6666b8
push 0x2a
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666664
lea ecx, [ebp - 0x2034]
call fcn.00544f70
push eax
push 0x665d2c
mov ecx, esi
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x1ff0]
call fcn.00544f70
push eax
push 0x66676c
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
jmp 0x47f88d
mov esi, dword [ebp - 0x6f40]
lea eax, [ebp - 0x2a7c]
push eax
lea eax, [ebp - 0x6eec]
push eax
lea ecx, [ebp - 0x251c]
call fcn.005122e0
test al, al
jne 0x47f690
lea ecx, [ebp - 0x4f38]
call fcn.004017d0
test al, al
jne 0x47f390
lea ecx, [ebp - 0x4f38]
mov byte [ebp - 4], 0x99
call fcn.00401720
mov eax, dword [ebp - 0x6f4c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f4c], eax
cmp eax, dword [edi + 0x30]
jb 0x47f2a0
mov esi, dword [ebp - 0x6f54]
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x481a40
test esi, esi
jne 0x47f92d
lea ecx, [ebp - 0x22a0]
call fcn.00544c70
test al, al
je 0x47f92d
push esi
push 0x668030
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
jmp 0x481a40
push 0
push 0x668090
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f54], 0
jbe 0x47fcf5
mov esi, dword [ebp - 0x6f70]
mov dword [ebp - 0x6f40], esi
nop
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x47fcf5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667f9c
lea ecx, [ebp - 0x2184]
call fcn.00544f70
push eax
push dword [ebp - 0x6f54]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x20d8]
call fcn.00544fe0
push 0x260
lea ecx, [ebp - 0x5658]
call fcn.00401d70
push 1
lea ecx, [ebp - 0x20d8]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x5658]
call fcn.004016d0
push 3
lea ecx, [ebp - 0x20d8]
mov byte [ebp - 4], 0x9b
call fcn.00543c00
lea ecx, [ebp - 0x5658]
call fcn.00401810
test al, al
je 0x47fcc7
push 1
lea ecx, [ebp - 0x5658]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2034]
call fcn.005452f0
push 0x66652c
lea ecx, [ebp - 0x2034]
call fcn.00545260
test al, al
je 0x47fa51
push 0
push 1
push 1
push 0
push 0x66653c
lea ecx, [ebp - 0x2034]
call fcn.005438b0
cmp eax, 1
jne 0x47fcb4
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666550
push 1
lea ecx, [ebp - 0x5658]
call fcn.00401870
push eax
lea ecx, [ebp - 0x20d8]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2034]
call fcn.00544fe0
push 0x100
lea ecx, [ebp - 0x2034]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x251c]
call fcn.005133c0
test al, al
je 0x47fcb4
lea eax, [ebp - 0x1ff0]
push eax
push 0x622cbc
push 0x666830
lea ecx, [ebp - 0x251c]
call fcn.00512b90
test eax, eax
je 0x47fcb4
push 0
push 1
push 1
push 0
push 0x66658c
lea ecx, [ebp - 0x1ff0]
call fcn.005438b0
test eax, eax
jne 0x47fcb4
push eax
push 1
push 1
push eax
push 0x6666e4
lea ecx, [ebp - 0x1ff0]
call fcn.005438b0
test eax, eax
jne 0x47fcb4
push eax
push 1
push 1
push eax
push 0x6665ac
lea ecx, [ebp - 0x1ff0]
call fcn.005438b0
test eax, eax
jne 0x47fcb4
push eax
push 1
push 1
push eax
push 0x6665fc
lea ecx, [ebp - 0x1ff0]
call fcn.005438b0
test eax, eax
jne 0x47fcb4
push eax
push 1
push 1
push eax
push 0x666708
lea ecx, [ebp - 0x1ff0]
call fcn.005438b0
test eax, eax
jne 0x47fcb4
push eax
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x6680d0
lea ecx, [ebp - 0x1ff0]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x47fcae
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x668100
lea ecx, [ebp - 0x1ff0]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x47fcae
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff0]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6668e0
push 2
push 0x2b
push dword [eax + 0xa8]
call fcn.00499eb0
mov esi, eax
cmp esi, 0xffffffff
je 0x47fcae
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2034]
call fcn.00544f70
push eax
push 0x666910
push 0x2b
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666664
lea ecx, [ebp - 0x2034]
call fcn.00544f70
mov esi, dword [ebp - 0x6f40]
mov ecx, esi
push eax
push 0x665d2c
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x1ff0]
call fcn.00544f70
push eax
push 0x666970
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
jmp 0x47fcb4
mov esi, dword [ebp - 0x6f40]
lea ecx, [ebp - 0x5658]
call fcn.004017d0
test al, al
jne 0x47fa03
lea ecx, [ebp - 0x5658]
mov byte [ebp - 4], 0x99
call fcn.00401720
mov eax, dword [ebp - 0x6f54]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f54], eax
cmp eax, dword [edi + 0x30]
jb 0x47f960
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x481a40
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668130
lea ecx, [edi + 0x314]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00544fe0
push 0
push 0x668170
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f54], 0
jbe 0x480321
mov esi, dword [ebp - 0x6f70]
mov dword [ebp - 0x6f40], esi
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x480321
push 0xc
lea ecx, [ebp - 0x2704]
call fcn.00401d20
lea ecx, [ebp - 0x2704]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2760]
mov byte [ebp - 4], 0x9c
call fcn.00401d20
lea ecx, [ebp - 0x2760]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2748]
mov byte [ebp - 4], 0x9d
call fcn.00401d20
lea ecx, [ebp - 0x2748]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2668]
mov byte [ebp - 4], 0x9e
call fcn.00401d20
lea ecx, [ebp - 0x2668]
call fcn.005453c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667f9c
lea ecx, [ebp - 0x2184]
mov byte [ebp - 4], 0x9f
call fcn.00544f70
push eax
push dword [ebp - 0x6f54]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x20d8]
call fcn.00544fe0
push 0x260
lea ecx, [ebp - 0x3e98]
call fcn.00401d70
push 1
lea ecx, [ebp - 0x20d8]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x3e98]
call fcn.004016d0
push 3
lea ecx, [ebp - 0x20d8]
mov byte [ebp - 4], 0xa0
call fcn.00543c00
lea ecx, [ebp - 0x3e98]
call fcn.00401810
test al, al
je 0x4802c7
nop dword [eax]
push 1
lea ecx, [ebp - 0x3e98]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2034]
call fcn.005452f0
push 0x66652c
lea ecx, [ebp - 0x2034]
call fcn.00545260
test al, al
je 0x47fece
push 0
push 1
push 1
push 0
push 0x66653c
lea ecx, [ebp - 0x2034]
call fcn.005438b0
cmp eax, 1
jne 0x4802b4
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666550
push 1
lea ecx, [ebp - 0x3e98]
call fcn.00401870
push eax
lea ecx, [ebp - 0x20d8]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2034]
call fcn.00544fe0
push 0x100
lea ecx, [ebp - 0x2034]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x251c]
call fcn.005133c0
test al, al
je 0x4802b4
lea eax, [ebp - 0x2a90]
mov dword [ebp - 0x6ef0], 0
push eax
push 0x622cbc
xorps xmm0, xmm0
lea ecx, [ebp - 0x251c]
push 0x666a44
movups xmmword [ebp - 0x6f00], xmm0
call fcn.00512c90
test al, al
je 0x4802b4
lea eax, [ebp - 0x2a90]
push eax
lea eax, [ebp - 0x6f00]
push eax
lea ecx, [ebp - 0x251c]
call fcn.005126b0
test al, al
je 0x4802b4
nop word [eax + eax]
lea eax, [ebp - 0x2704]
push eax
lea eax, [ebp - 0x6f00]
push eax
lea ecx, [ebp - 0x251c]
call fcn.00512c50
test al, al
je 0x480293
lea ecx, [ebp - 0x2704]
call fcn.00544f70
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.00544f70
mov edx, esi
mov ecx, eax
call fcn.0053c5e0
test al, al
jne 0x48028d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666a70
lea ecx, [ebp - 0x2704]
call fcn.00544f70
push eax
push 0x666a94
lea ecx, [ebp - 0x2748]
call fcn.00544fe0
lea eax, [ebp - 0x2760]
push eax
push 0x622cbc
lea ecx, [ebp - 0x2748]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x251c]
call fcn.00512b90
test eax, eax
je 0x48028d
lea ecx, [ebp - 0x2760]
call fcn.00544f70
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.00544f70
mov edx, esi
mov ecx, eax
call fcn.0053c5e0
test al, al
jne 0x48028d
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x6681a0
lea ecx, [ebp - 0x2760]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x48028d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666ac4
lea ecx, [ebp - 0x2704]
call fcn.00544f70
push eax
push 0x666a94
lea ecx, [ebp - 0x2748]
call fcn.00544fe0
lea eax, [ebp - 0x2668]
push eax
push 0x622cbc
lea ecx, [ebp - 0x2748]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x251c]
call fcn.00512b90
test eax, eax
je 0x480138
push 0
push 1
push 1
push 5
push 0x61e384
lea ecx, [ebp - 0x2668]
call fcn.005438b0
test eax, eax
jne 0x480138
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x666ad4
push 1
lea ecx, [ebp - 0x3e98]
call fcn.00401870
push eax
lea ecx, [ebp - 0x20d8]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2668]
call fcn.00543350
lea ecx, [ebp - 0x2668]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
je 0x48028d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2704]
call fcn.00544f70
push eax
push 0x666a94
lea ecx, [ebp - 0x2748]
call fcn.00544fe0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2668]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2760]
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 2
push 0x2c
push dword [eax + 0xa8]
call fcn.00499eb0
mov esi, eax
cmp esi, 0xffffffff
je 0x48028d
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2668]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2034]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2748]
call fcn.00544f70
push eax
push 0x2c
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0x666664
lea ecx, [ebp - 0x2668]
call fcn.00544f70
mov esi, dword [ebp - 0x6f40]
mov ecx, esi
push eax
push 0x665308
call fcn.00544f70
push eax
push 0x666af0
lea ecx, [ebp - 0x2704]
call fcn.00544f70
push eax
push 0x6264cc
lea ecx, [ebp - 0x2760]
call fcn.00544f70
push eax
push 0x666b14
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
jmp 0x480293
mov esi, dword [ebp - 0x6f40]
lea eax, [ebp - 0x2a90]
push eax
lea eax, [ebp - 0x6f00]
push eax
lea ecx, [ebp - 0x251c]
call fcn.005126b0
test al, al
jne 0x47ff90
lea ecx, [ebp - 0x3e98]
call fcn.004017d0
test al, al
jne 0x47fe80
lea ecx, [ebp - 0x3e98]
call fcn.00401720
lea ecx, [ebp - 0x2668]
call fcn.00545210
lea ecx, [ebp - 0x2748]
call fcn.00545210
lea ecx, [ebp - 0x2760]
call fcn.00545210
lea ecx, [ebp - 0x2704]
mov byte [ebp - 4], 0x99
call fcn.00545210
mov eax, dword [ebp - 0x6f54]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f54], eax
cmp eax, dword [edi + 0x30]
jb 0x47fd66
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x481a40
push 0
push 0x6681d0
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x6d68]
push 1
push 0
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6d70], eax
mov dword [ebp - 0x6d6c], 0x2d
call fcn.00545350
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0xa1
call fcn.00544f70
lea ecx, [edi + 0x14c]
mov dword [ebp - 0x6d5c], eax
mov dword [ebp - 0x6d58], 0
call fcn.00544f70
mov dword [ebp - 0x6d54], eax
lea ecx, [ebp - 0x6d48]
lea eax, [ebp - 0x1fd4]
push 1
mov dword [ebp - 0x6d50], eax
mov eax, dword [edi + 4]
push 0x638784
mov dword [ebp - 0x6d4c], eax
call fcn.00545350
push 0xc
lea ecx, [ebp - 0x2258]
mov byte [ebp - 4], 0xa2
call fcn.00401d20
lea ecx, [ebp - 0x2258]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2240]
mov byte [ebp - 4], 0xa3
call fcn.00401d20
lea ecx, [ebp - 0x2240]
call fcn.005453c0
mov ecx, edi
mov byte [ebp - 4], 0xa4
call fcn.0046c7f0
test al, al
jne 0x481a1f
xor esi, esi
mov dword [ebp - 0x6f40], esi
cmp dword [edi + 0x30], esi
jbe 0x4805b7
nop dword [eax]
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x4805b7
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00545180
cmp eax, 3
jl 0x4805a7
lea eax, [ebp - 0x6d68]
push eax
push 0
lea ecx, [ebp - 0x2184]
call fcn.00544f70
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
mov edx, esi
mov ecx, eax
call fcn.004eca20
mov esi, dword [ebp - 0x6f40]
test al, al
je 0x4805a7
push esi
lea ecx, [edi + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24c8]
mov dword [ebp - 0x6d58], eax
call fcn.00544f70
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2258]
call fcn.00544fe0
lea ecx, [ebp - 0x2258]
call fcn.00544f70
mov ecx, eax
call fcn.0052fcf0
test al, al
je 0x4805a7
lea ecx, [ebp - 0x2258]
call fcn.00544f70
push eax
lea eax, [ebp - 0x6d70]
mov ecx, edi
push eax
call fcn.0048d690
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x4805b7
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25e4]
call fcn.00544f70
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2258]
call fcn.00544fe0
lea ecx, [ebp - 0x2258]
call fcn.00544f70
mov ecx, eax
call fcn.0052fcf0
test al, al
je 0x4805a7
push 0
lea ecx, [ebp - 0x2258]
call fcn.00544c90
lea ecx, [ebp - 0x2258]
call fcn.00544f70
push eax
lea eax, [ebp - 0x6d70]
mov ecx, edi
push eax
call fcn.0048d690
inc esi
mov dword [ebp - 0x6f40], esi
cmp esi, dword [edi + 0x30]
jb 0x480420
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x481a1f
lea ecx, [ebp - 0x2638]
mov dword [ebp - 0x6d58], 0x65f3a0
call fcn.00544f70
push eax
lea eax, [ebp - 0x6d70]
mov ecx, edi
push eax
call fcn.0048d690
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x481a1f
lea eax, [ebp - 0x2644]
push eax
lea ecx, [ebp - 0x2258]
call fcn.005452c0
push 0
lea ecx, [ebp - 0x2258]
call fcn.00544c90
lea ecx, [ebp - 0x2258]
call fcn.00544f70
push eax
lea eax, [ebp - 0x6d70]
mov ecx, edi
push eax
call fcn.0048d690
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x481a1f
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4806aa
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668220
push esi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00544fe0
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x480660
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6682b0
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00544fe0
cmp dword [ebp - 0x6fa8], 0
je 0x480711
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x6682b0
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00544fe0
cmp dword [ebp - 0x6f74], 0
mov dword [ebp - 0x6f54], 0
jbe 0x48091c
mov eax, dword [ebp - 0x6f68]
mov esi, dword [ebp - 0x6f70]
sub eax, esi
mov dword [ebp - 0x6f7c], eax
nop dword [eax]
push 0
push 0x20019
lea ecx, [eax + esi]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x4808fa
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48091c
lea eax, [ebp - 0x2240]
push eax
push 0x61d050
lea ecx, [ebp - 0x1f74]
call fcn.0053f580
test al, al
je 0x4808fa
push 0
push 1
push 1
push 0
push 0x66833c
lea ecx, [ebp - 0x2240]
call fcn.005438b0
lea ecx, [ebp - 0x2240]
mov dword [ebp - 0x6f48], eax
call fcn.00545180
mov edx, dword [ebp - 0x6f48]
lea ecx, [edx + 0xa]
cmp eax, ecx
jle 0x4808fa
lea eax, [edx + 0xb]
push eax
lea ecx, [ebp - 0x2240]
call fcn.00543b90
push 3
lea ecx, [ebp - 0x2240]
call fcn.00542f40
lea ecx, [ebp - 0x2240]
call fcn.00544c70
test al, al
jne 0x4808fa
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x66441c
lea ecx, [ebp - 0x2240]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x4808fa
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2240]
call fcn.00544f70
push eax
mov ecx, esi
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x660a20
push 2
push 0x2d
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x4808fa
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00544f70
mov ecx, dword [ebp - 0x6f7c]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.00544f70
push eax
push 0x2d
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666664
mov ecx, esi
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x2240]
call fcn.00544f70
push eax
push 0x666ce8
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
mov eax, dword [ebp - 0x6f54]
add esi, 0xc
inc eax
cmp eax, dword [ebp - 0x6f74]
mov dword [ebp - 0x6f54], eax
mov eax, dword [ebp - 0x6f7c]
jb 0x480740
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x481a1f
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x480990
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668358
push esi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00544fe0
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x480946
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6683a0
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00544fe0
cmp dword [ebp - 0x6fa8], 0
je 0x4809f7
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x6683a0
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00544fe0
push 0
push 0x6683f0
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov esi, dword [ebp - 0x6f74]
mov dword [ebp - 0x6f7c], 0
test esi, esi
je 0x480c54
mov eax, dword [ebp - 0x6f68]
mov esi, dword [ebp - 0x6f70]
sub eax, esi
mov dword [ebp - 0x6f54], eax
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x480c4e
mov ecx, dword [ebp - 0x6f54]
push 0
push 0x20019
lea ecx, [ecx + esi]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
lea eax, [ebp - 0x1ff0]
push eax
push 0x660bd4
lea ecx, [ebp - 0x1f74]
call fcn.0053f580
test al, al
je 0x480c32
lea eax, [ebp - 0x2188]
mov dword [ebp - 0x2188], 0
push eax
push 0x660c74
lea ecx, [ebp - 0x1f74]
call fcn.0053f4f0
test al, al
je 0x480ab6
cmp dword [ebp - 0x2188], 0
jne 0x480c32
push 0
push 1
push 1
push 0
push 0x66658c
lea ecx, [ebp - 0x1ff0]
call fcn.005438b0
test eax, eax
jne 0x480c32
push eax
push 1
push 1
push eax
push 0x6665ac
lea ecx, [ebp - 0x1ff0]
call fcn.005438b0
test eax, eax
jne 0x480c32
push eax
push 1
push 1
push eax
push 0x6665fc
lea ecx, [ebp - 0x1ff0]
call fcn.005438b0
test eax, eax
jne 0x480c32
push eax
push 1
push 1
push eax
push 0x6665e0
lea ecx, [ebp - 0x1ff0]
call fcn.005438b0
test eax, eax
jne 0x480c32
push eax
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x66842c
lea ecx, [ebp - 0x1ff0]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x480c32
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff0]
call fcn.00544f70
push eax
mov ecx, esi
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x660bd4
push 2
push 0x2f
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x480c32
push 0
push 0
push 0
push 0
push 0
push 0x660bd4
mov ecx, esi
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.00544f70
push eax
push 0x2f
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666664
mov ecx, esi
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x1ff0]
call fcn.00544f70
push eax
push 0x668458
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f7c], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x480a35
mov esi, dword [ebp - 0x6f74]
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x481a1f
push 0xc
lea ecx, [ebp - 0x2674]
call fcn.00401d20
lea ecx, [ebp - 0x2674]
call fcn.005453c0
mov byte [ebp - 4], 0xa5
mov dword [ebp - 0x6f7c], 0
test esi, esi
je 0x480f2d
mov eax, dword [ebp - 0x6f68]
mov esi, dword [ebp - 0x6f70]
sub eax, esi
mov dword [ebp - 0x6f54], eax
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x480f27
mov ecx, dword [ebp - 0x6f54]
push 0
push 0x20019
lea ecx, [ecx + esi]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
lea eax, [ebp - 0x1ff0]
push eax
push 0x660d14
lea ecx, [ebp - 0x1f74]
call fcn.0053f580
test al, al
je 0x480f0b
lea eax, [ebp - 0x2188]
mov dword [ebp - 0x2188], 0
push eax
push 0x660e14
lea ecx, [ebp - 0x1f74]
call fcn.0053f4f0
test al, al
je 0x480d26
cmp dword [ebp - 0x2188], 0
je 0x480f0b
push 0
push 1
push 1
push 0
push 0x66658c
lea ecx, [ebp - 0x1ff0]
call fcn.005438b0
test eax, eax
jne 0x480f0b
push eax
push 1
push 1
push eax
push 0x6665ac
lea ecx, [ebp - 0x1ff0]
call fcn.005438b0
test eax, eax
jne 0x480f0b
push eax
push 1
push 1
push eax
push 0x6665fc
lea ecx, [ebp - 0x1ff0]
call fcn.005438b0
test eax, eax
jne 0x480f0b
push eax
push 1
push 1
push eax
push 0x6665e0
lea ecx, [ebp - 0x1ff0]
call fcn.005438b0
test eax, eax
jne 0x480f0b
push eax
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x66842c
lea ecx, [ebp - 0x1ff0]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x480f0b
lea eax, [ebp - 0x2674]
push eax
push 0x660de0
lea ecx, [ebp - 0x1f74]
call fcn.0053f580
test al, al
je 0x480f0b
lea ecx, [ebp - 0x2674]
call fcn.00544c70
test al, al
jne 0x480f0b
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666ea0
lea ecx, [ebp - 0x2674]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2240]
call fcn.00544fe0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff0]
call fcn.00544f70
push eax
mov ecx, esi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2240]
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 2
push 0x2f
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x480f0b
push 0
push 0
push 0
push 0
push 0
push 0x660d14
mov ecx, esi
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.00544f70
push eax
push 0x2f
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666664
mov ecx, esi
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x1ff0]
call fcn.00544f70
push eax
push 0x6684a8
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f7c], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x480ca5
mov esi, dword [ebp - 0x6f74]
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x481a14
mov dword [ebp - 0x6f7c], 0
test esi, esi
je 0x4811bc
mov esi, dword [ebp - 0x6f70]
mov eax, dword [ebp - 0x6f68]
sub eax, esi
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f48], eax
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x4811bc
mov eax, dword [ebp - 0x6f48]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f54], eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x48119a
lea eax, [ebp - 0x2188]
mov dword [ebp - 0x2188], 0
push eax
push 0x666f28
lea ecx, [ebp - 0x1f74]
call fcn.0053f4f0
test al, al
je 0x48119a
cmp dword [ebp - 0x2188], 4
jne 0x48119a
mov ecx, dword [ebp - 0x6f54]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666f4c
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00544fe0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x48119a
lea eax, [ebp - 0x6cb4]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f6c], esi
call fcn.0053f120
test al, al
je 0x481194
nop word [eax + eax]
lea eax, [ebp - 0x1ff0]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f74]
call fcn.0053f580
test al, al
je 0x481172
lea ecx, [ebp - 0x1ff0]
call fcn.00544c70
test al, al
jne 0x481172
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff0]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x660fd0
push 2
push 0x2f
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f94], eax
cmp eax, 0xffffffff
je 0x481172
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push 0
call fcn.00544f70
push eax
push 0x2f
push dword [ebp - 0x6f94]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666664
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x1ff0]
call fcn.00544f70
push eax
push 0x668508
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
lea eax, [ebp - 0x6cb4]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0053f120
test al, al
jne 0x481060
mov dword [ebp - 0x6f6c], esi
mov esi, dword [ebp - 0x6f40]
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f7c], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x480f68
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x481a14
push 0
push 0x668550
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f54], 0
jbe 0x4815cd
mov esi, dword [ebp - 0x6f70]
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x4815cd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667f9c
lea ecx, [ebp - 0x2184]
call fcn.00544f70
push eax
push dword [ebp - 0x6f54]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x20d8]
call fcn.00544fe0
push 0x260
lea ecx, [ebp - 0x39d8]
call fcn.00401d70
push 1
lea ecx, [ebp - 0x20d8]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x39d8]
call fcn.004016d0
push 3
lea ecx, [ebp - 0x20d8]
mov byte [ebp - 4], 0xa6
call fcn.00543c00
lea ecx, [ebp - 0x39d8]
call fcn.00401810
test al, al
je 0x4815a5
nop word [eax + eax]
push 1
lea ecx, [ebp - 0x39d8]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2034]
call fcn.005452f0
push 0x66652c
lea ecx, [ebp - 0x2034]
call fcn.00545260
test al, al
je 0x4812ee
push 0
push 1
push 1
push 0
push 0x66653c
lea ecx, [ebp - 0x2034]
call fcn.005438b0
cmp eax, 1
jne 0x481592
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666550
push 1
lea ecx, [ebp - 0x39d8]
call fcn.00401870
push eax
lea ecx, [ebp - 0x20d8]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2034]
call fcn.00544fe0
lea ecx, [ebp - 0x2034]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
je 0x481440
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x668588
push 0x6610d4
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x481440
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2034]
call fcn.00544f70
push eax
mov ecx, esi
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6610d4
push 2
push 0x2e
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x481592
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2034]
call fcn.00544f70
push eax
push 0
push 0x2e
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666ff8
lea ecx, [ebp - 0x2034]
call fcn.00544f70
push eax
push 0x665d2c
mov ecx, esi
call fcn.00544f70
push eax
push 0x6645d4
push 0x6610d4
push 0x667030
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x668588
push 0x6611d0
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x481592
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667054
push 1
lea ecx, [ebp - 0x39d8]
call fcn.00401870
push eax
lea ecx, [ebp - 0x20d8]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2034]
call fcn.00544fe0
lea ecx, [ebp - 0x2034]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
je 0x481592
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2034]
call fcn.00544f70
push eax
mov ecx, esi
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6611d0
push 2
push 0x2e
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x481592
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2034]
call fcn.00544f70
push eax
push 0
push 0x2e
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666ff8
lea ecx, [ebp - 0x2034]
call fcn.00544f70
push eax
push 0x665d2c
mov ecx, esi
call fcn.00544f70
push eax
push 0x6645d4
push 0x6611d0
push 0x667030
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
lea ecx, [ebp - 0x39d8]
call fcn.004017d0
test al, al
jne 0x4812a0
lea ecx, [ebp - 0x39d8]
mov byte [ebp - 4], 0xa5
call fcn.00401720
mov eax, dword [ebp - 0x6f54]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f54], eax
cmp eax, dword [edi + 0x30]
jb 0x4811f7
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x481a14
lea eax, [ebp - 0x22a0]
push eax
lea ecx, [ebp - 0x2034]
call fcn.005452c0
push 1
lea ecx, [ebp - 0x2034]
call fcn.00544c90
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667070
lea ecx, [ebp - 0x2034]
call fcn.005435c0
lea ecx, [ebp - 0x2034]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
je 0x4817c4
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x668588
push 0x6612a0
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x4817c4
push 0
lea ecx, [ebp - 0x2034]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x251c]
call fcn.005133c0
test al, al
je 0x4817c4
lea eax, [ebp - 0x2a08]
push eax
push 0x622cbc
push 0x666578
lea ecx, [ebp - 0x251c]
call fcn.00512c90
test al, al
jne 0x481707
lea eax, [ebp - 0x2a08]
push eax
push 0x622cbc
push 0x6666b8
lea ecx, [ebp - 0x251c]
call fcn.00512c90
test al, al
jne 0x481707
lea eax, [ebp - 0x2a08]
push eax
push 0x622cbc
push 0x660858
lea ecx, [ebp - 0x251c]
call fcn.00512c90
test al, al
jne 0x481707
lea eax, [ebp - 0x2a08]
push eax
push 0x622cbc
push 0x666a44
lea ecx, [ebp - 0x251c]
call fcn.00512c90
test al, al
je 0x4817c4
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2034]
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x65f3a0
push 0x6612a0
push 2
push 0x2e
push dword [eax + 0xa8]
call fcn.00499eb0
mov esi, eax
cmp esi, 0xffffffff
je 0x4817c4
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f3a0
lea ecx, [ebp - 0x2034]
call fcn.00544f70
push eax
push 0
push 0x2e
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666664
lea ecx, [ebp - 0x2034]
call fcn.00544f70
push eax
push 0x665d2c
push 0x6653ac
push 0x667098
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x668588
push 0x662b78
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x481a14
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x481850
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668358
push esi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00544fe0
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x481806
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668358
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00544fe0
cmp dword [ebp - 0x6fa8], 0
je 0x4818b7
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x668358
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00544fe0
cmp dword [ebp - 0x6f74], 0
mov dword [ebp - 0x6f7c], 0
jbe 0x481a01
mov eax, dword [ebp - 0x6f70]
sub eax, esi
mov dword [ebp - 0x6f54], eax
nop dword [eax]
mov ecx, esi
call fcn.00544f70
xor edx, edx
mov ecx, eax
call fcn.0053c5e0
test al, al
je 0x4819e5
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x481a01
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
lea ecx, [esi + ecx]
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x662b78
push 2
push 0x2e
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x4819e5
mov ecx, dword [ebp - 0x6f54]
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [esi + ecx]
call fcn.00544f70
push eax
push 0
mov ecx, esi
call fcn.00544f70
push eax
push 0x2e
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666ff8
mov ecx, esi
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x665d2c
lea ecx, [esi + ecx]
call fcn.00544f70
push eax
push 0x6645d4
push 0x662b78
push 0x667030
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f7c], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x4818e0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.00518e70
lea ecx, [ebp - 0x2674]
call fcn.00545210
lea ecx, [ebp - 0x2240]
call fcn.00545210
lea ecx, [ebp - 0x2258]
call fcn.00545210
lea ecx, [ebp - 0x6d70]
call fcn.00402710
lea ecx, [ebp - 0x251c]
call fcn.00401e40
lea ecx, [ebp - 0x22a0]
call fcn.00545210
lea ecx, [ebp - 0x1ff0]
call fcn.00545210
lea ecx, [ebp - 0x23a4]
call fcn.00545210
lea ecx, [ebp - 0x2034]
call fcn.00545210
lea ecx, [ebp - 0x20d8]
mov byte [ebp - 4], 0x45
call fcn.00545210
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x483cdc
test dword [edi + 0x34], 0x1000
jne 0x483cdc
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x6685b4
push dword [eax + 0x38]
call fcn.0051a1d0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x2f
push dword [eax + 0x34]
call fcn.00516e60
push 0xc
lea ecx, [ebp - 0x216c]
call fcn.00401d20
lea ecx, [ebp - 0x216c]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x204c]
mov byte [ebp - 4], 0xa7
call fcn.00401d20
lea ecx, [ebp - 0x204c]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x24b0]
mov byte [ebp - 4], 0xa8
call fcn.00401d20
lea ecx, [ebp - 0x24b0]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2160]
mov byte [ebp - 4], 0xa9
call fcn.00401d20
lea ecx, [ebp - 0x2160]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x232c]
mov byte [ebp - 4], 0xaa
call fcn.00401d20
lea ecx, [ebp - 0x232c]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x227c]
mov byte [ebp - 4], 0xab
call fcn.00401d20
lea ecx, [ebp - 0x227c]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2308]
mov byte [ebp - 4], 0xac
call fcn.00401d20
lea ecx, [ebp - 0x2308]
call fcn.005453c0
mov byte [ebp - 4], 0xad
lea ecx, [ebp - 0x2884]
xor esi, esi
push 0x20
mov dword [ebp - 0x6f7c], esi
call fcn.00401e20
lea ecx, [ebp - 0x2884]
call fcn.005332d0
mov byte [ebp - 4], 0xae
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.00518e70
push esi
push 0x6685e0
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov dword [ebp - 0x6f4c], esi
cmp dword [edi + 0x30], esi
jbe 0x481fd9
mov eax, dword [ebp - 0x6f70]
lea esi, [edi + 0x10c]
mov dword [ebp - 0x6f40], eax
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x481fd3
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646aac
lea ecx, [ebp - 0x2220]
call fcn.00544f70
push eax
push dword [ebp - 0x6f4c]
mov ecx, esi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x232c]
call fcn.00544fe0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646ad0
lea ecx, [ebp - 0x232c]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x227c]
call fcn.00544fe0
lea ecx, [ebp - 0x227c]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
je 0x481fb6
lea ecx, [ebp - 0x2308]
call fcn.00544c70
test al, al
je 0x481cd4
lea eax, [ebp - 0x2308]
push eax
lea ecx, [ebp - 0x2220]
call fcn.00544f70
push dword [ebp - 0x6f4c]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
mov edx, esi
mov ecx, eax
call fcn.004ec820
lea eax, [ebp - 0x216c]
xor esi, esi
push eax
lea ecx, [ebp - 0x227c]
mov dword [ebp - 0x6f54], esi
call fcn.00544f70
xor edx, edx
mov ecx, eax
call fcn.004ec640
test al, al
je 0x481fb0
nop
lea ecx, [ebp - 0x216c]
call fcn.00544f70
mov ecx, eax
call fcn.0052fcf0
test al, al
je 0x481f86
inc dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x2418]
push 0xc
call fcn.00401d20
lea ecx, [ebp - 0x2418]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x25f0]
mov byte [ebp - 4], 0xaf
call fcn.00401d20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646a98
lea ecx, [ebp - 0x216c]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x25f0]
call fcn.00545300
lea eax, [ebp - 0x2418]
mov byte [ebp - 4], 0xb0
push eax
lea ecx, [ebp - 0x25f0]
call fcn.00544f70
mov edx, 0x662c64
mov ecx, eax
call fcn.004ec3b0
test al, al
je 0x481f6c
push 0
push 1
push 1
push 0
push 0x66658c
lea ecx, [ebp - 0x2418]
call fcn.005438b0
test eax, eax
jne 0x481f6c
push eax
push 1
push 1
push eax
push 0x6665ac
lea ecx, [ebp - 0x2418]
call fcn.005438b0
test eax, eax
jne 0x481f6c
push eax
push 1
push 1
push eax
push 0x6665fc
lea ecx, [ebp - 0x2418]
call fcn.005438b0
test eax, eax
jne 0x481f6c
push eax
push 1
push 1
push eax
push 0x6665e0
lea ecx, [ebp - 0x2418]
call fcn.005438b0
test eax, eax
jne 0x481f6c
push eax
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x668654
lea ecx, [ebp - 0x2418]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x481f6c
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2418]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x662c40
push 3
push 0x33
push dword [eax + 0xa8]
call fcn.00499eb0
mov esi, eax
cmp esi, 0xffffffff
jne 0x481eaf
lea ecx, [ebp - 0x25f0]
call fcn.00545210
lea ecx, [ebp - 0x2418]
mov byte [ebp - 4], 0xae
call fcn.00545210
mov esi, dword [ebp - 0x6f54]
jmp 0x481f86
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.00544f70
push eax
lea ecx, [ebp - 0x25f0]
call fcn.00544f70
push eax
push 0
push 0x33
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666664
lea ecx, [ebp - 0x25f0]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x665308
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x2418]
call fcn.00544f70
push eax
push 0x668680
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
lea ecx, [ebp - 0x25f0]
call fcn.00545210
lea ecx, [ebp - 0x2418]
mov byte [ebp - 4], 0xae
call fcn.00545210
mov esi, dword [ebp - 0x6f54]
jmp 0x481f86
lea ecx, [ebp - 0x25f0]
call fcn.00545210
lea ecx, [ebp - 0x2418]
mov byte [ebp - 4], 0xae
call fcn.00545210
lea eax, [ebp - 0x216c]
inc esi
push eax
lea ecx, [ebp - 0x227c]
mov dword [ebp - 0x6f54], esi
call fcn.00544f70
mov edx, esi
mov ecx, eax
call fcn.004ec640
test al, al
jne 0x481d00
lea esi, [edi + 0x10c]
mov eax, dword [ebp - 0x6f4c]
add dword [ebp - 0x6f40], 0xc
inc eax
mov dword [ebp - 0x6f4c], eax
cmp eax, dword [edi + 0x30]
jb 0x481bf4
mov esi, dword [ebp - 0x6f7c]
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x483c80
test esi, esi
jne 0x482011
lea ecx, [ebp - 0x2308]
call fcn.00544c70
test al, al
je 0x482011
push esi
push 0x6686b0
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
jmp 0x483c80
push fcn.00545210
push fcn.005453c0
push 2
push 0xc
lea eax, [ebp - 0x2c]
push eax
call fcn.0041eab1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668708
lea ecx, [ebp - 0x26d4]
mov byte [ebp - 4], 0xb1
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2c]
call fcn.00544fe0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668708
lea ecx, [ebp - 0x26e0]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x20]
call fcn.00544fe0
push 0xc
lea ecx, [ebp - 0x24ec]
call fcn.00401d20
push 1
push 0x668758
lea ecx, [ebp - 0x24ec]
call fcn.00545350
push 0
push 0x668820
lea ecx, [ebp - 0x1fd4]
mov byte [ebp - 4], 0xb2
call fcn.005322d0
xor esi, esi
mov dword [ebp - 0x6f7c], esi
cmp dword [edi + 0x30], esi
jbe 0x48244e
mov eax, dword [ebp - 0x6f70]
mov dword [ebp - 0x6f40], eax
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48244e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646aac
lea ecx, [ebp - 0x2220]
call fcn.00544f70
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x232c]
call fcn.00544fe0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646ad0
lea ecx, [ebp - 0x232c]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x227c]
call fcn.00544fe0
lea ecx, [ebp - 0x227c]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
je 0x482437
lea eax, [ebp - 0x216c]
xor esi, esi
push eax
lea ecx, [ebp - 0x227c]
mov dword [ebp - 0x6f54], esi
call fcn.00544f70
xor edx, edx
mov ecx, eax
call fcn.004ec640
test al, al
je 0x482431
nop
lea ecx, [ebp - 0x216c]
call fcn.00544f70
mov ecx, eax
call fcn.0052fcf0
test al, al
je 0x482407
push 0xc
lea ecx, [ebp - 0x243c]
call fcn.00401d20
lea ecx, [ebp - 0x243c]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x25fc]
mov byte [ebp - 4], 0xb3
call fcn.00401d20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646a98
lea ecx, [ebp - 0x216c]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x25fc]
call fcn.00545300
lea eax, [ebp - 0x243c]
mov byte [ebp - 4], 0xb4
push eax
lea ecx, [ebp - 0x25fc]
call fcn.00544f70
mov edx, 0x662d80
mov ecx, eax
call fcn.004ec3b0
test al, al
je 0x4823ed
push 0x6581a0
lea ecx, [ebp - 0x243c]
call fcn.005452a0
test al, al
jne 0x4823ed
push 0x657aa8
lea ecx, [ebp - 0x243c]
call fcn.005452a0
test al, al
jne 0x4823ed
push 0x658628
lea ecx, [ebp - 0x243c]
call fcn.005452a0
test al, al
jne 0x4823ed
push 0x66885c
lea ecx, [ebp - 0x243c]
call fcn.005452a0
test al, al
jne 0x4823ed
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x668874
lea ecx, [ebp - 0x243c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x4823ed
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x243c]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x662d40
push 3
push 0x34
push dword [eax + 0xa8]
call fcn.00499eb0
mov esi, eax
cmp esi, 0xffffffff
jne 0x482330
lea ecx, [ebp - 0x25fc]
call fcn.00545210
lea ecx, [ebp - 0x243c]
mov byte [ebp - 4], 0xb2
call fcn.00545210
mov esi, dword [ebp - 0x6f54]
jmp 0x482407
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.00544f70
push eax
lea ecx, [ebp - 0x25fc]
call fcn.00544f70
push eax
push 0
push 0x34
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666664
lea ecx, [ebp - 0x25fc]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x665308
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x243c]
call fcn.00544f70
push eax
push 0x6688a8
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
lea ecx, [ebp - 0x25fc]
call fcn.00545210
lea ecx, [ebp - 0x243c]
mov byte [ebp - 4], 0xb2
call fcn.00545210
mov esi, dword [ebp - 0x6f54]
jmp 0x482407
lea ecx, [ebp - 0x25fc]
call fcn.00545210
lea ecx, [ebp - 0x243c]
mov byte [ebp - 4], 0xb2
call fcn.00545210
lea eax, [ebp - 0x216c]
inc esi
push eax
lea ecx, [ebp - 0x227c]
mov dword [ebp - 0x6f54], esi
call fcn.00544f70
mov edx, esi
mov ecx, eax
call fcn.004ec640
test al, al
jne 0x4821a0
mov esi, dword [ebp - 0x6f7c]
add dword [ebp - 0x6f40], 0xc
inc esi
mov dword [ebp - 0x6f7c], esi
cmp esi, dword [edi + 0x30]
jb 0x4820d8
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x483c5f
lea esi, [ebp - 0x2c]
mov dword [ebp - 0x6f7c], 0
mov dword [ebp - 0x6f54], esi
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x4827bc
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6688d4
mov ecx, esi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x204c]
call fcn.00544fe0
push 0x260
lea ecx, [ebp - 0x4a78]
call fcn.00401d70
push 1
lea ecx, [ebp - 0x204c]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x4a78]
call fcn.004016d0
push 1
lea ecx, [ebp - 0x204c]
mov byte [ebp - 4], 0xb5
call fcn.00544f70
push eax
lea ecx, [ebp - 0x4a78]
call fcn.00401820
test al, al
je 0x48278e
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d184
push 1
lea ecx, [ebp - 0x4a78]
call fcn.00401870
push eax
push 0x61d184
lea ecx, [ebp - 0x2160]
call fcn.00544fe0
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2160]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x24ec]
call fcn.005438b0
test eax, eax
jne 0x482775
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 1
lea ecx, [ebp - 0x4a78]
call fcn.00401870
push eax
push 0x61d048
mov ecx, esi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x204c]
call fcn.00544fe0
lea ecx, [ebp - 0x2160]
call fcn.005451e0
push 0
push 0x80
lea ecx, [ebp - 0x204c]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2884]
call fcn.00532c10
test eax, eax
je 0x482632
push 0
lea eax, [ebp - 0x2160]
push eax
lea ecx, [ebp - 0x2884]
call fcn.00532a50
test eax, eax
je 0x482632
push 0
push 1
push 1
push 0
push 0x6688e4
lea ecx, [ebp - 0x2160]
call fcn.005438b0
mov esi, eax
push 0
lea ecx, [esi + 0xa]
push ecx
push 1
push 0
push 0x6688fc
lea ecx, [ebp - 0x2160]
call fcn.005438b0
test esi, esi
je 0x482627
test eax, eax
je 0x482627
sub eax, esi
lea ecx, [ebp - 0x2160]
sub eax, 0xb
push eax
lea eax, [esi + 0xb]
push eax
call fcn.00543b50
jmp 0x482632
lea ecx, [ebp - 0x2160]
call fcn.005451e0
lea ecx, [ebp - 0x2160]
call fcn.00544c70
test al, al
je 0x482669
push 1
lea ecx, [ebp - 0x4a78]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2160]
call fcn.005452f0
push 0
lea ecx, [ebp - 0x2160]
call fcn.00544d00
jmp 0x482676
push 3
lea ecx, [ebp - 0x2160]
call fcn.00542f40
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x668874
lea ecx, [ebp - 0x204c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x482775
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x204c]
call fcn.00544f70
push eax
push 0x65f3a0
lea ecx, [ebp - 0x2160]
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 3
push 0x34
push dword [eax + 0xa8]
call fcn.00499eb0
mov esi, eax
cmp esi, 0xffffffff
je 0x482775
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f3a0
lea ecx, [ebp - 0x204c]
call fcn.00544f70
push eax
push 0
push 0x34
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666664
lea ecx, [ebp - 0x204c]
call fcn.00544f70
push eax
push 0x665308
push 0x65f3a0
push 0x6645d4
lea ecx, [ebp - 0x2160]
call fcn.00544f70
push eax
push 0x668918
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
lea ecx, [ebp - 0x4a78]
call fcn.004017d0
mov esi, dword [ebp - 0x6f54]
test al, al
jne 0x482500
lea ecx, [ebp - 0x4a78]
mov byte [ebp - 4], 0xb2
call fcn.00401720
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f54], esi
mov dword [ebp - 0x6f7c], eax
cmp eax, 2
jb 0x482470
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x483c5f
push 0x24
lea ecx, [ebp - 0x2830]
call fcn.00402080
lea ecx, [ebp - 0x2830]
call fcn.00513600
push 0xc
lea ecx, [ebp - 0x2264]
mov byte [ebp - 4], 0xb6
call fcn.00401d20
lea ecx, [ebp - 0x2264]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2424]
mov byte [ebp - 4], 0xb7
call fcn.00401d20
lea ecx, [ebp - 0x2424]
call fcn.005453c0
push 0
push 0x668940
lea ecx, [ebp - 0x1fd4]
mov byte [ebp - 4], 0xb8
call fcn.005322d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668974
lea ecx, [edi + 0x314]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00544fe0
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f7c], 0
jbe 0x482cc2
mov esi, dword [ebp - 0x6f70]
mov dword [ebp - 0x6f4c], esi
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x482cc2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6689b0
lea ecx, [ebp - 0x2220]
call fcn.00544f70
push eax
push dword [ebp - 0x6f7c]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x216c]
call fcn.00544fe0
lea eax, [ebp - 0x204c]
xor edx, edx
push eax
lea ecx, [ebp - 0x216c]
mov dword [ebp - 0x6f54], edx
call fcn.00544f70
xor edx, edx
mov ecx, eax
call fcn.004ec640
test al, al
je 0x482ca3
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x663300
lea ecx, [ebp - 0x204c]
call fcn.005435c0
push 0x100
lea ecx, [ebp - 0x204c]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2830]
call fcn.005133c0
test al, al
je 0x482c76
push 0
lea eax, [ebp - 0x2a40]
mov dword [ebp - 0x6eb4], 0
push eax
xorps xmm0, xmm0
lea ecx, [ebp - 0x2830]
push 0x662f98
movups xmmword [ebp - 0x6ec4], xmm0
call fcn.00512dc0
test al, al
je 0x482c76
lea eax, [ebp - 0x2a40]
push eax
lea eax, [ebp - 0x6ec4]
push eax
lea ecx, [ebp - 0x2830]
call fcn.005122e0
test al, al
je 0x482c76
lea eax, [ebp - 0x2264]
push eax
push 0x662fcc
lea eax, [ebp - 0x6ec4]
push eax
lea ecx, [ebp - 0x2830]
call fcn.00512b40
test eax, eax
je 0x482c55
push 0
push 1
push 1
push 0
push 0x6689ec
lea ecx, [ebp - 0x2264]
call fcn.005438b0
lea ecx, [ebp - 0x2264]
mov esi, eax
call fcn.00545180
sub eax, 0x12
cmp esi, eax
je 0x482c4f
push 0
push 1
push 1
push 0
push 0x668a14
lea ecx, [ebp - 0x2264]
call fcn.005438b0
lea ecx, [ebp - 0x2264]
mov esi, eax
call fcn.00545180
sub eax, 0xb
cmp esi, eax
je 0x482c4f
push 0
push 1
push 1
push 0
push 0x668a30
lea ecx, [ebp - 0x2264]
call fcn.005438b0
lea ecx, [ebp - 0x2264]
mov esi, eax
call fcn.00545180
sub eax, 0xb
cmp esi, eax
je 0x482c4f
lea eax, [ebp - 0x6ec4]
push eax
lea eax, [ebp - 0x2b84]
push eax
push 0x668a4c
lea ecx, [ebp - 0x2830]
call fcn.00512dc0
test al, al
je 0x482c4f
lea eax, [ebp - 0x2264]
push eax
push 0x668a68
lea eax, [ebp - 0x2b84]
push eax
lea ecx, [ebp - 0x2830]
call fcn.00512b40
test eax, eax
je 0x482c4f
push 0x66652c
lea ecx, [ebp - 0x2264]
call fcn.005452a0
test al, al
jne 0x482c4f
lea eax, [ebp - 0x2424]
push eax
push 0x662fa8
lea eax, [ebp - 0x6ec4]
push eax
lea ecx, [ebp - 0x2830]
call fcn.00512b40
test eax, eax
jne 0x482b04
lea eax, [ebp - 0x2424]
push eax
push 0x662fc0
lea eax, [ebp - 0x6ec4]
push eax
lea ecx, [ebp - 0x2830]
call fcn.00512b40
test eax, eax
je 0x482c4f
lea ecx, [ebp - 0x2264]
call fcn.00544f70
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.00544f70
mov edx, esi
mov ecx, eax
call fcn.0053c5e0
test al, al
jne 0x482c4f
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x668a74
lea ecx, [ebp - 0x2264]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x482c4f
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2424]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f4c]
push eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2264]
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 3
push 0x35
push dword [eax + 0xa8]
call fcn.00499eb0
mov esi, eax
cmp esi, 0xffffffff
je 0x482c4f
lea ecx, [ebp - 0x204c]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f4c]
push eax
push 0
push 0
push 0
push 0
push 0
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2424]
call fcn.00544f70
push eax
push 0
push 0x35
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666664
lea ecx, [ebp - 0x2424]
call fcn.00544f70
mov esi, dword [ebp - 0x6f4c]
mov ecx, esi
push eax
push 0x665308
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x2264]
call fcn.00544f70
push eax
push 0x665b30
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
jmp 0x482c55
mov esi, dword [ebp - 0x6f4c]
lea eax, [ebp - 0x2a40]
push eax
lea eax, [ebp - 0x6ec4]
push eax
lea ecx, [ebp - 0x2830]
call fcn.005122e0
test al, al
jne 0x4829a2
inc dword [ebp - 0x6f54]
lea eax, [ebp - 0x204c]
push eax
lea ecx, [ebp - 0x216c]
call fcn.00544f70
mov edx, dword [ebp - 0x6f54]
mov ecx, eax
call fcn.004ec640
test al, al
jne 0x482902
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f4c], esi
mov dword [ebp - 0x6f7c], eax
cmp eax, dword [edi + 0x30]
jb 0x482881
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x483c3e
push 0
push 0x668aa0
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x6e60]
push 1
push 0
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6e68], eax
mov dword [ebp - 0x6e64], 0x37
call fcn.00545350
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0xb9
call fcn.00544f70
lea ecx, [edi + 0x14c]
mov dword [ebp - 0x6e54], eax
mov dword [ebp - 0x6e50], 0
call fcn.00544f70
mov dword [ebp - 0x6e4c], eax
lea ecx, [ebp - 0x6e40]
lea eax, [ebp - 0x1fd4]
push 1
mov dword [ebp - 0x6e48], eax
mov eax, dword [edi + 4]
push 0x638c14
mov dword [ebp - 0x6e44], eax
call fcn.00545350
mov ecx, edi
mov byte [ebp - 4], 0xba
call fcn.0046c7f0
test al, al
jne 0x483c33
push 0xc
lea ecx, [ebp - 0x23b0]
call fcn.00401d20
lea ecx, [ebp - 0x23b0]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x23ec]
mov byte [ebp - 4], 0xbb
call fcn.00401d20
lea ecx, [ebp - 0x23ec]
call fcn.005453c0
xor esi, esi
mov byte [ebp - 4], 0xbc
mov dword [ebp - 0x6f40], esi
cmp dword [edi + 0x30], esi
jbe 0x482f55
nop
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x482f55
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00545180
cmp eax, 3
jl 0x482f45
lea eax, [ebp - 0x6e60]
push eax
lea ecx, [ebp - 0x2220]
call fcn.00544f70
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
mov edx, esi
mov ecx, eax
call fcn.004ec820
mov esi, dword [ebp - 0x6f40]
test al, al
je 0x482f45
push esi
lea ecx, [edi + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24c8]
mov dword [ebp - 0x6e50], eax
call fcn.00544f70
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x23b0]
call fcn.00544fe0
lea ecx, [ebp - 0x23b0]
call fcn.00544f70
mov ecx, eax
call fcn.0052fcf0
test al, al
je 0x482f45
lea ecx, [ebp - 0x23b0]
call fcn.00544f70
push eax
lea eax, [ebp - 0x6e68]
mov ecx, edi
push eax
call fcn.0048d690
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x482f55
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25e4]
call fcn.00544f70
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x23b0]
call fcn.00544fe0
lea ecx, [ebp - 0x23b0]
call fcn.00544f70
mov ecx, eax
call fcn.0052fcf0
test al, al
je 0x482f45
push 0
lea ecx, [ebp - 0x23b0]
call fcn.00544c90
lea ecx, [ebp - 0x23b0]
call fcn.00544f70
push eax
lea eax, [ebp - 0x6e68]
mov ecx, edi
push eax
call fcn.0048d690
inc esi
mov dword [ebp - 0x6f40], esi
cmp esi, dword [edi + 0x30]
jb 0x482dc0
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x483c1d
lea ecx, [ebp - 0x2638]
mov dword [ebp - 0x6e50], 0x65f3a0
call fcn.00544f70
push eax
lea eax, [ebp - 0x6e68]
mov ecx, edi
push eax
call fcn.0048d690
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x483c1d
push 0
push 1
lea ecx, [ebp - 0x2644]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x23b0]
call fcn.00545040
mov ecx, eax
call fcn.00544c90
lea ecx, [ebp - 0x23b0]
call fcn.00544f70
push eax
lea eax, [ebp - 0x6e68]
mov ecx, edi
push eax
call fcn.0048d690
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x483c1d
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x48304a
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668ad0
push esi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00544fe0
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x483000
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668b18
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00544fe0
cmp dword [ebp - 0x6fa8], 0
je 0x4830b1
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x668b18
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00544fe0
push 4
lea ecx, [ebp - 0x22c0]
call fcn.00401d40
lea ecx, [ebp - 0x22c0]
call fcn.0053f8e0
cmp dword [ebp - 0x6f74], 0
mov byte [ebp - 4], 0xbd
mov dword [ebp - 0x6f7c], 0
jbe 0x4833f8
mov eax, dword [ebp - 0x6f70]
mov ecx, esi
sub ecx, eax
mov dword [ebp - 0x6f40], eax
mov dword [ebp - 0x6f94], ecx
nop word [eax + eax]
add eax, ecx
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f54], eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x22c0]
call fcn.0053f870
test al, al
je 0x4833ca
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x4833f8
xor esi, esi
mov ecx, edi
mov dword [ebp - 0x6f6c], esi
call fcn.0046c7f0
test al, al
jne 0x4833ca
lea eax, [ebp - 0x6cb4]
push eax
push esi
lea ecx, [ebp - 0x22c0]
call fcn.0053f1c0
test al, al
je 0x4833c4
mov ecx, dword [ebp - 0x6f54]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668b60
push dword [ebp - 0x6cb4]
push 0x61d048
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00544fe0
mov ecx, dword [ebp - 0x6f54]
push 0
call fcn.00545180
push eax
push 1
push 0
push 0x668b88
lea ecx, [ebp - 0x1f98]
call fcn.005438b0
test eax, eax
je 0x4833b4
lea eax, [ebp - 0x23ec]
push eax
push 0x61d050
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f410
test al, al
je 0x4833b4
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2308]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x23ec]
call fcn.005438b0
mov dword [ebp - 0x6f48], eax
test eax, eax
je 0x4833b4
lea ecx, [ebp - 0x2308]
call fcn.00545180
add eax, dword [ebp - 0x6f48]
lea ecx, [ebp - 0x23ec]
push eax
call fcn.00543b90
push 3
push 0
push 0
push 0x61d050
push 0x61e29c
lea ecx, [ebp - 0x23ec]
call fcn.005430c0
mov ecx, eax
call fcn.00542f40
lea ecx, [ebp - 0x23ec]
call fcn.00545180
cmp eax, 3
jl 0x4833b4
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x664440
lea ecx, [ebp - 0x23ec]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x4833b4
mov ecx, dword [ebp - 0x6f54]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
push 0x61d048
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00544fe0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x23ec]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x660a20
push 3
push 0x37
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x4833b4
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.00544f70
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
push 0x37
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666664
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x23ec]
call fcn.00544f70
push eax
push 0x666ce8
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
mov ecx, edi
inc esi
call fcn.0046c7f0
test al, al
je 0x483150
mov dword [ebp - 0x6f6c], esi
mov ecx, dword [ebp - 0x6f7c]
mov eax, dword [ebp - 0x6f40]
inc ecx
add eax, 0xc
mov dword [ebp - 0x6f7c], ecx
cmp ecx, dword [ebp - 0x6f74]
mov ecx, dword [ebp - 0x6f94]
mov dword [ebp - 0x6f40], eax
jb 0x483100
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x483c12
push 0
push 0x668ba0
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
push 0xc
lea ecx, [ebp - 0x24f8]
call fcn.00401d20
lea ecx, [ebp - 0x24f8]
call fcn.005453c0
mov byte [ebp - 4], 0xbe
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f7c], 0
jbe 0x483bed
mov esi, dword [ebp - 0x6f70]
nop
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x483bed
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6689b0
lea ecx, [ebp - 0x2220]
call fcn.00544f70
push eax
push dword [ebp - 0x6f7c]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x216c]
call fcn.00544fe0
lea eax, [ebp - 0x24f8]
xor edx, edx
push eax
lea ecx, [ebp - 0x216c]
mov dword [ebp - 0x6f54], edx
call fcn.00544f70
xor edx, edx
mov ecx, eax
call fcn.004ec640
test al, al
je 0x483bd4
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646a48
lea ecx, [ebp - 0x24f8]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x204c]
call fcn.00544fe0
lea ecx, [ebp - 0x204c]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
je 0x483617
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x668bd8
push 0x663260
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x483617
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x204c]
call fcn.00544f70
push eax
mov ecx, esi
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x663260
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x483617
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x204c]
call fcn.00544f70
push eax
push 0
push 0x38
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666ff8
lea ecx, [ebp - 0x204c]
call fcn.00544f70
push eax
push 0x665308
mov ecx, esi
call fcn.00544f70
push eax
push 0x6645d4
push 0x663260
push 0x667030
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646a64
lea ecx, [ebp - 0x24f8]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x204c]
call fcn.00544fe0
lea ecx, [ebp - 0x204c]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
jne 0x483683
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x663300
lea ecx, [ebp - 0x24f8]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x204c]
call fcn.00544fe0
lea ecx, [ebp - 0x204c]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
je 0x483799
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x668bd8
push 0x6632c0
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x483799
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x204c]
call fcn.00544f70
push eax
mov ecx, esi
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6632c0
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x483799
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x204c]
call fcn.00544f70
push eax
push 0
push 0x38
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666ff8
lea ecx, [ebp - 0x204c]
call fcn.00544f70
push eax
push 0x665308
mov ecx, esi
call fcn.00544f70
push eax
push 0x6645d4
push 0x6632c0
push 0x667030
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646a7c
lea ecx, [ebp - 0x24f8]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x204c]
call fcn.00544fe0
lea ecx, [ebp - 0x204c]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
jne 0x483805
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x663240
lea ecx, [ebp - 0x24f8]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x204c]
call fcn.00544fe0
lea ecx, [ebp - 0x204c]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
je 0x48391b
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x668bd8
push 0x6631f8
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x48391b
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x204c]
call fcn.00544f70
push eax
mov ecx, esi
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6631f8
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x48391b
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x204c]
call fcn.00544f70
push eax
push 0
push 0x38
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666ff8
lea ecx, [ebp - 0x204c]
call fcn.00544f70
push eax
push 0x665308
mov ecx, esi
call fcn.00544f70
push eax
push 0x6645d4
push 0x6631f8
push 0x667030
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646a98
lea ecx, [ebp - 0x24f8]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x204c]
call fcn.00544fe0
lea ecx, [ebp - 0x204c]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
je 0x483a61
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x668bd8
push 0x663324
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x483a61
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x204c]
call fcn.00544f70
push eax
mov ecx, esi
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x663324
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x483a61
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x204c]
call fcn.00544f70
push eax
push 0
push 0x38
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666ff8
lea ecx, [ebp - 0x204c]
call fcn.00544f70
push eax
push 0x665308
mov ecx, esi
call fcn.00544f70
push eax
push 0x6645d4
push 0x663324
push 0x667030
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668c04
lea ecx, [ebp - 0x24f8]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x204c]
call fcn.00544fe0
lea ecx, [ebp - 0x204c]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
je 0x483ba7
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x668bd8
push 0x668c18
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x483ba7
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x204c]
call fcn.00544f70
push eax
mov ecx, esi
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x668c18
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x483ba7
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x204c]
call fcn.00544f70
push eax
push 0
push 0x38
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666ff8
lea ecx, [ebp - 0x204c]
call fcn.00544f70
push eax
push 0x665308
mov ecx, esi
call fcn.00544f70
push eax
push 0x6645d4
push 0x668c18
push 0x667030
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
inc dword [ebp - 0x6f54]
lea eax, [ebp - 0x24f8]
push eax
lea ecx, [ebp - 0x216c]
call fcn.00544f70
mov edx, dword [ebp - 0x6f54]
mov ecx, eax
call fcn.004ec640
test al, al
jne 0x4834d1
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f7c], eax
cmp eax, dword [edi + 0x30]
jb 0x483450
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.00518e70
mov ecx, edi
call fcn.0046c7f0
lea ecx, [ebp - 0x24f8]
call fcn.00545210
lea ecx, [ebp - 0x22c0]
call fcn.0053f820
lea ecx, [ebp - 0x23ec]
call fcn.00545210
lea ecx, [ebp - 0x23b0]
call fcn.00545210
lea ecx, [ebp - 0x6e68]
call fcn.00402710
lea ecx, [ebp - 0x2424]
call fcn.00545210
lea ecx, [ebp - 0x2264]
call fcn.00545210
lea ecx, [ebp - 0x2830]
call fcn.00401e40
lea ecx, [ebp - 0x24ec]
call fcn.00545210
push fcn.00545210
push 2
push 0xc
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0xae
push eax
call fcn.0041e708
lea ecx, [ebp - 0x2884]
call fcn.00401e00
lea ecx, [ebp - 0x2308]
call fcn.00545210
lea ecx, [ebp - 0x227c]
call fcn.00545210
lea ecx, [ebp - 0x232c]
call fcn.00545210
lea ecx, [ebp - 0x2160]
call fcn.00545210
lea ecx, [ebp - 0x24b0]
call fcn.00545210
lea ecx, [ebp - 0x204c]
call fcn.00545210
lea ecx, [ebp - 0x216c]
mov byte [ebp - 4], 0x45
call fcn.00545210
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48778b
test dword [edi + 0x34], 0x1000
jne 0x48778b
push 0
push 0x668c60
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x668cac
push dword [eax + 0x38]
call fcn.0051a1d0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x32
push dword [eax + 0x34]
call fcn.00516e60
push 0xc
lea ecx, [ebp - 0x2068]
call fcn.00401d20
lea ecx, [ebp - 0x2068]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x1fe0]
mov byte [ebp - 4], 0xbf
call fcn.00401d20
lea ecx, [ebp - 0x1fe0]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x24d4]
mov byte [ebp - 4], 0xc0
call fcn.00401d20
lea ecx, [ebp - 0x24d4]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x201c]
mov byte [ebp - 4], 0xc1
call fcn.00401d20
lea ecx, [ebp - 0x201c]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2090]
mov byte [ebp - 4], 0xc2
call fcn.00401d20
lea ecx, [ebp - 0x2090]
call fcn.005453c0
push 0x24
lea ecx, [ebp - 0x25cc]
mov byte [ebp - 4], 0xc3
call fcn.00402080
lea ecx, [ebp - 0x25cc]
call fcn.00513600
push 0x260
lea ecx, [ebp - 0x2df8]
mov byte [ebp - 4], 0xc4
call fcn.00401d70
lea ecx, [ebp - 0x2df8]
call fcn.004016a0
push 0x260
lea ecx, [ebp - 0x32b8]
mov byte [ebp - 4], 0xc5
call fcn.00401d70
lea ecx, [ebp - 0x32b8]
call fcn.004016a0
push 0xc
lea ecx, [ebp - 0x21c0]
mov byte [ebp - 4], 0xc6
call fcn.00401d20
lea ecx, [ebp - 0x21c0]
call fcn.00403a70
push 0xc
lea ecx, [ebp - 0x2350]
mov byte [ebp - 4], 0xc7
call fcn.00401d20
push 0xc
push 0
lea ecx, [ebp - 0x2350]
call fcn.004039b0
push 0xc
lea ecx, [ebp - 0x2058]
mov byte [ebp - 4], 0xc8
call fcn.00401d20
push 0xc
push 0
lea ecx, [ebp - 0x2058]
call fcn.004039b0
push 0xc
lea ecx, [ebp - 0x21e4]
mov byte [ebp - 4], 0xc9
call fcn.00401d20
lea ecx, [ebp - 0x21e4]
call fcn.00403a70
push 0xc
lea ecx, [ebp - 0x2208]
mov byte [ebp - 4], 0xca
call fcn.00401d20
push 0xc
push 0
lea ecx, [ebp - 0x2208]
call fcn.004031a0
xor esi, esi
mov byte [ebp - 4], 0xcb
push 0x20
lea ecx, [ebp - 0x280c]
mov dword [ebp - 0x6f4c], esi
call fcn.00401e20
lea ecx, [ebp - 0x280c]
call fcn.005332d0
mov byte [ebp - 4], 0xcc
mov ecx, dword [edi + 0x30]
mov dword [ebp - 0x6f54], esi
test ecx, ecx
je 0x484591
lea eax, [edi + 0x10c]
mov dword [ebp - 0x6f7c], eax
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d198
lea ecx, [ebp - 0x2184]
call fcn.00544f70
push eax
push dword [ebp - 0x6f54]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00544fe0
push 5
lea ecx, [ebp - 0x1fe0]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2df8]
call fcn.00401820
test al, al
je 0x484579
mov edi, dword [ebp - 0x6f54]
nop
push 1
push 1
lea ecx, [ebp - 0x2df8]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2090]
call fcn.00545040
push 0x6581a0
lea ecx, [ebp - 0x2090]
call fcn.005452a0
test al, al
jne 0x48455a
push str.Microsoft
lea ecx, [ebp - 0x2090]
call fcn.005452a0
test al, al
jne 0x48455a
push 0x668ce4
lea ecx, [ebp - 0x2090]
call fcn.005452a0
test al, al
jne 0x48455a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668cf8
push 1
lea ecx, [ebp - 0x2df8]
call fcn.00401870
push eax
push 0x61d048
lea ecx, [ebp - 0x2184]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f7c]
push eax
push edi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2068]
call fcn.00544fe0
lea ecx, [ebp - 0x2068]
call fcn.00544f70
push eax
call dword [0x5fd680]
test al, al
jne 0x4843b2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668d30
push 1
lea ecx, [ebp - 0x2df8]
call fcn.00401870
push eax
push 0x61d048
lea ecx, [ebp - 0x2184]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f7c]
push eax
push edi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2068]
call fcn.00544fe0
lea ecx, [ebp - 0x2068]
call fcn.00544f70
push eax
call dword [0x5fd680]
test al, al
jne 0x4843b2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d198
push 1
lea ecx, [ebp - 0x2df8]
call fcn.00401870
push eax
push 0x61d048
lea ecx, [ebp - 0x2184]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f7c]
push eax
push edi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00544fe0
push 5
lea ecx, [ebp - 0x1fe0]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x32b8]
call fcn.00401820
test al, al
je 0x48455a
push 2
lea ecx, [ebp - 0x1fe0]
call fcn.00543c00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668cf8
push 1
lea ecx, [ebp - 0x32b8]
call fcn.00401870
push eax
push 0x61d048
lea ecx, [ebp - 0x1fe0]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2068]
call fcn.00544fe0
lea ecx, [ebp - 0x2068]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
jne 0x4841be
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x668d30
push 1
lea ecx, [ebp - 0x32b8]
call fcn.00401870
push eax
push 0x61d048
lea ecx, [ebp - 0x1fe0]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2068]
call fcn.00544fe0
lea ecx, [ebp - 0x2068]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
je 0x48439a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668d74
lea eax, [esi + 1]
push 1
lea ecx, [ebp - 0x32b8]
mov dword [ebp - 0x6f40], eax
call fcn.00401870
push eax
push 0x61d048
lea ecx, [ebp - 0x1fe0]
call fcn.00544f70
push eax
push esi
push 2
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x21c0]
call fcn.004037b0
mov ecx, eax
call fcn.00403920
mov ecx, eax
call fcn.00544fe0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x32b8]
call fcn.00401870
push eax
push 0x61d048
push 1
lea ecx, [ebp - 0x2df8]
call fcn.00401870
push eax
push esi
push 2
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2350]
call fcn.004037b0
mov ecx, eax
call fcn.00403920
mov ecx, eax
call fcn.00544fe0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x32b8]
call fcn.00401870
push eax
push 0x61e0e4
push 1
lea ecx, [ebp - 0x2df8]
call fcn.00401870
push eax
push esi
push 2
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2058]
call fcn.004037b0
mov ecx, eax
call fcn.00403920
mov ecx, eax
call fcn.00544fe0
push esi
push 2
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2208]
call fcn.004030c0
mov ecx, eax
call fcn.00403180
push 2
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x21e4]
mov dword [eax], edi
call fcn.004037b0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668d8c
push esi
lea ecx, [ebp - 0x21c0]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2068]
call fcn.00544fe0
lea ecx, [ebp - 0x2068]
call fcn.00544f70
mov dl, 1
mov ecx, eax
call fcn.00532020
push 0
push eax
lea ecx, [ebp - 0x2068]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x280c]
call fcn.00532c10
test eax, eax
je 0x484394
push 0
push esi
lea ecx, [ebp - 0x21e4]
call fcn.00403920
push eax
lea ecx, [ebp - 0x280c]
call fcn.00532a50
test eax, eax
je 0x484394
push 3
push esi
lea ecx, [ebp - 0x21e4]
call fcn.00403920
mov ecx, eax
call fcn.00542f40
mov esi, dword [ebp - 0x6f40]
lea ecx, [ebp - 0x32b8]
call fcn.004017d0
test al, al
jne 0x484118
jmp 0x48455a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668d74
lea eax, [esi + 1]
push 1
lea ecx, [ebp - 0x2df8]
mov dword [ebp - 0x6f40], eax
call fcn.00401870
push eax
push 0x61d048
lea ecx, [ebp - 0x2184]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f7c]
push eax
push edi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
push esi
push 2
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x21c0]
call fcn.004037b0
mov ecx, eax
call fcn.00403920
mov ecx, eax
call fcn.00544fe0
push 1
push 1
lea ecx, [ebp - 0x2df8]
call fcn.00401870
push eax
push esi
push 2
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2350]
call fcn.004037b0
mov ecx, eax
call fcn.00403920
mov ecx, eax
call fcn.00545040
push 1
push 1
lea ecx, [ebp - 0x2df8]
call fcn.00401870
push eax
push esi
push 2
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2058]
call fcn.004037b0
mov ecx, eax
call fcn.00403920
mov ecx, eax
call fcn.00545040
push esi
push 2
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2208]
call fcn.004030c0
mov ecx, eax
call fcn.00403180
push 2
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x21e4]
mov dword [eax], edi
call fcn.004037b0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668d8c
push esi
lea ecx, [ebp - 0x21c0]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2068]
call fcn.00544fe0
lea ecx, [ebp - 0x2068]
call fcn.00544f70
mov dl, 1
mov ecx, eax
call fcn.00532020
push 0
push eax
lea ecx, [ebp - 0x2068]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x280c]
call fcn.00532c10
test eax, eax
je 0x484554
push 0
push esi
lea ecx, [ebp - 0x21e4]
call fcn.00403920
push eax
lea ecx, [ebp - 0x280c]
call fcn.00532a50
test eax, eax
je 0x484554
push 3
push esi
lea ecx, [ebp - 0x21e4]
call fcn.00403920
mov ecx, eax
call fcn.00542f40
mov esi, dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2df8]
call fcn.004017d0
test al, al
jne 0x483f60
mov edi, dword [ebp - 0x6f44]
mov dword [ebp - 0x6f4c], esi
mov eax, dword [ebp - 0x6f54]
mov ecx, dword [edi + 0x30]
inc eax
mov dword [ebp - 0x6f54], eax
cmp eax, ecx
jb 0x483ef0
mov dword [ebp - 0x6f40], 0
test ecx, ecx
je 0x4847a7
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668da8
lea ecx, [ebp - 0x2220]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
push ecx
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2068]
call fcn.00544fe0
lea ecx, [ebp - 0x2068]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
jne 0x484659
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x668e00
lea ecx, [ebp - 0x2220]
call fcn.00544f70
push eax
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2068]
call fcn.00544fe0
lea ecx, [ebp - 0x2068]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
je 0x484791
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668e68
lea ecx, [ebp - 0x2220]
inc esi
call fcn.00544f70
push eax
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x21c0]
push 2
push esi
call fcn.004037b0
mov ecx, eax
call fcn.00403920
mov ecx, eax
call fcn.00544fe0
push 1
push 0x668e88
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x2350]
push 2
push esi
call fcn.004037b0
mov ecx, eax
call fcn.00403920
mov ecx, eax
call fcn.00545040
push 1
push 0x668ec0
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x2058]
push 2
push esi
call fcn.004037b0
mov ecx, eax
call fcn.00403920
mov ecx, eax
call fcn.00545040
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x2208]
push 2
push esi
call fcn.004030c0
mov ecx, eax
call fcn.00403180
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov dword [eax], ecx
lea ecx, [ebp - 0x2184]
push 0x668edc
call fcn.00544f70
push eax
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
push dword [ebp - 0x6f4c]
push 2
push esi
lea ecx, [ebp - 0x21e4]
call fcn.004037b0
mov ecx, eax
call fcn.00403920
mov ecx, eax
call fcn.00544fe0
mov dword [ebp - 0x6f4c], esi
mov eax, dword [ebp - 0x6f40]
inc eax
mov dword [ebp - 0x6f40], eax
cmp eax, dword [edi + 0x30]
jb 0x4845a3
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x4876ed
lea ecx, [ebp - 0x1fd4]
push 0
test esi, esi
jne 0x4847d1
push 0x668f20
call fcn.005322d0
jmp 0x4876ed
push 0x668fa0
call fcn.005322d0
mov dword [ebp - 0x6f40], 0
test esi, esi
je 0x484eed
nop dword [eax]
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x484eed
push 0x668ec0
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.005452a0
mov byte [ebp - 0x6f61], al
lea ecx, [ebp - 0x21c0]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
je 0x484847
push 0x66900c
jmp 0x48484c
push 0x669018
push dword [ebp - 0x6f40]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2068]
call fcn.00544fe0
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2208]
call fcn.00403180
push 0x260
lea ecx, [ebp - 0x53f8]
mov eax, dword [eax]
mov dword [ebp - 0x6f7c], eax
call fcn.00401d70
push 1
lea ecx, [ebp - 0x2068]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x53f8]
call fcn.004016d0
push 3
lea ecx, [ebp - 0x2068]
mov byte [ebp - 4], 0xcd
call fcn.00543c00
lea ecx, [ebp - 0x53f8]
call fcn.00401810
test al, al
je 0x484ec9
mov esi, dword [ebp - 0x6f40]
nop word [eax + eax]
push 1
lea ecx, [ebp - 0x53f8]
call fcn.00401870
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.005452f0
cmp byte [ebp - 0x6f61], 0
jne 0x484937
push 0x66652c
lea ecx, [ebp - 0x1fe0]
call fcn.00545260
test al, al
je 0x484937
push 0
push 1
push 1
push 0
push 0x66653c
lea ecx, [ebp - 0x1fe0]
call fcn.005438b0
cmp eax, 1
jne 0x484eb0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666550
push 1
lea ecx, [ebp - 0x53f8]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2068]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00544fe0
push 0x100
lea ecx, [ebp - 0x1fe0]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x25cc]
call fcn.005133c0
test al, al
je 0x484eb0
lea eax, [ebp - 0x201c]
push eax
push 0x622cbc
push 0x666578
lea ecx, [ebp - 0x25cc]
call fcn.00512b90
test eax, eax
je 0x484be8
push 0
push 1
push 1
push 0
push 0x66658c
lea ecx, [ebp - 0x201c]
call fcn.005438b0
test eax, eax
jne 0x484be8
push eax
push 1
push 1
push eax
push 0x6665ac
lea ecx, [ebp - 0x201c]
call fcn.005438b0
test eax, eax
jne 0x484be8
push eax
push 1
push 1
push eax
push 0x6665fc
lea ecx, [ebp - 0x201c]
call fcn.005438b0
test eax, eax
jne 0x484be8
push 0x6665c8
lea ecx, [ebp - 0x201c]
call fcn.005452a0
test al, al
jne 0x484be8
push 0
push 1
push 1
push 0
push 0x6665e0
lea ecx, [ebp - 0x201c]
call fcn.005438b0
test eax, eax
jne 0x484be8
push eax
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x669028
lea ecx, [ebp - 0x201c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x484be8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d160
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
push 0x669074
lea ecx, [ebp - 0x2584]
call fcn.00544fe0
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [ebp - 0x6f70]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 1
lea ecx, [ebp - 0x201c]
mov dword [ebp - 0x6f54], eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2584]
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x3e
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x484be8
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push 0
push 0
push 0
push 0
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00544f70
push eax
push 0x666578
push 0x3e
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0x666664
lea ecx, [ebp - 0x1fe0]
call fcn.00544f70
push eax
push 0x665d2c
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x6645b8
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x201c]
call fcn.00544f70
push eax
push 0x666698
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
lea eax, [ebp - 0x2aa4]
mov dword [ebp - 0x6f04], 0
push eax
push 0x622cbc
xorps xmm0, xmm0
lea ecx, [ebp - 0x25cc]
push 0x6666b8
movups xmmword [ebp - 0x6f14], xmm0
call fcn.00512c90
test al, al
je 0x484eb0
lea eax, [ebp - 0x2aa4]
push eax
lea eax, [ebp - 0x6f14]
push eax
lea ecx, [ebp - 0x25cc]
call fcn.005122e0
test al, al
je 0x484eb0
lea eax, [ebp - 0x201c]
push eax
lea eax, [ebp - 0x6f14]
push eax
lea ecx, [ebp - 0x25cc]
call fcn.005125f0
test eax, eax
je 0x484e8f
push 0
push 1
push 1
push 0
push 0x66658c
lea ecx, [ebp - 0x201c]
call fcn.005438b0
test eax, eax
jne 0x484e8f
push eax
push 1
push 1
push eax
push 0x6665ac
lea ecx, [ebp - 0x201c]
call fcn.005438b0
test eax, eax
jne 0x484e8f
push eax
push 1
push 1
push eax
push 0x6665fc
lea ecx, [ebp - 0x201c]
call fcn.005438b0
test eax, eax
jne 0x484e8f
push 0x6665c8
lea ecx, [ebp - 0x201c]
call fcn.005452a0
test al, al
jne 0x484e8f
push 0
push 1
push 1
push 0
push 0x6665e0
lea ecx, [ebp - 0x201c]
call fcn.005438b0
test eax, eax
jne 0x484e8f
push eax
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x669028
lea ecx, [ebp - 0x201c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x484e8f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d160
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
push 0x66908c
lea ecx, [ebp - 0x2584]
call fcn.00544fe0
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [ebp - 0x6f70]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 1
lea ecx, [ebp - 0x201c]
mov dword [ebp - 0x6f54], eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2584]
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x3e
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x484e8f
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push 0
push 0
push 0
push 0
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00544f70
push eax
push 0x6666b8
push 0x3e
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0x666664
lea ecx, [ebp - 0x1fe0]
call fcn.00544f70
push eax
push 0x665d2c
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x6645b8
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x201c]
call fcn.00544f70
push eax
push 0x6690ac
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
lea eax, [ebp - 0x2aa4]
push eax
lea eax, [ebp - 0x6f14]
push eax
lea ecx, [ebp - 0x25cc]
call fcn.005122e0
test al, al
jne 0x484c41
lea ecx, [ebp - 0x53f8]
call fcn.004017d0
test al, al
jne 0x4848e0
mov esi, dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x53f8]
mov byte [ebp - 4], 0xcc
call fcn.00401720
mov eax, dword [ebp - 0x6f40]
inc eax
mov dword [ebp - 0x6f40], eax
cmp eax, esi
jb 0x4847f0
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x4876ed
push 0
push 0x6690e0
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov dword [ebp - 0x6f40], 0
test esi, esi
je 0x485359
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x485359
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2208]
call fcn.00403180
push 0x668ec0
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2058]
mov eax, dword [eax]
mov dword [ebp - 0x6f48], eax
call fcn.00403920
mov ecx, eax
call fcn.005452a0
mov byte [ebp - 0x6f61], al
lea ecx, [ebp - 0x21c0]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
je 0x484f90
push 0x66900c
jmp 0x484f95
push 0x669018
push dword [ebp - 0x6f40]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2068]
call fcn.00544fe0
push 0x260
lea ecx, [ebp - 0x5198]
call fcn.00401d70
push 1
lea ecx, [ebp - 0x2068]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x5198]
call fcn.004016d0
push 3
lea ecx, [ebp - 0x2068]
mov byte [ebp - 4], 0xce
call fcn.00543c00
lea ecx, [ebp - 0x5198]
call fcn.00401810
test al, al
je 0x485335
mov esi, dword [ebp - 0x6f40]
nop word [eax + eax]
push 1
lea ecx, [ebp - 0x5198]
call fcn.00401870
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.005452f0
cmp byte [ebp - 0x6f61], 0
jne 0x485067
push 0x66652c
lea ecx, [ebp - 0x1fe0]
call fcn.00545260
test al, al
je 0x485067
push 0
push 1
push 1
push 0
push 0x66653c
lea ecx, [ebp - 0x1fe0]
call fcn.005438b0
cmp eax, 1
jne 0x48531c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666550
push 1
lea ecx, [ebp - 0x5198]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2068]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00544fe0
push 0x100
lea ecx, [ebp - 0x1fe0]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x25cc]
call fcn.005133c0
test al, al
je 0x48531c
lea eax, [ebp - 0x201c]
push eax
push 0x622cbc
push 0x666830
lea ecx, [ebp - 0x25cc]
call fcn.00512b90
test eax, eax
je 0x48531c
push 0
push 1
push 1
push 0
push 0x66658c
lea ecx, [ebp - 0x201c]
call fcn.005438b0
test eax, eax
jne 0x48531c
push eax
push 1
push 1
push eax
push 0x6666e4
lea ecx, [ebp - 0x201c]
call fcn.005438b0
test eax, eax
jne 0x48531c
push eax
push 1
push 1
push eax
push 0x6665ac
lea ecx, [ebp - 0x201c]
call fcn.005438b0
test eax, eax
jne 0x48531c
push eax
push 1
push 1
push eax
push 0x6665fc
lea ecx, [ebp - 0x201c]
call fcn.005438b0
test eax, eax
jne 0x48531c
push eax
push 1
push 1
push eax
push 0x666708
lea ecx, [ebp - 0x201c]
call fcn.005438b0
test eax, eax
jne 0x48531c
push eax
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x669140
lea ecx, [ebp - 0x201c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x48531c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d160
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
push 0x669194
lea ecx, [ebp - 0x2584]
call fcn.00544fe0
mov eax, dword [ebp - 0x6f48]
mov ecx, dword [ebp - 0x6f70]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 1
lea ecx, [ebp - 0x201c]
mov dword [ebp - 0x6f54], eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2584]
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x3f
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f94], eax
cmp eax, 0xffffffff
je 0x48531c
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push 0
push 0
push 0
push 0
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00544f70
push eax
push 0x666910
push 0x3f
push dword [ebp - 0x6f94]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0x666664
lea ecx, [ebp - 0x1fe0]
call fcn.00544f70
push eax
push 0x665d2c
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x6645b8
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x201c]
call fcn.00544f70
push eax
push 0x6691c8
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
lea ecx, [ebp - 0x5198]
call fcn.004017d0
test al, al
jne 0x485010
mov esi, dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x5198]
mov byte [ebp - 4], 0xcc
call fcn.00401720
mov eax, dword [ebp - 0x6f40]
inc eax
mov dword [ebp - 0x6f40], eax
cmp eax, esi
jb 0x484f20
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x4876ed
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x669210
lea ecx, [edi + 0x314]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00544fe0
push 0
push 0x669250
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov dword [ebp - 0x6f40], 0
test esi, esi
je 0x4859c8
nop dword [eax]
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x4859c8
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2208]
call fcn.00403180
push 0xc
lea ecx, [ebp - 0x26b0]
mov eax, dword [eax]
mov dword [ebp - 0x6f48], eax
call fcn.00401d20
lea ecx, [ebp - 0x26b0]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x26bc]
mov byte [ebp - 4], 0xcf
call fcn.00401d20
lea ecx, [ebp - 0x26bc]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2608]
mov byte [ebp - 4], 0xd0
call fcn.00401d20
lea ecx, [ebp - 0x2608]
call fcn.005453c0
push 0x668ec0
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2058]
mov byte [ebp - 4], 0xd1
call fcn.00403920
mov ecx, eax
call fcn.005452a0
mov byte [ebp - 0x6f61], al
lea ecx, [ebp - 0x21c0]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
je 0x485484
push 0x66900c
jmp 0x485489
push 0x669018
push dword [ebp - 0x6f40]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2068]
call fcn.00544fe0
push 0x260
lea ecx, [ebp - 0x45b8]
call fcn.00401d70
push 1
lea ecx, [ebp - 0x2068]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x45b8]
call fcn.004016d0
push 3
lea ecx, [ebp - 0x2068]
mov byte [ebp - 4], 0xd2
call fcn.00543c00
lea ecx, [ebp - 0x45b8]
call fcn.00401810
test al, al
je 0x485983
nop dword [eax]
nop dword [eax + eax]
push 1
lea ecx, [ebp - 0x45b8]
call fcn.00401870
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.005452f0
cmp byte [ebp - 0x6f61], 0
jne 0x485557
push 0x66652c
lea ecx, [ebp - 0x1fe0]
call fcn.00545260
test al, al
je 0x485557
push 0
push 1
push 1
push 0
push 0x66653c
lea ecx, [ebp - 0x1fe0]
call fcn.005438b0
cmp eax, 1
jne 0x48596a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666550
push 1
lea ecx, [ebp - 0x45b8]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2068]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00544fe0
push 0x100
lea ecx, [ebp - 0x1fe0]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x25cc]
call fcn.005133c0
test al, al
je 0x48596a
lea eax, [ebp - 0x2ab8]
mov dword [ebp - 0x6f18], 0
push eax
push 0x622cbc
xorps xmm0, xmm0
lea ecx, [ebp - 0x25cc]
push 0x666a44
movups xmmword [ebp - 0x6f28], xmm0
call fcn.00512c90
test al, al
je 0x48596a
lea eax, [ebp - 0x2ab8]
push eax
lea eax, [ebp - 0x6f28]
push eax
lea ecx, [ebp - 0x25cc]
call fcn.005126b0
test al, al
je 0x48596a
lea eax, [ebp - 0x26b0]
push eax
lea eax, [ebp - 0x6f28]
push eax
lea ecx, [ebp - 0x25cc]
call fcn.00512c50
test al, al
je 0x485949
lea ecx, [ebp - 0x26b0]
call fcn.00544f70
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.00544f70
mov edx, esi
mov ecx, eax
call fcn.0053c5e0
test al, al
jne 0x485949
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666a70
lea ecx, [ebp - 0x26b0]
call fcn.00544f70
push eax
push 0x666a94
lea ecx, [ebp - 0x26bc]
call fcn.00544fe0
lea eax, [ebp - 0x2090]
push eax
push 0x622cbc
lea ecx, [ebp - 0x26bc]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x25cc]
call fcn.00512b90
test eax, eax
je 0x485949
lea ecx, [ebp - 0x2090]
call fcn.00544f70
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.00544f70
mov edx, esi
mov ecx, eax
call fcn.0053c5e0
test al, al
jne 0x485949
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x6692a8
lea ecx, [ebp - 0x2090]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x485949
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666ac4
lea ecx, [ebp - 0x26b0]
call fcn.00544f70
push eax
push 0x666a94
lea ecx, [ebp - 0x26bc]
call fcn.00544fe0
lea eax, [ebp - 0x2608]
push eax
push 0x622cbc
lea ecx, [ebp - 0x26bc]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x25cc]
call fcn.00512b90
test eax, eax
je 0x4857b8
push 0
push 1
push 1
push 5
push 0x61e384
lea ecx, [ebp - 0x2608]
call fcn.005438b0
test eax, eax
jne 0x4857b8
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x666ad4
push 1
lea ecx, [ebp - 0x45b8]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2068]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2608]
call fcn.00543350
lea ecx, [ebp - 0x2608]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
je 0x485949
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x26b0]
call fcn.00544f70
push eax
push 0x666a94
lea ecx, [ebp - 0x26bc]
call fcn.00544fe0
mov eax, dword [ebp - 0x6f48]
mov ecx, dword [ebp - 0x6f70]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x2608]
call fcn.00544f70
push eax
mov ecx, esi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2090]
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x40
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f94], eax
cmp eax, 0xffffffff
je 0x485949
push 0
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
push 0
push 0
lea ecx, [ebp - 0x2608]
call fcn.00544f70
push eax
push 0
mov ecx, esi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x26bc]
call fcn.00544f70
push eax
push 0x40
push dword [ebp - 0x6f94]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0x666664
lea ecx, [ebp - 0x2608]
call fcn.00544f70
push eax
push 0x665308
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
push 0x6645b8
mov ecx, esi
call fcn.00544f70
push eax
push 0x666af0
lea ecx, [ebp - 0x26b0]
call fcn.00544f70
push eax
push 0x6264cc
lea ecx, [ebp - 0x2090]
call fcn.00544f70
push eax
push 0x6692f0
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
lea eax, [ebp - 0x2ab8]
push eax
lea eax, [ebp - 0x6f28]
push eax
lea ecx, [ebp - 0x25cc]
call fcn.005126b0
test al, al
jne 0x485610
lea ecx, [ebp - 0x45b8]
call fcn.004017d0
test al, al
jne 0x485500
mov esi, dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x45b8]
call fcn.00401720
lea ecx, [ebp - 0x2608]
call fcn.00545210
lea ecx, [ebp - 0x26bc]
call fcn.00545210
lea ecx, [ebp - 0x26b0]
mov byte [ebp - 4], 0xcc
call fcn.00545210
mov eax, dword [ebp - 0x6f40]
inc eax
mov dword [ebp - 0x6f40], eax
cmp eax, esi
jb 0x4853c0
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x4876ed
push 0
push 0x669320
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x6e2c]
push 1
push 0
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6e34], eax
mov dword [ebp - 0x6e30], 0x41
call fcn.00545350
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0xd3
call fcn.00544f70
lea ecx, [edi + 0x14c]
mov dword [ebp - 0x6e20], eax
mov dword [ebp - 0x6e1c], 0
call fcn.00544f70
mov dword [ebp - 0x6e18], eax
lea ecx, [ebp - 0x6e0c]
lea eax, [ebp - 0x1fd4]
mov dword [ebp - 0x6e14], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0x6e10], eax
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2344]
mov byte [ebp - 4], 0xd4
call fcn.00401d20
lea ecx, [ebp - 0x2344]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x22e4]
mov byte [ebp - 4], 0xd5
call fcn.00401d20
lea ecx, [ebp - 0x22e4]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2338]
mov byte [ebp - 4], 0xd6
call fcn.00401d20
lea ecx, [ebp - 0x2338]
call fcn.005453c0
mov ecx, edi
mov byte [ebp - 4], 0xd7
call fcn.0046c7f0
test al, al
jne 0x4876c1
mov dword [ebp - 0x6f40], 0
test esi, esi
je 0x485d6c
nop word [eax + eax]
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x485d6c
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x21e4]
call fcn.00403920
mov ecx, eax
call fcn.00545180
cmp eax, 5
jl 0x485d4f
mov esi, dword [ebp - 0x6f40]
lea ecx, [ebp - 0x21e4]
push esi
call fcn.00403920
push eax
lea ecx, [ebp - 0x6e2c]
call fcn.005452c0
push esi
lea ecx, [ebp - 0x2208]
call fcn.00403180
mov ecx, dword [ebp - 0x6f70]
mov eax, dword [eax]
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
call fcn.00544f70
push esi
lea ecx, [ebp - 0x2058]
mov dword [ebp - 0x6e1c], eax
call fcn.00403920
push eax
lea ecx, [ebp - 0x6e0c]
call fcn.005452c0
push esi
lea ecx, [ebp - 0x2208]
call fcn.00403180
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24c8]
mov esi, eax
call fcn.00544f70
push eax
push dword [esi]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2344]
call fcn.00544fe0
lea ecx, [ebp - 0x2344]
call fcn.00544f70
mov ecx, eax
call fcn.0052fcf0
test al, al
je 0x485d49
lea ecx, [ebp - 0x2344]
call fcn.00544f70
push eax
lea eax, [ebp - 0x6e34]
mov ecx, edi
push eax
call fcn.0048d690
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x485d66
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2208]
call fcn.00403180
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25e4]
mov esi, eax
call fcn.00544f70
push eax
push dword [esi]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2344]
call fcn.00544fe0
lea ecx, [ebp - 0x2344]
call fcn.00544f70
mov ecx, eax
call fcn.0052fcf0
test al, al
je 0x485d49
push 0
lea ecx, [ebp - 0x2344]
call fcn.00544c90
lea ecx, [ebp - 0x2344]
call fcn.00544f70
push eax
lea eax, [ebp - 0x6e34]
mov ecx, edi
push eax
call fcn.0048d690
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x6e2c]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2338]
call fcn.005438b0
test eax, eax
jne 0x485d49
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x61d184
lea ecx, [ebp - 0x6e2c]
call fcn.00544f70
push eax
push 0x61d184
lea ecx, [ebp - 0x2338]
call fcn.005435c0
lea ecx, [ebp - 0x2638]
mov dword [ebp - 0x6e1c], 0x65f3a0
call fcn.00544f70
push eax
lea eax, [ebp - 0x6e34]
mov ecx, edi
push eax
call fcn.0048d690
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x485d66
lea eax, [ebp - 0x2644]
push eax
lea ecx, [ebp - 0x2344]
call fcn.005452c0
push 0
lea ecx, [ebp - 0x2344]
call fcn.00544c90
lea ecx, [ebp - 0x2344]
call fcn.00544f70
push eax
lea eax, [ebp - 0x6e34]
mov ecx, edi
push eax
call fcn.0048d690
mov esi, dword [ebp - 0x6f4c]
mov eax, dword [ebp - 0x6f40]
inc eax
mov dword [ebp - 0x6f40], eax
cmp eax, esi
jb 0x485ae0
jmp 0x485d6c
mov esi, dword [ebp - 0x6f4c]
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x4876c1
push 4
lea ecx, [ebp - 0x2124]
call fcn.00401d40
lea ecx, [ebp - 0x2124]
call fcn.0053f8e0
xor eax, eax
mov byte [ebp - 4], 0xd8
mov dword [ebp - 0x6f7c], eax
test esi, esi
je 0x4861b0
xor esi, esi
mov dword [ebp - 0x6f6c], esi
nop
push eax
lea ecx, [ebp - 0x2208]
call fcn.00403180
mov eax, dword [eax]
mov dword [ebp - 0x6f40], eax
test esi, esi
jne 0x485e19
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push 0x668ad0
push eax
lea ecx, [edi + 0x104]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
push str.HKU_
lea ecx, [ebp - 0x1f98]
call fcn.00544fe0
mov eax, dword [ebp - 0x6f40]
mov ecx, dword [ebp - 0x6f70]
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
call fcn.00544f70
mov dword [ebp - 0x6f54], eax
jmp 0x485e78
cmp esi, 1
jne 0x485e3f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668ad0
push dword [ebp - 0x6f8c]
jmp 0x485e63
cmp esi, 2
jne 0x485e6e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668ad0
push dword [ebp - 0x6fa4]
lea ecx, [ebp - 0x1f98]
call fcn.00544fe0
mov dword [ebp - 0x6f54], 0x65f3a0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2124]
call fcn.0053f870
test al, al
je 0x486187
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f94], 0
push eax
push 0
lea ecx, [ebp - 0x2124]
call fcn.0053f1c0
test al, al
je 0x486187
mov esi, dword [ebp - 0x6f7c]
nop word [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668b60
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x61d048
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00544fe0
push 0
push 0x20019
lea ecx, [ebp - 0x1fe0]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x486159
lea eax, [ebp - 0x22e4]
push eax
push 0x61d050
lea ecx, [ebp - 0x1f74]
call fcn.0053f580
test al, al
je 0x486159
lea ecx, [ebp - 0x22e4]
call fcn.00544c70
test al, al
jne 0x486159
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x22e4]
call fcn.005449e0
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x21e4]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x22e4]
call fcn.005438b0
test eax, eax
je 0x486159
push esi
lea ecx, [ebp - 0x21e4]
call fcn.00403920
mov ecx, eax
call fcn.00545180
inc eax
lea ecx, [ebp - 0x22e4]
push eax
call fcn.00543b90
push 0
push 0
push 0x61d050
push 0x61e29c
push 3
lea ecx, [ebp - 0x22e4]
call fcn.00542f40
mov ecx, eax
call fcn.005430c0
lea ecx, [ebp - 0x22e4]
call fcn.00544c70
test al, al
jne 0x486159
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x61d048
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00544fe0
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x664498
lea ecx, [ebp - 0x22e4]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x486159
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x22e4]
call fcn.00544f70
push eax
push dword [ebp - 0x6f54]
mov eax, dword [edi + 8]
mov ecx, edi
push 0x660a20
push 5
push 0x41
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x486159
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
push 0
push 0
push 0
push 0
push dword [ebp - 0x6f54]
lea ecx, [ebp - 0x1fe0]
push 0
call fcn.00544f70
push eax
push 0x41
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666664
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
push 0x6645b8
push dword [ebp - 0x6f54]
lea ecx, [ebp - 0x22e4]
push 0x6645d4
call fcn.00544f70
push eax
push 0x666ce8
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
mov eax, dword [ebp - 0x6f94]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x2124]
mov dword [ebp - 0x6f94], eax
call fcn.0053f1c0
test al, al
jne 0x485ed0
mov esi, dword [ebp - 0x6f6c]
mov eax, dword [ebp - 0x6f7c]
inc esi
mov dword [ebp - 0x6f6c], esi
cmp esi, 3
jb 0x485db0
inc eax
mov dword [ebp - 0x6f7c], eax
cmp eax, dword [ebp - 0x6f4c]
jb 0x485da7
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x4876b6
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x48622a
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
nop word [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x66938c
push esi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00544fe0
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4861e0
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6693b4
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00544fe0
cmp dword [ebp - 0x6fa8], 0
je 0x486291
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x6693b4
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00544fe0
push 0
push 0x6693e0
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
lea ecx, [ebp - 0x2338]
call fcn.005451e0
cmp dword [ebp - 0x6f74], 0
jbe 0x486aa2
mov ecx, dword [ebp - 0x6f70]
mov eax, esi
mov edx, dword [ebp - 0x6f74]
sub eax, ecx
mov dword [ebp - 0x6f48], eax
mov eax, dword [ebp - 0x6f4c]
mov dword [ebp - 0x6f40], ecx
mov dword [ebp - 0x6f54], edx
xor esi, esi
mov dword [ebp - 0x6f6c], esi
test eax, eax
je 0x486a8a
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x486a72
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x2350]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f48]
add ecx, dword [ebp - 0x6f40]
push eax
push 0x61d048
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2120]
call fcn.00544fe0
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2120]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2338]
call fcn.005438b0
test eax, eax
jne 0x486a61
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x61d184
lea ecx, [ebp - 0x2120]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2338]
call fcn.005435c0
push 0
push 0x20019
lea ecx, [ebp - 0x2120]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x4865ba
lea eax, [ebp - 0x201c]
push eax
push 0x660bd4
lea ecx, [ebp - 0x1f74]
call fcn.0053f580
test al, al
je 0x4865ba
lea eax, [ebp - 0x218c]
mov dword [ebp - 0x218c], 0
push eax
push 0x660c74
lea ecx, [ebp - 0x1f74]
call fcn.0053f4f0
test al, al
je 0x48640e
cmp dword [ebp - 0x218c], 0
jne 0x4865ba
push 0
push 1
push 1
push 0
push 0x66658c
lea ecx, [ebp - 0x201c]
call fcn.005438b0
test eax, eax
jne 0x4865ba
push eax
push 1
push 1
push eax
push 0x6665ac
lea ecx, [ebp - 0x201c]
call fcn.005438b0
test eax, eax
jne 0x4865ba
push eax
push 1
push 1
push eax
push 0x6665fc
lea ecx, [ebp - 0x201c]
call fcn.005438b0
test eax, eax
jne 0x4865ba
push eax
push 1
push 1
push eax
push 0x6665e0
lea ecx, [ebp - 0x201c]
call fcn.005438b0
test eax, eax
jne 0x4865ba
push eax
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x669440
lea ecx, [ebp - 0x201c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x4865ba
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x201c]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x660bd4
push 5
push 0x43
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f94], eax
cmp eax, 0xffffffff
je 0x4865ba
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
push 0
push 0
push 0x660bd4
call fcn.00544f70
push eax
push 0
lea ecx, [ebp - 0x2120]
call fcn.00544f70
push eax
push 0x43
push dword [ebp - 0x6f94]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666664
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x6645b8
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x201c]
call fcn.00544f70
push eax
push 0x669490
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
lea eax, [ebp - 0x201c]
push eax
push 0x660d14
lea ecx, [ebp - 0x1f74]
call fcn.0053f580
test al, al
je 0x486820
lea eax, [ebp - 0x218c]
mov dword [ebp - 0x218c], 0
push eax
push 0x660e14
lea ecx, [ebp - 0x1f74]
call fcn.0053f4f0
test al, al
je 0x48660b
cmp dword [ebp - 0x218c], 0
je 0x486820
push 0
push 1
push 1
push 0
push 0x66658c
lea ecx, [ebp - 0x201c]
call fcn.005438b0
test eax, eax
jne 0x486820
push eax
push 1
push 1
push eax
push 0x6665ac
lea ecx, [ebp - 0x201c]
call fcn.005438b0
test eax, eax
jne 0x486820
push eax
push 1
push 1
push eax
push 0x6665fc
lea ecx, [ebp - 0x201c]
call fcn.005438b0
test eax, eax
jne 0x486820
push eax
push 1
push 1
push eax
push 0x6665e0
lea ecx, [ebp - 0x201c]
call fcn.005438b0
test eax, eax
jne 0x486820
push eax
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x669440
lea ecx, [ebp - 0x201c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x486820
lea eax, [ebp - 0x2090]
push eax
push 0x660de0
lea ecx, [ebp - 0x1f74]
call fcn.0053f580
test al, al
je 0x486820
lea ecx, [ebp - 0x2090]
call fcn.00544c70
test al, al
jne 0x486820
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666ea0
lea ecx, [ebp - 0x2090]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x22e4]
call fcn.00544fe0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x201c]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x22e4]
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x43
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f94], eax
cmp eax, 0xffffffff
je 0x486820
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
push 0
push 0
push 0x660d14
call fcn.00544f70
push eax
push 0
lea ecx, [ebp - 0x2120]
call fcn.00544f70
push eax
push 0x43
push dword [ebp - 0x6f94]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666664
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x6645b8
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x201c]
call fcn.00544f70
push eax
push 0x6694d0
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
lea eax, [ebp - 0x218c]
mov dword [ebp - 0x218c], 0
push eax
push 0x666f28
lea ecx, [ebp - 0x1f74]
call fcn.0053f4f0
test al, al
je 0x486a61
cmp dword [ebp - 0x218c], 4
jne 0x486a61
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666f4c
lea ecx, [ebp - 0x2120]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00544fe0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2124]
call fcn.0053f870
test al, al
je 0x486a61
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f94], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.0053f120
test al, al
je 0x486a61
lea eax, [ebp - 0x201c]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f74]
call fcn.0053f580
test al, al
je 0x486a39
lea ecx, [ebp - 0x201c]
call fcn.00544c70
test al, al
jne 0x486a39
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x669440
lea ecx, [ebp - 0x201c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x486a39
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x201c]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x660fd0
push 5
push 0x43
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f7c], eax
cmp eax, 0xffffffff
je 0x486a39
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
call fcn.00544f70
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
push 0x43
push dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666664
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x6645b8
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x201c]
call fcn.00544f70
push eax
push 0x66951c
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
mov eax, dword [ebp - 0x6f94]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f94], eax
call fcn.0053f120
test al, al
jne 0x4868d2
mov eax, dword [ebp - 0x6f4c]
inc esi
cmp esi, eax
jb 0x4862f3
jmp 0x486a78
mov eax, dword [ebp - 0x6f4c]
mov ecx, dword [ebp - 0x6f40]
mov edx, dword [ebp - 0x6f54]
mov dword [ebp - 0x6f6c], esi
add ecx, 0xc
sub edx, 1
mov dword [ebp - 0x6f40], ecx
mov dword [ebp - 0x6f54], edx
jne 0x4862e3
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x4876b6
push 0
push 0x669550
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov esi, dword [ebp - 0x6f4c]
mov dword [ebp - 0x6f40], 0
test esi, esi
je 0x487079
nop dword [eax + eax]
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x487079
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2208]
call fcn.00403180
push 0x668ec0
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2058]
mov eax, dword [eax]
mov dword [ebp - 0x6f94], eax
call fcn.00403920
mov ecx, eax
call fcn.005452a0
mov byte [ebp - 0x6f61], al
lea ecx, [ebp - 0x21c0]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
je 0x486b50
push 0x66900c
jmp 0x486b55
push 0x669018
push dword [ebp - 0x6f40]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2068]
call fcn.00544fe0
push 0x260
lea ecx, [ebp - 0x4358]
call fcn.00401d70
push 1
lea ecx, [ebp - 0x2068]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x4358]
call fcn.004016d0
push 3
lea ecx, [ebp - 0x2068]
mov byte [ebp - 4], 0xd9
call fcn.00543c00
lea ecx, [ebp - 0x4358]
call fcn.00401810
test al, al
je 0x487055
mov esi, dword [ebp - 0x6f40]
nop word [eax + eax]
push 1
lea ecx, [ebp - 0x4358]
call fcn.00401870
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.005452f0
cmp byte [ebp - 0x6f61], 0
jne 0x486c27
push 0x66652c
lea ecx, [ebp - 0x1fe0]
call fcn.00545260
test al, al
je 0x486c27
push 0
push 1
push 1
push 0
push 0x66653c
lea ecx, [ebp - 0x1fe0]
call fcn.005438b0
cmp eax, 1
jne 0x48703c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666550
push 1
lea ecx, [ebp - 0x4358]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2068]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00544fe0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6695a8
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
push 0x6695d0
lea ecx, [ebp - 0x2090]
call fcn.00544fe0
lea ecx, [ebp - 0x1fe0]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
je 0x486e4f
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x6695e0
lea ecx, [ebp - 0x2090]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x486e4f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6695a8
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
push 0x6695d0
lea ecx, [ebp - 0x2090]
call fcn.00544fe0
mov eax, dword [ebp - 0x6f94]
mov ecx, dword [ebp - 0x6f70]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x1fe0]
mov dword [ebp - 0x6f54], eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2090]
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x42
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x48703c
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push 0
push 0
push 0
push 0
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00544f70
push eax
push 0
push 0x42
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0x666ff8
lea ecx, [ebp - 0x1fe0]
call fcn.00544f70
push eax
push 0x665d2c
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x6645b8
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x2090]
call fcn.00544f70
push eax
push 0x667030
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x66962c
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
push 0x6695d0
lea ecx, [ebp - 0x2090]
call fcn.00544fe0
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x6695e0
lea ecx, [ebp - 0x2090]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x48703c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667054
push 1
lea ecx, [ebp - 0x4358]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2068]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00544fe0
lea ecx, [ebp - 0x1fe0]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
je 0x48703c
mov eax, dword [ebp - 0x6f94]
mov ecx, dword [ebp - 0x6f70]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x1fe0]
mov dword [ebp - 0x6f54], eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2090]
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x42
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x48703c
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push 0
push 0
push 0
push 0
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00544f70
push eax
push 0
push 0x42
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0x666ff8
lea ecx, [ebp - 0x1fe0]
call fcn.00544f70
push eax
push 0x665d2c
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x6645b8
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x2090]
call fcn.00544f70
push eax
push 0x667030
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
lea ecx, [ebp - 0x4358]
call fcn.004017d0
test al, al
jne 0x486bd0
mov esi, dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x4358]
mov byte [ebp - 4], 0xd8
call fcn.00401720
mov eax, dword [ebp - 0x6f40]
inc eax
mov dword [ebp - 0x6f40], eax
cmp eax, esi
jb 0x486ae0
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x4876b6
mov dword [ebp - 0x6f40], 0
test esi, esi
je 0x48739e
nop word [eax + eax]
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48739e
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x21e4]
call fcn.00403920
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.005452c0
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x1fe0]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2338]
call fcn.005438b0
test eax, eax
jne 0x487389
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x61d184
lea ecx, [ebp - 0x1fe0]
call fcn.00544f70
push eax
push 0x61d184
lea ecx, [ebp - 0x2338]
call fcn.005435c0
push 1
lea ecx, [ebp - 0x1fe0]
call fcn.00544c90
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x667070
lea ecx, [ebp - 0x1fe0]
call fcn.005435c0
lea ecx, [ebp - 0x1fe0]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
je 0x487389
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x669648
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
push 0x6695d0
lea ecx, [ebp - 0x2090]
call fcn.00544fe0
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x6695e0
lea ecx, [ebp - 0x2090]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x487389
push 0
lea ecx, [ebp - 0x1fe0]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x25cc]
call fcn.005133c0
test al, al
je 0x487389
lea eax, [ebp - 0x2a1c]
push eax
push 0x622cbc
push 0x666578
lea ecx, [ebp - 0x25cc]
call fcn.00512c90
test al, al
jne 0x487281
lea eax, [ebp - 0x2a1c]
push eax
push 0x622cbc
push 0x6666b8
lea ecx, [ebp - 0x25cc]
call fcn.00512c90
test al, al
jne 0x487281
lea eax, [ebp - 0x2a1c]
push eax
push 0x622cbc
push 0x660858
lea ecx, [ebp - 0x25cc]
call fcn.00512c90
test al, al
jne 0x487281
lea eax, [ebp - 0x2a1c]
push eax
push 0x622cbc
push 0x666a44
lea ecx, [ebp - 0x25cc]
call fcn.00512c90
test al, al
je 0x487389
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fe0]
call fcn.00544f70
push eax
push 0x65f3a0
lea ecx, [ebp - 0x2090]
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x42
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x487389
push 0
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
push 0
push 0
push 0
push 0
push 0x65f3a0
lea ecx, [ebp - 0x1fe0]
call fcn.00544f70
push eax
push 0
push 0x42
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0x666664
lea ecx, [ebp - 0x1fe0]
call fcn.00544f70
push eax
push 0x665d2c
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
push 0x6645b8
push 0x6653ac
lea ecx, [ebp - 0x2090]
call fcn.00544f70
push eax
push 0x667030
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
mov eax, dword [ebp - 0x6f40]
inc eax
mov dword [ebp - 0x6f40], eax
cmp eax, esi
jb 0x4870a0
lea ecx, [ebp - 0x2338]
call fcn.005451e0
mov esi, dword [ebp - 0x6f74]
test esi, esi
je 0x4876a3
mov ecx, dword [ebp - 0x6f70]
mov edx, esi
mov eax, dword [ebp - 0x6f68]
sub eax, ecx
mov dword [ebp - 0x6f40], ecx
mov dword [ebp - 0x6f48], eax
mov eax, dword [ebp - 0x6f4c]
mov dword [ebp - 0x6f94], edx
nop
xor esi, esi
mov dword [ebp - 0x6f6c], esi
test eax, eax
je 0x48768b
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x487673
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2338]
call fcn.005438b0
test eax, eax
jne 0x487662
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x61d184
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
push 0x61d184
lea ecx, [ebp - 0x2338]
call fcn.005435c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x2350]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f48]
add ecx, dword [ebp - 0x6f40]
push eax
push 0x61d048
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2120]
call fcn.00544fe0
push 0
push 0x20019
lea ecx, [ebp - 0x2120]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x487662
xor dl, dl
lea ecx, [ebp - 0x1f74]
call fcn.0053ce70
test al, al
jne 0x487662
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x669674
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
push 0x6695d0
lea ecx, [ebp - 0x2090]
call fcn.00544fe0
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x6695e0
lea ecx, [ebp - 0x2090]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x487662
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2120]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2090]
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x42
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f54], eax
cmp eax, 0xffffffff
je 0x487662
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
push 0
push 0
push 0
call fcn.00544f70
push eax
push 0
lea ecx, [ebp - 0x2120]
call fcn.00544f70
push eax
push 0x42
push dword [ebp - 0x6f54]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0x666ff8
lea ecx, [ebp - 0x2120]
call fcn.00544f70
push eax
push 0x665d2c
push esi
lea ecx, [ebp - 0x2058]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x6645b8
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x2090]
call fcn.00544f70
push eax
push 0x667030
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
mov eax, dword [ebp - 0x6f4c]
inc esi
cmp esi, eax
jb 0x4873f0
jmp 0x487679
mov eax, dword [ebp - 0x6f4c]
mov ecx, dword [ebp - 0x6f40]
mov edx, dword [ebp - 0x6f94]
mov dword [ebp - 0x6f6c], esi
add ecx, 0xc
sub edx, 1
mov dword [ebp - 0x6f40], ecx
mov dword [ebp - 0x6f94], edx
jne 0x4873e0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.00518e70
lea ecx, [ebp - 0x2124]
call fcn.0053f820
lea ecx, [ebp - 0x2338]
call fcn.00545210
lea ecx, [ebp - 0x22e4]
call fcn.00545210
lea ecx, [ebp - 0x2344]
call fcn.00545210
lea ecx, [ebp - 0x6e34]
call fcn.00402710
lea ecx, [ebp - 0x280c]
call fcn.00401e00
lea ecx, [ebp - 0x2208]
call fcn.00402fa0
lea ecx, [ebp - 0x21e4]
call fcn.00403940
lea ecx, [ebp - 0x2058]
call fcn.00403940
lea ecx, [ebp - 0x2350]
call fcn.00403940
lea ecx, [ebp - 0x21c0]
call fcn.00403940
lea ecx, [ebp - 0x32b8]
call fcn.00401720
lea ecx, [ebp - 0x2df8]
call fcn.00401720
lea ecx, [ebp - 0x25cc]
call fcn.00401e40
lea ecx, [ebp - 0x2090]
call fcn.00545210
lea ecx, [ebp - 0x201c]
call fcn.00545210
lea ecx, [ebp - 0x24d4]
call fcn.00545210
lea ecx, [ebp - 0x1fe0]
call fcn.00545210
lea ecx, [ebp - 0x2068]
mov byte [ebp - 4], 0x45
call fcn.00545210
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48a395
test dword [edi + 0x34], 0x1000
jne 0x48a395
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x669688
push dword [eax + 0x38]
call fcn.0051a1d0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x34
push dword [eax + 0x34]
call fcn.00516e60
push 0xc
lea ecx, [ebp - 0x22ac]
call fcn.00401d20
push 0xa
push 0
lea ecx, [ebp - 0x22ac]
call fcn.004039b0
push 0xc
lea ecx, [ebp - 0x2214]
mov byte [ebp - 4], 0xda
call fcn.00401d20
push 0xa
push 0
lea ecx, [ebp - 0x2214]
call fcn.004039b0
push 0xc
lea ecx, [ebp - 0x238c]
mov byte [ebp - 4], 0xdb
call fcn.00401d20
push 0xa
push 0
lea ecx, [ebp - 0x238c]
call fcn.004039b0
push 0xc
lea ecx, [ebp - 0x20a8]
mov byte [ebp - 4], 0xdc
call fcn.00401d20
lea ecx, [ebp - 0x20a8]
call fcn.00403a70
push 0xc
lea ecx, [ebp - 0x2294]
mov byte [ebp - 4], 0xdd
call fcn.00401d20
push 0xa
push 0
lea ecx, [ebp - 0x2294]
call fcn.004031a0
push 0x260
lea ecx, [ebp - 0x3058]
mov byte [ebp - 4], 0xde
call fcn.00401d70
lea ecx, [ebp - 0x3058]
call fcn.004016a0
push 0x260
lea ecx, [ebp - 0x3518]
mov byte [ebp - 4], 0xdf
call fcn.00401d70
lea ecx, [ebp - 0x3518]
call fcn.004016a0
push 0xc
lea ecx, [ebp - 0x2080]
mov byte [ebp - 4], 0xe0
call fcn.00401d20
lea ecx, [ebp - 0x2080]
call fcn.005453c0
xor esi, esi
mov byte [ebp - 4], 0xe1
cmp dword [edi + 0x30], esi
jbe 0x487ca2
lea eax, [edi + 0x10c]
mov dword [ebp - 0x6f48], eax
nop dword [eax]
push 1
push 1
lea ecx, [ebp - 0x3058]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2080]
call fcn.00545040
push 0x6581a0
lea ecx, [ebp - 0x2080]
call fcn.005452a0
test al, al
jne 0x487c98
push str.Microsoft
lea ecx, [ebp - 0x2080]
call fcn.005452a0
test al, al
jne 0x487c98
push 0x668ce4
lea ecx, [ebp - 0x2080]
call fcn.005452a0
test al, al
jne 0x487c98
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d198
lea ecx, [ebp - 0x2220]
call fcn.00544f70
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2178]
call fcn.00544fe0
push 5
lea ecx, [ebp - 0x2178]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x3058]
call fcn.00401820
test al, al
je 0x487c01
mov edi, dword [ebp - 0x6f48]
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6696bc
push 1
lea ecx, [ebp - 0x3058]
call fcn.00401870
push eax
push 0x61d048
lea ecx, [ebp - 0x2220]
call fcn.00544f70
push eax
push esi
mov ecx, edi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2178]
call fcn.00544fe0
lea ecx, [ebp - 0x2178]
call fcn.00544f70
push eax
call dword [0x5fd694]
test eax, eax
je 0x487be8
push 1
lea ecx, [ebp - 0x3058]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2080]
call fcn.005452f0
push eax
lea eax, [ebp - 0x20a8]
push eax
push esi
lea eax, [ebp - 0x2294]
push eax
lea eax, [ebp - 0x238c]
push eax
lea eax, [ebp - 0x2214]
push eax
push 0
lea ecx, [ebp - 0x2178]
call fcn.00544c90
lea edx, [ebp - 0x22ac]
mov ecx, eax
call fcn.004ebd40
test al, al
jne 0x487be8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d198
lea ecx, [ebp - 0x2178]
call fcn.005435c0
push 5
lea ecx, [ebp - 0x2178]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x3518]
call fcn.00401820
test al, al
je 0x487be8
nop word [eax + eax]
push 0
push 1
lea ecx, [ebp - 0x3518]
call fcn.00401870
mov edx, 0x6696d0
mov ecx, eax
call fcn.00541930
test eax, eax
je 0x487bd5
push 0
push 0
push 0
push 0
push 0
push 0x6696bc
push 1
lea ecx, [ebp - 0x3518]
call fcn.00401870
push eax
push 0x61d048
push 1
lea ecx, [ebp - 0x3058]
call fcn.00401870
push eax
push 0x61d048
lea ecx, [ebp - 0x2220]
call fcn.00544f70
push eax
push esi
mov ecx, edi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2178]
call fcn.00544fe0
lea ecx, [ebp - 0x2178]
call fcn.00544f70
push eax
call dword [0x5fd694]
test eax, eax
je 0x487bd5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x3518]
call fcn.00401870
push eax
push 0x61e0e4
push 1
lea ecx, [ebp - 0x3058]
call fcn.00401870
push eax
lea ecx, [ebp - 0x2080]
call fcn.00544fe0
lea eax, [ebp - 0x2080]
push eax
lea eax, [ebp - 0x20a8]
push eax
push esi
lea eax, [ebp - 0x2294]
push eax
lea eax, [ebp - 0x238c]
push eax
lea eax, [ebp - 0x2214]
push eax
push 0
lea ecx, [ebp - 0x2178]
call fcn.00544c90
lea edx, [ebp - 0x22ac]
mov ecx, eax
call fcn.004ebd40
lea ecx, [ebp - 0x3518]
call fcn.004017d0
test al, al
jne 0x487ac0
lea ecx, [ebp - 0x3058]
call fcn.004017d0
test al, al
jne 0x4879b0
mov edi, dword [ebp - 0x6f44]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6696e0
lea ecx, [ebp - 0x24c8]
call fcn.00544f70
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2178]
call fcn.00544fe0
lea ecx, [ebp - 0x2178]
call fcn.00544f70
push eax
call dword [0x5fd694]
test eax, eax
je 0x487c98
push 0x66973c
lea ecx, [ebp - 0x2080]
call fcn.005452f0
push eax
lea eax, [ebp - 0x20a8]
push eax
push esi
lea eax, [ebp - 0x2294]
push eax
lea eax, [ebp - 0x238c]
push eax
lea eax, [ebp - 0x2214]
push eax
lea edx, [ebp - 0x22ac]
lea ecx, [ebp - 0x2178]
call fcn.004ebd40
inc esi
cmp esi, dword [edi + 0x30]
jb 0x4878e0
lea ecx, [ebp - 0x22ac]
call fcn.00403760
mov esi, eax
mov ecx, edi
mov dword [ebp - 0x6f4c], esi
call fcn.0046c7f0
test al, al
jne 0x48a339
test esi, esi
jne 0x487cde
push esi
push 0x669760
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
jmp 0x48a339
push 0xc
lea ecx, [ebp - 0x21d8]
call fcn.00401d20
lea ecx, [ebp - 0x21d8]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2040]
mov byte [ebp - 4], 0xe2
call fcn.00401d20
lea ecx, [ebp - 0x2040]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2590]
mov byte [ebp - 4], 0xe3
call fcn.00401d20
lea ecx, [ebp - 0x2590]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x21cc]
mov byte [ebp - 4], 0xe4
call fcn.00401d20
lea ecx, [ebp - 0x21cc]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2454]
mov byte [ebp - 4], 0xe5
call fcn.00401d20
lea ecx, [ebp - 0x2454]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x22fc]
mov byte [ebp - 4], 0xe6
call fcn.00401d20
lea ecx, [ebp - 0x22fc]
call fcn.005453c0
push 0x20
lea ecx, [ebp - 0x2978]
mov byte [ebp - 4], 0xe7
call fcn.00401e20
lea ecx, [ebp - 0x2978]
call fcn.005332d0
mov byte [ebp - 4], 0xe8
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.00518e70
push 0
push 0x6697e0
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
xor esi, esi
mov dword [ebp - 0x6f40], esi
cmp dword [ebp - 0x6f4c], esi
jbe 0x4881e0
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x2294]
call fcn.00403180
push 0
push 0
push 0
mov eax, dword [eax]
lea ecx, [ebp - 0x22ac]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d048
push esi
mov dword [ebp - 0x6f48], eax
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2454]
call fcn.00544fe0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646ad0
lea ecx, [ebp - 0x2454]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x22fc]
call fcn.00544fe0
lea ecx, [ebp - 0x22fc]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
je 0x4881cd
lea eax, [ebp - 0x21d8]
xor edx, edx
push eax
lea ecx, [ebp - 0x22fc]
mov dword [ebp - 0x6f54], edx
call fcn.00544f70
xor edx, edx
mov ecx, eax
call fcn.004ec640
test al, al
je 0x4881cd
lea ecx, [ebp - 0x21d8]
call fcn.00544f70
mov ecx, eax
call fcn.0052fcf0
test al, al
je 0x4881a0
push 0xc
lea ecx, [ebp - 0x2448]
call fcn.00401d20
lea ecx, [ebp - 0x2448]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2614]
mov byte [ebp - 4], 0xe9
call fcn.00401d20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646a98
lea ecx, [ebp - 0x21d8]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2614]
call fcn.00545300
lea eax, [ebp - 0x2448]
mov byte [ebp - 4], 0xea
push eax
lea ecx, [ebp - 0x2614]
call fcn.00544f70
mov edx, 0x662c64
mov ecx, eax
call fcn.004ec3b0
test al, al
je 0x488186
push 0
push 1
push 1
push 0
push 0x66658c
lea ecx, [ebp - 0x2448]
call fcn.005438b0
test eax, eax
jne 0x488186
push eax
push 1
push 1
push eax
push 0x6665ac
lea ecx, [ebp - 0x2448]
call fcn.005438b0
test eax, eax
jne 0x488186
push eax
push 1
push 1
push eax
push 0x6665fc
lea ecx, [ebp - 0x2448]
call fcn.005438b0
test eax, eax
jne 0x488186
push eax
push 1
push 1
push eax
push 0x6665e0
lea ecx, [ebp - 0x2448]
call fcn.005438b0
test eax, eax
jne 0x488186
push eax
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x669850
lea ecx, [ebp - 0x2448]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x488186
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x66989c
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2080]
call fcn.00544fe0
mov eax, dword [ebp - 0x6f48]
mov ecx, dword [ebp - 0x6f70]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x2448]
call fcn.00544f70
push eax
mov ecx, esi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2080]
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x47
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f94], eax
cmp eax, 0xffffffff
jne 0x48809b
lea ecx, [ebp - 0x2614]
call fcn.00545210
lea ecx, [ebp - 0x2448]
mov byte [ebp - 4], 0xe8
call fcn.00545210
mov esi, dword [ebp - 0x6f40]
jmp 0x4881a0
push 0
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2614]
call fcn.00544f70
push eax
push 0
push 0x47
push dword [ebp - 0x6f94]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0x666664
lea ecx, [ebp - 0x2614]
call fcn.00544f70
push eax
push 0x665308
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
push 0x6645b8
mov ecx, esi
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x2448]
call fcn.00544f70
push eax
push 0x668680
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
lea ecx, [ebp - 0x2614]
call fcn.00545210
lea ecx, [ebp - 0x2448]
mov byte [ebp - 4], 0xe8
call fcn.00545210
mov esi, dword [ebp - 0x6f40]
jmp 0x4881a0
lea ecx, [ebp - 0x2614]
call fcn.00545210
lea ecx, [ebp - 0x2448]
mov byte [ebp - 4], 0xe8
call fcn.00545210
inc dword [ebp - 0x6f54]
lea eax, [ebp - 0x21d8]
push eax
lea ecx, [ebp - 0x22fc]
call fcn.00544f70
mov edx, dword [ebp - 0x6f54]
mov ecx, eax
call fcn.004ec640
test al, al
jne 0x487ea1
inc esi
mov dword [ebp - 0x6f40], esi
cmp esi, dword [ebp - 0x6f4c]
jb 0x487de0
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48a2ec
push 0xc
lea ecx, [ebp - 0x259c]
call fcn.00401d20
push 1
push 0x668758
lea ecx, [ebp - 0x259c]
call fcn.00545350
push 0
push 0x6698c0
lea ecx, [ebp - 0x1fd4]
mov byte [ebp - 4], 0xeb
call fcn.005322d0
xor esi, esi
mov dword [ebp - 0x6f40], esi
cmp dword [ebp - 0x6f4c], esi
jbe 0x488627
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x2294]
call fcn.00403180
push 0
push 0
push 0
mov eax, dword [eax]
lea ecx, [ebp - 0x22ac]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d048
push esi
mov dword [ebp - 0x6f48], eax
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2454]
call fcn.00544fe0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646ad0
lea ecx, [ebp - 0x2454]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x22fc]
call fcn.00544fe0
lea ecx, [ebp - 0x22fc]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
je 0x488614
lea eax, [ebp - 0x21d8]
xor edx, edx
push eax
lea ecx, [ebp - 0x22fc]
mov dword [ebp - 0x6f54], edx
call fcn.00544f70
xor edx, edx
mov ecx, eax
call fcn.004ec640
test al, al
je 0x488614
lea ecx, [ebp - 0x21d8]
call fcn.00544f70
mov ecx, eax
call fcn.0052fcf0
test al, al
je 0x4885e7
push 0xc
lea ecx, [ebp - 0x2480]
call fcn.00401d20
lea ecx, [ebp - 0x2480]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2620]
mov byte [ebp - 4], 0xec
call fcn.00401d20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646a98
lea ecx, [ebp - 0x21d8]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2620]
call fcn.00545300
lea eax, [ebp - 0x2480]
mov byte [ebp - 4], 0xed
push eax
lea ecx, [ebp - 0x2620]
call fcn.00544f70
mov edx, 0x662d80
mov ecx, eax
call fcn.004ec3b0
test al, al
je 0x4885cd
push 0x6581a0
lea ecx, [ebp - 0x2480]
call fcn.005452a0
test al, al
jne 0x4885cd
push 0x657aa8
lea ecx, [ebp - 0x2480]
call fcn.005452a0
test al, al
jne 0x4885cd
push 0x658628
lea ecx, [ebp - 0x2480]
call fcn.005452a0
test al, al
jne 0x4885cd
push 0x66885c
lea ecx, [ebp - 0x2480]
call fcn.005452a0
test al, al
jne 0x4885cd
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x669920
lea ecx, [ebp - 0x2480]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x4885cd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x669970
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2080]
call fcn.00544fe0
mov eax, dword [ebp - 0x6f48]
mov ecx, dword [ebp - 0x6f70]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x2480]
call fcn.00544f70
push eax
mov ecx, esi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2080]
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x48
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f94], eax
cmp eax, 0xffffffff
jne 0x4884e2
lea ecx, [ebp - 0x2620]
call fcn.00545210
lea ecx, [ebp - 0x2480]
mov byte [ebp - 4], 0xeb
call fcn.00545210
mov esi, dword [ebp - 0x6f40]
jmp 0x4885e7
push 0
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2620]
call fcn.00544f70
push eax
push 0
push 0x48
push dword [ebp - 0x6f94]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0x666664
lea ecx, [ebp - 0x2620]
call fcn.00544f70
push eax
push 0x665308
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
push 0x6645b8
mov ecx, esi
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x2480]
call fcn.00544f70
push eax
push 0x6688a8
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
lea ecx, [ebp - 0x2620]
call fcn.00545210
lea ecx, [ebp - 0x2480]
mov byte [ebp - 4], 0xeb
call fcn.00545210
mov esi, dword [ebp - 0x6f40]
jmp 0x4885e7
lea ecx, [ebp - 0x2620]
call fcn.00545210
lea ecx, [ebp - 0x2480]
mov byte [ebp - 4], 0xeb
call fcn.00545210
inc dword [ebp - 0x6f54]
lea eax, [ebp - 0x21d8]
push eax
lea ecx, [ebp - 0x22fc]
call fcn.00544f70
mov edx, dword [ebp - 0x6f54]
mov ecx, eax
call fcn.004ec640
test al, al
jne 0x488301
inc esi
mov dword [ebp - 0x6f40], esi
cmp esi, dword [ebp - 0x6f4c]
jb 0x488240
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48a2e1
push 0xc
lea ecx, [ebp - 0x2460]
call fcn.00401d20
lea ecx, [ebp - 0x2460]
call fcn.005453c0
xor esi, esi
mov byte [ebp - 4], 0xee
mov dword [ebp - 0x6f54], esi
cmp dword [ebp - 0x6f4c], esi
jbe 0x488a58
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x2214]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2460]
call fcn.005438b0
test eax, eax
jne 0x488a45
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x621ae8
push esi
lea ecx, [ebp - 0x2214]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2460]
call fcn.005435c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6688d4
push esi
lea ecx, [ebp - 0x2214]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2040]
call fcn.00544fe0
push 0x260
lea ecx, [ebp - 0x40f8]
call fcn.00401d70
push 1
lea ecx, [ebp - 0x2040]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x40f8]
call fcn.004016d0
push 1
lea ecx, [ebp - 0x2040]
mov byte [ebp - 4], 0xef
call fcn.00544f70
push eax
lea ecx, [ebp - 0x40f8]
call fcn.00401820
test al, al
je 0x488a36
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61d184
push 1
lea ecx, [ebp - 0x40f8]
call fcn.00401870
push eax
push 0x61d184
lea ecx, [ebp - 0x21cc]
call fcn.00544fe0
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x21cc]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x259c]
call fcn.005438b0
test eax, eax
jne 0x488a23
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 1
lea ecx, [ebp - 0x40f8]
call fcn.00401870
push eax
push 0x61d048
push esi
lea ecx, [ebp - 0x2214]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2040]
call fcn.00544fe0
lea ecx, [ebp - 0x21cc]
call fcn.005451e0
push 0
push 0x80
lea ecx, [ebp - 0x2040]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2978]
call fcn.00532c10
test eax, eax
je 0x488898
push 0
lea eax, [ebp - 0x21cc]
push eax
lea ecx, [ebp - 0x2978]
call fcn.00532a50
test eax, eax
je 0x488898
push 0
push 1
push 1
push 0
push 0x6688e4
lea ecx, [ebp - 0x21cc]
call fcn.005438b0
mov esi, eax
push 0
lea ecx, [esi + 0xa]
push ecx
push 1
push 0
push 0x6688fc
lea ecx, [ebp - 0x21cc]
call fcn.005438b0
test esi, esi
je 0x488887
test eax, eax
je 0x488887
sub eax, esi
lea ecx, [ebp - 0x21cc]
sub eax, 0xb
push eax
lea eax, [esi + 0xb]
push eax
call fcn.00543b50
jmp 0x488892
lea ecx, [ebp - 0x21cc]
call fcn.005451e0
mov esi, dword [ebp - 0x6f54]
lea ecx, [ebp - 0x21cc]
call fcn.00544c70
test al, al
je 0x4888cf
push 1
lea ecx, [ebp - 0x40f8]
call fcn.00401870
push eax
lea ecx, [ebp - 0x21cc]
call fcn.005452f0
push 0
lea ecx, [ebp - 0x21cc]
call fcn.00544d00
jmp 0x4888dc
push 3
lea ecx, [ebp - 0x21cc]
call fcn.00542f40
push 0x6699a4
lea ecx, [ebp - 0x21cc]
call fcn.005452a0
test al, al
jne 0x488a23
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x669920
lea ecx, [ebp - 0x2040]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x488a23
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2040]
call fcn.00544f70
push eax
push 0x65f3a0
lea ecx, [ebp - 0x21cc]
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x48
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x488a23
push 0
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
push 0
push 0
push 0
push 0
push 0x65f3a0
lea ecx, [ebp - 0x2040]
call fcn.00544f70
push eax
push 0
push 0x48
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0x666664
lea ecx, [ebp - 0x2040]
call fcn.00544f70
push eax
push 0x665308
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
push 0x6645b8
push 0x65f3a0
push 0x6645d4
lea ecx, [ebp - 0x21cc]
call fcn.00544f70
push eax
push 0x668918
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
lea ecx, [ebp - 0x40f8]
call fcn.004017d0
test al, al
jne 0x488750
lea ecx, [ebp - 0x40f8]
mov byte [ebp - 4], 0xee
call fcn.00401720
inc esi
mov dword [ebp - 0x6f54], esi
cmp esi, dword [ebp - 0x6f4c]
jb 0x488666
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48a2d6
push 0x24
lea ecx, [ebp - 0x28ec]
call fcn.00402080
lea ecx, [ebp - 0x28ec]
call fcn.00513600
push 0xc
lea ecx, [ebp - 0x2288]
mov byte [ebp - 4], 0xf0
call fcn.00401d20
lea ecx, [ebp - 0x2288]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x24a4]
mov byte [ebp - 4], 0xf1
call fcn.00401d20
lea ecx, [ebp - 0x24a4]
call fcn.005453c0
push 0
push 0x6699f0
lea ecx, [ebp - 0x1fd4]
mov byte [ebp - 4], 0xf2
call fcn.005322d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x669a40
lea ecx, [edi + 0x314]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00544fe0
xor esi, esi
mov dword [ebp - 0x6f54], esi
cmp dword [ebp - 0x6f4c], esi
jbe 0x488fc3
push esi
lea ecx, [ebp - 0x2294]
call fcn.00403180
mov ecx, edi
mov eax, dword [eax]
mov dword [ebp - 0x6f48], eax
call fcn.0046c7f0
test al, al
jne 0x488fc3
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x669a74
push esi
lea ecx, [ebp - 0x22ac]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x21d8]
call fcn.00544fe0
lea eax, [ebp - 0x2040]
mov dword [ebp - 0x6f7c], 0
push eax
lea ecx, [ebp - 0x21d8]
call fcn.00544f70
xor edx, edx
mov ecx, eax
call fcn.004ec640
test al, al
je 0x488fb0
mov esi, dword [ebp - 0x6f7c]
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x663300
lea ecx, [ebp - 0x2040]
call fcn.005435c0
push 0x100
lea ecx, [ebp - 0x2040]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x28ec]
call fcn.005133c0
test al, al
je 0x488f80
push 0
lea eax, [ebp - 0x2acc]
mov dword [ebp - 0x6ea0], 0
push eax
xorps xmm0, xmm0
lea ecx, [ebp - 0x28ec]
push 0x662f98
movups xmmword [ebp - 0x6eb0], xmm0
call fcn.00512dc0
test al, al
je 0x488f80
lea eax, [ebp - 0x2acc]
push eax
lea eax, [ebp - 0x6eb0]
push eax
lea ecx, [ebp - 0x28ec]
call fcn.005122e0
test al, al
je 0x488f80
lea eax, [ebp - 0x2288]
push eax
push 0x662fcc
lea eax, [ebp - 0x6eb0]
push eax
lea ecx, [ebp - 0x28ec]
call fcn.00512b40
test eax, eax
je 0x488f59
push 0
push 1
push 1
push 0
push 0x6689ec
lea ecx, [ebp - 0x2288]
call fcn.005438b0
lea ecx, [ebp - 0x2288]
mov esi, eax
call fcn.00545180
sub eax, 0x12
cmp esi, eax
je 0x488f59
push 0
push 1
push 1
push 0
push 0x668a14
lea ecx, [ebp - 0x2288]
call fcn.005438b0
lea ecx, [ebp - 0x2288]
mov esi, eax
call fcn.00545180
sub eax, 0xb
cmp esi, eax
je 0x488f59
push 0
push 1
push 1
push 0
push 0x668a30
lea ecx, [ebp - 0x2288]
call fcn.005438b0
lea ecx, [ebp - 0x2288]
mov esi, eax
call fcn.00545180
sub eax, 0xb
cmp esi, eax
je 0x488f59
lea eax, [ebp - 0x6eb0]
push eax
lea eax, [ebp - 0x2b98]
push eax
push 0x668a4c
lea ecx, [ebp - 0x28ec]
call fcn.00512dc0
test al, al
je 0x488f59
lea eax, [ebp - 0x2288]
push eax
push 0x668a68
lea eax, [ebp - 0x2b98]
push eax
lea ecx, [ebp - 0x28ec]
call fcn.00512b40
test eax, eax
je 0x488f59
push 0x66652c
lea ecx, [ebp - 0x2288]
call fcn.005452a0
test al, al
jne 0x488f59
push 0x669a90
lea ecx, [ebp - 0x2288]
call fcn.005452a0
test al, al
jne 0x488f59
lea eax, [ebp - 0x24a4]
push eax
push 0x662fa8
lea eax, [ebp - 0x6eb0]
push eax
lea ecx, [ebp - 0x28ec]
call fcn.00512b40
test eax, eax
jne 0x488dba
lea eax, [ebp - 0x24a4]
push eax
push 0x662fc0
lea eax, [ebp - 0x6eb0]
push eax
lea ecx, [ebp - 0x28ec]
call fcn.00512b40
test eax, eax
je 0x488f59
push str.null
lea ecx, [ebp - 0x24a4]
call fcn.005452a0
test al, al
jne 0x488f59
lea ecx, [ebp - 0x2288]
call fcn.00544f70
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.00544f70
mov edx, esi
mov ecx, eax
call fcn.0053c5e0
test al, al
jne 0x488f59
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x669ac0
lea ecx, [ebp - 0x2288]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x488f59
mov eax, dword [ebp - 0x6f48]
mov ecx, dword [ebp - 0x6f70]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x24a4]
call fcn.00544f70
push eax
mov ecx, esi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2288]
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x49
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f94], eax
cmp eax, 0xffffffff
je 0x488f59
lea ecx, [ebp - 0x2040]
call fcn.00544f70
push eax
push dword [ebp - 0x6f54]
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x24a4]
call fcn.00544f70
push eax
push 0
push 0x49
push dword [ebp - 0x6f94]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0x666664
lea ecx, [ebp - 0x24a4]
call fcn.00544f70
push eax
push 0x665308
push dword [ebp - 0x6f54]
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
push 0x6645b8
mov ecx, esi
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x2288]
call fcn.00544f70
push eax
push 0x665b30
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
lea eax, [ebp - 0x2acc]
push eax
lea eax, [ebp - 0x6eb0]
push eax
lea ecx, [ebp - 0x28ec]
call fcn.005122e0
test al, al
jne 0x488c40
mov esi, dword [ebp - 0x6f7c]
lea eax, [ebp - 0x2040]
inc esi
push eax
lea ecx, [ebp - 0x21d8]
mov dword [ebp - 0x6f7c], esi
call fcn.00544f70
mov edx, esi
mov ecx, eax
call fcn.004ec640
test al, al
jne 0x488ba0
mov esi, dword [ebp - 0x6f54]
inc esi
mov dword [ebp - 0x6f54], esi
cmp esi, dword [ebp - 0x6f4c]
jb 0x488b11
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48a2b5
push 0
push 0x669b10
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x6e94]
push 1
push 0
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6e9c], eax
mov dword [ebp - 0x6e98], 0x4b
call fcn.00545350
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0xf3
call fcn.00544f70
lea ecx, [edi + 0x14c]
mov dword [ebp - 0x6e88], eax
mov dword [ebp - 0x6e84], 0
call fcn.00544f70
mov dword [ebp - 0x6e80], eax
lea ecx, [ebp - 0x6e74]
lea eax, [ebp - 0x1fd4]
mov dword [ebp - 0x6e7c], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0x6e78], eax
call fcn.005453c0
mov ecx, edi
mov byte [ebp - 4], 0xf4
call fcn.0046c7f0
test al, al
jne 0x48a2aa
push 0xc
lea ecx, [ebp - 0x2470]
call fcn.00401d20
lea ecx, [ebp - 0x2470]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x23f8]
mov byte [ebp - 4], 0xf5
call fcn.00401d20
lea ecx, [ebp - 0x23f8]
call fcn.005453c0
lea ecx, [ebp - 0x2460]
mov byte [ebp - 4], 0xf6
call fcn.005451e0
xor esi, esi
cmp dword [ebp - 0x6f4c], esi
jbe 0x489353
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x489353
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x2214]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2460]
call fcn.005438b0
test eax, eax
jne 0x489346
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x621ae8
push esi
lea ecx, [ebp - 0x2214]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2460]
call fcn.005435c0
push esi
lea ecx, [ebp - 0x2294]
call fcn.00403180
push 0
push 0
push 0
mov eax, dword [eax]
lea ecx, [ebp - 0x238c]
push 0
push 0
push 0
push 0
push 0
push 0
push esi
mov dword [ebp - 0x6f54], eax
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
push 0x61d048
push esi
lea ecx, [ebp - 0x2214]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x6e94]
call fcn.00544fe0
push dword [ebp - 0x6f54]
lea ecx, [edi + 0x114]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push esi
lea ecx, [ebp - 0x20a8]
mov dword [ebp - 0x6e84], eax
call fcn.00403920
push eax
lea ecx, [ebp - 0x6e74]
call fcn.005452c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24c8]
call fcn.00544f70
push eax
push dword [ebp - 0x6f54]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2470]
call fcn.00544fe0
lea ecx, [ebp - 0x2470]
call fcn.00544f70
mov ecx, eax
call fcn.0052fcf0
test al, al
je 0x489346
lea ecx, [ebp - 0x2470]
call fcn.00544f70
push eax
lea eax, [ebp - 0x6e9c]
mov ecx, edi
push eax
call fcn.0048d690
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x489353
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25e4]
call fcn.00544f70
push eax
push dword [ebp - 0x6f54]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2470]
call fcn.00544fe0
lea ecx, [ebp - 0x2470]
call fcn.00544f70
mov ecx, eax
call fcn.0052fcf0
test al, al
je 0x489346
push 0
lea ecx, [ebp - 0x2470]
call fcn.00544c90
lea ecx, [ebp - 0x2470]
call fcn.00544f70
push eax
lea eax, [ebp - 0x6e9c]
mov ecx, edi
push eax
call fcn.0048d690
lea ecx, [ebp - 0x2638]
mov dword [ebp - 0x6e84], 0x65f3a0
call fcn.00544f70
push eax
lea eax, [ebp - 0x6e9c]
mov ecx, edi
push eax
call fcn.0048d690
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x489353
push 0
push 1
lea ecx, [ebp - 0x2644]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2470]
call fcn.00545040
mov ecx, eax
call fcn.00544c90
lea ecx, [ebp - 0x2470]
call fcn.00544f70
push eax
lea eax, [ebp - 0x6e9c]
mov ecx, edi
push eax
call fcn.0048d690
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x489353
inc esi
cmp esi, dword [ebp - 0x6f4c]
jb 0x4890c0
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48a294
lea ecx, [ebp - 0x2460]
call fcn.005451e0
push 4
lea ecx, [ebp - 0x2228]
call fcn.00401d40
lea ecx, [ebp - 0x2228]
call fcn.0053f8e0
xor eax, eax
mov byte [ebp - 4], 0xf7
mov dword [ebp - 0x6f54], eax
cmp dword [ebp - 0x6f4c], eax
jbe 0x4897dc
nop dword [eax]
xor esi, esi
mov dword [ebp - 0x6f6c], esi
nop dword [eax + eax]
push eax
lea ecx, [ebp - 0x2294]
call fcn.00403180
mov eax, dword [eax]
mov dword [ebp - 0x6f94], eax
test esi, esi
jne 0x4893f1
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push 0x668ad0
push eax
lea ecx, [edi + 0x104]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
push str.HKU_
jmp 0x48943b
cmp esi, 1
jne 0x489417
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668ad0
push dword [ebp - 0x6f8c]
jmp 0x48943b
cmp esi, 2
jne 0x489446
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668ad0
push dword [ebp - 0x6fa4]
lea ecx, [ebp - 0x1f98]
call fcn.00544fe0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2228]
call fcn.0053f870
test al, al
je 0x4897b3
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f40], 0
push eax
push 0
lea ecx, [ebp - 0x2228]
call fcn.0053f1c0
test al, al
je 0x4897b3
mov esi, dword [ebp - 0x6f54]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668b60
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x61d048
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2040]
call fcn.00544fe0
push 0
push 0x20019
lea ecx, [ebp - 0x2040]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x489785
lea eax, [ebp - 0x23f8]
push eax
push 0x61d050
lea ecx, [ebp - 0x1f74]
call fcn.0053f580
test al, al
je 0x489785
lea ecx, [ebp - 0x23f8]
call fcn.00544c70
test al, al
jne 0x489785
push dword [ebp - 0x6f94]
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x23f8]
call fcn.005449e0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x238c]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
push 0x61d048
push esi
lea ecx, [ebp - 0x2214]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2080]
call fcn.00544fe0
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2080]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x23f8]
call fcn.005438b0
test eax, eax
je 0x489785
lea ecx, [ebp - 0x2080]
call fcn.00545180
inc eax
lea ecx, [ebp - 0x23f8]
push eax
call fcn.00543b90
push 0
push 0
push 0x61d050
push 0x61e29c
push 3
lea ecx, [ebp - 0x23f8]
call fcn.00542f40
mov ecx, eax
call fcn.005430c0
lea ecx, [ebp - 0x23f8]
call fcn.00544c70
test al, al
jne 0x489785
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x61d048
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2040]
call fcn.00544fe0
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x6644e0
lea ecx, [ebp - 0x23f8]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x489785
mov eax, dword [ebp - 0x6f94]
mov ecx, dword [ebp - 0x6f70]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 1
lea ecx, [ebp - 0x23f8]
mov dword [ebp - 0x6f7c], eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f7c]
push eax
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x660a20
push 5
push 0x4b
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x489785
push 0
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f7c]
push eax
push 0
push 0
push 0
push 0
call fcn.00544f70
push eax
push 0
lea ecx, [ebp - 0x2040]
call fcn.00544f70
push eax
push 0x4b
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666664
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f7c]
push eax
push 0x6645b8
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x23f8]
call fcn.00544f70
push eax
push 0x666ce8
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
mov eax, dword [ebp - 0x6f40]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x2228]
mov dword [ebp - 0x6f40], eax
call fcn.0053f1c0
test al, al
jne 0x489498
mov esi, dword [ebp - 0x6f6c]
mov eax, dword [ebp - 0x6f54]
inc esi
mov dword [ebp - 0x6f6c], esi
cmp esi, 3
jb 0x4893b0
inc eax
mov dword [ebp - 0x6f54], eax
cmp eax, dword [ebp - 0x6f4c]
jb 0x4893a0
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48a289
push 0
push 0x669b60
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
push 0xc
lea ecx, [ebp - 0x24bc]
call fcn.00401d20
lea ecx, [ebp - 0x24bc]
call fcn.005453c0
xor esi, esi
mov byte [ebp - 4], 0xf8
cmp dword [ebp - 0x6f4c], esi
jbe 0x48a264
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x2294]
call fcn.00403180
mov ecx, edi
mov eax, dword [eax]
mov dword [ebp - 0x6f40], eax
call fcn.0046c7f0
test al, al
jne 0x48a264
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x669a74
push esi
lea ecx, [ebp - 0x22ac]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x21d8]
call fcn.00544fe0
lea eax, [ebp - 0x24bc]
xor edx, edx
push eax
lea ecx, [ebp - 0x21d8]
mov dword [ebp - 0x6f7c], edx
call fcn.00544f70
xor edx, edx
mov ecx, eax
call fcn.004ec640
test al, al
je 0x48a257
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x669bb8
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
push 0x6695d0
lea ecx, [ebp - 0x2080]
call fcn.00544fe0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646a48
lea ecx, [ebp - 0x24bc]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2040]
call fcn.00544fe0
lea ecx, [ebp - 0x2040]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
je 0x489a82
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x669bc8
lea ecx, [ebp - 0x2080]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x489a82
mov eax, dword [ebp - 0x6f40]
mov ecx, dword [ebp - 0x6f70]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2040]
mov dword [ebp - 0x6f54], eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2080]
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x489a82
push 0
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push 0
push 0
push 0
push 0
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2040]
call fcn.00544f70
push eax
push 0
push 0x4c
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666ff8
lea ecx, [ebp - 0x2040]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x665308
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x2080]
call fcn.00544f70
push eax
push 0x667030
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x669c14
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
push 0x6695d0
lea ecx, [ebp - 0x2080]
call fcn.00544fe0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646a64
lea ecx, [ebp - 0x24bc]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2040]
call fcn.00544fe0
lea ecx, [ebp - 0x2040]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
jne 0x489b29
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x663300
lea ecx, [ebp - 0x24bc]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2040]
call fcn.00544fe0
lea ecx, [ebp - 0x2040]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
je 0x489c8a
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x669bc8
lea ecx, [ebp - 0x2080]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x489c8a
mov eax, dword [ebp - 0x6f40]
mov ecx, dword [ebp - 0x6f70]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2040]
mov dword [ebp - 0x6f54], eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2080]
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x489c8a
push 0
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push 0
push 0
push 0
push 0
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2040]
call fcn.00544f70
push eax
push 0
push 0x4c
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666ff8
lea ecx, [ebp - 0x2040]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x665308
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x2080]
call fcn.00544f70
push eax
push 0x667030
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x669c2c
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
push 0x6695d0
lea ecx, [ebp - 0x2080]
call fcn.00544fe0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646a7c
lea ecx, [ebp - 0x24bc]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2040]
call fcn.00544fe0
lea ecx, [ebp - 0x2040]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
jne 0x489d31
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x663240
lea ecx, [ebp - 0x24bc]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2040]
call fcn.00544fe0
lea ecx, [ebp - 0x2040]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
je 0x489e92
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x669bc8
lea ecx, [ebp - 0x2080]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x489e92
mov eax, dword [ebp - 0x6f40]
mov ecx, dword [ebp - 0x6f70]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2040]
mov dword [ebp - 0x6f54], eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2080]
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x489e92
push 0
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push 0
push 0
push 0
push 0
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2040]
call fcn.00544f70
push eax
push 0
push 0x4c
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666ff8
lea ecx, [ebp - 0x2040]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x665308
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x2080]
call fcn.00544f70
push eax
push 0x667030
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x669c5c
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
push 0x6695d0
lea ecx, [ebp - 0x2080]
call fcn.00544fe0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x646a98
lea ecx, [ebp - 0x24bc]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2040]
call fcn.00544fe0
lea ecx, [ebp - 0x2040]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
je 0x48a05e
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x669bc8
lea ecx, [ebp - 0x2080]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x48a05e
mov eax, dword [ebp - 0x6f40]
mov ecx, dword [ebp - 0x6f70]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2040]
mov dword [ebp - 0x6f54], eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2080]
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x48a05e
push 0
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push 0
push 0
push 0
push 0
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2040]
call fcn.00544f70
push eax
push 0
push 0x4c
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666ff8
lea ecx, [ebp - 0x2040]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x665308
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x2080]
call fcn.00544f70
push eax
push 0x667030
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x669c70
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
push 0x6695d0
lea ecx, [ebp - 0x2080]
call fcn.00544fe0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x668c04
lea ecx, [ebp - 0x24bc]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2040]
call fcn.00544fe0
lea ecx, [ebp - 0x2040]
call fcn.00544f70
push eax
call dword [0x5fd680]
test eax, eax
je 0x48a22a
push 0
lea ecx, [edi + 0x14c]
call fcn.00544f70
push eax
push 0x669bc8
lea ecx, [ebp - 0x2080]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00470bd0
test al, al
jne 0x48a22a
mov eax, dword [ebp - 0x6f40]
mov ecx, dword [ebp - 0x6f70]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2040]
mov dword [ebp - 0x6f54], eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2080]
call fcn.00544f70
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.00499eb0
mov dword [ebp - 0x6f48], eax
cmp eax, 0xffffffff
je 0x48a22a
push 0
push esi
lea ecx, [ebp - 0x20a8]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push 0
push 0
push 0
push 0
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2040]
call fcn.00544f70
push eax
push 0
push 0x4c
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f8c]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.00499cc0
push 0
push 0
push 0
push 0
push 0
push 0x666ff8
lea ecx, [ebp - 0x2040]
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x665308
call fcn.00544f70
push eax
push 0x6645d4
lea ecx, [ebp - 0x2080]
call fcn.00544f70
push eax
push 0x667030
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
inc dword [ebp - 0x6f7c]
lea eax, [ebp - 0x24bc]
push eax
lea ecx, [ebp - 0x21d8]
call fcn.00544f70
mov edx, dword [ebp - 0x6f7c]
mov ecx, eax
call fcn.004ec640
test al, al
jne 0x4898b6
inc esi
cmp esi, dword [ebp - 0x6f4c]
jb 0x489830
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.00518e70
mov ecx, edi
call fcn.0046c7f0
lea ecx, [ebp - 0x24bc]
call fcn.00545210
lea ecx, [ebp - 0x2228]
call fcn.0053f820
lea ecx, [ebp - 0x23f8]
call fcn.00545210
lea ecx, [ebp - 0x2470]
call fcn.00545210
lea ecx, [ebp - 0x6e9c]
call fcn.00402710
lea ecx, [ebp - 0x24a4]
call fcn.00545210
lea ecx, [ebp - 0x2288]
call fcn.00545210
lea ecx, [ebp - 0x28ec]
call fcn.00401e40
lea ecx, [ebp - 0x2460]
call fcn.00545210
lea ecx, [ebp - 0x259c]
call fcn.00545210
lea ecx, [ebp - 0x2978]
call fcn.00401e00
lea ecx, [ebp - 0x22fc]
call fcn.00545210
lea ecx, [ebp - 0x2454]
call fcn.00545210
lea ecx, [ebp - 0x21cc]
call fcn.00545210
lea ecx, [ebp - 0x2590]
call fcn.00545210
lea ecx, [ebp - 0x2040]
call fcn.00545210
lea ecx, [ebp - 0x21d8]
call fcn.00545210
lea ecx, [ebp - 0x2080]
call fcn.00545210
lea ecx, [ebp - 0x3518]
call fcn.00401720
lea ecx, [ebp - 0x3058]
call fcn.00401720
lea ecx, [ebp - 0x2294]
call fcn.00402fa0
lea ecx, [ebp - 0x20a8]
call fcn.00403940
lea ecx, [ebp - 0x238c]
call fcn.00403940
lea ecx, [ebp - 0x2214]
call fcn.00403940
lea ecx, [ebp - 0x22ac]
mov byte [ebp - 4], 0x45
call fcn.00403940
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48c653
test dword [edi + 0x34], 0x40
jne 0x48c653
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x669c94
push dword [eax + 0x38]
call fcn.0051a1d0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x37
push dword [eax + 0x34]
call fcn.00516e60
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x48a43f
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f4d8
push esi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00544fe0
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x48a3f5
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f530
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00544fe0
cmp dword [ebp - 0x6fa8], 0
je 0x48a4a6
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x65f530
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00544fe0
push 0xc
lea ecx, [ebp - 0x1fb0]
mov dword [ebp - 0x6fc4], 0x65f588
mov dword [ebp - 0x6fc0], 0x65f598
mov dword [ebp - 0x6fbc], 0x669cc0
mov dword [ebp - 0x6fb8], 0x669ce0
mov dword [ebp - 0x6fb4], 0x669cf8
mov dword [ebp - 0x6fb0], 0x669d0c
call fcn.00401d20
lea ecx, [ebp - 0x1fb0]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x22b8]
mov byte [ebp - 4], 0xf9
call fcn.00401d20
lea ecx, [ebp - 0x22b8]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x21a4]
mov byte [ebp - 4], 0xfa
call fcn.00401d20
lea ecx, [ebp - 0x21a4]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x2320]
mov byte [ebp - 4], 0xfb
call fcn.00401d20
lea ecx, [ebp - 0x2320]
call fcn.005453c0
cmp dword [ebp - 0x6f74], 0
mov byte [ebp - 4], 0xfc
mov dword [ebp - 0x6f94], 0
jbe 0x48a70f
mov dword [ebp - 0x6f54], esi
nop
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48a70f
xor esi, esi
mov dword [ebp - 0x6f6c], esi
nop word [eax + eax]
mov ecx, dword [ebp - 0x6f54]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + esi*4 - 0x6fc4]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00544fe0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x48a6df
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f48], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.0053f120
test al, al
je 0x48a6df
mov esi, dword [ebp - 0x6f48]
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48a6d9
lea eax, [ebp - 0x1fb0]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f74]
call fcn.0053f580
test al, al
je 0x48a6bd
lea ecx, [ebp - 0x1fb0]
call fcn.00544c70
test al, al
jne 0x48a6bd
push 3
lea edx, [edi + 0x17c]
lea ecx, [ebp - 0x1fb0]
call fcn.005373a0
test al, al
je 0x48a6bd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x624a08
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2148]
call fcn.00544fe0
push 0
lea ecx, [ebp - 0x2148]
call fcn.00544f70
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.00470120
lea eax, [ebp - 0x6cb4]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0053f120
test al, al
jne 0x48a614
mov esi, dword [ebp - 0x6f6c]
inc esi
mov dword [ebp - 0x6f6c], esi
cmp esi, 6
jb 0x48a590
mov esi, dword [ebp - 0x6f94]
add dword [ebp - 0x6f54], 0xc
inc esi
mov dword [ebp - 0x6f94], esi
cmp esi, dword [ebp - 0x6f74]
jb 0x48a570
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x39
push dword [eax + 0x34]
call fcn.00516e60
push 4
lea ecx, [ebp - 0x6cb8]
call fcn.00401d40
lea ecx, [ebp - 0x6cb8]
call fcn.00401990
lea eax, [ebp - 0x6cb8]
mov byte [ebp - 4], 0xfd
push eax
push 0x617720
push 1
push 0
push 0x617730
call dword [0x5fdad4]
test eax, eax
js 0x48aa1d
lea ecx, [ebp - 0x7098]
call fcn.00401c80
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x7038]
movups xmmword [ebp - 0x6fa0], xmm0
call fcn.00401c80
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x7048]
movups xmmword [ebp - 0x6f60], xmm0
call fcn.00401c80
mov dword [ebp - 4], 0x100
lea ecx, [ebp - 0x7078]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x6f88], xmm0
call fcn.00401c80
mov edi, eax
mov byte [ebp - 4], 1
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x6fa0]
mov ecx, dword [ebp - 0x6cb8]
mov edx, esp
sub esp, 0x10
mov eax, esp
sub esp, 0x10
mov esi, dword [ecx]
movups xmmword [edx], xmm0
movups xmm0, xmmword [ebp - 0x6f60]
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x6f88]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [edi]
push ecx
movups xmmword [eax], xmm0
mov eax, dword [esi + 0x28]
call eax
shr eax, 0x1f
lea ecx, [ebp - 0x7078]
mov dword [ebp - 0x6f48], eax
call fcn.00401d10
lea ecx, [ebp - 0x7048]
mov dword [ebp - 4], 0xff
call fcn.00401d10
lea ecx, [ebp - 0x7038]
call fcn.00401d10
lea ecx, [ebp - 0x7098]
mov byte [ebp - 4], 0xfd
call fcn.00401d10
cmp byte [ebp - 0x6f48], 0
jne 0x48aa17
push 4
lea ecx, [ebp - 0x6ce4]
call fcn.00401d40
lea ecx, [ebp - 0x6ce4]
call fcn.00401990
push 0x61d048
lea ecx, [ebp - 0x6ff8]
mov dword [ebp - 4], 0x102
call fcn.00401a70
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x6cb8]
mov esi, dword [ecx]
lea ecx, [ebp - 0x6ce4]
push ecx
mov ecx, eax
call fcn.00401b30
push eax
push dword [ebp - 0x6cb8]
mov eax, dword [esi + 0x1c]
call eax
shr eax, 0x1f
lea ecx, [ebp - 0x6ff8]
mov dword [ebp - 0x6f48], eax
mov byte [ebp - 4], 2
call fcn.00401b20
cmp byte [ebp - 0x6f48], 0
jne 0x48aa05
push 4
lea ecx, [ebp - 0x6ce0]
call fcn.00401d40
lea ecx, [ebp - 0x6ce0]
call fcn.00401990
mov byte [ebp - 4], 4
lea edx, [ebp - 0x6ce0]
mov eax, dword [ebp - 0x6ce4]
push edx
push 0
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x28]
call eax
test eax, eax
js 0x48a9fa
mov eax, dword [ebp - 0x6ce0]
lea edx, [ebp - 0x2550]
mov dword [ebp - 0x2550], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
mov eax, dword [ebp - 0x2550]
test eax, eax
je 0x48a9fa
mov esi, 1
mov dword [ebp - 0x6f94], esi
cmp eax, esi
jl 0x48a9fa
mov edi, dword [ebp - 0x6f44]
push 4
lea ecx, [ebp - 0x6cf0]
call fcn.00401d40
lea ecx, [ebp - 0x6cf0]
call fcn.00401990
push 3
push esi
lea ecx, [ebp - 0x7028]
mov byte [ebp - 4], 5
call fcn.00401c90
mov esi, eax
mov byte [ebp - 4], 6
lea edx, [ebp - 0x6cf0]
mov ecx, dword [ebp - 0x6ce0]
movups xmm0, xmmword [esi]
push edx
sub esp, 0x10
mov eax, dword [ecx]
mov edx, esp
push ecx
mov eax, dword [eax + 0x20]
movups xmmword [edx], xmm0
call eax
shr eax, 0x1f
lea ecx, [ebp - 0x7028]
mov dword [ebp - 0x6f48], eax
mov byte [ebp - 4], 5
call fcn.00401d10
cmp byte [ebp - 0x6f48], 0
jne 0x48a9c5
push dword [ebp - 0x6cf0]
mov ecx, edi
call fcn.0046dd30
test al, al
je 0x48a9ef
lea ecx, [ebp - 0x6cf0]
mov byte [ebp - 4], 4
call fcn.00402c60
mov esi, dword [ebp - 0x6f94]
inc esi
mov dword [ebp - 0x6f94], esi
cmp esi, dword [ebp - 0x2550]
jle 0x48a943
jmp 0x48a9fa
lea ecx, [ebp - 0x6cf0]
call fcn.00402c60
lea ecx, [ebp - 0x6ce0]
call fcn.00402c60
lea ecx, [ebp - 0x6ce4]
mov dword [ebp - 4], 0xfd
call fcn.00402c60
mov edi, dword [ebp - 0x6f44]
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48c618
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x3c
push dword [eax + 0x34]
call fcn.00516e60
push 0x18
lea ecx, [ebp - 0x2498]
call fcn.00401d50
lea ecx, [ebp - 0x2498]
call fcn.00542180
mov dword [ebp - 4], 0x107
xor esi, esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x48aaca
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
nop word [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x669d38
push esi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00544fe0
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x48aa80
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x640468
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00544fe0
cmp dword [ebp - 0x6fa8], 0
je 0x48ab31
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x640468
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00544fe0
cmp dword [ebp - 0x6f74], 0
mov dword [ebp - 0x6fc8], 0x63a454
mov dword [ebp - 0x6fc4], 0x63a424
mov dword [ebp - 0x6fc0], 0x6280cc
mov dword [ebp - 0x6fbc], 0x6404d8
mov dword [ebp - 0x6fb8], 0x640368
mov dword [ebp - 0x6fb4], 0x63a47c
mov dword [ebp - 0x6fb0], 0x65c7b8
mov dword [ebp - 0x6f94], 0
jbe 0x48ad38
mov dword [ebp - 0x6f54], esi
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48ad38
xor esi, esi
mov dword [ebp - 0x6f6c], esi
nop dword [eax + eax]
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48ad18
mov eax, dword [ebp + esi*4 - 0x6fc8]
lea ecx, [ebp - 0x1fb0]
push ecx
mov ecx, dword [ebp - 0x6f54]
push eax
mov dword [ebp - 0x6f7c], eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f410
test al, al
je 0x48ad18
push 0
push 0x61e144
lea ecx, [ebp - 0x1fb0]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2498]
call fcn.00541ed0
lea ecx, [ebp - 0x2498]
mov dword [ebp - 0x6f48], 0
call fcn.00542070
test eax, eax
je 0x48ad08
mov esi, dword [ebp - 0x6f48]
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48ad02
push 3
push 1
push esi
lea ecx, [ebp - 0x2498]
call fcn.00542080
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00545040
mov ecx, eax
call fcn.00542f40
mov ecx, eax
call fcn.00545180
test eax, eax
je 0x48acee
push 3
lea edx, [edi + 0x17c]
lea ecx, [ebp - 0x1fb0]
call fcn.005373a0
test al, al
je 0x48acee
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x2498]
call fcn.00542080
mov ecx, dword [ebp - 0x6f54]
push eax
push 0x624a08
push dword [ebp - 0x6f7c]
push 0x624a08
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2148]
call fcn.00544fe0
push 0
lea ecx, [ebp - 0x2148]
call fcn.00544f70
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.00470120
lea ecx, [ebp - 0x2498]
inc esi
call fcn.00542070
cmp esi, eax
jb 0x48ac34
mov esi, dword [ebp - 0x6f6c]
inc esi
mov dword [ebp - 0x6f6c], esi
cmp esi, 7
jb 0x48abb0
mov esi, dword [ebp - 0x6f94]
add dword [ebp - 0x6f54], 0xc
inc esi
mov dword [ebp - 0x6f94], esi
cmp esi, dword [ebp - 0x6f74]
jb 0x48ab94
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48c606
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x3e
push dword [eax + 0x34]
call fcn.00516e60
push 0xc
lea ecx, [ebp - 0x20fc]
call fcn.00401d20
lea ecx, [ebp - 0x20fc]
call fcn.005453c0
mov esi, dword [ebp - 0x6f6c]
xor eax, eax
mov byte [ebp - 4], 8
mov dword [ebp - 0x6f94], eax
test eax, eax
jne 0x48ad8c
push 0x6466f8
jmp 0x48ada3
cmp esi, 1
jne 0x48adae
cmp byte [edi + 0x188], 0
je 0x48aed8
push 0x669da8
lea ecx, [ebp - 0x1f98]
call fcn.005452f0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x48aec2
lea eax, [ebp - 0x6cb4]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0053f1c0
test al, al
je 0x48aec2
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48aec2
lea eax, [ebp - 0x1fb0]
push eax
lea eax, [ebp - 0x21a4]
push eax
push 1
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x20fc]
call fcn.00545040
push eax
mov ecx, edi
call fcn.00471bc0
test al, al
je 0x48aea6
push 0
lea ecx, [ebp - 0x20fc]
call fcn.00544f70
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.00470120
test al, al
je 0x48aea6
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x61d048
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2148]
call fcn.00544fe0
push 0
lea ecx, [ebp - 0x2148]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.005451e0
push eax
mov ecx, edi
call fcn.00470120
lea eax, [ebp - 0x6cb4]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0053f1c0
test al, al
jne 0x48adf1
mov eax, dword [ebp - 0x6f94]
inc eax
mov dword [ebp - 0x6f94], eax
cmp eax, 2
jb 0x48ad81
mov ecx, edi
call fcn.00470850
test al, al
je 0x48c5fb
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x41
push dword [eax + 0x34]
call fcn.00516e60
push 4
lea ecx, [ebp - 0x1fb4]
call fcn.00401d40
lea ecx, [ebp - 0x1fb4]
call fcn.0053f8e0
push 4
lea ecx, [ebp - 0x205c]
mov byte [ebp - 4], 9
call fcn.00401d40
lea ecx, [ebp - 0x205c]
call fcn.0053f8e0
push 4
lea ecx, [ebp - 0x2004]
mov byte [ebp - 4], 0xa
call fcn.00401d40
lea ecx, [ebp - 0x2004]
call fcn.0053f8e0
mov byte [ebp - 4], 0xb
lea esi, [ebp - 0x6ff0]
mov dword [ebp - 0x6ff0], 0x669e54
mov dword [ebp - 0x6fec], 0x669e70
mov dword [ebp - 0x6fe8], 0x669eb8
mov dword [ebp - 0x6fe4], 0x669ef8
mov dword [ebp - 0x6fe0], 0x669f64
mov dword [ebp - 0x6fdc], 0x669f88
mov dword [ebp - 0x6fd8], 0x669fd8
mov dword [ebp - 0x6fd4], 0x66a008
mov dword [ebp - 0x6fd0], 0x66a060
mov dword [ebp - 0x6fcc], 0x66a0a0
mov dword [ebp - 0x6f54], 0
mov dword [ebp - 0x6f40], esi
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48b297
push 0
push 0x20019
push dword [esi]
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x48b278
mov ecx, edi
xor esi, esi
call fcn.0046c7f0
test al, al
jne 0x48b272
lea eax, [ebp - 0x6cb4]
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0053f1c0
test al, al
je 0x48b272
lea ecx, [ebp - 0x1fb0]
call fcn.005451e0
lea ecx, [ebp - 0x2148]
call fcn.005451e0
lea ecx, [ebp - 0x20fc]
call fcn.005451e0
test dword [ebp - 0x6f54], 1
jne 0x48b127
mov eax, dword [ebp - 0x6f40]
lea ecx, [ebp - 0x1f98]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.Command
push dword [ebp - 0x6cb4]
push 0x61d048
push dword [eax]
call fcn.00544fe0
lea eax, [ebp - 0x1fb0]
push eax
push 0x61d050
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fb4]
call fcn.0053f410
test al, al
je 0x48b0dc
lea ecx, [ebp - 0x1fb0]
call fcn.00545180
test eax, eax
je 0x48b0dc
push 3
lea edx, [edi + 0x17c]
lea ecx, [ebp - 0x1fb0]
call fcn.005373a0
test al, al
jne 0x48b1ed
lea ecx, [ebp - 0x1fb0]
jmp 0x48b1e8
lea eax, [ebp - 0x20fc]
push eax
push str.DelegateExecute
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fb4]
call fcn.0053f410
test al, al
je 0x48b116
lea ecx, [ebp - 0x20fc]
call fcn.00545180
test eax, eax
jne 0x48b1c2
lea eax, [ebp - 0x20fc]
push eax
push 0x66a10c
jmp 0x48b198
mov ecx, dword [ebp - 0x6cb4]
call fcn.0053d410
test al, al
je 0x48b15c
lea eax, [ebp - 0x1fb0]
push eax
lea eax, [ebp - 0x21a4]
push eax
push 1
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x20fc]
call fcn.00545040
jmp 0x48b1d6
mov eax, dword [ebp - 0x6f40]
lea ecx, [ebp - 0x1f98]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
push 0x61d048
push dword [eax]
call fcn.00544fe0
lea eax, [ebp - 0x20fc]
push eax
push 0x61d050
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fb4]
call fcn.0053f410
test al, al
je 0x48b1ed
lea ecx, [ebp - 0x20fc]
call fcn.00545180
test eax, eax
je 0x48b1ed
lea eax, [ebp - 0x1fb0]
push eax
lea eax, [ebp - 0x21a4]
push eax
lea eax, [ebp - 0x20fc]
push eax
mov ecx, edi
call fcn.00471bc0
test al, al
jne 0x48b1ed
lea ecx, [ebp - 0x20fc]
call fcn.005451e0
push 0
lea ecx, [ebp - 0x20fc]
call fcn.00544f70
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.00470120
test al, al
je 0x48b262
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x61d048
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2148]
call fcn.00544fe0
push 0
lea ecx, [ebp - 0x2148]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.005451e0
push eax
mov ecx, edi
call fcn.00470120
mov ecx, edi
inc esi
call fcn.0046c7f0
test al, al
je 0x48b001
mov esi, dword [ebp - 0x6f40]
mov eax, dword [ebp - 0x6f54]
add esi, 4
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f54], eax
cmp eax, 0xa
jb 0x48afc5
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48c5da
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x46
push dword [eax + 0x34]
call fcn.00516e60
xor esi, esi
mov dword [ebp - 0x6ff0], 0x6456b8
mov dword [ebp - 0x6fec], 0x645758
mov dword [ebp - 0x6f54], esi
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48b3e3
push 0
push 0x20019
push dword [ebp + esi*4 - 0x6ff0]
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x48b3d3
mov ecx, edi
xor esi, esi
call fcn.0046c7f0
test al, al
jne 0x48b3cd
lea eax, [ebp - 0x6cb4]
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.0053f1c0
test al, al
je 0x48b3cd
mov eax, dword [ebp - 0x6f54]
lea ecx, [ebp - 0x2148]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
push 0x61d048
push dword [ebp + eax*4 - 0x6ff0]
call fcn.00544fe0
lea eax, [ebp - 0x1fb0]
push eax
push str.Debugger
lea ecx, [ebp - 0x2148]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fb4]
call fcn.0053f410
test al, al
je 0x48b3bd
push 3
lea edx, [edi + 0x17c]
lea ecx, [ebp - 0x1fb0]
call fcn.005373a0
test al, al
je 0x48b3bd
push 0
lea ecx, [ebp - 0x2148]
call fcn.00544f70
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.00470120
mov ecx, edi
inc esi
call fcn.0046c7f0
test al, al
je 0x48b313
mov esi, dword [ebp - 0x6f54]
inc esi
mov dword [ebp - 0x6f54], esi
cmp esi, 2
jb 0x48b2d2
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48c5da
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x48
push dword [eax + 0x34]
call fcn.00516e60
push 0x645628
lea ecx, [ebp - 0x2120]
mov dword [ebp - 0x6ff0], 0x66a124
mov dword [ebp - 0x6fec], 0x66a148
mov dword [ebp - 0x6fe8], 0x66a178
mov dword [ebp - 0x6fe4], 0x66a1a4
call fcn.005452f0
push 0xc
lea ecx, [ebp - 0x2404]
call fcn.00401d20
push 1
push 0x61e380
lea ecx, [ebp - 0x2404]
call fcn.00545350
push 0
push 0x20019
lea ecx, [ebp - 0x2120]
mov byte [ebp - 4], 0xc
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x48b6ad
xor esi, esi
mov dword [ebp - 0x6f54], esi
nop dword [eax + eax]
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48b6ad
cmp esi, 1
jne 0x48b4ea
push 0x66a1c8
lea ecx, [ebp - 0x2120]
call fcn.005452f0
push 0
push 0x20019
lea ecx, [ebp - 0x2120]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x48b6ad
push 0x621ae8
lea ecx, [ebp - 0x2404]
call fcn.005452f0
lea eax, [ebp - 0x1fb0]
push eax
push dword [ebp + esi*4 - 0x6ff0]
lea ecx, [ebp - 0x1f74]
call fcn.0053f580
test al, al
je 0x48b69d
lea ecx, [ebp - 0x1fb0]
call fcn.00544c70
test al, al
jne 0x48b69d
push 0x621d74
lea ecx, [ebp - 0x1fb0]
call fcn.005452a0
test al, al
jne 0x48b69d
push 1
lea ecx, [ebp - 0x2404]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2498]
call fcn.00541ed0
lea ecx, [ebp - 0x2498]
xor esi, esi
call fcn.00542070
test eax, eax
je 0x48b697
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48b697
push 3
push 1
push esi
lea ecx, [ebp - 0x2498]
call fcn.00542080
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00545040
mov ecx, eax
call fcn.00542f40
mov ecx, eax
call fcn.00544c70
test al, al
jne 0x48b683
lea ecx, [ebp - 0x1fb0]
call fcn.00545180
cmp eax, 5
jl 0x48b5dd
push 0
push 1
push 1
push 0
push 0x61d04c
lea ecx, [ebp - 0x1fb0]
call fcn.005438b0
test eax, eax
jne 0x48b603
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str..dll
lea ecx, [ebp - 0x1fb0]
call fcn.005435c0
push 3
lea edx, [edi + 0x17c]
lea ecx, [ebp - 0x1fb0]
call fcn.005373a0
test al, al
je 0x48b683
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x2498]
call fcn.00542080
push eax
mov eax, dword [ebp - 0x6f54]
lea ecx, [ebp - 0x2120]
push 0x624a08
push dword [ebp + eax*4 - 0x6ff0]
push 0x624a08
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2148]
call fcn.00544fe0
push 0
lea ecx, [ebp - 0x2148]
call fcn.00544f70
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.00470120
lea ecx, [ebp - 0x2498]
inc esi
call fcn.00542070
cmp esi, eax
jb 0x48b570
mov esi, dword [ebp - 0x6f54]
inc esi
mov dword [ebp - 0x6f54], esi
cmp esi, 4
jb 0x48b490
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48c5cf
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x4b
push dword [eax + 0x34]
call fcn.00516e60
movsd xmm0, qword [0x6e3260]
mov eax, 0x66a288
comisd xmm0, xmmword [edi + 0x378]
mov ecx, 0x66a220
cmovbe ecx, eax
mov eax, dword [edi + 0x30]
xor esi, esi
mov dword [ebp - 0x6f7c], ecx
test eax, eax
je 0x48b75e
mov eax, dword [ebp - 0x6f68]
lea edx, [edi + 0x104]
mov dword [ebp - 0x6f54], eax
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push ecx
push esi
mov ecx, edx
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
mov ecx, dword [ebp - 0x6f54]
push eax
push str.HKU_
call fcn.00544fe0
add dword [ebp - 0x6f54], 0xc
lea edx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
mov ecx, dword [ebp - 0x6f7c]
cmp esi, eax
jb 0x48b710
mov esi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push ecx
push dword [ebp - 0x6f8c]
lea ecx, [esi + eax*4]
call fcn.00544fe0
cmp dword [ebp - 0x6fa8], 0
je 0x48b7c2
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6f7c]
inc eax
push dword [ebp - 0x6fa4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00544fe0
cmp dword [ebp - 0x6f74], 0
mov dword [ebp - 0x6f7c], 0
jbe 0x48b9a3
mov dword [ebp - 0x6f54], esi
nop
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48b9a3
push 0
push 0x20019
mov ecx, esi
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f870
test al, al
je 0x48b981
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f94], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.0053f120
test al, al
je 0x48b981
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48b97b
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1fb0]
call fcn.005452f0
lea ecx, [ebp - 0x1fb0]
call fcn.00545180
mov esi, eax
cmp esi, 3
jl 0x48b953
push 1
lea ecx, [ebp - 0x1fb0]
call fcn.00545220
cmp word [eax], 0x3a
jne 0x48b953
push 2
lea ecx, [ebp - 0x1fb0]
call fcn.00545220
cmp word [eax], 0x5c
jne 0x48b953
movsd xmm0, qword [edi + 0x378]
comisd xmm0, xmmword [0x6e3268]
jbe 0x48b903
cmp esi, 0x14
jle 0x48b903
push 0
push 1
push 0xffffffffffffffff
push 0
push 0x66a320
lea ecx, [ebp - 0x1fb0]
call fcn.005438b0
mov edx, eax
lea ecx, [esi - 0xf]
cmp edx, ecx
jge 0x48b8ed
push 0
push 1
push 0xffffffffffffffff
push 0
push 0x66a344
lea ecx, [ebp - 0x1fb0]
call fcn.005438b0
mov edx, eax
lea eax, [esi - 0x13]
cmp edx, eax
jle 0x48b903
lea eax, [edx - 1]
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00543c40
mov ecx, dword [ebp - 0x6f54]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
push 0x624a08
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2148]
call fcn.00544fe0
push 0
lea ecx, [ebp - 0x2148]
call fcn.00544f70
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.00470120
mov esi, dword [ebp - 0x6f94]
lea eax, [ebp - 0x6cb4]
inc esi
lea ecx, [ebp - 0x1f74]
push eax
push esi
mov dword [ebp - 0x6f94], esi
call fcn.0053f120
test al, al
jne 0x48b837
mov esi, dword [ebp - 0x6f54]
mov eax, dword [ebp - 0x6f7c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f54], esi
mov dword [ebp - 0x6f7c], eax
cmp eax, dword [ebp - 0x6f74]
jb 0x48b7e0
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48c5cf
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x50
push dword [eax + 0x34]
call fcn.00516e60
push 0xc
lea ecx, [ebp - 0x213c]
call fcn.00401d20
push 0xbb8
push 0
lea ecx, [ebp - 0x213c]
call fcn.004039b0
mov byte [ebp - 4], 0xd
xor esi, esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x48ba48
mov eax, dword [ebp - 0x6f68]
lea ecx, [edi + 0x10c]
mov dword [ebp - 0x6f54], eax
push esi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
push dword [ebp - 0x6f54]
lea ecx, [edi + 0x104]
push esi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
mov edx, 0x630098
mov ecx, eax
call fcn.004fa1e0
add dword [ebp - 0x6f54], 0xc
lea ecx, [edi + 0x10c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x48ba00
mov ecx, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0
push 0
push 0x16
lea ecx, [ecx + eax*4]
call fcn.00544980
mov eax, dword [ebp - 0x6f68]
xor esi, esi
mov dword [ebp - 0x6f54], eax
nop dword [eax]
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48baa8
mov ecx, dword [ebp - 0x6f54]
lea eax, [ebp - 0x213c]
push 1
push eax
call fcn.00544f70
push eax
mov ecx, edi
call fcn.0046da10
test al, al
je 0x48baa8
add dword [ebp - 0x6f54], 0xc
inc esi
cmp esi, dword [edi + 0x30]
jbe 0x48ba70
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48c5c4
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x51
push dword [eax + 0x34]
call fcn.00516e60
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x48bb5e
lea eax, [edi + 0x10c]
push esi
mov ecx, eax
call fcn.004035f0
mov ecx, eax
call fcn.00544c70
test al, al
jne 0x48bb4e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x294c]
call fcn.00544f70
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00544fe0
push 1
lea eax, [ebp - 0x213c]
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.0046da10
test al, al
je 0x48bb5e
inc esi
lea eax, [edi + 0x10c]
cmp esi, dword [edi + 0x30]
jb 0x48bad8
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48c5c4
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x52
push dword [eax + 0x34]
call fcn.00516e60
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x48bc19
lea eax, [edi + 0x10c]
nop
push esi
mov ecx, eax
call fcn.004035f0
mov ecx, eax
call fcn.00544c70
test al, al
jne 0x48bc09
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x66a36c
lea ecx, [ebp - 0x2220]
call fcn.00544f70
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00544fe0
push 1
lea eax, [ebp - 0x213c]
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.0046da10
test al, al
je 0x48bc19
inc esi
lea eax, [edi + 0x10c]
cmp esi, dword [edi + 0x30]
jb 0x48bb90
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48c5c4
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x53
push dword [eax + 0x34]
call fcn.00516e60
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x48bcce
lea eax, [edi + 0x10c]
nop dword [eax]
push esi
mov ecx, eax
call fcn.004035f0
mov ecx, eax
call fcn.00544c70
test al, al
jne 0x48bcc2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24c8]
call fcn.00544f70
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00544fe0
push 0
lea eax, [ebp - 0x213c]
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00544f70
push eax
mov ecx, edi
call fcn.0046da10
test al, al
je 0x48bcce
inc esi
lea eax, [edi + 0x10c]
cmp esi, dword [edi + 0x30]
jb 0x48bc50
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48c5c4
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x48bd3e
mov ecx, dword [ebp - 0x6f68]
lea eax, [edi + 0x10c]
mov dword [ebp - 0x6f54], ecx
push esi
mov ecx, eax
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
push eax
push dword [ebp - 0x6f54]
lea ecx, [edi + 0x104]
push esi
call fcn.004035f0
mov ecx, eax
call fcn.00544f70
mov edx, 0x627598
mov ecx, eax
call fcn.004fa1e0
add dword [ebp - 0x6f54], 0xc
lea eax, [edi + 0x10c]
inc esi
cmp esi, dword [edi + 0x30]
jb 0x48bcf6
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x54
push dword [eax + 0x34]
call fcn.00516e60
mov eax, dword [edi + 0x30]
mov ecx, dword [ebp - 0x6f68]
push 0
push 0
lea eax, [eax + eax*2]
push 0x19
lea ecx, [ecx + eax*4]
call fcn.00544980
xor esi, esi
nop word [eax + eax]
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48bda8
mov ecx, dword [ebp - 0x6f68]
lea eax, [ebp - 0x213c]
push 0
push eax
call fcn.00544f70
push eax
mov ecx, edi
call fcn.0046da10
test al, al
je 0x48bda8
add dword [ebp - 0x6f68], 0xc
inc esi
cmp esi, dword [edi + 0x30]
jbe 0x48bd70
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48c5c4
push 0xc
lea ecx, [ebp - 0x2790]
call fcn.00401d20
lea ecx, [ebp - 0x2790]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x262c]
mov byte [ebp - 4], 0xe
call fcn.00401d20
lea ecx, [ebp - 0x262c]
call fcn.005453c0
push 0x4c
lea ecx, [ebp - 0x2b20]
mov byte [ebp - 4], 0xf
call fcn.00401e30
lea ecx, [ebp - 0x2b20]
call fcn.00538040
lea ecx, [ebp - 0x213c]
mov byte [ebp - 4], 0x10
call fcn.00403760
xor esi, esi
mov dword [ebp - 0x6f48], eax
test eax, eax
je 0x48bfa5
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48bfa5
push 0x6291f4
push 1
push 1
push esi
lea ecx, [ebp - 0x213c]
call fcn.00403920
mov ecx, eax
call fcn.00544e90
push eax
lea ecx, [ebp - 0x2790]
call fcn.00545040
mov ecx, eax
call fcn.005452a0
test al, al
je 0x48bf6b
push 0
push esi
lea ecx, [ebp - 0x213c]
call fcn.00403920
mov ecx, eax
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2b20]
call fcn.00537f00
test al, al
je 0x48bf6b
push esi
lea ecx, [ebp - 0x213c]
call fcn.00403920
push eax
lea ecx, [ebp - 0x262c]
call fcn.005452c0
push 1
lea ecx, [ebp - 0x2b20]
call fcn.00537e80
push eax
push esi
lea ecx, [ebp - 0x213c]
call fcn.00403920
mov ecx, eax
call fcn.00545040
mov ecx, eax
call fcn.00544c70
test al, al
jne 0x48bf98
lea ecx, [ebp - 0x2b20]
call fcn.00537e20
mov ecx, eax
call fcn.00541aa0
push 0
push 0
test eax, eax
je 0x48bf4c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2b20]
call fcn.00537e20
push eax
push 0x61e0e4
push esi
lea ecx, [ebp - 0x213c]
call fcn.00403920
mov ecx, eax
call fcn.005435c0
push 3
push esi
lea ecx, [ebp - 0x213c]
call fcn.00403920
lea edx, [edi + 0x17c]
mov ecx, eax
call fcn.005373a0
test al, al
je 0x48bf98
jmp 0x48bf76
push 0x61d050
push 0x61e29c
push esi
lea ecx, [ebp - 0x213c]
call fcn.00403920
mov ecx, eax
call fcn.005430c0
jmp 0x48bf76
lea ecx, [ebp - 0x262c]
call fcn.005451e0
push 0
lea ecx, [ebp - 0x262c]
call fcn.00544f70
push eax
push esi
lea ecx, [ebp - 0x213c]
call fcn.00403920
push eax
mov ecx, edi
call fcn.00470120
inc esi
cmp esi, dword [ebp - 0x6f48]
jb 0x48be26
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48c5a3
mov ecx, edi
call fcn.00470850
test al, al
je 0x48c5a3
push 0
push 0
lea ecx, [ebp - 0x213c]
call fcn.00403800
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x55
push dword [eax + 0x34]
call fcn.00516e60
push 0xc
lea ecx, [ebp - 0x6d28]
call fcn.00401d20
lea ecx, [ebp - 0x6d28]
call fcn.0053f900
push 0xc
lea ecx, [ebp - 0x6d3c]
mov byte [ebp - 4], 0x11
call fcn.00401d20
lea ecx, [ebp - 0x6d3c]
call fcn.0053f900
push 0
push 0x20019
push 0x654344
lea ecx, [ebp - 0x1fb4]
mov byte [ebp - 4], 0x12
call fcn.0053f870
test al, al
je 0x48c3ba
lea eax, [ebp - 0x6d28]
mov dword [ebp - 0x6f94], 0
push eax
push 0
lea ecx, [ebp - 0x1fb4]
call fcn.0053f1c0
test al, al
je 0x48c3ba
nop
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48c3ba
push dword [ebp - 0x6d28]
lea ecx, [ebp - 0x21a4]
call fcn.005452f0
push 0x66a3a0
lea ecx, [ebp - 0x21a4]
call fcn.00545260
test al, al
je 0x48c0b4
push 0xa
push 1
push 1
push 0
push 0x66a3c4
lea ecx, [ebp - 0x21a4]
call fcn.005438b0
test eax, eax
je 0x48c392
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x66a3dc
push dword [ebp - 0x6d28]
lea ecx, [ebp - 0x1f98]
push 0x66a3f0
call fcn.00544fe0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x205c]
call fcn.0053f870
test al, al
je 0x48c392
mov ecx, edi
xor esi, esi
call fcn.0046c7f0
test al, al
jne 0x48c392
lea eax, [ebp - 0x6d3c]
push eax
push esi
lea ecx, [ebp - 0x205c]
call fcn.0053f1c0
test al, al
je 0x48c392
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6d3c]
lea ecx, [ebp - 0x1f98]
push 0x66a40c
push dword [ebp - 0x6d28]
push 0x66a3f0
call fcn.00544fe0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2004]
call fcn.0053f870
test al, al
je 0x48c382
lea eax, [ebp - 0x2834]
push eax
push 0x6280b4
lea ecx, [ebp - 0x2004]
call fcn.0053f4f0
test al, al
je 0x48c382
cmp dword [ebp - 0x2834], 0xb
jne 0x48c201
lea eax, [ebp - 0x1fb0]
push eax
push 0x6287a4
lea ecx, [ebp - 0x2004]
call fcn.0053f580
test al, al
je 0x48c382
push 0
lea ecx, [ebp - 0x1fb0]
call fcn.00544f70
push eax
push 0x1000
lea ecx, [ebp - 0x1fb0]
call fcn.00544760
lea edx, [edi + 0x17c]
mov ecx, eax
call fcn.00536040
jmp 0x48c2bb
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x64d0f0
lea ecx, [ebp - 0x1f98]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x22b8]
call fcn.00544fe0
lea eax, [ebp - 0x1fb0]
push eax
push 0x64d190
lea ecx, [ebp - 0x22b8]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x1f74]
call fcn.0053f410
test al, al
je 0x48c267
lea ecx, [ebp - 0x1fb0]
call fcn.00544c70
test al, al
je 0x48c2a8
lea eax, [ebp - 0x1fb0]
push eax
push 0x64d190
lea ecx, [ebp - 0x2004]
call fcn.0053f580
test al, al
je 0x48c291
lea ecx, [ebp - 0x1fb0]
call fcn.00544c70
test al, al
je 0x48c2a8
lea eax, [ebp - 0x1fb0]
push eax
push 0x6287a4
lea ecx, [ebp - 0x2004]
call fcn.0053f580
push 3
lea edx, [edi + 0x17c]
lea ecx, [ebp - 0x1fb0]
call fcn.005373a0
test al, al
je 0x48c382
lea ecx, [ebp - 0x1fb0]
call fcn.00544f70
push eax
push 0
call dword [0x5fdafc]
test eax, eax
je 0x48c2f7
push 1
push 0
lea ecx, [ebp - 0x7018]
call fcn.00545350
mov byte [ebp - 4], 0x13
or dword [ebp - 0x6fac], 1
jmp 0x48c317
lea eax, [ebp - 0x1f98]
push eax
lea ecx, [ebp - 0x700c]
call fcn.00545390
mov dword [ebp - 4], 0x114
or dword [ebp - 0x6fac], 2
push eax
lea ecx, [ebp - 0x2148]
call fcn.005452c0
mov eax, dword [ebp - 0x6fac]
test al, 2
je 0x48c347
and eax, 0xfffffffd
lea ecx, [ebp - 0x700c]
mov dword [ebp - 0x6fac], eax
call fcn.00545210
mov eax, dword [ebp - 0x6fac]
mov dword [ebp - 4], 0x112
test al, 1
je 0x48c366
and eax, 0xfffffffe
lea ecx, [ebp - 0x7018]
mov dword [ebp - 0x6fac], eax
call fcn.00545210
push 0
lea ecx, [ebp - 0x2148]
call fcn.00544f70
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.00470120
mov ecx, edi
inc esi
call fcn.0046c7f0
test al, al
je 0x48c118
mov eax, dword [ebp - 0x6f94]
lea ecx, [ebp - 0x6d28]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1fb4]
mov dword [ebp - 0x6f94], eax
call fcn.0053f1c0
test al, al
jne 0x48c060
mov ecx, edi
call fcn.00470850
test al, al
je 0x48c58d
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x58
push dword [eax + 0x34]
call fcn.00516e60
push 4
lea ecx, [ebp - 0x6cec]
call fcn.00401d40
lea ecx, [ebp - 0x6cec]
call fcn.004015e0
lea eax, [ebp - 0x2544]
mov byte [ebp - 4], 0x15
push eax
push 0x1f40
lea eax, [ebp - 0x1f70]
mov dword [ebp - 0x6ca8], 0x428
push eax
mov dword [ebp - 0x2544], 0
call dword [0x5fd37c]
test eax, eax
je 0x48c4e8
xor esi, esi
test dword [ebp - 0x2544], 0xfffffffc
jbe 0x48c4e8
nop dword [eax]
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48c4e8
push dword [ebp + esi*4 - 0x1f70]
push 0x18
call dword [0x5fd470]
push eax
lea ecx, [ebp - 0x6cec]
call fcn.00401610
lea ecx, [ebp - 0x6cec]
call fcn.00401640
test al, al
jne 0x48c4d6
lea eax, [ebp - 0x6ca8]
push eax
push dword [ebp - 0x6cec]
call dword [0x5fd384]
test eax, eax
je 0x48c4cb
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48c4cb
lea eax, [ebp - 0x6a88]
mov ecx, edi
push eax
lea eax, [ebp - 0x213c]
push eax
call fcn.0046d990
test al, al
je 0x48c4cb
lea eax, [ebp - 0x6ca8]
push eax
push dword [ebp - 0x6cec]
call dword [0x5fd2e0]
test eax, eax
jne 0x48c490
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48c4e8
mov eax, dword [ebp - 0x2544]
inc esi
shr eax, 2
cmp esi, eax
jb 0x48c440
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48c582
lea ecx, [ebp - 0x213c]
call fcn.00403760
mov ecx, dword [edi + 8]
push 0x5a
mov dword [ebp - 0x6f7c], eax
push dword [ecx + 0x34]
mov ecx, dword [edi + 4]
call fcn.00516e60
xor esi, esi
cmp dword [ebp - 0x6f7c], esi
jbe 0x48c57b
mov dword [ebp - 0x6f54], esi
mov ecx, edi
call fcn.0046c7f0
test al, al
jne 0x48c57b
mov eax, dword [ebp - 0x6f54]
xor edx, edx
div dword [ebp - 0x6f7c]
mov ecx, dword [edi + 4]
add eax, 0x5a
push eax
mov eax, dword [edi + 8]
push dword [eax + 0x34]
call fcn.00516e60
push 0
push 0
push esi
lea ecx, [ebp - 0x213c]
call fcn.00403920
push eax
mov ecx, edi
call fcn.00470120
add dword [ebp - 0x6f54], 0xa
inc esi
cmp esi, dword [ebp - 0x6f7c]
jb 0x48c528
mov ecx, edi
call fcn.00470850
lea ecx, [ebp - 0x6cec]
call fcn.004015f0
lea ecx, [ebp - 0x6d3c]
call fcn.0053f8f0
lea ecx, [ebp - 0x6d28]
call fcn.0053f8f0
lea ecx, [ebp - 0x2b20]
call fcn.00537b60
lea ecx, [ebp - 0x262c]
call fcn.00545210
lea ecx, [ebp - 0x2790]
call fcn.00545210
lea ecx, [ebp - 0x213c]
call fcn.00403940
lea ecx, [ebp - 0x2404]
call fcn.00545210
lea ecx, [ebp - 0x2004]
call fcn.0053f820
lea ecx, [ebp - 0x205c]
call fcn.0053f820
lea ecx, [ebp - 0x1fb4]
call fcn.0053f820
lea ecx, [ebp - 0x20fc]
call fcn.00545210
lea ecx, [ebp - 0x2498]
mov dword [ebp - 4], 0xfd
call fcn.005420e0
lea ecx, [ebp - 0x6cb8]
call fcn.00402c60
lea ecx, [ebp - 0x2320]
call fcn.00545210
lea ecx, [ebp - 0x21a4]
call fcn.00545210
lea ecx, [ebp - 0x22b8]
call fcn.00545210
lea ecx, [ebp - 0x1fb0]
mov byte [ebp - 4], 0x45
call fcn.00545210
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0
push 0x1004
push dword [eax + 0xb8]
call fcn.0051c470
push 0xc
lea ecx, [ebp - 0x27b0]
mov dword [ebp - 0x6f54], eax
call fcn.00401d20
lea ecx, [ebp - 0x27b0]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x27e0]
mov dword [ebp - 4], 0x116
call fcn.00401d20
lea ecx, [ebp - 0x27e0]
call fcn.005453c0
push 0xc
lea ecx, [ebp - 0x28f8]
mov byte [ebp - 4], 0x17
call fcn.00401d20
lea ecx, [ebp - 0x28f8]
call fcn.005453c0
push 0
push 0x66a430
lea ecx, [ebp - 0x1fd4]
mov byte [ebp - 4], 0x18
call fcn.005322d0
xor esi, esi
cmp dword [ebp - 0x6f54], esi
jbe 0x48c804
nop word [eax + eax]
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push esi
push dword [eax + 0xb8]
call fcn.00518b10
cmp eax, 0x51
jne 0x48c7f7
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push esi
push dword [eax + 0xb8]
call fcn.00518a60
push eax
lea ecx, [ebp - 0x2178]
call fcn.00544fa0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push esi
push dword [eax + 0xb8]
call fcn.00518a60
push eax
lea ecx, [ebp - 0x27b0]
call fcn.00544fa0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 2
push esi
push dword [eax + 0xb8]
call fcn.00518a60
push eax
lea ecx, [ebp - 0x27e0]
call fcn.00544fa0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 3
push esi
push dword [eax + 0xb8]
call fcn.00518a60
push eax
lea ecx, [ebp - 0x28f8]
call fcn.00544fa0
push 0
push 0
push 0
push 0x666664
lea ecx, [ebp - 0x28f8]
call fcn.00544f70
push eax
push 0x66a49c
lea ecx, [ebp - 0x27e0]
call fcn.00544f70
push eax
push 0x66a4c0
lea ecx, [ebp - 0x27b0]
call fcn.00544f70
push eax
push 0x66a4e8
lea ecx, [ebp - 0x2178]
call fcn.00544f70
push eax
push 0x665308
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
inc esi
cmp esi, dword [ebp - 0x6f54]
jb 0x48c6f0
push 0
push 0x66a510
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
push 0x18
lea ecx, [ebp - 0x2998]
call fcn.00401d50
lea ecx, [ebp - 0x2998]
call fcn.00542180
xor esi, esi
mov byte [ebp - 4], 0x19
cmp dword [ebp - 0x6f54], esi
jbe 0x48c9ee
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push esi
push dword [eax + 0xb8]
call fcn.00518b10
cmp eax, 0x52
jne 0x48c9e1
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push esi
push dword [eax + 0xb8]
call fcn.00518a60
push eax
lea ecx, [ebp - 0x2178]
call fcn.00544fa0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push esi
push dword [eax + 0xb8]
call fcn.00518a60
push eax
lea ecx, [ebp - 0x27b0]
call fcn.00544fa0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 2
push esi
push dword [eax + 0xb8]
call fcn.00518a60
push eax
lea ecx, [ebp - 0x27e0]
call fcn.00544fa0
push 1
push 0x624a08
lea ecx, [ebp - 0x2178]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2998]
call fcn.00541ed0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2998]
call fcn.00542080
push eax
push 0x66a54c
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea ecx, [ebp - 0x2998]
call fcn.00542070
cmp eax, 1
jbe 0x48c94d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2998]
call fcn.00542080
push eax
push 0x66a560
lea ecx, [ebp - 0x1f80]
call fcn.005435c0
lea ecx, [ebp - 0x2998]
call fcn.00542070
cmp eax, 2
jbe 0x48c98f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 2
lea ecx, [ebp - 0x2998]
call fcn.00542080
push eax
push 0x66a578
lea ecx, [ebp - 0x1f80]
call fcn.005435c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x666664
lea ecx, [ebp - 0x27e0]
call fcn.00544f70
push eax
push 0x66a4c0
lea ecx, [ebp - 0x27b0]
call fcn.00544f70
push eax
push 0x66a4e8
lea ecx, [ebp - 0x1f80]
call fcn.005435c0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
inc esi
cmp esi, dword [ebp - 0x6f54]
jb 0x48c840
push 0
push 0x66a590
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x663e68
call fcn.005190e0
push 0
push 0x66a5e0
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x663e98
call fcn.005190e0
push 0
push 0x66a670
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
movsd xmm0, qword [edi + 0x378]
comisd xmm0, xmmword [0x6e3268]
jbe 0x48ca96
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x663eb8
call fcn.005190e0
push 0
push 0x66a6f0
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x663eec
call fcn.005190e0
push 0
push 0x66a780
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x663f1c
call fcn.005190e0
push 0
push 0x66a810
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x663f48
call fcn.005190e0
push 0
push 0x66a8a0
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x663f80
call fcn.005190e0
push 0
push 0x66a930
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x663fc8
call fcn.005190e0
push 0
push 0x66a9d0
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov eax, dword [edi + 8]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
mov ecx, dword [edi + 4]
push 0x664010
call fcn.005190e0
push 0
push 0x66aa70
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x664058
call fcn.005190e0
push 0
push 0x66ab10
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x664090
call fcn.005190e0
push 0
push 0x66aba0
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x6640d8
call fcn.005190e0
push 0
push 0x66ac40
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x664138
call fcn.005190e0
push 0
push 0x66acd0
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x66417c
call fcn.005190e0
push 0
push 0x66ad70
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov eax, dword [edi + 8]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
mov ecx, dword [edi + 4]
push 0x53
push 0xffffffffffffffff
push 0
push 0x6641b8
call fcn.005190e0
push 0
push 0x66ae10
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x66aea8
call fcn.005190e0
push 0
push 0x66af00
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x6641f8
call fcn.005190e0
push 0
push 0x66afb0
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
movsd xmm0, qword [edi + 0x378]
lea ecx, [ebp - 0x1fd4]
xor eax, eax
comisd xmm0, xmmword [0x6e3268]
seta al
add eax, 8
add dword [edi + 0x24], eax
call fcn.00533160
test eax, eax
je 0x48cf11
lea ecx, [ebp - 0x2980]
call fcn.00539300
lea ecx, [ebp - 0x2980]
call fcn.00539360
mov edi, eax
lea ecx, [ebp - 0x2980]
sub edi, dword [ebp - 0x6ffc]
mov esi, edx
lea edx, [ebp - 0x1f80]
sbb esi, dword [ebp - 0x7000]
call fcn.00539370
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f788
lea ecx, [ebp - 0x1f80]
call fcn.00544f70
push eax
push 0x66b040
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
push esi
push edi
xor edx, edx
lea ecx, [ebp - 0x1f80]
call fcn.005389d0
mov ecx, dword [ebp - 0x6f44]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x65f250
call fcn.0046c7f0
test al, al
mov edx, 0x66b0e0
mov ecx, 0x66b098
cmove ecx, edx
push ecx
push 0x66b120
lea ecx, [ebp - 0x1f80]
call fcn.00544f70
push eax
push 0x66b130
lea ecx, [ebp - 0x1f80]
call fcn.00544fe0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
push 0
push 0x66b160
lea ecx, [ebp - 0x1fd4]
call fcn.005322d0
lea ecx, [ebp - 0x1fd4]
call fcn.00533170
mov edi, eax
lea ecx, [ebp - 0x1f80]
add edi, 0x26
mov esi, edx
adc esi, 0
push esi
push edi
call fcn.00544340
lea ecx, [ebp - 0x1f80]
call fcn.00545180
add eax, eax
add edi, eax
adc esi, 0
push esi
push edi
lea ecx, [ebp - 0x1f80]
call fcn.00544340
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x66b19c
lea ecx, [ebp - 0x1f80]
call fcn.005435c0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.005324f0
mov edi, dword [ebp - 0x6f44]
jmp 0x48cf1c
lea ecx, [edi + 0x11c]
call fcn.005451e0
lea ecx, [ebp - 0x1f74]
call fcn.0053e2a0
lea ecx, [ebp - 0x254c]
call fcn.0053e2a0
push 5
lea ecx, [edi + 0x314]
call fcn.00543b90
lea ecx, [edi + 0x314]
call fcn.00544f70
push eax
push 0x80000002
call dword [0x5fd068]
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x64
push dword [eax + 0x34]
call fcn.00516e60
push 0
mov ecx, edi
call fcn.0046c7f0
test al, al
mov edx, 0x66b1e0
mov eax, dword [edi + 8]
mov ecx, 0x66b1c4
cmove ecx, edx
push ecx
mov ecx, dword [edi + 4]
push dword [eax + 0x38]
call fcn.0051a1d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x66b200
lea ecx, [edi + 0x134]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2178]
call fcn.00544fe0
lea ecx, [ebp - 0x2178]
call fcn.00544f70
mov esi, 2
mov ecx, eax
mov edx, esi
call fcn.00533740
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x66b210
lea ecx, [edi + 0x134]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2178]
call fcn.00544fe0
lea ecx, [ebp - 0x2178]
call fcn.00544f70
mov edx, esi
mov ecx, eax
call fcn.00533740
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x66b220
lea ecx, [edi + 0x134]
call fcn.00544f70
push eax
lea ecx, [ebp - 0x2178]
call fcn.00544fe0
lea ecx, [ebp - 0x2178]
call fcn.00544f70
mov edx, esi
mov ecx, eax
call fcn.00533740
lea ecx, [edi + 0x220]
call fcn.0050af90
lea ecx, [ebp - 0x2998]
xor esi, esi
call fcn.005420e0
lea ecx, [ebp - 0x28f8]
call fcn.00545210
lea ecx, [ebp - 0x27e0]
call fcn.00545210
lea ecx, [ebp - 0x27b0]
call fcn.00545210
lea ecx, [ebp - 0x2148]
call fcn.00545210
lea ecx, [ebp - 0x6dcc]
call fcn.00403610
lea ecx, [ebp - 0x2548]
call fcn.0050e3e0
lea ecx, [ebp - 0x2904]
call fcn.00545210
lea ecx, [ebp - 0x6dac]
call fcn.00403610
lea ecx, [ebp - 0x6d10]
call fcn.00401a50
lea ecx, [ebp - 0x1fd4]
call fcn.00401e00
lea ecx, [ebp - 0x2584]
call fcn.00545210
lea ecx, [ebp - 0x1f80]
call fcn.00545210
lea ecx, [ebp - 0x2910]
call fcn.00545210
lea ecx, [ebp - 0x1f8c]
call fcn.00545210
lea ecx, [ebp - 0x2a2c]
call fcn.0053f940
lea ecx, [ebp - 0x29e0]
call fcn.0053f8f0
lea ecx, [ebp - 0x6cb4]
call fcn.0053f8f0
lea ecx, [ebp - 0x254c]
call fcn.0053f820
lea ecx, [ebp - 0x1f74]
call fcn.0053f820
lea ecx, [ebp - 0x2578]
call fcn.00545210
lea ecx, [ebp - 0x291c]
call fcn.00545210
lea ecx, [ebp - 0x2638]
call fcn.00545210
lea ecx, [ebp - 0x2644]
call fcn.00545210
lea ecx, [ebp - 0x2928]
call fcn.00545210
lea ecx, [ebp - 0x2934]
call fcn.00545210
lea ecx, [ebp - 0x27d4]
call fcn.00545210
lea ecx, [ebp - 0x271c]
call fcn.00545210
lea ecx, [ebp - 0x26e0]
call fcn.00545210
lea ecx, [ebp - 0x26d4]
call fcn.00545210
lea ecx, [ebp - 0x2940]
call fcn.00545210
lea ecx, [ebp - 0x27c8]
call fcn.00545210
lea ecx, [ebp - 0x25d8]
call fcn.00545210
lea ecx, [ebp - 0x2958]
call fcn.00545210
lea ecx, [ebp - 0x28a8]
call fcn.00545210
lea ecx, [ebp - 0x26c8]
call fcn.00545210
lea ecx, [ebp - 0x24c8]
call fcn.00545210
lea ecx, [ebp - 0x294c]
call fcn.00545210
lea ecx, [ebp - 0x25e4]
call fcn.00545210
lea ecx, [ebp - 0x29a4]
call fcn.00545210
lea ecx, [ebp - 0x2184]
call fcn.00545210
lea ecx, [ebp - 0x2220]
call fcn.00545210
lea ecx, [ebp - 0x28b4]
call fcn.00545210
lea ecx, [ebp - 0x2120]
call fcn.00545210
lea ecx, [ebp - 0x2178]
call fcn.00545210
lea ecx, [ebp - 0x1f98]
call fcn.00545210
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e465
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret