Function at 0x499f30
Capabilities:
Contain obfuscated stackstrings
Encode data using base64
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d0d3d
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x70c0
call fcn.0041f1c0
mov eax, dword [0x6dd1e4]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, ecx
mov dword [ebp - 0x6f54], eax
mov dword [ebp - 0x6fb8], 0
lea ecx, [ebp - 0x27a4]
mov byte [eax + 0xa8], 0
call fcn.005122d0
mov eax, dword [ebp - 0x6f54]
add eax, 0x54
mov ecx, eax
mov dword [ebp - 0x6f5c], eax
call fcn.0051dfa0
xor ecx, ecx
call fcn.00515710
test eax, eax
je 0x499fc3
push eax
call fcn.0041e896
add esp, 4
mov ecx, dword [ebp - 0x6f54]
push 0
call fcn.004c0b80
mov eax, dword [ebp - 0x6f54]
push 1
mov eax, dword [eax + 8]
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6f54]
mov ecx, dword [eax + 4]
call fcn.004f1310
mov eax, dword [ebp - 0x6f54]
push 0
push 0x615360
mov eax, dword [eax + 8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x6f54]
mov ecx, dword [eax + 4]
call fcn.004f44b0
push 0xc
lea ecx, [ebp - 0x1f98]
call fcn.00401eb0
lea ecx, [ebp - 0x1f98]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2154]
mov dword [ebp - 4], 0
call fcn.00401eb0
lea ecx, [ebp - 0x2154]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2120]
mov byte [ebp - 4], 1
call fcn.00401eb0
lea ecx, [ebp - 0x2120]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x28b8]
mov byte [ebp - 4], 2
call fcn.00401eb0
lea ecx, [ebp - 0x28b8]
call fcn.0051e180
mov byte [ebp - 4], 3
mov esi, 0xa0
mov eax, dword [ebp - 0x6f54]
push 0
push 0
push 0x1009
mov eax, dword [eax + 8]
push dword [esi + eax]
mov eax, dword [ebp - 0x6f54]
mov ecx, dword [eax + 4]
call fcn.004f6680
add esi, 4
cmp esi, 0xb8
jb 0x49a085
push 0
push 0
push 0x80
lea ecx, [ebp - 0x2120]
call fcn.0051d530
push eax
push 0
push 0
push 0x104
lea ecx, [ebp - 0x2154]
call fcn.0051d530
push 0
push 0
push 0x80
lea ecx, [ebp - 0x28b8]
mov esi, eax
call fcn.0051d530
mov edx, esi
mov ecx, eax
call fcn.004d5840
mov edi, dword [ebp - 0x6f54]
push 4
mov byte [ebp - 0x6f49], 1
mov dword [edi + 0x38], eax
mov eax, edi
mov eax, dword [eax + 8]
push dword [eax + 0x28]
mov eax, edi
mov ecx, dword [eax + 4]
call fcn.004f3c80
test eax, eax
setne byte [ebp - 0x6f5d]
test eax, eax
mov eax, edi
lea ecx, [eax + 0x44]
lea esi, [eax + 0x3c]
mov dword [ebp - 0x6fb4], ecx
mov dword [ebp - 0x6f40], esi
je 0x49a161
lea edx, [eax + 0x4c]
push 1
mov dword [ebp - 0x6f44], edx
push edx
mov edx, ecx
mov ecx, esi
call fcn.004d5ca0
test eax, eax
mov dword [edi + 0x30], eax
mov eax, edi
setne cl
jmp 0x49a170
lea ecx, [eax + 0x4c]
mov dword [ebp - 0x6f44], ecx
mov cl, byte [ebp - 0x6f49]
cmp byte [ebp - 0x6f5d], 0
lea edi, [eax + 0x44]
je 0x49a183
lea edi, [eax + 0x44]
test cl, cl
jne 0x49a1dd
cmp dword [eax + 0x38], 0
je 0x49a475
mov dword [eax + 0x30], 1
mov ecx, esi
lea eax, [ebp - 0x2120]
push eax
push 1
call fcn.004037f0
mov ecx, eax
call fcn.0051e080
lea eax, [ebp - 0x2154]
mov ecx, edi
push eax
push 1
call fcn.004037f0
mov ecx, eax
call fcn.0051e080
mov ecx, dword [ebp - 0x6f44]
lea eax, [ebp - 0x28b8]
push eax
push 1
call fcn.004037f0
mov ecx, eax
call fcn.0051e080
push 8
lea ecx, [ebp - 0x2874]
call fcn.004020d0
push dword [ebp - 0x6f44]
lea ecx, [ebp - 0x2874]
call fcn.00403960
push 8
lea ecx, [ebp - 0x286c]
mov byte [ebp - 4], 4
call fcn.004020d0
push dword [ebp - 0x6fb4]
lea ecx, [ebp - 0x286c]
call fcn.00403960
push 8
lea ecx, [ebp - 0x2844]
mov byte [ebp - 4], 5
call fcn.004020d0
push esi
lea ecx, [ebp - 0x2844]
call fcn.00403960
mov eax, dword [ebp - 0x6f54]
mov ecx, esi
mov byte [ebp - 4], 6
mov eax, dword [eax + 0x30]
add eax, 2
push eax
call fcn.004037f0
mov edi, dword [ebp - 0x6f54]
mov eax, dword [edi + 0x30]
lea ecx, [edi + 0x44]
add eax, 2
push eax
call fcn.004037f0
mov eax, dword [edi + 0x30]
lea ecx, [edi + 0x4c]
add eax, 2
push eax
call fcn.004037f0
mov eax, edi
xor esi, esi
mov eax, dword [eax + 0x30]
test eax, eax
je 0x49a30f
mov edi, dword [ebp - 0x6f40]
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x2844]
call fcn.004038d0
mov ecx, eax
call fcn.0051df80
push eax
push esi
mov ecx, edi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd60
push esi
lea ecx, [ebp - 0x286c]
call fcn.004038d0
mov ecx, eax
call fcn.0051df80
mov ecx, dword [ebp - 0x6fb4]
push eax
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd60
push esi
lea ecx, [ebp - 0x2874]
call fcn.004038d0
mov ecx, eax
call fcn.0051df80
mov ecx, dword [ebp - 0x6f44]
push eax
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd60
mov eax, dword [ebp - 0x6f54]
inc esi
mov eax, dword [eax + 0x30]
cmp esi, eax
jb 0x49a290
mov ecx, dword [ebp - 0x6f44]
push 0
push 0x61538c
push 0x104
push eax
call fcn.004038d0
mov ecx, eax
call fcn.0051d530
mov ecx, eax
call fcn.004d4e90
mov eax, dword [ebp - 0x6f54]
push 0x61538c
push dword [eax + 0x30]
lea esi, [eax + 0x3c]
mov ecx, esi
call fcn.004038d0
mov ecx, eax
call fcn.0051e0b0
mov edi, dword [ebp - 0x6f54]
mov ecx, esi
push 0x6153a0
mov eax, dword [edi + 0x30]
inc eax
push eax
mov dword [edi + 0x30], eax
call fcn.004038d0
mov ecx, eax
call fcn.0051e0b0
mov ecx, dword [ebp - 0x6f44]
mov eax, edi
push 0x6153a0
push dword [eax + 0x30]
call fcn.004038d0
mov ecx, eax
call fcn.0051e0b0
lea eax, [ebp - 0x6dc4]
mov dword [ebp - 0x6dc4], 0x400
push eax
push 0
mov eax, edi
push 0
push 0x400
push dword [eax + 0x30]
lea edi, [eax + 0x44]
mov ecx, edi
call fcn.004038d0
mov ecx, eax
call fcn.0051d530
push eax
call dword [0x5de810]
mov edx, 0x6153a0
mov ecx, 0x80000003
call fcn.00516430
test al, al
jne 0x49a48d
push 0xc
lea ecx, [ebp - 0x29a4]
call fcn.00401eb0
mov eax, dword [ebp - 0x6f54]
mov ecx, edi
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60a170
push dword [eax + 0x30]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x29a4]
call fcn.0051e0c0
lea ecx, [ebp - 0x29a4]
mov byte [ebp - 4], 7
call fcn.0051dd30
push eax
mov eax, dword [ebp - 0x6f54]
mov ecx, esi
push dword [eax + 0x30]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x80000003
call dword [0x5de07c]
test eax, eax
jne 0x49a468
mov eax, dword [ebp - 0x6f54]
inc dword [eax + 0x30]
lea ecx, [ebp - 0x29a4]
call fcn.0051dfd0
jmp 0x49a496
test cl, cl
jne 0x49a1dd
push 1
mov ecx, eax
call fcn.004c0b80
mov esi, eax
jmp 0x4b4880
mov eax, dword [ebp - 0x6f54]
inc dword [eax + 0x30]
lea ecx, [ebp - 0x2844]
call fcn.004038f0
lea ecx, [ebp - 0x286c]
call fcn.004038f0
lea ecx, [ebp - 0x2874]
mov byte [ebp - 4], 3
call fcn.004038f0
mov esi, dword [ebp - 0x6f54]
lea ecx, [ebp - 0x27a4]
add esi, 0x78
mov dword [ebp - 0x6f50], esi
call fcn.00512330
push edx
push eax
mov ecx, esi
call fcn.0051d070
mov edi, dword [ebp - 0x6f54]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6153b8
lea ecx, [edi + 0x6c]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051c280
mov ecx, esi
call fcn.0051dd30
or edx, 0xffffffff
mov ecx, eax
call fcn.00509060
test al, al
jne 0x49a532
push 1
mov ecx, edi
call fcn.004c0b80
mov esi, eax
jmp 0x4b4880
mov ecx, esi
call fcn.0051dd30
push eax
call dword [0x5de474]
or eax, 2
mov ecx, esi
push eax
call fcn.0051dd30
push eax
call dword [0x5de454]
push 0
call dword [0x5dea68]
push 0xc
lea ecx, [ebp - 0x2238]
call fcn.00401eb0
lea ecx, [ebp - 0x2238]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2184]
mov byte [ebp - 4], 8
call fcn.00401eb0
lea ecx, [ebp - 0x2184]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x29bc]
mov byte [ebp - 4], 9
call fcn.00401eb0
lea ecx, [ebp - 0x29bc]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x25e4]
mov byte [ebp - 4], 0xa
call fcn.00401eb0
lea ecx, [ebp - 0x25e4]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2910]
mov byte [ebp - 4], 0xb
call fcn.00401eb0
lea ecx, [ebp - 0x2910]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x24ec]
mov byte [ebp - 4], 0xc
call fcn.00401eb0
lea ecx, [ebp - 0x24ec]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x26b0]
mov byte [ebp - 4], 0xd
call fcn.00401eb0
lea ecx, [ebp - 0x26b0]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x28a8]
mov byte [ebp - 4], 0xe
call fcn.00401eb0
lea ecx, [ebp - 0x28a8]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2904]
mov byte [ebp - 4], 0xf
call fcn.00401eb0
lea ecx, [ebp - 0x2904]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2568]
mov byte [ebp - 4], 0x10
call fcn.00401eb0
lea ecx, [ebp - 0x2568]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x27e0]
mov byte [ebp - 4], 0x11
call fcn.00401eb0
lea ecx, [ebp - 0x27e0]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2890]
mov byte [ebp - 4], 0x12
call fcn.00401eb0
lea ecx, [ebp - 0x2890]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x26bc]
mov byte [ebp - 4], 0x13
call fcn.00401eb0
lea ecx, [ebp - 0x26bc]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x26e0]
mov byte [ebp - 4], 0x14
call fcn.00401eb0
lea ecx, [ebp - 0x26e0]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x26c8]
mov byte [ebp - 4], 0x15
call fcn.00401eb0
lea ecx, [ebp - 0x26c8]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x27d4]
mov byte [ebp - 4], 0x16
call fcn.00401eb0
lea ecx, [ebp - 0x27d4]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x291c]
mov byte [ebp - 4], 0x17
call fcn.00401eb0
lea ecx, [ebp - 0x291c]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2958]
mov byte [ebp - 4], 0x18
call fcn.00401eb0
lea ecx, [ebp - 0x2958]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2668]
mov byte [ebp - 4], 0x19
call fcn.00401eb0
lea ecx, [ebp - 0x2668]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2644]
mov byte [ebp - 4], 0x1a
call fcn.00401eb0
lea ecx, [ebp - 0x2644]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x294c]
mov byte [ebp - 4], 0x1b
call fcn.00401eb0
lea ecx, [ebp - 0x294c]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x25d8]
mov byte [ebp - 4], 0x1c
call fcn.00401eb0
lea ecx, [ebp - 0x25d8]
call fcn.0051e180
mov byte [ebp - 4], 0x1d
call dword [0x5de4d8]
mov ecx, eax
call fcn.00509900
test eax, eax
mov dword [ebp - 0x6f48], eax
mov edx, str.HKLM
mov eax, str.HKLM64
setne cl
test cl, cl
mov byte [ebp - 0x6f49], cl
push 1
cmove eax, edx
lea ecx, [ebp - 0x2238]
mov dword [ebp - 0x6f70], eax
mov edx, 0x5fe50c
mov eax, str.HKLM32
cmove eax, edx
mov dword [ebp - 0x6f74], eax
mov eax, dword [ebp - 0x6f54]
push dword [eax + 0x38]
push 0x1a
call fcn.0051d750
mov eax, dword [ebp - 0x6f54]
lea ecx, [ebp - 0x2184]
push 1
push dword [eax + 0x38]
push 0x1c
call fcn.0051d750
mov eax, dword [ebp - 0x6f54]
lea ecx, [ebp - 0x25e4]
push 1
push dword [eax + 0x38]
push 2
call fcn.0051d750
mov eax, dword [ebp - 0x6f54]
lea ecx, [ebp - 0x24ec]
push 1
push dword [eax + 0x38]
push 0x10
call fcn.0051d750
mov eax, dword [ebp - 0x6f54]
lea ecx, [ebp - 0x26c8]
push 1
push dword [eax + 0x38]
push 0x23
call fcn.0051d750
mov eax, dword [ebp - 0x6f54]
lea ecx, [ebp - 0x28a8]
push 1
push dword [eax + 0x38]
push 7
call fcn.0051d750
mov eax, dword [ebp - 0x6f54]
lea ecx, [ebp - 0x2904]
push 1
push dword [eax + 0x38]
push 5
call fcn.0051d750
push 0x400
push 0
push 0
push 0x400
lea ecx, [ebp - 0x26b0]
call fcn.0051d530
push eax
mov eax, dword [ebp - 0x6f54]
push 0x60f838
push dword [eax + 0x38]
call dword [0x5de814]
push 0x400
lea ecx, [ebp - 0x26b0]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x26b0]
call fcn.0051dd30
push eax
call dword [0x5de4dc]
push 0x104
push 0
push 0
push 0x104
lea ecx, [ebp - 0x2568]
call fcn.0051d530
push eax
call dword [0x5de404]
cmp dword [ebp - 0x6f48], 0
je 0x49a975
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60f848
lea ecx, [ebp - 0x2568]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x27e0]
call fcn.0051dda0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60f860
jmp 0x49a9b7
push 0x104
push 0
push 0
push 0x104
lea ecx, [ebp - 0x27e0]
call fcn.0051d530
push eax
call dword [0x5de464]
cmp byte [ebp - 0x6f49], 0
je 0x49a9d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60f874
lea ecx, [ebp - 0x2568]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2890]
call fcn.0051dda0
jmp 0x49a9e2
lea eax, [ebp - 0x27e0]
push eax
lea ecx, [ebp - 0x2890]
call fcn.0051e080
mov al, byte [ebp - 0x6f48]
lea edx, [ebp - 0x26e0]
push eax
lea ecx, [ebp - 0x26bc]
mov dword [ebp - 0x6f40], eax
call fcn.00505f10
push 0
push 0
push 0x2b
lea ecx, [ebp - 0x27d4]
call fcn.0051d750
push 0
push 0
push 0x17
lea ecx, [ebp - 0x2668]
call fcn.0051d750
push 0
push 0
push 0x19
lea ecx, [ebp - 0x2644]
call fcn.0051d750
push 0
push 0
push 0x18
lea ecx, [ebp - 0x291c]
call fcn.0051d750
push 1
push 0
push 0x28
lea ecx, [ebp - 0x25d8]
call fcn.0051d750
lea ecx, [ebp - 0x25d8]
call fcn.0051df40
push eax
lea ecx, [ebp - 0x2238]
call fcn.0051ca50
lea ecx, [ebp - 0x25d8]
call fcn.0051df40
push eax
lea ecx, [ebp - 0x2184]
call fcn.0051ca50
push 1
push 0x60f888
lea ecx, [ebp - 0x29bc]
call fcn.0051de00
lea ecx, [ebp - 0x25d8]
call fcn.0051df40
push eax
lea ecx, [ebp - 0x25e4]
call fcn.0051ca50
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60f8b0
lea ecx, [ebp - 0x2238]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2910]
call fcn.0051dda0
lea ecx, [ebp - 0x25d8]
call fcn.0051df40
push eax
lea ecx, [ebp - 0x24ec]
call fcn.0051ca50
lea ecx, [ebp - 0x25d8]
call fcn.0051df40
push eax
lea ecx, [ebp - 0x26b0]
call fcn.0051ca50
lea ecx, [ebp - 0x25d8]
call fcn.0051df40
push eax
lea ecx, [ebp - 0x28a8]
call fcn.0051ca50
lea ecx, [ebp - 0x25d8]
call fcn.0051df40
push eax
lea ecx, [ebp - 0x2904]
call fcn.0051ca50
push 2
push 1
lea ecx, [ebp - 0x2568]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x294c]
call fcn.0051baa0
push 1
lea ecx, [ebp - 0x27d4]
call fcn.0051dac0
lea eax, [ebp - 0x27d4]
push eax
lea ecx, [ebp - 0x2958]
call fcn.0051e080
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe504
lea ecx, [ebp - 0x26bc]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x27d4]
call fcn.0051c280
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe504
lea ecx, [ebp - 0x26e0]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2958]
call fcn.0051c280
mov eax, dword [ebp - 0x6f54]
cmp byte [eax + 0x14], 0
je 0x49abe5
xor esi, esi
jmp 0x4b478e
mov eax, dword [eax + 8]
push 3
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6f54]
mov ecx, dword [eax + 4]
call fcn.004f1310
mov eax, dword [ebp - 0x6f54]
push 0
push 0x6153c4
mov eax, dword [eax + 8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x6f54]
mov ecx, dword [eax + 4]
call fcn.004f44b0
mov eax, dword [ebp - 0x6f54]
mov ecx, dword [eax + 0x10]
test ecx, ecx
jne 0x49ac39
mov ecx, eax
call fcn.00497000
mov eax, dword [ebp - 0x6f54]
mov ecx, dword [eax + 0x10]
cmp ecx, 1
jne 0x49ac60
mov esi, dword [0x5de438]
cmp byte [eax + 0x14], 0
jne 0x49acfc
push 0x64
call esi
mov eax, dword [ebp - 0x6f54]
cmp dword [eax + 0x10], 1
je 0x49ac44
jmp 0x49ac66
mov eax, dword [ebp - 0x6f54]
mov eax, dword [eax + 8]
push 6
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6f54]
mov ecx, dword [eax + 4]
call fcn.004f1310
mov eax, dword [ebp - 0x6f54]
push 0
push 0x6153f4
mov eax, dword [eax + 8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x6f54]
mov ecx, dword [eax + 4]
call fcn.004f44b0
mov esi, dword [ebp - 0x6f54]
lea ecx, [ebp - 0x27a4]
add esi, 0x24c
mov dword [ebp - 0x6ff4], esi
call fcn.00512330
push edx
push eax
mov ecx, esi
call fcn.0051d070
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x615424
mov ecx, esi
call fcn.0051c280
mov ecx, esi
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f54]
push eax
call fcn.00496e00
test eax, eax
jne 0x49ad06
mov esi, 3
jmp 0x4b478e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60a62c
mov ecx, esi
call fcn.0051c280
push 4
lea ecx, [ebp - 0x1f74]
call fcn.00401ed0
lea ecx, [ebp - 0x1f74]
call fcn.00518880
push 4
lea ecx, [ebp - 0x2544]
mov byte [ebp - 4], 0x1e
call fcn.00401ed0
push 0
push 0x20019
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2544]
call fcn.00518860
push 0xc
lea ecx, [ebp - 0x6cb4]
mov byte [ebp - 4], 0x1f
call fcn.00401eb0
lea ecx, [ebp - 0x6cb4]
call fcn.005188a0
push 0xc
lea ecx, [ebp - 0x29e0]
mov byte [ebp - 4], 0x20
call fcn.00401eb0
lea ecx, [ebp - 0x29e0]
call fcn.005188a0
push 0x10
lea ecx, [ebp - 0x2a2c]
mov byte [ebp - 4], 0x21
call fcn.00401ef0
lea ecx, [ebp - 0x2a2c]
call fcn.005188f0
push 0xc
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0x22
call fcn.00401eb0
lea ecx, [ebp - 0x1f8c]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2940]
mov byte [ebp - 4], 0x23
call fcn.00401eb0
lea ecx, [ebp - 0x2940]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x1f80]
mov byte [ebp - 4], 0x24
call fcn.00401eb0
lea ecx, [ebp - 0x1f80]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x25cc]
mov byte [ebp - 4], 0x25
call fcn.00401eb0
lea ecx, [ebp - 0x25cc]
call fcn.0051e180
lea ecx, [ebp - 0x27a4]
mov byte [ebp - 4], 0x26
call fcn.00512330
mov ecx, edx
mov dword [ebp - 0x700c], eax
push ecx
mov dword [ebp - 0x7010], ecx
lea ecx, [ebp - 0x2940]
push eax
call fcn.0051d070
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60f904
lea ecx, [ebp - 0x2940]
call fcn.0051dd30
push eax
push 0x615434
lea ecx, [edi + 0x6c]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f5c]
push eax
call fcn.0051dda0
push 0x20
lea ecx, [ebp - 0x1ff0]
call fcn.00401fb0
lea ecx, [ebp - 0x1ff0]
call fcn.0050c930
mov ecx, dword [ebp - 0x6f5c]
push 0
push 0x22
mov byte [ebp - 4], 0x27
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050c260
test eax, eax
je 0x49b0fa
push 0
mov esi, dword [ebp - 0x6f54]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x615448
push 0
push 1
push 1
push 0
add esi, 0x264
push 0x615478
mov ecx, esi
call fcn.0051c760
test eax, eax
mov edx, 0x615490
mov ecx, 0x615488
cmove ecx, edx
push ecx
mov ecx, esi
call fcn.0051dd30
push eax
push 0x60f964
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
cmp dword [ebp - 0x6f48], 0
jne 0x49af58
cmp byte [ebp - 0x6f49], 0
mov eax, 0x5feae8
jne 0x49af5d
mov eax, 0x5feaf0
push 0
push 0
push 0
push 0
push 0
push 0x60f978
push eax
push 0x60940c
push 0x60f98c
push 0x60f9a0
mov ecx, esi
call fcn.0051dd30
push eax
push 0x60f9b8
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
mov eax, dword [ebp - 0x6f54]
lea ecx, [ebp - 0x25cc]
push 0
push dword [eax + 0xc]
call fcn.0051d070
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60ff48
lea ecx, [ebp - 0x25cc]
call fcn.0051dd30
push eax
push 0x6154a8
mov ecx, esi
call fcn.0051dd30
push eax
push 0x60f9b8
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
push dword [ebp - 0x6f40]
mov ecx, dword [ebp - 0x6f54]
lea eax, [ebp - 0x1f80]
push eax
call fcn.00498c30
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
cmp byte [ebp - 0x6f5d], 0
mov ecx, 0x6154e8
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60ff48
mov eax, 0x60c078
cmove eax, ecx
lea ecx, [ebp - 0x28b8]
push eax
push 0x6154fc
push 0x60ff48
call fcn.0051dd30
push eax
push 0x615534
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
lea edx, [ebp - 0x1f80]
lea ecx, [ebp - 0x27a4]
call fcn.00512340
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60f9bc
lea ecx, [ebp - 0x1f80]
call fcn.0051dd30
push eax
push 0x615568
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
push 0
push 0x615590
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
lea ecx, [ebp - 0x294c]
call fcn.0051dd30
lea ecx, [ebp - 0x2568]
mov dword [ebp - 0x6fac], eax
call fcn.0051dd30
lea ecx, [ebp - 0x27e0]
mov dword [ebp - 0x6fa8], eax
call fcn.0051dd30
mov dword [ebp - 0x6fa4], eax
mov al, byte [ebp - 0x6f49]
mov byte [ebp - 0x6fa0], al
mov eax, dword [ebp - 0x6f54]
movups xmm0, xmmword [ebp - 0x6fac]
lea ecx, [eax + 0xb4]
mov dword [ebp - 0x6f80], ecx
movups xmmword [ecx], xmm0
lea ecx, [eax + 0x208]
call fcn.00490790
mov esi, dword [ebp - 0x6f54]
add esi, 0x158
mov ecx, esi
mov dword [ebp - 0x6fa0], esi
call fcn.004e5930
mov eax, dword [ebp - 0x6f54]
add eax, 0x140
push 0
mov ecx, eax
mov dword [ebp - 0x6fbc], eax
call fcn.004e6970
push 0x615848
mov ecx, esi
call fcn.004e65c0
push 1
mov ecx, esi
call fcn.004e4b80
mov eax, dword [ebp - 0x6f54]
movzx ecx, byte [ebp - 0x6f49]
inc ecx
push 4
mov eax, dword [eax + 0x30]
add eax, ecx
lea ecx, [ebp - 0x6d10]
mov dword [ebp - 0x6f6c], eax
call fcn.00401ed0
push 8
push 0x6158cc
lea ecx, [ebp - 0x6d10]
call fcn.00401aa0
push 8
lea ecx, [ebp - 0x6db4]
mov byte [ebp - 4], 0x28
call fcn.004020d0
mov edi, dword [ebp - 0x6f54]
lea ecx, [ebp - 0x6db4]
mov eax, dword [edi + 0x30]
add eax, 2
push eax
call fcn.00403990
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x2934]
mov edi, dword [ebp - 0x6db4]
push 0xc
mov dword [ebp - 0x6f68], edi
call fcn.00401eb0
push 1
push 0x5fe640
lea ecx, [ebp - 0x2934]
call fcn.0051e110
mov eax, dword [ebp - 0x6f54]
xor esi, esi
mov byte [ebp - 4], 0x2a
mov eax, dword [eax + 0x30]
test eax, eax
je 0x49b282
nop dword [eax + eax]
mov ecx, dword [ebp - 0x6f44]
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.0051e0b0
mov eax, dword [ebp - 0x6f54]
inc esi
add edi, 0xc
mov eax, dword [eax + 0x30]
cmp esi, eax
jb 0x49b250
mov edi, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
push 0x60fb20
lea ecx, [edi + eax*4]
call fcn.0051e0b0
cmp byte [ebp - 0x6f49], 0
je 0x49b2b5
mov eax, dword [ebp - 0x6f54]
push 0x60fb20
mov eax, dword [eax + 0x30]
inc eax
lea eax, [eax + eax*2]
lea ecx, [edi + eax*4]
call fcn.0051e0b0
push 4
lea ecx, [ebp - 0x2578]
call fcn.00401ed0
lea ecx, [ebp - 0x2578]
call fcn.004e8c40
mov eax, dword [ebp - 0x6f54]
mov byte [ebp - 4], 0x2b
cmp byte [eax + 0x14], 0
jne 0x49dd16
test dword [eax + 0x34], 0x400
jne 0x49dd16
push 0
push 0x615910
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
mov eax, dword [ebp - 0x6f54]
push 0
push 0x615940
mov eax, dword [eax + 8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x6f54]
mov ecx, dword [eax + 4]
call fcn.004f44b0
push 8
lea ecx, [ebp - 0x6d1c]
call fcn.004020d0
push dword [ebp - 0x6f6c]
lea ecx, [ebp - 0x6d1c]
call fcn.00403990
mov eax, dword [ebp - 0x6f54]
xor esi, esi
mov byte [ebp - 4], 0x2c
mov edi, dword [ebp - 0x6d1c]
mov dword [ebp - 0x6f40], edi
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x49b3b7
add eax, 0x3c
mov dword [ebp - 0x6f5c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x615970
push esi
mov ecx, eax
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
push str.HKU_
mov ecx, edi
call fcn.0051dda0
mov eax, dword [ebp - 0x6f54]
inc esi
add edi, 0xc
mov ecx, dword [eax + 0x30]
mov eax, dword [ebp - 0x6f5c]
cmp esi, ecx
jb 0x49b367
mov edi, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6159e0
push dword [ebp - 0x6f70]
lea eax, [ecx + ecx*2]
lea ecx, [edi + eax*4]
call fcn.0051dda0
cmp byte [ebp - 0x6f49], 0
je 0x49b41e
mov eax, dword [ebp - 0x6f54]
push 0
push 0
push 0
mov eax, dword [eax + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x6159e0
push dword [ebp - 0x6f74]
lea eax, [eax + eax*2]
lea ecx, [edi + eax*4]
call fcn.0051dda0
push 4
lea ecx, [ebp - 0x2240]
call fcn.00401ed0
lea ecx, [ebp - 0x2240]
call fcn.00518880
push 4
lea ecx, [ebp - 0x1ff4]
mov byte [ebp - 4], 0x2d
call fcn.00401ed0
lea ecx, [ebp - 0x1ff4]
call fcn.00518880
push 0xc
lea ecx, [ebp - 0x23b0]
mov byte [ebp - 4], 0x2e
call fcn.00401eb0
lea ecx, [ebp - 0x23b0]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x213c]
mov byte [ebp - 4], 0x2f
call fcn.00401eb0
lea ecx, [ebp - 0x213c]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x1fa4]
mov byte [ebp - 4], 0x30
call fcn.00401eb0
lea ecx, [ebp - 0x1fa4]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2074]
mov byte [ebp - 4], 0x31
call fcn.00401eb0
lea ecx, [ebp - 0x2074]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x23a4]
mov byte [ebp - 4], 0x32
call fcn.00401eb0
lea ecx, [ebp - 0x23a4]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x22c8]
mov byte [ebp - 4], 0x33
call fcn.00401eb0
lea ecx, [ebp - 0x22c8]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2160]
mov byte [ebp - 4], 0x34
call fcn.00401eb0
lea ecx, [ebp - 0x2160]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2114]
mov byte [ebp - 4], 0x35
call fcn.00401eb0
lea ecx, [ebp - 0x2114]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x22e4]
mov byte [ebp - 4], 0x36
call fcn.00401eb0
lea ecx, [ebp - 0x22e4]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x289c]
mov byte [ebp - 4], 0x37
call fcn.00401eb0
lea ecx, [ebp - 0x289c]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x276c]
mov byte [ebp - 4], 0x38
call fcn.00401eb0
lea ecx, [ebp - 0x276c]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x283c]
mov byte [ebp - 4], 0x39
call fcn.00401eb0
lea ecx, [ebp - 0x283c]
call fcn.0051e180
mov ecx, dword [ebp - 0x6f50]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov byte [ebp - 4], 0x3a
push 0x60fa9c
mov dword [ebp - 0x2378], 0
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.0051dda0
mov ecx, dword [ebp - 0x6f6c]
xor esi, esi
mov eax, dword [ebp - 0x237c]
mov dword [ebp - 0x6f48], esi
mov dword [ebp - 0x6f58], eax
test ecx, ecx
je 0x49c724
nop dword [eax]
nop word [eax + eax]
mov eax, dword [ebp - 0x6f54]
cmp byte [eax + 0x14], 0
jne 0x49c734
movd xmm1, esi
mov eax, esi
cvtdq2pd xmm1, xmm1
shr eax, 0x1f
mov edi, dword [ebp - 0x6f54]
movd xmm0, ecx
addsd xmm1, qword [eax*8 + 0x6be8c0]
cvtdq2pd xmm0, xmm0
mov eax, ecx
mov ecx, dword [edi + 4]
shr eax, 0x1f
mulsd xmm1, qword [0x6be528]
addsd xmm0, qword [eax*8 + 0x6be8c0]
divsd xmm1, xmm0
addsd xmm1, qword [0x6be4d8]
cvttsd2si eax, xmm1
push eax
mov eax, dword [edi + 8]
push dword [eax + 0x34]
call fcn.004f1310
mov edi, dword [ebp - 0x6f40]
lea eax, [esi + esi*2]
shl eax, 2
add edi, eax
mov dword [ebp - 0x6f64], eax
push 0
push 0x20019
mov ecx, edi
mov dword [ebp - 0x6f44], edi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2240]
call fcn.00518810
test al, al
je 0x49c70f
mov eax, dword [ebp - 0x6f54]
xor ecx, ecx
mov dword [ebp - 0x6f58], ecx
cmp byte [eax + 0x14], cl
jne 0x49c70f
nop dword [eax]
lea eax, [ebp - 0x6cb4]
push eax
push ecx
lea ecx, [ebp - 0x2240]
call fcn.00518170
test al, al
je 0x49c70f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
mov ecx, edi
push 0x5fe504
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x23b0]
call fcn.0051dda0
push 0
push 0x20019
lea ecx, [ebp - 0x23b0]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1ff4]
call fcn.00518810
test al, al
je 0x49c6f2
lea eax, [ebp - 0x213c]
push eax
push 0x60b684
lea ecx, [ebp - 0x1ff4]
call fcn.00518530
test al, al
je 0x49c6f2
lea eax, [ebp - 0x6cd0]
push eax
push 0x615a4c
lea ecx, [ebp - 0x1ff4]
call fcn.005184a0
test al, al
je 0x49b788
cmp dword [ebp - 0x6cd0], 1
je 0x49c6f2
lea eax, [ebp - 0x23a4]
push eax
push 0x615a6c
lea ecx, [ebp - 0x1ff4]
call fcn.00518530
test al, al
je 0x49b7b6
lea ecx, [ebp - 0x23a4]
call fcn.0051df40
test eax, eax
jne 0x49c6f2
lea eax, [ebp - 0x23a4]
push eax
push 0x615a88
lea ecx, [ebp - 0x1ff4]
call fcn.00518530
test al, al
je 0x49b831
push 0x615aa0
lea ecx, [ebp - 0x23a4]
call fcn.0051e060
test al, al
jne 0x49c6f2
push 0x615ab0
lea ecx, [ebp - 0x23a4]
call fcn.0051e060
test al, al
jne 0x49c6f2
push 0x615ac0
lea ecx, [ebp - 0x23a4]
call fcn.0051e060
test al, al
jne 0x49c6f2
push 0x615ad4
lea ecx, [ebp - 0x23a4]
call fcn.0051e060
test al, al
jne 0x49c6f2
lea eax, [ebp - 0x1fa4]
push eax
push 0x615af4
lea ecx, [ebp - 0x1ff4]
call fcn.00518530
lea eax, [ebp - 0x22c8]
push eax
push 0x615b14
lea ecx, [ebp - 0x1ff4]
call fcn.00518530
test al, al
jne 0x49b876
lea ecx, [ebp - 0x1fa4]
call fcn.0051df40
test eax, eax
je 0x49c6f2
lea eax, [ebp - 0x2160]
push eax
push 0x615b34
lea ecx, [ebp - 0x1ff4]
call fcn.00518530
test al, al
je 0x49b8a0
lea ecx, [ebp - 0x2160]
call fcn.0051df40
test eax, eax
jne 0x49b8b0
push 0x60fb0c
lea ecx, [ebp - 0x2160]
call fcn.0051e0b0
lea eax, [ebp - 0x213c]
push eax
lea ecx, [ebp - 0x2114]
call fcn.0051e080
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe5f0
lea ecx, [ebp - 0x2114]
call fcn.0051dd30
mov edi, dword [ebp - 0x6ff4]
mov ecx, edi
push eax
push 0x615b48
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f98]
call fcn.0051dda0
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
xor edx, edx
mov ecx, eax
call fcn.00515590
mov byte [ebp - 0x6f5d], al
test al, al
jne 0x49ba10
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2114]
call fcn.0051dd30
push eax
push 0x615b48
mov ecx, edi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f98]
call fcn.0051dda0
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
xor edx, edx
mov ecx, eax
call fcn.00515590
mov byte [ebp - 0x6f5d], al
test al, al
jne 0x49ba10
nop dword [eax + eax]
push 0
push 1
push 0xffffffffffffffff
push 1
push 0x5ff58c
lea ecx, [ebp - 0x2114]
call fcn.0051c760
cmp eax, 4
jl 0x49baac
dec eax
lea ecx, [ebp - 0x2114]
push eax
call fcn.0051cb00
cmp byte [eax + 8], 0
je 0x49baac
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2114]
call fcn.0051dd30
push eax
push 0x615b48
mov ecx, edi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f98]
call fcn.0051dda0
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
xor edx, edx
mov ecx, eax
call fcn.00515590
mov byte [ebp - 0x6f5d], al
test al, al
je 0x49b980
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe640
lea ecx, [ebp - 0x2114]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2934]
call fcn.0051c4c0
cmp byte [ebp - 0x6f5d], 0
jne 0x49bb56
lea eax, [ebp - 0x2378]
push eax
lea eax, [ebp - 0x276c]
push eax
lea ecx, [ebp - 0x23b0]
call fcn.0051dd30
mov edi, dword [ebp - 0x6f54]
mov ecx, edi
push eax
call fcn.00496730
test al, al
je 0x49c6ec
push 0
lea ecx, [ebp - 0x23b0]
call fcn.0051dd30
push eax
lea eax, [ebp - 0x276c]
mov ecx, edi
push eax
call fcn.00498030
test al, al
je 0x49c6ec
mov byte [ebp - 0x6f5d], 2
jmp 0x49bb5c
cmp byte [ebp - 0x6f5d], 0
jne 0x49ba10
lea ecx, [ebp - 0x2114]
call fcn.0051dfa0
lea ecx, [ebp - 0x213c]
call fcn.0051df40
push 0
push 1
push 1
push 0
push 0x615b5c
lea ecx, [ebp - 0x213c]
call fcn.0051c760
test eax, eax
jne 0x49bb3d
push eax
push 1
push 1
push eax
push 0x615b70
lea ecx, [ebp - 0x213c]
call fcn.0051c760
test eax, eax
jne 0x49bb3d
push eax
push 1
push 1
push eax
push 0x615b94
lea ecx, [ebp - 0x213c]
call fcn.0051c760
test eax, eax
jne 0x49bb3d
push eax
push 1
push 1
push eax
push 0x615bb4
lea ecx, [ebp - 0x213c]
call fcn.0051c760
test eax, eax
je 0x49ba4d
lea eax, [ebp - 0x213c]
mov byte [ebp - 0x6f5d], 2
push eax
lea ecx, [ebp - 0x2114]
call fcn.0051e080
mov edi, dword [ebp - 0x6f54]
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x60cca4
lea ecx, [ebp - 0x213c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x49c6ec
lea ecx, [ebp - 0x1fa4]
call fcn.0051dd30
mov ecx, eax
call fcn.00509340
test al, al
je 0x49bbcb
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.0051d7b0
push 0
push 0
push 0x5fe50c
push 0x5ff6d4
lea ecx, [ebp - 0x1fa4]
call fcn.0051c000
jmp 0x49c19c
cmp dword [ebp - 0x2378], 0
je 0x49bc8d
lea eax, [ebp - 0x6cd0]
mov dword [ebp - 0x6cd0], 0x400
push eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.0051d530
push eax
push 0x615af4
push dword [ebp - 0x6cb4]
call dword [0x5dea5c]
push 0
push 1
push 1
push 0
push 0x5ff7bc
lea ecx, [ebp - 0x1fa4]
call fcn.0051c760
test eax, eax
jne 0x49bc8d
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x615bdc
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x23a4]
push 0x615c08
push dword [ebp - 0x6f70]
call fcn.0051dda0
push 0
push 0x20019
lea ecx, [ebp - 0x23a4]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x49bc8d
lea eax, [ebp - 0x1fa4]
push eax
push 0x615af4
lea ecx, [ebp - 0x1f74]
call fcn.00518530
lea ecx, [ebp - 0x1fa4]
call fcn.0051df40
cmp eax, 0xa
jle 0x49bcaa
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.0051d7b0
lea ecx, [ebp - 0x1fa4]
call fcn.0051dd30
push eax
call dword [0x5de638]
test eax, eax
jne 0x49c19c
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x5fe65c
lea ecx, [ebp - 0x213c]
call fcn.0051dd30
push eax
push 0x5fe504
lea ecx, [ebp - 0x26bc]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.0051dda0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.0051dd30
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.0051d530
mov edx, 0x400
mov ecx, eax
call fcn.00509550
test al, al
jne 0x49c19c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe65c
lea ecx, [ebp - 0x213c]
call fcn.0051dd30
push eax
push 0x5fe504
lea ecx, [ebp - 0x26e0]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.0051dda0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.0051dd30
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.0051d530
mov edx, 0x400
mov ecx, eax
call fcn.00509550
test al, al
jne 0x49c19c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe65c
lea ecx, [ebp - 0x213c]
call fcn.0051dd30
push eax
push 0x5fe504
lea ecx, [ebp - 0x26c8]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.0051dda0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.0051dd30
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.0051d530
mov edx, 0x400
mov ecx, eax
call fcn.00509550
test al, al
jne 0x49c19c
lea ecx, [ebp - 0x2160]
call fcn.0051df40
cmp eax, 4
jle 0x49beb6
push 0
push 1
push 1
push 0
push 0x615cac
lea ecx, [ebp - 0x2160]
call fcn.0051c760
cmp eax, 1
je 0x49beb6
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe65c
lea ecx, [ebp - 0x213c]
call fcn.0051dd30
push eax
push 0x5fe504
lea ecx, [ebp - 0x2160]
call fcn.0051dd30
push eax
push 0x5fe504
lea ecx, [ebp - 0x26c8]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.0051dda0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.0051dd30
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.0051d530
mov edx, 0x400
mov ecx, eax
call fcn.00509550
test al, al
jne 0x49c19c
mov eax, dword [ebp - 0x6f54]
cmp esi, dword [eax + 0x30]
jae 0x49c10e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe65c
lea ecx, [ebp - 0x213c]
call fcn.0051dd30
push eax
push 0x5fe504
lea ecx, [ebp - 0x2238]
call fcn.0051dd30
mov edi, dword [ebp - 0x6fb4]
mov ecx, edi
push eax
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.0051dda0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.0051dd30
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.0051d530
mov edx, 0x400
mov ecx, eax
call fcn.00509550
test al, al
jne 0x49c196
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe65c
lea ecx, [ebp - 0x213c]
call fcn.0051dd30
push eax
push 0x5fe504
lea ecx, [ebp - 0x2184]
call fcn.0051dd30
push eax
push esi
mov ecx, edi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.0051dda0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.0051dd30
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.0051d530
mov edx, 0x400
mov ecx, eax
call fcn.00509550
test al, al
jne 0x49c196
lea ecx, [ebp - 0x2160]
call fcn.0051df40
cmp eax, 4
jle 0x49c10e
push 0
push 1
push 1
push 0
push 0x615cac
lea ecx, [ebp - 0x2160]
call fcn.0051c760
cmp eax, 1
je 0x49c10e
push 0
push 0
push 0
push 0
push 0
push 0x5fe65c
lea ecx, [ebp - 0x213c]
call fcn.0051dd30
push eax
push 0x5fe504
lea ecx, [ebp - 0x2160]
call fcn.0051dd30
push eax
push 0x5fe504
lea ecx, [ebp - 0x2238]
call fcn.0051dd30
push eax
push esi
mov ecx, edi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.0051dda0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.0051dd30
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.0051d530
mov edx, 0x400
mov ecx, eax
call fcn.00509550
test al, al
jne 0x49c196
push 0
push 0
push 0
push 0
push 0
push 0x5fe65c
lea ecx, [ebp - 0x213c]
call fcn.0051dd30
push eax
push 0x5fe504
lea ecx, [ebp - 0x2160]
call fcn.0051dd30
push eax
push 0x5fe504
lea ecx, [ebp - 0x2184]
call fcn.0051dd30
push eax
push esi
mov ecx, edi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.0051dda0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.0051dd30
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.0051d530
mov edx, 0x400
mov ecx, eax
call fcn.00509550
test al, al
jne 0x49c196
lea ecx, [ebp - 0x22c8]
call fcn.0051df40
lea ecx, [ebp - 0x1fa4]
cmp eax, 0xa
jle 0x49c191
lea eax, [ebp - 0x22c8]
push eax
call fcn.0051e080
push 0
push 0
push 0x5fe50c
push 0x5ff6d4
lea ecx, [ebp - 0x1fa4]
call fcn.0051c000
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.0051d7b0
push 0
push 1
push 0xffffffffffffffff
push 1
push 0x5ff7bc
lea ecx, [ebp - 0x1fa4]
call fcn.0051c760
cmp eax, 2
jle 0x49c182
add eax, 0xfffffffe
lea ecx, [ebp - 0x1fa4]
push eax
call fcn.0051ca50
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.0051da50
jmp 0x49c196
call fcn.0051dfa0
mov edi, dword [ebp - 0x6f54]
lea ecx, [ebp - 0x1fa4]
call fcn.0051dd30
mov ecx, eax
call fcn.0050f1b0
test al, al
je 0x49c1bd
lea ecx, [ebp - 0x1fa4]
call fcn.0051dfa0
lea eax, [ebp - 0x2074]
mov dword [ebp - 0x6f50], 0
push eax
push 0x615cc4
lea ecx, [ebp - 0x1ff4]
call fcn.00518530
test al, al
je 0x49c21a
push 0
lea ecx, [ebp - 0x2074]
call fcn.0051dd30
push eax
push 0x104
lea ecx, [ebp - 0x2074]
call fcn.0051d530
lea ecx, [ebp - 0x2074]
call fcn.0051dd30
push eax
call dword [0x5de630]
mov dword [ebp - 0x6f50], eax
jmp 0x49c270
cmp dword [ebp - 0x2378], 0
je 0x49c27d
lea eax, [ebp - 0x6d2c]
mov dword [ebp - 0x6d2c], 0x400
push eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0x2074]
call fcn.0051d530
push eax
push 0x615cdc
push dword [ebp - 0x6cb4]
call dword [0x5dea5c]
push dword [ebp - 0x6d2c]
lea ecx, [ebp - 0x2074]
call fcn.0051dfe0
xor ecx, ecx
mov word [eax], cx
cmp dword [ebp - 0x2378], 0
jne 0x49c3c7
lea ecx, [ebp - 0x2074]
call fcn.0051df40
test eax, eax
jne 0x49c3c7
push eax
lea ecx, [ebp - 0x22c8]
call fcn.0051dd30
push eax
push 0x800
lea ecx, [ebp - 0x2074]
call fcn.0051d530
push 0x800
lea ecx, [ebp - 0x2074]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x22c8]
call fcn.0051dd30
push eax
call dword [0x5de4d0]
lea ecx, [ebp - 0x2074]
call fcn.0051df40
test eax, eax
je 0x49c3c7
push 0
push 1
push 0xffffffffffffffff
push 0
push str..exe
lea ecx, [ebp - 0x2074]
call fcn.0051c760
test eax, eax
je 0x49c30e
add eax, 3
lea ecx, [ebp - 0x2074]
push eax
call fcn.0051cb00
lea ecx, [ebp - 0x2074]
call fcn.0051dd30
mov esi, dword [0x5de620]
push eax
call esi
test eax, eax
jne 0x49c3c7
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x5ff7bc
lea ecx, [ebp - 0x2074]
call fcn.0051c760
cmp eax, 2
jle 0x49c355
add eax, 0xfffffffe
lea ecx, [ebp - 0x2074]
push eax
call fcn.0051ca50
lea ecx, [ebp - 0x2074]
call fcn.0051dd30
push eax
call esi
test eax, eax
jne 0x49c3c7
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x5ff6d4
lea ecx, [ebp - 0x2074]
call fcn.0051c760
test eax, eax
je 0x49c38e
push eax
lea ecx, [ebp - 0x2074]
call fcn.0051ca50
lea ecx, [ebp - 0x2074]
call fcn.0051dd30
push eax
call esi
test eax, eax
jne 0x49c3c7
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x5ff58c
lea ecx, [ebp - 0x2074]
call fcn.0051c760
test eax, eax
je 0x49c3c7
push eax
lea ecx, [ebp - 0x2074]
call fcn.0051ca50
push 0x5c
lea ecx, [ebp - 0x1fa4]
call fcn.0051be20
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x213c]
push dword [eax + 0xa0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
call fcn.0051dd30
mov ecx, dword [edi + 4]
push eax
call fcn.004f33e0
mov esi, eax
cmp esi, 0xffffffff
je 0x49c6e6
push 1
lea ecx, [ebp - 0x2160]
call fcn.0051dd30
push eax
mov eax, dword [ebp - 0x6f54]
push esi
mov ecx, dword [eax + 8]
push dword [ecx + 0xa0]
mov ecx, dword [eax + 4]
call fcn.004f1f20
lea ecx, [ebp - 0x2074]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
je 0x49c470
push 0
push 0x10
push dword [ebp - 0x6f50]
lea ecx, [ebp - 0x2074]
call fcn.0051dd30
mov edi, dword [ebp - 0x6f54]
push eax
push esi
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push dword [eax + 0xa0]
call fcn.004f28d0
jmp 0x49c476
mov edi, dword [ebp - 0x6f54]
mov ecx, dword [ebp - 0x6f68]
add ecx, dword [ebp - 0x6f64]
push 2
call fcn.0051dd30
mov ecx, dword [edi + 4]
push eax
mov eax, dword [edi + 8]
push esi
push dword [eax + 0xa0]
call fcn.004f1f20
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push esi
push esi
push dword [eax + 0xa0]
call fcn.004f2aa0
lea ecx, [ebp - 0x2114]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push esi
push dword [eax + 0xa0]
call fcn.00499240
test eax, eax
jne 0x49c4ec
cmp byte [ebp - 0x6f5d], 1
mov ecx, 2
movzx eax, byte [ebp - 0x6f5d]
cmove eax, ecx
mov byte [ebp - 0x6f5d], al
push esi
lea ecx, [ebp - 0x22e4]
call fcn.0051cfb0
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x23b0]
call fcn.0051dd30
push eax
push 0x60ee3c
lea ecx, [ebp - 0x22e4]
call fcn.0051dd30
mov edi, dword [0x5de4e8]
push eax
call edi
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.0051dd30
push eax
push 0x60c030
lea ecx, [ebp - 0x22e4]
call fcn.0051dd30
push eax
call edi
lea ecx, [ebp - 0x2114]
call fcn.0051df40
test eax, eax
je 0x49c5b2
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2114]
call fcn.0051dd30
push eax
push 0x60fae4
lea ecx, [ebp - 0x22e4]
call fcn.0051dd30
push eax
call edi
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
push 0x605d48
lea ecx, [ebp - 0x2114]
call fcn.0051dd30
push eax
push 0x615cf4
call edi
lea ecx, [ebp - 0x22c8]
call fcn.0051df40
test eax, eax
je 0x49c5ec
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x22c8]
call fcn.0051dd30
push eax
push 0x60fac0
lea ecx, [ebp - 0x22e4]
call fcn.0051dd30
push eax
call edi
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
mov esi, dword [ebp - 0x6f68]
add esi, dword [ebp - 0x6f64]
push eax
mov ecx, esi
call fcn.0051dd30
push eax
push 0x60ee58
lea ecx, [ebp - 0x22e4]
call fcn.0051dd30
push eax
call edi
cmp dword [ebp - 0x2378], 0
je 0x49c64d
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x22e4]
push 0x60faf4
call fcn.0051dd30
push eax
call edi
mov eax, dword [ebp - 0x6f54]
mov ecx, 0x615d34
mov edi, dword [ebp - 0x6f54]
push 0
push 0
inc dword [eax + 0x24]
xor eax, eax
cmp byte [ebp - 0x6f5d], 1
sete al
add dword [edi + 0x28], eax
mov eax, 0x615d20
cmp byte [ebp - 0x6f5d], 1
cmovne eax, ecx
mov ecx, esi
push eax
push 0x6152b8
call fcn.0051dd30
push eax
push 0x615d4c
lea ecx, [ebp - 0x1fa4]
call fcn.0051dd30
push eax
push 0x615d70
lea ecx, [ebp - 0x23b0]
call fcn.0051dd30
push eax
push 0x615d94
lea ecx, [ebp - 0x213c]
call fcn.0051dd30
push eax
push 0x615dbc
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
mov esi, dword [ebp - 0x6f48]
mov edi, dword [ebp - 0x6f44]
mov eax, dword [ebp - 0x6f54]
mov ecx, dword [ebp - 0x6f58]
inc ecx
mov dword [ebp - 0x6f58], ecx
cmp byte [eax + 0x14], 0
je 0x49b6d0
mov ecx, dword [ebp - 0x6f6c]
inc esi
mov dword [ebp - 0x6f48], esi
cmp esi, ecx
jb 0x49b610
mov eax, dword [ebp - 0x6f54]
cmp byte [eax + 0x14], 0
je 0x49c7e2
lea ecx, [ebp - 0x283c]
call fcn.0051dfd0
lea ecx, [ebp - 0x276c]
call fcn.0051dfd0
lea ecx, [ebp - 0x289c]
call fcn.0051dfd0
lea ecx, [ebp - 0x22e4]
call fcn.0051dfd0
lea ecx, [ebp - 0x2114]
call fcn.0051dfd0
lea ecx, [ebp - 0x2160]
call fcn.0051dfd0
lea ecx, [ebp - 0x22c8]
call fcn.0051dfd0
lea ecx, [ebp - 0x23a4]
call fcn.0051dfd0
lea ecx, [ebp - 0x2074]
call fcn.0051dfd0
lea ecx, [ebp - 0x1fa4]
call fcn.0051dfd0
lea ecx, [ebp - 0x213c]
call fcn.0051dfd0
lea ecx, [ebp - 0x23b0]
call fcn.0051dfd0
lea ecx, [ebp - 0x1ff4]
call fcn.005187c0
lea ecx, [ebp - 0x2240]
call fcn.005187c0
lea ecx, [ebp - 0x6d1c]
mov byte [ebp - 4], 0x2b
call fcn.004038f0
jmp 0x49dd22
mov eax, dword [ebp - 0x6fbc]
cmp dword [eax], 0
je 0x49c8bd
mov ecx, dword [ebp - 0x6fa0]
push 0
push eax
call fcn.004e41f0
mov edi, dword [ebp - 0x6f54]
cmp byte [edi + 0x14], 0
je 0x49c8bd
lea ecx, [ebp - 0x283c]
call fcn.0051dfd0
lea ecx, [ebp - 0x276c]
call fcn.0051dfd0
lea ecx, [ebp - 0x289c]
call fcn.0051dfd0
lea ecx, [ebp - 0x22e4]
call fcn.0051dfd0
lea ecx, [ebp - 0x2114]
call fcn.0051dfd0
lea ecx, [ebp - 0x2160]
call fcn.0051dfd0
lea ecx, [ebp - 0x22c8]
call fcn.0051dfd0
lea ecx, [ebp - 0x23a4]
call fcn.0051dfd0
lea ecx, [ebp - 0x2074]
call fcn.0051dfd0
lea ecx, [ebp - 0x1fa4]
call fcn.0051dfd0
lea ecx, [ebp - 0x213c]
call fcn.0051dfd0
lea ecx, [ebp - 0x23b0]
call fcn.0051dfd0
lea ecx, [ebp - 0x1ff4]
call fcn.005187c0
lea ecx, [ebp - 0x2240]
call fcn.005187c0
lea ecx, [ebp - 0x6d1c]
mov byte [ebp - 4], 0x2b
call fcn.004038f0
jmp 0x49dd28
push 0xc
lea ecx, [ebp - 0x29b0]
call fcn.00401eb0
lea ecx, [ebp - 0x29b0]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x273c]
mov byte [ebp - 4], 0x3b
call fcn.00401eb0
lea ecx, [ebp - 0x273c]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2748]
mov byte [ebp - 4], 0x3c
call fcn.00401eb0
lea ecx, [ebp - 0x2748]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x27ec]
mov byte [ebp - 4], 0x3d
call fcn.00401eb0
lea ecx, [ebp - 0x27ec]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2754]
mov byte [ebp - 4], 0x3e
call fcn.00401eb0
lea ecx, [ebp - 0x2754]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2760]
mov byte [ebp - 4], 0x3f
call fcn.00401eb0
lea ecx, [ebp - 0x2760]
call fcn.0051e180
mov eax, dword [ebp - 0x6f54]
mov esi, 1
mov byte [ebp - 4], 0x40
mov dword [ebp - 0x6f40], esi
mov ecx, dword [eax + 0x244]
cmp ecx, esi
jbe 0x49d6ca
cmp byte [eax + 0x14], 0
jne 0x49d6d0
lea eax, [esi + esi*4]
mov edi, dword [ebp - 0x6f54]
add eax, eax
xor edx, edx
div ecx
mov ecx, dword [edi + 4]
add eax, 0x10
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x6be8c0]
cvttsd2si eax, xmm0
push eax
mov eax, dword [edi + 8]
push dword [eax + 0x34]
call fcn.004f1310
push esi
mov ecx, edi
call fcn.00497e30
test al, al
je 0x49d6b3
push esi
lea ecx, [edi + 0x220]
call fcn.004042c0
push eax
lea ecx, [ebp - 0x23b0]
call fcn.0051e080
push 0
push 0x20019
lea ecx, [ebp - 0x23b0]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1ff4]
call fcn.00518810
test al, al
je 0x49d6b3
lea eax, [ebp - 0x213c]
push eax
push 0x60b684
lea ecx, [ebp - 0x1ff4]
call fcn.00518530
test al, al
je 0x49d6b3
lea eax, [ebp - 0x1fa4]
push eax
push 0x615af4
lea ecx, [ebp - 0x1ff4]
call fcn.00518530
lea eax, [ebp - 0x22c8]
push eax
push 0x615b14
lea ecx, [ebp - 0x1ff4]
call fcn.00518530
test al, al
jne 0x49ca79
lea ecx, [ebp - 0x1fa4]
call fcn.0051df40
test eax, eax
je 0x49d6b3
lea eax, [ebp - 0x2160]
push eax
push 0x615b34
lea ecx, [ebp - 0x1ff4]
call fcn.00518530
test al, al
je 0x49caa3
lea ecx, [ebp - 0x2160]
call fcn.0051df40
test eax, eax
jne 0x49cab3
push 0x60fb0c
lea ecx, [ebp - 0x2160]
call fcn.0051e0b0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x615de8
lea ecx, [ebp - 0x213c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2754]
call fcn.0051c4c0
push 0
push 1
push 1
push 0
push str.msiexec
lea ecx, [ebp - 0x22c8]
call fcn.0051c760
test eax, eax
setne byte [ebp - 0x6f44]
test eax, eax
jne 0x49cb41
lea eax, [ebp - 0x6cd0]
push eax
push 0x615df0
lea ecx, [ebp - 0x1ff4]
call fcn.005184a0
test al, al
je 0x49cb41
mov eax, dword [ebp - 0x6f44]
mov ecx, 1
cmp dword [ebp - 0x6cd0], 1
movzx eax, al
cmove eax, ecx
mov dword [ebp - 0x6f44], eax
lea eax, [ebp - 0x213c]
push eax
lea ecx, [ebp - 0x2114]
call fcn.0051e080
lea ecx, [ebp - 0x1fa4]
call fcn.0051dd30
mov ecx, eax
call fcn.00509340
test al, al
je 0x49cb94
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.0051d7b0
push 0
push 0
push 0x5fe50c
push 0x5ff6d4
lea ecx, [ebp - 0x1fa4]
call fcn.0051c000
jmp 0x49d1b8
cmp byte [ebp - 0x6f44], 0
je 0x49cc56
lea eax, [ebp - 0x6cd0]
mov dword [ebp - 0x6cd0], 0x400
push eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.0051d530
push eax
push 0x615af4
push dword [ebp - 0x6cb4]
call dword [0x5dea5c]
push 0
push 1
push 1
push 0
push 0x5ff7bc
lea ecx, [ebp - 0x1fa4]
call fcn.0051c760
test eax, eax
jne 0x49cc56
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x615bdc
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x23a4]
push 0x615c08
push dword [ebp - 0x6f70]
call fcn.0051dda0
push 0
push 0x20019
lea ecx, [ebp - 0x23a4]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x49cc56
lea eax, [ebp - 0x1fa4]
push eax
push 0x615af4
lea ecx, [ebp - 0x1f74]
call fcn.00518530
lea ecx, [ebp - 0x1fa4]
call fcn.0051df40
cmp eax, 0xa
jle 0x49cc73
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.0051d7b0
push 0
push 1
push 1
push 0
push 0x5ff7bc
lea ecx, [ebp - 0x1fa4]
call fcn.0051c760
test eax, eax
jne 0x49d1b8
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x5fe65c
lea ecx, [ebp - 0x2114]
call fcn.0051dd30
push eax
push 0x5fe504
lea ecx, [ebp - 0x26bc]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.0051dda0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.0051dd30
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.0051d530
mov edx, 0x400
mov ecx, eax
call fcn.00509550
test al, al
jne 0x49d1b8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe65c
lea ecx, [ebp - 0x2114]
call fcn.0051dd30
push eax
push 0x5fe504
lea ecx, [ebp - 0x26e0]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.0051dda0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.0051dd30
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.0051d530
mov edx, 0x400
mov ecx, eax
call fcn.00509550
test al, al
jne 0x49d1b8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe65c
lea ecx, [ebp - 0x2114]
call fcn.0051dd30
push eax
push 0x5fe504
lea ecx, [ebp - 0x26c8]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.0051dda0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.0051dd30
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.0051d530
mov edx, 0x400
mov ecx, eax
call fcn.00509550
test al, al
jne 0x49d1b8
lea ecx, [ebp - 0x2160]
call fcn.0051df40
cmp eax, 4
jle 0x49ce85
push 0
push 1
push 1
push 0
push 0x615cac
lea ecx, [ebp - 0x2160]
call fcn.0051c760
cmp eax, 1
je 0x49ce85
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe65c
lea ecx, [ebp - 0x2114]
call fcn.0051dd30
push eax
push 0x5fe504
lea ecx, [ebp - 0x2160]
call fcn.0051dd30
push eax
push 0x5fe504
lea ecx, [ebp - 0x26c8]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.0051dda0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.0051dd30
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.0051d530
mov edx, 0x400
mov ecx, eax
call fcn.00509550
test al, al
jne 0x49d1b8
push 1
push 0x605724
push dword [ebp - 0x6d10]
lea ecx, [ebp - 0x23b0]
push 1
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x27ec]
call fcn.0051de00
mov ecx, eax
call fcn.0051b290
test eax, eax
je 0x49d127
lea ecx, [ebp - 0x27ec]
call fcn.0051dd30
lea edx, [ebp - 0x273c]
mov ecx, eax
call fcn.004d4dd0
test al, al
je 0x49d127
lea ecx, [ebp - 0x27ec]
call fcn.0051dd30
lea edx, [ebp - 0x2748]
mov ecx, eax
call fcn.004d55e0
test al, al
je 0x49d127
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe65c
lea ecx, [ebp - 0x2114]
call fcn.0051dd30
push eax
push 0x5fe504
lea ecx, [ebp - 0x2238]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2748]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.0051dda0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.0051dd30
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.0051d530
mov edx, 0x400
mov ecx, eax
call fcn.00509550
test al, al
jne 0x49d137
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe65c
lea ecx, [ebp - 0x2114]
call fcn.0051dd30
push eax
push 0x5fe504
lea ecx, [ebp - 0x2184]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2748]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.0051dda0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.0051dd30
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.0051d530
mov edx, 0x400
mov ecx, eax
call fcn.00509550
test al, al
jne 0x49d137
lea ecx, [ebp - 0x2160]
call fcn.0051df40
cmp eax, 4
jle 0x49d137
push 0
push 1
push 1
push 0
push 0x615cac
lea ecx, [ebp - 0x2160]
call fcn.0051c760
cmp eax, 1
je 0x49d137
push 0
push 0
push 0
push 0
push 0
push 0x5fe65c
lea ecx, [ebp - 0x2114]
call fcn.0051dd30
push eax
push 0x5fe504
lea ecx, [ebp - 0x2160]
call fcn.0051dd30
push eax
push 0x5fe504
lea ecx, [ebp - 0x2238]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2748]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.0051dda0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.0051dd30
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.0051d530
mov edx, 0x400
mov ecx, eax
call fcn.00509550
test al, al
jne 0x49d137
push 0
push 0
push 0
push 0
push 0
push 0x5fe65c
lea ecx, [ebp - 0x2114]
call fcn.0051dd30
push eax
push 0x5fe504
lea ecx, [ebp - 0x2160]
call fcn.0051dd30
push eax
push 0x5fe504
lea ecx, [ebp - 0x2184]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2748]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.0051dda0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.0051dd30
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.0051d530
mov edx, 0x400
mov ecx, eax
call fcn.00509550
jmp 0x49d137
push 0x60fb20
lea ecx, [ebp - 0x273c]
call fcn.0051e0b0
lea ecx, [ebp - 0x22c8]
call fcn.0051df40
cmp eax, 0xa
jle 0x49d1b8
lea eax, [ebp - 0x22c8]
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.0051e080
push 0
push 0
push 0x5fe50c
push 0x5ff6d4
lea ecx, [ebp - 0x1fa4]
call fcn.0051c000
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.0051d7b0
push 0
push 1
push 0xffffffffffffffff
push 1
push 0x5ff7bc
lea ecx, [ebp - 0x1fa4]
call fcn.0051c760
cmp eax, 2
jle 0x49d1ab
add eax, 0xfffffffe
lea ecx, [ebp - 0x1fa4]
push eax
call fcn.0051ca50
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.0051da50
lea ecx, [ebp - 0x1fa4]
call fcn.0051dd30
mov ecx, eax
call fcn.0050f1b0
test al, al
je 0x49d1d9
lea ecx, [ebp - 0x1fa4]
call fcn.0051dfa0
lea eax, [ebp - 0x2074]
xor esi, esi
push eax
push 0x615cc4
lea ecx, [ebp - 0x1ff4]
call fcn.00518530
test al, al
je 0x49d229
push esi
lea ecx, [ebp - 0x2074]
call fcn.0051dd30
push eax
push 0x104
lea ecx, [ebp - 0x2074]
call fcn.0051d530
lea ecx, [ebp - 0x2074]
call fcn.0051dd30
push eax
call dword [0x5de630]
mov esi, eax
jmp 0x49d27f
cmp byte [ebp - 0x6f44], 0
je 0x49d28c
lea eax, [ebp - 0x6d30]
mov dword [ebp - 0x6d30], 0x400
push eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0x2074]
call fcn.0051d530
push eax
push 0x615cdc
push dword [ebp - 0x6cb4]
call dword [0x5dea5c]
push dword [ebp - 0x6d30]
lea ecx, [ebp - 0x2074]
call fcn.0051dfe0
xor ecx, ecx
mov word [eax], cx
cmp byte [ebp - 0x6f44], 0
jne 0x49d3dc
lea ecx, [ebp - 0x2074]
call fcn.0051df40
test eax, eax
jne 0x49d3dc
push eax
lea ecx, [ebp - 0x22c8]
call fcn.0051dd30
push eax
push 0x800
lea ecx, [ebp - 0x2074]
call fcn.0051d530
push 0x800
lea ecx, [ebp - 0x2074]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x22c8]
call fcn.0051dd30
push eax
call dword [0x5de4d0]
lea ecx, [ebp - 0x2074]
call fcn.0051df40
test eax, eax
je 0x49d3dc
push 0
push 1
push 0xffffffffffffffff
push 0
push str..exe
lea ecx, [ebp - 0x2074]
call fcn.0051c760
test eax, eax
je 0x49d31d
add eax, 3
lea ecx, [ebp - 0x2074]
push eax
call fcn.0051cb00
lea ecx, [ebp - 0x2074]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
jne 0x49d3dc
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x5ff7bc
lea ecx, [ebp - 0x2074]
call fcn.0051c760
cmp eax, 2
jle 0x49d362
add eax, 0xfffffffe
lea ecx, [ebp - 0x2074]
push eax
call fcn.0051ca50
lea ecx, [ebp - 0x2074]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
jne 0x49d3dc
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x5ff6d4
lea ecx, [ebp - 0x2074]
call fcn.0051c760
test eax, eax
je 0x49d39f
push eax
lea ecx, [ebp - 0x2074]
call fcn.0051ca50
lea ecx, [ebp - 0x2074]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
jne 0x49d3dc
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x5ff58c
lea ecx, [ebp - 0x2074]
call fcn.0051c760
test eax, eax
je 0x49d3dc
push eax
lea ecx, [ebp - 0x2074]
call fcn.0051ca50
push 0x5c
lea ecx, [ebp - 0x1fa4]
call fcn.0051be20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2114]
mov byte [ebp - 0x6f50], 1
call fcn.0051dd30
push eax
push 0x615b48
lea ecx, [edi + 0x24c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f98]
call fcn.0051dda0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
lea eax, [ebp - 0x6cd0]
push eax
push 0x615e14
lea ecx, [ebp - 0x1f74]
call fcn.005184a0
test al, al
je 0x49d481
mov eax, dword [ebp - 0x6f50]
mov ecx, 2
cmp dword [ebp - 0x6cd0], 0
movzx eax, al
cmove eax, ecx
mov dword [ebp - 0x6f50], eax
push esi
lea ecx, [ebp - 0x2074]
call fcn.0051dd30
push eax
xor eax, eax
lea ecx, [ebp - 0x273c]
cmp byte [ebp - 0x6f50], 1
push 0
sete al
push eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2160]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x213c]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push dword [eax + 0xa0]
call fcn.004c0fd0
push eax
lea ecx, [ebp - 0x22e4]
call fcn.0051cfb0
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x23b0]
call fcn.0051dd30
push eax
push 0x60ee3c
lea ecx, [ebp - 0x22e4]
call fcn.0051dd30
mov esi, dword [0x5de4e8]
push eax
call esi
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.0051dd30
push eax
push 0x60c030
lea ecx, [ebp - 0x22e4]
call fcn.0051dd30
push eax
call esi
lea ecx, [ebp - 0x2114]
call fcn.0051df40
test eax, eax
je 0x49d59b
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2114]
call fcn.0051dd30
push eax
push 0x60fae4
lea ecx, [ebp - 0x22e4]
call fcn.0051dd30
push eax
call esi
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
push 0x605d48
lea ecx, [ebp - 0x2114]
call fcn.0051dd30
push eax
push 0x615cf4
call esi
lea ecx, [ebp - 0x22c8]
call fcn.0051df40
test eax, eax
je 0x49d5d5
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x22c8]
call fcn.0051dd30
push eax
push 0x60fac0
lea ecx, [ebp - 0x22e4]
call fcn.0051dd30
push eax
call esi
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x273c]
call fcn.0051dd30
push eax
push 0x60ee58
lea ecx, [ebp - 0x22e4]
call fcn.0051dd30
push eax
call esi
cmp byte [ebp - 0x6f44], 0
je 0x49d62e
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x22e4]
push 0x60faf4
call fcn.0051dd30
push eax
call esi
cmp byte [ebp - 0x6f50], 1
mov ecx, 0x615d34
push 0
push 0
mov eax, 0x615d20
cmovne eax, ecx
lea ecx, [ebp - 0x273c]
push eax
push 0x6152b8
call fcn.0051dd30
push eax
push 0x615d4c
lea ecx, [ebp - 0x1fa4]
call fcn.0051dd30
push eax
push 0x615d70
lea ecx, [ebp - 0x23b0]
call fcn.0051dd30
push eax
push 0x615d94
lea ecx, [ebp - 0x213c]
call fcn.0051dd30
push eax
push 0x615dbc
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
mov esi, dword [ebp - 0x6f40]
mov ecx, dword [edi + 0x244]
inc esi
mov dword [ebp - 0x6f40], esi
mov eax, edi
cmp esi, ecx
jb 0x49c984
cmp byte [eax + 0x14], 0
je 0x49d717
lea ecx, [ebp - 0x2760]
call fcn.0051dfd0
lea ecx, [ebp - 0x2754]
call fcn.0051dfd0
lea ecx, [ebp - 0x27ec]
call fcn.0051dfd0
lea ecx, [ebp - 0x2748]
call fcn.0051dfd0
lea ecx, [ebp - 0x273c]
call fcn.0051dfd0
lea ecx, [ebp - 0x29b0]
call fcn.0051dfd0
jmp 0x49c734
lea ecx, [ebp - 0x2754]
call fcn.0051df40
cmp eax, 6
jle 0x49d7d4
push 0x2000
lea eax, [ebp - 0x6dc8]
mov dword [ebp - 0x6dc8], 0x1000
push eax
push 0
push 0
push 0x1000
lea ecx, [ebp - 0x2760]
call fcn.0051d530
push eax
lea ecx, [ebp - 0x2754]
call fcn.0051dd30
push eax
call dword [0x5de634]
test eax, eax
je 0x49d77e
lea eax, [ebp - 0x2754]
push eax
lea ecx, [ebp - 0x2760]
call fcn.0051e080
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x615e30
lea ecx, [ebp - 0x2760]
call fcn.0051c280
push 0
push 0
push 0x604f50
push 0x604f80
push 6
lea ecx, [ebp - 0x2760]
call fcn.0051dd30
xor edx, edx
mov ecx, eax
call fcn.004ebc50
push eax
lea ecx, [ebp - 0x2578]
call fcn.004e8bf0
mov edi, dword [ebp - 0x6f54]
push 0x1e
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push dword [eax + 0x34]
call fcn.004f1310
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x615eb0
push dword [eax + 0x38]
call fcn.004f44b0
push 0xc
lea ecx, [ebp - 0x232c]
call fcn.00401eb0
lea ecx, [ebp - 0x232c]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x24c8]
mov byte [ebp - 4], 0x41
call fcn.00401eb0
lea ecx, [ebp - 0x24c8]
call fcn.0051e180
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x615ee4
lea ecx, [edi + 0x24c]
mov byte [ebp - 4], 0x42
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f98]
call fcn.0051dda0
push 4
lea ecx, [ebp - 0x237c]
call fcn.00401ed0
lea ecx, [ebp - 0x237c]
call fcn.00518880
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
mov byte [ebp - 4], 0x43
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x49dcae
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f40], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.00518170
test al, al
je 0x49dcae
nop
mov eax, dword [ebp - 0x6f54]
cmp byte [eax + 0x14], 0
jne 0x49dca8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe640
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x24c8]
push 0x5fe640
call fcn.0051dda0
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x24c8]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2934]
call fcn.0051c760
test eax, eax
jne 0x49dc80
mov edi, dword [ebp - 0x6f54]
push eax
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x60cca4
push dword [ebp - 0x6cb4]
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x49dc80
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x24c8]
xor esi, esi
call fcn.0051e0b0
push 0x615ef4
lea ecx, [ebp - 0x24c8]
call fcn.0051e020
test al, al
je 0x49d9a3
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push 0x5fe65c
lea ecx, [ebp - 0x24c8]
call fcn.0051c4c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24c8]
call fcn.0051dd30
push eax
push 0x5fe504
lea ecx, [ebp - 0x26bc]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x232c]
call fcn.0051dda0
lea ecx, [ebp - 0x232c]
call fcn.00509690
test al, al
je 0x49da16
push dword [ebp - 0x6f58]
lea eax, [ebp - 0x1ff0]
push 0
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x232c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00499340
mov esi, eax
cmp byte [ebp - 0x6f49], 0
je 0x49da92
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24c8]
call fcn.0051dd30
push eax
push 0x5fe504
lea ecx, [ebp - 0x26e0]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x232c]
call fcn.0051dda0
lea ecx, [ebp - 0x232c]
call fcn.00509690
test al, al
je 0x49da92
push dword [ebp - 0x6f58]
lea eax, [ebp - 0x1ff0]
push 0
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x232c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00499340
add esi, eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24c8]
call fcn.0051dd30
push eax
push 0x5fe504
lea ecx, [ebp - 0x26c8]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x232c]
call fcn.0051dda0
lea ecx, [ebp - 0x232c]
call fcn.00509690
test al, al
je 0x49db05
push dword [ebp - 0x6f58]
lea eax, [ebp - 0x1ff0]
push 0
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x232c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00499340
add esi, eax
mov eax, edi
mov dword [ebp - 0x6f58], 0
cmp dword [eax + 0x30], 0
jbe 0x49dc5a
lea edi, [eax + 0x44]
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24c8]
call fcn.0051dd30
push eax
push 0x5fe504
lea ecx, [ebp - 0x2238]
call fcn.0051dd30
push eax
push dword [ebp - 0x6f58]
mov ecx, edi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x232c]
call fcn.0051dda0
lea ecx, [ebp - 0x232c]
call fcn.00509690
test al, al
je 0x49dbae
push dword [ebp - 0x6f58]
lea eax, [ebp - 0x1ff0]
push 0
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x232c]
call fcn.0051dd30
mov edi, dword [ebp - 0x6f54]
mov ecx, edi
push eax
call fcn.00499340
add esi, eax
jmp 0x49dbb4
mov edi, dword [ebp - 0x6f54]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24c8]
call fcn.0051dd30
push eax
push 0x5fe504
lea ecx, [ebp - 0x2184]
call fcn.0051dd30
push eax
push dword [ebp - 0x6f58]
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x232c]
call fcn.0051dda0
lea ecx, [ebp - 0x232c]
call fcn.00509690
test al, al
je 0x49dc3b
push dword [ebp - 0x6f58]
lea eax, [ebp - 0x1ff0]
push 0
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x232c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00499340
add esi, eax
mov eax, dword [ebp - 0x6f54]
mov ecx, dword [ebp - 0x6f58]
inc ecx
mov dword [ebp - 0x6f58], ecx
lea edi, [eax + 0x44]
cmp ecx, dword [eax + 0x30]
jb 0x49db20
test esi, esi
jle 0x49dc80
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
push 0x605d48
push dword [ebp - 0x6cb4]
push 0x615cf4
call dword [0x5de4e8]
mov eax, dword [ebp - 0x6f40]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f40], eax
call fcn.00518170
test al, al
jne 0x49d8d0
mov edi, dword [ebp - 0x6f54]
lea ecx, [ebp - 0x237c]
call fcn.005187c0
lea ecx, [ebp - 0x24c8]
call fcn.0051dfd0
lea ecx, [ebp - 0x232c]
call fcn.0051dfd0
lea ecx, [ebp - 0x2760]
call fcn.0051dfd0
lea ecx, [ebp - 0x2754]
call fcn.0051dfd0
lea ecx, [ebp - 0x27ec]
call fcn.0051dfd0
lea ecx, [ebp - 0x2748]
call fcn.0051dfd0
lea ecx, [ebp - 0x273c]
call fcn.0051dfd0
lea ecx, [ebp - 0x29b0]
call fcn.0051dfd0
jmp 0x49c80f
mov eax, dword [ebp - 0x237c]
mov dword [ebp - 0x6f58], eax
mov edi, dword [ebp - 0x6f54]
push 8
lea ecx, [ebp - 0x6dac]
call fcn.004020d0
mov eax, dword [edi + 0x30]
lea ecx, [ebp - 0x6dac]
add eax, 2
push eax
call fcn.00403990
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x2148]
mov esi, dword [ebp - 0x6dac]
push 0xc
mov dword [ebp - 0x6f64], esi
call fcn.00401eb0
lea ecx, [ebp - 0x2148]
call fcn.0051e180
mov byte [ebp - 4], 0x45
cmp byte [edi + 0x14], 0
jne 0x4a043b
test dword [edi + 0x34], 0x400
jne 0x4a043b
push 0
push 0x615f10
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x615f40
push dword [eax + 0x38]
call fcn.004f44b0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x23
push dword [eax + 0x34]
call fcn.004f1310
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x49de27
mov eax, dword [ebp - 0x6f64]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6f48], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x615f70
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f48]
push eax
push str.HKU_
call fcn.0051dda0
add dword [ebp - 0x6f48], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x49dde0
mov esi, dword [ebp - 0x6f64]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x615fd0
push dword [ebp - 0x6f70]
lea ecx, [esi + eax*4]
call fcn.0051dda0
cmp byte [ebp - 0x6f49], 0
je 0x49de8e
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x615fd0
push dword [ebp - 0x6f74]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.0051dda0
push 0xc
lea ecx, [ebp - 0x2090]
call fcn.00401eb0
lea ecx, [ebp - 0x2090]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2404]
mov byte [ebp - 4], 0x46
call fcn.00401eb0
lea ecx, [ebp - 0x2404]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x27b0]
mov byte [ebp - 4], 0x47
call fcn.00401eb0
lea ecx, [ebp - 0x27b0]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x219c]
mov byte [ebp - 4], 0x48
call fcn.00401eb0
lea ecx, [ebp - 0x219c]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2314]
mov byte [ebp - 4], 0x49
call fcn.00401eb0
lea ecx, [ebp - 0x2314]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x255c]
mov byte [ebp - 4], 0x4a
call fcn.00401eb0
lea ecx, [ebp - 0x255c]
call fcn.0051e180
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x616030
push 0x5fe504
lea ecx, [edi + 0x78]
mov byte [ebp - 4], 0x4b
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.0051dda0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa4]
call fcn.004f31a0
push 0
push 0x616050
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
xor eax, eax
mov dword [ebp - 0x6f48], eax
cmp dword [ebp - 0x6f6c], eax
jbe 0x49e2de
mov esi, dword [ebp - 0x6f68]
mov ecx, dword [ebp - 0x6f64]
sub ecx, esi
mov dword [ebp - 0x6f44], esi
mov dword [ebp - 0x6fa0], ecx
nop dword [eax]
cmp byte [edi + 0x14], 0
jne 0x4a03f5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
cmp eax, dword [edi + 0x30]
jae 0x49e001
lea ecx, [ebp - 0x26b0]
call fcn.0051dd30
push eax
push dword [ebp - 0x6f48]
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
jmp 0x49e00c
push 0x60a2bc
lea ecx, [ebp - 0x2568]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2404]
call fcn.0051dda0
mov eax, dword [ebp - 0x6fa0]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f40], eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x49e2bc
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f58], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.005180d0
test al, al
je 0x49e2bc
cmp byte [edi + 0x14], 0
jne 0x49e2bc
mov eax, dword [ebp - 0x6cb4]
cmp word [eax], 0
je 0x49e294
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x60cd78
push dword [ebp - 0x6cb4]
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x49e294
lea eax, [ebp - 0x2090]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f74]
call fcn.00518530
test al, al
je 0x49e294
push 3
lea edx, [edi + 0xb4]
xor esi, esi
lea ecx, [ebp - 0x2090]
call fcn.005108d0
test al, al
je 0x49e167
push esi
push 1
push 1
push esi
lea ecx, [ebp - 0x2404]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2090]
call fcn.0051c760
mov ecx, dword [ebp - 0x6f40]
mov esi, eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
push 0x607958
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2148]
call fcn.0051dda0
push 0
lea ecx, [ebp - 0x2148]
call fcn.0051dd30
push eax
lea eax, [ebp - 0x2090]
mov ecx, edi
push eax
call fcn.00498030
test al, al
mov eax, 1
cmovne esi, eax
push 0
lea ecx, [ebp - 0x2090]
call fcn.0051dd30
push eax
push 0
push esi
lea ecx, [ebp - 0x2090]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.0051dd30
push eax
push dword [ebp - 0x6cb4]
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xb
push dword [eax + 0xa4]
call fcn.004c0fd0
mov dword [ebp - 0x6fbc], eax
cmp eax, 0xffffffff
je 0x49e28e
mov ecx, dword [ebp - 0x6f44]
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2090]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.0051dd30
push eax
push 0xb
push dword [ebp - 0x6fbc]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
lea eax, [ebp - 0x2090]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f74]
call fcn.00518530
push 0
push 0
push 0
test esi, esi
mov ecx, 0x6152a0
push 0x60477c
mov eax, 0x60c078
cmove eax, ecx
lea ecx, [ebp - 0x2090]
push eax
push 0x6152b8
call fcn.0051dd30
mov esi, dword [ebp - 0x6f44]
mov ecx, esi
push eax
push 0x616094
call fcn.0051dd30
push eax
push 0x615318
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f80]
push 0x6160b0
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
jmp 0x49e294
mov esi, dword [ebp - 0x6f44]
mov eax, dword [ebp - 0x6f58]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f58], eax
call fcn.005180d0
test al, al
jne 0x49e073
mov eax, dword [ebp - 0x6f48]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f44], esi
mov dword [ebp - 0x6f48], eax
cmp eax, dword [ebp - 0x6f6c]
jb 0x49dfc0
cmp byte [edi + 0x14], 0
jne 0x4a03f5
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x49e34b
mov eax, dword [ebp - 0x6f64]
mov dword [ebp - 0x6f48], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x28a8]
call fcn.0051dd30
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f48]
push eax
call fcn.0051dda0
add dword [ebp - 0x6f48], 0xc
inc esi
mov eax, dword [edi + 0x30]
cmp esi, eax
jb 0x49e300
lea ecx, [ebp - 0x291c]
push ecx
mov ecx, dword [ebp - 0x6f64]
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
call fcn.0051e080
push 0
push 0x6160d0
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
push 0x4c
lea ecx, [ebp - 0x2b70]
call fcn.00401fc0
lea ecx, [ebp - 0x2b70]
call fcn.005114f0
mov eax, dword [ebp - 0x6f68]
mov esi, eax
mov ecx, dword [ebp - 0x6f64]
sub ecx, eax
mov byte [ebp - 4], 0x4c
mov dword [ebp - 0x6f44], 0
mov dword [ebp - 0x6f50], esi
mov dword [ebp - 0x6f5c], ecx
nop word [eax + eax]
mov al, byte [edi + 0x14]
test al, al
jne 0x4a03ea
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea eax, [esi + ecx]
push 0
push 0x616108
mov ecx, eax
mov dword [ebp - 0x6f40], eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2090]
call fcn.0051dda0
push 0x260
lea ecx, [ebp - 0x3778]
call fcn.00401f00
push 3
lea ecx, [ebp - 0x2090]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x3778]
call fcn.004016e0
mov eax, dword [ebp - 0x6f44]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov byte [ebp - 4], 0x4d
push 0
push 0
cmp eax, dword [edi + 0x30]
jae 0x49e46a
lea ecx, [ebp - 0x26b0]
call fcn.0051dd30
push eax
push dword [ebp - 0x6f44]
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
jmp 0x49e475
push 0x60a2bc
lea ecx, [ebp - 0x2568]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2404]
call fcn.0051dda0
lea ecx, [ebp - 0x3778]
call fcn.00401820
test al, al
je 0x49e80c
nop dword [eax]
cmp byte [edi + 0x14], 0
jne 0x49e80c
push 1
lea ecx, [ebp - 0x3778]
call fcn.00401890
push eax
lea ecx, [ebp - 0x219c]
call fcn.0051e0b0
push 0x616120
lea ecx, [ebp - 0x219c]
call fcn.0051e060
test al, al
jne 0x49e7f9
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x60cdb0
lea ecx, [ebp - 0x219c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x49e7f9
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x3778]
call fcn.00401890
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x5fe504
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x255c]
call fcn.0051dda0
lea eax, [ebp - 0x255c]
push eax
lea ecx, [ebp - 0x2314]
call fcn.0051e080
push 0
push 0
lea ecx, [ebp - 0x3778]
call fcn.004018a0
mov edx, 0x615284
mov ecx, eax
call fcn.0051a8a0
test eax, eax
jne 0x49e63c
push eax
lea ecx, [ebp - 0x255c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2b70]
call fcn.005113b0
test al, al
je 0x49e63c
lea ecx, [ebp - 0x2b70]
call fcn.00511330
push eax
lea ecx, [ebp - 0x2314]
call fcn.0051e0b0
lea ecx, [ebp - 0x2b70]
call fcn.005112d0
mov ecx, eax
call fcn.0051aa10
test eax, eax
je 0x49e5f7
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2b70]
call fcn.005112d0
push eax
push 0x5ff58c
lea ecx, [ebp - 0x2314]
call fcn.0051c4c0
push 3
push 1
lea ecx, [ebp - 0x2314]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2090]
call fcn.0051de00
lea edx, [edi + 0xb4]
mov ecx, eax
call fcn.005108d0
test al, al
jne 0x49e64e
lea ecx, [ebp - 0x2b70]
call fcn.00511330
push eax
lea ecx, [ebp - 0x2090]
call fcn.0051e0b0
jmp 0x49e64e
lea eax, [ebp - 0x255c]
push eax
lea ecx, [ebp - 0x2090]
call fcn.0051e080
push 0
push 0
push 0x5fe50c
push 0x5ff6d4
lea ecx, [ebp - 0x2090]
call fcn.0051c000
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2404]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2090]
call fcn.0051c760
push 0
lea ecx, [ebp - 0x255c]
mov esi, eax
call fcn.0051dd30
push eax
lea eax, [ebp - 0x2090]
mov ecx, edi
push eax
call fcn.00498030
test al, al
lea ecx, [ebp - 0x2090]
mov eax, 1
push 0
cmovne esi, eax
call fcn.0051dd30
push eax
push 0
push esi
lea ecx, [ebp - 0x2090]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f50]
push eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x219c]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xc
push dword [eax + 0xa4]
call fcn.004c0fd0
mov dword [ebp - 0x6fa0], eax
cmp eax, 0xffffffff
je 0x49e7f3
push 0
push 0
push 0
test esi, esi
mov eax, 0x6152a0
push 0x60477c
mov ecx, 0x60c078
cmove ecx, eax
push ecx
push 0x6152b8
lea ecx, [ebp - 0x2090]
call fcn.0051dd30
mov esi, dword [ebp - 0x6f50]
mov ecx, esi
push eax
push 0x616138
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x219c]
call fcn.0051dd30
push eax
push 0x6160b0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x3778]
call fcn.00401890
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x5fe504
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2090]
call fcn.0051dda0
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2090]
call fcn.0051dd30
push eax
push 0
push 0xc
push dword [ebp - 0x6fa0]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
jmp 0x49e7f9
mov esi, dword [ebp - 0x6f50]
lea ecx, [ebp - 0x3778]
call fcn.004017e0
test al, al
jne 0x49e4a0
lea ecx, [ebp - 0x3778]
mov byte [ebp - 4], 0x4c
call fcn.00401730
mov ecx, dword [ebp - 0x6f44]
add esi, 0xc
inc ecx
mov dword [ebp - 0x6f50], esi
cmp ecx, dword [edi + 0x30]
mov dword [ebp - 0x6f44], ecx
mov ecx, dword [ebp - 0x6f5c]
jbe 0x49e3c0
mov al, byte [edi + 0x14]
test al, al
jne 0x4a03ea
push 0
push 0x616150
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
push 0xc
lea ecx, [ebp - 0x2450]
call fcn.00401eb0
lea ecx, [ebp - 0x2450]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2190]
mov byte [ebp - 4], 0x4e
call fcn.00401eb0
lea ecx, [ebp - 0x2190]
call fcn.0051e180
push 4
lea ecx, [ebp - 0x6cd4]
mov byte [ebp - 4], 0x4f
call fcn.00401ed0
lea ecx, [ebp - 0x6cd4]
call fcn.00401a90
push 4
lea ecx, [ebp - 0x6cd8]
mov byte [ebp - 4], 0x50
call fcn.00401ed0
lea ecx, [ebp - 0x6cd8]
call fcn.00401a90
lea eax, [ebp - 0x6cd8]
mov byte [ebp - 4], 0x51
mov esi, dword [0x5dea70]
push eax
push 0x5f88fc
push 1
push 0
push 0x5f8b0c
call esi
test eax, eax
js 0x49f515
lea ecx, [ebp - 0x70d0]
call fcn.00401e10
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x70c0]
movups xmmword [ebp - 0x6fb0], xmm0
call fcn.00401e10
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x7050]
movups xmmword [ebp - 0x6fc8], xmm0
call fcn.00401e10
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x7060]
movups xmmword [ebp - 0x7000], xmm0
call fcn.00401e10
mov edi, eax
mov byte [ebp - 4], 0x55
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x6fb0]
mov ecx, dword [ebp - 0x6cd8]
mov edx, esp
sub esp, 0x10
mov eax, esp
sub esp, 0x10
mov esi, dword [ecx]
movups xmmword [edx], xmm0
movups xmm0, xmmword [ebp - 0x6fc8]
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x7000]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [edi]
push ecx
movups xmmword [eax], xmm0
mov eax, dword [esi + 0x28]
call eax
lea ecx, [ebp - 0x7060]
mov esi, eax
call fcn.00401ea0
lea ecx, [ebp - 0x7050]
call fcn.00401ea0
lea ecx, [ebp - 0x70c0]
call fcn.00401ea0
lea ecx, [ebp - 0x70d0]
mov byte [ebp - 4], 0x51
call fcn.00401ea0
test esi, esi
js 0x49ea7e
push 4
lea ecx, [ebp - 0x6ce8]
call fcn.00401ed0
lea ecx, [ebp - 0x6ce8]
call fcn.00401a90
push 0x5fe504
lea ecx, [ebp - 0x7018]
mov byte [ebp - 4], 0x56
call fcn.00401b70
mov byte [ebp - 4], 0x57
mov ecx, dword [ebp - 0x6cd8]
mov esi, dword [ecx]
lea ecx, [ebp - 0x6ce8]
push ecx
mov ecx, eax
call fcn.00401c30
push eax
push dword [ebp - 0x6cd8]
mov eax, dword [esi + 0x1c]
call eax
lea ecx, [ebp - 0x7018]
mov byte [ebp - 4], 0x56
mov esi, eax
call fcn.00401c20
test esi, esi
js 0x49ea6f
push 4
lea ecx, [ebp - 0x6cfc]
call fcn.00401ed0
lea ecx, [ebp - 0x6cfc]
call fcn.00401a90
mov byte [ebp - 4], 0x58
lea edx, [ebp - 0x6cfc]
mov eax, dword [ebp - 0x6ce8]
push edx
push 1
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x38]
call eax
test eax, eax
jns 0x49ef08
lea ecx, [ebp - 0x6cfc]
call fcn.004031b0
lea ecx, [ebp - 0x6ce8]
mov byte [ebp - 4], 0x51
call fcn.004031b0
mov edi, dword [ebp - 0x6f54]
cmp byte [edi + 0x14], 0
jne 0x4a03be
push 0x18
lea ecx, [ebp - 0x28d4]
call fcn.00401ee0
lea ecx, [ebp - 0x28d4]
call fcn.0051b0f0
push 0
push 0x616250
lea ecx, [ebp - 0x1ff0]
mov byte [ebp - 4], 0x61
call fcn.0050b8e0
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x49eb1b
mov eax, dword [ebp - 0x6f64]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6f48], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x616280
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f48]
push eax
push str.HKU_
call fcn.0051dda0
add dword [ebp - 0x6f48], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x49ead4
mov esi, dword [ebp - 0x6f64]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6162f0
push dword [ebp - 0x6f70]
lea ecx, [esi + eax*4]
call fcn.0051dda0
cmp byte [ebp - 0x6f49], 0
je 0x49eb82
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x6162f0
push dword [ebp - 0x6f74]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.0051dda0
cmp dword [ebp - 0x6f6c], 0
mov dword [ebp - 0x6f48], 0
jbe 0x49fa61
mov esi, dword [ebp - 0x6f68]
mov dword [ebp - 0x6f44], esi
cmp byte [edi + 0x14], 0
jne 0x4a03b3
mov eax, dword [ebp - 0x6f5c]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f40], eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x49fa3f
lea eax, [ebp - 0x2404]
push eax
push 0x60ce28
lea ecx, [ebp - 0x1f74]
call fcn.00518530
test al, al
je 0x49fa3f
lea ecx, [ebp - 0x2404]
call fcn.0051df40
cmp eax, 2
jl 0x49fa3f
push 0x18
lea ecx, [ebp - 0x29d4]
call fcn.00401ee0
push 0
push 0x604a10
lea ecx, [ebp - 0x2404]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x29d4]
call fcn.0051b070
lea ecx, [ebp - 0x29d4]
mov byte [ebp - 4], 0x62
mov dword [ebp - 0x6f58], 0
call fcn.0051afe0
test eax, eax
je 0x49fa30
nop
push dword [ebp - 0x6f58]
lea ecx, [ebp - 0x29d4]
call fcn.0051aff0
push eax
lea ecx, [ebp - 0x219c]
call fcn.0051e0b0
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x61635c
lea ecx, [ebp - 0x219c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x49fa13
push dword [ebp - 0x6f58]
lea ecx, [ebp - 0x29d4]
call fcn.0051aff0
push eax
lea ecx, [ebp - 0x2090]
call fcn.0051e0b0
lea ecx, [ebp - 0x2090]
call fcn.0051da30
test al, al
jne 0x49fa13
push 0
push 1
push 0xffffffffffffffff
push 0
push str..dll
lea ecx, [ebp - 0x2090]
call fcn.0051c760
lea ecx, [ebp - 0x2090]
mov esi, eax
call fcn.0051df40
sub eax, 3
cmp esi, eax
je 0x49ed2d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str..dll
lea ecx, [ebp - 0x2090]
call fcn.0051c4c0
push 3
lea edx, [edi + 0xb4]
lea ecx, [ebp - 0x2090]
call fcn.005108d0
lea ecx, [ebp - 0x2090]
call fcn.0051dd30
push eax
push 0
call dword [0x5deaa4]
test eax, eax
jne 0x49fa0d
push eax
push 1
push 1
push eax
push 0x6161cc
lea ecx, [ebp - 0x2090]
call fcn.0051c760
push 0
push 0
push 0
push 0
push 0
push 0
xor ecx, ecx
test eax, eax
push 0
push 0
setg cl
push 0
push dword [ebp - 0x6f58]
mov dword [ebp - 0x6f80], ecx
lea ecx, [ebp - 0x29d4]
call fcn.0051aff0
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x616378
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2148]
call fcn.0051dda0
push 0
lea ecx, [ebp - 0x2148]
call fcn.0051dd30
push eax
lea eax, [ebp - 0x2090]
mov ecx, edi
push eax
call fcn.00498030
mov esi, dword [ebp - 0x6f80]
lea ecx, [ebp - 0x2090]
test al, al
mov eax, 1
push 0
cmovne esi, eax
call fcn.0051dd30
push eax
push 0
push esi
lea ecx, [ebp - 0x2090]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x219c]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xe
push dword [eax + 0xa4]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x49fa0d
mov ecx, dword [ebp - 0x6f44]
push 0
push 0
push 0
push 0
push 0
push 0x60ce28
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2090]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.0051dd30
push eax
push 0xe
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
test esi, esi
mov ecx, 0x6152a0
push 0x60477c
mov eax, 0x60c078
cmove eax, ecx
lea ecx, [ebp - 0x2090]
push eax
push 0x6152b8
call fcn.0051dd30
mov esi, dword [ebp - 0x6f44]
mov ecx, esi
push eax
push 0x616138
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x219c]
call fcn.0051dd30
push eax
push 0x6160b0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
jmp 0x49fa13
mov eax, dword [ebp - 0x6cfc]
lea edx, [ebp - 0x2550]
mov dword [ebp - 0x2550], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
mov eax, dword [ebp - 0x2550]
mov edi, dword [ebp - 0x6f54]
test eax, eax
je 0x49f4f6
mov esi, 1
mov dword [ebp - 0x6f40], esi
cmp eax, esi
jl 0x49f4f6
nop
cmp byte [edi + 0x14], 0
jne 0x49f4f6
push 4
lea ecx, [ebp - 0x6cbc]
call fcn.00401ed0
lea ecx, [ebp - 0x6cbc]
call fcn.00401a90
push 3
push esi
lea ecx, [ebp - 0x7040]
mov byte [ebp - 4], 0x59
call fcn.00401e20
mov esi, eax
mov byte [ebp - 4], 0x5a
lea edx, [ebp - 0x6cbc]
mov ecx, dword [ebp - 0x6cfc]
movups xmm0, xmmword [esi]
push edx
sub esp, 0x10
mov eax, dword [ecx]
mov edx, esp
push ecx
mov eax, dword [eax + 0x20]
movups xmmword [edx], xmm0
call eax
lea ecx, [ebp - 0x7040]
mov byte [ebp - 4], 0x59
mov esi, eax
call fcn.00401ea0
test esi, esi
js 0x49f4ce
mov eax, dword [ebp - 0x6cbc]
lea edx, [ebp - 0x6d14]
mov dword [ebp - 0x6d14], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
test eax, eax
js 0x49f4ce
mov eax, dword [ebp - 0x6d14]
test eax, eax
je 0x49f4ce
push eax
lea ecx, [ebp - 0x219c]
call fcn.0051e0b0
push dword [ebp - 0x6d14]
call dword [0x5de554]
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x6161ac
lea ecx, [ebp - 0x219c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x49f4ce
push 4
lea ecx, [ebp - 0x6cc8]
call fcn.00401ed0
lea ecx, [ebp - 0x6cc8]
call fcn.00401a90
mov byte [ebp - 4], 0x5b
lea edx, [ebp - 0x6cc8]
mov eax, dword [ebp - 0x6cbc]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x4c]
call eax
test eax, eax
js 0x49f4c3
push 4
lea ecx, [ebp - 0x6ccc]
call fcn.00401ed0
lea ecx, [ebp - 0x6ccc]
call fcn.00401a90
mov byte [ebp - 4], 0x5c
lea edx, [ebp - 0x6ccc]
mov eax, dword [ebp - 0x6cc8]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x44]
call eax
test eax, eax
js 0x49f4b8
mov eax, dword [ebp - 0x6ccc]
lea edx, [ebp - 0x2454]
mov dword [ebp - 0x2454], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
cmp dword [ebp - 0x2454], 0
je 0x49f4b8
lea ecx, [ebp - 0x2190]
call fcn.0051dfa0
mov esi, 1
cmp dword [ebp - 0x2454], esi
jl 0x49f2ce
mov edi, dword [ebp - 0x6f80]
nop
push 4
lea ecx, [ebp - 0x6cc0]
call fcn.00401ed0
lea ecx, [ebp - 0x6cc0]
call fcn.00401a90
mov byte [ebp - 4], 0x5d
lea edx, [ebp - 0x6cc0]
mov eax, dword [ebp - 0x6ccc]
push edx
push esi
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x20]
call eax
test eax, eax
js 0x49f2ac
mov eax, dword [ebp - 0x6cc0]
lea edx, [ebp - 0x28ac]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x24]
call eax
test eax, eax
js 0x49f2ac
cmp dword [ebp - 0x28ac], 0
jne 0x49f2ac
push 4
lea ecx, [ebp - 0x6cec]
call fcn.00401ed0
lea ecx, [ebp - 0x6cec]
call fcn.00401a90
mov byte [ebp - 4], 0x5e
lea edx, [ebp - 0x6cec]
mov eax, dword [ebp - 0x6cc0]
push edx
push str.MbLk
push eax
mov ecx, dword [eax]
mov eax, dword [ecx]
call eax
test eax, eax
js 0x49f2a1
mov eax, dword [ebp - 0x6cec]
lea edx, [ebp - 0x6d00]
mov dword [ebp - 0x6d00], 0
mov dword [ebp - 0x6d04], 0
push edx
mov ecx, dword [eax]
push eax
mov eax, dword [ecx + 0x28]
call eax
mov eax, dword [ebp - 0x6d00]
test eax, eax
je 0x49f2a1
push eax
lea ecx, [ebp - 0x2314]
call fcn.0051e0b0
mov eax, dword [ebp - 0x6cec]
lea edx, [ebp - 0x6d04]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x30]
call eax
mov ecx, dword [ebp - 0x6d04]
call fcn.0051aa10
test eax, eax
je 0x49f25a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6d04]
lea ecx, [ebp - 0x2314]
push 0x5ff58c
call fcn.0051c4c0
push 3
push 1
lea ecx, [ebp - 0x2314]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2190]
call fcn.0051de00
mov edx, edi
mov ecx, eax
call fcn.005108d0
test al, al
jne 0x49f26b
push dword [ebp - 0x6d00]
lea ecx, [ebp - 0x2190]
call fcn.0051e0b0
push 0
push 1
push 0x5fe50c
push 0x5ff6d4
lea ecx, [ebp - 0x2190]
call fcn.0051c000
push dword [ebp - 0x6d00]
call dword [0x5de554]
mov eax, dword [ebp - 0x6d04]
test eax, eax
je 0x49f2a1
push eax
call dword [0x5de554]
lea ecx, [ebp - 0x6cec]
call fcn.004031b0
lea ecx, [ebp - 0x6cc0]
mov byte [ebp - 4], 0x5c
call fcn.004031b0
inc esi
cmp esi, dword [ebp - 0x2454]
jle 0x49f100
mov edi, dword [ebp - 0x6f54]
lea ecx, [ebp - 0x2190]
call fcn.0051da30
test al, al
jne 0x49f4b8
mov eax, dword [ebp - 0x6ce8]
lea edx, [ebp - 0x6dcc]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x20]
call eax
test eax, eax
js 0x49f37c
movsd xmm0, qword [edi + 0x2b0]
comisd xmm0, xmmword [0x6be4d0]
jbe 0x49f318
mov eax, dword [edi + 0xbc]
jmp 0x49f31e
mov eax, dword [edi + 0xb8]
push eax
lea ecx, [ebp - 0x2450]
call fcn.0051e0b0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x219c]
call fcn.0051dd30
push eax
push 0x5fe504
push dword [ebp - 0x6dcc]
lea ecx, [ebp - 0x2450]
push 0x60b768
call fcn.0051c4c0
push 1
push 0
push 0x5fe504
push 0x5fe58c
lea ecx, [ebp - 0x2450]
call fcn.0051c000
jmp 0x49f387
lea ecx, [ebp - 0x2450]
call fcn.0051dfa0
push 0
push 1
push 1
push 0
push 0x6161cc
lea ecx, [ebp - 0x2190]
call fcn.0051c760
push 0
lea ecx, [ebp - 0x2450]
mov esi, eax
call fcn.0051dd30
push eax
lea eax, [ebp - 0x2190]
mov ecx, edi
push eax
call fcn.00498030
test al, al
lea ecx, [ebp - 0x2190]
mov eax, 1
push 0
cmovne esi, eax
call fcn.0051dd30
push eax
push 0
push esi
lea ecx, [ebp - 0x2190]
call fcn.0051dd30
push eax
push 0x60fb20
lea ecx, [ebp - 0x219c]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xd
push dword [eax + 0xa4]
call fcn.004c0fd0
mov dword [ebp - 0x6fa0], eax
cmp eax, 0xffffffff
je 0x49f4b8
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60fb20
lea ecx, [ebp - 0x2190]
call fcn.0051dd30
push eax
push 0
push 0xd
push dword [ebp - 0x6fa0]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
test esi, esi
mov ecx, 0x6152a0
push 0x60477c
mov eax, 0x60c078
cmove eax, ecx
lea ecx, [ebp - 0x2314]
push eax
push 0x6152b8
call fcn.0051dd30
push eax
push 0x616094
push 0x6161dc
lea ecx, [ebp - 0x219c]
call fcn.0051dd30
push eax
push 0x616214
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
lea ecx, [ebp - 0x6ccc]
call fcn.004031b0
lea ecx, [ebp - 0x6cc8]
call fcn.004031b0
lea ecx, [ebp - 0x6cbc]
mov byte [ebp - 4], 0x58
call fcn.004031b0
mov esi, dword [ebp - 0x6f40]
inc esi
mov dword [ebp - 0x6f40], esi
cmp esi, dword [ebp - 0x2550]
jle 0x49ef50
lea ecx, [ebp - 0x6cfc]
call fcn.004031b0
lea ecx, [ebp - 0x6ce8]
mov byte [ebp - 4], 0x51
call fcn.004031b0
jmp 0x49ea84
lea eax, [ebp - 0x6cd4]
push eax
push 0x60a0a8
push 1
push 0
push 0x608e04
call esi
test eax, eax
js 0x49ea84
push 4
lea ecx, [ebp - 0x6cf0]
call fcn.00401ed0
lea ecx, [ebp - 0x6cf0]
call fcn.00401a90
mov byte [ebp - 4], 0x5f
lea edx, [ebp - 0x6cf0]
mov eax, dword [ebp - 0x6cd4]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x14]
call eax
test eax, eax
jns 0x49f57d
lea ecx, [ebp - 0x6cf0]
mov byte [ebp - 4], 0x51
call fcn.004031b0
jmp 0x49ea84
mov eax, dword [ebp - 0x6cf0]
lea edx, [ebp - 0x2464]
push edx
mov dword [ebp - 0x2464], 0
lea edx, [ebp - 0x6d0c]
push edx
mov ecx, dword [eax]
push 5
push eax
mov eax, dword [ecx + 0xc]
call eax
test eax, eax
js 0x49f9f9
mov esi, dword [0x5dea74]
nop dword [eax]
nop word [eax + eax]
mov eax, dword [ebp - 0x2464]
test eax, eax
je 0x49f9f9
xor ecx, ecx
mov dword [ebp - 0x6f48], ecx
test eax, eax
je 0x49f9cb
nop
cmp byte [edi + 0x14], 0
jne 0x49f9cb
mov eax, dword [ebp - 0x6d0c]
push dword [eax + ecx*4]
lea ecx, [ebp - 0x219c]
call fcn.0051e0b0
mov eax, dword [ebp - 0x6d0c]
mov ecx, dword [ebp - 0x6f48]
push dword [eax + ecx*4]
call esi
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x6161ac
lea ecx, [ebp - 0x219c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x49f9b2
push 4
lea ecx, [ebp - 0x6cc4]
call fcn.00401ed0
lea ecx, [ebp - 0x6cc4]
call fcn.00401a90
mov byte [ebp - 4], 0x60
lea ecx, [ebp - 0x219c]
mov eax, dword [ebp - 0x6cd4]
mov esi, dword [eax]
lea eax, [ebp - 0x6cc4]
push eax
push 0x60e110
call fcn.0051dd30
push eax
push dword [ebp - 0x6cd4]
mov eax, dword [esi + 0x18]
call eax
test eax, eax
js 0x49f99d
mov eax, dword [ebp - 0x6cc4]
lea edx, [ebp - 0x6cf8]
mov dword [ebp - 0x6cf8], 0
mov dword [ebp - 0x6d08], 0
push edx
mov ecx, dword [eax]
push eax
mov eax, dword [ecx + 0x84]
call eax
cmp dword [ebp - 0x6cf8], 0
je 0x49f99d
mov eax, dword [ebp - 0x6cc4]
lea edx, [ebp - 0x6d08]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x8c]
call eax
push dword [ebp - 0x6cf8]
lea ecx, [ebp - 0x2314]
call fcn.0051e0b0
mov ecx, dword [ebp - 0x6d08]
call fcn.0051aa10
test eax, eax
je 0x49f753
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6d08]
lea ecx, [ebp - 0x2314]
push 0x5ff58c
call fcn.0051c4c0
push 3
push 1
lea ecx, [ebp - 0x2314]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2190]
call fcn.0051de00
lea edx, [edi + 0xb4]
mov ecx, eax
call fcn.005108d0
test al, al
jne 0x49f764
push dword [ebp - 0x6cf8]
lea ecx, [ebp - 0x2190]
call fcn.0051e0b0
push 0
push 1
push 0x5fe50c
push 0x5ff6d4
lea ecx, [ebp - 0x2190]
call fcn.0051c000
push dword [ebp - 0x6cf8]
mov esi, dword [0x5dea74]
call esi
mov eax, dword [ebp - 0x6d08]
test eax, eax
je 0x49f798
push eax
call esi
lea ecx, [ebp - 0x2190]
call fcn.0051da30
test al, al
je 0x49f7bb
lea ecx, [ebp - 0x6cc4]
mov byte [ebp - 4], 0x5f
call fcn.004031b0
jmp 0x49f9b2
push 0
push 1
push 1
push 0
push 0x6161cc
lea ecx, [ebp - 0x2190]
call fcn.0051c760
xor ecx, ecx
test eax, eax
lea eax, [ebp - 0x219c]
setg cl
mov dword [ebp - 0x6f80], ecx
lea ecx, [ebp - 0x2450]
push eax
call fcn.0051e080
push 0
push 1
push 0xffffffffffffffff
push 0
push 0x60b778
lea ecx, [ebp - 0x2450]
call fcn.0051c760
test eax, eax
jne 0x49f829
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x60b778
lea ecx, [ebp - 0x2450]
call fcn.0051c4c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x616234
push dword [edi + 0xb8]
lea ecx, [ebp - 0x2450]
call fcn.0051c280
push 0
lea ecx, [ebp - 0x2450]
call fcn.0051dd30
push eax
lea eax, [ebp - 0x2190]
mov ecx, edi
push eax
call fcn.00498030
test al, al
je 0x49f87a
mov esi, 1
jmp 0x49f8ac
lea ecx, [ebp - 0x2190]
call fcn.0051dd30
push eax
push 0
call dword [0x5deaa4]
test eax, eax
je 0x49f8a6
lea ecx, [ebp - 0x6cc4]
mov byte [ebp - 4], 0x5f
call fcn.004031b0
jmp 0x49f9b2
mov esi, dword [ebp - 0x6f80]
push 0
lea ecx, [ebp - 0x2190]
call fcn.0051dd30
push eax
push 0
push esi
lea ecx, [ebp - 0x2190]
call fcn.0051dd30
push eax
push 0x60fb20
lea ecx, [ebp - 0x219c]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xd
push dword [eax + 0xa4]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x49f99d
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60fb20
lea ecx, [ebp - 0x2190]
call fcn.0051dd30
push eax
push 0
push 0xd
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
test esi, esi
mov ecx, 0x6152a0
push 0x60477c
mov eax, 0x60c078
cmove eax, ecx
lea ecx, [ebp - 0x2314]
push eax
push 0x6152b8
call fcn.0051dd30
push eax
push 0x616094
push 0x6161dc
lea ecx, [ebp - 0x219c]
call fcn.0051dd30
push eax
push 0x616214
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
lea ecx, [ebp - 0x6cc4]
mov byte [ebp - 4], 0x5f
call fcn.004031b0
mov esi, dword [0x5dea74]
mov ecx, dword [ebp - 0x6f48]
inc ecx
mov dword [ebp - 0x6f48], ecx
cmp ecx, dword [ebp - 0x2464]
jb 0x49f5e0
push dword [ebp - 0x6d0c]
call esi
mov eax, dword [ebp - 0x6cf0]
lea edx, [ebp - 0x2464]
push edx
lea edx, [ebp - 0x6d0c]
push edx
mov ecx, dword [eax]
push 5
push eax
mov eax, dword [ecx + 0xc]
call eax
test eax, eax
jns 0x49f5c0
lea ecx, [ebp - 0x6cf0]
mov byte [ebp - 4], 0x51
call fcn.004031b0
jmp 0x49ea84
mov esi, dword [ebp - 0x6f44]
inc dword [ebp - 0x6f58]
lea ecx, [ebp - 0x29d4]
call fcn.0051afe0
cmp dword [ebp - 0x6f58], eax
jb 0x49ec60
lea ecx, [ebp - 0x29d4]
mov byte [ebp - 4], 0x61
call fcn.0051b050
mov eax, dword [ebp - 0x6f48]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f44], esi
mov dword [ebp - 0x6f48], eax
cmp eax, dword [ebp - 0x6f6c]
jb 0x49eba5
cmp byte [edi + 0x14], 0
jne 0x4a03b3
push 0
push 0x6163a0
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
push 4
lea ecx, [ebp - 0x22bc]
mov dword [ebp - 0x6f84], 0x6163d8
mov dword [ebp - 0x6f80], 0x616460
call fcn.00401ed0
lea ecx, [ebp - 0x22bc]
call fcn.00518880
push 4
lea ecx, [ebp - 0x2474]
mov byte [ebp - 4], 0x63
call fcn.00401ed0
lea ecx, [ebp - 0x2474]
call fcn.00518880
push 0xc
lea ecx, [ebp - 0x20d8]
mov byte [ebp - 4], 0x64
call fcn.00401eb0
lea ecx, [ebp - 0x20d8]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2730]
mov byte [ebp - 4], 0x65
call fcn.00401eb0
lea ecx, [ebp - 0x2730]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x279c]
mov byte [ebp - 4], 0x66
call fcn.00401eb0
lea ecx, [ebp - 0x279c]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x6dc0]
mov byte [ebp - 4], 0x67
call fcn.00401eb0
lea ecx, [ebp - 0x6dc0]
call fcn.005188a0
lea eax, [ebp - 0x6f84]
mov byte [ebp - 4], 0x68
mov dword [ebp - 0x6f40], eax
mov dword [ebp - 0x6f50], 2
nop
mov esi, dword [eax]
lea ecx, [ebp - 0x1f74]
push 0
push 0x20019
push esi
mov dword [ebp - 0x6f44], esi
call fcn.00518810
test al, al
je 0x4a0342
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f58], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.00518170
test al, al
je 0x4a0342
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x2120]
push 0x5fe504
push esi
call fcn.0051dda0
push 0
push 0x20019
lea ecx, [ebp - 0x2120]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x22bc]
call fcn.00518810
test al, al
je 0x4a0314
lea eax, [ebp - 0x6dc0]
mov dword [ebp - 0x6f5c], 0
push eax
push 0
lea ecx, [ebp - 0x22bc]
call fcn.00518170
test al, al
je 0x49ffd6
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6dc0]
lea ecx, [ebp - 0x279c]
push 0x5fe504
push dword [ebp - 0x6cb4]
push 0x5fe504
push esi
call fcn.0051dda0
push 0
push 0x20019
lea ecx, [ebp - 0x279c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2474]
call fcn.00518810
test al, al
je 0x49ffae
lea eax, [ebp - 0x20d8]
push eax
push 0x6164e8
lea ecx, [ebp - 0x2474]
call fcn.00518530
test al, al
je 0x49ffae
lea ecx, [ebp - 0x20d8]
call fcn.0051da30
test al, al
jne 0x49ffae
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x60ce44
lea ecx, [ebp - 0x20d8]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x49ffae
push 0
push 1
push 1
push 0
push 0x616500
lea ecx, [ebp - 0x20d8]
call fcn.0051c760
test eax, eax
je 0x49fd07
push 0
push 1
push 1
push 0
push 0x616510
lea ecx, [ebp - 0x20d8]
call fcn.0051c760
test eax, eax
jne 0x49ffae
push 0
push 1
push 1
push 0
push 0x616520
lea ecx, [ebp - 0x20d8]
call fcn.0051c760
test eax, eax
je 0x49fd43
push 0
push 1
push 1
push 0
push 0x61654c
lea ecx, [ebp - 0x20d8]
call fcn.0051c760
test eax, eax
jne 0x49ffae
push 0
push 1
push 1
push 0
push 0x616578
lea ecx, [ebp - 0x20d8]
call fcn.0051c760
test eax, eax
je 0x49fd7f
push 0
push 1
push 1
push 0
push 0x6165b0
lea ecx, [ebp - 0x20d8]
call fcn.0051c760
test eax, eax
jne 0x49ffae
push 0
push 1
push 1
push 0
push 0x6165e8
lea ecx, [ebp - 0x20d8]
call fcn.0051c760
test eax, eax
je 0x49fdbb
push 0
push 1
push 1
push 0
push 0x616614
lea ecx, [ebp - 0x20d8]
call fcn.0051c760
test eax, eax
jne 0x49ffae
push 0
push 1
push 1
push 0
push 0x61663c
lea ecx, [ebp - 0x20d8]
call fcn.0051c760
test eax, eax
je 0x49fdf7
push 0
push 1
push 1
push 0
push 0x616674
lea ecx, [ebp - 0x20d8]
call fcn.0051c760
test eax, eax
jne 0x49ffae
push 0
push 0x6166a8
lea ecx, [ebp - 0x20d8]
mov dword [ebp - 0x6f48], 0
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x28d4]
call fcn.0051ae40
lea ecx, [ebp - 0x28d4]
xor esi, esi
call fcn.0051afe0
test eax, eax
je 0x4a1098
push 1
push esi
lea ecx, [ebp - 0x28d4]
call fcn.0051aff0
push eax
lea ecx, [ebp - 0x2730]
call fcn.0051de00
mov ecx, eax
call fcn.0051da30
test al, al
jne 0x49fea5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x615b48
lea ecx, [edi + 0x24c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2730]
call fcn.0051c280
lea ecx, [ebp - 0x2730]
call fcn.0051dd30
xor edx, edx
mov ecx, eax
call fcn.00515590
test al, al
jne 0x4a1088
lea ecx, [ebp - 0x28d4]
inc esi
call fcn.0051afe0
cmp esi, eax
jb 0x49fe34
mov eax, dword [ebp - 0x6f48]
push 0
push 0
push 0
push eax
lea ecx, [ebp - 0x279c]
call fcn.0051dd30
push eax
push 0x60fb20
lea ecx, [ebp - 0x20d8]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xf
push dword [eax + 0xa4]
call fcn.004c0fd0
mov esi, eax
cmp esi, 0xffffffff
je 0x49ffa8
push 0
push 0
push 0
push 0
push 0
push 0x6164e8
push 0x60fb20
push 0
lea ecx, [ebp - 0x279c]
call fcn.0051dd30
push eax
push 0xf
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
cmp dword [ebp - 0x6f48], 0
mov ecx, 0x6152a0
push 0
push 0
push 0
push 0x60477c
mov eax, 0x60c078
cmove eax, ecx
lea ecx, [ebp - 0x279c]
push eax
push 0x6152b8
push 0x6166b0
call fcn.0051dd30
push eax
push 0x6166e8
push 0x6161dc
lea ecx, [ebp - 0x20d8]
call fcn.0051dd30
push eax
push 0x6160b0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
mov esi, dword [ebp - 0x6f44]
mov eax, dword [ebp - 0x6f5c]
lea ecx, [ebp - 0x6dc0]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x22bc]
mov dword [ebp - 0x6f5c], eax
call fcn.00518170
test al, al
jne 0x49fc15
lea eax, [ebp - 0x20d8]
push eax
push 0x6164e8
lea ecx, [ebp - 0x22bc]
call fcn.00518530
test al, al
je 0x4a0314
lea ecx, [ebp - 0x20d8]
call fcn.0051da30
test al, al
jne 0x4a0314
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x60ce44
lea ecx, [ebp - 0x20d8]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a0314
push 0
push 1
push 1
push 0
push 0x616500
lea ecx, [ebp - 0x20d8]
call fcn.0051c760
test eax, eax
je 0x4a0072
push 0
push 1
push 1
push 0
push 0x616510
lea ecx, [ebp - 0x20d8]
call fcn.0051c760
test eax, eax
jne 0x4a0314
push 0
push 1
push 1
push 0
push 0x616520
lea ecx, [ebp - 0x20d8]
call fcn.0051c760
test eax, eax
je 0x4a00ae
push 0
push 1
push 1
push 0
push 0x61654c
lea ecx, [ebp - 0x20d8]
call fcn.0051c760
test eax, eax
jne 0x4a0314
push 0
push 1
push 1
push 0
push 0x616578
lea ecx, [ebp - 0x20d8]
call fcn.0051c760
test eax, eax
je 0x4a00ea
push 0
push 1
push 1
push 0
push 0x6165b0
lea ecx, [ebp - 0x20d8]
call fcn.0051c760
test eax, eax
jne 0x4a0314
push 0
push 1
push 1
push 0
push 0x6165e8
lea ecx, [ebp - 0x20d8]
call fcn.0051c760
test eax, eax
je 0x4a0126
push 0
push 1
push 1
push 0
push 0x616614
lea ecx, [ebp - 0x20d8]
call fcn.0051c760
test eax, eax
jne 0x4a0314
push 0
push 1
push 1
push 0
push 0x61663c
lea ecx, [ebp - 0x20d8]
call fcn.0051c760
test eax, eax
je 0x4a0162
push 0
push 1
push 1
push 0
push 0x616674
lea ecx, [ebp - 0x20d8]
call fcn.0051c760
test eax, eax
jne 0x4a0314
push 0
push 0x6166a8
lea ecx, [ebp - 0x20d8]
mov dword [ebp - 0x6f48], 0
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x28d4]
call fcn.0051ae40
lea ecx, [ebp - 0x28d4]
xor esi, esi
call fcn.0051afe0
test eax, eax
je 0x4a10af
nop
push 1
push esi
lea ecx, [ebp - 0x28d4]
call fcn.0051aff0
push eax
lea ecx, [ebp - 0x2730]
call fcn.0051de00
mov ecx, eax
call fcn.0051da30
test al, al
jne 0x4a0211
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x615b48
lea ecx, [edi + 0x24c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2730]
call fcn.0051c280
lea ecx, [ebp - 0x2730]
call fcn.0051dd30
xor edx, edx
mov ecx, eax
call fcn.00515590
test al, al
jne 0x4a109f
lea ecx, [ebp - 0x28d4]
inc esi
call fcn.0051afe0
cmp esi, eax
jb 0x4a01a0
mov eax, dword [ebp - 0x6f48]
push 0
push 0
push 0
push eax
lea ecx, [ebp - 0x2120]
call fcn.0051dd30
push eax
push 0x60fb20
lea ecx, [ebp - 0x20d8]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xf
push dword [eax + 0xa4]
call fcn.004c0fd0
mov esi, eax
cmp esi, 0xffffffff
je 0x4a0314
push 0
push 0
push 0
push 0
push 0
push 0x6164e8
push 0x60fb20
push 0
lea ecx, [ebp - 0x2120]
call fcn.0051dd30
push eax
push 0xf
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
cmp dword [ebp - 0x6f48], 0
mov ecx, 0x6152a0
push 0
push 0
push 0
push 0x60477c
mov eax, 0x60c078
cmove eax, ecx
lea ecx, [ebp - 0x2120]
push eax
push 0x6152b8
push 0x6166b0
call fcn.0051dd30
push eax
push 0x6166e8
push 0x6161dc
lea ecx, [ebp - 0x20d8]
call fcn.0051dd30
push eax
push 0x6160b0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
mov eax, dword [ebp - 0x6f58]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f58], eax
call fcn.00518170
mov esi, dword [ebp - 0x6f44]
test al, al
jne 0x49fba0
mov eax, dword [ebp - 0x6f40]
add eax, 4
sub dword [ebp - 0x6f50], 1
mov dword [ebp - 0x6f40], eax
jne 0x49fb50
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa4]
call fcn.004f31a0
lea ecx, [ebp - 0x6dc0]
call fcn.00518890
lea ecx, [ebp - 0x279c]
call fcn.0051dfd0
lea ecx, [ebp - 0x2730]
call fcn.0051dfd0
lea ecx, [ebp - 0x20d8]
call fcn.0051dfd0
lea ecx, [ebp - 0x2474]
call fcn.005187c0
lea ecx, [ebp - 0x22bc]
call fcn.005187c0
lea ecx, [ebp - 0x28d4]
call fcn.0051b050
lea ecx, [ebp - 0x6cd8]
call fcn.004031b0
lea ecx, [ebp - 0x6cd4]
call fcn.004031b0
lea ecx, [ebp - 0x2190]
call fcn.0051dfd0
lea ecx, [ebp - 0x2450]
call fcn.0051dfd0
lea ecx, [ebp - 0x2b70]
call fcn.00511020
lea ecx, [ebp - 0x255c]
call fcn.0051dfd0
lea ecx, [ebp - 0x2314]
call fcn.0051dfd0
lea ecx, [ebp - 0x219c]
call fcn.0051dfd0
lea ecx, [ebp - 0x27b0]
call fcn.0051dfd0
lea ecx, [ebp - 0x2404]
call fcn.0051dfd0
lea ecx, [ebp - 0x2090]
mov byte [ebp - 4], 0x45
call fcn.0051dfd0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x610420
push 0x5fe504
lea ecx, [edi + 0x78]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.0051dda0
cmp byte [edi + 0x14], 0
jne 0x4b3e7a
test dword [edi + 0x34], 0x1000
jne 0x4a11b2
movsd xmm0, qword [edi + 0x2b0]
ucomisd xmm0, qword [0x6be528]
lahf
test ah, 0x44
jp 0x4a11b2
push 0
push 0x616710
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x616758
push dword [eax + 0x38]
call fcn.004f44b0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x26
push dword [eax + 0x34]
call fcn.004f1310
push 0xc
lea ecx, [ebp - 0x21d8]
call fcn.00401eb0
lea ecx, [ebp - 0x21d8]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2884]
mov byte [ebp - 4], 0x69
call fcn.00401eb0
lea ecx, [ebp - 0x2884]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2574]
mov byte [ebp - 4], 0x6a
call fcn.00401eb0
lea ecx, [ebp - 0x2574]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x26a4]
mov byte [ebp - 4], 0x6b
call fcn.00401eb0
lea ecx, [ebp - 0x26a4]
call fcn.0051e180
push 0
push 0x616790
lea ecx, [ebp - 0x1ff0]
mov byte [ebp - 4], 0x6c
call fcn.0050b8e0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004f31a0
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x4a07b6
lea eax, [edi + 0x3c]
push esi
mov ecx, eax
call fcn.004038d0
mov ecx, eax
call fcn.0051da30
test al, al
jne 0x4a07a9
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6167e0
push 0x616888
push esi
lea ecx, [edi + 0x3c]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
push str.HKU_
lea ecx, [ebp - 0x21d8]
call fcn.0051dda0
push 0
push 0x20019
lea ecx, [ebp - 0x21d8]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x4a07a9
xor eax, eax
mov dword [ebp - 0x6f58], eax
lea ecx, [ebp - 0x6cb4]
push ecx
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518170
test al, al
je 0x4a07a9
push 8
push 0
push 0x605724
push 0x616920
push 1
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x26a4]
call fcn.0051de00
mov ecx, eax
call fcn.0051b3f0
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x61693c
lea ecx, [ebp - 0x26a4]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a0793
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x21d8]
push 0x5fe504
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2574]
call fcn.0051dda0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2574]
call fcn.0051dd30
push eax
push esi
lea ecx, [edi + 0x4c]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x26a4]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 4
push 0x18
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4a0793
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [edi + 0x4c]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
push 0
lea ecx, [ebp - 0x2574]
call fcn.0051dd30
push eax
push 0x18
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x616970
push dword [ebp - 0x6cb4]
lea ecx, [edi + 0x4c]
push 0x6169ac
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x26a4]
call fcn.0051dd30
push eax
push 0x6169e0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
mov eax, dword [ebp - 0x6f58]
inc eax
mov dword [ebp - 0x6f58], eax
cmp eax, 2
jb 0x4a05f6
inc esi
lea eax, [edi + 0x3c]
cmp esi, dword [edi + 0x30]
jb 0x4a0576
cmp byte [edi + 0x14], 0
jne 0x4a1182
push 0
push 0x616a20
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
mov eax, dword [edi + 0x30]
lea ecx, [edi + 0x3c]
xor esi, esi
test eax, eax
je 0x4a0ae7
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051da30
test al, al
jne 0x4a0ad5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6167e0
push 0x616888
push esi
lea ecx, [edi + 0x3c]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
push str.HKU_
lea ecx, [ebp - 0x21d8]
call fcn.0051dda0
push 0
push 0x20019
lea ecx, [ebp - 0x21d8]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
lea eax, [ebp - 0x6cb4]
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.00518170
test al, al
je 0x4a0975
lea ecx, [edi + 0x84]
push 0
call fcn.0051dd30
push eax
push 0x616bb0
push 0x610704
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a0ad5
push 0
push 0
push 0
push 0
push 0x616a78
push esi
lea ecx, [edi + 0x4c]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x610704
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4a0ad5
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [edi + 0x4c]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
push 0
lea ecx, [ebp - 0x21d8]
call fcn.0051dd30
push eax
push 0x1a
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x616970
push 0x616a78
push 0x616bec
push esi
lea ecx, [edi + 0x4c]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x615318
push 0x610704
push 0x616c04
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x616c30
push 0x616888
push esi
lea ecx, [edi + 0x3c]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
push str.HKU_
lea ecx, [ebp - 0x21d8]
call fcn.0051dda0
lea ecx, [ebp - 0x21d8]
call fcn.0051dd30
xor edx, edx
mov ecx, eax
call fcn.00515590
test al, al
je 0x4a0ad5
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x616bb0
push 0x6108b0
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a0ad5
push 0
push 0
push 0
push 0
push 0x616b20
push esi
lea ecx, [edi + 0x4c]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6108b0
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4a0ad5
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [edi + 0x4c]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
push 0
lea ecx, [ebp - 0x21d8]
call fcn.0051dd30
push eax
push 0x1a
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x616970
push 0x616b20
push 0x616bec
push esi
lea ecx, [edi + 0x4c]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x615318
push 0x6108b0
push 0x616c04
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
mov eax, dword [edi + 0x30]
lea ecx, [edi + 0x3c]
inc esi
cmp esi, eax
jb 0x4a07e2
lea ecx, [edi + 0x3c]
cmp byte [edi + 0x14], 0
jne 0x4a1182
xor esi, esi
mov dword [ebp - 0x6fc0], 0x616ccc
mov dword [ebp - 0x6fbc], 0x616cf4
mov dword [ebp - 0x6ff8], 0x610a6c
mov dword [ebp - 0x6ff4], 0x610b80
mov dword [ebp - 0x6fa4], 0x616d20
mov dword [ebp - 0x6fa0], 0x616da8
mov dword [ebp - 0x6f44], esi
test eax, eax
je 0x4a0d34
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x616e38
push 0x616ee0
push 0x616f78
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
push str.HKU_
lea ecx, [ebp - 0x21d8]
call fcn.0051dda0
lea ecx, [ebp - 0x21d8]
call fcn.0051dd30
xor edx, edx
mov ecx, eax
call fcn.00515590
test al, al
je 0x4a0d17
xor esi, esi
mov dword [ebp - 0x6f58], esi
nop
cmp byte [edi + 0x14], 0
jne 0x4a0d11
lea ecx, [ebp - 0x21d8]
call fcn.0051dd30
mov edx, dword [ebp + esi*4 - 0x6fc0]
mov ecx, eax
call fcn.00515590
test al, al
je 0x4a0cf9
mov esi, dword [ebp + esi*4 - 0x6ff8]
lea ecx, [edi + 0x84]
push 0
call fcn.0051dd30
push eax
push 0x616bb0
push esi
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a0cf9
mov eax, dword [ebp - 0x6f58]
lea ecx, [edi + 0x4c]
push 0
push 0
push 0
push 0
push dword [ebp + eax*4 - 0x6fa4]
push dword [ebp - 0x6f44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push esi
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4a0cf9
mov eax, dword [ebp - 0x6f58]
lea ecx, [edi + 0x4c]
push 0
push 0
push 0
push 0
push 0
push dword [ebp + eax*4 - 0x6fc0]
push dword [ebp - 0x6f44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
push 0
lea ecx, [ebp - 0x21d8]
call fcn.0051dd30
push eax
push 0x1a
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
mov eax, dword [ebp - 0x6f58]
lea ecx, [edi + 0x4c]
push 0
push 0
push 0
push 0
push 0
push 0x616970
push dword [ebp + eax*4 - 0x6fa4]
push 0x616bec
push dword [ebp - 0x6f44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x615318
push esi
push 0x616c04
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
mov eax, dword [ebp - 0x6f58]
inc eax
mov dword [ebp - 0x6f58], eax
mov esi, eax
cmp eax, 2
jb 0x4a0ba0
mov esi, dword [ebp - 0x6f44]
inc esi
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6f44], esi
cmp esi, dword [edi + 0x30]
jb 0x4a0b40
cmp byte [edi + 0x14], 0
jne 0x4a1182
xor ecx, ecx
mov dword [ebp - 0x6fc0], 0x617014
mov dword [ebp - 0x6fbc], 0x617030
lea eax, [edi + 0x84]
mov dword [ebp - 0x6ff8], 0x610cac
mov dword [ebp - 0x6ff4], 0x610cd8
mov dword [ebp - 0x6fa4], 0x617058
mov dword [ebp - 0x6fa0], 0x6170e0
mov dword [ebp - 0x6f58], ecx
nop
mov esi, dword [ebp + ecx*4 - 0x6ff8]
mov ecx, eax
push 0
call fcn.0051dd30
push eax
push 0x616bb0
push esi
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a0ebe
mov eax, dword [ebp - 0x6f58]
lea ecx, [ebp - 0x2568]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + eax*4 - 0x6fc0]
push 0x617170
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x21d8]
call fcn.0051dda0
lea ecx, [ebp - 0x21d8]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
je 0x4a0ebe
mov eax, dword [ebp - 0x6f58]
mov ecx, edi
push 0
push 0
push 0
push 0
push dword [ebp + eax*4 - 0x6fa4]
mov eax, dword [edi + 8]
push 0x60fb20
push esi
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4a0ebe
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60fb20
lea ecx, [ebp - 0x21d8]
call fcn.0051dd30
push eax
push 0
push 0x1a
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
mov eax, dword [ebp - 0x6f58]
lea ecx, [ebp - 0x1f80]
push 0
push 0
push 0
push 0
push 0
push 0
push 0x616970
push dword [ebp + eax*4 - 0x6fa4]
push 0x616bec
push 0x6161dc
push esi
push 0x616c04
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
mov ecx, dword [ebp - 0x6f58]
lea eax, [edi + 0x84]
inc ecx
mov dword [ebp - 0x6f58], ecx
cmp ecx, 2
jb 0x4a0d80
push 4
lea ecx, [ebp - 0x2380]
call fcn.00401ed0
lea ecx, [ebp - 0x2380]
call fcn.00518880
push 4
lea ecx, [ebp - 0x2438]
mov byte [ebp - 4], 0x6d
call fcn.00401ed0
lea ecx, [ebp - 0x2438]
call fcn.00518880
xor esi, esi
mov byte [ebp - 4], 0x6e
cmp dword [edi + 0x30], esi
jbe 0x4a1159
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617260
push 0x6172e8
push 0x617360
push esi
lea ecx, [edi + 0x3c]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
push str.HKU_
lea ecx, [ebp - 0x21d8]
call fcn.0051dda0
push 0
push 0x20019
lea ecx, [ebp - 0x21d8]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2380]
call fcn.00518810
test al, al
je 0x4a114f
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f58], 0
push eax
push 0
lea ecx, [ebp - 0x2380]
call fcn.00518170
test al, al
je 0x4a114f
nop word [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617384
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x21d8]
push 0x5fe504
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2574]
call fcn.0051dda0
push 0
push 0x20019
lea ecx, [ebp - 0x2574]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2438]
call fcn.00518810
test al, al
je 0x4a105b
lea ecx, [ebp - 0x2438]
call fcn.00518070
cmp eax, 2
jb 0x4a105b
push 0
push 0
push 0
push 0
push 0x6171d8
push esi
lea ecx, [edi + 0x4c]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x610ef8
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
jne 0x4a10b6
mov eax, dword [ebp - 0x6f58]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x2380]
mov dword [ebp - 0x6f58], eax
call fcn.00518170
test al, al
jne 0x4a0fb0
jmp 0x4a114f
mov eax, 1
mov dword [ebp - 0x6f48], eax
jmp 0x49febf
xor eax, eax
jmp 0x49febf
mov eax, 1
mov dword [ebp - 0x6f48], eax
jmp 0x4a022b
xor eax, eax
jmp 0x4a022b
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [edi + 0x4c]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
push 0
lea ecx, [ebp - 0x2574]
call fcn.0051dd30
push eax
push 0x1a
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x616970
push 0x6171d8
push 0x616bec
push esi
lea ecx, [edi + 0x4c]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x615318
push 0x6173c0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
inc esi
cmp esi, dword [edi + 0x30]
jb 0x4a0f20
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004f31a0
lea ecx, [ebp - 0x2438]
call fcn.005187c0
lea ecx, [ebp - 0x2380]
call fcn.005187c0
lea ecx, [ebp - 0x26a4]
call fcn.0051dfd0
lea ecx, [ebp - 0x2574]
call fcn.0051dfd0
lea ecx, [ebp - 0x2884]
call fcn.0051dfd0
lea ecx, [ebp - 0x21d8]
mov byte [ebp - 4], 0x45
call fcn.0051dfd0
cmp byte [edi + 0x14], 0
jne 0x4b3e7a
test dword [edi + 0x34], 0x1000
jne 0x4a39d4
push 0
push 0x617420
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x616758
push dword [eax + 0x38]
call fcn.004f44b0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x26
push dword [eax + 0x34]
call fcn.004f1310
push 0xc
lea ecx, [ebp - 0x20e4]
call fcn.00401eb0
lea ecx, [ebp - 0x20e4]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2028]
mov byte [ebp - 4], 0x6f
call fcn.00401eb0
lea ecx, [ebp - 0x2028]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x23bc]
mov byte [ebp - 4], 0x70
call fcn.00401eb0
lea ecx, [ebp - 0x23bc]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2000]
mov byte [ebp - 4], 0x71
call fcn.00401eb0
lea ecx, [ebp - 0x2000]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x22d4]
mov byte [ebp - 4], 0x72
call fcn.00401eb0
lea ecx, [ebp - 0x22d4]
call fcn.0051e180
push 0x24
lea ecx, [ebp - 0x2540]
mov byte [ebp - 4], 0x73
call fcn.004021e0
lea ecx, [ebp - 0x2540]
call fcn.004edaa0
mov byte [ebp - 4], 0x74
xor esi, esi
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
mov dword [ebp - 0x6f40], esi
push dword [eax + 0xa8]
call fcn.004f31a0
push esi
push 0x617460
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
mov dword [ebp - 0x6f50], esi
cmp dword [edi + 0x30], esi
jbe 0x4a1906
mov esi, dword [ebp - 0x6f68]
lea eax, [edi + 0x44]
mov dword [ebp - 0x6f44], esi
lea ecx, [ebp - 0x22d4]
mov dword [ebp - 0x6f48], eax
call fcn.0051da30
test al, al
je 0x4a134a
lea eax, [ebp - 0x22d4]
push eax
push 1
lea ecx, [ebp - 0x2184]
call fcn.0051dd30
push dword [ebp - 0x6f50]
lea ecx, [edi + 0x44]
mov esi, eax
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
mov edx, esi
mov ecx, eax
call fcn.004c80c0
mov esi, dword [ebp - 0x6f44]
lea eax, [edi + 0x44]
mov dword [ebp - 0x6f48], eax
cmp byte [edi + 0x14], 0
jne 0x4a1900
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6174b0
lea ecx, [ebp - 0x2184]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f48]
push eax
push dword [ebp - 0x6f50]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x20e4]
call fcn.0051dda0
push 0x260
lea ecx, [ebp - 0x4cd8]
call fcn.00401f00
push 1
lea ecx, [ebp - 0x20e4]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x4cd8]
call fcn.004016e0
push 3
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x75
call fcn.0051cac0
lea ecx, [ebp - 0x4cd8]
call fcn.00401820
test al, al
je 0x4a18cc
nop dword [eax + eax]
push 1
lea ecx, [ebp - 0x4cd8]
call fcn.00401890
push eax
lea ecx, [ebp - 0x2028]
call fcn.0051e0b0
push 0x6174ec
lea ecx, [ebp - 0x2028]
call fcn.0051e020
test al, al
je 0x4a143e
push 0
push 1
push 1
push 0
push 0x6174fc
lea ecx, [ebp - 0x2028]
call fcn.0051c760
cmp eax, 1
jne 0x4a18b0
inc dword [ebp - 0x6f40]
lea ecx, [ebp - 0x4cd8]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617510
push 1
call fcn.00401890
push eax
lea ecx, [ebp - 0x20e4]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2028]
call fcn.0051dda0
push 0x100
lea ecx, [ebp - 0x2028]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2540]
call fcn.004ed860
test al, al
je 0x4a18b0
lea eax, [ebp - 0x2000]
push eax
push 0x605c04
push 0x617538
lea ecx, [ebp - 0x2540]
call fcn.004ed040
test eax, eax
je 0x4a1668
push 0
push 1
push 1
push 0
push 0x61754c
lea ecx, [ebp - 0x2000]
call fcn.0051c760
test eax, eax
jne 0x4a1668
push eax
push 1
push 1
push eax
push 0x61756c
lea ecx, [ebp - 0x2000]
call fcn.0051c760
test eax, eax
jne 0x4a1668
push 0x617588
lea ecx, [ebp - 0x2000]
call fcn.0051e060
test al, al
jne 0x4a1668
push 0
push 1
push 1
push 0
push 0x6175a0
lea ecx, [ebp - 0x2000]
call fcn.0051c760
test eax, eax
jne 0x4a1668
push eax
push 1
push 1
push eax
push 0x6175bc
lea ecx, [ebp - 0x2000]
call fcn.0051c760
test eax, eax
jne 0x4a1668
push eax
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x6175d4
lea ecx, [ebp - 0x2000]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a1668
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2000]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x617610
push 0
push 0x6f
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4a1668
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2028]
call fcn.0051dd30
push eax
push 0x617538
push 0x6f
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617624
lea ecx, [ebp - 0x2028]
call fcn.0051dd30
push eax
push 0x616bec
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x2000]
call fcn.0051dd30
push eax
push 0x617658
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
lea eax, [ebp - 0x2a68]
mov dword [ebp - 0x6ef0], 0
push eax
push 0x605c04
xorps xmm0, xmm0
lea ecx, [ebp - 0x2540]
push 0x617678
movups xmmword [ebp - 0x6f00], xmm0
call fcn.004ed140
test al, al
je 0x4a18b0
lea eax, [ebp - 0x2a68]
push eax
lea eax, [ebp - 0x6f00]
push eax
lea ecx, [ebp - 0x2540]
call fcn.004ec790
test al, al
je 0x4a18b0
lea eax, [ebp - 0x2000]
push eax
lea eax, [ebp - 0x6f00]
push eax
lea ecx, [ebp - 0x2540]
call fcn.004ecaa0
test eax, eax
je 0x4a188f
push 0
push 1
push 1
push 0
push 0x61754c
lea ecx, [ebp - 0x2000]
call fcn.0051c760
test eax, eax
jne 0x4a18b0
push eax
push 1
push 1
push eax
push 0x6176a4
lea ecx, [ebp - 0x2000]
call fcn.0051c760
test eax, eax
jne 0x4a18b0
push eax
push 1
push 1
push eax
push 0x61756c
lea ecx, [ebp - 0x2000]
call fcn.0051c760
test eax, eax
jne 0x4a18b0
push eax
push 1
push 1
push eax
push 0x6176c8
lea ecx, [ebp - 0x2000]
call fcn.0051c760
test eax, eax
jne 0x4a18b0
push eax
push 1
push 1
push eax
push 0x6175bc
lea ecx, [ebp - 0x2000]
call fcn.0051c760
test eax, eax
jne 0x4a18b0
push eax
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x6176e4
lea ecx, [ebp - 0x2000]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a188f
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2000]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x617710
push 0
push 0x6f
push dword [eax + 0xa8]
call fcn.004c0fd0
mov esi, eax
cmp esi, 0xffffffff
je 0x4a1889
mov ecx, dword [ebp - 0x6f44]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2028]
call fcn.0051dd30
push eax
push 0x617678
push 0x6f
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617624
lea ecx, [ebp - 0x2028]
call fcn.0051dd30
mov esi, dword [ebp - 0x6f44]
mov ecx, esi
push eax
push 0x616bec
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x2000]
call fcn.0051dd30
push eax
push 0x61772c
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
jmp 0x4a188f
mov esi, dword [ebp - 0x6f44]
lea eax, [ebp - 0x2a68]
push eax
lea eax, [ebp - 0x6f00]
push eax
lea ecx, [ebp - 0x2540]
call fcn.004ec790
test al, al
jne 0x4a16c1
lea ecx, [ebp - 0x4cd8]
call fcn.004017e0
test al, al
jne 0x4a13f0
lea eax, [edi + 0x44]
mov dword [ebp - 0x6f48], eax
lea ecx, [ebp - 0x4cd8]
mov byte [ebp - 4], 0x74
call fcn.00401730
mov eax, dword [ebp - 0x6f50]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f44], esi
cmp eax, dword [edi + 0x30]
mov dword [ebp - 0x6f50], eax
mov eax, dword [ebp - 0x6f48]
jb 0x4a12f2
mov esi, dword [ebp - 0x6f40]
cmp byte [edi + 0x14], 0
jne 0x4a398e
test esi, esi
jne 0x4a1939
lea ecx, [ebp - 0x22d4]
call fcn.0051da30
test al, al
je 0x4a1939
push esi
push 0x617760
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
jmp 0x4a398e
push 0
push 0x6177b0
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f40], 0
jbe 0x4a1cd0
mov esi, dword [ebp - 0x6f68]
mov dword [ebp - 0x6f48], esi
nop dword [eax + eax]
cmp byte [edi + 0x14], 0
jne 0x4a398e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6174b0
lea ecx, [ebp - 0x2184]
call fcn.0051dd30
push eax
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x20e4]
call fcn.0051dda0
push 0x260
lea ecx, [ebp - 0x4f38]
call fcn.00401f00
push 1
lea ecx, [ebp - 0x20e4]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x4f38]
call fcn.004016e0
push 3
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x76
call fcn.0051cac0
lea ecx, [ebp - 0x4f38]
call fcn.00401820
test al, al
je 0x4a1ca2
nop dword [eax + eax]
push 1
lea ecx, [ebp - 0x4f38]
call fcn.00401890
push eax
lea ecx, [ebp - 0x2028]
call fcn.0051e0b0
push 0x6174ec
lea ecx, [ebp - 0x2028]
call fcn.0051e020
test al, al
je 0x4a1a5e
push 0
push 1
push 1
push 0
push 0x6174fc
lea ecx, [ebp - 0x2028]
call fcn.0051c760
cmp eax, 1
jne 0x4a1c8f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617510
push 1
lea ecx, [ebp - 0x4f38]
call fcn.00401890
push eax
lea ecx, [ebp - 0x20e4]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2028]
call fcn.0051dda0
push 0x100
lea ecx, [ebp - 0x2028]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2540]
call fcn.004ed860
test al, al
je 0x4a1c8f
lea eax, [ebp - 0x2000]
push eax
push 0x605c04
push 0x6177f0
lea ecx, [ebp - 0x2540]
call fcn.004ed040
test eax, eax
je 0x4a1c8f
push 0
push 1
push 1
push 0
push 0x61754c
lea ecx, [ebp - 0x2000]
call fcn.0051c760
test eax, eax
jne 0x4a1c8f
push eax
push 1
push 1
push eax
push 0x6176a4
lea ecx, [ebp - 0x2000]
call fcn.0051c760
test eax, eax
jne 0x4a1c8f
push eax
push 1
push 1
push eax
push 0x61756c
lea ecx, [ebp - 0x2000]
call fcn.0051c760
test eax, eax
jne 0x4a1c8f
push eax
push 1
push 1
push eax
push 0x6176c8
lea ecx, [ebp - 0x2000]
call fcn.0051c760
test eax, eax
jne 0x4a1c8f
push eax
push 1
push 1
push eax
push 0x6175bc
lea ecx, [ebp - 0x2000]
call fcn.0051c760
test eax, eax
jne 0x4a1c8f
push eax
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x617860
lea ecx, [ebp - 0x2000]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a1c8f
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2000]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6178a0
push 0
push 0x70
push dword [eax + 0xa8]
call fcn.004c0fd0
mov esi, eax
cmp esi, 0xffffffff
je 0x4a1c89
mov ecx, dword [ebp - 0x6f48]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2028]
call fcn.0051dd30
push eax
push 0x6178d0
push 0x70
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617624
lea ecx, [ebp - 0x2028]
call fcn.0051dd30
mov esi, dword [ebp - 0x6f48]
mov ecx, esi
push eax
push 0x616bec
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x2000]
call fcn.0051dd30
push eax
push 0x617930
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
jmp 0x4a1c8f
mov esi, dword [ebp - 0x6f48]
lea ecx, [ebp - 0x4f38]
call fcn.004017e0
test al, al
jne 0x4a1a10
lea ecx, [ebp - 0x4f38]
mov byte [ebp - 4], 0x74
call fcn.00401730
mov eax, dword [ebp - 0x6f40]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f48], esi
mov dword [ebp - 0x6f40], eax
cmp eax, dword [edi + 0x30]
jb 0x4a1970
cmp byte [edi + 0x14], 0
jne 0x4a398e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617978
lea ecx, [edi + 0x24c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f98]
call fcn.0051dda0
push 0
push 0x6179d0
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f40], 0
jbe 0x4a22f1
mov esi, dword [ebp - 0x6f68]
mov dword [ebp - 0x6f50], esi
nop dword [eax]
cmp byte [edi + 0x14], 0
jne 0x4a398e
push 0xc
lea ecx, [ebp - 0x270c]
call fcn.00401eb0
lea ecx, [ebp - 0x270c]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2790]
mov byte [ebp - 4], 0x77
call fcn.00401eb0
lea ecx, [ebp - 0x2790]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2724]
mov byte [ebp - 4], 0x78
call fcn.00401eb0
lea ecx, [ebp - 0x2724]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2674]
mov byte [ebp - 4], 0x79
call fcn.00401eb0
lea ecx, [ebp - 0x2674]
call fcn.0051e180
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6174b0
lea ecx, [ebp - 0x2184]
mov byte [ebp - 4], 0x7a
call fcn.0051dd30
push eax
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x20e4]
call fcn.0051dda0
push 0x260
lea ecx, [ebp - 0x40f8]
call fcn.00401f00
push 1
lea ecx, [ebp - 0x20e4]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x40f8]
call fcn.004016e0
push 3
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x7b
call fcn.0051cac0
lea ecx, [ebp - 0x40f8]
call fcn.00401820
test al, al
je 0x4a2297
nop dword [eax + eax]
push 1
lea ecx, [ebp - 0x40f8]
call fcn.00401890
push eax
lea ecx, [ebp - 0x2028]
call fcn.0051e0b0
push 0x6174ec
lea ecx, [ebp - 0x2028]
call fcn.0051e020
test al, al
je 0x4a1e9e
push 0
push 1
push 1
push 0
push 0x6174fc
lea ecx, [ebp - 0x2028]
call fcn.0051c760
cmp eax, 1
jne 0x4a2284
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617510
push 1
lea ecx, [ebp - 0x40f8]
call fcn.00401890
push eax
lea ecx, [ebp - 0x20e4]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2028]
call fcn.0051dda0
push 0x100
lea ecx, [ebp - 0x2028]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2540]
call fcn.004ed860
test al, al
je 0x4a2284
lea eax, [ebp - 0x2a90]
mov dword [ebp - 0x6f04], 0
push eax
push 0x605c04
xorps xmm0, xmm0
lea ecx, [ebp - 0x2540]
push 0x617a04
movups xmmword [ebp - 0x6f14], xmm0
call fcn.004ed140
test al, al
je 0x4a2284
lea eax, [ebp - 0x2a90]
push eax
lea eax, [ebp - 0x6f14]
push eax
lea ecx, [ebp - 0x2540]
call fcn.004ecb60
test al, al
je 0x4a2284
nop word [eax + eax]
lea eax, [ebp - 0x270c]
push eax
lea eax, [ebp - 0x6f14]
push eax
lea ecx, [ebp - 0x2540]
call fcn.004ed100
test al, al
je 0x4a2263
lea ecx, [ebp - 0x270c]
call fcn.0051dd30
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.0051dd30
mov edx, esi
mov ecx, eax
call fcn.00515590
test al, al
jne 0x4a225d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617a30
lea ecx, [ebp - 0x270c]
call fcn.0051dd30
push eax
push 0x617a54
lea ecx, [ebp - 0x2724]
call fcn.0051dda0
lea eax, [ebp - 0x2790]
push eax
push 0x605c04
lea ecx, [ebp - 0x2724]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2540]
call fcn.004ed040
test eax, eax
je 0x4a225d
lea ecx, [ebp - 0x2790]
call fcn.0051dd30
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.0051dd30
mov edx, esi
mov ecx, eax
call fcn.00515590
test al, al
jne 0x4a225d
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x61693c
lea ecx, [ebp - 0x2790]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a225d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617a84
lea ecx, [ebp - 0x270c]
call fcn.0051dd30
push eax
push 0x617a54
lea ecx, [ebp - 0x2724]
call fcn.0051dda0
lea eax, [ebp - 0x2674]
push eax
push 0x605c04
lea ecx, [ebp - 0x2724]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2540]
call fcn.004ed040
test eax, eax
je 0x4a2108
push 0
push 1
push 1
push 5
push 0x5ff7bc
lea ecx, [ebp - 0x2674]
call fcn.0051c760
test eax, eax
jne 0x4a2108
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x617a94
push 1
lea ecx, [ebp - 0x40f8]
call fcn.00401890
push eax
lea ecx, [ebp - 0x20e4]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2674]
call fcn.0051c280
lea ecx, [ebp - 0x2674]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
je 0x4a225d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x270c]
call fcn.0051dd30
push eax
push 0x617a54
lea ecx, [ebp - 0x2724]
call fcn.0051dda0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2674]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f50]
push eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2790]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0
push 0x71
push dword [eax + 0xa8]
call fcn.004c0fd0
mov esi, eax
cmp esi, 0xffffffff
je 0x4a225d
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2674]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f50]
push eax
push 0
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2028]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2724]
call fcn.0051dd30
push eax
push 0x71
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0x617624
lea ecx, [ebp - 0x2674]
call fcn.0051dd30
mov esi, dword [ebp - 0x6f50]
mov ecx, esi
push eax
push 0x616138
call fcn.0051dd30
push eax
push 0x617ab0
lea ecx, [ebp - 0x270c]
call fcn.0051dd30
push eax
push 0x60940c
lea ecx, [ebp - 0x2790]
call fcn.0051dd30
push eax
push 0x617ad4
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
jmp 0x4a2263
mov esi, dword [ebp - 0x6f50]
lea eax, [ebp - 0x2a90]
push eax
lea eax, [ebp - 0x6f14]
push eax
lea ecx, [ebp - 0x2540]
call fcn.004ecb60
test al, al
jne 0x4a1f60
lea ecx, [ebp - 0x40f8]
call fcn.004017e0
test al, al
jne 0x4a1e50
lea ecx, [ebp - 0x40f8]
call fcn.00401730
lea ecx, [ebp - 0x2674]
call fcn.0051dfd0
lea ecx, [ebp - 0x2724]
call fcn.0051dfd0
lea ecx, [ebp - 0x2790]
call fcn.0051dfd0
lea ecx, [ebp - 0x270c]
mov byte [ebp - 4], 0x74
call fcn.0051dfd0
mov eax, dword [ebp - 0x6f40]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f50], esi
mov dword [ebp - 0x6f40], eax
cmp eax, dword [edi + 0x30]
jb 0x4a1d40
cmp byte [edi + 0x14], 0
jne 0x4a398e
push 0
push 0x617b00
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x6d68]
push 1
push 0
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6d70], eax
mov dword [ebp - 0x6d6c], 0x72
call fcn.0051e110
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0x7c
call fcn.0051dd30
lea ecx, [edi + 0x84]
mov dword [ebp - 0x6d5c], eax
mov dword [ebp - 0x6d58], 0
call fcn.0051dd30
mov dword [ebp - 0x6d54], eax
lea ecx, [ebp - 0x6d48]
lea eax, [ebp - 0x1ff0]
push 1
mov dword [ebp - 0x6d50], eax
mov eax, dword [edi + 4]
push 0x617b50
mov dword [ebp - 0x6d4c], eax
call fcn.0051e110
push 0xc
lea ecx, [ebp - 0x224c]
mov byte [ebp - 4], 0x7d
call fcn.00401eb0
lea ecx, [ebp - 0x224c]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2214]
mov byte [ebp - 4], 0x7e
call fcn.00401eb0
lea ecx, [ebp - 0x2214]
call fcn.0051e180
mov byte [ebp - 4], 0x7f
cmp byte [edi + 0x14], 0
jne 0x4a396d
xor eax, eax
mov dword [ebp - 0x6f48], eax
cmp dword [edi + 0x30], eax
jbe 0x4a2567
cmp byte [edi + 0x14], 0
jne 0x4a396d
push eax
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051df40
cmp eax, 3
jl 0x4a2551
lea eax, [ebp - 0x6d68]
push eax
push 1
lea ecx, [ebp - 0x2184]
call fcn.0051dd30
push dword [ebp - 0x6f48]
lea ecx, [edi + 0x44]
mov esi, eax
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
mov edx, esi
mov ecx, eax
call fcn.004c80c0
test al, al
je 0x4a2551
mov esi, dword [ebp - 0x6f48]
lea ecx, [edi + 0x4c]
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24ec]
mov dword [ebp - 0x6d58], eax
call fcn.0051dd30
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x224c]
call fcn.0051dda0
lea ecx, [ebp - 0x224c]
call fcn.0051dd30
mov ecx, eax
call fcn.00509340
test al, al
je 0x4a2551
lea ecx, [ebp - 0x224c]
call fcn.0051dd30
push eax
lea eax, [ebp - 0x6d70]
mov ecx, edi
push eax
call fcn.004b4c20
cmp byte [edi + 0x14], 0
jne 0x4a396d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25e4]
call fcn.0051dd30
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x224c]
call fcn.0051dda0
lea ecx, [ebp - 0x224c]
call fcn.0051dd30
mov ecx, eax
call fcn.00509340
test al, al
je 0x4a2551
push 0
lea ecx, [ebp - 0x224c]
call fcn.0051da50
lea ecx, [ebp - 0x224c]
call fcn.0051dd30
push eax
lea eax, [ebp - 0x6d70]
mov ecx, edi
push eax
call fcn.004b4c20
mov eax, dword [ebp - 0x6f48]
inc eax
mov dword [ebp - 0x6f48], eax
cmp eax, dword [edi + 0x30]
jb 0x4a23e3
cmp byte [edi + 0x14], 0
jne 0x4a396d
lea ecx, [ebp - 0x2644]
mov dword [ebp - 0x6d58], 0x60fb20
call fcn.0051dd30
push eax
lea eax, [ebp - 0x6d70]
mov ecx, edi
push eax
call fcn.004b4c20
cmp byte [edi + 0x14], 0
jne 0x4a396d
lea eax, [ebp - 0x2668]
push eax
lea ecx, [ebp - 0x224c]
call fcn.0051e080
push 0
lea ecx, [ebp - 0x224c]
call fcn.0051da50
lea ecx, [ebp - 0x224c]
call fcn.0051dd30
push eax
lea eax, [ebp - 0x6d70]
mov ecx, edi
push eax
call fcn.004b4c20
cmp byte [edi + 0x14], 0
jne 0x4a396d
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4a2647
mov eax, dword [ebp - 0x6f64]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6f40], eax
nop word [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617b70
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push str.HKU_
call fcn.0051dda0
add dword [ebp - 0x6f40], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4a2600
mov esi, dword [ebp - 0x6f64]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617c00
push dword [ebp - 0x6f70]
lea ecx, [esi + eax*4]
call fcn.0051dda0
cmp byte [ebp - 0x6f49], 0
je 0x4a26ae
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x617c00
push dword [ebp - 0x6f74]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.0051dda0
cmp dword [ebp - 0x6f6c], 0
mov dword [ebp - 0x6f5c], 0
jbe 0x4a28b7
mov eax, dword [ebp - 0x6f64]
mov esi, dword [ebp - 0x6f68]
sub eax, esi
mov dword [ebp - 0x6f40], eax
nop dword [eax]
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x4a2895
cmp byte [edi + 0x14], 0
jne 0x4a396d
lea eax, [ebp - 0x2214]
push eax
push 0x5fe50c
lea ecx, [ebp - 0x1f74]
call fcn.00518530
test al, al
je 0x4a2895
push 0
push 1
push 1
push 0
push 0x617c8c
lea ecx, [ebp - 0x2214]
call fcn.0051c760
lea ecx, [ebp - 0x2214]
mov dword [ebp - 0x6f80], eax
call fcn.0051df40
mov edx, dword [ebp - 0x6f80]
lea ecx, [edx + 0xa]
cmp eax, ecx
jle 0x4a2895
lea eax, [edx + 0xb]
push eax
lea ecx, [ebp - 0x2214]
call fcn.0051ca50
push 3
lea ecx, [ebp - 0x2214]
call fcn.0051be70
lea ecx, [ebp - 0x2214]
call fcn.0051da30
test al, al
jne 0x4a2895
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x6151c0
lea ecx, [ebp - 0x2214]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a2895
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2214]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6112d0
push 0
push 0x72
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4a2895
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.0051dd30
push eax
push 0x72
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617624
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x2214]
call fcn.0051dd30
push eax
push 0x617ca8
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
inc eax
cmp eax, dword [ebp - 0x6f6c]
mov dword [ebp - 0x6f5c], eax
mov eax, dword [ebp - 0x6f40]
jb 0x4a26e0
cmp byte [edi + 0x14], 0
jne 0x4a396d
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4a2927
mov eax, dword [ebp - 0x6f64]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6f40], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617d00
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push str.HKU_
call fcn.0051dda0
add dword [ebp - 0x6f40], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4a28e0
mov esi, dword [ebp - 0x6f64]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617d48
push dword [ebp - 0x6f70]
lea ecx, [esi + eax*4]
call fcn.0051dda0
cmp byte [ebp - 0x6f49], 0
je 0x4a298e
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x617d48
push dword [ebp - 0x6f74]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.0051dda0
push 0
push 0x617d90
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
mov esi, dword [ebp - 0x6f6c]
mov dword [ebp - 0x6f5c], 0
test esi, esi
je 0x4a2bea
mov eax, dword [ebp - 0x6f64]
mov esi, dword [ebp - 0x6f68]
sub eax, esi
mov dword [ebp - 0x6f40], eax
nop dword [eax]
cmp byte [edi + 0x14], 0
jne 0x4a2be4
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
lea eax, [ebp - 0x2000]
push eax
push 0x611484
lea ecx, [ebp - 0x1f74]
call fcn.00518530
test al, al
je 0x4a2bc2
lea eax, [ebp - 0x21b4]
mov dword [ebp - 0x21b4], 0
push eax
push 0x611524
lea ecx, [ebp - 0x1f74]
call fcn.005184a0
test al, al
je 0x4a2a46
cmp dword [ebp - 0x21b4], 0
jne 0x4a2bc2
push 0
push 1
push 1
push 0
push 0x61754c
lea ecx, [ebp - 0x2000]
call fcn.0051c760
test eax, eax
jne 0x4a2bc2
push eax
push 1
push 1
push eax
push 0x61756c
lea ecx, [ebp - 0x2000]
call fcn.0051c760
test eax, eax
jne 0x4a2bc2
push eax
push 1
push 1
push eax
push 0x6175bc
lea ecx, [ebp - 0x2000]
call fcn.0051c760
test eax, eax
jne 0x4a2bc2
push eax
push 1
push 1
push eax
push 0x6175a0
lea ecx, [ebp - 0x2000]
call fcn.0051c760
test eax, eax
jne 0x4a2bc2
push eax
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x617dd0
lea ecx, [ebp - 0x2000]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a2bc2
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2000]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x611484
push 0
push 0x74
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4a2bc2
push 0
push 0
push 0
push 0
push 0
push 0x611484
mov ecx, esi
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.0051dd30
push eax
push 0x74
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617624
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x2000]
call fcn.0051dd30
push eax
push 0x617e10
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
inc eax
cmp eax, dword [ebp - 0x6f6c]
mov dword [ebp - 0x6f5c], eax
mov eax, dword [ebp - 0x6f40]
jb 0x4a29d0
mov esi, dword [ebp - 0x6f6c]
cmp byte [edi + 0x14], 0
jne 0x4a396d
push 0xc
lea ecx, [ebp - 0x2680]
call fcn.00401eb0
lea ecx, [ebp - 0x2680]
call fcn.0051e180
mov byte [ebp - 4], 0x80
mov dword [ebp - 0x6f5c], 0
test esi, esi
je 0x4a2eb9
mov eax, dword [ebp - 0x6f64]
mov esi, dword [ebp - 0x6f68]
sub eax, esi
mov dword [ebp - 0x6f40], eax
cmp byte [edi + 0x14], 0
jne 0x4a2eb3
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
lea eax, [ebp - 0x2000]
push eax
push 0x6115c4
lea ecx, [ebp - 0x1f74]
call fcn.00518530
test al, al
je 0x4a2e91
lea eax, [ebp - 0x21b4]
mov dword [ebp - 0x21b4], 0
push eax
push 0x6116c4
lea ecx, [ebp - 0x1f74]
call fcn.005184a0
test al, al
je 0x4a2cac
cmp dword [ebp - 0x21b4], 0
je 0x4a2e91
push 0
push 1
push 1
push 0
push 0x61754c
lea ecx, [ebp - 0x2000]
call fcn.0051c760
test eax, eax
jne 0x4a2e91
push eax
push 1
push 1
push eax
push 0x61756c
lea ecx, [ebp - 0x2000]
call fcn.0051c760
test eax, eax
jne 0x4a2e91
push eax
push 1
push 1
push eax
push 0x6175bc
lea ecx, [ebp - 0x2000]
call fcn.0051c760
test eax, eax
jne 0x4a2e91
push eax
push 1
push 1
push eax
push 0x6175a0
lea ecx, [ebp - 0x2000]
call fcn.0051c760
test eax, eax
jne 0x4a2e91
push eax
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x617dd0
lea ecx, [ebp - 0x2000]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a2e91
lea eax, [ebp - 0x2680]
push eax
push 0x611690
lea ecx, [ebp - 0x1f74]
call fcn.00518530
test al, al
je 0x4a2e91
lea ecx, [ebp - 0x2680]
call fcn.0051da30
test al, al
jne 0x4a2e91
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617e60
lea ecx, [ebp - 0x2680]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2214]
call fcn.0051dda0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2000]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2214]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0
push 0x74
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4a2e91
push 0
push 0
push 0
push 0
push 0
push 0x6115c4
mov ecx, esi
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.0051dd30
push eax
push 0x74
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617624
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x2000]
call fcn.0051dd30
push eax
push 0x617e88
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
inc eax
cmp eax, dword [ebp - 0x6f6c]
mov dword [ebp - 0x6f5c], eax
mov eax, dword [ebp - 0x6f40]
jb 0x4a2c36
mov esi, dword [ebp - 0x6f6c]
cmp byte [edi + 0x14], 0
jne 0x4a3962
mov dword [ebp - 0x6f5c], 0
test esi, esi
je 0x4a3125
mov eax, dword [ebp - 0x6f64]
mov esi, dword [ebp - 0x6f68]
sub eax, esi
mov dword [ebp - 0x6f40], eax
nop dword [eax]
cmp byte [edi + 0x14], 0
jne 0x4a3962
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x4a3103
lea eax, [ebp - 0x21b4]
mov dword [ebp - 0x21b4], 0
push eax
push 0x617ee8
lea ecx, [ebp - 0x1f74]
call fcn.005184a0
test al, al
je 0x4a3103
cmp dword [ebp - 0x21b4], 4
jne 0x4a3103
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617f0c
lea ecx, [ecx + esi]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f98]
call fcn.0051dda0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x4a3103
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f58], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.005180d0
test al, al
je 0x4a3103
lea eax, [ebp - 0x2000]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f74]
call fcn.00518530
test al, al
je 0x4a30db
lea ecx, [ebp - 0x2000]
call fcn.0051da30
test al, al
jne 0x4a30db
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2000]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x611880
push 0
push 0x74
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4a30db
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
mov ecx, esi
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.0051dd30
push eax
push 0x74
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617624
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x2000]
call fcn.0051dd30
push eax
push 0x617f38
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
mov eax, dword [ebp - 0x6f58]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f58], eax
call fcn.005180d0
test al, al
jne 0x4a2fd2
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
inc eax
cmp eax, dword [ebp - 0x6f6c]
mov dword [ebp - 0x6f5c], eax
mov eax, dword [ebp - 0x6f40]
jb 0x4a2ef0
cmp byte [edi + 0x14], 0
jne 0x4a3962
push 0
push 0x617f80
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f40], 0
jbe 0x4a352d
mov esi, dword [ebp - 0x6f68]
nop dword [eax + eax]
cmp byte [edi + 0x14], 0
jne 0x4a3962
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6174b0
lea ecx, [ebp - 0x2184]
call fcn.0051dd30
push eax
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x20e4]
call fcn.0051dda0
push 0x260
lea ecx, [ebp - 0x4358]
call fcn.00401f00
push 1
lea ecx, [ebp - 0x20e4]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x4358]
call fcn.004016e0
push 3
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x81
call fcn.0051cac0
lea ecx, [ebp - 0x4358]
call fcn.00401820
test al, al
je 0x4a3505
nop dword [eax + eax]
push 1
lea ecx, [ebp - 0x4358]
call fcn.00401890
push eax
lea ecx, [ebp - 0x2028]
call fcn.0051e0b0
push 0x6174ec
lea ecx, [ebp - 0x2028]
call fcn.0051e020
test al, al
je 0x4a324e
push 0
push 1
push 1
push 0
push 0x6174fc
lea ecx, [ebp - 0x2028]
call fcn.0051c760
cmp eax, 1
jne 0x4a34f2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617510
push 1
lea ecx, [ebp - 0x4358]
call fcn.00401890
push eax
lea ecx, [ebp - 0x20e4]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2028]
call fcn.0051dda0
lea ecx, [ebp - 0x2028]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
je 0x4a33a0
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x616bb0
push 0x611984
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a33a0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2028]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x611984
push 0
push 0x73
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4a34f2
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2028]
call fcn.0051dd30
push eax
push 0
push 0x73
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617fb8
lea ecx, [ebp - 0x2028]
call fcn.0051dd30
push eax
push 0x616bec
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
push 0x611984
push 0x617ff0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x616bb0
push 0x611a80
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a34f2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x618014
push 1
lea ecx, [ebp - 0x4358]
call fcn.00401890
push eax
lea ecx, [ebp - 0x20e4]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2028]
call fcn.0051dda0
lea ecx, [ebp - 0x2028]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
je 0x4a34f2
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2028]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x611a80
push 0
push 0x73
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4a34f2
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2028]
call fcn.0051dd30
push eax
push 0
push 0x73
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617fb8
lea ecx, [ebp - 0x2028]
call fcn.0051dd30
push eax
push 0x616bec
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
push 0x611a80
push 0x617ff0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
lea ecx, [ebp - 0x4358]
call fcn.004017e0
test al, al
jne 0x4a3200
lea ecx, [ebp - 0x4358]
mov byte [ebp - 4], 0x80
call fcn.00401730
mov eax, dword [ebp - 0x6f40]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], eax
cmp eax, dword [edi + 0x30]
jb 0x4a3160
cmp byte [edi + 0x14], 0
jne 0x4a3962
lea eax, [ebp - 0x22d4]
push eax
lea ecx, [ebp - 0x2028]
call fcn.0051e080
push 1
lea ecx, [ebp - 0x2028]
call fcn.0051da50
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x618030
lea ecx, [ebp - 0x2028]
call fcn.0051c4c0
lea ecx, [ebp - 0x2028]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
je 0x4a371f
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x616bb0
push 0x611b50
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a371f
push 0
lea ecx, [ebp - 0x2028]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2540]
call fcn.004ed860
test al, al
je 0x4a371f
lea eax, [ebp - 0x29f4]
push eax
push 0x605c04
push 0x617538
lea ecx, [ebp - 0x2540]
call fcn.004ed140
test al, al
jne 0x4a3662
lea eax, [ebp - 0x29f4]
push eax
push 0x605c04
push 0x617678
lea ecx, [ebp - 0x2540]
call fcn.004ed140
test al, al
jne 0x4a3662
lea eax, [ebp - 0x29f4]
push eax
push 0x605c04
push 0x611108
lea ecx, [ebp - 0x2540]
call fcn.004ed140
test al, al
jne 0x4a3662
lea eax, [ebp - 0x29f4]
push eax
push 0x605c04
push 0x617a04
lea ecx, [ebp - 0x2540]
call fcn.004ed140
test al, al
je 0x4a371f
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2028]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x60fb20
push 0x611b50
push 0
push 0x73
push dword [eax + 0xa8]
call fcn.004c0fd0
mov esi, eax
cmp esi, 0xffffffff
je 0x4a371f
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60fb20
lea ecx, [ebp - 0x2028]
call fcn.0051dd30
push eax
push 0
push 0x73
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617624
lea ecx, [ebp - 0x2028]
call fcn.0051dd30
push eax
push 0x616bec
push 0x6161dc
push 0x618058
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x616bb0
push 0x611c50
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a3962
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4a37a7
mov eax, dword [ebp - 0x6f64]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6f40], eax
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617d00
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push str.HKU_
call fcn.0051dda0
add dword [ebp - 0x6f40], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4a3760
mov esi, dword [ebp - 0x6f64]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617d00
push dword [ebp - 0x6f70]
lea ecx, [esi + eax*4]
call fcn.0051dda0
cmp byte [ebp - 0x6f49], 0
je 0x4a380e
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x617d00
push dword [ebp - 0x6f74]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.0051dda0
cmp dword [ebp - 0x6f6c], 0
mov dword [ebp - 0x6f5c], 0
jbe 0x4a394f
mov eax, dword [ebp - 0x6f68]
sub eax, esi
mov dword [ebp - 0x6f40], eax
mov ecx, esi
call fcn.0051dd30
xor edx, edx
mov ecx, eax
call fcn.00515590
test al, al
je 0x4a3933
cmp byte [edi + 0x14], 0
jne 0x4a394f
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
lea ecx, [ecx + esi]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x611c50
push 0
push 0x73
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4a3933
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ecx + esi]
call fcn.0051dd30
push eax
push 0
mov ecx, esi
call fcn.0051dd30
push eax
push 0x73
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617fb8
mov ecx, esi
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x616bec
lea ecx, [ecx + esi]
call fcn.0051dd30
push eax
push 0x615318
push 0x611c50
push 0x617ff0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f5c], eax
cmp eax, dword [ebp - 0x6f6c]
jb 0x4a3833
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004f31a0
lea ecx, [ebp - 0x2680]
call fcn.0051dfd0
lea ecx, [ebp - 0x2214]
call fcn.0051dfd0
lea ecx, [ebp - 0x224c]
call fcn.0051dfd0
lea ecx, [ebp - 0x6d70]
call fcn.00402b30
lea ecx, [ebp - 0x2540]
call fcn.00401fd0
lea ecx, [ebp - 0x22d4]
call fcn.0051dfd0
lea ecx, [ebp - 0x2000]
call fcn.0051dfd0
lea ecx, [ebp - 0x23bc]
call fcn.0051dfd0
lea ecx, [ebp - 0x2028]
call fcn.0051dfd0
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x45
call fcn.0051dfd0
cmp byte [edi + 0x14], 0
jne 0x4b3e7a
test dword [edi + 0x34], 0x1000
jne 0x4a6cd3
push 0
push 0x6180b0
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x6180f0
push dword [eax + 0x38]
call fcn.004f44b0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x28
push dword [eax + 0x34]
call fcn.004f1310
mov eax, dword [edi + 0x30]
xor esi, esi
mov dword [ebp - 0x6fe8], 0x61812c
mov dword [ebp - 0x6fe4], 0x61813c
mov dword [ebp - 0x6fe0], 0x61814c
mov dword [ebp - 0x6fdc], 0x618164
mov dword [ebp - 0x6fd8], 0x618178
mov dword [ebp - 0x6fd4], 0x61818c
mov dword [ebp - 0x6fd0], 0x617588
mov dword [ebp - 0x6fcc], 0x6175bc
mov dword [ebp - 0x7008], 0x611d34
mov dword [ebp - 0x7004], 0x611d70
mov dword [ebp - 0x7000], 0x611d58
mov dword [ebp - 0x6ffc], 0x611d1c
mov dword [ebp - 0x6ff8], 0x611df4
mov dword [ebp - 0x6ff4], 0x611e74
test eax, eax
je 0x4a3b0d
mov eax, dword [ebp - 0x6f64]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6f40], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6181a8
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push str.HKU_
call fcn.0051dda0
add dword [ebp - 0x6f40], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4a3ac6
mov esi, dword [ebp - 0x6f64]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x618200
push dword [ebp - 0x6f70]
lea ecx, [esi + eax*4]
call fcn.0051dda0
cmp byte [ebp - 0x6f49], 0
je 0x4a3b74
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x618200
push dword [ebp - 0x6f74]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.0051dda0
push 0xc
lea ecx, [ebp - 0x2010]
call fcn.00401eb0
lea ecx, [ebp - 0x2010]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x23c8]
mov byte [ebp - 4], 0x82
call fcn.00401eb0
lea ecx, [ebp - 0x23c8]
call fcn.0051e180
mov byte [ebp - 4], 0x83
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004f31a0
push 0
push 0x618260
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
mov esi, dword [ebp - 0x6f6c]
mov dword [ebp - 0x6f5c], 0
test esi, esi
je 0x4a3e07
mov esi, dword [ebp - 0x6f68]
mov eax, dword [ebp - 0x6f64]
sub eax, esi
mov dword [ebp - 0x6f44], esi
mov dword [ebp - 0x6fbc], eax
cmp byte [edi + 0x14], 0
jne 0x4a3e01
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f80], eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x4a3dd9
xor eax, eax
mov dword [ebp - 0x6f58], eax
nop
lea ecx, [ebp - 0x2010]
push ecx
push dword [ebp + eax*4 - 0x7008]
lea ecx, [ebp - 0x1f74]
call fcn.00518530
test al, al
je 0x4a3dbd
lea ecx, [ebp - 0x2010]
call fcn.0051da30
test al, al
jne 0x4a3dbd
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x6182bc
lea ecx, [ebp - 0x2010]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a3dbd
xor esi, esi
push 0
push 1
push 1
push 0
push dword [ebp + esi*4 - 0x6fe8]
lea ecx, [ebp - 0x2010]
call fcn.0051c760
dec eax
cmp eax, 0x10
jbe 0x4a3dbd
inc esi
cmp esi, 8
jb 0x4a3ca4
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.0051dd30
push eax
mov eax, dword [ebp - 0x6f58]
mov ecx, edi
mov esi, dword [ebp + eax*4 - 0x7008]
mov eax, dword [edi + 8]
push esi
push 1
push 0x1f
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6fa0], eax
cmp eax, 0xffffffff
je 0x4a3dbd
push 0
push 0
push 0
lea ecx, [ebp - 0x2010]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f44]
push eax
push 0
push esi
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f80]
push eax
push 0
call fcn.0051dd30
push eax
push 0x1f
push dword [ebp - 0x6fa0]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617624
lea ecx, [ebp - 0x2010]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f44]
push eax
push 0x6182e0
call fcn.0051dd30
push eax
push 0x615318
push esi
push 0x6160b0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
mov eax, dword [ebp - 0x6f58]
inc eax
mov dword [ebp - 0x6f58], eax
cmp eax, 6
jb 0x4a3c40
mov esi, dword [ebp - 0x6f44]
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f44], esi
cmp eax, dword [ebp - 0x6f6c]
mov dword [ebp - 0x6f5c], eax
mov eax, dword [ebp - 0x6fbc]
jb 0x4a3c03
mov esi, dword [ebp - 0x6f6c]
cmp byte [edi + 0x14], 0
jne 0x4a6cb9
push 0x18
lea ecx, [ebp - 0x265c]
call fcn.00401ee0
lea ecx, [ebp - 0x265c]
call fcn.0051b0f0
mov byte [ebp - 4], 0x84
mov dword [ebp - 0x6f5c], 0
test esi, esi
je 0x4a40e8
mov esi, dword [ebp - 0x6f68]
mov eax, dword [ebp - 0x6f64]
sub eax, esi
mov dword [ebp - 0x6f44], esi
mov dword [ebp - 0x6fa0], eax
nop dword [eax]
cmp byte [edi + 0x14], 0
jne 0x4a6cae
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f80], eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
lea ecx, [ebp - 0x1f74]
call fcn.005187e0
test eax, eax
je 0x4a40c0
lea eax, [ebp - 0x2010]
push eax
push 0x611eac
lea ecx, [ebp - 0x1f74]
call fcn.00518530
test al, al
je 0x4a40c0
push 1
push 0x604a10
lea ecx, [ebp - 0x2010]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x265c]
call fcn.0051ae40
lea ecx, [ebp - 0x265c]
mov dword [ebp - 0x6f58], 0
call fcn.0051afe0
test eax, eax
je 0x4a40c0
nop dword [eax]
push dword [ebp - 0x6f58]
lea ecx, [ebp - 0x265c]
call fcn.0051aff0
push eax
lea ecx, [ebp - 0x2010]
call fcn.0051e0b0
lea ecx, [ebp - 0x2010]
call fcn.0051da30
test al, al
jne 0x4a40a3
mov byte [ebp - 0x6f5d], 1
xor esi, esi
nop dword [eax]
push 0
push 1
push 1
push 0
push dword [ebp + esi*4 - 0x6fe8]
lea ecx, [ebp - 0x2010]
call fcn.0051c760
dec eax
mov ecx, 0x10
cmp ecx, eax
lea ecx, [edi + 0x84]
push 0
sbb al, al
and byte [ebp - 0x6f5d], al
call fcn.0051dd30
push eax
push 0x6182bc
lea ecx, [ebp - 0x2010]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a409d
cmp byte [ebp - 0x6f5d], al
je 0x4a409d
inc esi
cmp esi, 7
jb 0x4a3f40
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x611eac
push 1
push 0x1f
push dword [eax + 0xa8]
call fcn.004c0fd0
mov esi, eax
cmp esi, 0xffffffff
je 0x4a409d
push 0
push 0
lea ecx, [ebp - 0x2010]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2010]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f44]
push eax
push 0
push 0x611eac
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f80]
push eax
push 0
call fcn.0051dd30
push eax
push 0x1f
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617624
lea ecx, [ebp - 0x2010]
call fcn.0051dd30
mov esi, dword [ebp - 0x6f44]
mov ecx, esi
push eax
push 0x6182e0
call fcn.0051dd30
push eax
push 0x615318
push 0x611eac
push 0x6160b0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
jmp 0x4a40a3
mov esi, dword [ebp - 0x6f44]
inc dword [ebp - 0x6f58]
lea ecx, [ebp - 0x265c]
call fcn.0051afe0
cmp dword [ebp - 0x6f58], eax
jb 0x4a3f00
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f44], esi
cmp eax, dword [ebp - 0x6f6c]
mov dword [ebp - 0x6f5c], eax
mov eax, dword [ebp - 0x6fa0]
jb 0x4a3e60
cmp byte [edi + 0x14], 0
jne 0x4a6cae
push 4
lea ecx, [ebp - 0x1fc4]
call fcn.00401ed0
lea ecx, [ebp - 0x1fc4]
call fcn.00518880
push 4
lea ecx, [ebp - 0x2084]
mov byte [ebp - 4], 0x85
call fcn.00401ed0
lea ecx, [ebp - 0x2084]
call fcn.00518880
mov byte [ebp - 4], 0x86
xor esi, esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x4a4189
mov eax, dword [ebp - 0x6f64]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6f40], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6182f8
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push str.HKU_
call fcn.0051dda0
add dword [ebp - 0x6f40], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4a4142
mov esi, dword [ebp - 0x6f64]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x618360
push dword [ebp - 0x6f70]
lea ecx, [esi + eax*4]
call fcn.0051dda0
cmp byte [ebp - 0x6f49], 0
je 0x4a41f0
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x618360
push dword [ebp - 0x6f74]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.0051dda0
push 0xc
lea ecx, [ebp - 0x2108]
call fcn.00401eb0
lea ecx, [ebp - 0x2108]
call fcn.0051e180
push 0
push 0x6183d0
lea ecx, [ebp - 0x1ff0]
mov byte [ebp - 4], 0x87
call fcn.0050b8e0
cmp dword [ebp - 0x6f6c], 0
mov dword [ebp - 0x6f5c], 0
jbe 0x4a454a
mov esi, dword [ebp - 0x6f68]
mov eax, dword [ebp - 0x6f64]
sub eax, esi
mov dword [ebp - 0x6f44], esi
mov dword [ebp - 0x6f40], eax
nop
cmp byte [edi + 0x14], 0
jne 0x4a6c8d
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x4a4522
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f58], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.00518170
test al, al
je 0x4a4522
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ecx + esi]
push 0x5fe504
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f98]
call fcn.0051dda0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fc4]
call fcn.00518810
test al, al
je 0x4a44fa
lea eax, [ebp - 0x2108]
push eax
push 0x60b684
lea ecx, [ebp - 0x1fc4]
call fcn.00518530
push 0
lea ecx, [ebp - 0x2108]
call fcn.0051dfe0
cmp word [eax], 0x40
jne 0x4a436d
push 0
lea ecx, [ebp - 0x2108]
call fcn.0051dd30
push eax
push 0x80
lea ecx, [ebp - 0x2108]
call fcn.0051d530
push 0
push 0x80
lea ecx, [ebp - 0x2108]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2108]
call fcn.0051dd30
push eax
call dword [0x5de61c]
lea eax, [ebp - 0x2010]
push eax
push 0x60eea4
lea ecx, [ebp - 0x1fc4]
call fcn.00518530
lea ecx, [ebp - 0x2108]
call fcn.0051da30
test al, al
je 0x4a43a6
lea ecx, [ebp - 0x2010]
call fcn.0051da30
test al, al
jne 0x4a44fa
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x618424
lea ecx, [ebp - 0x2010]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a44fa
xor esi, esi
push 0
push 1
push 1
push 0
push dword [ebp + esi*4 - 0x6fe8]
lea ecx, [ebp - 0x2010]
call fcn.0051c760
dec eax
cmp eax, 0x10
jbe 0x4a44f4
inc esi
cmp esi, 7
jb 0x4a43d6
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2108]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x20
push dword [eax + 0xa8]
call fcn.004c0fd0
mov esi, eax
cmp esi, 0xffffffff
je 0x4a44f4
push 0
push 0
push 0
lea ecx, [ebp - 0x2010]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f44]
push eax
push 0
push 0
call fcn.0051dd30
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
push 0x20
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617624
lea ecx, [ebp - 0x2010]
call fcn.0051dd30
mov esi, dword [ebp - 0x6f44]
mov ecx, esi
push eax
push 0x6182e0
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x2108]
call fcn.0051dd30
push eax
push 0x6160b0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
jmp 0x4a44fa
mov esi, dword [ebp - 0x6f44]
mov eax, dword [ebp - 0x6f58]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f58], eax
call fcn.00518170
test al, al
jne 0x4a42a3
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f44], esi
cmp eax, dword [ebp - 0x6f6c]
mov dword [ebp - 0x6f5c], eax
mov eax, dword [ebp - 0x6f40]
jb 0x4a4250
cmp byte [edi + 0x14], 0
jne 0x4a6c8d
push 0
push 0x618450
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
push 0xc
lea ecx, [ebp - 0x20b4]
call fcn.00401eb0
lea ecx, [ebp - 0x20b4]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2344]
mov byte [ebp - 4], 0x88
call fcn.00401eb0
lea ecx, [ebp - 0x2344]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x20fc]
mov byte [ebp - 4], 0x89
call fcn.00401eb0
lea ecx, [ebp - 0x20fc]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x21e4]
mov byte [ebp - 4], 0x8a
call fcn.00401eb0
lea ecx, [ebp - 0x21e4]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2338]
mov byte [ebp - 4], 0x8b
call fcn.00401eb0
lea ecx, [ebp - 0x2338]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x20c0]
mov byte [ebp - 4], 0x8c
call fcn.00401eb0
lea ecx, [ebp - 0x20c0]
call fcn.0051e180
push 0xfc8
lea ecx, [ebp - 0x6880]
mov byte [ebp - 4], 0x8d
call fcn.00401f50
lea ecx, [ebp - 0x6880]
call fcn.005117c0
mov byte [ebp - 4], 0x8e
xor esi, esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x4a468c
mov eax, dword [ebp - 0x6f64]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6f40], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x612778
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push str.HKU_
call fcn.0051dda0
add dword [ebp - 0x6f40], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4a4645
mov esi, dword [ebp - 0x6f64]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x612a48
push dword [ebp - 0x6f70]
lea ecx, [esi + eax*4]
call fcn.0051dda0
cmp byte [ebp - 0x6f49], 0
je 0x4a46f3
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x612a48
push dword [ebp - 0x6f74]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.0051dda0
cmp dword [ebp - 0x6f6c], 0
mov dword [ebp - 0x6f5c], 0
jbe 0x4a4bfd
mov eax, dword [ebp - 0x6f64]
mov esi, dword [ebp - 0x6f68]
sub eax, esi
mov dword [ebp - 0x6fa0], eax
nop
cmp byte [edi + 0x14], 0
jne 0x4a6c40
push 1
lea ecx, [eax + esi]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f98]
call fcn.0051de00
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x4a4bdb
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f58], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.005180d0
test al, al
je 0x4a4bdb
nop dword [eax]
mov ecx, dword [ebp - 0x6cb4]
call fcn.005163b0
test al, al
je 0x4a4bb3
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [edi + 0x24c]
push 0x618490
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x20c0]
call fcn.0051dda0
lea ecx, [ebp - 0x20c0]
call fcn.0051dd30
xor edx, edx
mov ecx, eax
call fcn.00515590
test al, al
jne 0x4a4bb3
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x20c0]
call fcn.0051dda0
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x20c0]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2344]
call fcn.0051c760
test eax, eax
jne 0x4a4bb3
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
lea ecx, [ebp - 0x20c0]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2344]
call fcn.0051c4c0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x2338]
call fcn.0051e0b0
lea eax, [ebp - 0x20b4]
mov ecx, edi
push eax
lea eax, [ebp - 0x20fc]
push eax
lea eax, [ebp - 0x2338]
push eax
call fcn.00499ad0
lea ecx, [ebp - 0x20fc]
call fcn.0051da30
test al, al
je 0x4a48b6
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x20fc]
call fcn.0051e0b0
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x6184a8
lea ecx, [ebp - 0x20fc]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a4bb3
push 0
push 1
push 1
push 0
push 0x6184bc
lea ecx, [ebp - 0x20fc]
call fcn.0051c760
cmp eax, 1
je 0x4a4bb3
push 0
push 1
push 1
push 0
push 0x6184d8
lea ecx, [ebp - 0x20fc]
call fcn.0051c760
cmp eax, 1
je 0x4a4bb3
push 0
push 1
push 1
push 0
push 0x5fe50c
lea ecx, [ebp - 0x20fc]
call fcn.0051c760
cmp eax, 1
je 0x4a4bb3
lea ecx, [ebp - 0x20b4]
call fcn.0051da30
lea ecx, [ebp - 0x20b4]
test al, al
je 0x4a4968
push 0x618500
call fcn.0051e0b0
jmp 0x4a4988
push 0
push 0
push 0x5fe50c
push 0x5ff6d4
call fcn.0051c000
push 0
lea ecx, [ebp - 0x20b4]
call fcn.0051d7b0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x607958
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2148]
call fcn.0051dda0
push 0
lea ecx, [ebp - 0x2148]
call fcn.0051dd30
push eax
lea eax, [ebp - 0x20b4]
mov ecx, edi
push eax
call fcn.00498030
lea ecx, [ebp - 0x20b4]
call fcn.0051dd30
push eax
push 0
call dword [0x5deaa4]
test eax, eax
jne 0x4a4bb3
lea ecx, [ebp - 0x20b4]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x6880]
call fcn.00511620
test al, al
je 0x4a4ab8
push 0x5fe50c
push str.CompanyName
lea ecx, [ebp - 0x6880]
call fcn.00511640
push eax
lea ecx, [ebp - 0x21e4]
call fcn.0051e0b0
push 0
push 1
push 1
push 0
push str.Microsoft
lea ecx, [ebp - 0x21e4]
call fcn.0051c760
cmp eax, 1
je 0x4a4bb3
push 0
push 1
push 1
push 0
push 0x61855c
lea ecx, [ebp - 0x21e4]
call fcn.0051c760
cmp eax, 1
je 0x4a4bb3
push 0
push 1
push 1
push 0
push 0x618578
lea ecx, [ebp - 0x21e4]
call fcn.0051c760
cmp eax, 1
je 0x4a4bb3
push 0
push 1
push 1
push 0
push 0x612090
lea ecx, [ebp - 0x21e4]
call fcn.0051c760
cmp eax, 1
je 0x4a4bb3
push 0
lea ecx, [ebp - 0x20b4]
call fcn.0051dd30
push eax
push 0
push 1
lea ecx, [ebp - 0x20b4]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x20fc]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x21
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4a4bb3
push 0
push dword [ebp - 0x6cb4]
mov ecx, esi
push 0
push 0
push 0
push 0
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x20b4]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
push 0x21
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617624
lea ecx, [ebp - 0x20b4]
call fcn.0051dd30
push eax
push 0x6185a0
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x20fc]
call fcn.0051dd30
push eax
push 0x6160b0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
mov eax, dword [ebp - 0x6f58]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f58], eax
call fcn.005180d0
test al, al
jne 0x4a4790
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
inc eax
cmp eax, dword [ebp - 0x6f6c]
mov dword [ebp - 0x6f5c], eax
mov eax, dword [ebp - 0x6fa0]
jb 0x4a4720
cmp byte [edi + 0x14], 0
jne 0x4a6c40
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4a4c67
mov eax, dword [ebp - 0x6f64]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6f40], eax
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60fc88
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push str.HKU_
call fcn.0051dda0
add dword [ebp - 0x6f40], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4a4c20
mov esi, dword [ebp - 0x6f64]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60fce0
push dword [ebp - 0x6f70]
lea ecx, [esi + eax*4]
call fcn.0051dda0
cmp byte [ebp - 0x6f49], 0
je 0x4a4cce
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x60fce0
push dword [ebp - 0x6f74]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.0051dda0
cmp dword [ebp - 0x6f6c], 0
mov dword [ebp - 0x6fb0], 0x6185b8
mov dword [ebp - 0x6fac], 0x6185f8
mov dword [ebp - 0x6fa8], 0x618618
mov dword [ebp - 0x6fa4], 0x618634
mov dword [ebp - 0x6fa0], 0x618650
mov dword [ebp - 0x6f40], 0
jbe 0x4a52e5
mov esi, dword [ebp - 0x6f68]
mov eax, dword [ebp - 0x6f64]
sub eax, esi
mov dword [ebp - 0x6f48], esi
mov dword [ebp - 0x6f80], eax
cmp byte [edi + 0x14], 0
jne 0x4a6c40
xor ecx, ecx
mov dword [ebp - 0x6f58], ecx
cmp byte [edi + 0x14], 0
jne 0x4a52c3
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + ecx*4 - 0x6fb0]
lea ecx, [eax + esi]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f98]
call fcn.0051dda0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x4a52a7
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f5c], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.00518170
test al, al
je 0x4a52a7
nop dword [eax + eax]
mov ecx, dword [ebp - 0x6cb4]
call fcn.005163b0
test al, al
je 0x4a527f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [edi + 0x24c]
push 0x618490
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x20c0]
call fcn.0051dda0
lea ecx, [ebp - 0x20c0]
call fcn.0051dd30
xor edx, edx
mov ecx, eax
call fcn.00515590
test al, al
jne 0x4a527f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x20c0]
call fcn.0051dda0
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x20c0]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2344]
call fcn.0051c760
test eax, eax
jne 0x4a527f
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
lea ecx, [ebp - 0x20c0]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2344]
call fcn.0051c4c0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x2338]
call fcn.0051e0b0
lea eax, [ebp - 0x20b4]
mov ecx, edi
push eax
lea eax, [ebp - 0x20fc]
push eax
lea eax, [ebp - 0x2338]
push eax
call fcn.00499ad0
lea ecx, [ebp - 0x20fc]
call fcn.0051da30
lea ecx, [ebp - 0x20fc]
test al, al
je 0x4a4efb
push dword [ebp - 0x6cb4]
call fcn.0051e0b0
jmp 0x4a4fbb
push 0
push 1
push 1
push 0
push 0x6184bc
call fcn.0051c760
cmp eax, 1
je 0x4a527f
push 0
push 1
push 1
push 0
push 0x6184d8
lea ecx, [ebp - 0x20fc]
call fcn.0051c760
cmp eax, 1
je 0x4a527f
push 0
push 1
push 1
push 0
push 0x618664
lea ecx, [ebp - 0x20fc]
call fcn.0051c760
cmp eax, 1
je 0x4a527f
push 0
push 1
push 1
push 0
push 0x618680
lea ecx, [ebp - 0x20fc]
call fcn.0051c760
cmp eax, 1
je 0x4a527f
push 0
push 1
push 1
push 0
push 0x6186a8
lea ecx, [ebp - 0x20fc]
call fcn.0051c760
cmp eax, 1
je 0x4a527f
push 0
push 1
push 1
push 0
push 0x6186c8
lea ecx, [ebp - 0x20fc]
call fcn.0051c760
cmp eax, 1
je 0x4a527f
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x6184a8
lea ecx, [ebp - 0x20fc]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a527f
lea ecx, [ebp - 0x20b4]
call fcn.0051da30
lea ecx, [ebp - 0x20b4]
test al, al
je 0x4a500a
push 0x618500
call fcn.0051e0b0
jmp 0x4a502a
push 0
push 0
push 0x5fe50c
push 0x5ff6d4
call fcn.0051c000
push 0
lea ecx, [ebp - 0x20b4]
call fcn.0051d7b0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x5fe504
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2148]
call fcn.0051dda0
push 0
lea ecx, [ebp - 0x2148]
call fcn.0051dd30
push eax
lea eax, [ebp - 0x20b4]
mov ecx, edi
push eax
call fcn.00498030
lea ecx, [ebp - 0x20b4]
call fcn.0051dd30
push eax
push 0
call dword [0x5deaa4]
test eax, eax
jne 0x4a527f
lea ecx, [ebp - 0x20b4]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x6880]
call fcn.00511620
test al, al
je 0x4a517b
push 0x5fe50c
push str.CompanyName
lea ecx, [ebp - 0x6880]
call fcn.00511640
push eax
lea ecx, [ebp - 0x21e4]
call fcn.0051e0b0
push 0
push 1
push 1
push 0
push str.Microsoft
lea ecx, [ebp - 0x21e4]
call fcn.0051c760
cmp eax, 1
je 0x4a527f
push 0
push 1
push 1
push 0
push 0x61855c
lea ecx, [ebp - 0x21e4]
call fcn.0051c760
cmp eax, 1
je 0x4a527f
push 0
push 1
push 1
push 0
push 0x618578
lea ecx, [ebp - 0x21e4]
call fcn.0051c760
cmp eax, 1
je 0x4a527f
push 0
push 1
push 1
push 0
push 0x6186f8
lea ecx, [ebp - 0x21e4]
call fcn.0051c760
cmp eax, 1
je 0x4a527f
push 0
push 1
push 1
push 0
push 0x612090
lea ecx, [ebp - 0x21e4]
call fcn.0051c760
cmp eax, 1
je 0x4a527f
push 0
lea ecx, [ebp - 0x20b4]
call fcn.0051dd30
push eax
push 0
push 1
lea ecx, [ebp - 0x20b4]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x20fc]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x21
push dword [eax + 0xa8]
call fcn.004c0fd0
mov esi, eax
cmp esi, 0xffffffff
je 0x4a5279
mov ecx, dword [ebp - 0x6f48]
push 0
push dword [ebp - 0x6cb4]
push 0
push 0
push 0
push 0
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x20b4]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x20c0]
call fcn.0051dd30
push eax
push 0x21
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617624
lea ecx, [ebp - 0x20b4]
call fcn.0051dd30
mov esi, dword [ebp - 0x6f48]
mov ecx, esi
push eax
push 0x6185a0
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x20fc]
call fcn.0051dd30
push eax
push 0x6160b0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
jmp 0x4a527f
mov esi, dword [ebp - 0x6f48]
mov eax, dword [ebp - 0x6f5c]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f5c], eax
call fcn.00518170
test al, al
jne 0x4a4dd0
mov ecx, dword [ebp - 0x6f58]
mov eax, dword [ebp - 0x6f80]
inc ecx
mov dword [ebp - 0x6f58], ecx
cmp ecx, 5
jb 0x4a4d43
mov ecx, dword [ebp - 0x6f40]
add esi, 0xc
inc ecx
mov dword [ebp - 0x6f48], esi
mov dword [ebp - 0x6f40], ecx
cmp ecx, dword [ebp - 0x6f6c]
jb 0x4a4d31
cmp byte [edi + 0x14], 0
jne 0x4a6c40
push 0
push 0x618720
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x6df8]
push 1
push 0x610468
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6e00], eax
mov dword [ebp - 0x6dfc], 0x23
call fcn.0051e110
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0x8f
call fcn.0051dd30
lea ecx, [edi + 0x84]
mov dword [ebp - 0x6dec], eax
mov dword [ebp - 0x6de8], 0
call fcn.0051dd30
mov dword [ebp - 0x6de4], eax
lea ecx, [ebp - 0x6dd8]
lea eax, [ebp - 0x1ff0]
push 1
mov dword [ebp - 0x6de0], eax
mov eax, dword [edi + 4]
push 0x618764
mov dword [ebp - 0x6ddc], eax
call fcn.0051e110
push 0xc
lea ecx, [ebp - 0x227c]
mov byte [ebp - 4], 0x90
call fcn.00401eb0
lea ecx, [ebp - 0x227c]
call fcn.0051e180
xor esi, esi
mov byte [ebp - 4], 0x91
cmp dword [edi + 0x30], esi
jbe 0x4a54e6
nop
cmp byte [edi + 0x14], 0
jne 0x4a6c2a
push esi
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051df40
cmp eax, 3
jl 0x4a54dc
push esi
lea ecx, [edi + 0x4c]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24ec]
mov dword [ebp - 0x6de8], eax
call fcn.0051dd30
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x227c]
call fcn.0051dda0
lea ecx, [ebp - 0x227c]
call fcn.0051dd30
mov ecx, eax
call fcn.00509340
test al, al
je 0x4a54dc
lea ecx, [ebp - 0x227c]
call fcn.0051dd30
push eax
lea eax, [ebp - 0x6e00]
mov ecx, edi
push eax
call fcn.004b4c20
cmp byte [edi + 0x14], 0
jne 0x4a6c2a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25e4]
call fcn.0051dd30
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x227c]
call fcn.0051dda0
lea ecx, [ebp - 0x227c]
call fcn.0051dd30
mov ecx, eax
call fcn.00509340
test al, al
je 0x4a54dc
push 0
lea ecx, [ebp - 0x227c]
call fcn.0051da50
lea ecx, [ebp - 0x227c]
call fcn.0051dd30
push eax
lea eax, [ebp - 0x6e00]
mov ecx, edi
push eax
call fcn.004b4c20
inc esi
cmp esi, dword [edi + 0x30]
jb 0x4a53b0
cmp byte [edi + 0x14], 0
jne 0x4a6c2a
lea ecx, [ebp - 0x2644]
mov dword [ebp - 0x6de8], 0x60fb20
call fcn.0051dd30
push eax
lea eax, [ebp - 0x6e00]
mov ecx, edi
push eax
call fcn.004b4c20
cmp byte [edi + 0x14], 0
lea ecx, [ebp - 0x227c]
jne 0x4a6c30
lea eax, [ebp - 0x2668]
push eax
call fcn.0051e080
push 0
lea ecx, [ebp - 0x227c]
call fcn.0051da50
lea ecx, [ebp - 0x227c]
call fcn.0051dd30
push eax
lea eax, [ebp - 0x6e00]
mov ecx, edi
push eax
call fcn.004b4c20
cmp byte [edi + 0x14], 0
jne 0x4a6c2a
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4a55c7
mov eax, dword [ebp - 0x6f64]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6f40], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x618788
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push str.HKU_
call fcn.0051dda0
add dword [ebp - 0x6f40], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4a5580
mov esi, dword [ebp - 0x6f64]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x618810
push dword [ebp - 0x6f70]
lea ecx, [esi + eax*4]
call fcn.0051dda0
cmp byte [ebp - 0x6f49], 0
je 0x4a562e
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x618810
push dword [ebp - 0x6f74]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.0051dda0
mov edx, dword [ebp - 0x6f6c]
test edx, edx
je 0x4a5817
mov eax, dword [ebp - 0x6f64]
mov esi, dword [ebp - 0x6f68]
sub eax, esi
mov dword [ebp - 0x6f40], eax
mov dword [ebp - 0x6f5c], edx
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x4a5801
lea eax, [ebp - 0x20c0]
push eax
push 0x5fe50c
lea ecx, [ebp - 0x1f74]
call fcn.00518530
test al, al
je 0x4a5801
push 0
push 1
push 1
push 0
push 0x618898
lea ecx, [ebp - 0x20c0]
call fcn.0051c760
lea ecx, [ebp - 0x20c0]
mov dword [ebp - 0x6f80], eax
call fcn.0051df40
mov edx, dword [ebp - 0x6f80]
lea ecx, [edx + 0xc]
cmp eax, ecx
jle 0x4a5801
lea eax, [edx + 0xd]
push eax
lea ecx, [ebp - 0x20c0]
call fcn.0051ca50
push 3
lea ecx, [ebp - 0x20c0]
call fcn.0051be70
lea ecx, [ebp - 0x20c0]
call fcn.0051da30
test al, al
jne 0x4a5801
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x61515c
lea ecx, [ebp - 0x20c0]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a5801
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x20c0]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6112d0
push 1
push 0x23
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4a5801
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.0051dd30
push eax
push 0x23
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617624
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x20c0]
call fcn.0051dd30
push eax
push 0x617ca8
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
mov eax, dword [ebp - 0x6f40]
add esi, 0xc
sub dword [ebp - 0x6f5c], 1
jne 0x4a5656
cmp byte [edi + 0x14], 0
jne 0x4a6c2a
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4a5887
mov eax, dword [ebp - 0x6f64]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6f40], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6188b8
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push str.HKU_
call fcn.0051dda0
add dword [ebp - 0x6f40], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4a5840
mov esi, dword [ebp - 0x6f64]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x618918
push dword [ebp - 0x6f70]
lea ecx, [esi + eax*4]
call fcn.0051dda0
cmp byte [ebp - 0x6f49], 0
je 0x4a58ee
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x618918
push dword [ebp - 0x6f74]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.0051dda0
push 0
push 0x618980
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
mov eax, dword [ebp - 0x6f6c]
xor ecx, ecx
mov dword [ebp - 0x6f40], ecx
test eax, eax
je 0x4a5deb
mov esi, dword [ebp - 0x6f68]
mov edx, dword [ebp - 0x6f64]
sub edx, esi
mov dword [ebp - 0x6f44], esi
mov dword [ebp - 0x6f50], edx
cmp byte [edi + 0x14], 0
jne 0x4a5de5
mov eax, dword [edi + 0x30]
cmp eax, 2
jbe 0x4a594d
add eax, 0xfffffffe
cmp ecx, eax
je 0x4a5dc1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [edx + esi]
push 0x6189d4
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f98]
call fcn.0051dda0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x4a5dbb
lea eax, [ebp - 0x2700]
mov dword [ebp - 0x2700], 0
push eax
push 0x612cdc
lea ecx, [ebp - 0x1f74]
call fcn.005184a0
test al, al
je 0x4a5dbb
cmp dword [ebp - 0x2700], 0
je 0x4a5dbb
mov ecx, dword [ebp - 0x6f50]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6189f0
lea ecx, [ecx + esi]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f98]
call fcn.0051dda0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x4a5dbb
lea eax, [ebp - 0x2010]
push eax
push 0x611d1c
lea ecx, [ebp - 0x1f74]
call fcn.00518530
test al, al
je 0x4a5ba8
lea ecx, [ebp - 0x2010]
call fcn.0051da30
test al, al
jne 0x4a5ba8
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x6189fc
lea ecx, [ebp - 0x2010]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a5ba8
xor esi, esi
push 0
push 1
push 1
push 0
push dword [ebp + esi*4 - 0x6fe8]
lea ecx, [ebp - 0x2010]
call fcn.0051c760
dec eax
cmp eax, 0x10
jbe 0x4a5ba2
inc esi
cmp esi, 7
jb 0x4a5a91
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.0051dd30
mov esi, dword [ebp - 0x6f44]
mov ecx, esi
push eax
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x611d1c
push 1
push 0x25
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4a5ba8
push 0
push 0
push 0
lea ecx, [ebp - 0x2010]
call fcn.0051dd30
push eax
push 0
push 0x611d1c
mov ecx, esi
call fcn.0051dd30
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
push 0x25
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617624
lea ecx, [ebp - 0x2010]
call fcn.0051dd30
push eax
push 0x6182e0
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
push 0x618a20
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
jmp 0x4a5ba8
mov esi, dword [ebp - 0x6f44]
cmp byte [edi + 0x14], 0
jne 0x4a5de5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x612c90
lea ecx, [ebp - 0x1f98]
call fcn.0051c4c0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x4a5dbb
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f58], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.005180d0
test al, al
je 0x4a5dbb
nop dword [eax]
nop dword [eax + eax]
mov eax, dword [ebp - 0x6cb4]
cmp word [eax], 0
je 0x4a5d93
push eax
lea ecx, [ebp - 0x2010]
call fcn.0051e0b0
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x6189fc
lea ecx, [ebp - 0x2010]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a5dbb
xor esi, esi
nop dword [eax]
push 0
push 1
push 1
push 0
push dword [ebp + esi*4 - 0x6fe8]
lea ecx, [ebp - 0x2010]
call fcn.0051c760
dec eax
cmp eax, 0x10
jbe 0x4a5d8d
inc esi
cmp esi, 7
jb 0x4a5c80
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x612d40
push 1
push 0x25
push dword [eax + 0xa8]
call fcn.004c0fd0
mov esi, eax
cmp esi, 0xffffffff
je 0x4a5d8d
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2010]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.0051dd30
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
push 0x25
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617624
lea ecx, [ebp - 0x2010]
call fcn.0051dd30
mov esi, dword [ebp - 0x6f44]
mov ecx, esi
push eax
push 0x6182e0
call fcn.0051dd30
push eax
push 0x615318
push 0x618a4c
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
jmp 0x4a5d93
mov esi, dword [ebp - 0x6f44]
mov eax, dword [ebp - 0x6f58]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f58], eax
call fcn.005180d0
test al, al
jne 0x4a5c30
mov edx, dword [ebp - 0x6f50]
mov eax, dword [ebp - 0x6f40]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f44], esi
mov ecx, eax
mov dword [ebp - 0x6f40], eax
cmp eax, dword [ebp - 0x6f6c]
jb 0x4a5930
mov eax, dword [ebp - 0x6f6c]
cmp byte [edi + 0x14], 0
jne 0x4a6c2a
xor ecx, ecx
mov dword [ebp - 0x6f40], ecx
test eax, eax
je 0x4a621e
mov esi, dword [ebp - 0x6f68]
mov edx, dword [ebp - 0x6f64]
sub edx, esi
mov dword [ebp - 0x6f50], esi
mov dword [ebp - 0x6f44], edx
nop
cmp byte [edi + 0x14], 0
jne 0x4a621e
mov eax, dword [edi + 0x30]
cmp eax, 2
jbe 0x4a5e3d
add eax, 0xfffffffe
cmp ecx, eax
je 0x4a61fa
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [edx + esi]
push 0x618a88
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f98]
call fcn.0051dda0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x4a61f4
lea eax, [ebp - 0x26fc]
mov dword [ebp - 0x26fc], 0
push eax
push 0x612de0
lea ecx, [ebp - 0x1f74]
call fcn.005184a0
test al, al
je 0x4a61f4
cmp dword [ebp - 0x26fc], 0
je 0x4a61f4
mov ecx, dword [ebp - 0x6f44]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x618abc
lea ecx, [ecx + esi]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f98]
call fcn.0051dda0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x4a61f4
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f58], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.00518170
test al, al
je 0x4a61f4
mov ecx, dword [ebp - 0x6f44]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ecx + esi]
push 0x618ad8
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f98]
call fcn.0051dda0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fc4]
call fcn.00518810
test al, al
je 0x4a61cc
lea eax, [ebp - 0x2108]
push eax
push 0x60b684
lea ecx, [ebp - 0x1fc4]
call fcn.00518530
push 0
lea ecx, [ebp - 0x2108]
call fcn.0051dfe0
cmp word [eax], 0x40
jne 0x4a600f
push 0
lea ecx, [ebp - 0x2108]
call fcn.0051dd30
push eax
push 0x80
lea ecx, [ebp - 0x2108]
call fcn.0051d530
push 0
push 0x80
lea ecx, [ebp - 0x2108]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2108]
call fcn.0051dd30
push eax
call dword [0x5de61c]
lea eax, [ebp - 0x2010]
push eax
push 0x60eea4
lea ecx, [ebp - 0x1fc4]
call fcn.00518530
lea ecx, [ebp - 0x2108]
call fcn.0051da30
test al, al
je 0x4a6048
lea ecx, [ebp - 0x2010]
call fcn.0051da30
test al, al
jne 0x4a61cc
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x6189fc
lea ecx, [ebp - 0x2010]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a61f4
xor esi, esi
push 0
push 1
push 1
push 0
push dword [ebp + esi*4 - 0x6fe8]
lea ecx, [ebp - 0x2010]
call fcn.0051c760
dec eax
cmp eax, 0x10
jbe 0x4a61c6
inc esi
cmp esi, 7
jb 0x4a6078
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617e60
lea ecx, [ebp - 0x2108]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x20c0]
call fcn.0051dda0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f50]
push eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x20c0]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x25
push dword [eax + 0xa8]
call fcn.004c0fd0
mov esi, eax
cmp esi, 0xffffffff
je 0x4a61c6
push 0
push 0
push 0
lea ecx, [ebp - 0x2010]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f50]
push eax
push 0
push 0
call fcn.0051dd30
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
push 0x25
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617624
lea ecx, [ebp - 0x2010]
call fcn.0051dd30
mov esi, dword [ebp - 0x6f50]
mov ecx, esi
push eax
push 0x6182e0
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x2108]
call fcn.0051dd30
push eax
push 0x618af4
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
jmp 0x4a61cc
mov esi, dword [ebp - 0x6f50]
mov eax, dword [ebp - 0x6f58]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f58], eax
call fcn.00518170
test al, al
jne 0x4a5f45
mov edx, dword [ebp - 0x6f44]
mov eax, dword [ebp - 0x6f40]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f50], esi
mov ecx, eax
mov dword [ebp - 0x6f40], eax
cmp eax, dword [ebp - 0x6f6c]
jb 0x4a5e20
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4a627d
mov eax, dword [ebp - 0x6f64]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6f40], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x618b2c
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push str.HKU_
call fcn.0051dda0
add dword [ebp - 0x6f40], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4a6236
mov esi, dword [ebp - 0x6f64]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x618b58
push dword [ebp - 0x6f70]
lea ecx, [esi + eax*4]
call fcn.0051dda0
cmp byte [ebp - 0x6f49], 0
je 0x4a62e4
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x618b58
push dword [ebp - 0x6f74]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.0051dda0
push 0xc
lea ecx, [ebp - 0x268c]
call fcn.00401eb0
lea ecx, [ebp - 0x268c]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x25a8]
mov byte [ebp - 4], 0x92
call fcn.00401eb0
lea ecx, [ebp - 0x25a8]
call fcn.0051e180
push 0
push 0x618ca0
lea ecx, [ebp - 0x1ff0]
mov byte [ebp - 4], 0x93
call fcn.0050b8e0
xor ecx, ecx
mov dword [ebp - 0x6f48], ecx
cmp dword [ebp - 0x6f6c], ecx
jbe 0x4a66fe
mov esi, dword [ebp - 0x6f68]
mov edx, dword [ebp - 0x6f64]
sub edx, esi
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f44], edx
nop dword [eax]
cmp byte [edi + 0x14], 0
jne 0x4a6c14
mov eax, dword [edi + 0x30]
cmp eax, 2
jbe 0x4a637d
add eax, 0xfffffffe
cmp ecx, eax
je 0x4a66da
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [edx + esi]
push 0x618d00
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f98]
call fcn.0051dda0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x4a650c
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x618d54
push 0x612e54
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a650c
lea eax, [ebp - 0x268c]
push eax
push 0x612e6c
lea ecx, [ebp - 0x1f74]
call fcn.00518530
lea eax, [ebp - 0x28bc]
push eax
push 0x612e84
lea ecx, [ebp - 0x1f74]
call fcn.005184a0
lea ecx, [ebp - 0x268c]
call fcn.0051da30
test al, al
jne 0x4a650c
cmp dword [ebp - 0x28bc], 0
je 0x4a650c
push 0
push 0
push 0
push 0
push 0x618b88
mov ecx, esi
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x612e54
push 1
push 0x24
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4a650c
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.0051dd30
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
push 0x24
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x616970
push 0x618b88
push 0x616bec
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
push 0x612e54
push 0x617ff0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x618d54
push 0x612f40
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a66d4
mov ecx, dword [ebp - 0x6f44]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x618d78
lea ecx, [ecx + esi]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f98]
call fcn.0051dda0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x4a66d4
lea eax, [ebp - 0x25a8]
push eax
push 0x612f74
lea ecx, [ebp - 0x1f74]
call fcn.00518530
test al, al
je 0x4a66d4
lea ecx, [ebp - 0x268c]
call fcn.0051da30
test al, al
jne 0x4a66d4
push 0
push 0
push 0x5fe50c
push 0x5ff7b8
lea ecx, [ebp - 0x25a8]
call fcn.0051c000
push 0
push 1
push 1
push 0
push 0x612f58
lea ecx, [ebp - 0x25a8]
call fcn.0051c760
lea ecx, [ebp - 0x25a8]
mov esi, eax
call fcn.0051df40
sub eax, 0xb
cmp esi, eax
mov esi, dword [ebp - 0x6f40]
je 0x4a66d4
push 0
push 0
push 0
push 0
push 0x618c08
mov ecx, esi
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x612f40
push 1
push 0x24
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4a66d4
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.0051dd30
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
push 0x24
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x616970
push 0x618c08
push 0x616bec
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
push 0x612f40
push 0x617ff0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
mov edx, dword [ebp - 0x6f44]
mov eax, dword [ebp - 0x6f48]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov ecx, eax
mov dword [ebp - 0x6f48], eax
cmp eax, dword [ebp - 0x6f6c]
jb 0x4a6360
cmp byte [edi + 0x14], 0
jne 0x4a6c14
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x618d54
push 0x613008
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a6c14
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4a678e
mov eax, dword [ebp - 0x6f64]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6f40], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x618dc0
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push str.HKU_
call fcn.0051dda0
add dword [ebp - 0x6f40], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4a6747
mov esi, dword [ebp - 0x6f64]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x618dc0
push dword [ebp - 0x6f70]
lea ecx, [esi + eax*4]
call fcn.0051dda0
cmp byte [ebp - 0x6f49], 0
je 0x4a67f5
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x618dc0
push dword [ebp - 0x6f74]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.0051dda0
cmp dword [ebp - 0x6f6c], 0
mov dword [ebp - 0x6f5c], 0
jbe 0x4a69c4
mov eax, dword [ebp - 0x6f68]
sub eax, esi
mov dword [ebp - 0x6f40], eax
nop word [eax + eax]
mov ecx, esi
call fcn.0051dd30
xor edx, edx
mov ecx, eax
call fcn.00515590
test al, al
je 0x4a69a8
cmp byte [edi + 0x14], 0
jne 0x4a6c14
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x612cbc
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2120]
call fcn.0051dda0
lea ecx, [ebp - 0x2120]
call fcn.0051dd30
mov edx, 0x612cdc
mov ecx, eax
call fcn.00515590
test al, al
jne 0x4a68d1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61304c
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2120]
call fcn.0051dda0
lea ecx, [ebp - 0x2120]
call fcn.0051dd30
xor edx, edx
mov ecx, eax
call fcn.00515590
test al, al
je 0x4a69a8
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
add ecx, esi
push 0x618e20
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x613008
push 1
push 0x24
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4a69a8
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [esi + ecx]
call fcn.0051dd30
push eax
push 0
mov ecx, esi
call fcn.0051dd30
push eax
push 0x24
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0x616970
push 0x618e20
push 0x616bec
lea ecx, [esi + ecx]
call fcn.0051dd30
push eax
push 0x615318
push 0x613008
push 0x617ff0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f5c], eax
cmp eax, dword [ebp - 0x6f6c]
jb 0x4a6820
cmp byte [edi + 0x14], 0
jne 0x4a6c14
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x618d54
push 0x6130d4
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a6c14
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4a6a57
mov eax, dword [ebp - 0x6f64]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6f40], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x618ec8
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push str.HKU_
call fcn.0051dda0
add dword [ebp - 0x6f40], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4a6a10
mov esi, dword [ebp - 0x6f64]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x618ec8
push dword [ebp - 0x6f70]
lea ecx, [esi + eax*4]
call fcn.0051dda0
cmp byte [ebp - 0x6f49], 0
je 0x4a6abe
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x618ec8
push dword [ebp - 0x6f74]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.0051dda0
mov edx, dword [ebp - 0x6f6c]
test edx, edx
je 0x4a6bfa
mov eax, dword [ebp - 0x6f64]
mov esi, dword [ebp - 0x6f68]
sub eax, esi
mov dword [ebp - 0x6f40], eax
mov dword [ebp - 0x6f5c], edx
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fc4]
call fcn.00518810
test al, al
je 0x4a6be4
lea ecx, [ebp - 0x1fc4]
call fcn.00518070
cmp eax, 1
jbe 0x4a6be4
push 0
push 0
push 0
push 0
push 0x618f30
mov ecx, esi
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6130d4
push 1
push 0x24
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4a6be4
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.0051dd30
push eax
push 0x24
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x616970
push 0x618f30
push 0x616bec
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
push 0x618fa0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
mov eax, dword [ebp - 0x6f40]
add esi, 0xc
sub dword [ebp - 0x6f5c], 1
jne 0x4a6ae6
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004f31a0
mov ecx, edi
call fcn.00498760
lea ecx, [ebp - 0x25a8]
call fcn.0051dfd0
lea ecx, [ebp - 0x268c]
call fcn.0051dfd0
lea ecx, [ebp - 0x227c]
call fcn.0051dfd0
lea ecx, [ebp - 0x6e00]
call fcn.00402b30
lea ecx, [ebp - 0x6880]
call fcn.00401f20
lea ecx, [ebp - 0x20c0]
call fcn.0051dfd0
lea ecx, [ebp - 0x2338]
call fcn.0051dfd0
lea ecx, [ebp - 0x21e4]
call fcn.0051dfd0
lea ecx, [ebp - 0x20fc]
call fcn.0051dfd0
lea ecx, [ebp - 0x2344]
call fcn.0051dfd0
lea ecx, [ebp - 0x20b4]
call fcn.0051dfd0
lea ecx, [ebp - 0x2108]
call fcn.0051dfd0
lea ecx, [ebp - 0x2084]
call fcn.005187c0
lea ecx, [ebp - 0x1fc4]
call fcn.005187c0
lea ecx, [ebp - 0x265c]
call fcn.0051b050
lea ecx, [ebp - 0x23c8]
call fcn.0051dfd0
lea ecx, [ebp - 0x2010]
mov byte [ebp - 4], 0x45
call fcn.0051dfd0
cmp byte [edi + 0x14], 0
jne 0x4b3e7a
test dword [edi + 0x34], 0x1000
jne 0x4a9584
push 0
push 0x619000
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x619038
push dword [eax + 0x38]
call fcn.004f44b0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x2d
push dword [eax + 0x34]
call fcn.004f1310
push 0xc
lea ecx, [ebp - 0x20cc]
call fcn.00401eb0
lea ecx, [ebp - 0x20cc]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2034]
mov byte [ebp - 4], 0x94
call fcn.00401eb0
lea ecx, [ebp - 0x2034]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x23d4]
mov byte [ebp - 4], 0x95
call fcn.00401eb0
lea ecx, [ebp - 0x23d4]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x1fd0]
mov byte [ebp - 4], 0x96
call fcn.00401eb0
lea ecx, [ebp - 0x1fd0]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x22b8]
mov byte [ebp - 4], 0x97
call fcn.00401eb0
lea ecx, [ebp - 0x22b8]
call fcn.0051e180
xor esi, esi
mov byte [ebp - 4], 0x98
push 0x24
lea ecx, [ebp - 0x251c]
mov dword [ebp - 0x6f40], esi
call fcn.004021e0
lea ecx, [ebp - 0x251c]
call fcn.004edaa0
mov byte [ebp - 4], 0x99
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004f31a0
push esi
push 0x619070
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
mov dword [ebp - 0x6f48], esi
cmp dword [edi + 0x30], esi
jbe 0x4a7483
mov esi, dword [ebp - 0x6f68]
lea eax, [edi + 0x44]
mov dword [ebp - 0x6f44], esi
lea ecx, [ebp - 0x22b8]
mov dword [ebp - 0x6f50], eax
call fcn.0051da30
test al, al
je 0x4a6e6b
lea eax, [ebp - 0x22b8]
push eax
push 0
lea ecx, [ebp - 0x2184]
call fcn.0051dd30
push dword [ebp - 0x6f48]
lea ecx, [edi + 0x44]
mov esi, eax
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
mov edx, esi
mov ecx, eax
call fcn.004c80c0
mov esi, dword [ebp - 0x6f44]
lea eax, [edi + 0x44]
mov dword [ebp - 0x6f50], eax
cmp byte [edi + 0x14], 0
jne 0x4a747d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6190bc
lea ecx, [ebp - 0x2184]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f50]
push eax
push dword [ebp - 0x6f48]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x20cc]
call fcn.0051dda0
push 0x260
lea ecx, [ebp - 0x5198]
call fcn.00401f00
push 1
lea ecx, [ebp - 0x20cc]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x5198]
call fcn.004016e0
push 3
lea ecx, [ebp - 0x20cc]
mov byte [ebp - 4], 0x9a
call fcn.0051cac0
lea ecx, [ebp - 0x5198]
call fcn.00401820
test al, al
je 0x4a7449
nop dword [eax]
push 1
lea ecx, [ebp - 0x5198]
call fcn.00401890
push eax
lea ecx, [ebp - 0x2034]
call fcn.0051e0b0
push 0x6174ec
lea ecx, [ebp - 0x2034]
call fcn.0051e020
test al, al
je 0x4a6f5e
push 0
push 1
push 1
push 0
push 0x6174fc
lea ecx, [ebp - 0x2034]
call fcn.0051c760
cmp eax, 1
jne 0x4a742d
inc dword [ebp - 0x6f40]
lea ecx, [ebp - 0x5198]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617510
push 1
call fcn.00401890
push eax
lea ecx, [ebp - 0x20cc]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2034]
call fcn.0051dda0
push 0x100
lea ecx, [ebp - 0x2034]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x251c]
call fcn.004ed860
test al, al
je 0x4a742d
lea eax, [ebp - 0x1fd0]
push eax
push 0x605c04
push 0x617538
lea ecx, [ebp - 0x251c]
call fcn.004ed040
test eax, eax
je 0x4a71b6
push 0
push 1
push 1
push 0
push 0x61754c
lea ecx, [ebp - 0x1fd0]
call fcn.0051c760
test eax, eax
jne 0x4a71b6
push eax
push 1
push 1
push eax
push 0x61756c
lea ecx, [ebp - 0x1fd0]
call fcn.0051c760
test eax, eax
jne 0x4a71b6
push eax
push 1
push 1
push eax
push 0x6175bc
lea ecx, [ebp - 0x1fd0]
call fcn.0051c760
test eax, eax
jne 0x4a71b6
push 0x617588
lea ecx, [ebp - 0x1fd0]
call fcn.0051e060
test al, al
jne 0x4a71b6
push 0
push 1
push 1
push 0
push 0x6175a0
lea ecx, [ebp - 0x1fd0]
call fcn.0051c760
test eax, eax
jne 0x4a71b6
lea ecx, [edi + 0x84]
push eax
call fcn.0051dd30
push eax
push 0x6190f8
lea ecx, [ebp - 0x1fd0]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a71b6
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x619124
lea ecx, [ebp - 0x1fd0]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a71b6
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fd0]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x617610
push 2
push 0x2a
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4a71b6
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2034]
call fcn.0051dd30
push eax
push 0x617538
push 0x2a
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617624
lea ecx, [ebp - 0x2034]
call fcn.0051dd30
push eax
push 0x616bec
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x1fd0]
call fcn.0051dd30
push eax
push 0x617658
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
lea eax, [ebp - 0x2aa4]
mov dword [ebp - 0x6f18], 0
push eax
push 0x605c04
xorps xmm0, xmm0
lea ecx, [ebp - 0x251c]
push 0x617678
movups xmmword [ebp - 0x6f28], xmm0
call fcn.004ed140
test al, al
je 0x4a742d
lea eax, [ebp - 0x2aa4]
push eax
lea eax, [ebp - 0x6f28]
push eax
lea ecx, [ebp - 0x251c]
call fcn.004ec790
test al, al
je 0x4a742d
nop
lea eax, [ebp - 0x1fd0]
push eax
lea eax, [ebp - 0x6f28]
push eax
lea ecx, [ebp - 0x251c]
call fcn.004ecaa0
test eax, eax
je 0x4a740c
push 0
push 1
push 1
push 0
push 0x61754c
lea ecx, [ebp - 0x1fd0]
call fcn.0051c760
test eax, eax
jne 0x4a740c
push eax
push 1
push 1
push eax
push 0x61756c
lea ecx, [ebp - 0x1fd0]
call fcn.0051c760
test eax, eax
jne 0x4a740c
push eax
push 1
push 1
push eax
push 0x6175bc
lea ecx, [ebp - 0x1fd0]
call fcn.0051c760
test eax, eax
jne 0x4a740c
push 0x617588
lea ecx, [ebp - 0x1fd0]
call fcn.0051e060
test al, al
jne 0x4a740c
push 0
push 1
push 1
push 0
push 0x6175a0
lea ecx, [ebp - 0x1fd0]
call fcn.0051c760
test eax, eax
jne 0x4a740c
push eax
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x6190f8
lea ecx, [ebp - 0x1fd0]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a7406
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x619124
lea ecx, [ebp - 0x1fd0]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a7406
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fd0]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x617710
push 2
push 0x2a
push dword [eax + 0xa8]
call fcn.004c0fd0
mov esi, eax
cmp esi, 0xffffffff
je 0x4a7406
mov ecx, dword [ebp - 0x6f44]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2034]
call fcn.0051dd30
push eax
push 0x617678
push 0x2a
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617624
lea ecx, [ebp - 0x2034]
call fcn.0051dd30
mov esi, dword [ebp - 0x6f44]
mov ecx, esi
push eax
push 0x616bec
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x1fd0]
call fcn.0051dd30
push eax
push 0x61772c
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
jmp 0x4a740c
mov esi, dword [ebp - 0x6f44]
lea eax, [ebp - 0x2aa4]
push eax
lea eax, [ebp - 0x6f28]
push eax
lea ecx, [ebp - 0x251c]
call fcn.004ec790
test al, al
jne 0x4a7210
lea ecx, [ebp - 0x5198]
call fcn.004017e0
test al, al
jne 0x4a6f10
lea eax, [edi + 0x44]
mov dword [ebp - 0x6f50], eax
lea ecx, [ebp - 0x5198]
mov byte [ebp - 4], 0x99
call fcn.00401730
mov eax, dword [ebp - 0x6f48]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f44], esi
cmp eax, dword [edi + 0x30]
mov dword [ebp - 0x6f48], eax
mov eax, dword [ebp - 0x6f50]
jb 0x4a6e13
mov esi, dword [ebp - 0x6f40]
cmp byte [edi + 0x14], 0
jne 0x4a953e
test esi, esi
jne 0x4a74b6
lea ecx, [ebp - 0x22b8]
call fcn.0051da30
test al, al
je 0x4a74b6
push esi
push 0x619150
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
jmp 0x4a953e
push 0
push 0x6191b0
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f40], 0
jbe 0x4a7882
mov esi, dword [ebp - 0x6f68]
mov dword [ebp - 0x6f44], esi
nop dword [eax + eax]
cmp byte [edi + 0x14], 0
jne 0x4a953e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6190bc
lea ecx, [ebp - 0x2184]
call fcn.0051dd30
push eax
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x20cc]
call fcn.0051dda0
push 0x260
lea ecx, [ebp - 0x53f8]
call fcn.00401f00
push 1
lea ecx, [ebp - 0x20cc]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x53f8]
call fcn.004016e0
push 3
lea ecx, [ebp - 0x20cc]
mov byte [ebp - 4], 0x9b
call fcn.0051cac0
lea ecx, [ebp - 0x53f8]
call fcn.00401820
test al, al
je 0x4a7854
nop dword [eax + eax]
push 1
lea ecx, [ebp - 0x53f8]
call fcn.00401890
push eax
lea ecx, [ebp - 0x2034]
call fcn.0051e0b0
push 0x6174ec
lea ecx, [ebp - 0x2034]
call fcn.0051e020
test al, al
je 0x4a75de
push 0
push 1
push 1
push 0
push 0x6174fc
lea ecx, [ebp - 0x2034]
call fcn.0051c760
cmp eax, 1
jne 0x4a7841
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617510
push 1
lea ecx, [ebp - 0x53f8]
call fcn.00401890
push eax
lea ecx, [ebp - 0x20cc]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2034]
call fcn.0051dda0
push 0x100
lea ecx, [ebp - 0x2034]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x251c]
call fcn.004ed860
test al, al
je 0x4a7841
lea eax, [ebp - 0x1fd0]
push eax
push 0x605c04
push 0x6177f0
lea ecx, [ebp - 0x251c]
call fcn.004ed040
test eax, eax
je 0x4a7841
push 0
push 1
push 1
push 0
push 0x61754c
lea ecx, [ebp - 0x1fd0]
call fcn.0051c760
test eax, eax
jne 0x4a7841
push eax
push 1
push 1
push eax
push 0x6176a4
lea ecx, [ebp - 0x1fd0]
call fcn.0051c760
test eax, eax
jne 0x4a7841
push eax
push 1
push 1
push eax
push 0x61756c
lea ecx, [ebp - 0x1fd0]
call fcn.0051c760
test eax, eax
jne 0x4a7841
push eax
push 1
push 1
push eax
push 0x6175bc
lea ecx, [ebp - 0x1fd0]
call fcn.0051c760
test eax, eax
jne 0x4a7841
push eax
push 1
push 1
push eax
push 0x6176c8
lea ecx, [ebp - 0x1fd0]
call fcn.0051c760
test eax, eax
jne 0x4a7841
push eax
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x6191f0
lea ecx, [ebp - 0x1fd0]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a783b
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x619220
lea ecx, [ebp - 0x1fd0]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a783b
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fd0]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6178a0
push 2
push 0x2b
push dword [eax + 0xa8]
call fcn.004c0fd0
mov esi, eax
cmp esi, 0xffffffff
je 0x4a783b
mov ecx, dword [ebp - 0x6f44]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2034]
call fcn.0051dd30
push eax
push 0x6178d0
push 0x2b
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617624
lea ecx, [ebp - 0x2034]
call fcn.0051dd30
mov esi, dword [ebp - 0x6f44]
mov ecx, esi
push eax
push 0x616bec
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x1fd0]
call fcn.0051dd30
push eax
push 0x617930
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
jmp 0x4a7841
mov esi, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x53f8]
call fcn.004017e0
test al, al
jne 0x4a7590
lea ecx, [ebp - 0x53f8]
mov byte [ebp - 4], 0x99
call fcn.00401730
mov eax, dword [ebp - 0x6f40]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f44], esi
mov dword [ebp - 0x6f40], eax
cmp eax, dword [edi + 0x30]
jb 0x4a74f0
cmp byte [edi + 0x14], 0
jne 0x4a953e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x619250
lea ecx, [edi + 0x24c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f98]
call fcn.0051dda0
push 0
push 0x619290
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f40], 0
jbe 0x4a7ea1
mov esi, dword [ebp - 0x6f68]
mov dword [ebp - 0x6f50], esi
nop
cmp byte [edi + 0x14], 0
jne 0x4a953e
push 0xc
lea ecx, [ebp - 0x26f8]
call fcn.00401eb0
lea ecx, [ebp - 0x26f8]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2784]
mov byte [ebp - 4], 0x9c
call fcn.00401eb0
lea ecx, [ebp - 0x2784]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2718]
mov byte [ebp - 4], 0x9d
call fcn.00401eb0
lea ecx, [ebp - 0x2718]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2698]
mov byte [ebp - 4], 0x9e
call fcn.00401eb0
lea ecx, [ebp - 0x2698]
call fcn.0051e180
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6190bc
lea ecx, [ebp - 0x2184]
mov byte [ebp - 4], 0x9f
call fcn.0051dd30
push eax
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x20cc]
call fcn.0051dda0
push 0x260
lea ecx, [ebp - 0x45b8]
call fcn.00401f00
push 1
lea ecx, [ebp - 0x20cc]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x45b8]
call fcn.004016e0
push 3
lea ecx, [ebp - 0x20cc]
mov byte [ebp - 4], 0xa0
call fcn.0051cac0
lea ecx, [ebp - 0x45b8]
call fcn.00401820
test al, al
je 0x4a7e47
nop dword [eax + eax]
push 1
lea ecx, [ebp - 0x45b8]
call fcn.00401890
push eax
lea ecx, [ebp - 0x2034]
call fcn.0051e0b0
push 0x6174ec
lea ecx, [ebp - 0x2034]
call fcn.0051e020
test al, al
je 0x4a7a4e
push 0
push 1
push 1
push 0
push 0x6174fc
lea ecx, [ebp - 0x2034]
call fcn.0051c760
cmp eax, 1
jne 0x4a7e34
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617510
push 1
lea ecx, [ebp - 0x45b8]
call fcn.00401890
push eax
lea ecx, [ebp - 0x20cc]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2034]
call fcn.0051dda0
push 0x100
lea ecx, [ebp - 0x2034]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x251c]
call fcn.004ed860
test al, al
je 0x4a7e34
lea eax, [ebp - 0x2acc]
mov dword [ebp - 0x6f2c], 0
push eax
push 0x605c04
xorps xmm0, xmm0
lea ecx, [ebp - 0x251c]
push 0x617a04
movups xmmword [ebp - 0x6f3c], xmm0
call fcn.004ed140
test al, al
je 0x4a7e34
lea eax, [ebp - 0x2acc]
push eax
lea eax, [ebp - 0x6f3c]
push eax
lea ecx, [ebp - 0x251c]
call fcn.004ecb60
test al, al
je 0x4a7e34
nop word [eax + eax]
lea eax, [ebp - 0x26f8]
push eax
lea eax, [ebp - 0x6f3c]
push eax
lea ecx, [ebp - 0x251c]
call fcn.004ed100
test al, al
je 0x4a7e13
lea ecx, [ebp - 0x26f8]
call fcn.0051dd30
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.0051dd30
mov edx, esi
mov ecx, eax
call fcn.00515590
test al, al
jne 0x4a7e0d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617a30
lea ecx, [ebp - 0x26f8]
call fcn.0051dd30
push eax
push 0x617a54
lea ecx, [ebp - 0x2718]
call fcn.0051dda0
lea eax, [ebp - 0x2784]
push eax
push 0x605c04
lea ecx, [ebp - 0x2718]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x251c]
call fcn.004ed040
test eax, eax
je 0x4a7e0d
lea ecx, [ebp - 0x2784]
call fcn.0051dd30
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.0051dd30
mov edx, esi
mov ecx, eax
call fcn.00515590
test al, al
jne 0x4a7e0d
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x6192c0
lea ecx, [ebp - 0x2784]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a7e0d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617a84
lea ecx, [ebp - 0x26f8]
call fcn.0051dd30
push eax
push 0x617a54
lea ecx, [ebp - 0x2718]
call fcn.0051dda0
lea eax, [ebp - 0x2698]
push eax
push 0x605c04
lea ecx, [ebp - 0x2718]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x251c]
call fcn.004ed040
test eax, eax
je 0x4a7cb8
push 0
push 1
push 1
push 5
push 0x5ff7bc
lea ecx, [ebp - 0x2698]
call fcn.0051c760
test eax, eax
jne 0x4a7cb8
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x617a94
push 1
lea ecx, [ebp - 0x45b8]
call fcn.00401890
push eax
lea ecx, [ebp - 0x20cc]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2698]
call fcn.0051c280
lea ecx, [ebp - 0x2698]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
je 0x4a7e0d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x26f8]
call fcn.0051dd30
push eax
push 0x617a54
lea ecx, [ebp - 0x2718]
call fcn.0051dda0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2698]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f50]
push eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2784]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 2
push 0x2c
push dword [eax + 0xa8]
call fcn.004c0fd0
mov esi, eax
cmp esi, 0xffffffff
je 0x4a7e0d
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2698]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f50]
push eax
push 0
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2034]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2718]
call fcn.0051dd30
push eax
push 0x2c
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0x617624
lea ecx, [ebp - 0x2698]
call fcn.0051dd30
mov esi, dword [ebp - 0x6f50]
mov ecx, esi
push eax
push 0x616138
call fcn.0051dd30
push eax
push 0x617ab0
lea ecx, [ebp - 0x26f8]
call fcn.0051dd30
push eax
push 0x60940c
lea ecx, [ebp - 0x2784]
call fcn.0051dd30
push eax
push 0x617ad4
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
jmp 0x4a7e13
mov esi, dword [ebp - 0x6f50]
lea eax, [ebp - 0x2acc]
push eax
lea eax, [ebp - 0x6f3c]
push eax
lea ecx, [ebp - 0x251c]
call fcn.004ecb60
test al, al
jne 0x4a7b10
lea ecx, [ebp - 0x45b8]
call fcn.004017e0
test al, al
jne 0x4a7a00
lea ecx, [ebp - 0x45b8]
call fcn.00401730
lea ecx, [ebp - 0x2698]
call fcn.0051dfd0
lea ecx, [ebp - 0x2718]
call fcn.0051dfd0
lea ecx, [ebp - 0x2784]
call fcn.0051dfd0
lea ecx, [ebp - 0x26f8]
mov byte [ebp - 4], 0x99
call fcn.0051dfd0
mov eax, dword [ebp - 0x6f40]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f50], esi
mov dword [ebp - 0x6f40], eax
cmp eax, dword [edi + 0x30]
jb 0x4a78f0
cmp byte [edi + 0x14], 0
jne 0x4a953e
push 0
push 0x6192f0
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x6d9c]
push 1
push 0
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6da4], eax
mov dword [ebp - 0x6da0], 0x2d
call fcn.0051e110
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0xa1
call fcn.0051dd30
lea ecx, [edi + 0x84]
mov dword [ebp - 0x6d90], eax
mov dword [ebp - 0x6d8c], 0
call fcn.0051dd30
mov dword [ebp - 0x6d88], eax
lea ecx, [ebp - 0x6d7c]
lea eax, [ebp - 0x1ff0]
push 1
mov dword [ebp - 0x6d84], eax
mov eax, dword [edi + 4]
push 0x61933c
mov dword [ebp - 0x6d80], eax
call fcn.0051e110
push 0xc
lea ecx, [ebp - 0x2258]
mov byte [ebp - 4], 0xa2
call fcn.00401eb0
lea ecx, [ebp - 0x2258]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2220]
mov byte [ebp - 4], 0xa3
call fcn.00401eb0
lea ecx, [ebp - 0x2220]
call fcn.0051e180
mov byte [ebp - 4], 0xa4
cmp byte [edi + 0x14], 0
jne 0x4a951d
xor eax, eax
mov dword [ebp - 0x6f48], eax
cmp dword [edi + 0x30], eax
jbe 0x4a8117
cmp byte [edi + 0x14], 0
jne 0x4a951d
push eax
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051df40
cmp eax, 3
jl 0x4a8101
lea eax, [ebp - 0x6d9c]
push eax
push 0
lea ecx, [ebp - 0x2184]
call fcn.0051dd30
push dword [ebp - 0x6f48]
lea ecx, [edi + 0x44]
mov esi, eax
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
mov edx, esi
mov ecx, eax
call fcn.004c80c0
test al, al
je 0x4a8101
mov esi, dword [ebp - 0x6f48]
lea ecx, [edi + 0x4c]
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24ec]
mov dword [ebp - 0x6d8c], eax
call fcn.0051dd30
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2258]
call fcn.0051dda0
lea ecx, [ebp - 0x2258]
call fcn.0051dd30
mov ecx, eax
call fcn.00509340
test al, al
je 0x4a8101
lea ecx, [ebp - 0x2258]
call fcn.0051dd30
push eax
lea eax, [ebp - 0x6da4]
mov ecx, edi
push eax
call fcn.004b4c20
cmp byte [edi + 0x14], 0
jne 0x4a951d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25e4]
call fcn.0051dd30
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2258]
call fcn.0051dda0
lea ecx, [ebp - 0x2258]
call fcn.0051dd30
mov ecx, eax
call fcn.00509340
test al, al
je 0x4a8101
push 0
lea ecx, [ebp - 0x2258]
call fcn.0051da50
lea ecx, [ebp - 0x2258]
call fcn.0051dd30
push eax
lea eax, [ebp - 0x6da4]
mov ecx, edi
push eax
call fcn.004b4c20
mov eax, dword [ebp - 0x6f48]
inc eax
mov dword [ebp - 0x6f48], eax
cmp eax, dword [edi + 0x30]
jb 0x4a7f93
cmp byte [edi + 0x14], 0
jne 0x4a951d
lea ecx, [ebp - 0x2644]
mov dword [ebp - 0x6d8c], 0x60fb20
call fcn.0051dd30
push eax
lea eax, [ebp - 0x6da4]
mov ecx, edi
push eax
call fcn.004b4c20
cmp byte [edi + 0x14], 0
jne 0x4a951d
lea eax, [ebp - 0x2668]
push eax
lea ecx, [ebp - 0x2258]
call fcn.0051e080
push 0
lea ecx, [ebp - 0x2258]
call fcn.0051da50
lea ecx, [ebp - 0x2258]
call fcn.0051dd30
push eax
lea eax, [ebp - 0x6da4]
mov ecx, edi
push eax
call fcn.004b4c20
cmp byte [edi + 0x14], 0
jne 0x4a951d
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4a81f7
mov eax, dword [ebp - 0x6f64]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6f40], eax
nop word [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x619358
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push str.HKU_
call fcn.0051dda0
add dword [ebp - 0x6f40], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4a81b0
mov esi, dword [ebp - 0x6f64]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6193e8
push dword [ebp - 0x6f70]
lea ecx, [esi + eax*4]
call fcn.0051dda0
cmp byte [ebp - 0x6f49], 0
je 0x4a825e
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x6193e8
push dword [ebp - 0x6f74]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.0051dda0
cmp dword [ebp - 0x6f6c], 0
mov dword [ebp - 0x6f5c], 0
jbe 0x4a8467
mov eax, dword [ebp - 0x6f64]
mov esi, dword [ebp - 0x6f68]
sub eax, esi
mov dword [ebp - 0x6f40], eax
nop dword [eax]
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x4a8445
cmp byte [edi + 0x14], 0
jne 0x4a951d
lea eax, [ebp - 0x2220]
push eax
push 0x5fe50c
lea ecx, [ebp - 0x1f74]
call fcn.00518530
test al, al
je 0x4a8445
push 0
push 1
push 1
push 0
push 0x619474
lea ecx, [ebp - 0x2220]
call fcn.0051c760
lea ecx, [ebp - 0x2220]
mov dword [ebp - 0x6f80], eax
call fcn.0051df40
mov edx, dword [ebp - 0x6f80]
lea ecx, [edx + 0xa]
cmp eax, ecx
jle 0x4a8445
lea eax, [edx + 0xb]
push eax
lea ecx, [ebp - 0x2220]
call fcn.0051ca50
push 3
lea ecx, [ebp - 0x2220]
call fcn.0051be70
lea ecx, [ebp - 0x2220]
call fcn.0051da30
test al, al
jne 0x4a8445
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x615178
lea ecx, [ebp - 0x2220]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a8445
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2220]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6112d0
push 2
push 0x2d
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4a8445
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.0051dd30
push eax
push 0x2d
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617624
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x2220]
call fcn.0051dd30
push eax
push 0x617ca8
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
inc eax
cmp eax, dword [ebp - 0x6f6c]
mov dword [ebp - 0x6f5c], eax
mov eax, dword [ebp - 0x6f40]
jb 0x4a8290
cmp byte [edi + 0x14], 0
jne 0x4a951d
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4a84d7
mov eax, dword [ebp - 0x6f64]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6f40], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x619490
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push str.HKU_
call fcn.0051dda0
add dword [ebp - 0x6f40], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4a8490
mov esi, dword [ebp - 0x6f64]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6194d8
push dword [ebp - 0x6f70]
lea ecx, [esi + eax*4]
call fcn.0051dda0
cmp byte [ebp - 0x6f49], 0
je 0x4a853e
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x6194d8
push dword [ebp - 0x6f74]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.0051dda0
push 0
push 0x619520
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
mov esi, dword [ebp - 0x6f6c]
mov dword [ebp - 0x6f5c], 0
test esi, esi
je 0x4a879a
mov eax, dword [ebp - 0x6f64]
mov esi, dword [ebp - 0x6f68]
sub eax, esi
mov dword [ebp - 0x6f40], eax
nop dword [eax]
cmp byte [edi + 0x14], 0
jne 0x4a8794
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
lea eax, [ebp - 0x1fd0]
push eax
push 0x611484
lea ecx, [ebp - 0x1f74]
call fcn.00518530
test al, al
je 0x4a8772
lea eax, [ebp - 0x21b0]
mov dword [ebp - 0x21b0], 0
push eax
push 0x611524
lea ecx, [ebp - 0x1f74]
call fcn.005184a0
test al, al
je 0x4a85f6
cmp dword [ebp - 0x21b0], 0
jne 0x4a8772
push 0
push 1
push 1
push 0
push 0x61754c
lea ecx, [ebp - 0x1fd0]
call fcn.0051c760
test eax, eax
jne 0x4a8772
push eax
push 1
push 1
push eax
push 0x61756c
lea ecx, [ebp - 0x1fd0]
call fcn.0051c760
test eax, eax
jne 0x4a8772
push eax
push 1
push 1
push eax
push 0x6175bc
lea ecx, [ebp - 0x1fd0]
call fcn.0051c760
test eax, eax
jne 0x4a8772
push eax
push 1
push 1
push eax
push 0x6175a0
lea ecx, [ebp - 0x1fd0]
call fcn.0051c760
test eax, eax
jne 0x4a8772
push eax
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x61955c
lea ecx, [ebp - 0x1fd0]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a8772
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fd0]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x611484
push 2
push 0x2f
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4a8772
push 0
push 0
push 0
push 0
push 0
push 0x611484
mov ecx, esi
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.0051dd30
push eax
push 0x2f
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617624
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x1fd0]
call fcn.0051dd30
push eax
push 0x619588
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
inc eax
cmp eax, dword [ebp - 0x6f6c]
mov dword [ebp - 0x6f5c], eax
mov eax, dword [ebp - 0x6f40]
jb 0x4a8580
mov esi, dword [ebp - 0x6f6c]
cmp byte [edi + 0x14], 0
jne 0x4a951d
push 0xc
lea ecx, [ebp - 0x25f0]
call fcn.00401eb0
lea ecx, [ebp - 0x25f0]
call fcn.0051e180
mov byte [ebp - 4], 0xa5
mov dword [ebp - 0x6f5c], 0
test esi, esi
je 0x4a8a69
mov eax, dword [ebp - 0x6f64]
mov esi, dword [ebp - 0x6f68]
sub eax, esi
mov dword [ebp - 0x6f40], eax
cmp byte [edi + 0x14], 0
jne 0x4a8a63
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
lea eax, [ebp - 0x1fd0]
push eax
push 0x6115c4
lea ecx, [ebp - 0x1f74]
call fcn.00518530
test al, al
je 0x4a8a41
lea eax, [ebp - 0x21b0]
mov dword [ebp - 0x21b0], 0
push eax
push 0x6116c4
lea ecx, [ebp - 0x1f74]
call fcn.005184a0
test al, al
je 0x4a885c
cmp dword [ebp - 0x21b0], 0
je 0x4a8a41
push 0
push 1
push 1
push 0
push 0x61754c
lea ecx, [ebp - 0x1fd0]
call fcn.0051c760
test eax, eax
jne 0x4a8a41
push eax
push 1
push 1
push eax
push 0x61756c
lea ecx, [ebp - 0x1fd0]
call fcn.0051c760
test eax, eax
jne 0x4a8a41
push eax
push 1
push 1
push eax
push 0x6175bc
lea ecx, [ebp - 0x1fd0]
call fcn.0051c760
test eax, eax
jne 0x4a8a41
push eax
push 1
push 1
push eax
push 0x6175a0
lea ecx, [ebp - 0x1fd0]
call fcn.0051c760
test eax, eax
jne 0x4a8a41
push eax
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x61955c
lea ecx, [ebp - 0x1fd0]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a8a41
lea eax, [ebp - 0x25f0]
push eax
push 0x611690
lea ecx, [ebp - 0x1f74]
call fcn.00518530
test al, al
je 0x4a8a41
lea ecx, [ebp - 0x25f0]
call fcn.0051da30
test al, al
jne 0x4a8a41
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617e60
lea ecx, [ebp - 0x25f0]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2220]
call fcn.0051dda0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fd0]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2220]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 2
push 0x2f
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4a8a41
push 0
push 0
push 0
push 0
push 0
push 0x6115c4
mov ecx, esi
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.0051dd30
push eax
push 0x2f
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617624
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x1fd0]
call fcn.0051dd30
push eax
push 0x6195d8
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
inc eax
cmp eax, dword [ebp - 0x6f6c]
mov dword [ebp - 0x6f5c], eax
mov eax, dword [ebp - 0x6f40]
jb 0x4a87e6
mov esi, dword [ebp - 0x6f6c]
cmp byte [edi + 0x14], 0
jne 0x4a9512
mov dword [ebp - 0x6f5c], 0
test esi, esi
je 0x4a8cd5
mov eax, dword [ebp - 0x6f64]
mov esi, dword [ebp - 0x6f68]
sub eax, esi
mov dword [ebp - 0x6f40], eax
nop dword [eax]
cmp byte [edi + 0x14], 0
jne 0x4a9512
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x4a8cb3
lea eax, [ebp - 0x21b0]
mov dword [ebp - 0x21b0], 0
push eax
push 0x617ee8
lea ecx, [ebp - 0x1f74]
call fcn.005184a0
test al, al
je 0x4a8cb3
cmp dword [ebp - 0x21b0], 4
jne 0x4a8cb3
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617f0c
lea ecx, [ecx + esi]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f98]
call fcn.0051dda0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x4a8cb3
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f58], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.005180d0
test al, al
je 0x4a8cb3
lea eax, [ebp - 0x1fd0]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f74]
call fcn.00518530
test al, al
je 0x4a8c8b
lea ecx, [ebp - 0x1fd0]
call fcn.0051da30
test al, al
jne 0x4a8c8b
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fd0]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x611880
push 2
push 0x2f
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4a8c8b
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
mov ecx, esi
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.0051dd30
push eax
push 0x2f
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617624
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x1fd0]
call fcn.0051dd30
push eax
push 0x619638
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
mov eax, dword [ebp - 0x6f58]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f58], eax
call fcn.005180d0
test al, al
jne 0x4a8b82
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
inc eax
cmp eax, dword [ebp - 0x6f6c]
mov dword [ebp - 0x6f5c], eax
mov eax, dword [ebp - 0x6f40]
jb 0x4a8aa0
cmp byte [edi + 0x14], 0
jne 0x4a9512
push 0
push 0x619680
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f40], 0
jbe 0x4a90dd
mov esi, dword [ebp - 0x6f68]
nop dword [eax + eax]
cmp byte [edi + 0x14], 0
jne 0x4a9512
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6190bc
lea ecx, [ebp - 0x2184]
call fcn.0051dd30
push eax
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x20cc]
call fcn.0051dda0
push 0x260
lea ecx, [ebp - 0x4818]
call fcn.00401f00
push 1
lea ecx, [ebp - 0x20cc]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x4818]
call fcn.004016e0
push 3
lea ecx, [ebp - 0x20cc]
mov byte [ebp - 4], 0xa6
call fcn.0051cac0
lea ecx, [ebp - 0x4818]
call fcn.00401820
test al, al
je 0x4a90b5
nop dword [eax + eax]
push 1
lea ecx, [ebp - 0x4818]
call fcn.00401890
push eax
lea ecx, [ebp - 0x2034]
call fcn.0051e0b0
push 0x6174ec
lea ecx, [ebp - 0x2034]
call fcn.0051e020
test al, al
je 0x4a8dfe
push 0
push 1
push 1
push 0
push 0x6174fc
lea ecx, [ebp - 0x2034]
call fcn.0051c760
cmp eax, 1
jne 0x4a90a2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617510
push 1
lea ecx, [ebp - 0x4818]
call fcn.00401890
push eax
lea ecx, [ebp - 0x20cc]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2034]
call fcn.0051dda0
lea ecx, [ebp - 0x2034]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
je 0x4a8f50
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x6196b8
push 0x611984
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a8f50
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2034]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x611984
push 2
push 0x2e
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4a90a2
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2034]
call fcn.0051dd30
push eax
push 0
push 0x2e
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617fb8
lea ecx, [ebp - 0x2034]
call fcn.0051dd30
push eax
push 0x616bec
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
push 0x611984
push 0x617ff0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x6196b8
push 0x611a80
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a90a2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x618014
push 1
lea ecx, [ebp - 0x4818]
call fcn.00401890
push eax
lea ecx, [ebp - 0x20cc]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2034]
call fcn.0051dda0
lea ecx, [ebp - 0x2034]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
je 0x4a90a2
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2034]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x611a80
push 2
push 0x2e
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4a90a2
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2034]
call fcn.0051dd30
push eax
push 0
push 0x2e
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617fb8
lea ecx, [ebp - 0x2034]
call fcn.0051dd30
push eax
push 0x616bec
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
push 0x611a80
push 0x617ff0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
lea ecx, [ebp - 0x4818]
call fcn.004017e0
test al, al
jne 0x4a8db0
lea ecx, [ebp - 0x4818]
mov byte [ebp - 4], 0xa5
call fcn.00401730
mov eax, dword [ebp - 0x6f40]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], eax
cmp eax, dword [edi + 0x30]
jb 0x4a8d10
cmp byte [edi + 0x14], 0
jne 0x4a9512
lea eax, [ebp - 0x22b8]
push eax
lea ecx, [ebp - 0x2034]
call fcn.0051e080
push 1
lea ecx, [ebp - 0x2034]
call fcn.0051da50
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x618030
lea ecx, [ebp - 0x2034]
call fcn.0051c4c0
lea ecx, [ebp - 0x2034]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
je 0x4a92cf
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x6196b8
push 0x611b50
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a92cf
push 0
lea ecx, [ebp - 0x2034]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x251c]
call fcn.004ed860
test al, al
je 0x4a92cf
lea eax, [ebp - 0x2a08]
push eax
push 0x605c04
push 0x617538
lea ecx, [ebp - 0x251c]
call fcn.004ed140
test al, al
jne 0x4a9212
lea eax, [ebp - 0x2a08]
push eax
push 0x605c04
push 0x617678
lea ecx, [ebp - 0x251c]
call fcn.004ed140
test al, al
jne 0x4a9212
lea eax, [ebp - 0x2a08]
push eax
push 0x605c04
push 0x611108
lea ecx, [ebp - 0x251c]
call fcn.004ed140
test al, al
jne 0x4a9212
lea eax, [ebp - 0x2a08]
push eax
push 0x605c04
push 0x617a04
lea ecx, [ebp - 0x251c]
call fcn.004ed140
test al, al
je 0x4a92cf
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2034]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x60fb20
push 0x611b50
push 2
push 0x2e
push dword [eax + 0xa8]
call fcn.004c0fd0
mov esi, eax
cmp esi, 0xffffffff
je 0x4a92cf
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60fb20
lea ecx, [ebp - 0x2034]
call fcn.0051dd30
push eax
push 0
push 0x2e
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617624
lea ecx, [ebp - 0x2034]
call fcn.0051dd30
push eax
push 0x616bec
push 0x6161dc
push 0x618058
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x6196b8
push 0x613a18
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a9512
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4a9357
mov eax, dword [ebp - 0x6f64]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6f40], eax
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x619490
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push str.HKU_
call fcn.0051dda0
add dword [ebp - 0x6f40], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4a9310
mov esi, dword [ebp - 0x6f64]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x619490
push dword [ebp - 0x6f70]
lea ecx, [esi + eax*4]
call fcn.0051dda0
cmp byte [ebp - 0x6f49], 0
je 0x4a93be
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x619490
push dword [ebp - 0x6f74]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.0051dda0
cmp dword [ebp - 0x6f6c], 0
mov dword [ebp - 0x6f5c], 0
jbe 0x4a94ff
mov eax, dword [ebp - 0x6f68]
sub eax, esi
mov dword [ebp - 0x6f40], eax
mov ecx, esi
call fcn.0051dd30
xor edx, edx
mov ecx, eax
call fcn.00515590
test al, al
je 0x4a94e3
cmp byte [edi + 0x14], 0
jne 0x4a94ff
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
lea ecx, [esi + ecx]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x613a18
push 2
push 0x2e
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4a94e3
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [esi + ecx]
call fcn.0051dd30
push eax
push 0
mov ecx, esi
call fcn.0051dd30
push eax
push 0x2e
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617fb8
mov ecx, esi
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x616bec
lea ecx, [esi + ecx]
call fcn.0051dd30
push eax
push 0x615318
push 0x613a18
push 0x617ff0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f5c], eax
cmp eax, dword [ebp - 0x6f6c]
jb 0x4a93e3
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004f31a0
lea ecx, [ebp - 0x25f0]
call fcn.0051dfd0
lea ecx, [ebp - 0x2220]
call fcn.0051dfd0
lea ecx, [ebp - 0x2258]
call fcn.0051dfd0
lea ecx, [ebp - 0x6da4]
call fcn.00402b30
lea ecx, [ebp - 0x251c]
call fcn.00401fd0
lea ecx, [ebp - 0x22b8]
call fcn.0051dfd0
lea ecx, [ebp - 0x1fd0]
call fcn.0051dfd0
lea ecx, [ebp - 0x23d4]
call fcn.0051dfd0
lea ecx, [ebp - 0x2034]
call fcn.0051dfd0
lea ecx, [ebp - 0x20cc]
mov byte [ebp - 4], 0x45
call fcn.0051dfd0
cmp byte [edi + 0x14], 0
jne 0x4b3e7a
test dword [edi + 0x34], 0x1000
jne 0x4ab794
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x6196e4
push dword [eax + 0x38]
call fcn.004f44b0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x2f
push dword [eax + 0x34]
call fcn.004f1310
push 0xc
lea ecx, [ebp - 0x2178]
call fcn.00401eb0
lea ecx, [ebp - 0x2178]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x204c]
mov byte [ebp - 4], 0xa7
call fcn.00401eb0
lea ecx, [ebp - 0x204c]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x248c]
mov byte [ebp - 4], 0xa8
call fcn.00401eb0
lea ecx, [ebp - 0x248c]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x216c]
mov byte [ebp - 4], 0xa9
call fcn.00401eb0
lea ecx, [ebp - 0x216c]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x238c]
mov byte [ebp - 4], 0xaa
call fcn.00401eb0
lea ecx, [ebp - 0x238c]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2288]
mov byte [ebp - 4], 0xab
call fcn.00401eb0
lea ecx, [ebp - 0x2288]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2308]
mov byte [ebp - 4], 0xac
call fcn.00401eb0
lea ecx, [ebp - 0x2308]
call fcn.0051e180
xor esi, esi
mov byte [ebp - 4], 0xad
push 0x20
lea ecx, [ebp - 0x2864]
mov dword [ebp - 0x6f50], esi
call fcn.00401fb0
lea ecx, [ebp - 0x2864]
call fcn.0050c930
mov byte [ebp - 4], 0xae
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004f31a0
push esi
push 0x619710
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
mov dword [ebp - 0x6f48], esi
cmp dword [edi + 0x30], esi
jbe 0x4a9ac7
mov eax, dword [ebp - 0x6f68]
mov dword [ebp - 0x6f44], eax
nop word [eax + eax]
cmp byte [edi + 0x14], 0
jne 0x4a9ac1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x619784
lea ecx, [ebp - 0x2238]
call fcn.0051dd30
push eax
push dword [ebp - 0x6f48]
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x238c]
call fcn.0051dda0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6197a8
lea ecx, [ebp - 0x238c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2288]
call fcn.0051dda0
lea ecx, [ebp - 0x2288]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
je 0x4a9aa4
lea ecx, [ebp - 0x2308]
call fcn.0051da30
test al, al
je 0x4a97c9
lea eax, [ebp - 0x2308]
push eax
lea ecx, [ebp - 0x2238]
call fcn.0051dd30
push dword [ebp - 0x6f48]
lea ecx, [edi + 0x44]
mov esi, eax
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
mov edx, esi
mov ecx, eax
call fcn.004c7ec0
lea eax, [ebp - 0x2178]
xor esi, esi
push eax
lea ecx, [ebp - 0x2288]
mov dword [ebp - 0x6f40], esi
call fcn.0051dd30
xor edx, edx
mov ecx, eax
call fcn.004c7ce0
test al, al
je 0x4a9aa4
lea ecx, [ebp - 0x2178]
call fcn.0051dd30
mov ecx, eax
call fcn.00509340
test al, al
je 0x4a9a7a
inc dword [ebp - 0x6f50]
lea ecx, [ebp - 0x2444]
push 0xc
call fcn.00401eb0
lea ecx, [ebp - 0x2444]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x25fc]
mov byte [ebp - 4], 0xaf
call fcn.00401eb0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6197c4
lea ecx, [ebp - 0x2178]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x25fc]
call fcn.0051e0c0
lea eax, [ebp - 0x2444]
mov byte [ebp - 4], 0xb0
push eax
lea ecx, [ebp - 0x25fc]
call fcn.0051dd30
mov edx, 0x613b04
mov ecx, eax
call fcn.004c7a50
test al, al
je 0x4a9a60
push 0
push 1
push 1
push 0
push 0x61754c
lea ecx, [ebp - 0x2444]
call fcn.0051c760
test eax, eax
jne 0x4a9a60
push eax
push 1
push 1
push eax
push 0x61756c
lea ecx, [ebp - 0x2444]
call fcn.0051c760
test eax, eax
jne 0x4a9a60
push eax
push 1
push 1
push eax
push 0x6175bc
lea ecx, [ebp - 0x2444]
call fcn.0051c760
test eax, eax
jne 0x4a9a60
push eax
push 1
push 1
push eax
push 0x6175a0
lea ecx, [ebp - 0x2444]
call fcn.0051c760
test eax, eax
jne 0x4a9a60
push eax
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x6197d8
lea ecx, [ebp - 0x2444]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a9a60
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2444]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x613ae0
push 3
push 0x33
push dword [eax + 0xa8]
call fcn.004c0fd0
mov esi, eax
cmp esi, 0xffffffff
jne 0x4a99a3
lea ecx, [ebp - 0x25fc]
call fcn.0051dfd0
lea ecx, [ebp - 0x2444]
mov byte [ebp - 4], 0xae
call fcn.0051dfd0
mov esi, dword [ebp - 0x6f40]
jmp 0x4a9a7a
mov ecx, dword [ebp - 0x6f44]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x25fc]
call fcn.0051dd30
push eax
push 0
push 0x33
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617624
lea ecx, [ebp - 0x25fc]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f44]
push eax
push 0x616138
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x2444]
call fcn.0051dd30
push eax
push 0x619804
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
lea ecx, [ebp - 0x25fc]
call fcn.0051dfd0
lea ecx, [ebp - 0x2444]
mov byte [ebp - 4], 0xae
call fcn.0051dfd0
mov esi, dword [ebp - 0x6f40]
jmp 0x4a9a7a
lea ecx, [ebp - 0x25fc]
call fcn.0051dfd0
lea ecx, [ebp - 0x2444]
mov byte [ebp - 4], 0xae
call fcn.0051dfd0
lea eax, [ebp - 0x2178]
inc esi
push eax
lea ecx, [ebp - 0x2288]
mov dword [ebp - 0x6f40], esi
call fcn.0051dd30
mov edx, esi
mov ecx, eax
call fcn.004c7ce0
test al, al
jne 0x4a97f4
mov eax, dword [ebp - 0x6f48]
add dword [ebp - 0x6f44], 0xc
inc eax
mov dword [ebp - 0x6f48], eax
cmp eax, dword [edi + 0x30]
jb 0x4a96f0
mov esi, dword [ebp - 0x6f50]
cmp byte [edi + 0x14], 0
jne 0x4ab738
test esi, esi
jne 0x4a9afa
lea ecx, [ebp - 0x2308]
call fcn.0051da30
test al, al
je 0x4a9afa
push esi
push 0x619840
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
jmp 0x4ab738
push fcn.0051dfd0
push fcn.0051e180
push 2
push 0xc
lea eax, [ebp - 0x2c]
push eax
call fcn.0041eeff
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x619898
lea ecx, [ebp - 0x26bc]
mov byte [ebp - 4], 0xb1
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2c]
call fcn.0051dda0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x619898
lea ecx, [ebp - 0x26e0]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x20]
call fcn.0051dda0
push 0xc
lea ecx, [ebp - 0x24bc]
call fcn.00401eb0
push 1
push 0x6198e8
lea ecx, [ebp - 0x24bc]
call fcn.0051e110
push 0
push 0x6199b0
lea ecx, [ebp - 0x1ff0]
mov byte [ebp - 4], 0xb2
call fcn.0050b8e0
xor esi, esi
mov dword [ebp - 0x6f48], esi
cmp dword [edi + 0x30], esi
jbe 0x4a9f30
mov eax, dword [ebp - 0x6f68]
mov dword [ebp - 0x6f44], eax
cmp byte [edi + 0x14], 0
jne 0x4ab717
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x619784
lea ecx, [ebp - 0x2238]
call fcn.0051dd30
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x238c]
call fcn.0051dda0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6197a8
lea ecx, [ebp - 0x238c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2288]
call fcn.0051dda0
lea ecx, [ebp - 0x2288]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
je 0x4a9f11
lea eax, [ebp - 0x2178]
xor esi, esi
push eax
lea ecx, [ebp - 0x2288]
mov dword [ebp - 0x6f40], esi
call fcn.0051dd30
xor edx, edx
mov ecx, eax
call fcn.004c7ce0
test al, al
je 0x4a9f11
nop
lea ecx, [ebp - 0x2178]
call fcn.0051dd30
mov ecx, eax
call fcn.00509340
test al, al
je 0x4a9ee7
push 0xc
lea ecx, [ebp - 0x2428]
call fcn.00401eb0
lea ecx, [ebp - 0x2428]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2608]
mov byte [ebp - 4], 0xb3
call fcn.00401eb0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6197c4
lea ecx, [ebp - 0x2178]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2608]
call fcn.0051e0c0
lea eax, [ebp - 0x2428]
mov byte [ebp - 4], 0xb4
push eax
lea ecx, [ebp - 0x2608]
call fcn.0051dd30
mov edx, 0x613c20
mov ecx, eax
call fcn.004c7a50
test al, al
je 0x4a9ecd
push 0x612090
lea ecx, [ebp - 0x2428]
call fcn.0051e060
test al, al
jne 0x4a9ecd
push 0x6199ec
lea ecx, [ebp - 0x2428]
call fcn.0051e060
test al, al
jne 0x4a9ecd
push 0x6199f8
lea ecx, [ebp - 0x2428]
call fcn.0051e060
test al, al
jne 0x4a9ecd
push 0x619a04
lea ecx, [ebp - 0x2428]
call fcn.0051e060
test al, al
jne 0x4a9ecd
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x619a1c
lea ecx, [ebp - 0x2428]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4a9ecd
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2428]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x613be0
push 3
push 0x34
push dword [eax + 0xa8]
call fcn.004c0fd0
mov esi, eax
cmp esi, 0xffffffff
jne 0x4a9e10
lea ecx, [ebp - 0x2608]
call fcn.0051dfd0
lea ecx, [ebp - 0x2428]
mov byte [ebp - 4], 0xb2
call fcn.0051dfd0
mov esi, dword [ebp - 0x6f40]
jmp 0x4a9ee7
mov ecx, dword [ebp - 0x6f44]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2608]
call fcn.0051dd30
push eax
push 0
push 0x34
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617624
lea ecx, [ebp - 0x2608]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f44]
push eax
push 0x616138
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x2428]
call fcn.0051dd30
push eax
push 0x619a50
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
lea ecx, [ebp - 0x2608]
call fcn.0051dfd0
lea ecx, [ebp - 0x2428]
mov byte [ebp - 4], 0xb2
call fcn.0051dfd0
mov esi, dword [ebp - 0x6f40]
jmp 0x4a9ee7
lea ecx, [ebp - 0x2608]
call fcn.0051dfd0
lea ecx, [ebp - 0x2428]
mov byte [ebp - 4], 0xb2
call fcn.0051dfd0
lea eax, [ebp - 0x2178]
inc esi
push eax
lea ecx, [ebp - 0x2288]
mov dword [ebp - 0x6f40], esi
call fcn.0051dd30
mov edx, esi
mov ecx, eax
call fcn.004c7ce0
test al, al
jne 0x4a9c80
mov eax, dword [ebp - 0x6f48]
add dword [ebp - 0x6f44], 0xc
inc eax
mov esi, eax
mov dword [ebp - 0x6f48], eax
cmp eax, dword [edi + 0x30]
jb 0x4a9bc1
cmp byte [edi + 0x14], 0
jne 0x4ab717
lea esi, [ebp - 0x2c]
mov dword [ebp - 0x6f5c], 0
mov dword [ebp - 0x6f40], esi
nop dword [eax]
mov al, byte [edi + 0x14]
test al, al
jne 0x4ab717
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x619a7c
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x204c]
call fcn.0051dda0
push 0x260
lea ecx, [ebp - 0x39d8]
call fcn.00401f00
push 1
lea ecx, [ebp - 0x204c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x39d8]
call fcn.004016e0
push 1
lea ecx, [ebp - 0x204c]
mov byte [ebp - 4], 0xb5
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x39d8]
call fcn.00401830
test al, al
je 0x4aa25f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe640
push 1
lea ecx, [ebp - 0x39d8]
call fcn.00401890
push eax
push 0x5fe640
lea ecx, [ebp - 0x216c]
call fcn.0051dda0
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x216c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x24bc]
call fcn.0051c760
test eax, eax
jne 0x4aa246
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 1
lea ecx, [ebp - 0x39d8]
call fcn.00401890
push eax
push 0x5fe504
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x204c]
call fcn.0051dda0
lea ecx, [ebp - 0x216c]
call fcn.0051dfa0
push 0
push 0x80
lea ecx, [ebp - 0x204c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2864]
call fcn.0050c260
test eax, eax
je 0x4aa103
push 0
lea eax, [ebp - 0x216c]
push eax
lea ecx, [ebp - 0x2864]
call fcn.0050c080
test eax, eax
je 0x4aa103
push 0
push 1
push 1
push 0
push 0x619a8c
lea ecx, [ebp - 0x216c]
call fcn.0051c760
mov esi, eax
push 0
lea ecx, [esi + 0xa]
push ecx
push 1
push 0
push 0x619aa4
lea ecx, [ebp - 0x216c]
call fcn.0051c760
test esi, esi
je 0x4aa0f8
test eax, eax
je 0x4aa0f8
sub eax, esi
lea ecx, [ebp - 0x216c]
sub eax, 0xb
push eax
lea eax, [esi + 0xb]
push eax
call fcn.0051ca10
jmp 0x4aa103
lea ecx, [ebp - 0x216c]
call fcn.0051dfa0
lea ecx, [ebp - 0x216c]
call fcn.0051da30
test al, al
je 0x4aa13a
push 1
lea ecx, [ebp - 0x39d8]
call fcn.00401890
push eax
lea ecx, [ebp - 0x216c]
call fcn.0051e0b0
push 0
lea ecx, [ebp - 0x216c]
call fcn.0051dac0
jmp 0x4aa147
push 3
lea ecx, [ebp - 0x216c]
call fcn.0051be70
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x619a1c
lea ecx, [ebp - 0x204c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4aa246
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x204c]
call fcn.0051dd30
push eax
push 0x60fb20
lea ecx, [ebp - 0x216c]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 3
push 0x34
push dword [eax + 0xa8]
call fcn.004c0fd0
mov esi, eax
cmp esi, 0xffffffff
je 0x4aa246
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60fb20
lea ecx, [ebp - 0x204c]
call fcn.0051dd30
push eax
push 0
push 0x34
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617624
lea ecx, [ebp - 0x204c]
call fcn.0051dd30
push eax
push 0x616138
push 0x60fb20
push 0x615318
lea ecx, [ebp - 0x216c]
call fcn.0051dd30
push eax
push 0x619ac0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
lea ecx, [ebp - 0x39d8]
call fcn.004017e0
mov esi, dword [ebp - 0x6f40]
test al, al
jne 0x4a9fd5
lea ecx, [ebp - 0x39d8]
mov byte [ebp - 4], 0xb2
call fcn.00401730
mov ecx, dword [ebp - 0x6f5c]
add esi, 0xc
inc ecx
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f5c], ecx
cmp ecx, 2
jb 0x4a9f50
mov al, byte [edi + 0x14]
test al, al
jne 0x4ab717
push 0x24
lea ecx, [ebp - 0x2830]
call fcn.004021e0
lea ecx, [ebp - 0x2830]
call fcn.004edaa0
push 0xc
lea ecx, [ebp - 0x2264]
mov byte [ebp - 4], 0xb6
call fcn.00401eb0
lea ecx, [ebp - 0x2264]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2410]
mov byte [ebp - 4], 0xb7
call fcn.00401eb0
lea ecx, [ebp - 0x2410]
call fcn.0051e180
push 0
push 0x619af0
lea ecx, [ebp - 0x1ff0]
mov byte [ebp - 4], 0xb8
call fcn.0050b8e0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x619b24
lea ecx, [edi + 0x24c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f98]
call fcn.0051dda0
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f48], 0
jbe 0x4aa790
mov esi, dword [ebp - 0x6f68]
mov dword [ebp - 0x6f50], esi
nop
cmp byte [edi + 0x14], 0
jne 0x4ab6f6
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x619b60
lea ecx, [ebp - 0x2238]
call fcn.0051dd30
push eax
push dword [ebp - 0x6f48]
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2178]
call fcn.0051dda0
lea eax, [ebp - 0x204c]
xor edx, edx
push eax
lea ecx, [ebp - 0x2178]
mov dword [ebp - 0x6f40], edx
call fcn.0051dd30
xor edx, edx
mov ecx, eax
call fcn.004c7ce0
test al, al
je 0x4aa771
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x614220
lea ecx, [ebp - 0x204c]
call fcn.0051c4c0
push 0x100
lea ecx, [ebp - 0x204c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2830]
call fcn.004ed860
test al, al
je 0x4aa744
push 0
lea eax, [ebp - 0x2a54]
mov dword [ebp - 0x6ea0], 0
push eax
xorps xmm0, xmm0
lea ecx, [ebp - 0x2830]
push 0x613e38
movups xmmword [ebp - 0x6eb0], xmm0
call fcn.004ed270
test al, al
je 0x4aa744
lea eax, [ebp - 0x2a54]
push eax
lea eax, [ebp - 0x6eb0]
push eax
lea ecx, [ebp - 0x2830]
call fcn.004ec790
test al, al
je 0x4aa744
lea eax, [ebp - 0x2264]
push eax
push 0x613e6c
lea eax, [ebp - 0x6eb0]
push eax
lea ecx, [ebp - 0x2830]
call fcn.004ecff0
test eax, eax
je 0x4aa723
push 0
push 1
push 1
push 0
push 0x619b9c
lea ecx, [ebp - 0x2264]
call fcn.0051c760
lea ecx, [ebp - 0x2264]
mov esi, eax
call fcn.0051df40
sub eax, 0x12
cmp esi, eax
je 0x4aa71d
push 0
push 1
push 1
push 0
push 0x619bc4
lea ecx, [ebp - 0x2264]
call fcn.0051c760
lea ecx, [ebp - 0x2264]
mov esi, eax
call fcn.0051df40
sub eax, 0xb
cmp esi, eax
je 0x4aa71d
push 0
push 1
push 1
push 0
push 0x619be0
lea ecx, [ebp - 0x2264]
call fcn.0051c760
lea ecx, [ebp - 0x2264]
mov esi, eax
call fcn.0051df40
sub eax, 0xb
cmp esi, eax
je 0x4aa71d
lea eax, [ebp - 0x6eb0]
push eax
lea eax, [ebp - 0x2b84]
push eax
push 0x619bfc
lea ecx, [ebp - 0x2830]
call fcn.004ed270
test al, al
je 0x4aa71d
lea eax, [ebp - 0x2264]
push eax
push 0x619c18
lea eax, [ebp - 0x2b84]
push eax
lea ecx, [ebp - 0x2830]
call fcn.004ecff0
test eax, eax
je 0x4aa71d
push 0x6174ec
lea ecx, [ebp - 0x2264]
call fcn.0051e060
test al, al
jne 0x4aa71d
lea eax, [ebp - 0x2410]
push eax
push 0x613e48
lea eax, [ebp - 0x6eb0]
push eax
lea ecx, [ebp - 0x2830]
call fcn.004ecff0
test eax, eax
jne 0x4aa5d2
lea eax, [ebp - 0x2410]
push eax
push 0x613e60
lea eax, [ebp - 0x6eb0]
push eax
lea ecx, [ebp - 0x2830]
call fcn.004ecff0
test eax, eax
je 0x4aa71d
lea ecx, [ebp - 0x2264]
call fcn.0051dd30
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.0051dd30
mov edx, esi
mov ecx, eax
call fcn.00515590
test al, al
jne 0x4aa71d
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x619c24
lea ecx, [ebp - 0x2264]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4aa71d
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2410]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f50]
push eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2264]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 3
push 0x35
push dword [eax + 0xa8]
call fcn.004c0fd0
mov esi, eax
cmp esi, 0xffffffff
je 0x4aa71d
lea ecx, [ebp - 0x204c]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f50]
push eax
push 0
push 0
push 0
push 0
push 0
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2410]
call fcn.0051dd30
push eax
push 0
push 0x35
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617624
lea ecx, [ebp - 0x2410]
call fcn.0051dd30
mov esi, dword [ebp - 0x6f50]
mov ecx, esi
push eax
push 0x616138
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x2264]
call fcn.0051dd30
push eax
push 0x6169e0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
jmp 0x4aa723
mov esi, dword [ebp - 0x6f50]
lea eax, [ebp - 0x2a54]
push eax
lea eax, [ebp - 0x6eb0]
push eax
lea ecx, [ebp - 0x2830]
call fcn.004ec790
test al, al
jne 0x4aa470
inc dword [ebp - 0x6f40]
lea eax, [ebp - 0x204c]
push eax
lea ecx, [ebp - 0x2178]
call fcn.0051dd30
mov edx, dword [ebp - 0x6f40]
mov ecx, eax
call fcn.004c7ce0
test al, al
jne 0x4aa3d0
mov eax, dword [ebp - 0x6f48]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f50], esi
mov dword [ebp - 0x6f48], eax
cmp eax, dword [edi + 0x30]
jb 0x4aa350
cmp byte [edi + 0x14], 0
jne 0x4ab6f6
push 0
push 0x619c50
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x6e60]
push 1
push 0
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6e68], eax
mov dword [ebp - 0x6e64], 0x37
call fcn.0051e110
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0xb9
call fcn.0051dd30
lea ecx, [edi + 0x84]
mov dword [ebp - 0x6e54], eax
mov dword [ebp - 0x6e50], 0
call fcn.0051dd30
mov dword [ebp - 0x6e4c], eax
lea ecx, [ebp - 0x6e40]
lea eax, [ebp - 0x1ff0]
push 1
mov dword [ebp - 0x6e48], eax
mov eax, dword [edi + 4]
push 0x619c80
mov dword [ebp - 0x6e44], eax
call fcn.0051e110
mov byte [ebp - 4], 0xba
cmp byte [edi + 0x14], 0
jne 0x4ab6eb
push 0xc
lea ecx, [ebp - 0x2398]
call fcn.00401eb0
lea ecx, [ebp - 0x2398]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x23f8]
mov byte [ebp - 4], 0xbb
call fcn.00401eb0
lea ecx, [ebp - 0x23f8]
call fcn.0051e180
xor eax, eax
mov byte [ebp - 4], 0xbc
mov dword [ebp - 0x6f48], eax
cmp dword [edi + 0x30], eax
jbe 0x4aaa04
cmp byte [edi + 0x14], 0
jne 0x4ab6d5
push eax
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051df40
cmp eax, 3
jl 0x4aa9ee
lea eax, [ebp - 0x6e60]
push eax
lea ecx, [ebp - 0x2238]
call fcn.0051dd30
push dword [ebp - 0x6f48]
lea ecx, [edi + 0x44]
mov esi, eax
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
mov edx, esi
mov ecx, eax
call fcn.004c7ec0
test al, al
je 0x4aa9ee
mov esi, dword [ebp - 0x6f48]
lea ecx, [edi + 0x4c]
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24ec]
mov dword [ebp - 0x6e50], eax
call fcn.0051dd30
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2398]
call fcn.0051dda0
lea ecx, [ebp - 0x2398]
call fcn.0051dd30
mov ecx, eax
call fcn.00509340
test al, al
je 0x4aa9ee
lea ecx, [ebp - 0x2398]
call fcn.0051dd30
push eax
lea eax, [ebp - 0x6e68]
mov ecx, edi
push eax
call fcn.004b4c20
cmp byte [edi + 0x14], 0
jne 0x4ab6d5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25e4]
call fcn.0051dd30
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2398]
call fcn.0051dda0
lea ecx, [ebp - 0x2398]
call fcn.0051dd30
mov ecx, eax
call fcn.00509340
test al, al
je 0x4aa9ee
push 0
lea ecx, [ebp - 0x2398]
call fcn.0051da50
lea ecx, [ebp - 0x2398]
call fcn.0051dd30
push eax
lea eax, [ebp - 0x6e68]
mov ecx, edi
push eax
call fcn.004b4c20
mov eax, dword [ebp - 0x6f48]
inc eax
mov dword [ebp - 0x6f48], eax
cmp eax, dword [edi + 0x30]
jb 0x4aa882
cmp byte [edi + 0x14], 0
jne 0x4ab6d5
lea ecx, [ebp - 0x2644]
mov dword [ebp - 0x6e50], 0x60fb20
call fcn.0051dd30
push eax
lea eax, [ebp - 0x6e68]
mov ecx, edi
push eax
call fcn.004b4c20
cmp byte [edi + 0x14], 0
jne 0x4ab6d5
push 0
push 1
lea ecx, [ebp - 0x2668]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2398]
call fcn.0051de00
mov ecx, eax
call fcn.0051da50
lea ecx, [ebp - 0x2398]
call fcn.0051dd30
push eax
lea eax, [ebp - 0x6e68]
mov ecx, edi
push eax
call fcn.004b4c20
cmp byte [edi + 0x14], 0
jne 0x4ab6d5
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4aaae7
mov eax, dword [ebp - 0x6f64]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6f40], eax
nop word [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x619ca0
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push str.HKU_
call fcn.0051dda0
add dword [ebp - 0x6f40], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4aaaa0
mov esi, dword [ebp - 0x6f64]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x619ce8
push dword [ebp - 0x6f70]
lea ecx, [esi + eax*4]
call fcn.0051dda0
cmp byte [ebp - 0x6f49], 0
je 0x4aab4e
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x619ce8
push dword [ebp - 0x6f74]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.0051dda0
push 4
lea ecx, [ebp - 0x22d8]
call fcn.00401ed0
lea ecx, [ebp - 0x22d8]
call fcn.00518880
cmp dword [ebp - 0x6f6c], 0
mov byte [ebp - 4], 0xbd
mov dword [ebp - 0x6f5c], 0
jbe 0x4aaec2
mov esi, dword [ebp - 0x6f68]
mov eax, dword [ebp - 0x6f64]
sub eax, esi
mov dword [ebp - 0x6f48], 0
mov dword [ebp - 0x6f50], esi
mov dword [ebp - 0x6fa0], eax
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f40], eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x22d8]
call fcn.00518810
test al, al
je 0x4aae93
cmp byte [edi + 0x14], 0
jne 0x4ab6ca
mov esi, dword [ebp - 0x6f64]
xor edx, edx
add esi, dword [ebp - 0x6f48]
mov dword [ebp - 0x6f58], edx
nop dword [eax]
lea eax, [ebp - 0x6cb4]
push eax
push edx
lea ecx, [ebp - 0x22d8]
call fcn.00518170
test al, al
je 0x4aae8d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x619d30
push dword [ebp - 0x6cb4]
mov ecx, esi
push 0x5fe504
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f98]
call fcn.0051dda0
push 0
mov ecx, esi
mov dword [ebp - 0x6f44], esi
call fcn.0051df40
push eax
push 1
push 0
push 0x619d58
lea ecx, [ebp - 0x1f98]
call fcn.0051c760
test eax, eax
je 0x4aae6e
lea eax, [ebp - 0x23f8]
mov dword [ebp - 0x6f44], esi
push eax
push 0x5fe50c
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005183c0
test al, al
je 0x4aae6e
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2308]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x23f8]
call fcn.0051c760
mov dword [ebp - 0x6f80], eax
mov ecx, esi
test eax, eax
je 0x4aae74
lea ecx, [ebp - 0x2308]
call fcn.0051df40
add eax, dword [ebp - 0x6f80]
lea ecx, [ebp - 0x23f8]
push eax
call fcn.0051ca50
push 3
push 0
push 0
push 0x5fe50c
push 0x5ff6d4
lea ecx, [ebp - 0x23f8]
call fcn.0051c000
mov ecx, eax
call fcn.0051be70
lea ecx, [ebp - 0x23f8]
mov dword [ebp - 0x6f44], esi
call fcn.0051df40
cmp eax, 3
jl 0x4aae6e
push 0
lea ecx, [edi + 0x84]
mov dword [ebp - 0x6f44], esi
call fcn.0051dd30
push eax
push 0x61519c
lea ecx, [ebp - 0x23f8]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4aae6e
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
push 0x5fe504
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f98]
call fcn.0051dda0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x23f8]
call fcn.0051dd30
mov esi, dword [ebp - 0x6f50]
mov ecx, esi
push eax
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6112d0
push 3
push 0x37
push dword [eax + 0xa8]
call fcn.004c0fd0
mov ecx, dword [ebp - 0x6f40]
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4aae74
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.0051dd30
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
push 0x37
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617624
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x23f8]
call fcn.0051dd30
push eax
push 0x617ca8
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
mov ecx, dword [ebp - 0x6f40]
jmp 0x4aae74
mov ecx, dword [ebp - 0x6f44]
mov edx, dword [ebp - 0x6f58]
mov esi, ecx
inc edx
cmp byte [edi + 0x14], 0
mov dword [ebp - 0x6f58], edx
je 0x4aabf0
mov esi, dword [ebp - 0x6f50]
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
add dword [ebp - 0x6f48], 0xc
inc eax
cmp eax, dword [ebp - 0x6f6c]
mov dword [ebp - 0x6f5c], eax
mov eax, dword [ebp - 0x6fa0]
mov dword [ebp - 0x6f50], esi
jb 0x4aaba5
cmp byte [edi + 0x14], 0
jne 0x4ab6ca
push 0
push 0x619d70
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
push 0xc
lea ecx, [ebp - 0x24d4]
call fcn.00401eb0
lea ecx, [ebp - 0x24d4]
call fcn.0051e180
mov byte [ebp - 4], 0xbe
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f48], 0
jbe 0x4ab6ac
mov esi, dword [ebp - 0x6f68]
cmp byte [edi + 0x14], 0
jne 0x4ab6ac
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x619b60
lea ecx, [ebp - 0x2238]
call fcn.0051dd30
push eax
push dword [ebp - 0x6f48]
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2178]
call fcn.0051dda0
lea eax, [ebp - 0x24d4]
xor edx, edx
push eax
lea ecx, [ebp - 0x2178]
mov dword [ebp - 0x6f40], edx
call fcn.0051dd30
xor edx, edx
mov ecx, eax
call fcn.004c7ce0
test al, al
je 0x4ab693
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x613e74
lea ecx, [ebp - 0x24d4]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x204c]
call fcn.0051dda0
lea ecx, [ebp - 0x204c]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
je 0x4ab0d6
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x619da8
push 0x614134
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4ab0d6
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x204c]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x614134
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4ab0d6
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x204c]
call fcn.0051dd30
push eax
push 0
push 0x38
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617fb8
lea ecx, [ebp - 0x204c]
call fcn.0051dd30
push eax
push 0x616138
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
push 0x614134
push 0x617ff0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6141fc
lea ecx, [ebp - 0x24d4]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x204c]
call fcn.0051dda0
lea ecx, [ebp - 0x204c]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
jne 0x4ab142
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x614220
lea ecx, [ebp - 0x24d4]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x204c]
call fcn.0051dda0
lea ecx, [ebp - 0x204c]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
je 0x4ab258
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x619da8
push 0x6141c8
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4ab258
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x204c]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6141c8
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4ab258
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x204c]
call fcn.0051dd30
push eax
push 0
push 0x38
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617fb8
lea ecx, [ebp - 0x204c]
call fcn.0051dd30
push eax
push 0x616138
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
push 0x6141c8
push 0x617ff0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6140f8
lea ecx, [ebp - 0x24d4]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x204c]
call fcn.0051dda0
lea ecx, [ebp - 0x204c]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
jne 0x4ab2c4
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x614114
lea ecx, [ebp - 0x24d4]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x204c]
call fcn.0051dda0
lea ecx, [ebp - 0x204c]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
je 0x4ab3da
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x619da8
push 0x6140b0
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4ab3da
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x204c]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6140b0
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4ab3da
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x204c]
call fcn.0051dd30
push eax
push 0
push 0x38
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617fb8
lea ecx, [ebp - 0x204c]
call fcn.0051dd30
push eax
push 0x616138
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
push 0x6140b0
push 0x617ff0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6197c4
lea ecx, [ebp - 0x24d4]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x204c]
call fcn.0051dda0
lea ecx, [ebp - 0x204c]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
je 0x4ab520
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x619da8
push 0x614244
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4ab520
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x204c]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x614244
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4ab520
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x204c]
call fcn.0051dd30
push eax
push 0
push 0x38
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617fb8
lea ecx, [ebp - 0x204c]
call fcn.0051dd30
push eax
push 0x616138
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
push 0x614244
push 0x617ff0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x619dd4
lea ecx, [ebp - 0x24d4]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x204c]
call fcn.0051dda0
lea ecx, [ebp - 0x204c]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
je 0x4ab666
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x619da8
push 0x619de8
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4ab666
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x204c]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x619de8
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4ab666
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x204c]
call fcn.0051dd30
push eax
push 0
push 0x38
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617fb8
lea ecx, [ebp - 0x204c]
call fcn.0051dd30
push eax
push 0x616138
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
push 0x619de8
push 0x617ff0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
inc dword [ebp - 0x6f40]
lea eax, [ebp - 0x24d4]
push eax
lea ecx, [ebp - 0x2178]
call fcn.0051dd30
mov edx, dword [ebp - 0x6f40]
mov ecx, eax
call fcn.004c7ce0
test al, al
jne 0x4aaf90
mov eax, dword [ebp - 0x6f48]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f48], eax
cmp eax, dword [edi + 0x30]
jb 0x4aaf14
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004f31a0
lea ecx, [ebp - 0x24d4]
call fcn.0051dfd0
lea ecx, [ebp - 0x22d8]
call fcn.005187c0
lea ecx, [ebp - 0x23f8]
call fcn.0051dfd0
lea ecx, [ebp - 0x2398]
call fcn.0051dfd0
lea ecx, [ebp - 0x6e68]
call fcn.00402b30
lea ecx, [ebp - 0x2410]
call fcn.0051dfd0
lea ecx, [ebp - 0x2264]
call fcn.0051dfd0
lea ecx, [ebp - 0x2830]
call fcn.00401fd0
lea ecx, [ebp - 0x24bc]
call fcn.0051dfd0
push fcn.0051dfd0
push 2
push 0xc
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0xae
push eax
call fcn.0041eb24
lea ecx, [ebp - 0x2864]
call fcn.00401f90
lea ecx, [ebp - 0x2308]
call fcn.0051dfd0
lea ecx, [ebp - 0x2288]
call fcn.0051dfd0
lea ecx, [ebp - 0x238c]
call fcn.0051dfd0
lea ecx, [ebp - 0x216c]
call fcn.0051dfd0
lea ecx, [ebp - 0x248c]
call fcn.0051dfd0
lea ecx, [ebp - 0x204c]
call fcn.0051dfd0
lea ecx, [ebp - 0x2178]
mov byte [ebp - 4], 0x45
call fcn.0051dfd0
cmp byte [edi + 0x14], 0
jne 0x4b3e7a
test dword [edi + 0x34], 0x1000
jne 0x4af109
push 0
push 0x619e30
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x619e7c
push dword [eax + 0x38]
call fcn.004f44b0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x32
push dword [eax + 0x34]
call fcn.004f1310
push 0xc
lea ecx, [ebp - 0x2068]
call fcn.00401eb0
lea ecx, [ebp - 0x2068]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x1fc0]
mov byte [ebp - 4], 0xbf
call fcn.00401eb0
lea ecx, [ebp - 0x1fc0]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x24e0]
mov byte [ebp - 4], 0xc0
call fcn.00401eb0
lea ecx, [ebp - 0x24e0]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x201c]
mov byte [ebp - 4], 0xc1
call fcn.00401eb0
lea ecx, [ebp - 0x201c]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x209c]
mov byte [ebp - 4], 0xc2
call fcn.00401eb0
lea ecx, [ebp - 0x209c]
call fcn.0051e180
push 0x24
lea ecx, [ebp - 0x259c]
mov byte [ebp - 4], 0xc3
call fcn.004021e0
lea ecx, [ebp - 0x259c]
call fcn.004edaa0
push 0x260
lea ecx, [ebp - 0x2df8]
mov byte [ebp - 4], 0xc4
call fcn.00401f00
lea ecx, [ebp - 0x2df8]
call fcn.004016b0
push 0x260
lea ecx, [ebp - 0x32b8]
mov byte [ebp - 4], 0xc5
call fcn.00401f00
lea ecx, [ebp - 0x32b8]
call fcn.004016b0
push 0xc
lea ecx, [ebp - 0x21c0]
mov byte [ebp - 4], 0xc6
call fcn.00401eb0
lea ecx, [ebp - 0x21c0]
call fcn.00403fc0
push 0xc
lea ecx, [ebp - 0x2368]
mov byte [ebp - 4], 0xc7
call fcn.00401eb0
push 0xc
push 0
lea ecx, [ebp - 0x2368]
call fcn.00404350
push 0xc
lea ecx, [ebp - 0x2058]
mov byte [ebp - 4], 0xc8
call fcn.00401eb0
push 0xc
push 0
lea ecx, [ebp - 0x2058]
call fcn.00404350
push 0xc
lea ecx, [ebp - 0x21f0]
mov byte [ebp - 4], 0xc9
call fcn.00401eb0
lea ecx, [ebp - 0x21f0]
call fcn.00403fc0
push 0xc
lea ecx, [ebp - 0x2208]
mov byte [ebp - 4], 0xca
call fcn.00401eb0
push 0xc
push 0
lea ecx, [ebp - 0x2208]
call fcn.00403520
xor esi, esi
mov byte [ebp - 4], 0xcb
push 0x20
lea ecx, [ebp - 0x280c]
mov dword [ebp - 0x6f50], esi
call fcn.00401fb0
lea ecx, [ebp - 0x280c]
call fcn.0050c930
mov byte [ebp - 4], 0xcc
mov eax, dword [edi + 0x30]
mov dword [ebp - 0x6f40], esi
test eax, eax
je 0x4ac020
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe654
lea ecx, [ebp - 0x2184]
call fcn.0051dd30
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.0051dda0
push 5
lea ecx, [ebp - 0x1fc0]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2df8]
call fcn.00401830
test al, al
je 0x4ac008
mov edi, dword [ebp - 0x6f50]
nop dword [eax + eax]
push 1
push 1
lea ecx, [ebp - 0x2df8]
call fcn.00401890
push eax
lea ecx, [ebp - 0x209c]
call fcn.0051de00
push 0x612090
lea ecx, [ebp - 0x209c]
call fcn.0051e060
test al, al
jne 0x4abfe9
push str.Microsoft
lea ecx, [ebp - 0x209c]
call fcn.0051e060
test al, al
jne 0x4abfe9
push 0x619eb4
lea ecx, [ebp - 0x209c]
call fcn.0051e060
test al, al
jne 0x4abfe9
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x619ec8
push 1
lea ecx, [ebp - 0x2df8]
call fcn.00401890
push eax
push 0x5fe504
lea ecx, [ebp - 0x2184]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6fb4]
push eax
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2068]
call fcn.0051dda0
lea ecx, [ebp - 0x2068]
call fcn.0051dd30
push eax
call dword [0x5de620]
test al, al
jne 0x4abe41
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x619f00
push 1
lea ecx, [ebp - 0x2df8]
call fcn.00401890
push eax
push 0x5fe504
lea ecx, [ebp - 0x2184]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6fb4]
push eax
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2068]
call fcn.0051dda0
lea ecx, [ebp - 0x2068]
call fcn.0051dd30
push eax
call dword [0x5de620]
test al, al
jne 0x4abe41
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe654
push 1
lea ecx, [ebp - 0x2df8]
call fcn.00401890
push eax
push 0x5fe504
lea ecx, [ebp - 0x2184]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6fb4]
push eax
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.0051dda0
push 5
lea ecx, [ebp - 0x1fc0]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x32b8]
call fcn.00401830
test al, al
je 0x4abfe9
push 2
lea ecx, [ebp - 0x1fc0]
call fcn.0051cac0
mov esi, dword [0x5de620]
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x619ec8
push 1
lea ecx, [ebp - 0x32b8]
call fcn.00401890
push eax
push 0x5fe504
lea ecx, [ebp - 0x1fc0]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2068]
call fcn.0051dda0
lea ecx, [ebp - 0x2068]
call fcn.0051dd30
push eax
call esi
test eax, eax
jne 0x4abc5e
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x619f00
push 1
lea ecx, [ebp - 0x32b8]
call fcn.00401890
push eax
push 0x5fe504
lea ecx, [ebp - 0x1fc0]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2068]
call fcn.0051dda0
lea ecx, [ebp - 0x2068]
call fcn.0051dd30
push eax
call esi
test eax, eax
je 0x4abe23
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x619f44
push 1
lea ecx, [ebp - 0x32b8]
lea esi, [edi + 1]
call fcn.00401890
push eax
push 0x5fe504
lea ecx, [ebp - 0x1fc0]
call fcn.0051dd30
push eax
push edi
push 2
push esi
lea ecx, [ebp - 0x21c0]
call fcn.00404140
mov ecx, eax
call fcn.004042c0
mov ecx, eax
call fcn.0051dda0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x32b8]
call fcn.00401890
push eax
push 0x5fe504
push 1
lea ecx, [ebp - 0x2df8]
call fcn.00401890
push eax
push edi
push 2
push esi
lea ecx, [ebp - 0x2368]
call fcn.00404140
mov ecx, eax
call fcn.004042c0
mov ecx, eax
call fcn.0051dda0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x32b8]
call fcn.00401890
push eax
push 0x5ff58c
push 1
lea ecx, [ebp - 0x2df8]
call fcn.00401890
push eax
push edi
push 2
push esi
lea ecx, [ebp - 0x2058]
call fcn.00404140
mov ecx, eax
call fcn.004042c0
mov ecx, eax
call fcn.0051dda0
push edi
push 2
push esi
lea ecx, [ebp - 0x2208]
call fcn.00403430
mov ecx, eax
call fcn.00403500
mov ecx, dword [ebp - 0x6f40]
push 2
push esi
mov dword [eax], ecx
lea ecx, [ebp - 0x21f0]
call fcn.00404140
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x619f5c
push edi
lea ecx, [ebp - 0x21c0]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2068]
call fcn.0051dda0
lea ecx, [ebp - 0x2068]
call fcn.0051dd30
mov dl, 1
mov ecx, eax
call fcn.0050b630
push 0
push eax
lea ecx, [ebp - 0x2068]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x280c]
call fcn.0050c260
test eax, eax
je 0x4abe1b
push 0
push edi
lea ecx, [ebp - 0x21f0]
call fcn.004042c0
push eax
lea ecx, [ebp - 0x280c]
call fcn.0050c080
test eax, eax
je 0x4abe1b
push 3
push edi
lea ecx, [ebp - 0x21f0]
call fcn.004042c0
mov ecx, eax
call fcn.0051be70
mov edi, esi
mov esi, dword [0x5de620]
lea ecx, [ebp - 0x32b8]
call fcn.004017e0
test al, al
jne 0x4abbc0
mov esi, dword [ebp - 0x6f40]
jmp 0x4abfe9
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x619f44
lea eax, [edi + 1]
push 1
lea ecx, [ebp - 0x2df8]
mov dword [ebp - 0x6f44], eax
call fcn.00401890
push eax
push 0x5fe504
lea ecx, [ebp - 0x2184]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6fb4]
push eax
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
push edi
push 2
push dword [ebp - 0x6f44]
lea ecx, [ebp - 0x21c0]
call fcn.00404140
mov ecx, eax
call fcn.004042c0
mov ecx, eax
call fcn.0051dda0
push 1
push 1
lea ecx, [ebp - 0x2df8]
call fcn.00401890
push eax
push edi
push 2
push dword [ebp - 0x6f44]
lea ecx, [ebp - 0x2368]
call fcn.00404140
mov ecx, eax
call fcn.004042c0
mov ecx, eax
call fcn.0051de00
push 1
push 1
lea ecx, [ebp - 0x2df8]
call fcn.00401890
push eax
push edi
push 2
push dword [ebp - 0x6f44]
lea ecx, [ebp - 0x2058]
call fcn.00404140
mov ecx, eax
call fcn.004042c0
mov ecx, eax
call fcn.0051de00
push edi
push 2
push dword [ebp - 0x6f44]
lea ecx, [ebp - 0x2208]
call fcn.00403430
mov ecx, eax
call fcn.00403500
push 2
push dword [ebp - 0x6f44]
lea ecx, [ebp - 0x21f0]
mov dword [eax], esi
call fcn.00404140
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x619f5c
push edi
lea ecx, [ebp - 0x21c0]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2068]
call fcn.0051dda0
lea ecx, [ebp - 0x2068]
call fcn.0051dd30
mov dl, 1
mov ecx, eax
call fcn.0050b630
push 0
push eax
lea ecx, [ebp - 0x2068]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x280c]
call fcn.0050c260
test eax, eax
je 0x4abfe3
push 0
push edi
lea ecx, [ebp - 0x21f0]
call fcn.004042c0
push eax
lea ecx, [ebp - 0x280c]
call fcn.0050c080
test eax, eax
je 0x4abfe3
push 3
push edi
lea ecx, [ebp - 0x21f0]
call fcn.004042c0
mov ecx, eax
call fcn.0051be70
mov edi, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x2df8]
call fcn.004017e0
test al, al
jne 0x4aba00
mov dword [ebp - 0x6f50], edi
mov edi, dword [ebp - 0x6f54]
mov eax, dword [edi + 0x30]
inc esi
mov dword [ebp - 0x6f40], esi
cmp esi, eax
jb 0x4ab995
mov esi, dword [ebp - 0x6f50]
mov dword [ebp - 0x6f44], 0
test eax, eax
je 0x4ac22a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x619f78
lea ecx, [ebp - 0x2238]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f44]
push eax
push ecx
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2068]
call fcn.0051dda0
lea ecx, [ebp - 0x2068]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
jne 0x4ac0e2
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x619fd0
lea ecx, [ebp - 0x2238]
call fcn.0051dd30
push eax
push dword [ebp - 0x6f44]
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2068]
call fcn.0051dda0
lea ecx, [ebp - 0x2068]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
je 0x4ac214
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61a038
lea ecx, [ebp - 0x2238]
inc esi
call fcn.0051dd30
push eax
push dword [ebp - 0x6f44]
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
push dword [ebp - 0x6f50]
lea ecx, [ebp - 0x21c0]
push 2
push esi
call fcn.00404140
mov ecx, eax
call fcn.004042c0
mov ecx, eax
call fcn.0051dda0
push 1
push 0x61a058
push dword [ebp - 0x6f50]
lea ecx, [ebp - 0x2368]
push 2
push esi
call fcn.00404140
mov ecx, eax
call fcn.004042c0
mov ecx, eax
call fcn.0051de00
push 1
push 0x61a090
push dword [ebp - 0x6f50]
lea ecx, [ebp - 0x2058]
push 2
push esi
call fcn.00404140
mov ecx, eax
call fcn.004042c0
mov ecx, eax
call fcn.0051de00
push dword [ebp - 0x6f50]
lea ecx, [ebp - 0x2208]
push 2
push esi
call fcn.00403430
mov ecx, eax
call fcn.00403500
mov ecx, dword [ebp - 0x6f44]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov dword [eax], ecx
lea ecx, [ebp - 0x2184]
push 0x61a0ac
call fcn.0051dd30
push eax
push dword [ebp - 0x6f44]
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
push dword [ebp - 0x6f50]
push 2
push esi
lea ecx, [ebp - 0x21f0]
call fcn.00404140
mov ecx, eax
call fcn.004042c0
mov ecx, eax
call fcn.0051dda0
mov dword [ebp - 0x6f50], esi
mov eax, dword [ebp - 0x6f44]
inc eax
mov dword [ebp - 0x6f44], eax
cmp eax, dword [edi + 0x30]
jb 0x4ac032
cmp byte [edi + 0x14], 0
jne 0x4af06b
lea ecx, [ebp - 0x1ff0]
push 0
test esi, esi
jne 0x4ac24f
push 0x61a0f0
call fcn.0050b8e0
jmp 0x4af06b
push 0x61a170
call fcn.0050b8e0
xor esi, esi
mov dword [ebp - 0x6f44], esi
cmp dword [ebp - 0x6f50], esi
jbe 0x4ac943
nop dword [eax]
cmp byte [edi + 0x14], 0
jne 0x4af06b
push 0x61a090
push esi
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051e060
mov byte [ebp - 0x6f5d], al
lea ecx, [ebp - 0x21c0]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
je 0x4ac2bd
push 0x61a1dc
jmp 0x4ac2c2
push 0x61a1e8
push esi
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2068]
call fcn.0051dda0
push esi
lea ecx, [ebp - 0x2208]
call fcn.00403500
push 0x260
lea ecx, [ebp - 0x5658]
mov eax, dword [eax]
mov dword [ebp - 0x6f5c], eax
call fcn.00401f00
push 1
lea ecx, [ebp - 0x2068]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x5658]
call fcn.004016e0
push 3
lea ecx, [ebp - 0x2068]
mov byte [ebp - 4], 0xcd
call fcn.0051cac0
lea ecx, [ebp - 0x5658]
call fcn.00401820
test al, al
je 0x4ac921
nop dword [eax]
push 1
lea ecx, [ebp - 0x5658]
call fcn.00401890
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.0051e0b0
cmp byte [ebp - 0x6f5d], 0
jne 0x4ac397
push 0x6174ec
lea ecx, [ebp - 0x1fc0]
call fcn.0051e020
test al, al
je 0x4ac397
push 0
push 1
push 1
push 0
push 0x6174fc
lea ecx, [ebp - 0x1fc0]
call fcn.0051c760
cmp eax, 1
jne 0x4ac90e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617510
push 1
lea ecx, [ebp - 0x5658]
call fcn.00401890
push eax
lea ecx, [ebp - 0x2068]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.0051dda0
push 0x100
lea ecx, [ebp - 0x1fc0]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x259c]
call fcn.004ed860
test al, al
je 0x4ac90e
lea eax, [ebp - 0x201c]
push eax
push 0x605c04
push 0x617538
lea ecx, [ebp - 0x259c]
call fcn.004ed040
test eax, eax
je 0x4ac648
push 0
push 1
push 1
push 0
push 0x61754c
lea ecx, [ebp - 0x201c]
call fcn.0051c760
test eax, eax
jne 0x4ac648
push eax
push 1
push 1
push eax
push 0x61756c
lea ecx, [ebp - 0x201c]
call fcn.0051c760
test eax, eax
jne 0x4ac648
push eax
push 1
push 1
push eax
push 0x6175bc
lea ecx, [ebp - 0x201c]
call fcn.0051c760
test eax, eax
jne 0x4ac648
push 0x617588
lea ecx, [ebp - 0x201c]
call fcn.0051e060
test al, al
jne 0x4ac648
push 0
push 1
push 1
push 0
push 0x6175a0
lea ecx, [ebp - 0x201c]
call fcn.0051c760
test eax, eax
jne 0x4ac648
push eax
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x61a1f8
lea ecx, [ebp - 0x201c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4ac648
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe61c
push esi
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x61a244
lea ecx, [ebp - 0x25cc]
call fcn.0051dda0
mov eax, dword [ebp - 0x6f5c]
mov ecx, dword [ebp - 0x6f68]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 1
lea ecx, [ebp - 0x201c]
mov dword [ebp - 0x6f40], eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x25cc]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x3e
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4ac648
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
push 0
push 0
push 0
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.0051dd30
push eax
push 0x617538
push 0x3e
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0x617624
lea ecx, [ebp - 0x1fc0]
call fcn.0051dd30
push eax
push 0x616bec
push esi
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x6152fc
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x201c]
call fcn.0051dd30
push eax
push 0x617658
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
lea eax, [ebp - 0x2ab8]
mov dword [ebp - 0x6edc], 0
push eax
push 0x605c04
xorps xmm0, xmm0
lea ecx, [ebp - 0x259c]
push 0x617678
movups xmmword [ebp - 0x6eec], xmm0
call fcn.004ed140
test al, al
je 0x4ac90e
lea eax, [ebp - 0x2ab8]
push eax
lea eax, [ebp - 0x6eec]
push eax
lea ecx, [ebp - 0x259c]
call fcn.004ec790
test al, al
je 0x4ac90e
lea eax, [ebp - 0x201c]
push eax
lea eax, [ebp - 0x6eec]
push eax
lea ecx, [ebp - 0x259c]
call fcn.004ecaa0
test eax, eax
je 0x4ac8ed
push 0
push 1
push 1
push 0
push 0x61754c
lea ecx, [ebp - 0x201c]
call fcn.0051c760
test eax, eax
jne 0x4ac8ed
push eax
push 1
push 1
push eax
push 0x61756c
lea ecx, [ebp - 0x201c]
call fcn.0051c760
test eax, eax
jne 0x4ac8ed
push eax
push 1
push 1
push eax
push 0x6175bc
lea ecx, [ebp - 0x201c]
call fcn.0051c760
test eax, eax
jne 0x4ac8ed
push 0x617588
lea ecx, [ebp - 0x201c]
call fcn.0051e060
test al, al
jne 0x4ac8ed
push 0
push 1
push 1
push 0
push 0x6175a0
lea ecx, [ebp - 0x201c]
call fcn.0051c760
test eax, eax
jne 0x4ac8ed
push eax
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x61a1f8
lea ecx, [ebp - 0x201c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4ac8ed
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe61c
push esi
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x61a25c
lea ecx, [ebp - 0x25cc]
call fcn.0051dda0
mov eax, dword [ebp - 0x6f5c]
mov ecx, dword [ebp - 0x6f68]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x201c]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x25cc]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x3e
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4ac8e7
push 0
push dword [ebp - 0x6f44]
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.0051dd30
push eax
push 0x617678
push 0x3e
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0x617624
lea ecx, [ebp - 0x1fc0]
call fcn.0051dd30
push eax
push 0x616bec
push dword [ebp - 0x6f44]
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x6152fc
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x201c]
call fcn.0051dd30
push eax
push 0x61a27c
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
mov esi, dword [ebp - 0x6f44]
lea eax, [ebp - 0x2ab8]
push eax
lea eax, [ebp - 0x6eec]
push eax
lea ecx, [ebp - 0x259c]
call fcn.004ec790
test al, al
jne 0x4ac6a1
lea ecx, [ebp - 0x5658]
call fcn.004017e0
test al, al
jne 0x4ac340
lea ecx, [ebp - 0x5658]
mov byte [ebp - 4], 0xcc
call fcn.00401730
inc esi
mov dword [ebp - 0x6f44], esi
cmp esi, dword [ebp - 0x6f50]
jb 0x4ac270
cmp byte [edi + 0x14], 0
jne 0x4af06b
push 0
push 0x61a2b0
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
mov esi, dword [ebp - 0x6f50]
xor eax, eax
mov dword [ebp - 0x6f44], eax
test esi, esi
je 0x4acd9a
cmp byte [edi + 0x14], 0
jne 0x4af06b
push eax
lea ecx, [ebp - 0x2208]
call fcn.00403500
push 0x61a090
push dword [ebp - 0x6f44]
lea ecx, [ebp - 0x2058]
mov eax, dword [eax]
mov dword [ebp - 0x6f80], eax
call fcn.004042c0
mov ecx, eax
call fcn.0051e060
mov byte [ebp - 0x6f5d], al
lea ecx, [ebp - 0x21c0]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
je 0x4ac9db
push 0x61a1dc
jmp 0x4ac9e0
push 0x61a1e8
push dword [ebp - 0x6f44]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2068]
call fcn.0051dda0
push 0x260
lea ecx, [ebp - 0x58b8]
call fcn.00401f00
push 1
lea ecx, [ebp - 0x2068]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x58b8]
call fcn.004016e0
push 3
lea ecx, [ebp - 0x2068]
mov byte [ebp - 4], 0xce
call fcn.0051cac0
lea ecx, [ebp - 0x58b8]
call fcn.00401820
test al, al
je 0x4acd76
mov esi, dword [ebp - 0x6f44]
push 1
lea ecx, [ebp - 0x58b8]
call fcn.00401890
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.0051e0b0
cmp byte [ebp - 0x6f5d], 0
jne 0x4acaa8
push 0x6174ec
lea ecx, [ebp - 0x1fc0]
call fcn.0051e020
test al, al
je 0x4acaa8
push 0
push 1
push 1
push 0
push 0x6174fc
lea ecx, [ebp - 0x1fc0]
call fcn.0051c760
cmp eax, 1
jne 0x4acd5d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617510
push 1
lea ecx, [ebp - 0x58b8]
call fcn.00401890
push eax
lea ecx, [ebp - 0x2068]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.0051dda0
push 0x100
lea ecx, [ebp - 0x1fc0]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x259c]
call fcn.004ed860
test al, al
je 0x4acd5d
lea eax, [ebp - 0x201c]
push eax
push 0x605c04
push 0x6177f0
lea ecx, [ebp - 0x259c]
call fcn.004ed040
test eax, eax
je 0x4acd5d
push 0
push 1
push 1
push 0
push 0x61754c
lea ecx, [ebp - 0x201c]
call fcn.0051c760
test eax, eax
jne 0x4acd5d
push eax
push 1
push 1
push eax
push 0x6176a4
lea ecx, [ebp - 0x201c]
call fcn.0051c760
test eax, eax
jne 0x4acd5d
push eax
push 1
push 1
push eax
push 0x61756c
lea ecx, [ebp - 0x201c]
call fcn.0051c760
test eax, eax
jne 0x4acd5d
push eax
push 1
push 1
push eax
push 0x6175bc
lea ecx, [ebp - 0x201c]
call fcn.0051c760
test eax, eax
jne 0x4acd5d
push eax
push 1
push 1
push eax
push 0x6176c8
lea ecx, [ebp - 0x201c]
call fcn.0051c760
test eax, eax
jne 0x4acd5d
push eax
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x61a310
lea ecx, [ebp - 0x201c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4acd5d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe61c
push esi
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x61a364
lea ecx, [ebp - 0x25cc]
call fcn.0051dda0
mov eax, dword [ebp - 0x6f80]
mov ecx, dword [ebp - 0x6f68]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 1
lea ecx, [ebp - 0x201c]
mov dword [ebp - 0x6f40], eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x25cc]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x3f
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6fa0], eax
cmp eax, 0xffffffff
je 0x4acd5d
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
push 0
push 0
push 0
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.0051dd30
push eax
push 0x6178d0
push 0x3f
push dword [ebp - 0x6fa0]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0x617624
lea ecx, [ebp - 0x1fc0]
call fcn.0051dd30
push eax
push 0x616bec
push esi
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x6152fc
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x201c]
call fcn.0051dd30
push eax
push 0x61a398
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
lea ecx, [ebp - 0x58b8]
call fcn.004017e0
test al, al
jne 0x4aca51
mov esi, dword [ebp - 0x6f50]
lea ecx, [ebp - 0x58b8]
mov byte [ebp - 4], 0xcc
call fcn.00401730
mov eax, dword [ebp - 0x6f44]
inc eax
mov dword [ebp - 0x6f44], eax
cmp eax, esi
jb 0x4ac975
cmp byte [edi + 0x14], 0
jne 0x4af06b
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61a3e0
lea ecx, [edi + 0x24c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f98]
call fcn.0051dda0
push 0
push 0x61a420
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
xor eax, eax
mov dword [ebp - 0x6f44], eax
test esi, esi
je 0x4ad3e8
cmp byte [edi + 0x14], 0
jne 0x4af06b
push eax
lea ecx, [ebp - 0x2208]
call fcn.00403500
push 0xc
lea ecx, [ebp - 0x26d4]
mov eax, dword [eax]
mov dword [ebp - 0x6f80], eax
call fcn.00401eb0
lea ecx, [ebp - 0x26d4]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x26ec]
mov byte [ebp - 4], 0xcf
call fcn.00401eb0
lea ecx, [ebp - 0x26ec]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2614]
mov byte [ebp - 4], 0xd0
call fcn.00401eb0
lea ecx, [ebp - 0x2614]
call fcn.0051e180
push 0x61a090
push dword [ebp - 0x6f44]
lea ecx, [ebp - 0x2058]
mov byte [ebp - 4], 0xd1
call fcn.004042c0
mov ecx, eax
call fcn.0051e060
mov byte [ebp - 0x6f5d], al
lea ecx, [ebp - 0x21c0]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
je 0x4aceb0
push 0x61a1dc
jmp 0x4aceb5
push 0x61a1e8
push dword [ebp - 0x6f44]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2068]
call fcn.0051dda0
push 0x260
lea ecx, [ebp - 0x4a78]
call fcn.00401f00
push 1
lea ecx, [ebp - 0x2068]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x4a78]
call fcn.004016e0
push 3
lea ecx, [ebp - 0x2068]
mov byte [ebp - 4], 0xd2
call fcn.0051cac0
lea ecx, [ebp - 0x4a78]
call fcn.00401820
test al, al
je 0x4ad3a3
push 1
lea ecx, [ebp - 0x4a78]
call fcn.00401890
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.0051e0b0
cmp byte [ebp - 0x6f5d], 0
jne 0x4acf77
push 0x6174ec
lea ecx, [ebp - 0x1fc0]
call fcn.0051e020
test al, al
je 0x4acf77
push 0
push 1
push 1
push 0
push 0x6174fc
lea ecx, [ebp - 0x1fc0]
call fcn.0051c760
cmp eax, 1
jne 0x4ad38a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617510
push 1
lea ecx, [ebp - 0x4a78]
call fcn.00401890
push eax
lea ecx, [ebp - 0x2068]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.0051dda0
push 0x100
lea ecx, [ebp - 0x1fc0]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x259c]
call fcn.004ed860
test al, al
je 0x4ad38a
lea eax, [ebp - 0x2a40]
mov dword [ebp - 0x6ec8], 0
push eax
push 0x605c04
xorps xmm0, xmm0
lea ecx, [ebp - 0x259c]
push 0x617a04
movups xmmword [ebp - 0x6ed8], xmm0
call fcn.004ed140
test al, al
je 0x4ad38a
lea eax, [ebp - 0x2a40]
push eax
lea eax, [ebp - 0x6ed8]
push eax
lea ecx, [ebp - 0x259c]
call fcn.004ecb60
test al, al
je 0x4ad38a
lea eax, [ebp - 0x26d4]
push eax
lea eax, [ebp - 0x6ed8]
push eax
lea ecx, [ebp - 0x259c]
call fcn.004ed100
test al, al
je 0x4ad369
lea ecx, [ebp - 0x26d4]
call fcn.0051dd30
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.0051dd30
mov edx, esi
mov ecx, eax
call fcn.00515590
test al, al
jne 0x4ad369
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617a30
lea ecx, [ebp - 0x26d4]
call fcn.0051dd30
push eax
push 0x617a54
lea ecx, [ebp - 0x26ec]
call fcn.0051dda0
lea eax, [ebp - 0x209c]
push eax
push 0x605c04
lea ecx, [ebp - 0x26ec]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x259c]
call fcn.004ed040
test eax, eax
je 0x4ad369
lea ecx, [ebp - 0x209c]
call fcn.0051dd30
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.0051dd30
mov edx, esi
mov ecx, eax
call fcn.00515590
test al, al
jne 0x4ad369
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x61a478
lea ecx, [ebp - 0x209c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4ad369
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617a84
lea ecx, [ebp - 0x26d4]
call fcn.0051dd30
push eax
push 0x617a54
lea ecx, [ebp - 0x26ec]
call fcn.0051dda0
lea eax, [ebp - 0x2614]
push eax
push 0x605c04
lea ecx, [ebp - 0x26ec]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x259c]
call fcn.004ed040
test eax, eax
je 0x4ad1d8
push 0
push 1
push 1
push 5
push 0x5ff7bc
lea ecx, [ebp - 0x2614]
call fcn.0051c760
test eax, eax
jne 0x4ad1d8
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x617a94
push 1
lea ecx, [ebp - 0x4a78]
call fcn.00401890
push eax
lea ecx, [ebp - 0x2068]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2614]
call fcn.0051c280
lea ecx, [ebp - 0x2614]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
je 0x4ad369
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x26d4]
call fcn.0051dd30
push eax
push 0x617a54
lea ecx, [ebp - 0x26ec]
call fcn.0051dda0
mov eax, dword [ebp - 0x6f80]
mov ecx, dword [ebp - 0x6f68]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x2614]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x209c]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x40
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6fa0], eax
cmp eax, 0xffffffff
je 0x4ad369
push 0
push dword [ebp - 0x6f44]
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0
push 0
lea ecx, [ebp - 0x2614]
call fcn.0051dd30
push eax
push 0
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x26ec]
call fcn.0051dd30
push eax
push 0x40
push dword [ebp - 0x6fa0]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0x617624
lea ecx, [ebp - 0x2614]
call fcn.0051dd30
push eax
push 0x616138
push dword [ebp - 0x6f44]
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x6152fc
mov ecx, esi
call fcn.0051dd30
push eax
push 0x617ab0
lea ecx, [ebp - 0x26d4]
call fcn.0051dd30
push eax
push 0x60940c
lea ecx, [ebp - 0x209c]
call fcn.0051dd30
push eax
push 0x61a4c0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
lea eax, [ebp - 0x2a40]
push eax
lea eax, [ebp - 0x6ed8]
push eax
lea ecx, [ebp - 0x259c]
call fcn.004ecb60
test al, al
jne 0x4ad030
lea ecx, [ebp - 0x4a78]
call fcn.004017e0
test al, al
jne 0x4acf20
mov esi, dword [ebp - 0x6f50]
lea ecx, [ebp - 0x4a78]
call fcn.00401730
lea ecx, [ebp - 0x2614]
call fcn.0051dfd0
lea ecx, [ebp - 0x26ec]
call fcn.0051dfd0
lea ecx, [ebp - 0x26d4]
mov byte [ebp - 4], 0xcc
call fcn.0051dfd0
mov eax, dword [ebp - 0x6f44]
inc eax
mov dword [ebp - 0x6f44], eax
cmp eax, esi
jb 0x4acdf6
cmp byte [edi + 0x14], 0
jne 0x4af06b
push 0
push 0x61a4f0
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x6e2c]
push 1
push 0
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6e34], eax
mov dword [ebp - 0x6e30], 0x41
call fcn.0051e110
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0xd3
call fcn.0051dd30
lea ecx, [edi + 0x84]
mov dword [ebp - 0x6e20], eax
mov dword [ebp - 0x6e1c], 0
call fcn.0051dd30
mov dword [ebp - 0x6e18], eax
lea ecx, [ebp - 0x6e0c]
lea eax, [ebp - 0x1ff0]
mov dword [ebp - 0x6e14], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0x6e10], eax
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x235c]
mov byte [ebp - 4], 0xd4
call fcn.00401eb0
lea ecx, [ebp - 0x235c]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x22f0]
mov byte [ebp - 4], 0xd5
call fcn.00401eb0
lea ecx, [ebp - 0x22f0]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2350]
mov byte [ebp - 4], 0xd6
call fcn.00401eb0
lea ecx, [ebp - 0x2350]
call fcn.0051e180
mov byte [ebp - 4], 0xd7
cmp byte [edi + 0x14], 0
jne 0x4af03f
xor eax, eax
mov dword [ebp - 0x6f48], eax
test esi, esi
je 0x4ad75c
nop
cmp byte [edi + 0x14], 0
jne 0x4af03f
push eax
lea ecx, [ebp - 0x21f0]
call fcn.004042c0
mov ecx, eax
call fcn.0051df40
cmp eax, 5
jl 0x4ad743
mov esi, dword [ebp - 0x6f48]
lea ecx, [ebp - 0x21f0]
push esi
call fcn.004042c0
push eax
lea ecx, [ebp - 0x6e2c]
call fcn.0051e080
push esi
lea ecx, [ebp - 0x2208]
call fcn.00403500
mov ecx, dword [ebp - 0x6f68]
mov eax, dword [eax]
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
call fcn.0051dd30
push esi
lea ecx, [ebp - 0x2058]
mov dword [ebp - 0x6e1c], eax
call fcn.004042c0
push eax
lea ecx, [ebp - 0x6e0c]
call fcn.0051e080
push esi
lea ecx, [ebp - 0x2208]
call fcn.00403500
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24ec]
mov esi, eax
call fcn.0051dd30
push eax
push dword [esi]
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x235c]
call fcn.0051dda0
lea ecx, [ebp - 0x235c]
call fcn.0051dd30
mov ecx, eax
call fcn.00509340
test al, al
je 0x4ad743
lea ecx, [ebp - 0x235c]
call fcn.0051dd30
push eax
lea eax, [ebp - 0x6e34]
mov ecx, edi
push eax
call fcn.004b4c20
cmp byte [edi + 0x14], 0
jne 0x4af03f
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x2208]
call fcn.00403500
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25e4]
mov esi, eax
call fcn.0051dd30
push eax
push dword [esi]
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x235c]
call fcn.0051dda0
lea ecx, [ebp - 0x235c]
call fcn.0051dd30
mov ecx, eax
call fcn.00509340
test al, al
je 0x4ad743
push 0
lea ecx, [ebp - 0x235c]
call fcn.0051da50
lea ecx, [ebp - 0x235c]
call fcn.0051dd30
push eax
lea eax, [ebp - 0x6e34]
mov ecx, edi
push eax
call fcn.004b4c20
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x6e2c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2350]
call fcn.0051c760
test eax, eax
jne 0x4ad743
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x5fe640
lea ecx, [ebp - 0x6e2c]
call fcn.0051dd30
push eax
push 0x5fe640
lea ecx, [ebp - 0x2350]
call fcn.0051c4c0
lea ecx, [ebp - 0x2644]
mov dword [ebp - 0x6e1c], 0x60fb20
call fcn.0051dd30
push eax
lea eax, [ebp - 0x6e34]
mov ecx, edi
push eax
call fcn.004b4c20
cmp byte [edi + 0x14], 0
jne 0x4af03f
lea eax, [ebp - 0x2668]
push eax
lea ecx, [ebp - 0x235c]
call fcn.0051e080
push 0
lea ecx, [ebp - 0x235c]
call fcn.0051da50
lea ecx, [ebp - 0x235c]
call fcn.0051dd30
push eax
lea eax, [ebp - 0x6e34]
mov ecx, edi
push eax
call fcn.004b4c20
mov eax, dword [ebp - 0x6f48]
inc eax
mov dword [ebp - 0x6f48], eax
cmp eax, dword [ebp - 0x6f50]
jb 0x4ad4f0
cmp byte [edi + 0x14], 0
jne 0x4af03f
push 4
lea ecx, [ebp - 0x2130]
call fcn.00401ed0
lea ecx, [ebp - 0x2130]
call fcn.00518880
xor esi, esi
mov byte [ebp - 4], 0xd8
cmp dword [ebp - 0x6f50], esi
jbe 0x4adb88
mov dword [ebp - 0x6f58], 0
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x2208]
call fcn.00403500
mov ecx, dword [ebp - 0x6f58]
mov eax, dword [eax]
mov dword [ebp - 0x6f5c], eax
test ecx, ecx
jne 0x4ad80c
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push 0x619ca0
push eax
lea ecx, [edi + 0x3c]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
push str.HKU_
lea ecx, [ebp - 0x1f98]
call fcn.0051dda0
mov eax, dword [ebp - 0x6f5c]
mov ecx, dword [ebp - 0x6f68]
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
call fcn.0051dd30
mov dword [ebp - 0x6f48], eax
jmp 0x4ad86b
cmp ecx, 1
jne 0x4ad832
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x619ca0
push dword [ebp - 0x6f70]
jmp 0x4ad856
cmp ecx, 2
jne 0x4ad861
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x619ca0
push dword [ebp - 0x6f74]
lea ecx, [ebp - 0x1f98]
call fcn.0051dda0
mov dword [ebp - 0x6f48], 0x60fb20
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2130]
call fcn.00518810
test al, al
je 0x4adb65
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f40], 0
push eax
push 0
lea ecx, [ebp - 0x2130]
call fcn.00518170
test al, al
je 0x4adb65
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x619d30
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x5fe504
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.0051dda0
push 0
push 0x20019
lea ecx, [ebp - 0x1fc0]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x4adb3d
lea eax, [ebp - 0x22f0]
push eax
push 0x5fe50c
lea ecx, [ebp - 0x1f74]
call fcn.00518530
test al, al
je 0x4adb3d
lea ecx, [ebp - 0x22f0]
call fcn.0051da30
test al, al
jne 0x4adb3d
push dword [ebp - 0x6f5c]
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x22f0]
call fcn.0051d7b0
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x21f0]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x22f0]
call fcn.0051c760
test eax, eax
je 0x4adb3d
push esi
lea ecx, [ebp - 0x21f0]
call fcn.004042c0
mov ecx, eax
call fcn.0051df40
inc eax
lea ecx, [ebp - 0x22f0]
push eax
call fcn.0051ca50
push 0
push 0
push 0x5fe50c
push 0x5ff6d4
push 3
lea ecx, [ebp - 0x22f0]
call fcn.0051be70
mov ecx, eax
call fcn.0051c000
lea ecx, [ebp - 0x22f0]
call fcn.0051da30
test al, al
jne 0x4adb3d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x5fe504
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.0051dda0
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x6151f8
lea ecx, [ebp - 0x22f0]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4adb3d
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x22f0]
call fcn.0051dd30
push eax
push dword [ebp - 0x6f48]
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6112d0
push 5
push 0x41
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4adb3d
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0
push 0
push 0
push 0
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1fc0]
push 0
call fcn.0051dd30
push eax
push 0x41
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617624
push esi
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x6152fc
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x22f0]
push 0x615318
call fcn.0051dd30
push eax
push 0x617ca8
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
mov eax, dword [ebp - 0x6f40]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x2130]
mov dword [ebp - 0x6f40], eax
call fcn.00518170
test al, al
jne 0x4ad8b7
mov eax, dword [ebp - 0x6f58]
inc eax
mov dword [ebp - 0x6f58], eax
cmp eax, 3
jb 0x4ad7a0
inc esi
cmp esi, dword [ebp - 0x6f50]
jb 0x4ad790
cmp byte [edi + 0x14], 0
jne 0x4af034
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4adbf7
mov eax, dword [ebp - 0x6f64]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6f40], eax
nop word [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61a55c
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push str.HKU_
call fcn.0051dda0
add dword [ebp - 0x6f40], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4adbb0
mov esi, dword [ebp - 0x6f64]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61a584
push dword [ebp - 0x6f70]
lea ecx, [esi + eax*4]
call fcn.0051dda0
cmp byte [ebp - 0x6f49], 0
je 0x4adc5e
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x61a584
push dword [ebp - 0x6f74]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.0051dda0
push 0
push 0x61a5b0
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
lea ecx, [ebp - 0x2350]
call fcn.0051dfa0
mov edx, dword [ebp - 0x6f6c]
test edx, edx
je 0x4ae453
mov eax, dword [ebp - 0x6f64]
mov ecx, edx
mov esi, dword [ebp - 0x6f68]
sub eax, esi
mov dword [ebp - 0x6f80], eax
mov eax, dword [ebp - 0x6f50]
mov dword [ebp - 0x6f40], ecx
nop dword [eax + eax]
xor edx, edx
mov dword [ebp - 0x6f58], edx
test eax, eax
je 0x4ae441
cmp byte [edi + 0x14], 0
jne 0x4ae43b
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push edx
lea ecx, [ebp - 0x2368]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f80]
push eax
push 0x5fe504
lea ecx, [esi + ecx]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2120]
call fcn.0051dda0
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2120]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2350]
call fcn.0051c760
test eax, eax
jne 0x4ae420
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x5fe640
lea ecx, [ebp - 0x2120]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2350]
call fcn.0051c4c0
push 0
push 0x20019
lea ecx, [ebp - 0x2120]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x4adf7d
lea eax, [ebp - 0x201c]
push eax
push 0x611484
lea ecx, [ebp - 0x1f74]
call fcn.00518530
test al, al
je 0x4adf7d
lea eax, [ebp - 0x21ac]
mov dword [ebp - 0x21ac], 0
push eax
push 0x611524
lea ecx, [ebp - 0x1f74]
call fcn.005184a0
test al, al
je 0x4addd3
cmp dword [ebp - 0x21ac], 0
jne 0x4adf7d
push 0
push 1
push 1
push 0
push 0x61754c
lea ecx, [ebp - 0x201c]
call fcn.0051c760
test eax, eax
jne 0x4adf7d
push eax
push 1
push 1
push eax
push 0x61756c
lea ecx, [ebp - 0x201c]
call fcn.0051c760
test eax, eax
jne 0x4adf7d
push eax
push 1
push 1
push eax
push 0x6175bc
lea ecx, [ebp - 0x201c]
call fcn.0051c760
test eax, eax
jne 0x4adf7d
push eax
push 1
push 1
push eax
push 0x6175a0
lea ecx, [ebp - 0x201c]
call fcn.0051c760
test eax, eax
jne 0x4adf7d
push eax
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x61a610
lea ecx, [ebp - 0x201c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4adf7d
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x201c]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x611484
push 5
push 0x43
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6fa0], eax
cmp eax, 0xffffffff
je 0x4adf7d
push 0
push dword [ebp - 0x6f58]
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0
push 0
push 0
push 0x611484
mov ecx, esi
call fcn.0051dd30
push eax
push 0
lea ecx, [ebp - 0x2120]
call fcn.0051dd30
push eax
push 0x43
push dword [ebp - 0x6fa0]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617624
push dword [ebp - 0x6f58]
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x6152fc
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x201c]
call fcn.0051dd30
push eax
push 0x61a660
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
lea eax, [ebp - 0x201c]
push eax
push 0x6115c4
lea ecx, [ebp - 0x1f74]
call fcn.00518530
test al, al
je 0x4ae1e1
lea eax, [ebp - 0x21ac]
mov dword [ebp - 0x21ac], 0
push eax
push 0x6116c4
lea ecx, [ebp - 0x1f74]
call fcn.005184a0
test al, al
je 0x4adfce
cmp dword [ebp - 0x21ac], 0
je 0x4ae1e1
push 0
push 1
push 1
push 0
push 0x61754c
lea ecx, [ebp - 0x201c]
call fcn.0051c760
test eax, eax
jne 0x4ae1e1
push eax
push 1
push 1
push eax
push 0x61756c
lea ecx, [ebp - 0x201c]
call fcn.0051c760
test eax, eax
jne 0x4ae1e1
push eax
push 1
push 1
push eax
push 0x6175bc
lea ecx, [ebp - 0x201c]
call fcn.0051c760
test eax, eax
jne 0x4ae1e1
push eax
push 1
push 1
push eax
push 0x6175a0
lea ecx, [ebp - 0x201c]
call fcn.0051c760
test eax, eax
jne 0x4ae1e1
push eax
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x61a610
lea ecx, [ebp - 0x201c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4ae1e1
lea eax, [ebp - 0x209c]
push eax
push 0x611690
lea ecx, [ebp - 0x1f74]
call fcn.00518530
test al, al
je 0x4ae1e1
lea ecx, [ebp - 0x209c]
call fcn.0051da30
test al, al
jne 0x4ae1e1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617e60
lea ecx, [ebp - 0x209c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x22f0]
call fcn.0051dda0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x201c]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x22f0]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x43
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6fa0], eax
cmp eax, 0xffffffff
je 0x4ae1e1
push 0
push dword [ebp - 0x6f58]
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0
push 0
push 0
push 0x6115c4
mov ecx, esi
call fcn.0051dd30
push eax
push 0
lea ecx, [ebp - 0x2120]
call fcn.0051dd30
push eax
push 0x43
push dword [ebp - 0x6fa0]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617624
push dword [ebp - 0x6f58]
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x6152fc
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x201c]
call fcn.0051dd30
push eax
push 0x61a6a0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
lea eax, [ebp - 0x21ac]
mov dword [ebp - 0x21ac], 0
push eax
push 0x617ee8
lea ecx, [ebp - 0x1f74]
call fcn.005184a0
test al, al
je 0x4ae420
cmp dword [ebp - 0x21ac], 4
jne 0x4ae420
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617f0c
lea ecx, [ebp - 0x2120]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f98]
call fcn.0051dda0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2130]
call fcn.00518810
test al, al
je 0x4ae420
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f5c], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.005180d0
test al, al
je 0x4ae420
lea eax, [ebp - 0x201c]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f74]
call fcn.00518530
test al, al
je 0x4ae3f8
lea ecx, [ebp - 0x201c]
call fcn.0051da30
test al, al
jne 0x4ae3f8
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x61a610
lea ecx, [ebp - 0x201c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4ae3f8
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x201c]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x611880
push 5
push 0x43
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6fa0], eax
cmp eax, 0xffffffff
je 0x4ae3f8
push 0
push dword [ebp - 0x6f58]
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
mov ecx, esi
call fcn.0051dd30
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
push 0x43
push dword [ebp - 0x6fa0]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617624
push dword [ebp - 0x6f58]
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x6152fc
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x201c]
call fcn.0051dd30
push eax
push 0x61a6ec
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
mov eax, dword [ebp - 0x6f5c]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f5c], eax
call fcn.005180d0
test al, al
jne 0x4ae293
mov edx, dword [ebp - 0x6f58]
mov eax, dword [ebp - 0x6f50]
inc edx
mov dword [ebp - 0x6f58], edx
cmp edx, eax
jb 0x4adcc0
mov ecx, dword [ebp - 0x6f40]
add esi, 0xc
sub ecx, 1
mov dword [ebp - 0x6f40], ecx
jne 0x4adcb0
cmp byte [edi + 0x14], 0
jne 0x4af034
push 0
push 0x61a720
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
mov esi, dword [ebp - 0x6f50]
xor eax, eax
mov dword [ebp - 0x6f44], eax
test esi, esi
je 0x4aea0a
cmp byte [edi + 0x14], 0
jne 0x4af034
push eax
lea ecx, [ebp - 0x2208]
call fcn.00403500
push 0x61a090
push dword [ebp - 0x6f44]
lea ecx, [ebp - 0x2058]
mov eax, dword [eax]
mov dword [ebp - 0x6f5c], eax
call fcn.004042c0
mov ecx, eax
call fcn.0051e060
mov byte [ebp - 0x6f5d], al
lea ecx, [ebp - 0x21c0]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
je 0x4ae4eb
push 0x61a1dc
jmp 0x4ae4f0
push 0x61a1e8
push dword [ebp - 0x6f44]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2068]
call fcn.0051dda0
push 0x260
lea ecx, [ebp - 0x3c38]
call fcn.00401f00
push 1
lea ecx, [ebp - 0x2068]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x3c38]
call fcn.004016e0
push 3
lea ecx, [ebp - 0x2068]
mov byte [ebp - 4], 0xd9
call fcn.0051cac0
lea ecx, [ebp - 0x3c38]
call fcn.00401820
test al, al
je 0x4ae9e6
mov esi, dword [ebp - 0x6f44]
push 1
lea ecx, [ebp - 0x3c38]
call fcn.00401890
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.0051e0b0
cmp byte [ebp - 0x6f5d], 0
jne 0x4ae5b8
push 0x6174ec
lea ecx, [ebp - 0x1fc0]
call fcn.0051e020
test al, al
je 0x4ae5b8
push 0
push 1
push 1
push 0
push 0x6174fc
lea ecx, [ebp - 0x1fc0]
call fcn.0051c760
cmp eax, 1
jne 0x4ae9cd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617510
push 1
lea ecx, [ebp - 0x3c38]
call fcn.00401890
push eax
lea ecx, [ebp - 0x2068]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.0051dda0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61a778
push esi
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x61a7a0
lea ecx, [ebp - 0x209c]
call fcn.0051dda0
lea ecx, [ebp - 0x1fc0]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
je 0x4ae7e0
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x61a7b0
lea ecx, [ebp - 0x209c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4ae7e0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61a778
push esi
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x61a7a0
lea ecx, [ebp - 0x209c]
call fcn.0051dda0
mov eax, dword [ebp - 0x6f5c]
mov ecx, dword [ebp - 0x6f68]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x1fc0]
mov dword [ebp - 0x6f40], eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x209c]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x42
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4ae9cd
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
push 0
push 0
push 0
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.0051dd30
push eax
push 0
push 0x42
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0x617fb8
lea ecx, [ebp - 0x1fc0]
call fcn.0051dd30
push eax
push 0x616bec
push esi
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x6152fc
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x209c]
call fcn.0051dd30
push eax
push 0x617ff0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61a7fc
push esi
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x61a7a0
lea ecx, [ebp - 0x209c]
call fcn.0051dda0
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x61a7b0
lea ecx, [ebp - 0x209c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4ae9cd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x618014
push 1
lea ecx, [ebp - 0x3c38]
call fcn.00401890
push eax
lea ecx, [ebp - 0x2068]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.0051dda0
lea ecx, [ebp - 0x1fc0]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
je 0x4ae9cd
mov eax, dword [ebp - 0x6f5c]
mov ecx, dword [ebp - 0x6f68]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x1fc0]
mov dword [ebp - 0x6f40], eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x209c]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x42
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4ae9cd
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
push 0
push 0
push 0
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.0051dd30
push eax
push 0
push 0x42
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0x617fb8
lea ecx, [ebp - 0x1fc0]
call fcn.0051dd30
push eax
push 0x616bec
push esi
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x6152fc
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x209c]
call fcn.0051dd30
push eax
push 0x617ff0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
lea ecx, [ebp - 0x3c38]
call fcn.004017e0
test al, al
jne 0x4ae561
mov esi, dword [ebp - 0x6f50]
lea ecx, [ebp - 0x3c38]
mov byte [ebp - 4], 0xd8
call fcn.00401730
mov eax, dword [ebp - 0x6f44]
inc eax
mov dword [ebp - 0x6f44], eax
cmp eax, esi
jb 0x4ae485
cmp byte [edi + 0x14], 0
jne 0x4af034
xor eax, eax
mov dword [ebp - 0x6f44], eax
test esi, esi
je 0x4aed14
cmp byte [edi + 0x14], 0
jne 0x4aed14
push eax
lea ecx, [ebp - 0x21f0]
call fcn.004042c0
push eax
lea ecx, [ebp - 0x1fc0]
call fcn.0051e080
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x1fc0]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2350]
call fcn.0051c760
test eax, eax
jne 0x4aecff
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x5fe640
lea ecx, [ebp - 0x1fc0]
call fcn.0051dd30
push eax
push 0x5fe640
lea ecx, [ebp - 0x2350]
call fcn.0051c4c0
push 1
lea ecx, [ebp - 0x1fc0]
call fcn.0051da50
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x618030
lea ecx, [ebp - 0x1fc0]
call fcn.0051c4c0
lea ecx, [ebp - 0x1fc0]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
je 0x4aecff
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61a818
push dword [ebp - 0x6f44]
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x61a7a0
lea ecx, [ebp - 0x209c]
call fcn.0051dda0
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x61a7b0
lea ecx, [ebp - 0x209c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4aecff
push 0
lea ecx, [ebp - 0x1fc0]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x259c]
call fcn.004ed860
test al, al
je 0x4aecff
lea eax, [ebp - 0x2a1c]
push eax
push 0x605c04
push 0x617538
lea ecx, [ebp - 0x259c]
call fcn.004ed140
test al, al
jne 0x4aebf7
lea eax, [ebp - 0x2a1c]
push eax
push 0x605c04
push 0x617678
lea ecx, [ebp - 0x259c]
call fcn.004ed140
test al, al
jne 0x4aebf7
lea eax, [ebp - 0x2a1c]
push eax
push 0x605c04
push 0x611108
lea ecx, [ebp - 0x259c]
call fcn.004ed140
test al, al
jne 0x4aebf7
lea eax, [ebp - 0x2a1c]
push eax
push 0x605c04
push 0x617a04
lea ecx, [ebp - 0x259c]
call fcn.004ed140
test al, al
je 0x4aecff
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fc0]
call fcn.0051dd30
push eax
push 0x60fb20
lea ecx, [ebp - 0x209c]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x42
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4aecff
push 0
push dword [ebp - 0x6f44]
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0
push 0
push 0
push 0
push 0x60fb20
lea ecx, [ebp - 0x1fc0]
call fcn.0051dd30
push eax
push 0
push 0x42
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0x617624
lea ecx, [ebp - 0x1fc0]
call fcn.0051dd30
push eax
push 0x616bec
push dword [ebp - 0x6f44]
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x6152fc
push 0x6161dc
lea ecx, [ebp - 0x209c]
call fcn.0051dd30
push eax
push 0x617ff0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
mov eax, dword [ebp - 0x6f44]
inc eax
mov dword [ebp - 0x6f44], eax
cmp eax, esi
jb 0x4aea24
lea ecx, [ebp - 0x2350]
call fcn.0051dfa0
cmp dword [ebp - 0x6f6c], 0
jbe 0x4af021
mov eax, dword [ebp - 0x6f68]
mov ecx, dword [ebp - 0x6f64]
sub ecx, eax
mov dword [ebp - 0x6f44], eax
mov dword [ebp - 0x6f80], ecx
mov ecx, dword [ebp - 0x6f6c]
mov dword [ebp - 0x6f5c], ecx
xor edx, edx
mov dword [ebp - 0x6f58], edx
test esi, esi
je 0x4af009
cmp byte [edi + 0x14], 0
jne 0x4aeffd
push 0
push 1
push 1
push 0
push edx
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2350]
call fcn.0051c760
test eax, eax
jne 0x4aefe8
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x5fe640
push dword [ebp - 0x6f58]
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x5fe640
lea ecx, [ebp - 0x2350]
call fcn.0051c4c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6f58]
lea ecx, [ebp - 0x2368]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f80]
add ecx, dword [ebp - 0x6f44]
push eax
push 0x5fe504
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2120]
call fcn.0051dda0
push 0
push 0x20019
lea ecx, [ebp - 0x2120]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x4aefe8
xor dl, dl
lea ecx, [ebp - 0x1f74]
call fcn.00515e10
test al, al
jne 0x4aefe8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61a844
push dword [ebp - 0x6f58]
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x61a7a0
lea ecx, [ebp - 0x209c]
call fcn.0051dda0
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x61a7b0
lea ecx, [ebp - 0x209c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4aefe8
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2120]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x209c]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x42
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6fa0], eax
cmp eax, 0xffffffff
je 0x4aefe8
push 0
push dword [ebp - 0x6f58]
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f44]
push eax
push 0
push 0
push 0
push 0
call fcn.0051dd30
push eax
push 0
lea ecx, [ebp - 0x2120]
call fcn.0051dd30
push eax
push 0x42
push dword [ebp - 0x6fa0]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0x617fb8
lea ecx, [ebp - 0x2120]
call fcn.0051dd30
push eax
push 0x616bec
push dword [ebp - 0x6f58]
lea ecx, [ebp - 0x2058]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f44]
push eax
push 0x6152fc
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x209c]
call fcn.0051dd30
push eax
push 0x617ff0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
mov edx, dword [ebp - 0x6f58]
inc edx
mov dword [ebp - 0x6f58], edx
cmp edx, esi
jb 0x4aed62
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [ebp - 0x6f5c]
add eax, 0xc
sub ecx, 1
mov dword [ebp - 0x6f44], eax
mov dword [ebp - 0x6f5c], ecx
jne 0x4aed52
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004f31a0
lea ecx, [ebp - 0x2130]
call fcn.005187c0
lea ecx, [ebp - 0x2350]
call fcn.0051dfd0
lea ecx, [ebp - 0x22f0]
call fcn.0051dfd0
lea ecx, [ebp - 0x235c]
call fcn.0051dfd0
lea ecx, [ebp - 0x6e34]
call fcn.00402b30
lea ecx, [ebp - 0x280c]
call fcn.00401f90
lea ecx, [ebp - 0x2208]
call fcn.004033c0
lea ecx, [ebp - 0x21f0]
call fcn.004042e0
lea ecx, [ebp - 0x2058]
call fcn.004042e0
lea ecx, [ebp - 0x2368]
call fcn.004042e0
lea ecx, [ebp - 0x21c0]
call fcn.004042e0
lea ecx, [ebp - 0x32b8]
call fcn.00401730
lea ecx, [ebp - 0x2df8]
call fcn.00401730
lea ecx, [ebp - 0x259c]
call fcn.00401fd0
lea ecx, [ebp - 0x209c]
call fcn.0051dfd0
lea ecx, [ebp - 0x201c]
call fcn.0051dfd0
lea ecx, [ebp - 0x24e0]
call fcn.0051dfd0
lea ecx, [ebp - 0x1fc0]
call fcn.0051dfd0
lea ecx, [ebp - 0x2068]
mov byte [ebp - 4], 0x45
call fcn.0051dfd0
cmp byte [edi + 0x14], 0
jne 0x4b3e7a
test dword [edi + 0x34], 0x1000
jne 0x4b1c79
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x61a858
push dword [eax + 0x38]
call fcn.004f44b0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x34
push dword [eax + 0x34]
call fcn.004f1310
push 0xc
lea ecx, [ebp - 0x22a0]
call fcn.00401eb0
push 0xa
push 0
lea ecx, [ebp - 0x22a0]
call fcn.00404350
push 0xc
lea ecx, [ebp - 0x222c]
mov byte [ebp - 4], 0xda
call fcn.00401eb0
push 0xa
push 0
lea ecx, [ebp - 0x222c]
call fcn.00404350
push 0xc
lea ecx, [ebp - 0x2374]
mov byte [ebp - 4], 0xdb
call fcn.00401eb0
push 0xa
push 0
lea ecx, [ebp - 0x2374]
call fcn.00404350
push 0xc
lea ecx, [ebp - 0x20a8]
mov byte [ebp - 4], 0xdc
call fcn.00401eb0
lea ecx, [ebp - 0x20a8]
call fcn.00403fc0
push 0xc
lea ecx, [ebp - 0x2270]
mov byte [ebp - 4], 0xdd
call fcn.00401eb0
push 0xa
push 0
lea ecx, [ebp - 0x2270]
call fcn.00403520
push 0x260
lea ecx, [ebp - 0x3058]
mov byte [ebp - 4], 0xde
call fcn.00401f00
lea ecx, [ebp - 0x3058]
call fcn.004016b0
push 0x260
lea ecx, [ebp - 0x3518]
mov byte [ebp - 4], 0xdf
call fcn.00401f00
lea ecx, [ebp - 0x3518]
call fcn.004016b0
push 0xc
lea ecx, [ebp - 0x2080]
mov byte [ebp - 4], 0xe0
call fcn.00401eb0
lea ecx, [ebp - 0x2080]
call fcn.0051e180
xor esi, esi
mov byte [ebp - 4], 0xe1
cmp dword [edi + 0x30], esi
jbe 0x4af5ff
push 1
push 1
lea ecx, [ebp - 0x3058]
call fcn.00401890
push eax
lea ecx, [ebp - 0x2080]
call fcn.0051de00
push 0x612090
lea ecx, [ebp - 0x2080]
call fcn.0051e060
test al, al
jne 0x4af5f5
push str.Microsoft
lea ecx, [ebp - 0x2080]
call fcn.0051e060
test al, al
jne 0x4af5f5
push 0x619eb4
lea ecx, [ebp - 0x2080]
call fcn.0051e060
test al, al
jne 0x4af5f5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe654
lea ecx, [ebp - 0x2238]
call fcn.0051dd30
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2154]
call fcn.0051dda0
push 5
lea ecx, [ebp - 0x2154]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x3058]
call fcn.00401830
test al, al
je 0x4af561
mov edi, dword [ebp - 0x6fb4]
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61a88c
push 1
lea ecx, [ebp - 0x3058]
call fcn.00401890
push eax
push 0x5fe504
lea ecx, [ebp - 0x2238]
call fcn.0051dd30
push eax
push esi
mov ecx, edi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2154]
call fcn.0051dda0
lea ecx, [ebp - 0x2154]
call fcn.0051dd30
push eax
call dword [0x5de638]
test eax, eax
je 0x4af548
push 1
lea ecx, [ebp - 0x3058]
call fcn.00401890
push eax
lea ecx, [ebp - 0x2080]
call fcn.0051e0b0
push eax
lea eax, [ebp - 0x20a8]
push eax
push esi
lea eax, [ebp - 0x2270]
push eax
lea eax, [ebp - 0x2374]
push eax
lea eax, [ebp - 0x222c]
push eax
push 0
lea ecx, [ebp - 0x2154]
call fcn.0051da50
lea edx, [ebp - 0x22a0]
mov ecx, eax
call fcn.004c73e0
test al, al
jne 0x4af548
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe654
lea ecx, [ebp - 0x2154]
call fcn.0051c4c0
push 5
lea ecx, [ebp - 0x2154]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x3518]
call fcn.00401830
test al, al
je 0x4af548
nop word [eax + eax]
push 0
push 1
lea ecx, [ebp - 0x3518]
call fcn.00401890
mov edx, 0x61a8a0
mov ecx, eax
call fcn.0051a8a0
test eax, eax
je 0x4af535
push 0
push 0
push 0
push 0
push 0
push 0x61a88c
push 1
lea ecx, [ebp - 0x3518]
call fcn.00401890
push eax
push 0x5fe504
push 1
lea ecx, [ebp - 0x3058]
call fcn.00401890
push eax
push 0x5fe504
lea ecx, [ebp - 0x2238]
call fcn.0051dd30
push eax
push esi
mov ecx, edi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2154]
call fcn.0051dda0
lea ecx, [ebp - 0x2154]
call fcn.0051dd30
push eax
call dword [0x5de638]
test eax, eax
je 0x4af535
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x3518]
call fcn.00401890
push eax
push 0x5ff58c
push 1
lea ecx, [ebp - 0x3058]
call fcn.00401890
push eax
lea ecx, [ebp - 0x2080]
call fcn.0051dda0
lea eax, [ebp - 0x2080]
push eax
lea eax, [ebp - 0x20a8]
push eax
push esi
lea eax, [ebp - 0x2270]
push eax
lea eax, [ebp - 0x2374]
push eax
lea eax, [ebp - 0x222c]
push eax
push 0
lea ecx, [ebp - 0x2154]
call fcn.0051da50
lea edx, [ebp - 0x22a0]
mov ecx, eax
call fcn.004c73e0
lea ecx, [ebp - 0x3518]
call fcn.004017e0
test al, al
jne 0x4af420
lea ecx, [ebp - 0x3058]
call fcn.004017e0
test al, al
jne 0x4af310
mov edi, dword [ebp - 0x6f54]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61a8b0
lea ecx, [ebp - 0x24ec]
call fcn.0051dd30
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2154]
call fcn.0051dda0
lea ecx, [ebp - 0x2154]
call fcn.0051dd30
push eax
call dword [0x5de638]
test eax, eax
je 0x4af5f5
push 0x61a90c
lea ecx, [ebp - 0x2080]
call fcn.0051e0b0
push eax
lea eax, [ebp - 0x20a8]
push eax
push esi
lea eax, [ebp - 0x2270]
push eax
lea eax, [ebp - 0x2374]
push eax
lea eax, [ebp - 0x222c]
push eax
lea edx, [ebp - 0x22a0]
lea ecx, [ebp - 0x2154]
call fcn.004c73e0
inc esi
cmp esi, dword [edi + 0x30]
jb 0x4af246
lea ecx, [ebp - 0x22a0]
call fcn.00404090
cmp byte [edi + 0x14], 0
mov dword [ebp - 0x6f50], eax
jne 0x4b1c1d
test eax, eax
jne 0x4af634
push eax
push 0x61a930
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
jmp 0x4b1c1d
push 0xc
lea ecx, [ebp - 0x21fc]
call fcn.00401eb0
lea ecx, [ebp - 0x21fc]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2040]
mov byte [ebp - 4], 0xe2
call fcn.00401eb0
lea ecx, [ebp - 0x2040]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x25c0]
mov byte [ebp - 4], 0xe3
call fcn.00401eb0
lea ecx, [ebp - 0x25c0]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x21cc]
mov byte [ebp - 4], 0xe4
call fcn.00401eb0
lea ecx, [ebp - 0x21cc]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2434]
mov byte [ebp - 4], 0xe5
call fcn.00401eb0
lea ecx, [ebp - 0x2434]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2320]
mov byte [ebp - 4], 0xe6
call fcn.00401eb0
lea ecx, [ebp - 0x2320]
call fcn.0051e180
push 0x20
lea ecx, [ebp - 0x2978]
mov byte [ebp - 4], 0xe7
call fcn.00401fb0
lea ecx, [ebp - 0x2978]
call fcn.0050c930
mov byte [ebp - 4], 0xe8
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004f31a0
push 0
push 0x61a9b0
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
xor esi, esi
mov dword [ebp - 0x6f44], esi
cmp dword [ebp - 0x6f50], esi
jbe 0x4afb31
push esi
lea ecx, [ebp - 0x2270]
call fcn.00403500
push 0
push 0
push 0
mov eax, dword [eax]
lea ecx, [ebp - 0x22a0]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe504
push esi
mov dword [ebp - 0x6f80], eax
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2434]
call fcn.0051dda0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6197a8
lea ecx, [ebp - 0x2434]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2320]
call fcn.0051dda0
lea ecx, [ebp - 0x2320]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
je 0x4afb1e
lea eax, [ebp - 0x21fc]
xor edx, edx
push eax
lea ecx, [ebp - 0x2320]
mov dword [ebp - 0x6f40], edx
call fcn.0051dd30
xor edx, edx
mov ecx, eax
call fcn.004c7ce0
test al, al
je 0x4afb1e
lea ecx, [ebp - 0x21fc]
call fcn.0051dd30
mov ecx, eax
call fcn.00509340
test al, al
je 0x4afaf1
push 0xc
lea ecx, [ebp - 0x2480]
call fcn.00401eb0
lea ecx, [ebp - 0x2480]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2620]
mov byte [ebp - 4], 0xe9
call fcn.00401eb0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6197c4
lea ecx, [ebp - 0x21fc]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2620]
call fcn.0051e0c0
lea eax, [ebp - 0x2480]
mov byte [ebp - 4], 0xea
push eax
lea ecx, [ebp - 0x2620]
call fcn.0051dd30
mov edx, 0x613b04
mov ecx, eax
call fcn.004c7a50
test al, al
je 0x4afad7
push 0
push 1
push 1
push 0
push 0x61754c
lea ecx, [ebp - 0x2480]
call fcn.0051c760
test eax, eax
jne 0x4afad7
push eax
push 1
push 1
push eax
push 0x61756c
lea ecx, [ebp - 0x2480]
call fcn.0051c760
test eax, eax
jne 0x4afad7
push eax
push 1
push 1
push eax
push 0x6175bc
lea ecx, [ebp - 0x2480]
call fcn.0051c760
test eax, eax
jne 0x4afad7
push eax
push 1
push 1
push eax
push 0x6175a0
lea ecx, [ebp - 0x2480]
call fcn.0051c760
test eax, eax
jne 0x4afad7
push eax
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x61aa20
lea ecx, [ebp - 0x2480]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4afad7
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61aa6c
push esi
lea ecx, [ebp - 0x20a8]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2080]
call fcn.0051dda0
mov eax, dword [ebp - 0x6f80]
mov ecx, dword [ebp - 0x6f68]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x2480]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2080]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x47
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6fa0], eax
cmp eax, 0xffffffff
jne 0x4af9ec
lea ecx, [ebp - 0x2620]
call fcn.0051dfd0
lea ecx, [ebp - 0x2480]
mov byte [ebp - 4], 0xe8
call fcn.0051dfd0
mov esi, dword [ebp - 0x6f44]
jmp 0x4afaf1
push 0
push dword [ebp - 0x6f44]
lea ecx, [ebp - 0x20a8]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2620]
call fcn.0051dd30
push eax
push 0
push 0x47
push dword [ebp - 0x6fa0]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0x617624
lea ecx, [ebp - 0x2620]
call fcn.0051dd30
push eax
push 0x616138
push dword [ebp - 0x6f44]
lea ecx, [ebp - 0x20a8]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x6152fc
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x2480]
call fcn.0051dd30
push eax
push 0x619804
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
lea ecx, [ebp - 0x2620]
call fcn.0051dfd0
lea ecx, [ebp - 0x2480]
mov byte [ebp - 4], 0xe8
call fcn.0051dfd0
mov esi, dword [ebp - 0x6f44]
jmp 0x4afaf1
lea ecx, [ebp - 0x2620]
call fcn.0051dfd0
lea ecx, [ebp - 0x2480]
mov byte [ebp - 4], 0xe8
call fcn.0051dfd0
inc dword [ebp - 0x6f40]
lea eax, [ebp - 0x21fc]
push eax
lea ecx, [ebp - 0x2320]
call fcn.0051dd30
mov edx, dword [ebp - 0x6f40]
mov ecx, eax
call fcn.004c7ce0
test al, al
jne 0x4af7f2
inc esi
mov dword [ebp - 0x6f44], esi
cmp esi, dword [ebp - 0x6f50]
jb 0x4af731
cmp byte [edi + 0x14], 0
jne 0x4b1bd0
push 0xc
lea ecx, [ebp - 0x25b4]
call fcn.00401eb0
push 1
push 0x6198e8
lea ecx, [ebp - 0x25b4]
call fcn.0051e110
push 0
push 0x61aa90
lea ecx, [ebp - 0x1ff0]
mov byte [ebp - 4], 0xeb
call fcn.0050b8e0
xor esi, esi
mov dword [ebp - 0x6f44], esi
cmp dword [ebp - 0x6f50], esi
jbe 0x4aff6b
push esi
lea ecx, [ebp - 0x2270]
call fcn.00403500
push 0
push 0
push 0
mov eax, dword [eax]
lea ecx, [ebp - 0x22a0]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe504
push esi
mov dword [ebp - 0x6f80], eax
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2434]
call fcn.0051dda0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6197a8
lea ecx, [ebp - 0x2434]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2320]
call fcn.0051dda0
lea ecx, [ebp - 0x2320]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
je 0x4aff58
lea eax, [ebp - 0x21fc]
xor edx, edx
push eax
lea ecx, [ebp - 0x2320]
mov dword [ebp - 0x6f40], edx
call fcn.0051dd30
xor edx, edx
mov ecx, eax
call fcn.004c7ce0
test al, al
je 0x4aff58
lea ecx, [ebp - 0x21fc]
call fcn.0051dd30
mov ecx, eax
call fcn.00509340
test al, al
je 0x4aff2b
push 0xc
lea ecx, [ebp - 0x2470]
call fcn.00401eb0
lea ecx, [ebp - 0x2470]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x262c]
mov byte [ebp - 4], 0xec
call fcn.00401eb0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6197c4
lea ecx, [ebp - 0x21fc]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x262c]
call fcn.0051e0c0
lea eax, [ebp - 0x2470]
mov byte [ebp - 4], 0xed
push eax
lea ecx, [ebp - 0x262c]
call fcn.0051dd30
mov edx, 0x613c20
mov ecx, eax
call fcn.004c7a50
test al, al
je 0x4aff11
push 0x612090
lea ecx, [ebp - 0x2470]
call fcn.0051e060
test al, al
jne 0x4aff11
push 0x6199ec
lea ecx, [ebp - 0x2470]
call fcn.0051e060
test al, al
jne 0x4aff11
push 0x6199f8
lea ecx, [ebp - 0x2470]
call fcn.0051e060
test al, al
jne 0x4aff11
push 0x619a04
lea ecx, [ebp - 0x2470]
call fcn.0051e060
test al, al
jne 0x4aff11
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x61aaf0
lea ecx, [ebp - 0x2470]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4aff11
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61ab40
push esi
lea ecx, [ebp - 0x20a8]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2080]
call fcn.0051dda0
mov eax, dword [ebp - 0x6f80]
mov ecx, dword [ebp - 0x6f68]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x2470]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2080]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x48
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6fa0], eax
cmp eax, 0xffffffff
jne 0x4afe26
lea ecx, [ebp - 0x262c]
call fcn.0051dfd0
lea ecx, [ebp - 0x2470]
mov byte [ebp - 4], 0xeb
call fcn.0051dfd0
mov esi, dword [ebp - 0x6f44]
jmp 0x4aff2b
push 0
push dword [ebp - 0x6f44]
lea ecx, [ebp - 0x20a8]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x262c]
call fcn.0051dd30
push eax
push 0
push 0x48
push dword [ebp - 0x6fa0]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0x617624
lea ecx, [ebp - 0x262c]
call fcn.0051dd30
push eax
push 0x616138
push dword [ebp - 0x6f44]
lea ecx, [ebp - 0x20a8]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x6152fc
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x2470]
call fcn.0051dd30
push eax
push 0x619a50
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
lea ecx, [ebp - 0x262c]
call fcn.0051dfd0
lea ecx, [ebp - 0x2470]
mov byte [ebp - 4], 0xeb
call fcn.0051dfd0
mov esi, dword [ebp - 0x6f44]
jmp 0x4aff2b
lea ecx, [ebp - 0x262c]
call fcn.0051dfd0
lea ecx, [ebp - 0x2470]
mov byte [ebp - 4], 0xeb
call fcn.0051dfd0
inc dword [ebp - 0x6f40]
lea eax, [ebp - 0x21fc]
push eax
lea ecx, [ebp - 0x2320]
call fcn.0051dd30
mov edx, dword [ebp - 0x6f40]
mov ecx, eax
call fcn.004c7ce0
test al, al
jne 0x4afc45
inc esi
mov dword [ebp - 0x6f44], esi
cmp esi, dword [ebp - 0x6f50]
jb 0x4afb84
cmp byte [edi + 0x14], 0
jne 0x4b1bc5
push 0xc
lea ecx, [ebp - 0x241c]
call fcn.00401eb0
lea ecx, [ebp - 0x241c]
call fcn.0051e180
xor esi, esi
mov byte [ebp - 4], 0xee
mov dword [ebp - 0x6f40], esi
cmp dword [ebp - 0x6f50], esi
jbe 0x4b0390
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x222c]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x241c]
call fcn.0051c760
test eax, eax
jne 0x4b037d
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x604a10
push esi
lea ecx, [ebp - 0x222c]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x241c]
call fcn.0051c4c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x619a7c
push esi
lea ecx, [ebp - 0x222c]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2040]
call fcn.0051dda0
push 0x260
lea ecx, [ebp - 0x3e98]
call fcn.00401f00
push 1
lea ecx, [ebp - 0x2040]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x3e98]
call fcn.004016e0
push 1
lea ecx, [ebp - 0x2040]
mov byte [ebp - 4], 0xef
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x3e98]
call fcn.00401830
test al, al
je 0x4b036e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe640
push 1
lea ecx, [ebp - 0x3e98]
call fcn.00401890
push eax
push 0x5fe640
lea ecx, [ebp - 0x21cc]
call fcn.0051dda0
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x21cc]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x25b4]
call fcn.0051c760
test eax, eax
jne 0x4b035b
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 1
lea ecx, [ebp - 0x3e98]
call fcn.00401890
push eax
push 0x5fe504
push esi
lea ecx, [ebp - 0x222c]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2040]
call fcn.0051dda0
lea ecx, [ebp - 0x21cc]
call fcn.0051dfa0
push 0
push 0x80
lea ecx, [ebp - 0x2040]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2978]
call fcn.0050c260
test eax, eax
je 0x4b01d0
push 0
lea eax, [ebp - 0x21cc]
push eax
lea ecx, [ebp - 0x2978]
call fcn.0050c080
test eax, eax
je 0x4b01d0
push 0
push 1
push 1
push 0
push 0x619a8c
lea ecx, [ebp - 0x21cc]
call fcn.0051c760
mov esi, eax
push 0
lea ecx, [esi + 0xa]
push ecx
push 1
push 0
push 0x619aa4
lea ecx, [ebp - 0x21cc]
call fcn.0051c760
test esi, esi
je 0x4b01bf
test eax, eax
je 0x4b01bf
sub eax, esi
lea ecx, [ebp - 0x21cc]
sub eax, 0xb
push eax
lea eax, [esi + 0xb]
push eax
call fcn.0051ca10
jmp 0x4b01ca
lea ecx, [ebp - 0x21cc]
call fcn.0051dfa0
mov esi, dword [ebp - 0x6f40]
lea ecx, [ebp - 0x21cc]
call fcn.0051da30
test al, al
je 0x4b0207
push 1
lea ecx, [ebp - 0x3e98]
call fcn.00401890
push eax
lea ecx, [ebp - 0x21cc]
call fcn.0051e0b0
push 0
lea ecx, [ebp - 0x21cc]
call fcn.0051dac0
jmp 0x4b0214
push 3
lea ecx, [ebp - 0x21cc]
call fcn.0051be70
push 0x61ab74
lea ecx, [ebp - 0x21cc]
call fcn.0051e060
test al, al
jne 0x4b035b
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x61aaf0
lea ecx, [ebp - 0x2040]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4b035b
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2040]
call fcn.0051dd30
push eax
push 0x60fb20
lea ecx, [ebp - 0x21cc]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x48
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4b035b
push 0
push esi
lea ecx, [ebp - 0x20a8]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0
push 0
push 0
push 0
push 0x60fb20
lea ecx, [ebp - 0x2040]
call fcn.0051dd30
push eax
push 0
push 0x48
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0x617624
lea ecx, [ebp - 0x2040]
call fcn.0051dd30
push eax
push 0x616138
push esi
lea ecx, [ebp - 0x20a8]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x6152fc
push 0x60fb20
push 0x615318
lea ecx, [ebp - 0x21cc]
call fcn.0051dd30
push eax
push 0x619ac0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
lea ecx, [ebp - 0x3e98]
call fcn.004017e0
test al, al
jne 0x4b0088
lea ecx, [ebp - 0x3e98]
mov byte [ebp - 4], 0xee
call fcn.00401730
inc esi
mov dword [ebp - 0x6f40], esi
cmp esi, dword [ebp - 0x6f50]
jb 0x4affa5
cmp byte [edi + 0x14], 0
jne 0x4b1bba
push 0x24
lea ecx, [ebp - 0x28f8]
call fcn.004021e0
lea ecx, [ebp - 0x28f8]
call fcn.004edaa0
push 0xc
lea ecx, [ebp - 0x2294]
mov byte [ebp - 4], 0xf0
call fcn.00401eb0
lea ecx, [ebp - 0x2294]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2498]
mov byte [ebp - 4], 0xf1
call fcn.00401eb0
lea ecx, [ebp - 0x2498]
call fcn.0051e180
push 0
push 0x61abc0
lea ecx, [ebp - 0x1ff0]
mov byte [ebp - 4], 0xf2
call fcn.0050b8e0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61ac10
lea ecx, [edi + 0x24c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f98]
call fcn.0051dda0
xor esi, esi
mov dword [ebp - 0x6f48], esi
cmp dword [ebp - 0x6f50], esi
jbe 0x4b08f3
push esi
lea ecx, [ebp - 0x2270]
call fcn.00403500
cmp byte [edi + 0x14], 0
mov eax, dword [eax]
mov dword [ebp - 0x6f80], eax
jne 0x4b1b99
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61ac44
push esi
lea ecx, [ebp - 0x22a0]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x21fc]
call fcn.0051dda0
lea eax, [ebp - 0x2040]
mov dword [ebp - 0x6f40], 0
push eax
lea ecx, [ebp - 0x21fc]
call fcn.0051dd30
xor edx, edx
mov ecx, eax
call fcn.004c7ce0
test al, al
je 0x4b08e0
mov esi, dword [ebp - 0x6f40]
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x614220
lea ecx, [ebp - 0x2040]
call fcn.0051c4c0
push 0x100
lea ecx, [ebp - 0x2040]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x28f8]
call fcn.004ed860
test al, al
je 0x4b08b0
push 0
lea eax, [ebp - 0x2a7c]
mov dword [ebp - 0x6eb4], 0
push eax
xorps xmm0, xmm0
lea ecx, [ebp - 0x28f8]
push 0x613e38
movups xmmword [ebp - 0x6ec4], xmm0
call fcn.004ed270
test al, al
je 0x4b08b0
lea eax, [ebp - 0x2a7c]
push eax
lea eax, [ebp - 0x6ec4]
push eax
lea ecx, [ebp - 0x28f8]
call fcn.004ec790
test al, al
je 0x4b08b0
lea eax, [ebp - 0x2294]
push eax
push 0x613e6c
lea eax, [ebp - 0x6ec4]
push eax
lea ecx, [ebp - 0x28f8]
call fcn.004ecff0
test eax, eax
je 0x4b0889
push 0
push 1
push 1
push 0
push 0x619b9c
lea ecx, [ebp - 0x2294]
call fcn.0051c760
lea ecx, [ebp - 0x2294]
mov esi, eax
call fcn.0051df40
sub eax, 0x12
cmp esi, eax
je 0x4b0889
push 0
push 1
push 1
push 0
push 0x619bc4
lea ecx, [ebp - 0x2294]
call fcn.0051c760
lea ecx, [ebp - 0x2294]
mov esi, eax
call fcn.0051df40
sub eax, 0xb
cmp esi, eax
je 0x4b0889
push 0
push 1
push 1
push 0
push 0x619be0
lea ecx, [ebp - 0x2294]
call fcn.0051c760
lea ecx, [ebp - 0x2294]
mov esi, eax
call fcn.0051df40
sub eax, 0xb
cmp esi, eax
je 0x4b0889
lea eax, [ebp - 0x6ec4]
push eax
lea eax, [ebp - 0x2b98]
push eax
push 0x619bfc
lea ecx, [ebp - 0x28f8]
call fcn.004ed270
test al, al
je 0x4b0889
lea eax, [ebp - 0x2294]
push eax
push 0x619c18
lea eax, [ebp - 0x2b98]
push eax
lea ecx, [ebp - 0x28f8]
call fcn.004ecff0
test eax, eax
je 0x4b0889
push 0x6174ec
lea ecx, [ebp - 0x2294]
call fcn.0051e060
test al, al
jne 0x4b0889
push 0x61ac60
lea ecx, [ebp - 0x2294]
call fcn.0051e060
test al, al
jne 0x4b0889
lea eax, [ebp - 0x2498]
push eax
push 0x613e48
lea eax, [ebp - 0x6ec4]
push eax
lea ecx, [ebp - 0x28f8]
call fcn.004ecff0
test eax, eax
jne 0x4b06ea
lea eax, [ebp - 0x2498]
push eax
push 0x613e60
lea eax, [ebp - 0x6ec4]
push eax
lea ecx, [ebp - 0x28f8]
call fcn.004ecff0
test eax, eax
je 0x4b0889
push str.null
lea ecx, [ebp - 0x2498]
call fcn.0051e060
test al, al
jne 0x4b0889
lea ecx, [ebp - 0x2294]
call fcn.0051dd30
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.0051dd30
mov edx, esi
mov ecx, eax
call fcn.00515590
test al, al
jne 0x4b0889
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x61ac90
lea ecx, [ebp - 0x2294]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4b0889
mov eax, dword [ebp - 0x6f80]
mov ecx, dword [ebp - 0x6f68]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x2498]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2294]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x49
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6fa0], eax
cmp eax, 0xffffffff
je 0x4b0889
lea ecx, [ebp - 0x2040]
call fcn.0051dd30
push eax
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x20a8]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2498]
call fcn.0051dd30
push eax
push 0
push 0x49
push dword [ebp - 0x6fa0]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0x617624
lea ecx, [ebp - 0x2498]
call fcn.0051dd30
push eax
push 0x616138
push dword [ebp - 0x6f48]
lea ecx, [ebp - 0x20a8]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x6152fc
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x2294]
call fcn.0051dd30
push eax
push 0x6169e0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
lea eax, [ebp - 0x2a7c]
push eax
lea eax, [ebp - 0x6ec4]
push eax
lea ecx, [ebp - 0x28f8]
call fcn.004ec790
test al, al
jne 0x4b0570
mov esi, dword [ebp - 0x6f40]
lea eax, [ebp - 0x2040]
inc esi
push eax
lea ecx, [ebp - 0x21fc]
mov dword [ebp - 0x6f40], esi
call fcn.0051dd30
mov edx, esi
mov ecx, eax
call fcn.004c7ce0
test al, al
jne 0x4b04d0
mov esi, dword [ebp - 0x6f48]
inc esi
mov dword [ebp - 0x6f48], esi
cmp esi, dword [ebp - 0x6f50]
jb 0x4b0444
cmp byte [edi + 0x14], 0
jne 0x4b1b99
push 0
push 0x61ace0
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x6e94]
push 1
push 0
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6e9c], eax
mov dword [ebp - 0x6e98], 0x4b
call fcn.0051e110
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0xf3
call fcn.0051dd30
lea ecx, [edi + 0x84]
mov dword [ebp - 0x6e88], eax
mov dword [ebp - 0x6e84], 0
call fcn.0051dd30
mov dword [ebp - 0x6e80], eax
lea ecx, [ebp - 0x6e74]
lea eax, [ebp - 0x1ff0]
mov dword [ebp - 0x6e7c], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0x6e78], eax
call fcn.0051e180
mov byte [ebp - 4], 0xf4
cmp byte [edi + 0x14], 0
jne 0x4b1b8e
push 0xc
lea ecx, [ebp - 0x2460]
call fcn.00401eb0
lea ecx, [ebp - 0x2460]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x23ec]
mov byte [ebp - 4], 0xf5
call fcn.00401eb0
lea ecx, [ebp - 0x23ec]
call fcn.0051e180
lea ecx, [ebp - 0x241c]
mov byte [ebp - 4], 0xf6
call fcn.0051dfa0
xor esi, esi
cmp dword [ebp - 0x6f50], esi
jbe 0x4b0c60
cmp byte [edi + 0x14], 0
jne 0x4b1b78
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x222c]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x241c]
call fcn.0051c760
test eax, eax
jne 0x4b0c53
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x604a10
push esi
lea ecx, [ebp - 0x222c]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x241c]
call fcn.0051c4c0
push esi
lea ecx, [ebp - 0x2270]
call fcn.00403500
push 0
push 0
push 0
mov eax, dword [eax]
lea ecx, [ebp - 0x2374]
push 0
push 0
push 0
push 0
push 0
push 0
push esi
mov dword [ebp - 0x6f40], eax
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x5fe504
push esi
lea ecx, [ebp - 0x222c]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x6e94]
call fcn.0051dda0
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x4c]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push esi
lea ecx, [ebp - 0x20a8]
mov dword [ebp - 0x6e84], eax
call fcn.004042c0
push eax
lea ecx, [ebp - 0x6e74]
call fcn.0051e080
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24ec]
call fcn.0051dd30
push eax
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2460]
call fcn.0051dda0
lea ecx, [ebp - 0x2460]
call fcn.0051dd30
mov ecx, eax
call fcn.00509340
test al, al
je 0x4b0c53
lea ecx, [ebp - 0x2460]
call fcn.0051dd30
push eax
lea eax, [ebp - 0x6e9c]
mov ecx, edi
push eax
call fcn.004b4c20
cmp byte [edi + 0x14], 0
jne 0x4b1b78
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25e4]
call fcn.0051dd30
push eax
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2460]
call fcn.0051dda0
lea ecx, [ebp - 0x2460]
call fcn.0051dd30
mov ecx, eax
call fcn.00509340
test al, al
je 0x4b0c53
push 0
lea ecx, [ebp - 0x2460]
call fcn.0051da50
lea ecx, [ebp - 0x2460]
call fcn.0051dd30
push eax
lea eax, [ebp - 0x6e9c]
mov ecx, edi
push eax
call fcn.004b4c20
lea ecx, [ebp - 0x2644]
mov dword [ebp - 0x6e84], 0x60fb20
call fcn.0051dd30
push eax
lea eax, [ebp - 0x6e9c]
mov ecx, edi
push eax
call fcn.004b4c20
cmp byte [edi + 0x14], 0
jne 0x4b1b78
push 0
push 1
lea ecx, [ebp - 0x2668]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2460]
call fcn.0051de00
mov ecx, eax
call fcn.0051da50
lea ecx, [ebp - 0x2460]
call fcn.0051dd30
push eax
lea eax, [ebp - 0x6e9c]
mov ecx, edi
push eax
call fcn.004b4c20
cmp byte [edi + 0x14], 0
jne 0x4b1b78
inc esi
cmp esi, dword [ebp - 0x6f50]
jb 0x4b09e6
cmp byte [edi + 0x14], 0
jne 0x4b1b78
lea ecx, [ebp - 0x241c]
call fcn.0051dfa0
push 4
lea ecx, [ebp - 0x223c]
call fcn.00401ed0
lea ecx, [ebp - 0x223c]
call fcn.00518880
xor esi, esi
mov byte [ebp - 4], 0xf7
mov dword [ebp - 0x6f44], esi
cmp dword [ebp - 0x6f50], esi
jbe 0x4b10d1
mov dword [ebp - 0x6f58], 0
nop
push esi
lea ecx, [ebp - 0x2270]
call fcn.00403500
mov ecx, dword [ebp - 0x6f58]
mov eax, dword [eax]
mov dword [ebp - 0x6f5c], eax
test ecx, ecx
jne 0x4b0cf7
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push 0x619ca0
push eax
lea ecx, [edi + 0x3c]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
push str.HKU_
jmp 0x4b0d41
cmp ecx, 1
jne 0x4b0d1d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x619ca0
push dword [ebp - 0x6f70]
jmp 0x4b0d41
cmp ecx, 2
jne 0x4b0d4c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x619ca0
push dword [ebp - 0x6f74]
lea ecx, [ebp - 0x1f98]
call fcn.0051dda0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x223c]
call fcn.00518810
test al, al
je 0x4b10a8
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f40], 0
push eax
push 0
lea ecx, [ebp - 0x223c]
call fcn.00518170
test al, al
je 0x4b10a8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x619d30
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x5fe504
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2040]
call fcn.0051dda0
push 0
push 0x20019
lea ecx, [ebp - 0x2040]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x4b1080
lea eax, [ebp - 0x23ec]
push eax
push 0x5fe50c
lea ecx, [ebp - 0x1f74]
call fcn.00518530
test al, al
je 0x4b1080
lea ecx, [ebp - 0x23ec]
call fcn.0051da30
test al, al
jne 0x4b1080
push dword [ebp - 0x6f5c]
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x23ec]
call fcn.0051d7b0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x2374]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x5fe504
push esi
lea ecx, [ebp - 0x222c]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2080]
call fcn.0051dda0
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2080]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x23ec]
call fcn.0051c760
test eax, eax
je 0x4b1080
lea ecx, [ebp - 0x2080]
call fcn.0051df40
inc eax
lea ecx, [ebp - 0x23ec]
push eax
call fcn.0051ca50
push 0
push 0
push 0x5fe50c
push 0x5ff6d4
push 3
lea ecx, [ebp - 0x23ec]
call fcn.0051be70
mov ecx, eax
call fcn.0051c000
lea ecx, [ebp - 0x23ec]
call fcn.0051da30
test al, al
jne 0x4b1080
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x5fe504
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2040]
call fcn.0051dda0
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x615240
lea ecx, [ebp - 0x23ec]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4b1080
mov eax, dword [ebp - 0x6f5c]
mov ecx, dword [ebp - 0x6f68]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x23ec]
call fcn.0051dd30
push eax
mov ecx, esi
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x6112d0
push 5
push 0x4b
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4b107a
push 0
push dword [ebp - 0x6f44]
lea ecx, [ebp - 0x20a8]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.0051dd30
push eax
push 0
lea ecx, [ebp - 0x2040]
call fcn.0051dd30
push eax
push 0x4b
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617624
push dword [ebp - 0x6f44]
lea ecx, [ebp - 0x20a8]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x6152fc
mov ecx, esi
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x23ec]
call fcn.0051dd30
push eax
push 0x617ca8
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
mov esi, dword [ebp - 0x6f44]
mov eax, dword [ebp - 0x6f40]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x223c]
mov dword [ebp - 0x6f40], eax
call fcn.00518170
test al, al
jne 0x4b0d98
mov eax, dword [ebp - 0x6f58]
inc eax
mov dword [ebp - 0x6f58], eax
cmp eax, 3
jb 0x4b0cb0
inc esi
mov dword [ebp - 0x6f44], esi
cmp esi, dword [ebp - 0x6f50]
jb 0x4b0ca5
cmp byte [edi + 0x14], 0
jne 0x4b1b6d
push 0
push 0x61ad30
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
push 0xc
lea ecx, [ebp - 0x24f8]
call fcn.00401eb0
lea ecx, [ebp - 0x24f8]
call fcn.0051e180
xor esi, esi
mov byte [ebp - 4], 0xf8
cmp dword [ebp - 0x6f50], esi
jbe 0x4b1b4f
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x2270]
call fcn.00403500
cmp byte [edi + 0x14], 0
mov eax, dword [eax]
mov dword [ebp - 0x6f44], eax
jne 0x4b1b4f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61ac44
push esi
lea ecx, [ebp - 0x22a0]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x21fc]
call fcn.0051dda0
lea eax, [ebp - 0x24f8]
xor edx, edx
push eax
lea ecx, [ebp - 0x21fc]
mov dword [ebp - 0x6f48], edx
call fcn.0051dd30
xor edx, edx
mov ecx, eax
call fcn.004c7ce0
test al, al
je 0x4b1b42
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61ad88
push esi
lea ecx, [ebp - 0x20a8]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x61a7a0
lea ecx, [ebp - 0x2080]
call fcn.0051dda0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x613e74
lea ecx, [ebp - 0x24f8]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2040]
call fcn.0051dda0
lea ecx, [ebp - 0x2040]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
je 0x4b136d
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x61ad98
lea ecx, [ebp - 0x2080]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4b136d
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [ebp - 0x6f68]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2040]
mov dword [ebp - 0x6f40], eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2080]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4b136d
push 0
push esi
lea ecx, [ebp - 0x20a8]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
push 0
push 0
push 0
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2040]
call fcn.0051dd30
push eax
push 0
push 0x4c
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617fb8
lea ecx, [ebp - 0x2040]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x616138
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x2080]
call fcn.0051dd30
push eax
push 0x617ff0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61ade4
push esi
lea ecx, [ebp - 0x20a8]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x61a7a0
lea ecx, [ebp - 0x2080]
call fcn.0051dda0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6141fc
lea ecx, [ebp - 0x24f8]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2040]
call fcn.0051dda0
lea ecx, [ebp - 0x2040]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
jne 0x4b1414
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x614220
lea ecx, [ebp - 0x24f8]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2040]
call fcn.0051dda0
lea ecx, [ebp - 0x2040]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
je 0x4b1575
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x61ad98
lea ecx, [ebp - 0x2080]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4b1575
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [ebp - 0x6f68]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2040]
mov dword [ebp - 0x6f40], eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2080]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4b1575
push 0
push esi
lea ecx, [ebp - 0x20a8]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
push 0
push 0
push 0
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2040]
call fcn.0051dd30
push eax
push 0
push 0x4c
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617fb8
lea ecx, [ebp - 0x2040]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x616138
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x2080]
call fcn.0051dd30
push eax
push 0x617ff0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61adfc
push esi
lea ecx, [ebp - 0x20a8]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x61a7a0
lea ecx, [ebp - 0x2080]
call fcn.0051dda0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6140f8
lea ecx, [ebp - 0x24f8]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2040]
call fcn.0051dda0
lea ecx, [ebp - 0x2040]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
jne 0x4b161c
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x614114
lea ecx, [ebp - 0x24f8]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2040]
call fcn.0051dda0
lea ecx, [ebp - 0x2040]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
je 0x4b177d
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x61ad98
lea ecx, [ebp - 0x2080]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4b177d
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [ebp - 0x6f68]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2040]
mov dword [ebp - 0x6f40], eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2080]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4b177d
push 0
push esi
lea ecx, [ebp - 0x20a8]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
push 0
push 0
push 0
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2040]
call fcn.0051dd30
push eax
push 0
push 0x4c
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617fb8
lea ecx, [ebp - 0x2040]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x616138
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x2080]
call fcn.0051dd30
push eax
push 0x617ff0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61ae2c
push esi
lea ecx, [ebp - 0x20a8]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x61a7a0
lea ecx, [ebp - 0x2080]
call fcn.0051dda0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6197c4
lea ecx, [ebp - 0x24f8]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2040]
call fcn.0051dda0
lea ecx, [ebp - 0x2040]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
je 0x4b1949
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x61ad98
lea ecx, [ebp - 0x2080]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4b1949
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [ebp - 0x6f68]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2040]
mov dword [ebp - 0x6f40], eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2080]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4b1949
push 0
push esi
lea ecx, [ebp - 0x20a8]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
push 0
push 0
push 0
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2040]
call fcn.0051dd30
push eax
push 0
push 0x4c
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617fb8
lea ecx, [ebp - 0x2040]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x616138
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x2080]
call fcn.0051dd30
push eax
push 0x617ff0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61ae40
push esi
lea ecx, [ebp - 0x20a8]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
push 0x61a7a0
lea ecx, [ebp - 0x2080]
call fcn.0051dda0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x619dd4
lea ecx, [ebp - 0x24f8]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2040]
call fcn.0051dda0
lea ecx, [ebp - 0x2040]
call fcn.0051dd30
push eax
call dword [0x5de620]
test eax, eax
je 0x4b1b15
push 0
lea ecx, [edi + 0x84]
call fcn.0051dd30
push eax
push 0x61ad98
lea ecx, [ebp - 0x2080]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.00498ae0
test al, al
jne 0x4b1b15
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [ebp - 0x6f68]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2040]
mov dword [ebp - 0x6f40], eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2080]
call fcn.0051dd30
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.004c0fd0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4b1b15
push 0
push esi
lea ecx, [ebp - 0x20a8]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
push 0
push 0
push 0
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2040]
call fcn.0051dd30
push eax
push 0
push 0x4c
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x1f8c]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004c0de0
push 0
push 0
push 0
push 0
push 0
push 0x617fb8
lea ecx, [ebp - 0x2040]
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x616138
call fcn.0051dd30
push eax
push 0x615318
lea ecx, [ebp - 0x2080]
call fcn.0051dd30
push eax
push 0x617ff0
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
inc dword [ebp - 0x6f48]
lea eax, [ebp - 0x24f8]
push eax
lea ecx, [ebp - 0x21fc]
call fcn.0051dd30
mov edx, dword [ebp - 0x6f48]
mov ecx, eax
call fcn.004c7ce0
test al, al
jne 0x4b11a1
inc esi
cmp esi, dword [ebp - 0x6f50]
jb 0x4b1120
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004f31a0
lea ecx, [ebp - 0x24f8]
call fcn.0051dfd0
lea ecx, [ebp - 0x223c]
call fcn.005187c0
lea ecx, [ebp - 0x23ec]
call fcn.0051dfd0
lea ecx, [ebp - 0x2460]
call fcn.0051dfd0
lea ecx, [ebp - 0x6e9c]
call fcn.00402b30
lea ecx, [ebp - 0x2498]
call fcn.0051dfd0
lea ecx, [ebp - 0x2294]
call fcn.0051dfd0
lea ecx, [ebp - 0x28f8]
call fcn.00401fd0
lea ecx, [ebp - 0x241c]
call fcn.0051dfd0
lea ecx, [ebp - 0x25b4]
call fcn.0051dfd0
lea ecx, [ebp - 0x2978]
call fcn.00401f90
lea ecx, [ebp - 0x2320]
call fcn.0051dfd0
lea ecx, [ebp - 0x2434]
call fcn.0051dfd0
lea ecx, [ebp - 0x21cc]
call fcn.0051dfd0
lea ecx, [ebp - 0x25c0]
call fcn.0051dfd0
lea ecx, [ebp - 0x2040]
call fcn.0051dfd0
lea ecx, [ebp - 0x21fc]
call fcn.0051dfd0
lea ecx, [ebp - 0x2080]
call fcn.0051dfd0
lea ecx, [ebp - 0x3518]
call fcn.00401730
lea ecx, [ebp - 0x3058]
call fcn.00401730
lea ecx, [ebp - 0x2270]
call fcn.004033c0
lea ecx, [ebp - 0x20a8]
call fcn.004042e0
lea ecx, [ebp - 0x2374]
call fcn.004042e0
lea ecx, [ebp - 0x222c]
call fcn.004042e0
lea ecx, [ebp - 0x22a0]
mov byte [ebp - 4], 0x45
call fcn.004042e0
cmp byte [edi + 0x14], 0
jne 0x4b3e7a
test dword [edi + 0x34], 0x40
jne 0x4b3e7a
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x61ae64
push dword [eax + 0x38]
call fcn.004f44b0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x37
push dword [eax + 0x34]
call fcn.004f1310
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4b1d18
mov eax, dword [ebp - 0x6f64]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6f40], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60fc88
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push str.HKU_
call fcn.0051dda0
add dword [ebp - 0x6f40], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4b1cd1
mov esi, dword [ebp - 0x6f64]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60fce0
push dword [ebp - 0x6f70]
lea ecx, [esi + eax*4]
call fcn.0051dda0
cmp byte [ebp - 0x6f49], 0
je 0x4b1d7f
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x60fce0
push dword [ebp - 0x6f74]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.0051dda0
push 0xc
lea ecx, [ebp - 0x1fb0]
mov dword [ebp - 0x6f94], 0x60fd40
mov dword [ebp - 0x6f90], 0x60fd50
mov dword [ebp - 0x6f8c], 0x61ae90
mov dword [ebp - 0x6f88], 0x61aeb0
mov dword [ebp - 0x6f84], 0x61aec8
mov dword [ebp - 0x6f80], 0x61aedc
call fcn.00401eb0
lea ecx, [ebp - 0x1fb0]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x22ac]
mov byte [ebp - 4], 0xf9
call fcn.00401eb0
lea ecx, [ebp - 0x22ac]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x21a8]
mov byte [ebp - 4], 0xfa
call fcn.00401eb0
lea ecx, [ebp - 0x21a8]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x22fc]
mov byte [ebp - 4], 0xfb
call fcn.00401eb0
lea ecx, [ebp - 0x22fc]
call fcn.0051e180
cmp dword [ebp - 0x6f6c], 0
mov byte [ebp - 4], 0xfc
mov dword [ebp - 0x6f5c], 0
jbe 0x4b1fd5
mov dword [ebp - 0x6f40], esi
nop dword [eax + eax]
cmp byte [edi + 0x14], 0
jne 0x4b1fd5
xor eax, eax
mov dword [ebp - 0x6f58], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + eax*4 - 0x6f94]
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f98]
call fcn.0051dda0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x4b1f9d
lea eax, [ebp - 0x6cb4]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.005180d0
test al, al
je 0x4b1f97
cmp byte [edi + 0x14], 0
jne 0x4b1f97
lea eax, [ebp - 0x1fb0]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f74]
call fcn.00518530
test al, al
je 0x4b1f7b
lea ecx, [ebp - 0x1fb0]
call fcn.0051da30
test al, al
jne 0x4b1f7b
push 3
lea edx, [edi + 0xb4]
lea ecx, [ebp - 0x1fb0]
call fcn.005108d0
test al, al
je 0x4b1f7b
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x607958
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2148]
call fcn.0051dda0
push 0
lea ecx, [ebp - 0x2148]
call fcn.0051dd30
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.00498030
lea eax, [ebp - 0x6cb4]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.005180d0
test al, al
jne 0x4b1ed3
mov esi, dword [ebp - 0x6f40]
mov eax, dword [ebp - 0x6f58]
inc eax
mov dword [ebp - 0x6f58], eax
cmp eax, 6
jb 0x4b1e62
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f5c], eax
cmp eax, dword [ebp - 0x6f6c]
jb 0x4b1e50
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x39
push dword [eax + 0x34]
call fcn.004f1310
push 4
lea ecx, [ebp - 0x6cb8]
call fcn.00401ed0
lea ecx, [ebp - 0x6cb8]
call fcn.00401a90
lea eax, [ebp - 0x6cb8]
mov byte [ebp - 4], 0xfd
push eax
push 0x5f88fc
push 1
push 0
push 0x5f8b0c
call dword [0x5dea70]
test eax, eax
js 0x4b22bf
lea ecx, [ebp - 0x70a0]
call fcn.00401e10
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x7090]
movups xmmword [ebp - 0x6f90], xmm0
call fcn.00401e10
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x7080]
movups xmmword [ebp - 0x6fb0], xmm0
call fcn.00401e10
mov dword [ebp - 4], 0x100
lea ecx, [ebp - 0x7070]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x6fc8], xmm0
call fcn.00401e10
mov edi, eax
mov byte [ebp - 4], 1
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x6f90]
mov ecx, dword [ebp - 0x6cb8]
mov edx, esp
sub esp, 0x10
mov eax, esp
sub esp, 0x10
mov esi, dword [ecx]
movups xmmword [edx], xmm0
movups xmm0, xmmword [ebp - 0x6fb0]
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x6fc8]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [edi]
push ecx
movups xmmword [eax], xmm0
mov eax, dword [esi + 0x28]
call eax
lea ecx, [ebp - 0x7070]
mov esi, eax
call fcn.00401ea0
lea ecx, [ebp - 0x7080]
mov dword [ebp - 4], 0xff
call fcn.00401ea0
lea ecx, [ebp - 0x7090]
call fcn.00401ea0
lea ecx, [ebp - 0x70a0]
mov byte [ebp - 4], 0xfd
call fcn.00401ea0
test esi, esi
js 0x4b22b9
push 4
lea ecx, [ebp - 0x6ce0]
call fcn.00401ed0
lea ecx, [ebp - 0x6ce0]
call fcn.00401a90
push 0x5fe504
lea ecx, [ebp - 0x7014]
mov dword [ebp - 4], 0x102
call fcn.00401b70
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x6cb8]
mov esi, dword [ecx]
lea ecx, [ebp - 0x6ce0]
push ecx
mov ecx, eax
call fcn.00401c30
push eax
push dword [ebp - 0x6cb8]
mov eax, dword [esi + 0x1c]
call eax
lea ecx, [ebp - 0x7014]
mov byte [ebp - 4], 2
mov esi, eax
call fcn.00401c20
test esi, esi
js 0x4b22a7
push 4
lea ecx, [ebp - 0x6ce4]
call fcn.00401ed0
lea ecx, [ebp - 0x6ce4]
call fcn.00401a90
mov byte [ebp - 4], 4
lea edx, [ebp - 0x6ce4]
mov eax, dword [ebp - 0x6ce0]
push edx
push 0
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x28]
call eax
test eax, eax
js 0x4b229c
mov eax, dword [ebp - 0x6ce4]
lea edx, [ebp - 0x254c]
mov dword [ebp - 0x254c], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
mov eax, dword [ebp - 0x254c]
test eax, eax
je 0x4b229c
mov esi, 1
mov dword [ebp - 0x6f5c], esi
cmp eax, esi
jl 0x4b229c
mov edi, dword [ebp - 0x6f54]
push 4
lea ecx, [ebp - 0x6cf4]
call fcn.00401ed0
lea ecx, [ebp - 0x6cf4]
call fcn.00401a90
push 3
push esi
lea ecx, [ebp - 0x70b0]
mov byte [ebp - 4], 5
call fcn.00401e20
mov esi, eax
mov byte [ebp - 4], 6
lea edx, [ebp - 0x6cf4]
mov ecx, dword [ebp - 0x6ce4]
movups xmm0, xmmword [esi]
push edx
sub esp, 0x10
mov eax, dword [ecx]
mov edx, esp
push ecx
mov eax, dword [eax + 0x20]
movups xmmword [edx], xmm0
call eax
lea ecx, [ebp - 0x70b0]
mov byte [ebp - 4], 5
mov esi, eax
call fcn.00401ea0
test esi, esi
js 0x4b2267
push dword [ebp - 0x6cf4]
mov ecx, edi
call fcn.00495c80
test al, al
je 0x4b2291
lea ecx, [ebp - 0x6cf4]
mov byte [ebp - 4], 4
call fcn.004031b0
mov esi, dword [ebp - 0x6f5c]
inc esi
mov dword [ebp - 0x6f5c], esi
cmp esi, dword [ebp - 0x254c]
jle 0x4b21f1
jmp 0x4b229c
lea ecx, [ebp - 0x6cf4]
call fcn.004031b0
lea ecx, [ebp - 0x6ce4]
call fcn.004031b0
lea ecx, [ebp - 0x6ce0]
mov dword [ebp - 4], 0xfd
call fcn.004031b0
mov edi, dword [ebp - 0x6f54]
cmp byte [edi + 0x14], 0
jne 0x4b3e3f
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x3c
push dword [eax + 0x34]
call fcn.004f1310
push 0x18
lea ecx, [ebp - 0x24b0]
call fcn.00401ee0
lea ecx, [ebp - 0x24b0]
call fcn.0051b0f0
mov dword [ebp - 4], 0x107
xor esi, esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x4b235b
mov eax, dword [ebp - 0x6f64]
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x6f40], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61af08
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push str.HKU_
call fcn.0051dda0
add dword [ebp - 0x6f40], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4b2314
mov esi, dword [ebp - 0x6f64]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61af78
push dword [ebp - 0x6f70]
lea ecx, [esi + eax*4]
call fcn.0051dda0
cmp byte [ebp - 0x6f49], 0
je 0x4b23c2
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x61af78
push dword [ebp - 0x6f74]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.0051dda0
cmp dword [ebp - 0x6f6c], 0
mov dword [ebp - 0x6f98], 0x612f74
mov dword [ebp - 0x6f94], 0x61afe8
mov dword [ebp - 0x6f90], 0x60af7c
mov dword [ebp - 0x6f8c], 0x61affc
mov dword [ebp - 0x6f88], 0x60fd38
mov dword [ebp - 0x6f84], 0x61b008
mov dword [ebp - 0x6f80], 0x60ce28
mov dword [ebp - 0x6f5c], 0
jbe 0x4b25b4
mov dword [ebp - 0x6f40], esi
cmp byte [edi + 0x14], 0
jne 0x4b3e2d
xor eax, eax
mov dword [ebp - 0x6f58], eax
nop word [eax + eax]
cmp byte [edi + 0x14], 0
jne 0x4b2592
lea ecx, [ebp - 0x1fb0]
push ecx
push dword [ebp + eax*4 - 0x6f98]
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005183c0
test al, al
je 0x4b2592
push 0
push 0x5ff5ec
lea ecx, [ebp - 0x1fb0]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x24b0]
call fcn.0051ae40
lea ecx, [ebp - 0x24b0]
xor esi, esi
call fcn.0051afe0
test eax, eax
je 0x4b2576
cmp byte [edi + 0x14], 0
jne 0x4b2576
push 3
push 1
push esi
lea ecx, [ebp - 0x24b0]
call fcn.0051aff0
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.0051de00
mov ecx, eax
call fcn.0051be70
mov ecx, eax
call fcn.0051df40
test eax, eax
je 0x4b2562
push 3
lea edx, [edi + 0xb4]
lea ecx, [ebp - 0x1fb0]
call fcn.005108d0
test al, al
je 0x4b2562
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x24b0]
call fcn.0051aff0
mov ecx, dword [ebp - 0x6f40]
push eax
mov eax, dword [ebp - 0x6f58]
push 0x607958
push dword [ebp + eax*4 - 0x6f98]
push 0x607958
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2148]
call fcn.0051dda0
push 0
lea ecx, [ebp - 0x2148]
call fcn.0051dd30
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.00498030
lea ecx, [ebp - 0x24b0]
inc esi
call fcn.0051afe0
cmp esi, eax
jb 0x4b24a6
mov eax, dword [ebp - 0x6f58]
mov esi, dword [ebp - 0x6f40]
inc eax
mov dword [ebp - 0x6f58], eax
cmp eax, 7
jb 0x4b2440
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f5c], eax
cmp eax, dword [ebp - 0x6f6c]
jb 0x4b2425
cmp byte [edi + 0x14], 0
jne 0x4b3e2d
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x3e
push dword [eax + 0x34]
call fcn.004f1310
push 0xc
lea ecx, [ebp - 0x20f0]
call fcn.00401eb0
lea ecx, [ebp - 0x20f0]
call fcn.0051e180
xor esi, esi
mov byte [ebp - 4], 8
mov dword [ebp - 0x6f5c], esi
test esi, esi
jne 0x4b25fd
push 0x61b018
jmp 0x4b2618
cmp dword [ebp - 0x6f58], 1
jne 0x4b2623
cmp byte [edi + 0xc0], 0
je 0x4b2761
push 0x61b0b0
lea ecx, [ebp - 0x1f98]
call fcn.0051e0b0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x4b2751
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f58], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.00518170
test al, al
je 0x4b2751
mov esi, dword [ebp - 0x6f58]
cmp byte [edi + 0x14], 0
jne 0x4b2745
lea eax, [ebp - 0x1fb0]
push eax
lea eax, [ebp - 0x21a8]
push eax
push 1
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x20f0]
call fcn.0051de00
push eax
mov ecx, edi
call fcn.00499ad0
test al, al
je 0x4b2729
push 0
lea ecx, [ebp - 0x20f0]
call fcn.0051dd30
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.00498030
test al, al
je 0x4b2729
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x5fe504
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2148]
call fcn.0051dda0
push 0
lea ecx, [ebp - 0x2148]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.0051dfa0
push eax
mov ecx, edi
call fcn.00498030
lea eax, [ebp - 0x6cb4]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.00518170
test al, al
jne 0x4b2675
mov dword [ebp - 0x6f58], esi
mov esi, dword [ebp - 0x6f5c]
inc esi
mov dword [ebp - 0x6f5c], esi
cmp esi, 2
jb 0x4b25f2
mov ecx, edi
call fcn.00498760
test al, al
je 0x4b3e22
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x41
push dword [eax + 0x34]
call fcn.004f1310
push 4
lea ecx, [ebp - 0x1fb4]
call fcn.00401ed0
lea ecx, [ebp - 0x1fb4]
call fcn.00518880
push 4
lea ecx, [ebp - 0x205c]
mov byte [ebp - 4], 9
call fcn.00401ed0
lea ecx, [ebp - 0x205c]
call fcn.00518880
push 4
lea ecx, [ebp - 0x2004]
mov byte [ebp - 4], 0xa
call fcn.00401ed0
lea ecx, [ebp - 0x2004]
call fcn.00518880
mov byte [ebp - 4], 0xb
lea edx, [ebp - 0x6ff0]
mov dword [ebp - 0x6ff0], 0x61b15c
mov dword [ebp - 0x6fec], 0x61b178
mov dword [ebp - 0x6fe8], 0x61b1c0
mov dword [ebp - 0x6fe4], 0x61b200
mov dword [ebp - 0x6fe0], 0x61b26c
mov dword [ebp - 0x6fdc], 0x61b290
mov dword [ebp - 0x6fd8], 0x61b2e0
mov dword [ebp - 0x6fd4], 0x61b310
mov dword [ebp - 0x6fd0], 0x61b368
mov dword [ebp - 0x6fcc], 0x61b3a8
mov dword [ebp - 0x6f40], 0
mov dword [ebp - 0x6f48], edx
nop
mov al, byte [edi + 0x14]
test al, al
jne 0x4b3e01
push 0
push 0x20019
push dword [edx]
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x4b2af3
xor esi, esi
cmp byte [edi + 0x14], 0
jne 0x4b2af3
lea eax, [ebp - 0x6cb4]
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.00518170
test al, al
je 0x4b2af3
lea ecx, [ebp - 0x1fb0]
call fcn.0051dfa0
lea ecx, [ebp - 0x2148]
call fcn.0051dfa0
lea ecx, [ebp - 0x20f0]
call fcn.0051dfa0
test dword [ebp - 0x6f40], 1
jne 0x4b29a9
mov eax, dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f98]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.Command
push dword [ebp - 0x6cb4]
push 0x5fe504
push dword [eax]
call fcn.0051dda0
lea eax, [ebp - 0x1fb0]
push eax
push 0x5fe50c
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fb4]
call fcn.005183c0
test al, al
je 0x4b295e
lea ecx, [ebp - 0x1fb0]
call fcn.0051df40
test eax, eax
je 0x4b295e
push 3
lea edx, [edi + 0xb4]
lea ecx, [ebp - 0x1fb0]
call fcn.005108d0
test al, al
jne 0x4b2a6f
lea ecx, [ebp - 0x1fb0]
jmp 0x4b2a6a
lea eax, [ebp - 0x20f0]
push eax
push str.DelegateExecute
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fb4]
call fcn.005183c0
test al, al
je 0x4b2998
lea ecx, [ebp - 0x20f0]
call fcn.0051df40
test eax, eax
jne 0x4b2a44
lea eax, [ebp - 0x20f0]
push eax
push 0x61b414
jmp 0x4b2a1a
mov ecx, dword [ebp - 0x6cb4]
call fcn.005163b0
test al, al
je 0x4b29de
lea eax, [ebp - 0x1fb0]
push eax
lea eax, [ebp - 0x21a8]
push eax
push 1
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x20f0]
call fcn.0051de00
jmp 0x4b2a58
mov eax, dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1f98]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
push 0x5fe504
push dword [eax]
call fcn.0051dda0
lea eax, [ebp - 0x20f0]
push eax
push 0x5fe50c
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fb4]
call fcn.005183c0
test al, al
je 0x4b2a6f
lea ecx, [ebp - 0x20f0]
call fcn.0051df40
test eax, eax
je 0x4b2a6f
lea eax, [ebp - 0x1fb0]
push eax
lea eax, [ebp - 0x21a8]
push eax
lea eax, [ebp - 0x20f0]
push eax
mov ecx, edi
call fcn.00499ad0
test al, al
jne 0x4b2a6f
lea ecx, [ebp - 0x20f0]
call fcn.0051dfa0
push 0
lea ecx, [ebp - 0x20f0]
call fcn.0051dd30
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.00498030
test al, al
je 0x4b2ae8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x5fe504
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2148]
call fcn.0051dda0
push 0
lea ecx, [ebp - 0x2148]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.0051dfa0
push eax
mov ecx, edi
call fcn.00498030
inc esi
cmp byte [edi + 0x14], 0
je 0x4b2883
mov ecx, dword [ebp - 0x6f40]
mov edx, dword [ebp - 0x6f48]
inc ecx
add edx, 4
mov dword [ebp - 0x6f40], ecx
mov dword [ebp - 0x6f48], edx
cmp ecx, 0xa
jb 0x4b2850
mov al, byte [edi + 0x14]
test al, al
jne 0x4b3e01
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x46
push dword [eax + 0x34]
call fcn.004f1310
xor eax, eax
mov dword [ebp - 0x6ff0], 0x61b430
mov dword [ebp - 0x6fec], 0x61b4d0
mov dword [ebp - 0x6f40], eax
nop
mov cl, byte [edi + 0x14]
test cl, cl
jne 0x4b3e01
push 0
push 0x20019
push dword [ebp + eax*4 - 0x6ff0]
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x4b2c3d
xor esi, esi
cmp byte [edi + 0x14], 0
jne 0x4b2c3d
lea eax, [ebp - 0x6cb4]
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.00518170
test al, al
je 0x4b2c3d
mov eax, dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2148]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
push 0x5fe504
push dword [ebp + eax*4 - 0x6ff0]
call fcn.0051dda0
lea eax, [ebp - 0x1fb0]
push eax
push str.Debugger
lea ecx, [ebp - 0x2148]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fb4]
call fcn.005183c0
test al, al
je 0x4b2c32
push 3
lea edx, [edi + 0xb4]
lea ecx, [ebp - 0x1fb0]
call fcn.005108d0
test al, al
je 0x4b2c32
push 0
lea ecx, [ebp - 0x2148]
call fcn.0051dd30
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.00498030
inc esi
cmp byte [edi + 0x14], 0
je 0x4b2b88
mov eax, dword [ebp - 0x6f40]
inc eax
mov dword [ebp - 0x6f40], eax
cmp eax, 2
jb 0x4b2b50
mov cl, byte [edi + 0x14]
test cl, cl
jne 0x4b3e01
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x48
push dword [eax + 0x34]
call fcn.004f1310
push 0x61b630
lea ecx, [ebp - 0x2120]
mov dword [ebp - 0x6ff0], 0x61b588
mov dword [ebp - 0x6fec], 0x61b5ac
mov dword [ebp - 0x6fe8], 0x61b5dc
mov dword [ebp - 0x6fe4], 0x61b608
call fcn.0051e0b0
push 0xc
lea ecx, [ebp - 0x23e0]
call fcn.00401eb0
push 1
push 0x5ff7b8
lea ecx, [ebp - 0x23e0]
call fcn.0051e110
push 0
push 0x20019
lea ecx, [ebp - 0x2120]
mov byte [ebp - 4], 0xc
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x4b2f1d
xor eax, eax
mov dword [ebp - 0x6f48], eax
nop word [eax + eax]
cmp byte [edi + 0x14], 0
jne 0x4b3df6
cmp eax, 1
jne 0x4b2d5f
push 0x61b6a0
lea ecx, [ebp - 0x2120]
call fcn.0051e0b0
push 0
push 0x20019
lea ecx, [ebp - 0x2120]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x4b2f1d
push 0x604a10
lea ecx, [ebp - 0x23e0]
call fcn.0051e0b0
mov eax, dword [ebp - 0x6f48]
lea ecx, [ebp - 0x1fb0]
push ecx
push dword [ebp + eax*4 - 0x6ff0]
lea ecx, [ebp - 0x1f74]
call fcn.00518530
test al, al
je 0x4b2f07
lea ecx, [ebp - 0x1fb0]
call fcn.0051da30
test al, al
jne 0x4b2f07
push 0x604c9c
lea ecx, [ebp - 0x1fb0]
call fcn.0051e060
test al, al
jne 0x4b2f07
push 1
lea ecx, [ebp - 0x23e0]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x24b0]
call fcn.0051ae40
lea ecx, [ebp - 0x24b0]
xor esi, esi
call fcn.0051afe0
test eax, eax
je 0x4b2f07
cmp byte [edi + 0x14], 0
jne 0x4b2f07
push 3
push 1
push esi
lea ecx, [ebp - 0x24b0]
call fcn.0051aff0
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.0051de00
mov ecx, eax
call fcn.0051be70
mov ecx, eax
call fcn.0051da30
test al, al
jne 0x4b2ef3
lea ecx, [ebp - 0x1fb0]
call fcn.0051df40
cmp eax, 5
jl 0x4b2e4d
push 0
push 1
push 1
push 0
push 0x5fe508
lea ecx, [ebp - 0x1fb0]
call fcn.0051c760
test eax, eax
jne 0x4b2e73
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str..dll
lea ecx, [ebp - 0x1fb0]
call fcn.0051c4c0
push 3
lea edx, [edi + 0xb4]
lea ecx, [ebp - 0x1fb0]
call fcn.005108d0
test al, al
je 0x4b2ef3
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x24b0]
call fcn.0051aff0
push eax
mov eax, dword [ebp - 0x6f48]
lea ecx, [ebp - 0x2120]
push 0x607958
push dword [ebp + eax*4 - 0x6ff0]
push 0x607958
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2148]
call fcn.0051dda0
push 0
lea ecx, [ebp - 0x2148]
call fcn.0051dd30
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.00498030
lea ecx, [ebp - 0x24b0]
inc esi
call fcn.0051afe0
cmp esi, eax
jb 0x4b2de5
mov eax, dword [ebp - 0x6f48]
inc eax
mov dword [ebp - 0x6f48], eax
cmp eax, 4
jb 0x4b2d00
cmp byte [edi + 0x14], 0
jne 0x4b3df6
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x4b
push dword [eax + 0x34]
call fcn.004f1310
movsd xmm0, qword [0x6be4d8]
mov eax, 0x61b760
comisd xmm0, xmmword [edi + 0x2b0]
mov ecx, 0x61b6f8
cmovbe ecx, eax
mov eax, dword [edi + 0x30]
xor esi, esi
mov dword [ebp - 0x6f48], ecx
test eax, eax
je 0x4b2fc1
mov eax, dword [ebp - 0x6f64]
lea edx, [edi + 0x3c]
mov dword [ebp - 0x6f40], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push ecx
push esi
mov ecx, edx
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
mov ecx, dword [ebp - 0x6f40]
push eax
push str.HKU_
call fcn.0051dda0
add dword [ebp - 0x6f40], 0xc
lea edx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
mov ecx, dword [ebp - 0x6f48]
cmp esi, eax
jb 0x4b2f76
mov esi, dword [ebp - 0x6f64]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push ecx
push dword [ebp - 0x6f70]
lea ecx, [esi + eax*4]
call fcn.0051dda0
cmp byte [ebp - 0x6f49], 0
je 0x4b3025
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6f48]
inc eax
push dword [ebp - 0x6f74]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.0051dda0
cmp dword [ebp - 0x6f6c], 0
mov dword [ebp - 0x6f48], 0
jbe 0x4b3203
mov dword [ebp - 0x6f40], esi
cmp byte [edi + 0x14], 0
jne 0x4b3df6
push 0
push 0x20019
mov ecx, esi
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00518810
test al, al
je 0x4b31e1
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f5c], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.005180d0
test al, al
je 0x4b31e1
cmp byte [edi + 0x14], 0
jne 0x4b31db
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1fb0]
call fcn.0051e0b0
lea ecx, [ebp - 0x1fb0]
call fcn.0051df40
mov esi, eax
cmp esi, 3
jl 0x4b31b3
push 1
lea ecx, [ebp - 0x1fb0]
call fcn.0051dfe0
cmp word [eax], 0x3a
jne 0x4b31b3
push 2
lea ecx, [ebp - 0x1fb0]
call fcn.0051dfe0
cmp word [eax], 0x5c
jne 0x4b31b3
movsd xmm0, qword [edi + 0x2b0]
comisd xmm0, xmmword [0x6be4e0]
jbe 0x4b3163
cmp esi, 0x14
jle 0x4b3163
push 0
push 1
push 0xffffffffffffffff
push 0
push 0x61b7f8
lea ecx, [ebp - 0x1fb0]
call fcn.0051c760
mov edx, eax
lea ecx, [esi - 0xf]
cmp edx, ecx
jge 0x4b314d
push 0
push 1
push 0xffffffffffffffff
push 0
push 0x61b81c
lea ecx, [ebp - 0x1fb0]
call fcn.0051c760
mov edx, eax
lea eax, [esi - 0x13]
cmp edx, eax
jle 0x4b3163
lea eax, [edx - 1]
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.0051cb00
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
push 0x607958
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2148]
call fcn.0051dda0
push 0
lea ecx, [ebp - 0x2148]
call fcn.0051dd30
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.00498030
mov esi, dword [ebp - 0x6f5c]
lea eax, [ebp - 0x6cb4]
inc esi
lea ecx, [ebp - 0x1f74]
push eax
push esi
mov dword [ebp - 0x6f5c], esi
call fcn.005180d0
test al, al
jne 0x4b3094
mov esi, dword [ebp - 0x6f40]
mov eax, dword [ebp - 0x6f48]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f48], eax
cmp eax, dword [ebp - 0x6f6c]
jb 0x4b3042
cmp byte [edi + 0x14], 0
jne 0x4b3df6
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x50
push dword [eax + 0x34]
call fcn.004f1310
push 0xc
lea ecx, [ebp - 0x212c]
call fcn.00401eb0
push 0xbb8
push 0
lea ecx, [ebp - 0x212c]
call fcn.00404350
mov byte [ebp - 4], 0xd
xor esi, esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x4b32a2
mov eax, dword [ebp - 0x6f64]
mov dword [ebp - 0x6f40], eax
nop dword [eax]
push esi
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x3c]
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
mov edx, 0x61b844
mov ecx, eax
call fcn.004d52f0
add dword [ebp - 0x6f40], 0xc
inc esi
mov eax, dword [edi + 0x30]
cmp esi, eax
jb 0x4b3260
mov ecx, dword [ebp - 0x6f64]
lea eax, [eax + eax*2]
push 0
push 0
push 0x16
lea ecx, [ecx + eax*4]
call fcn.0051d750
mov eax, dword [ebp - 0x6f64]
xor esi, esi
mov dword [ebp - 0x6f5c], eax
nop word [eax + eax]
cmp byte [edi + 0x14], 0
jne 0x4b3deb
push 1
lea ecx, [ebp - 0x212c]
push ecx
mov ecx, eax
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004959d0
test al, al
je 0x4b330b
mov eax, dword [ebp - 0x6f5c]
inc esi
add eax, 0xc
mov dword [ebp - 0x6f5c], eax
cmp esi, dword [edi + 0x30]
jbe 0x4b32d0
cmp byte [edi + 0x14], 0
jne 0x4b3deb
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x51
push dword [eax + 0x34]
call fcn.004f1310
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x4b33aa
push esi
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051da30
test al, al
jne 0x4b33a4
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2910]
call fcn.0051dd30
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.0051dda0
push 1
lea eax, [ebp - 0x212c]
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004959d0
test al, al
je 0x4b33aa
inc esi
cmp esi, dword [edi + 0x30]
jb 0x4b3330
cmp byte [edi + 0x14], 0
jne 0x4b3deb
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x52
push dword [eax + 0x34]
call fcn.004f1310
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x4b344d
nop
push esi
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051da30
test al, al
jne 0x4b3447
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61b85c
lea ecx, [ebp - 0x2238]
call fcn.0051dd30
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.0051dda0
push 1
lea eax, [ebp - 0x212c]
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004959d0
test al, al
je 0x4b344d
inc esi
cmp esi, dword [edi + 0x30]
jb 0x4b33d0
cmp byte [edi + 0x14], 0
jne 0x4b3deb
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x53
push dword [eax + 0x34]
call fcn.004f1310
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x4b34ec
push esi
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051da30
test al, al
jne 0x4b34e6
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24ec]
call fcn.0051dd30
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.0051dda0
push 0
lea eax, [ebp - 0x212c]
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004959d0
test al, al
je 0x4b34ec
inc esi
cmp esi, dword [edi + 0x30]
jb 0x4b3472
cmp byte [edi + 0x14], 0
jne 0x4b3deb
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x4b3550
mov eax, dword [ebp - 0x6f64]
mov dword [ebp - 0x6f40], eax
nop dword [eax]
push esi
lea ecx, [edi + 0x44]
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
push eax
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x3c]
push esi
call fcn.004038d0
mov ecx, eax
call fcn.0051dd30
mov edx, 0x60a410
mov ecx, eax
call fcn.004d52f0
add dword [ebp - 0x6f40], 0xc
inc esi
cmp esi, dword [edi + 0x30]
jb 0x4b3510
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x54
push dword [eax + 0x34]
call fcn.004f1310
mov eax, dword [edi + 0x30]
mov ecx, dword [ebp - 0x6f64]
push 0
push 0
lea eax, [eax + eax*2]
push 0x19
lea ecx, [ecx + eax*4]
call fcn.0051d750
mov eax, dword [ebp - 0x6f64]
xor esi, esi
cmp byte [edi + 0x14], 0
jne 0x4b3deb
push 0
lea ecx, [ebp - 0x212c]
push ecx
mov ecx, eax
call fcn.0051dd30
push eax
mov ecx, edi
call fcn.004959d0
test al, al
je 0x4b35bd
mov eax, dword [ebp - 0x6f64]
inc esi
add eax, 0xc
mov dword [ebp - 0x6f64], eax
cmp esi, dword [edi + 0x30]
jbe 0x4b3582
cmp byte [edi + 0x14], 0
jne 0x4b3deb
push 0xc
lea ecx, [ebp - 0x2778]
call fcn.00401eb0
lea ecx, [ebp - 0x2778]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2638]
mov byte [ebp - 4], 0xe
call fcn.00401eb0
lea ecx, [ebp - 0x2638]
call fcn.0051e180
push 0x4c
lea ecx, [ebp - 0x2b20]
mov byte [ebp - 4], 0xf
call fcn.00401fc0
lea ecx, [ebp - 0x2b20]
call fcn.005114f0
lea ecx, [ebp - 0x212c]
mov byte [ebp - 4], 0x10
call fcn.00404090
xor esi, esi
mov dword [ebp - 0x6f80], eax
test eax, eax
je 0x4b37b8
cmp byte [edi + 0x14], 0
jne 0x4b3dca
push 0x60c0b4
push 1
push 1
push esi
lea ecx, [ebp - 0x212c]
call fcn.004042c0
mov ecx, eax
call fcn.0051dc50
push eax
lea ecx, [ebp - 0x2778]
call fcn.0051de00
mov ecx, eax
call fcn.0051e060
test al, al
je 0x4b377e
push 0
push esi
lea ecx, [ebp - 0x212c]
call fcn.004042c0
mov ecx, eax
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2b20]
call fcn.005113b0
test al, al
je 0x4b377e
push esi
lea ecx, [ebp - 0x212c]
call fcn.004042c0
push eax
lea ecx, [ebp - 0x2638]
call fcn.0051e080
push 1
lea ecx, [ebp - 0x2b20]
call fcn.00511330
push eax
push esi
lea ecx, [ebp - 0x212c]
call fcn.004042c0
mov ecx, eax
call fcn.0051de00
mov ecx, eax
call fcn.0051da30
test al, al
jne 0x4b37ab
lea ecx, [ebp - 0x2b20]
call fcn.005112d0
mov ecx, eax
call fcn.0051aa10
push 0
push 0
test eax, eax
je 0x4b375f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2b20]
call fcn.005112d0
push eax
push 0x5ff58c
push esi
lea ecx, [ebp - 0x212c]
call fcn.004042c0
mov ecx, eax
call fcn.0051c4c0
push 3
push esi
lea ecx, [ebp - 0x212c]
call fcn.004042c0
lea edx, [edi + 0xb4]
mov ecx, eax
call fcn.005108d0
test al, al
je 0x4b37ab
jmp 0x4b3789
push 0x5fe50c
push 0x5ff6d4
push esi
lea ecx, [ebp - 0x212c]
call fcn.004042c0
mov ecx, eax
call fcn.0051c000
jmp 0x4b3789
lea ecx, [ebp - 0x2638]
call fcn.0051dfa0
push 0
lea ecx, [ebp - 0x2638]
call fcn.0051dd30
push eax
push esi
lea ecx, [ebp - 0x212c]
call fcn.004042c0
push eax
mov ecx, edi
call fcn.00498030
inc esi
cmp esi, dword [ebp - 0x6f80]
jb 0x4b3636
cmp byte [edi + 0x14], 0
jne 0x4b3dca
mov ecx, edi
call fcn.00498760
test al, al
je 0x4b3dca
push 0
push 0
lea ecx, [ebp - 0x212c]
call fcn.00404190
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x55
push dword [eax + 0x34]
call fcn.004f1310
push 0xc
lea ecx, [ebp - 0x6d28]
call fcn.00401eb0
lea ecx, [ebp - 0x6d28]
call fcn.005188a0
push 0xc
lea ecx, [ebp - 0x6d3c]
mov byte [ebp - 4], 0x11
call fcn.00401eb0
lea ecx, [ebp - 0x6d3c]
call fcn.005188a0
push 0
push 0x20019
push 0x61b890
lea ecx, [ebp - 0x1fb4]
mov byte [ebp - 4], 0x12
call fcn.00518810
test al, al
je 0x4b3bc5
lea eax, [ebp - 0x6d28]
mov dword [ebp - 0x6f5c], 0
push eax
push 0
lea ecx, [ebp - 0x1fb4]
call fcn.00518170
test al, al
je 0x4b3bc5
nop dword [eax]
cmp byte [edi + 0x14], 0
jne 0x4b3bc5
push dword [ebp - 0x6d28]
lea ecx, [ebp - 0x21a8]
call fcn.0051e0b0
push 0x61b8a8
lea ecx, [ebp - 0x21a8]
call fcn.0051e020
test al, al
je 0x4b38bf
push 0xa
push 1
push 1
push 0
push 0x61b8cc
lea ecx, [ebp - 0x21a8]
call fcn.0051c760
test eax, eax
je 0x4b3b9d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61b8e4
push dword [ebp - 0x6d28]
lea ecx, [ebp - 0x1f98]
push 0x61b8f8
call fcn.0051dda0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x205c]
call fcn.00518810
test al, al
je 0x4b3b9d
xor esi, esi
cmp byte [edi + 0x14], 0
jne 0x4b3b9d
nop
lea eax, [ebp - 0x6d3c]
push eax
push esi
lea ecx, [ebp - 0x205c]
call fcn.00518170
test al, al
je 0x4b3b9d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6d3c]
lea ecx, [ebp - 0x1f98]
push 0x61b914
push dword [ebp - 0x6d28]
push 0x61b8f8
call fcn.0051dda0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2004]
call fcn.00518810
test al, al
je 0x4b3b92
lea eax, [ebp - 0x2878]
push eax
push 0x60af64
lea ecx, [ebp - 0x2004]
call fcn.005184a0
test al, al
je 0x4b3b92
cmp dword [ebp - 0x2878], 0xb
jne 0x4b3a0d
lea eax, [ebp - 0x1fb0]
push eax
push 0x60b654
lea ecx, [ebp - 0x2004]
call fcn.00518530
test al, al
je 0x4b3b92
push 0
lea ecx, [ebp - 0x1fb0]
call fcn.0051dd30
push eax
push 0x1000
lea ecx, [ebp - 0x1fb0]
call fcn.0051d530
lea edx, [edi + 0xb4]
mov ecx, eax
call fcn.0050f540
jmp 0x4b3acb
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60fc58
lea ecx, [ebp - 0x1f98]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x22ac]
call fcn.0051dda0
lea eax, [ebp - 0x1fb0]
push eax
push 0x60fc70
lea ecx, [ebp - 0x22ac]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x1f74]
call fcn.005183c0
test al, al
je 0x4b3a77
lea ecx, [ebp - 0x1fb0]
call fcn.0051da30
test al, al
je 0x4b3ab8
lea eax, [ebp - 0x1fb0]
push eax
push 0x60fc70
lea ecx, [ebp - 0x2004]
call fcn.00518530
test al, al
je 0x4b3aa1
lea ecx, [ebp - 0x1fb0]
call fcn.0051da30
test al, al
je 0x4b3ab8
lea eax, [ebp - 0x1fb0]
push eax
push 0x60b654
lea ecx, [ebp - 0x2004]
call fcn.00518530
push 3
lea edx, [edi + 0xb4]
lea ecx, [ebp - 0x1fb0]
call fcn.005108d0
test al, al
je 0x4b3b92
lea ecx, [ebp - 0x1fb0]
call fcn.0051dd30
push eax
push 0
call dword [0x5deaa4]
test eax, eax
je 0x4b3b07
push 1
push 0
lea ecx, [ebp - 0x7024]
call fcn.0051e110
mov byte [ebp - 4], 0x13
or dword [ebp - 0x6fb8], 1
jmp 0x4b3b27
lea eax, [ebp - 0x1f98]
push eax
lea ecx, [ebp - 0x7030]
call fcn.0051e150
mov dword [ebp - 4], 0x114
or dword [ebp - 0x6fb8], 2
push eax
lea ecx, [ebp - 0x2148]
call fcn.0051e080
mov eax, dword [ebp - 0x6fb8]
test al, 2
je 0x4b3b57
and eax, 0xfffffffd
lea ecx, [ebp - 0x7030]
mov dword [ebp - 0x6fb8], eax
call fcn.0051dfd0
mov eax, dword [ebp - 0x6fb8]
mov dword [ebp - 4], 0x112
test al, 1
je 0x4b3b76
and eax, 0xfffffffe
lea ecx, [ebp - 0x7024]
mov dword [ebp - 0x6fb8], eax
call fcn.0051dfd0
push 0
lea ecx, [ebp - 0x2148]
call fcn.0051dd30
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.00498030
inc esi
cmp byte [edi + 0x14], 0
je 0x4b3920
mov eax, dword [ebp - 0x6f5c]
lea ecx, [ebp - 0x6d28]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1fb4]
mov dword [ebp - 0x6f5c], eax
call fcn.00518170
test al, al
jne 0x4b3870
mov ecx, edi
call fcn.00498760
test al, al
je 0x4b3db4
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x58
push dword [eax + 0x34]
call fcn.004f1310
push 4
lea ecx, [ebp - 0x6cdc]
call fcn.00401ed0
lea ecx, [ebp - 0x6cdc]
call fcn.004015d0
lea eax, [ebp - 0x2548]
mov byte [ebp - 4], 0x15
push eax
push 0x1f40
lea eax, [ebp - 0x1f70]
mov dword [ebp - 0x6ca8], 0x428
push eax
mov dword [ebp - 0x2548], 0
call dword [0x5de57c]
test eax, eax
je 0x4b3d04
xor ecx, ecx
test dword [ebp - 0x2548], 0xfffffffc
mov dword [ebp - 0x6f5c], ecx
jbe 0x4b3d04
mov esi, dword [0x5de330]
cmp byte [edi + 0x14], 0
jne 0x4b3da9
push dword [ebp + ecx*4 - 0x1f70]
push 0x18
call dword [0x5de450]
push eax
lea ecx, [ebp - 0x6cdc]
call fcn.00401620
lea ecx, [ebp - 0x6cdc]
call fcn.00401650
test al, al
jne 0x4b3ce6
lea eax, [ebp - 0x6ca8]
push eax
push dword [ebp - 0x6cdc]
call dword [0x5de370]
test eax, eax
je 0x4b3cdc
cmp byte [edi + 0x14], 0
jne 0x4b3da9
lea eax, [ebp - 0x6a88]
mov ecx, edi
push eax
lea eax, [ebp - 0x212c]
push eax
call fcn.00495950
test al, al
je 0x4b3cdc
lea eax, [ebp - 0x6ca8]
push eax
push dword [ebp - 0x6cdc]
call esi
test eax, eax
jne 0x4b3ca6
cmp byte [edi + 0x14], 0
jne 0x4b3da9
mov ecx, dword [ebp - 0x6f5c]
mov eax, dword [ebp - 0x2548]
inc ecx
shr eax, 2
mov dword [ebp - 0x6f5c], ecx
cmp ecx, eax
jb 0x4b3c53
cmp byte [edi + 0x14], 0
jne 0x4b3da9
lea ecx, [ebp - 0x212c]
call fcn.00404090
mov ecx, dword [edi + 8]
push 0x5a
mov dword [ebp - 0x6f40], eax
push dword [ecx + 0x34]
mov ecx, dword [edi + 4]
call fcn.004f1310
mov ecx, dword [ebp - 0x6f40]
xor esi, esi
test ecx, ecx
je 0x4b3da2
xor eax, eax
mov dword [ebp - 0x6f5c], eax
nop word [eax + eax]
cmp byte [edi + 0x14], 0
jne 0x4b3da2
xor edx, edx
div ecx
mov ecx, dword [edi + 4]
add eax, 0x5a
push eax
mov eax, dword [edi + 8]
push dword [eax + 0x34]
call fcn.004f1310
push 0
push 0
push esi
lea ecx, [ebp - 0x212c]
call fcn.004042c0
push eax
mov ecx, edi
call fcn.00498030
mov eax, dword [ebp - 0x6f5c]
inc esi
mov ecx, dword [ebp - 0x6f40]
add eax, 0xa
mov dword [ebp - 0x6f5c], eax
cmp esi, ecx
jb 0x4b3d50
mov ecx, edi
call fcn.00498760
lea ecx, [ebp - 0x6cdc]
call fcn.00401600
lea ecx, [ebp - 0x6d3c]
call fcn.00518890
lea ecx, [ebp - 0x6d28]
call fcn.00518890
lea ecx, [ebp - 0x2b20]
call fcn.00511020
lea ecx, [ebp - 0x2638]
call fcn.0051dfd0
lea ecx, [ebp - 0x2778]
call fcn.0051dfd0
lea ecx, [ebp - 0x212c]
call fcn.004042e0
lea ecx, [ebp - 0x23e0]
call fcn.0051dfd0
lea ecx, [ebp - 0x2004]
call fcn.005187c0
lea ecx, [ebp - 0x205c]
call fcn.005187c0
lea ecx, [ebp - 0x1fb4]
call fcn.005187c0
lea ecx, [ebp - 0x20f0]
call fcn.0051dfd0
lea ecx, [ebp - 0x24b0]
mov dword [ebp - 4], 0xfd
call fcn.0051b050
lea ecx, [ebp - 0x6cb8]
call fcn.004031b0
lea ecx, [ebp - 0x22fc]
call fcn.0051dfd0
lea ecx, [ebp - 0x21a8]
call fcn.0051dfd0
lea ecx, [ebp - 0x22ac]
call fcn.0051dfd0
lea ecx, [ebp - 0x1fb0]
mov byte [ebp - 4], 0x45
call fcn.0051dfd0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0
push 0x1004
push dword [eax + 0xb8]
call fcn.004f6680
push 0xc
lea ecx, [ebp - 0x27c8]
mov dword [ebp - 0x6f48], eax
call fcn.00401eb0
lea ecx, [ebp - 0x27c8]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x27bc]
mov dword [ebp - 4], 0x116
call fcn.00401eb0
lea ecx, [ebp - 0x27bc]
call fcn.0051e180
push 0xc
lea ecx, [ebp - 0x2928]
mov byte [ebp - 4], 0x17
call fcn.00401eb0
lea ecx, [ebp - 0x2928]
call fcn.0051e180
push 0
push 0x61b930
lea ecx, [ebp - 0x1ff0]
mov byte [ebp - 4], 0x18
call fcn.0050b8e0
xor esi, esi
cmp dword [ebp - 0x6f48], esi
jbe 0x4b4025
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push esi
push dword [eax + 0xb8]
call fcn.004f2e50
cmp eax, 0x51
jne 0x4b4018
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push esi
push dword [eax + 0xb8]
call fcn.004f2da0
push eax
lea ecx, [ebp - 0x2154]
call fcn.0051dd60
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push esi
push dword [eax + 0xb8]
call fcn.004f2da0
push eax
lea ecx, [ebp - 0x27c8]
call fcn.0051dd60
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 2
push esi
push dword [eax + 0xb8]
call fcn.004f2da0
push eax
lea ecx, [ebp - 0x27bc]
call fcn.0051dd60
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 3
push esi
push dword [eax + 0xb8]
call fcn.004f2da0
push eax
lea ecx, [ebp - 0x2928]
call fcn.0051dd60
push 0
push 0
push 0
push 0x617624
lea ecx, [ebp - 0x2928]
call fcn.0051dd30
push eax
push 0x61b99c
lea ecx, [ebp - 0x27bc]
call fcn.0051dd30
push eax
push 0x61b9c0
lea ecx, [ebp - 0x27c8]
call fcn.0051dd30
push eax
push 0x61b9e8
lea ecx, [ebp - 0x2154]
call fcn.0051dd30
push eax
push 0x616138
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
inc esi
cmp esi, dword [ebp - 0x6f48]
jb 0x4b3f11
push 0
push 0x61ba10
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
push 0x18
lea ecx, [ebp - 0x2998]
call fcn.00401ee0
lea ecx, [ebp - 0x2998]
call fcn.0051b0f0
xor esi, esi
mov byte [ebp - 4], 0x19
cmp dword [ebp - 0x6f48], esi
jbe 0x4b4217
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push esi
push dword [eax + 0xb8]
call fcn.004f2e50
cmp eax, 0x52
jne 0x4b420a
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push esi
push dword [eax + 0xb8]
call fcn.004f2da0
push eax
lea ecx, [ebp - 0x2154]
call fcn.0051dd60
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push esi
push dword [eax + 0xb8]
call fcn.004f2da0
push eax
lea ecx, [ebp - 0x27c8]
call fcn.0051dd60
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 2
push esi
push dword [eax + 0xb8]
call fcn.004f2da0
push eax
lea ecx, [ebp - 0x27bc]
call fcn.0051dd60
push 1
push 0x607958
lea ecx, [ebp - 0x2154]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2998]
call fcn.0051ae40
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2998]
call fcn.0051aff0
push eax
push 0x61ba4c
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea ecx, [ebp - 0x2998]
call fcn.0051afe0
cmp eax, 1
jbe 0x4b4172
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2998]
call fcn.0051aff0
push eax
push 0x61ba60
lea ecx, [ebp - 0x1f80]
call fcn.0051c4c0
lea ecx, [ebp - 0x2998]
call fcn.0051afe0
cmp eax, 2
jbe 0x4b41b8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 2
lea ecx, [ebp - 0x2998]
call fcn.0051aff0
push eax
push 0x61ba78
lea ecx, [ebp - 0x1f80]
call fcn.0051c4c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x617624
lea ecx, [ebp - 0x27bc]
call fcn.0051dd30
push eax
push 0x61b9c0
lea ecx, [ebp - 0x27c8]
call fcn.0051dd30
push eax
push 0x61b9e8
lea ecx, [ebp - 0x1f80]
call fcn.0051c4c0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
inc esi
cmp esi, dword [ebp - 0x6f48]
jb 0x4b4061
push 0
push 0x61ba90
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x614dc0
call fcn.004f33e0
push 0
push 0x61bae0
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x614df0
call fcn.004f33e0
push 0
push 0x61bb70
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
movsd xmm0, qword [edi + 0x2b0]
comisd xmm0, xmmword [0x6be4e0]
jbe 0x4b42b9
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x614e10
call fcn.004f33e0
push 0
push 0x61bbf0
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x614e44
call fcn.004f33e0
push 0
push 0x61bc80
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x614e74
call fcn.004f33e0
push 0
push 0x61bd10
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x614ea0
call fcn.004f33e0
push 0
push 0x61bda0
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x614ed8
call fcn.004f33e0
push 0
push 0x61be30
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x614f20
call fcn.004f33e0
push 0
push 0x61bed0
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
movsd xmm0, qword [edi + 0x2b0]
lea ecx, [ebp - 0x1ff0]
xor eax, eax
comisd xmm0, xmmword [0x6be4e0]
seta al
add eax, 7
add dword [edi + 0x24], eax
call fcn.0050c7b0
test eax, eax
je 0x4b4565
lea ecx, [ebp - 0x2980]
call fcn.005122d0
lea ecx, [ebp - 0x2980]
call fcn.00512330
mov edi, eax
lea ecx, [ebp - 0x2980]
sub edi, dword [ebp - 0x700c]
mov esi, edx
lea edx, [ebp - 0x1f80]
sbb esi, dword [ebp - 0x7010]
call fcn.00512340
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60ff48
lea ecx, [ebp - 0x1f80]
call fcn.0051dd30
push eax
push 0x61bf70
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
push esi
push edi
xor edx, edx
lea ecx, [ebp - 0x1f80]
call fcn.00511c60
mov edi, dword [ebp - 0x6f54]
mov ecx, 0x61c010
push 0
push 0
push 0
cmp byte [edi + 0x14], 0
mov eax, 0x61bfc8
push 0
push 0
push 0
push 0
push 0x60f9bc
cmove eax, ecx
lea ecx, [ebp - 0x1f80]
push eax
push 0x61c050
call fcn.0051dd30
push eax
push 0x61c060
lea ecx, [ebp - 0x1f80]
call fcn.0051dda0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
push 0
push 0x61c090
lea ecx, [ebp - 0x1ff0]
call fcn.0050b8e0
lea ecx, [ebp - 0x1ff0]
call fcn.0050c7d0
mov edi, eax
lea ecx, [ebp - 0x1f80]
add edi, 0x26
mov esi, edx
adc esi, 0
push esi
push edi
call fcn.0051d120
lea ecx, [ebp - 0x1f80]
call fcn.0051df40
add eax, eax
add edi, eax
adc esi, 0
push esi
push edi
lea ecx, [ebp - 0x1f80]
call fcn.0051d120
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61c0cc
lea ecx, [ebp - 0x1f80]
call fcn.0051c4c0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1ff0]
call fcn.0050bb00
mov edi, dword [ebp - 0x6f54]
jmp 0x4b456d
lea ecx, [edi + 0x54]
call fcn.0051dfa0
lea ecx, [ebp - 0x1f74]
call fcn.00517240
lea ecx, [ebp - 0x2544]
call fcn.00517240
push 5
lea ecx, [edi + 0x24c]
call fcn.0051ca50
lea ecx, [edi + 0x24c]
call fcn.0051dd30
push eax
push 0x80000002
call dword [0x5de078]
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x64
push dword [eax + 0x34]
call fcn.004f1310
cmp byte [edi + 0x14], 0
mov ecx, 0x61c110
push 0
mov eax, 0x61c0f4
cmove eax, ecx
mov ecx, dword [edi + 4]
push eax
mov eax, dword [edi + 8]
push dword [eax + 0x38]
call fcn.004f44b0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61c130
lea ecx, [edi + 0x6c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2154]
call fcn.0051dda0
lea ecx, [ebp - 0x2154]
call fcn.0051dd30
mov edx, 2
mov ecx, eax
call fcn.0050cda0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61c140
lea ecx, [edi + 0x6c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2154]
call fcn.0051dda0
lea ecx, [ebp - 0x2154]
call fcn.0051dd30
mov edx, 2
mov ecx, eax
call fcn.0050cda0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x61c150
lea ecx, [edi + 0x6c]
call fcn.0051dd30
push eax
lea ecx, [ebp - 0x2154]
call fcn.0051dda0
lea ecx, [ebp - 0x2154]
call fcn.0051dd30
mov edx, 2
mov ecx, eax
call fcn.0050cda0
lea ecx, [edi + 0x158]
call fcn.004e5930
lea ecx, [ebp - 0x2998]
xor esi, esi
call fcn.0051b050
lea ecx, [ebp - 0x2928]
call fcn.0051dfd0
lea ecx, [ebp - 0x27bc]
call fcn.0051dfd0
lea ecx, [ebp - 0x27c8]
call fcn.0051dfd0
lea ecx, [ebp - 0x2148]
call fcn.0051dfd0
lea ecx, [ebp - 0x6dac]
call fcn.004038f0
lea ecx, [ebp - 0x2578]
call fcn.004e8c20
lea ecx, [ebp - 0x2934]
call fcn.0051dfd0
lea ecx, [ebp - 0x6db4]
call fcn.004038f0
lea ecx, [ebp - 0x6d10]
call fcn.00401b50
lea ecx, [ebp - 0x1ff0]
call fcn.00401f90
lea ecx, [ebp - 0x25cc]
call fcn.0051dfd0
lea ecx, [ebp - 0x1f80]
call fcn.0051dfd0
lea ecx, [ebp - 0x2940]
call fcn.0051dfd0
lea ecx, [ebp - 0x1f8c]
call fcn.0051dfd0
lea ecx, [ebp - 0x2a2c]
call fcn.005188e0
lea ecx, [ebp - 0x29e0]
call fcn.00518890
lea ecx, [ebp - 0x6cb4]
call fcn.00518890
lea ecx, [ebp - 0x2544]
call fcn.005187c0
lea ecx, [ebp - 0x1f74]
call fcn.005187c0
lea ecx, [ebp - 0x25d8]
call fcn.0051dfd0
lea ecx, [ebp - 0x294c]
call fcn.0051dfd0
lea ecx, [ebp - 0x2644]
call fcn.0051dfd0
lea ecx, [ebp - 0x2668]
call fcn.0051dfd0
lea ecx, [ebp - 0x2958]
call fcn.0051dfd0
lea ecx, [ebp - 0x291c]
call fcn.0051dfd0
lea ecx, [ebp - 0x27d4]
call fcn.0051dfd0
lea ecx, [ebp - 0x26c8]
call fcn.0051dfd0
lea ecx, [ebp - 0x26e0]
call fcn.0051dfd0
lea ecx, [ebp - 0x26bc]
call fcn.0051dfd0
lea ecx, [ebp - 0x2890]
call fcn.0051dfd0
lea ecx, [ebp - 0x27e0]
call fcn.0051dfd0
lea ecx, [ebp - 0x2568]
call fcn.0051dfd0
lea ecx, [ebp - 0x2904]
call fcn.0051dfd0
lea ecx, [ebp - 0x28a8]
call fcn.0051dfd0
lea ecx, [ebp - 0x26b0]
call fcn.0051dfd0
lea ecx, [ebp - 0x24ec]
call fcn.0051dfd0
lea ecx, [ebp - 0x2910]
call fcn.0051dfd0
lea ecx, [ebp - 0x25e4]
call fcn.0051dfd0
lea ecx, [ebp - 0x29bc]
call fcn.0051dfd0
lea ecx, [ebp - 0x2184]
call fcn.0051dfd0
lea ecx, [ebp - 0x2238]
call fcn.0051dfd0
lea ecx, [ebp - 0x28b8]
call fcn.0051dfd0
lea ecx, [ebp - 0x2120]
call fcn.0051dfd0
lea ecx, [ebp - 0x2154]
call fcn.0051dfd0
lea ecx, [ebp - 0x1f98]
call fcn.0051dfd0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e885
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret