Function at 0x452150
Capabilities:
Contain obfuscated stackstrings
Encode data using base64
Parse pe header

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ab1b2
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x70e0
call fcn.004a3c60
mov eax, dword [0x4fc040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, ecx
mov dword [ebp - 0x6f7c], eax
mov dword [ebp - 0x6fe4], 0
lea ecx, [ebp - 0x27dc]
mov byte [eax + 0x19c], 0
call fcn.00413340
mov ecx, dword [ebp - 0x6f7c]
lea ecx, [ecx + 0x11c]
call fcn.00402cf0
xor ecx, ecx
call fcn.004090d0
test eax, eax
je 0x4521de
push eax
call fcn.004791bb
add esp, 4
mov ecx, dword [ebp - 0x6f7c]
push 0
call fcn.00445920
mov eax, dword [ebp - 0x6f7c]
push 1
mov eax, dword [eax + 8]
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.00421b70
mov eax, dword [ebp - 0x6f7c]
push 0
push 0x4e26cc
mov eax, dword [eax + 8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.0041f410
push 0xc
lea ecx, [ebp - 0x1f8c]
call fcn.00401970
lea ecx, [ebp - 0x1f8c]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2154]
mov dword [ebp - 4], 0
call fcn.00401970
lea ecx, [ebp - 0x2154]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2114]
mov byte [ebp - 4], 1
call fcn.00401970
lea ecx, [ebp - 0x2114]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2874]
mov byte [ebp - 4], 2
call fcn.00401970
lea ecx, [ebp - 0x2874]
call fcn.00402b40
mov byte [ebp - 4], 3
mov esi, 0xa0
mov eax, dword [ebp - 0x6f7c]
push 0
push 0
push 0x1009
mov eax, dword [eax + 8]
push dword [esi + eax]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.0041dc10
add esi, 4
cmp esi, 0xb8
jb 0x4522a0
push 0
push 0
push 0x80
lea ecx, [ebp - 0x2114]
call fcn.004033e0
push eax
push 0
push 0
push 0x104
lea ecx, [ebp - 0x2154]
call fcn.004033e0
push 0
push 0
push 0x80
lea ecx, [ebp - 0x2874]
mov esi, eax
call fcn.004033e0
mov edx, esi
mov ecx, eax
call fcn.00425b50
mov edi, dword [ebp - 0x6f7c]
push 4
mov byte [ebp - 0x6f81], 1
mov dword [edi + 0x38], eax
mov eax, edi
mov eax, dword [eax + 8]
push dword [eax + 0x28]
mov eax, edi
mov ecx, dword [eax + 4]
call fcn.0041fea0
mov dword [ebp - 0x6f78], eax
test eax, eax
je 0x452372
mov eax, edi
push 1
lea ecx, [eax + 0x114]
push ecx
lea edx, [eax + 0x10c]
lea ecx, [eax + 0x104]
call fcn.00425670
test eax, eax
mov dword [edi + 0x30], eax
setne cl
test eax, eax
jne 0x4523f2
jmp 0x452378
mov cl, byte [ebp - 0x6f81]
mov eax, dword [ebp - 0x6f7c]
cmp dword [eax + 0x38], 0
je 0x4523ea
lea ecx, [ebp - 0x2114]
mov dword [eax + 0x30], 1
push ecx
push 1
lea ecx, [eax + 0x104]
call fcn.00478750
mov ecx, eax
call fcn.00402c20
mov ecx, dword [ebp - 0x6f7c]
lea eax, [ebp - 0x2154]
push eax
push 1
lea ecx, [ecx + 0x10c]
call fcn.00478750
mov ecx, eax
call fcn.00402c20
mov ecx, dword [ebp - 0x6f7c]
lea eax, [ebp - 0x2874]
push eax
push 1
lea ecx, [ecx + 0x114]
call fcn.00478750
mov ecx, eax
call fcn.00402c20
jmp 0x4523f2
test cl, cl
je 0x452758
push 8
lea ecx, [ebp - 0x288c]
call fcn.00417f90
mov eax, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x288c]
add eax, 0x114
push eax
mov dword [ebp - 0x6fcc], eax
call fcn.004788b0
push 8
lea ecx, [ebp - 0x2884]
mov byte [ebp - 4], 4
call fcn.00417f90
mov esi, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x2884]
add esi, 0x10c
push esi
mov dword [ebp - 0x6fb4], esi
call fcn.004788b0
push 8
lea ecx, [ebp - 0x287c]
mov byte [ebp - 4], 5
call fcn.00417f90
mov edi, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x287c]
add edi, 0x104
push edi
mov dword [ebp - 0x6f8c], edi
call fcn.004788b0
mov eax, dword [ebp - 0x6f7c]
mov ecx, edi
mov byte [ebp - 4], 6
mov eax, dword [eax + 0x30]
add eax, 2
push eax
call fcn.00478750
mov edi, dword [ebp - 0x6f7c]
mov ecx, esi
mov eax, dword [edi + 0x30]
add eax, 2
push eax
call fcn.00478750
mov eax, dword [edi + 0x30]
mov edi, dword [ebp - 0x6fcc]
add eax, 2
push eax
mov ecx, edi
call fcn.00478750
mov eax, dword [ebp - 0x6f7c]
xor esi, esi
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x45254f
nop dword [eax]
push esi
lea ecx, [ebp - 0x287c]
call fcn.00478820
mov ecx, eax
call fcn.00402d20
mov ecx, dword [ebp - 0x6f8c]
push eax
push esi
call fcn.00478820
mov ecx, eax
call fcn.00402e60
push esi
lea ecx, [ebp - 0x2884]
call fcn.00478820
mov ecx, eax
call fcn.00402d20
mov ecx, dword [ebp - 0x6fb4]
push eax
push esi
call fcn.00478820
mov ecx, eax
call fcn.00402e60
push esi
lea ecx, [ebp - 0x288c]
call fcn.00478820
mov ecx, eax
call fcn.00402d20
push eax
push esi
mov ecx, edi
call fcn.00478820
mov ecx, eax
call fcn.00402e60
mov eax, dword [ebp - 0x6f7c]
inc esi
mov ecx, dword [eax + 0x30]
cmp esi, ecx
jb 0x4524d0
push 0
push 0x4e26f8
push 0x104
push ecx
lea ecx, [eax + 0x114]
call fcn.00478820
mov ecx, eax
call fcn.004033e0
mov ecx, eax
call fcn.00426610
mov eax, dword [ebp - 0x6f7c]
push 0x4e26f8
push dword [eax + 0x30]
lea ecx, [eax + 0x104]
call fcn.00478820
mov ecx, eax
call fcn.00402c10
mov edi, dword [ebp - 0x6f7c]
mov ecx, edi
push 0x4e270c
mov eax, dword [edi + 0x30]
lea ecx, [ecx + 0x104]
inc eax
push eax
mov dword [edi + 0x30], eax
call fcn.00478820
mov ecx, eax
call fcn.00402c10
mov eax, edi
push 0x4e270c
push dword [eax + 0x30]
lea ecx, [eax + 0x114]
call fcn.00478820
mov ecx, eax
call fcn.00402c10
lea eax, [ebp - 0x6db8]
mov dword [ebp - 0x6db8], 0x400
push eax
push 0
mov eax, edi
push 0
push 0x400
push dword [eax + 0x30]
lea ecx, [eax + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.004033e0
push eax
call dword [0x4ad620]
mov edx, 0x4e270c
mov ecx, 0x80000003
call fcn.00408d00
test al, al
jne 0x4526bd
push 0xc
lea ecx, [ebp - 0x29dc]
call fcn.00401970
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov eax, edi
push 0
push str.NTUSER.DAT
push dword [eax + 0x30]
lea ecx, [eax + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x29dc]
call fcn.00402bd0
lea ecx, [ebp - 0x29dc]
mov byte [ebp - 4], 7
call fcn.00402ea0
push eax
mov eax, edi
push dword [eax + 0x30]
lea ecx, [eax + 0x104]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
push 0x80000003
call dword [0x4ad004]
test eax, eax
jne 0x4526b0
mov eax, edi
mov eax, dword [eax + 0x30]
inc eax
mov dword [edi + 0x30], eax
lea ecx, [ebp - 0x29dc]
call fcn.00402ce0
jmp 0x4526c6
mov eax, edi
mov eax, dword [eax + 0x30]
inc eax
mov dword [edi + 0x30], eax
lea ecx, [ebp - 0x287c]
call fcn.00478840
lea ecx, [ebp - 0x2884]
call fcn.00478840
lea ecx, [ebp - 0x288c]
mov byte [ebp - 4], 3
call fcn.00478840
mov esi, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x27dc]
add esi, 0x140
call fcn.00413330
push edx
push eax
mov ecx, esi
call fcn.004038a0
mov ecx, dword [ebp - 0x6f7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d1d8c
lea ecx, [ecx + 0x134]
call fcn.00402ea0
push eax
mov ecx, esi
call fcn.00404550
mov ecx, esi
call fcn.00402ea0
or edx, 0xffffffff
mov ecx, eax
call fcn.0040fbc0
test al, al
jne 0x452768
mov eax, dword [ebp - 0x6f7c]
push 1
mov ecx, eax
call fcn.00445920
mov esi, eax
jmp 0x46cde6
mov ecx, esi
call fcn.00402ea0
push eax
call dword [0x4ad3b0]
or eax, 2
mov ecx, esi
push eax
call fcn.00402ea0
push eax
call dword [0x4ad3ac]
push 0
call dword [0x4ad7f0]
push 0xc
lea ecx, [ebp - 0x226c]
call fcn.00401970
lea ecx, [ebp - 0x226c]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2160]
mov byte [ebp - 4], 8
call fcn.00401970
lea ecx, [ebp - 0x2160]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2a00]
mov byte [ebp - 4], 9
call fcn.00401970
lea ecx, [ebp - 0x2a00]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x25bc]
mov byte [ebp - 4], 0xa
call fcn.00401970
lea ecx, [ebp - 0x25bc]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2978]
mov byte [ebp - 4], 0xb
call fcn.00401970
lea ecx, [ebp - 0x2978]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x250c]
mov byte [ebp - 4], 0xc
call fcn.00401970
lea ecx, [ebp - 0x250c]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2720]
mov byte [ebp - 4], 0xd
call fcn.00401970
lea ecx, [ebp - 0x2720]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2900]
mov byte [ebp - 4], 0xe
call fcn.00401970
lea ecx, [ebp - 0x2900]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2930]
mov byte [ebp - 4], 0xf
call fcn.00401970
lea ecx, [ebp - 0x2930]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x25b0]
mov byte [ebp - 4], 0x10
call fcn.00401970
lea ecx, [ebp - 0x25b0]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2818]
mov byte [ebp - 4], 0x11
call fcn.00401970
lea ecx, [ebp - 0x2818]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x293c]
mov byte [ebp - 4], 0x12
call fcn.00401970
lea ecx, [ebp - 0x293c]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2708]
mov byte [ebp - 4], 0x13
call fcn.00401970
lea ecx, [ebp - 0x2708]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x26fc]
mov byte [ebp - 4], 0x14
call fcn.00401970
lea ecx, [ebp - 0x26fc]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x26f0]
mov byte [ebp - 4], 0x15
call fcn.00401970
lea ecx, [ebp - 0x26f0]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x280c]
mov byte [ebp - 4], 0x16
call fcn.00401970
lea ecx, [ebp - 0x280c]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2948]
mov byte [ebp - 4], 0x17
call fcn.00401970
lea ecx, [ebp - 0x2948]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2954]
mov byte [ebp - 4], 0x18
call fcn.00401970
lea ecx, [ebp - 0x2954]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2640]
mov byte [ebp - 4], 0x19
call fcn.00401970
lea ecx, [ebp - 0x2640]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x264c]
mov byte [ebp - 4], 0x1a
call fcn.00401970
lea ecx, [ebp - 0x264c]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x296c]
mov byte [ebp - 4], 0x1b
call fcn.00401970
lea ecx, [ebp - 0x296c]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x25ec]
mov byte [ebp - 4], 0x1c
call fcn.00401970
lea ecx, [ebp - 0x25ec]
call fcn.00402b40
mov byte [ebp - 4], 0x1d
call dword [0x4ad3d0]
mov ecx, eax
call fcn.0040f880
mov edi, eax
mov ecx, str.HKLM
test edi, edi
mov dword [ebp - 0x6fdc], edi
mov eax, str.HKLM64
setne byte [ebp - 0x6f81]
test edi, edi
push 1
cmove eax, ecx
mov ecx, 0x4ccd04
mov dword [ebp - 0x6fc4], eax
mov eax, str.HKLM32
cmove eax, ecx
lea ecx, [ebp - 0x226c]
mov dword [ebp - 0x6fe0], eax
mov eax, dword [ebp - 0x6f7c]
push dword [eax + 0x38]
push 0x1a
call fcn.00403330
mov eax, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x2160]
push 1
push dword [eax + 0x38]
push 0x1c
call fcn.00403330
mov eax, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x25bc]
push 1
push dword [eax + 0x38]
push 2
call fcn.00403330
mov eax, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x250c]
push 1
push dword [eax + 0x38]
push 0x10
call fcn.00403330
mov eax, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x26f0]
push 1
push dword [eax + 0x38]
push 0x23
call fcn.00403330
mov eax, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x2900]
push 1
push dword [eax + 0x38]
push 7
call fcn.00403330
mov eax, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x2930]
push 1
push dword [eax + 0x38]
push 5
call fcn.00403330
push 0x400
push 0
push 0
push 0x400
lea ecx, [ebp - 0x2720]
call fcn.004033e0
push eax
mov eax, dword [ebp - 0x6f7c]
push 0x4dd228
push dword [eax + 0x38]
call dword [0x4ad624]
push 0x400
lea ecx, [ebp - 0x2720]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2720]
call fcn.00402ea0
push eax
call dword [0x4ad330]
push 0x104
push 0
push 0
push 0x104
lea ecx, [ebp - 0x25b0]
call fcn.004033e0
push eax
call dword [0x4ad3bc]
test edi, edi
je 0x452bbd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d1cdc
lea ecx, [ebp - 0x25b0]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2818]
call fcn.00402e00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dd238
lea ecx, [ebp - 0x25b0]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x293c]
call fcn.00402e00
jmp 0x452bef
push 0x104
push 0
push 0
push 0x104
lea ecx, [ebp - 0x2818]
call fcn.004033e0
push eax
call dword [0x4ad3c0]
lea eax, [ebp - 0x2818]
push eax
lea ecx, [ebp - 0x293c]
call fcn.00402c20
push edi
lea edx, [ebp - 0x26fc]
lea ecx, [ebp - 0x2708]
call fcn.0040ff50
push 0
push 0
push 0x2b
lea ecx, [ebp - 0x280c]
call fcn.00403330
push 0
push 0
push 0x17
lea ecx, [ebp - 0x2640]
call fcn.00403330
push 0
push 0
push 0x19
lea ecx, [ebp - 0x264c]
call fcn.00403330
push 0
push 0
push 0x18
lea ecx, [ebp - 0x2948]
call fcn.00403330
push 1
push 0
push 0x28
lea ecx, [ebp - 0x25ec]
call fcn.00403330
lea ecx, [ebp - 0x25ec]
call fcn.00402d60
push eax
lea ecx, [ebp - 0x226c]
call fcn.00403f10
lea ecx, [ebp - 0x25ec]
call fcn.00402d60
push eax
lea ecx, [ebp - 0x2160]
call fcn.00403f10
push 1
push 0x4dd24c
lea ecx, [ebp - 0x2a00]
call fcn.00402db0
lea ecx, [ebp - 0x25ec]
call fcn.00402d60
push eax
lea ecx, [ebp - 0x25bc]
call fcn.00403f10
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d4030
lea ecx, [ebp - 0x226c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2978]
call fcn.00402e00
lea ecx, [ebp - 0x25ec]
call fcn.00402d60
push eax
lea ecx, [ebp - 0x250c]
call fcn.00403f10
lea ecx, [ebp - 0x25ec]
call fcn.00402d60
push eax
lea ecx, [ebp - 0x2720]
call fcn.00403f10
lea ecx, [ebp - 0x25ec]
call fcn.00402d60
push eax
lea ecx, [ebp - 0x2900]
call fcn.00403f10
lea ecx, [ebp - 0x25ec]
call fcn.00402d60
push eax
lea ecx, [ebp - 0x2930]
call fcn.00403f10
push 2
push 1
lea ecx, [ebp - 0x25b0]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x296c]
call fcn.00404e70
push 1
lea ecx, [ebp - 0x280c]
call fcn.00403090
lea eax, [ebp - 0x280c]
push eax
lea ecx, [ebp - 0x2954]
call fcn.00402c20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4cccfc
lea ecx, [ebp - 0x2708]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x280c]
call fcn.00404550
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4cccfc
lea ecx, [ebp - 0x26fc]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2954]
call fcn.00404550
mov eax, dword [ebp - 0x6f7c]
cmp byte [eax + 0x40], 0
je 0x452de6
xor esi, esi
jmp 0x46ccf4
mov eax, dword [eax + 8]
push 3
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.00421b70
mov eax, dword [ebp - 0x6f7c]
push 0
push 0x4e2724
mov eax, dword [eax + 8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.0041f410
mov eax, dword [ebp - 0x6f7c]
cmp dword [eax + 0x10], 0
jne 0x452e36
mov ecx, eax
call fcn.0046f870
mov eax, dword [ebp - 0x6f7c]
cmp dword [eax + 0x10], 1
jne 0x452e61
mov esi, dword [0x4ad350]
mov ecx, eax
call fcn.00472640
test al, al
jne 0x452ef1
push 0x64
call esi
mov eax, dword [ebp - 0x6f7c]
cmp dword [eax + 0x10], 1
je 0x452e42
mov eax, dword [eax + 8]
push 6
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.00421b70
mov eax, dword [ebp - 0x6f7c]
push 0
push 0x4e2754
mov eax, dword [eax + 8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.0041f410
mov esi, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x27dc]
add esi, 0x33c
call fcn.00413330
push edx
push eax
mov ecx, esi
call fcn.004038a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2784
mov ecx, esi
call fcn.00404550
mov ecx, esi
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f7c]
push eax
call fcn.0046fd60
test eax, eax
jne 0x452efb
mov esi, 3
jmp 0x46ccf4
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.HKLM_
mov ecx, esi
call fcn.00404550
push 4
lea ecx, [ebp - 0x1f74]
call fcn.00405970
lea ecx, [ebp - 0x1f74]
call fcn.00406240
push 4
lea ecx, [ebp - 0x2570]
mov byte [ebp - 4], 0x1e
call fcn.00405970
push 0
push 0x20019
mov ecx, esi
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2570]
call fcn.00407730
push 0xc
lea ecx, [ebp - 0x6cec]
mov byte [ebp - 4], 0x1f
call fcn.004076b0
lea ecx, [ebp - 0x6cec]
call fcn.004076f0
push 0xc
lea ecx, [ebp - 0x2a18]
mov byte [ebp - 4], 0x20
call fcn.004076b0
lea ecx, [ebp - 0x2a18]
call fcn.004076f0
push 0x10
lea ecx, [ebp - 0x2a64]
mov byte [ebp - 4], 0x21
call fcn.00407b20
lea ecx, [ebp - 0x2a64]
call fcn.004076d0
push 0xc
lea ecx, [ebp - 0x2780]
mov byte [ebp - 4], 0x22
call fcn.00401970
lea ecx, [ebp - 0x2780]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2960]
mov byte [ebp - 4], 0x23
call fcn.00401970
lea ecx, [ebp - 0x2960]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x1f80]
mov byte [ebp - 4], 0x24
call fcn.00401970
lea ecx, [ebp - 0x1f80]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x25e0]
mov byte [ebp - 4], 0x25
call fcn.00401970
lea ecx, [ebp - 0x25e0]
call fcn.00402b40
lea ecx, [ebp - 0x27dc]
mov byte [ebp - 4], 0x26
call fcn.00413330
mov ecx, edx
mov dword [ebp - 0x7038], eax
push ecx
mov dword [ebp - 0x702c], ecx
lea ecx, [ebp - 0x2960]
push eax
call fcn.004038a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dd270
lea ecx, [ebp - 0x2960]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f7c]
push eax
push 0x4e2794
lea ecx, [ecx + 0x134]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f7c]
push eax
lea ecx, [ecx + 0x11c]
call fcn.00402e00
push 0x20
lea ecx, [ebp - 0x1fc8]
call fcn.00401e20
lea ecx, [ebp - 0x1fc8]
call fcn.0040d860
mov ecx, dword [ebp - 0x6f7c]
push 0
push 0x22
mov byte [ebp - 4], 0x27
lea ecx, [ecx + 0x11c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040db00
test eax, eax
je 0x4532e7
push 0
mov esi, dword [ebp - 0x6f7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e27a8
push 0
push 1
push 1
push 0
add esi, 0x354
push 0x4e27d8
mov ecx, esi
call fcn.00403fc0
test eax, eax
mov edx, 0x4e27f0
mov ecx, 0x4e27e8
cmove ecx, edx
push ecx
mov ecx, esi
call fcn.00402ea0
push eax
push 0x4dd2d4
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
push 0
push 0
push 0
push 0
push 0
push 0x4dd2e8
push 0x4cd1c8
push 0x4d1138
push str.10.9.4.0
push 0x4dd2fc
mov ecx, esi
call fcn.00402ea0
push eax
push 0x4ceb84
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x25e0]
push 0
push dword [eax + 0xc]
call fcn.004038a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dd848
lea ecx, [ebp - 0x25e0]
call fcn.00402ea0
push eax
push 0x4e2808
mov ecx, esi
call fcn.00402ea0
push eax
push 0x4ceb84
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
push edi
mov ecx, dword [ebp - 0x6f7c]
lea eax, [ebp - 0x1f80]
push eax
call fcn.0046dc70
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
cmp dword [ebp - 0x6f78], 0
mov ecx, 0x4e2848
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dd848
mov eax, 0x4d1a98
cmove eax, ecx
lea ecx, [ebp - 0x2874]
push eax
push 0x4e285c
push 0x4dd848
call fcn.00402ea0
push eax
push 0x4e2894
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea edx, [ebp - 0x1f80]
lea ecx, [ebp - 0x27dc]
call fcn.004132f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dd314
lea ecx, [ebp - 0x1f80]
call fcn.00402ea0
push eax
push 0x4e28c8
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
push 0
push 0x4e28f0
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
lea ecx, [ebp - 0x296c]
call fcn.00402ea0
lea ecx, [ebp - 0x25b0]
mov dword [ebp - 0x6fd8], eax
call fcn.00402ea0
lea ecx, [ebp - 0x2818]
mov dword [ebp - 0x6fd4], eax
call fcn.00402ea0
mov dword [ebp - 0x6fd0], eax
mov al, byte [ebp - 0x6f81]
mov byte [ebp - 0x6fcc], al
mov eax, dword [ebp - 0x6f7c]
movups xmm0, xmmword [ebp - 0x6fd8]
lea ecx, [eax + 0x2f8]
movups xmmword [eax + 0x1a8], xmm0
call fcn.00476350
mov esi, dword [ebp - 0x6f7c]
add esi, 0x248
mov ecx, esi
call fcn.0042e540
mov ecx, dword [ebp - 0x6f7c]
push 0
lea ecx, [ecx + 0x230]
call fcn.0042e190
push 0x4d9e48
mov ecx, esi
call fcn.0042e4c0
push 1
mov ecx, esi
call fcn.0042f270
mov eax, dword [ebp - 0x6f7c]
xor ecx, ecx
test edi, edi
push 4
setne cl
inc ecx
add ecx, dword [eax + 0x30]
mov dword [ebp - 0x6fac], ecx
lea ecx, [ebp - 0x6d4c]
call fcn.00405970
push 8
push 0x4e2ba4
lea ecx, [ebp - 0x6d4c]
call fcn.00401320
push 8
lea ecx, [ebp - 0x6dfc]
mov byte [ebp - 4], 0x28
call fcn.00417f90
mov edi, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x6dfc]
mov eax, dword [edi + 0x30]
add eax, 2
push eax
call fcn.004788e0
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x2984]
mov edi, dword [ebp - 0x6dfc]
push 0xc
mov dword [ebp - 0x6fa8], edi
call fcn.00401970
push 1
push 0x4ccd8c
lea ecx, [ebp - 0x2984]
call fcn.00402b90
mov eax, dword [ebp - 0x6f7c]
xor esi, esi
mov byte [ebp - 4], 0x2a
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x453464
add eax, 0x114
mov dword [ebp - 0x6fcc], eax
nop dword [eax]
push esi
mov ecx, eax
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.00402c10
mov eax, dword [ebp - 0x6f7c]
inc esi
add edi, 0xc
mov ecx, dword [eax + 0x30]
mov eax, dword [ebp - 0x6fcc]
cmp esi, ecx
jb 0x453430
mov edi, dword [ebp - 0x6fa8]
lea eax, [ecx + ecx*2]
push 0x4dd460
lea ecx, [edi + eax*4]
call fcn.00402c10
cmp dword [ebp - 0x6fdc], 0
je 0x453497
mov eax, dword [ebp - 0x6f7c]
push 0x4dd460
mov eax, dword [eax + 0x30]
inc eax
lea eax, [eax + eax*2]
lea ecx, [edi + eax*4]
call fcn.00402c10
push 4
lea ecx, [ebp - 0x2574]
call fcn.00405970
lea ecx, [ebp - 0x2574]
call fcn.00406240
push 0x38
lea ecx, [ebp - 0x21e0]
mov byte [ebp - 4], 0x2b
call fcn.00401990
lea ecx, [ebp - 0x21e0]
call fcn.004019a0
mov ecx, dword [ebp - 0x6f7c]
mov byte [ebp - 4], 0x2c
call fcn.00472640
test al, al
jne 0x455efb
mov eax, dword [ebp - 0x6f7c]
test dword [eax + 0x34], 0x400
jne 0x455efb
push 0
push 0x4e2be4
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
mov eax, dword [ebp - 0x6f7c]
push 0
push 0x4e2c14
mov eax, dword [eax + 8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.0041f410
push 8
lea ecx, [ebp - 0x6d54]
call fcn.00417f90
push dword [ebp - 0x6fac]
lea ecx, [ebp - 0x6d54]
call fcn.004788e0
mov eax, dword [ebp - 0x6f7c]
xor esi, esi
mov byte [ebp - 4], 0x2d
mov edi, dword [ebp - 0x6d54]
mov dword [ebp - 0x6fa0], edi
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x4535c0
add eax, 0x104
mov dword [ebp - 0x6fcc], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2c40
push esi
mov ecx, eax
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
push str.HKU_
mov ecx, edi
call fcn.00402e00
mov eax, dword [ebp - 0x6f7c]
inc esi
add edi, 0xc
mov ecx, dword [eax + 0x30]
mov eax, dword [ebp - 0x6fcc]
cmp esi, ecx
jb 0x453570
mov edi, dword [ebp - 0x6fa0]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d6970
push dword [ebp - 0x6fc4]
lea eax, [ecx + ecx*2]
lea ecx, [edi + eax*4]
call fcn.00402e00
cmp dword [ebp - 0x6fdc], 0
je 0x453627
mov eax, dword [ebp - 0x6f7c]
push 0
push 0
push 0
mov eax, dword [eax + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4d6970
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [edi + eax*4]
call fcn.00402e00
push 4
lea ecx, [ebp - 0x2230]
call fcn.00405970
lea ecx, [ebp - 0x2230]
call fcn.00406240
push 4
lea ecx, [ebp - 0x1fe8]
mov byte [ebp - 4], 0x2e
call fcn.00405970
lea ecx, [ebp - 0x1fe8]
call fcn.00406240
push 0xc
lea ecx, [ebp - 0x23d0]
mov byte [ebp - 4], 0x2f
call fcn.00401970
lea ecx, [ebp - 0x23d0]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2120]
mov byte [ebp - 4], 0x30
call fcn.00401970
lea ecx, [ebp - 0x2120]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x1f98]
mov byte [ebp - 4], 0x31
call fcn.00401970
lea ecx, [ebp - 0x1f98]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2068]
mov byte [ebp - 4], 0x32
call fcn.00401970
lea ecx, [ebp - 0x2068]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x23dc]
mov byte [ebp - 4], 0x33
call fcn.00401970
lea ecx, [ebp - 0x23dc]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x22dc]
mov byte [ebp - 4], 0x34
call fcn.00401970
lea ecx, [ebp - 0x22dc]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2148]
mov byte [ebp - 4], 0x35
call fcn.00401970
lea ecx, [ebp - 0x2148]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2108]
mov byte [ebp - 4], 0x36
call fcn.00401970
lea ecx, [ebp - 0x2108]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x231c]
mov byte [ebp - 4], 0x37
call fcn.00401970
lea ecx, [ebp - 0x231c]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x28e8]
mov byte [ebp - 4], 0x38
call fcn.00401970
lea ecx, [ebp - 0x28e8]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x27a4]
mov byte [ebp - 4], 0x39
call fcn.00401970
lea ecx, [ebp - 0x27a4]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x28dc]
mov byte [ebp - 4], 0x3a
call fcn.00401970
lea ecx, [ebp - 0x28dc]
call fcn.00402b40
mov ecx, dword [ebp - 0x6f7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov byte [ebp - 4], 0x3b
lea ecx, [ecx + 0x140]
push 0x4dd3ec
mov dword [ebp - 0x2350], 0
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2780]
call fcn.00402e00
push 1
lea ecx, [ebp - 0x2780]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00401bd0
push 1
lea ecx, [ebp - 0x21e0]
call fcn.00401b90
mov esi, dword [ebp - 0x2364]
xor edi, edi
mov dword [ebp - 0x6f9c], edi
mov dword [ebp - 0x6fa4], esi
cmp dword [ebp - 0x6fac], edi
jbe 0x454995
mov eax, dword [ebp - 0x6f7c]
lea ecx, [eax + 0x33c]
mov dword [ebp - 0x6f8c], ecx
lea ecx, [eax + 0x10c]
mov dword [ebp - 0x6f78], ecx
jmp 0x453866
mov eax, dword [ebp - 0x6f7c]
mov ecx, eax
call fcn.00472640
test al, al
jne 0x454995
movd xmm1, edi
mov eax, edi
cvtdq2pd xmm1, xmm1
shr eax, 0x1f
addsd xmm1, qword [eax*8 + 0x4ee1f0]
mov eax, dword [ebp - 0x6fac]
mulsd xmm1, qword [0x4ee030]
movd xmm0, eax
shr eax, 0x1f
cvtdq2pd xmm0, xmm0
addsd xmm0, qword [eax*8 + 0x4ee1f0]
divsd xmm1, xmm0
addsd xmm1, qword [0x4ee000]
cvttsd2si eax, xmm1
push eax
mov eax, dword [ebp - 0x6f7c]
mov eax, dword [eax + 8]
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.00421b70
lea eax, [edi + edi*2]
shl eax, 2
mov dword [ebp - 0x6fb4], eax
add eax, dword [ebp - 0x6fa0]
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6fcc], eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2230]
call fcn.00407750
test al, al
je 0x454982
mov ecx, dword [ebp - 0x6f7c]
xor esi, esi
mov dword [ebp - 0x6fa4], esi
call fcn.00472640
test al, al
jne 0x454982
nop dword [eax]
lea eax, [ebp - 0x6cec]
push eax
push esi
lea ecx, [ebp - 0x2230]
call fcn.00407b30
test al, al
je 0x45497c
mov ecx, dword [ebp - 0x6fcc]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
push 0x4cccfc
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x23d0]
call fcn.00402e00
push 0
push 0x20019
lea ecx, [ebp - 0x23d0]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1fe8]
call fcn.00407750
test al, al
je 0x454968
lea eax, [ebp - 0x2120]
push eax
push 0x4d145c
lea ecx, [ebp - 0x1fe8]
call fcn.00407900
test al, al
je 0x454968
lea eax, [ebp - 0x6d04]
push eax
push 0x4e2cac
lea ecx, [ebp - 0x1fe8]
call fcn.00407a40
test al, al
je 0x4539ec
cmp dword [ebp - 0x6d04], 1
je 0x454968
lea eax, [ebp - 0x23dc]
push eax
push 0x4e2ccc
lea ecx, [ebp - 0x1fe8]
call fcn.00407900
test al, al
je 0x453a1a
lea ecx, [ebp - 0x23dc]
call fcn.00402d60
test eax, eax
jne 0x454968
lea eax, [ebp - 0x23dc]
push eax
push 0x4e2ce8
lea ecx, [ebp - 0x1fe8]
call fcn.00407900
test al, al
je 0x453a95
push 0x4e2d00
lea ecx, [ebp - 0x23dc]
call fcn.00402c50
test al, al
jne 0x454968
push 0x4e2d10
lea ecx, [ebp - 0x23dc]
call fcn.00402c50
test al, al
jne 0x454968
push 0x4e2d20
lea ecx, [ebp - 0x23dc]
call fcn.00402c50
test al, al
jne 0x454968
push 0x4e2d34
lea ecx, [ebp - 0x23dc]
call fcn.00402c50
test al, al
jne 0x454968
lea eax, [ebp - 0x1f98]
push eax
push 0x4e2d54
lea ecx, [ebp - 0x1fe8]
call fcn.00407900
lea eax, [ebp - 0x22dc]
push eax
push 0x4d69dc
lea ecx, [ebp - 0x1fe8]
call fcn.00407900
test al, al
jne 0x453ada
lea ecx, [ebp - 0x1f98]
call fcn.00402d60
test eax, eax
je 0x454968
lea eax, [ebp - 0x2148]
push eax
push 0x4e2d74
lea ecx, [ebp - 0x1fe8]
call fcn.00407900
test al, al
je 0x453b04
lea ecx, [ebp - 0x2148]
call fcn.00402d60
test eax, eax
jne 0x453b14
push 0x4dd44c
lea ecx, [ebp - 0x2148]
call fcn.00402c10
lea eax, [ebp - 0x2120]
push eax
lea ecx, [ebp - 0x2108]
call fcn.00402c20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4ccd54
lea ecx, [ebp - 0x2108]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4e2d88
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402e00
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
xor edx, edx
mov ecx, eax
call fcn.00409360
mov byte [ebp - 0x6f81], al
test al, al
jne 0x453c75
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2108]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4e2d88
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402e00
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
xor edx, edx
mov ecx, eax
call fcn.00409360
mov byte [ebp - 0x6f81], al
test al, al
jne 0x453c75
push 0
push 1
push 0xffffffffffffffff
push 1
push 0x4cd604
lea ecx, [ebp - 0x2108]
call fcn.00403fc0
cmp eax, 4
jl 0x453d82
dec eax
lea ecx, [ebp - 0x2108]
push eax
call fcn.00403e90
cmp byte [eax + 8], 0
je 0x453d75
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2108]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4e2d88
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402e00
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
xor edx, edx
mov ecx, eax
call fcn.00409360
mov byte [ebp - 0x6f81], al
test al, al
je 0x453be1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4ccd8c
lea ecx, [ebp - 0x2108]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2984]
call fcn.00404260
cmp byte [ebp - 0x6f81], 0
jne 0x453d0a
lea eax, [ebp - 0x2350]
push eax
lea eax, [ebp - 0x27a4]
push eax
lea ecx, [ebp - 0x23d0]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f7c]
push eax
call fcn.004703d0
test al, al
je 0x454968
push 0
lea ecx, [ebp - 0x23d0]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f7c]
push eax
lea eax, [ebp - 0x27a4]
push eax
call fcn.0046e890
test al, al
je 0x454968
mov byte [ebp - 0x6f81], 2
push 0
push str.Programs
lea ecx, [ebp - 0x2120]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f7c]
push eax
call fcn.0046e160
test al, al
jne 0x454968
lea ecx, [ebp - 0x1f98]
call fcn.00402ea0
mov ecx, eax
call fcn.0040fba0
test al, al
je 0x453e24
push 0
lea ecx, [ebp - 0x1f98]
call fcn.004032b0
push 0
push 0
push 0x4ccd04
push 0x4cd600
lea ecx, [ebp - 0x1f98]
call fcn.004047c0
jmp 0x4543fd
cmp byte [ebp - 0x6f81], 0
jne 0x453c75
lea ecx, [ebp - 0x2108]
call fcn.00402cf0
lea ecx, [ebp - 0x2120]
call fcn.00402d60
push 0
push 1
push 1
push 0
push 0x4e2d9c
lea ecx, [ebp - 0x2120]
call fcn.00403fc0
test eax, eax
jne 0x453e06
push eax
push 1
push 1
push eax
push 0x4e2db0
lea ecx, [ebp - 0x2120]
call fcn.00403fc0
test eax, eax
jne 0x453e06
push eax
push 1
push 1
push eax
push 0x4e2dd4
lea ecx, [ebp - 0x2120]
call fcn.00403fc0
test eax, eax
jne 0x453e06
push eax
push 1
push 1
push eax
push 0x4e2df4
lea ecx, [ebp - 0x2120]
call fcn.00403fc0
test eax, eax
je 0x453cae
lea eax, [ebp - 0x2120]
mov byte [ebp - 0x6f81], 2
push eax
lea ecx, [ebp - 0x2108]
call fcn.00402c20
jmp 0x453d0a
cmp dword [ebp - 0x2350], 0
je 0x453ee6
lea eax, [ebp - 0x6d04]
mov dword [ebp - 0x6d04], 0x400
push eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
push eax
push 0x4e2d54
push dword [ebp - 0x6cec]
call dword [0x4ad7e8]
push 0
push 1
push 1
push 0
push 0x4cd6ec
lea ecx, [ebp - 0x1f98]
call fcn.00403fc0
test eax, eax
jne 0x453ee6
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4e2e1c
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x23dc]
push 0x4e2e48
push dword [ebp - 0x6fc4]
call fcn.00402e00
push 0
push 0x20019
lea ecx, [ebp - 0x23dc]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x453ee6
lea eax, [ebp - 0x1f98]
push eax
push 0x4e2d54
lea ecx, [ebp - 0x1f74]
call fcn.00407900
lea ecx, [ebp - 0x1f98]
call fcn.00402d60
cmp eax, 0xa
jle 0x453f03
push 0
lea ecx, [ebp - 0x1f98]
call fcn.004032b0
lea ecx, [ebp - 0x1f98]
call fcn.00402ea0
push eax
call dword [0x4ad490]
test eax, eax
jne 0x4543fd
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push str.__0
lea ecx, [ebp - 0x2120]
call fcn.00402ea0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x2708]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402e00
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00402ea0
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
mov edx, 0x400
mov ecx, eax
call fcn.0040fa60
test al, al
jne 0x4543fd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2120]
call fcn.00402ea0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x26fc]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402e00
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00402ea0
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
mov edx, 0x400
mov ecx, eax
call fcn.0040fa60
test al, al
jne 0x4543fd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2120]
call fcn.00402ea0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x26f0]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402e00
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00402ea0
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
mov edx, 0x400
mov ecx, eax
call fcn.0040fa60
test al, al
jne 0x4543fd
lea ecx, [ebp - 0x2148]
call fcn.00402d60
cmp eax, 4
jle 0x454113
push 0
push 1
push 1
push 0
push 0x4e2eec
lea ecx, [ebp - 0x2148]
call fcn.00403fc0
cmp eax, 1
je 0x454113
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2120]
call fcn.00402ea0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x2148]
call fcn.00402ea0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x26f0]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402e00
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00402ea0
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
mov edx, 0x400
mov ecx, eax
call fcn.0040fa60
test al, al
jne 0x4543fd
mov eax, dword [ebp - 0x6f7c]
cmp edi, dword [eax + 0x30]
jae 0x454375
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2120]
call fcn.00402ea0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x226c]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
push edi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402e00
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00402ea0
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
mov edx, 0x400
mov ecx, eax
call fcn.0040fa60
test al, al
jne 0x4543fd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2120]
call fcn.00402ea0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x2160]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
push edi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402e00
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00402ea0
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
mov edx, 0x400
mov ecx, eax
call fcn.0040fa60
test al, al
jne 0x4543fd
lea ecx, [ebp - 0x2148]
call fcn.00402d60
cmp eax, 4
jle 0x454375
push 0
push 1
push 1
push 0
push 0x4e2eec
lea ecx, [ebp - 0x2148]
call fcn.00403fc0
cmp eax, 1
je 0x454375
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2120]
call fcn.00402ea0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x2148]
call fcn.00402ea0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x226c]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
push edi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402e00
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00402ea0
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
mov edx, 0x400
mov ecx, eax
call fcn.0040fa60
test al, al
jne 0x4543fd
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2120]
call fcn.00402ea0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x2148]
call fcn.00402ea0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x2160]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
push edi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402e00
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00402ea0
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
mov edx, 0x400
mov ecx, eax
call fcn.0040fa60
test al, al
jne 0x4543fd
lea ecx, [ebp - 0x22dc]
call fcn.00402d60
lea ecx, [ebp - 0x1f98]
cmp eax, 0xa
jle 0x4543f8
lea eax, [ebp - 0x22dc]
push eax
call fcn.00402c20
push 0
push 0
push 0x4ccd04
push 0x4cd600
lea ecx, [ebp - 0x1f98]
call fcn.004047c0
push 0
lea ecx, [ebp - 0x1f98]
call fcn.004032b0
push 0
push 1
push 0xffffffffffffffff
push 1
push 0x4cd6ec
lea ecx, [ebp - 0x1f98]
call fcn.00403fc0
cmp eax, 2
jle 0x4543e9
add eax, 0xfffffffe
lea ecx, [ebp - 0x1f98]
push eax
call fcn.00403f10
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00403110
jmp 0x4543fd
call fcn.00402cf0
lea ecx, [ebp - 0x1f98]
call fcn.00402ea0
mov ecx, eax
call fcn.0040b0f0
test al, al
je 0x45441e
lea ecx, [ebp - 0x1f98]
call fcn.00402cf0
lea eax, [ebp - 0x2068]
mov dword [ebp - 0x6fa4], 0
push eax
push 0x4d6718
lea ecx, [ebp - 0x1fe8]
call fcn.00407900
test al, al
je 0x45447b
push 0
lea ecx, [ebp - 0x2068]
call fcn.00402ea0
push eax
push 0x104
lea ecx, [ebp - 0x2068]
call fcn.004033e0
lea ecx, [ebp - 0x2068]
call fcn.00402ea0
push eax
call dword [0x4ad49c]
mov dword [ebp - 0x6fa4], eax
jmp 0x4544d1
cmp dword [ebp - 0x2350], 0
je 0x4544de
lea eax, [ebp - 0x6d64]
mov dword [ebp - 0x6d64], 0x400
push eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0x2068]
call fcn.004033e0
push eax
push 0x4e2f04
push dword [ebp - 0x6cec]
call dword [0x4ad7e8]
push dword [ebp - 0x6d64]
lea ecx, [ebp - 0x2068]
call fcn.00402cd0
xor ecx, ecx
mov word [eax], cx
cmp dword [ebp - 0x2350], 0
jne 0x454628
lea ecx, [ebp - 0x2068]
call fcn.00402d60
test eax, eax
jne 0x454628
push eax
lea ecx, [ebp - 0x22dc]
call fcn.00402ea0
push eax
push 0x800
lea ecx, [ebp - 0x2068]
call fcn.004033e0
push 0x800
lea ecx, [ebp - 0x2068]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x22dc]
call fcn.00402ea0
push eax
call dword [0x4ad3e8]
lea ecx, [ebp - 0x2068]
call fcn.00402d60
test eax, eax
je 0x454628
push 0
push 1
push 0xffffffffffffffff
push 0
push str..exe
lea ecx, [ebp - 0x2068]
call fcn.00403fc0
test eax, eax
je 0x45456f
add eax, 3
lea ecx, [ebp - 0x2068]
push eax
call fcn.00403e90
lea ecx, [ebp - 0x2068]
call fcn.00402ea0
mov edi, dword [0x4ad494]
push eax
call edi
test eax, eax
jne 0x454628
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x4cd6ec
lea ecx, [ebp - 0x2068]
call fcn.00403fc0
cmp eax, 2
jle 0x4545b6
add eax, 0xfffffffe
lea ecx, [ebp - 0x2068]
push eax
call fcn.00403f10
lea ecx, [ebp - 0x2068]
call fcn.00402ea0
push eax
call edi
test eax, eax
jne 0x454628
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x4cd600
lea ecx, [ebp - 0x2068]
call fcn.00403fc0
test eax, eax
je 0x4545ef
push eax
lea ecx, [ebp - 0x2068]
call fcn.00403f10
lea ecx, [ebp - 0x2068]
call fcn.00402ea0
push eax
call edi
test eax, eax
jne 0x454628
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x4cd604
lea ecx, [ebp - 0x2068]
call fcn.00403fc0
test eax, eax
je 0x454628
push eax
lea ecx, [ebp - 0x2068]
call fcn.00403f10
push 0x5c
lea ecx, [ebp - 0x1f98]
call fcn.00404be0
mov eax, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x2120]
push 0
mov eax, dword [eax + 8]
push dword [eax + 0xa0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
call fcn.00402ea0
push eax
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.004207f0
mov edi, eax
cmp edi, 0xffffffff
je 0x454962
push 1
lea ecx, [ebp - 0x2148]
call fcn.00402ea0
push eax
mov eax, dword [ebp - 0x6f7c]
push edi
mov ecx, dword [eax + 8]
push dword [ecx + 0xa0]
mov ecx, dword [eax + 4]
call fcn.00421a80
lea ecx, [ebp - 0x2068]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
je 0x4546e3
push 0
push 0x10
push dword [ebp - 0x6fa4]
lea ecx, [ebp - 0x2068]
call fcn.00402ea0
push eax
mov eax, dword [ebp - 0x6f7c]
push edi
mov eax, dword [eax + 8]
push dword [eax + 0xa0]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.004211c0
mov ecx, dword [ebp - 0x6fa8]
add ecx, dword [ebp - 0x6fb4]
push 2
call fcn.00402ea0
push eax
mov eax, dword [ebp - 0x6f7c]
push edi
mov eax, dword [eax + 8]
push dword [eax + 0xa0]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.00421a80
mov eax, dword [ebp - 0x6f7c]
push edi
push edi
mov eax, dword [eax + 8]
push dword [eax + 0xa0]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.00420fd0
lea ecx, [ebp - 0x2108]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f7c]
push eax
mov eax, dword [ebp - 0x6f7c]
push edi
mov eax, dword [eax + 8]
push dword [eax + 0xa0]
call fcn.0046da30
test eax, eax
jne 0x45477b
cmp byte [ebp - 0x6f81], 1
mov ecx, 2
movzx eax, byte [ebp - 0x6f81]
cmove eax, ecx
mov byte [ebp - 0x6f81], al
push edi
lea ecx, [ebp - 0x231c]
call fcn.00403a30
lea ecx, [ebp - 0x23d0]
call fcn.00402ea0
push eax
push 0x4dc80c
lea ecx, [ebp - 0x231c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00401f30
lea ecx, [ebp - 0x1f98]
call fcn.00402ea0
push eax
push 0x4d1a50
lea ecx, [ebp - 0x231c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00401f30
lea ecx, [ebp - 0x2108]
call fcn.00402d60
test eax, eax
je 0x45482f
lea ecx, [ebp - 0x2108]
call fcn.00402ea0
push eax
push 0x4dd424
lea ecx, [ebp - 0x231c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00401f30
push 0x4ce620
lea ecx, [ebp - 0x2108]
call fcn.00402ea0
push eax
push 0x4e2f1c
lea ecx, [ebp - 0x21e0]
call fcn.00401f30
lea ecx, [ebp - 0x22dc]
call fcn.00402d60
test eax, eax
je 0x454866
lea ecx, [ebp - 0x22dc]
call fcn.00402ea0
push eax
push 0x4dd400
lea ecx, [ebp - 0x231c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00401f30
mov ecx, dword [ebp - 0x6fa8]
add ecx, dword [ebp - 0x6fb4]
call fcn.00402ea0
push eax
push 0x4dc828
lea ecx, [ebp - 0x231c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00401f30
cmp dword [ebp - 0x2350], 0
je 0x4548bf
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x231c]
push 0x4dd434
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00401f30
mov eax, dword [ebp - 0x6f7c]
mov ecx, 0x4e2f5c
mov edi, dword [ebp - 0x6f7c]
push 0
push 0
inc dword [eax + 0x24]
xor eax, eax
cmp byte [ebp - 0x6f81], 1
sete al
add dword [edi + 0x28], eax
mov eax, 0x4e2f48
cmp byte [ebp - 0x6f81], 1
cmovne eax, ecx
mov ecx, dword [ebp - 0x6fa8]
add ecx, dword [ebp - 0x6fb4]
push eax
push 0x4e2624
call fcn.00402ea0
push eax
push 0x4e2f74
lea ecx, [ebp - 0x1f98]
call fcn.00402ea0
push eax
push 0x4e2f98
lea ecx, [ebp - 0x23d0]
call fcn.00402ea0
push eax
push 0x4e2fbc
lea ecx, [ebp - 0x2120]
call fcn.00402ea0
push eax
push 0x4e2fe4
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov edi, dword [ebp - 0x6f9c]
mov ecx, dword [ebp - 0x6f7c]
inc esi
call fcn.00472640
test al, al
je 0x453930
mov dword [ebp - 0x6fa4], esi
inc edi
mov dword [ebp - 0x6f9c], edi
cmp edi, dword [ebp - 0x6fac]
jb 0x453860
mov ecx, dword [ebp - 0x6f7c]
call fcn.00472640
test al, al
je 0x454a56
lea ecx, [ebp - 0x28dc]
call fcn.00402ce0
lea ecx, [ebp - 0x27a4]
call fcn.00402ce0
lea ecx, [ebp - 0x28e8]
call fcn.00402ce0
lea ecx, [ebp - 0x231c]
call fcn.00402ce0
lea ecx, [ebp - 0x2108]
call fcn.00402ce0
lea ecx, [ebp - 0x2148]
call fcn.00402ce0
lea ecx, [ebp - 0x22dc]
call fcn.00402ce0
lea ecx, [ebp - 0x23dc]
call fcn.00402ce0
lea ecx, [ebp - 0x2068]
call fcn.00402ce0
lea ecx, [ebp - 0x1f98]
call fcn.00402ce0
lea ecx, [ebp - 0x2120]
call fcn.00402ce0
lea ecx, [ebp - 0x23d0]
call fcn.00402ce0
lea ecx, [ebp - 0x1fe8]
call fcn.00407780
lea ecx, [ebp - 0x2230]
call fcn.00407780
lea ecx, [ebp - 0x6d54]
mov byte [ebp - 4], 0x2c
call fcn.00478840
jmp 0x455f07
mov eax, dword [ebp - 0x6f7c]
cmp dword [eax + 0x230], 0
je 0x454a84
mov ecx, dword [ebp - 0x6f7c]
add eax, 0x230
push 0
push eax
lea ecx, [ecx + 0x248]
call fcn.0042f370
mov eax, dword [ebp - 0x6f7c]
mov ecx, eax
call fcn.00472640
test al, al
jne 0x4549a8
push 0xc
lea ecx, [ebp - 0x2a0c]
call fcn.00401970
lea ecx, [ebp - 0x2a0c]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2714]
mov byte [ebp - 4], 0x3c
call fcn.00401970
lea ecx, [ebp - 0x2714]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x26e4]
mov byte [ebp - 4], 0x3d
call fcn.00401970
lea ecx, [ebp - 0x26e4]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x27e8]
mov byte [ebp - 4], 0x3e
call fcn.00401970
lea ecx, [ebp - 0x27e8]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2798]
mov byte [ebp - 4], 0x3f
call fcn.00401970
lea ecx, [ebp - 0x2798]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x278c]
mov byte [ebp - 4], 0x40
call fcn.00401970
lea ecx, [ebp - 0x278c]
call fcn.00402b40
mov eax, dword [ebp - 0x6f7c]
mov edi, 1
mov byte [ebp - 4], 0x41
lea ecx, [eax + 0x334]
mov dword [ebp - 0x6f8c], edi
mov dword [ebp - 0x6fcc], ecx
cmp dword [ecx], edi
jbe 0x45587a
mov esi, dword [ebp - 0x6fcc]
lea ecx, [eax + 0x33c]
mov dword [ebp - 0x6fb4], ecx
mov ecx, eax
call fcn.00472640
test al, al
jne 0x45586e
lea eax, [edi + edi*4]
xor edx, edx
add eax, eax
div dword [esi]
add eax, 0x10
movd xmm0, eax
shr eax, 0x1f
cvtdq2pd xmm0, xmm0
addsd xmm0, qword [eax*8 + 0x4ee1f0]
cvttsd2si eax, xmm0
push eax
mov eax, dword [ebp - 0x6f7c]
mov eax, dword [eax + 8]
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.00421b70
mov ecx, dword [ebp - 0x6f7c]
push edi
call fcn.0046ed40
test al, al
je 0x455859
mov ecx, dword [ebp - 0x6f7c]
push edi
lea ecx, [ecx + 0x310]
call fcn.00478f10
push eax
lea ecx, [ebp - 0x23d0]
call fcn.00402c20
push 0
push 0x20019
lea ecx, [ebp - 0x23d0]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1fe8]
call fcn.00407750
test al, al
je 0x455859
lea eax, [ebp - 0x2120]
push eax
push 0x4d145c
lea ecx, [ebp - 0x1fe8]
call fcn.00407900
test al, al
je 0x455859
lea eax, [ebp - 0x1f98]
push eax
push 0x4e2d54
lea ecx, [ebp - 0x1fe8]
call fcn.00407900
lea eax, [ebp - 0x22dc]
push eax
push 0x4d69dc
lea ecx, [ebp - 0x1fe8]
call fcn.00407900
test al, al
jne 0x454c7c
lea ecx, [ebp - 0x1f98]
call fcn.00402d60
test eax, eax
je 0x455859
lea eax, [ebp - 0x2148]
push eax
push 0x4e2d74
lea ecx, [ebp - 0x1fe8]
call fcn.00407900
test al, al
je 0x454ca6
lea ecx, [ebp - 0x2148]
call fcn.00402d60
test eax, eax
jne 0x454cb6
push 0x4dd44c
lea ecx, [ebp - 0x2148]
call fcn.00402c10
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d1db0
lea ecx, [ebp - 0x2120]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2798]
call fcn.00404260
push 0
push 1
push 1
push 0
push str.msiexec
lea ecx, [ebp - 0x22dc]
call fcn.00403fc0
test eax, eax
setne byte [ebp - 0x6f78]
test eax, eax
jne 0x454d44
lea eax, [ebp - 0x6d04]
push eax
push 0x4e3010
lea ecx, [ebp - 0x1fe8]
call fcn.00407a40
test al, al
je 0x454d44
mov eax, dword [ebp - 0x6f78]
mov ecx, 1
cmp dword [ebp - 0x6d04], 1
movzx eax, al
cmove eax, ecx
mov dword [ebp - 0x6f78], eax
lea eax, [ebp - 0x2120]
push eax
lea ecx, [ebp - 0x2108]
call fcn.00402c20
lea ecx, [ebp - 0x1f98]
call fcn.00402ea0
mov ecx, eax
call fcn.0040fba0
test al, al
je 0x454d97
push 0
lea ecx, [ebp - 0x1f98]
call fcn.004032b0
push 0
push 0
push 0x4ccd04
push 0x4cd600
lea ecx, [ebp - 0x1f98]
call fcn.004047c0
jmp 0x4553c3
cmp byte [ebp - 0x6f78], 0
je 0x454e59
lea eax, [ebp - 0x6d04]
mov dword [ebp - 0x6d04], 0x400
push eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
push eax
push 0x4e2d54
push dword [ebp - 0x6cec]
call dword [0x4ad7e8]
push 0
push 1
push 1
push 0
push 0x4cd6ec
lea ecx, [ebp - 0x1f98]
call fcn.00403fc0
test eax, eax
jne 0x454e59
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4e2e1c
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x23dc]
push 0x4e2e48
push dword [ebp - 0x6fc4]
call fcn.00402e00
push 0
push 0x20019
lea ecx, [ebp - 0x23dc]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x454e59
lea eax, [ebp - 0x1f98]
push eax
push 0x4e2d54
lea ecx, [ebp - 0x1f74]
call fcn.00407900
lea ecx, [ebp - 0x1f98]
call fcn.00402d60
cmp eax, 0xa
jle 0x454e76
push 0
lea ecx, [ebp - 0x1f98]
call fcn.004032b0
push 0
push 1
push 1
push 0
push 0x4cd6ec
lea ecx, [ebp - 0x1f98]
call fcn.00403fc0
test eax, eax
jne 0x4553c3
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push str.__0
lea ecx, [ebp - 0x2108]
call fcn.00402ea0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x2708]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402e00
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00402ea0
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
mov edx, 0x400
mov ecx, eax
call fcn.0040fa60
test al, al
jne 0x4553c3
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2108]
call fcn.00402ea0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x26fc]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402e00
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00402ea0
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
mov edx, 0x400
mov ecx, eax
call fcn.0040fa60
test al, al
jne 0x4553c3
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2108]
call fcn.00402ea0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x26f0]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402e00
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00402ea0
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
mov edx, 0x400
mov ecx, eax
call fcn.0040fa60
test al, al
jne 0x4553c3
lea ecx, [ebp - 0x2148]
call fcn.00402d60
cmp eax, 4
jle 0x45508c
push 0
push 1
push 1
push 0
push 0x4e2eec
lea ecx, [ebp - 0x2148]
call fcn.00403fc0
cmp eax, 1
je 0x45508c
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2108]
call fcn.00402ea0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x2148]
call fcn.00402ea0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x26f0]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402e00
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00402ea0
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
mov edx, 0x400
mov ecx, eax
call fcn.0040fa60
test al, al
jne 0x4553c3
push 1
push 0x4cccf4
push dword [ebp - 0x6d4c]
lea ecx, [ebp - 0x23d0]
push 1
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x27e8]
call fcn.00402db0
mov ecx, eax
call fcn.00405240
test eax, eax
je 0x45532e
lea ecx, [ebp - 0x27e8]
call fcn.00402ea0
lea edx, [ebp - 0x2714]
mov ecx, eax
call fcn.004266e0
test al, al
je 0x45532e
lea ecx, [ebp - 0x27e8]
call fcn.00402ea0
lea edx, [ebp - 0x26e4]
mov ecx, eax
call fcn.00425fe0
test al, al
je 0x45532e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2108]
call fcn.00402ea0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x226c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x26e4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402e00
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00402ea0
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
mov edx, 0x400
mov ecx, eax
call fcn.0040fa60
test al, al
jne 0x45533e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2108]
call fcn.00402ea0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x2160]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x26e4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402e00
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00402ea0
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
mov edx, 0x400
mov ecx, eax
call fcn.0040fa60
test al, al
jne 0x45533e
lea ecx, [ebp - 0x2148]
call fcn.00402d60
cmp eax, 4
jle 0x45533e
push 0
push 1
push 1
push 0
push 0x4e2eec
lea ecx, [ebp - 0x2148]
call fcn.00403fc0
cmp eax, 1
je 0x45533e
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2108]
call fcn.00402ea0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x2148]
call fcn.00402ea0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x226c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x26e4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402e00
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00402ea0
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
mov edx, 0x400
mov ecx, eax
call fcn.0040fa60
test al, al
jne 0x45533e
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2108]
call fcn.00402ea0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x2148]
call fcn.00402ea0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x2160]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x26e4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402e00
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00402ea0
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
mov edx, 0x400
mov ecx, eax
call fcn.0040fa60
jmp 0x45533e
push 0x4dd460
lea ecx, [ebp - 0x2714]
call fcn.00402c10
lea ecx, [ebp - 0x22dc]
call fcn.00402d60
cmp eax, 0xa
jle 0x4553c3
lea eax, [ebp - 0x22dc]
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402c20
push 0
push 0
push 0x4ccd04
push 0x4cd600
lea ecx, [ebp - 0x1f98]
call fcn.004047c0
push 0
lea ecx, [ebp - 0x1f98]
call fcn.004032b0
push 0
push 1
push 0xffffffffffffffff
push 1
push 0x4cd6ec
lea ecx, [ebp - 0x1f98]
call fcn.00403fc0
cmp eax, 2
jle 0x4553b6
add eax, 0xfffffffe
lea ecx, [ebp - 0x1f98]
push eax
call fcn.00403f10
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00403110
lea ecx, [ebp - 0x1f98]
call fcn.00402ea0
mov ecx, eax
call fcn.0040b0f0
test al, al
je 0x4553e4
lea ecx, [ebp - 0x1f98]
call fcn.00402cf0
lea eax, [ebp - 0x2068]
xor edi, edi
push eax
push 0x4d6718
lea ecx, [ebp - 0x1fe8]
call fcn.00407900
test al, al
je 0x4558d0
push edi
lea ecx, [ebp - 0x2068]
call fcn.00402ea0
push eax
push 0x104
lea ecx, [ebp - 0x2068]
call fcn.004033e0
lea ecx, [ebp - 0x2068]
call fcn.00402ea0
push eax
call dword [0x4ad49c]
cmp byte [ebp - 0x6f78], 0
mov edi, eax
jne 0x455593
lea ecx, [ebp - 0x2068]
call fcn.00402d60
test eax, eax
jne 0x455593
push eax
lea ecx, [ebp - 0x22dc]
call fcn.00402ea0
push eax
push 0x800
lea ecx, [ebp - 0x2068]
call fcn.004033e0
push 0x800
lea ecx, [ebp - 0x2068]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x22dc]
call fcn.00402ea0
push eax
call dword [0x4ad3e8]
lea ecx, [ebp - 0x2068]
call fcn.00402d60
test eax, eax
je 0x455593
push 0
push 1
push 0xffffffffffffffff
push 0
push str..exe
lea ecx, [ebp - 0x2068]
call fcn.00403fc0
test eax, eax
je 0x4554d4
add eax, 3
lea ecx, [ebp - 0x2068]
push eax
call fcn.00403e90
lea ecx, [ebp - 0x2068]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
jne 0x455593
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x4cd6ec
lea ecx, [ebp - 0x2068]
call fcn.00403fc0
cmp eax, 2
jle 0x455519
add eax, 0xfffffffe
lea ecx, [ebp - 0x2068]
push eax
call fcn.00403f10
lea ecx, [ebp - 0x2068]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
jne 0x455593
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x4cd600
lea ecx, [ebp - 0x2068]
call fcn.00403fc0
test eax, eax
je 0x455556
push eax
lea ecx, [ebp - 0x2068]
call fcn.00403f10
lea ecx, [ebp - 0x2068]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
jne 0x455593
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x4cd604
lea ecx, [ebp - 0x2068]
call fcn.00403fc0
test eax, eax
je 0x455593
push eax
lea ecx, [ebp - 0x2068]
call fcn.00403f10
push 0x5c
lea ecx, [ebp - 0x1f98]
call fcn.00404be0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2108]
mov byte [ebp - 0x6f9c], 1
call fcn.00402ea0
mov ecx, dword [ebp - 0x6fb4]
push eax
push 0x4e2d88
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402e00
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
lea eax, [ebp - 0x6d04]
push eax
push 0x4e3034
lea ecx, [ebp - 0x1f74]
call fcn.00407a40
test al, al
je 0x455638
mov eax, dword [ebp - 0x6f9c]
mov ecx, 2
cmp dword [ebp - 0x6d04], 0
movzx eax, al
cmove eax, ecx
mov dword [ebp - 0x6f9c], eax
push edi
lea ecx, [ebp - 0x2068]
call fcn.00402ea0
push eax
xor eax, eax
lea ecx, [ebp - 0x2714]
cmp byte [ebp - 0x6f9c], 1
push 0
sete al
push eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2148]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2120]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f7c]
push eax
mov eax, dword [ebp - 0x6f7c]
push 0xffffffffffffffff
push 0xffffffffffffffff
mov eax, dword [eax + 8]
push dword [eax + 0xa0]
call fcn.00445530
push eax
lea ecx, [ebp - 0x231c]
call fcn.00403a30
lea ecx, [ebp - 0x23d0]
call fcn.00402ea0
push eax
push 0x4dc80c
lea ecx, [ebp - 0x231c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00401f30
lea ecx, [ebp - 0x1f98]
call fcn.00402ea0
push eax
push 0x4d1a50
lea ecx, [ebp - 0x231c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00401f30
lea ecx, [ebp - 0x2108]
call fcn.00402d60
test eax, eax
je 0x45574a
lea ecx, [ebp - 0x2108]
call fcn.00402ea0
push eax
push 0x4dd424
lea ecx, [ebp - 0x231c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00401f30
push 0x4ce620
lea ecx, [ebp - 0x2108]
call fcn.00402ea0
push eax
push 0x4e2f1c
lea ecx, [ebp - 0x21e0]
call fcn.00401f30
lea ecx, [ebp - 0x22dc]
call fcn.00402d60
test eax, eax
je 0x455781
lea ecx, [ebp - 0x22dc]
call fcn.00402ea0
push eax
push 0x4dd400
lea ecx, [ebp - 0x231c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00401f30
lea ecx, [ebp - 0x2714]
call fcn.00402ea0
push eax
push 0x4dc828
lea ecx, [ebp - 0x231c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00401f30
cmp byte [ebp - 0x6f78], 0
je 0x4557d4
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x231c]
push 0x4dd434
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00401f30
cmp byte [ebp - 0x6f9c], 1
mov ecx, 0x4e2f5c
push 0
push 0
mov eax, 0x4e2f48
cmovne eax, ecx
lea ecx, [ebp - 0x2714]
push eax
push 0x4e2624
call fcn.00402ea0
push eax
push 0x4e2f74
lea ecx, [ebp - 0x1f98]
call fcn.00402ea0
push eax
push 0x4e2f98
lea ecx, [ebp - 0x23d0]
call fcn.00402ea0
push eax
push 0x4e2fbc
lea ecx, [ebp - 0x2120]
call fcn.00402ea0
push eax
push 0x4e2fe4
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov edi, dword [ebp - 0x6f8c]
mov eax, dword [ebp - 0x6f7c]
inc edi
mov dword [ebp - 0x6f8c], edi
cmp edi, dword [esi]
jb 0x454b72
mov eax, dword [ebp - 0x6f7c]
mov esi, dword [ebp - 0x6fa4]
mov ecx, eax
call fcn.00472640
test al, al
je 0x45592f
lea ecx, [ebp - 0x278c]
call fcn.00402ce0
lea ecx, [ebp - 0x2798]
call fcn.00402ce0
lea ecx, [ebp - 0x27e8]
call fcn.00402ce0
lea ecx, [ebp - 0x26e4]
call fcn.00402ce0
lea ecx, [ebp - 0x2714]
call fcn.00402ce0
lea ecx, [ebp - 0x2a0c]
call fcn.00402ce0
jmp 0x4549a8
cmp byte [ebp - 0x6f78], 0
je 0x455443
lea eax, [ebp - 0x6d68]
mov dword [ebp - 0x6d68], 0x400
push eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0x2068]
call fcn.004033e0
push eax
push 0x4e2f04
push dword [ebp - 0x6cec]
call dword [0x4ad7e8]
push dword [ebp - 0x6d68]
lea ecx, [ebp - 0x2068]
call fcn.00402cd0
xor ecx, ecx
mov word [eax], cx
jmp 0x455593
lea ecx, [ebp - 0x2798]
call fcn.00402d60
cmp eax, 6
jle 0x4559ec
push 0x2000
lea eax, [ebp - 0x6dbc]
mov dword [ebp - 0x6dbc], 0x1000
push eax
push 0
push 0
push 0x1000
lea ecx, [ebp - 0x278c]
call fcn.004033e0
push eax
lea ecx, [ebp - 0x2798]
call fcn.00402ea0
push eax
call dword [0x4ad488]
test eax, eax
je 0x455996
lea eax, [ebp - 0x2798]
push eax
lea ecx, [ebp - 0x278c]
call fcn.00402c20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3050
lea ecx, [ebp - 0x278c]
call fcn.00404550
push 0
push 0
push 0x4d10fc
push 0x4cea88
push 6
lea ecx, [ebp - 0x278c]
call fcn.00402ea0
xor edx, edx
mov ecx, eax
call fcn.0042bf20
push eax
lea ecx, [ebp - 0x2574]
call fcn.0042cff0
mov eax, dword [ebp - 0x6f7c]
push 0x1e
mov eax, dword [eax + 8]
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.00421b70
mov eax, dword [ebp - 0x6f7c]
push 0
push 0x4e30d0
mov eax, dword [eax + 8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.0041f410
push 0xc
lea ecx, [ebp - 0x23b8]
call fcn.00401970
lea ecx, [ebp - 0x23b8]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2500]
mov byte [ebp - 4], 0x42
call fcn.00401970
lea ecx, [ebp - 0x2500]
call fcn.00402b40
mov ecx, dword [ebp - 0x6f7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3104
lea ecx, [ecx + 0x33c]
mov byte [ebp - 4], 0x43
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402e00
push 4
lea ecx, [ebp - 0x2364]
call fcn.00405970
lea ecx, [ebp - 0x2364]
call fcn.00406240
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0x44
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x455ed5
lea eax, [ebp - 0x6cec]
mov dword [ebp - 0x6fb4], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.00407b30
test al, al
je 0x455ed5
mov eax, dword [ebp - 0x6f7c]
lea ecx, [eax + 0x10c]
mov dword [ebp - 0x6f8c], ecx
jmp 0x455b19
mov eax, dword [ebp - 0x6f7c]
mov ecx, eax
call fcn.00472640
test al, al
jne 0x455ed5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4ccd8c
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x2500]
push 0x4ccd8c
call fcn.00402e00
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2500]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2984]
call fcn.00403fc0
test eax, eax
jne 0x455ead
mov ecx, dword [ebp - 0x6f7c]
push eax
push str.Programs
push dword [ebp - 0x6cec]
call fcn.0046e160
test al, al
jne 0x455ead
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x2500]
xor edi, edi
call fcn.00402c10
push 0x4e3114
lea ecx, [ebp - 0x2500]
call fcn.00402c80
test al, al
je 0x455bdd
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push str.__0
lea ecx, [ebp - 0x2500]
call fcn.00404260
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2500]
call fcn.00402ea0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x2708]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x23b8]
call fcn.00402e00
lea ecx, [ebp - 0x23b8]
call fcn.0040f960
test al, al
je 0x455c54
push esi
lea eax, [ebp - 0x21e0]
push eax
lea eax, [ebp - 0x1fc8]
push eax
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x23b8]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f7c]
push eax
call fcn.0046d7a0
mov edi, eax
cmp dword [ebp - 0x6fdc], 0
je 0x455cd8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2500]
call fcn.00402ea0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x26fc]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x23b8]
call fcn.00402e00
lea ecx, [ebp - 0x23b8]
call fcn.0040f960
test al, al
je 0x455cd8
push esi
lea eax, [ebp - 0x21e0]
push eax
lea eax, [ebp - 0x1fc8]
push eax
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x23b8]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f7c]
push eax
call fcn.0046d7a0
add edi, eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2500]
call fcn.00402ea0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x26f0]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x23b8]
call fcn.00402e00
lea ecx, [ebp - 0x23b8]
call fcn.0040f960
test al, al
je 0x455d4f
push esi
lea eax, [ebp - 0x21e0]
push eax
lea eax, [ebp - 0x1fc8]
push eax
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x23b8]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f7c]
push eax
call fcn.0046d7a0
add edi, eax
mov eax, dword [ebp - 0x6f7c]
xor esi, esi
mov dword [ebp - 0x6fa4], esi
cmp dword [eax + 0x30], esi
jbe 0x455e8e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2500]
call fcn.00402ea0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x226c]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push esi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x23b8]
call fcn.00402e00
lea ecx, [ebp - 0x23b8]
call fcn.0040f960
test al, al
je 0x455def
push esi
lea eax, [ebp - 0x21e0]
push eax
lea eax, [ebp - 0x1fc8]
push eax
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x23b8]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f7c]
push eax
call fcn.0046d7a0
add edi, eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2500]
call fcn.00402ea0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x2160]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push esi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x23b8]
call fcn.00402e00
lea ecx, [ebp - 0x23b8]
call fcn.0040f960
test al, al
je 0x455e78
push esi
lea eax, [ebp - 0x21e0]
push eax
lea eax, [ebp - 0x1fc8]
push eax
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x23b8]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f7c]
push eax
call fcn.0046d7a0
add edi, eax
mov eax, dword [ebp - 0x6f7c]
inc esi
cmp esi, dword [eax + 0x30]
jb 0x455d66
mov dword [ebp - 0x6fa4], esi
test edi, edi
jle 0x455ead
push 0x4ce620
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x21e0]
push 0x4e2f1c
call fcn.00401f30
mov eax, dword [ebp - 0x6fb4]
lea ecx, [ebp - 0x6cec]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6fb4], eax
call fcn.00407b30
test al, al
jne 0x455b13
lea ecx, [ebp - 0x2364]
call fcn.00407780
lea ecx, [ebp - 0x2500]
call fcn.00402ce0
lea ecx, [ebp - 0x23b8]
call fcn.00402ce0
jmp 0x455889
mov eax, dword [ebp - 0x2364]
mov dword [ebp - 0x6fa4], eax
push 8
lea ecx, [ebp - 0x6e04]
call fcn.00417f90
mov edi, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x6e04]
mov eax, dword [edi + 0x30]
add eax, 2
push eax
call fcn.004788e0
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x213c]
mov esi, dword [ebp - 0x6e04]
push 0xc
mov dword [ebp - 0x6fa0], esi
call fcn.00401970
lea ecx, [ebp - 0x213c]
call fcn.00402b40
mov ecx, edi
mov byte [ebp - 4], 0x46
call fcn.00472640
test al, al
mov eax, edi
jne 0x4586ce
test dword [eax + 0x34], 0x400
jne 0x4586ce
push 0
push 0x4e3128
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x4e3158
push dword [eax + 0x38]
call fcn.0041f410
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x23
push dword [eax + 0x34]
call fcn.00421b70
mov eax, edi
xor esi, esi
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x45601a
mov edi, dword [ebp - 0x6fa0]
add eax, 0x104
mov dword [ebp - 0x6fcc], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3188
push esi
mov ecx, eax
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
push str.HKU_
mov ecx, edi
call fcn.00402e00
mov eax, dword [ebp - 0x6f7c]
inc esi
add edi, 0xc
mov ecx, dword [eax + 0x30]
mov eax, dword [ebp - 0x6fcc]
cmp esi, ecx
jb 0x455fd0
mov esi, dword [ebp - 0x6fa0]
lea eax, [ecx + ecx*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e31e8
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402e00
cmp dword [ebp - 0x6fdc], 0
mov edi, dword [ebp - 0x6f7c]
je 0x456087
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e31e8
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402e00
push 0xc
lea ecx, [ebp - 0x2084]
call fcn.00401970
lea ecx, [ebp - 0x2084]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2418]
mov byte [ebp - 4], 0x47
call fcn.00401970
lea ecx, [ebp - 0x2418]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2824]
mov byte [ebp - 4], 0x48
call fcn.00401970
lea ecx, [ebp - 0x2824]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x219c]
mov byte [ebp - 4], 0x49
call fcn.00401970
lea ecx, [ebp - 0x219c]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x234c]
mov byte [ebp - 4], 0x4a
call fcn.00401970
lea ecx, [ebp - 0x234c]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x258c]
mov byte [ebp - 4], 0x4b
call fcn.00401970
lea ecx, [ebp - 0x258c]
call fcn.00402b40
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3248
push 0x4cccfc
lea ecx, [edi + 0x140]
mov byte [ebp - 4], 0x4c
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2780]
call fcn.00402e00
push 1
lea ecx, [ebp - 0x2780]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00401bd0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa4]
call fcn.00420b90
push 0
push 0x4e3260
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x456548
mov eax, dword [ebp - 0x6f7c]
mov esi, dword [ebp - 0x6fa8]
mov dword [ebp - 0x6f78], esi
lea ecx, [eax + 0x10c]
mov dword [ebp - 0x6fcc], ecx
mov ecx, dword [ebp - 0x6fa0]
sub ecx, esi
mov dword [ebp - 0x6f80], ecx
jmp 0x4561f6
mov eax, dword [ebp - 0x6f7c]
mov ecx, eax
call fcn.00472640
test al, al
jne 0x456542
mov eax, dword [ebp - 0x6f7c]
mov edi, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
cmp edi, dword [eax + 0x30]
jae 0x456246
lea ecx, [ebp - 0x2720]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6fcc]
push eax
push edi
call fcn.00478820
mov ecx, eax
jmp 0x456251
push str._temp
lea ecx, [ebp - 0x25b0]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2418]
call fcn.00402e00
mov eax, dword [ebp - 0x6f80]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6fb4], eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x45653a
lea eax, [ebp - 0x6cec]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6fa4], esi
call fcn.00407bb0
mov edi, dword [ebp - 0x6f7c]
test al, al
je 0x456510
nop dword [eax + eax]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45650a
mov eax, dword [ebp - 0x6cec]
cmp word [eax], 0
je 0x4564ee
push 0
push 0x4da744
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x4564ee
lea eax, [ebp - 0x2084]
push eax
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f74]
call fcn.00407900
test al, al
je 0x4564ee
push 3
lea edx, [edi + 0x1a8]
mov dword [ebp - 0x6f9c], 0
lea ecx, [ebp - 0x2084]
call fcn.00409bc0
test al, al
je 0x4563c6
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2418]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2084]
call fcn.00403fc0
mov ecx, dword [ebp - 0x6fb4]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
mov dword [ebp - 0x6f9c], eax
push 0x4d0b08
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x213c]
call fcn.00402e00
push 0
lea ecx, [ebp - 0x213c]
call fcn.00402ea0
push eax
lea eax, [ebp - 0x2084]
mov ecx, edi
push eax
call fcn.0046e890
test al, al
mov ecx, 1
mov eax, dword [ebp - 0x6f9c]
cmovne eax, ecx
mov dword [ebp - 0x6f9c], eax
push 0
lea ecx, [ebp - 0x2084]
call fcn.00402ea0
push eax
push 0
push dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x2084]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402ea0
push eax
push dword [ebp - 0x6cec]
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xb
push dword [eax + 0xa4]
call fcn.00445530
mov dword [ebp - 0x6fa4], eax
cmp eax, 0xffffffff
je 0x4564ee
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2084]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6fb4]
push eax
call fcn.00402ea0
push eax
push 0xb
push dword [ebp - 0x6fa4]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
lea eax, [ebp - 0x2084]
push eax
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f74]
call fcn.00407900
cmp dword [ebp - 0x6f9c], 0
mov ecx, 0x4e260c
push 0
push 0
push 0
push 0x4ccce0
mov eax, 0x4d1a98
cmove eax, ecx
lea ecx, [ebp - 0x2084]
push eax
push 0x4e2624
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x4e32a4
call fcn.00402ea0
push eax
push 0x4e2684
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f80]
push 0x4e32c0
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea eax, [ebp - 0x6cec]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.00407bb0
test al, al
jne 0x4562c0
mov dword [ebp - 0x6fa4], esi
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x4561f0
jmp 0x456548
mov edi, dword [ebp - 0x6f7c]
jmp 0x456516
mov edi, dword [ebp - 0x6f7c]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x458682
mov eax, dword [ebp - 0x6f7c]
xor esi, esi
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x4565c3
mov edi, dword [ebp - 0x6fa0]
add eax, 0x10c
mov dword [ebp - 0x6f80], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2900]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f80]
push eax
push esi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.00402e00
mov eax, dword [ebp - 0x6f7c]
inc esi
add edi, 0xc
mov ecx, dword [eax + 0x30]
cmp esi, ecx
jb 0x456577
lea eax, [ebp - 0x2948]
push eax
lea eax, [ecx + ecx*2]
mov ecx, dword [ebp - 0x6fa0]
lea ecx, [ecx + eax*4]
call fcn.00402c20
push 0
push 0x4e32d8
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
push 0x4c
lea ecx, [ebp - 0x2ba8]
call fcn.004100c0
lea ecx, [ebp - 0x2ba8]
call fcn.004098a0
mov eax, dword [ebp - 0x6f7c]
xor edi, edi
mov edx, dword [ebp - 0x6fa8]
mov esi, edx
mov byte [ebp - 4], 0x4d
mov dword [ebp - 0x6fb4], edi
lea ecx, [eax + 0x10c]
mov dword [ebp - 0x6f78], edx
mov dword [ebp - 0x6fcc], ecx
mov ecx, dword [ebp - 0x6fa0]
sub ecx, edx
mov dword [ebp - 0x6f80], ecx
nop
mov ecx, eax
call fcn.00472640
test al, al
jne 0x456ac0
mov eax, dword [ebp - 0x6f80]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
add eax, esi
push 0
push 0x4d21f8
mov ecx, eax
mov dword [ebp - 0x6f8c], eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2084]
call fcn.00402e00
push 0x260
lea ecx, [ebp - 0x37b0]
call fcn.00409ba0
push 3
lea ecx, [ebp - 0x2084]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x37b0]
call fcn.00401130
mov eax, dword [ebp - 0x6f7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov byte [ebp - 4], 0x4e
push 0
push 0
cmp edi, dword [eax + 0x30]
jae 0x4566f1
lea ecx, [ebp - 0x2720]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6fcc]
push eax
push edi
call fcn.00478820
mov ecx, eax
jmp 0x4566fc
push str._temp
lea ecx, [ebp - 0x25b0]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2418]
call fcn.00402e00
lea ecx, [ebp - 0x37b0]
call fcn.00401270
test al, al
je 0x456a90
mov edi, dword [ebp - 0x6f7c]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x456a8a
push 1
lea ecx, [ebp - 0x37b0]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x219c]
call fcn.00402c10
push 0x4d4518
lea ecx, [ebp - 0x219c]
call fcn.00402c50
test al, al
jne 0x456a77
push 0
push 0x4da77c
lea ecx, [ebp - 0x219c]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x456a77
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x37b0]
call fcn.004012d0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4cccfc
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x258c]
call fcn.00402e00
lea eax, [ebp - 0x258c]
push eax
lea ecx, [ebp - 0x234c]
call fcn.00402c20
push 0
push 0
lea ecx, [ebp - 0x37b0]
call fcn.004012e0
mov edx, 0x4e25f0
mov ecx, eax
call fcn.00405a60
test eax, eax
jne 0x4568bf
push eax
lea ecx, [ebp - 0x258c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2ba8]
call fcn.004098f0
test al, al
je 0x4568bf
push 0
lea ecx, [ebp - 0x2ba8]
call fcn.00409990
push eax
lea ecx, [ebp - 0x234c]
call fcn.00402c10
lea ecx, [ebp - 0x2ba8]
call fcn.004099e0
mov ecx, eax
call fcn.00405980
test eax, eax
je 0x456878
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2ba8]
call fcn.004099e0
push eax
push 0x4cd604
lea ecx, [ebp - 0x234c]
call fcn.00404260
push 3
push 1
lea ecx, [ebp - 0x234c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2084]
call fcn.00402db0
lea edx, [edi + 0x1a8]
mov ecx, eax
call fcn.00409bc0
test al, al
jne 0x4568d1
push 0
lea ecx, [ebp - 0x2ba8]
call fcn.00409990
push eax
lea ecx, [ebp - 0x2084]
call fcn.00402c10
jmp 0x4568d1
lea eax, [ebp - 0x258c]
push eax
lea ecx, [ebp - 0x2084]
call fcn.00402c20
push 0
push 0
push 0x4ccd04
push 0x4cd600
lea ecx, [ebp - 0x2084]
call fcn.004047c0
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2418]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2084]
call fcn.00403fc0
push 0
lea ecx, [ebp - 0x258c]
mov esi, eax
call fcn.00402ea0
push eax
lea eax, [ebp - 0x2084]
mov ecx, edi
push eax
call fcn.0046e890
test al, al
lea ecx, [ebp - 0x2084]
mov eax, 1
push 0
cmovne esi, eax
call fcn.00402ea0
push eax
push 0
push esi
lea ecx, [ebp - 0x2084]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x219c]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xc
push dword [eax + 0xa4]
call fcn.00445530
mov dword [ebp - 0x6f9c], eax
cmp eax, 0xffffffff
je 0x456a71
push 0
push 0
push 0
test esi, esi
mov eax, 0x4e260c
push 0x4ccce0
mov ecx, 0x4d1a98
cmove ecx, eax
push ecx
push 0x4e2624
lea ecx, [ebp - 0x2084]
call fcn.00402ea0
mov esi, dword [ebp - 0x6f78]
mov ecx, esi
push eax
push 0x4e3310
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x219c]
call fcn.00402ea0
push eax
push 0x4e32c0
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x37b0]
call fcn.004012d0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4cccfc
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2084]
call fcn.00402e00
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2084]
call fcn.00402ea0
push eax
push 0
push 0xc
push dword [ebp - 0x6f9c]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
jmp 0x456a77
mov esi, dword [ebp - 0x6f78]
lea ecx, [ebp - 0x37b0]
call fcn.00401230
test al, al
jne 0x456726
mov edi, dword [ebp - 0x6fb4]
lea ecx, [ebp - 0x37b0]
mov byte [ebp - 4], 0x4d
call fcn.00401180
mov eax, dword [ebp - 0x6f7c]
inc edi
add esi, 0xc
mov dword [ebp - 0x6fb4], edi
mov dword [ebp - 0x6f78], esi
cmp edi, dword [eax + 0x30]
jbe 0x456640
jmp 0x456ac6
mov eax, dword [ebp - 0x6f7c]
mov ecx, eax
call fcn.00472640
test al, al
jne 0x458677
push 0
push 0x4e3328
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
push 0xc
lea ecx, [ebp - 0x2490]
call fcn.00401970
lea ecx, [ebp - 0x2490]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x21a8]
mov byte [ebp - 4], 0x4f
call fcn.00401970
lea ecx, [ebp - 0x21a8]
call fcn.00402b40
push 4
lea ecx, [ebp - 0x6d10]
mov byte [ebp - 4], 0x50
call fcn.00405970
lea ecx, [ebp - 0x6d10]
call fcn.00406240
push 4
lea ecx, [ebp - 0x6d0c]
mov byte [ebp - 4], 0x51
call fcn.00405970
lea ecx, [ebp - 0x6d0c]
call fcn.00406240
lea eax, [ebp - 0x6d0c]
mov byte [ebp - 4], 0x52
mov esi, dword [0x4ad7f8]
push eax
push 0x4c73a4
push 1
push 0
push 0x4c73b4
call esi
test eax, eax
js 0x4577d3
lea ecx, [ebp - 0x70a0]
call fcn.004016e0
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x70d0]
movups xmmword [ebp - 0x6fd8], xmm0
call fcn.004016e0
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x70c0]
movups xmmword [ebp - 0x6f98], xmm0
call fcn.004016e0
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x70e0]
movups xmmword [ebp - 0x6fc0], xmm0
call fcn.004016e0
mov edi, eax
mov byte [ebp - 4], 0x56
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x6fd8]
mov ecx, dword [ebp - 0x6d0c]
mov edx, esp
sub esp, 0x10
mov eax, esp
sub esp, 0x10
mov esi, dword [ecx]
movups xmmword [edx], xmm0
movups xmm0, xmmword [ebp - 0x6f98]
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x6fc0]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [edi]
push ecx
movups xmmword [eax], xmm0
mov eax, dword [esi + 0x28]
call eax
shr eax, 0x1f
lea ecx, [ebp - 0x70e0]
mov dword [ebp - 0x6f80], eax
call fcn.00401770
lea ecx, [ebp - 0x70c0]
call fcn.00401770
lea ecx, [ebp - 0x70d0]
call fcn.00401770
lea ecx, [ebp - 0x70a0]
mov byte [ebp - 4], 0x52
call fcn.00401770
cmp byte [ebp - 0x6f80], 0
jne 0x456d20
push 4
lea ecx, [ebp - 0x6d14]
call fcn.00405970
lea ecx, [ebp - 0x6d14]
call fcn.00406240
push 0x4cccfc
lea ecx, [ebp - 0x7034]
mov byte [ebp - 4], 0x57
call fcn.004015c0
mov byte [ebp - 4], 0x58
mov ecx, dword [ebp - 0x6d0c]
mov esi, dword [ecx]
lea ecx, [ebp - 0x6d14]
push ecx
mov ecx, eax
call fcn.004016d0
push eax
push dword [ebp - 0x6d0c]
mov eax, dword [esi + 0x1c]
call eax
shr eax, 0x1f
lea ecx, [ebp - 0x7034]
mov dword [ebp - 0x6f80], eax
mov byte [ebp - 4], 0x57
call fcn.00401670
cmp byte [ebp - 0x6f80], 0
jne 0x456d11
push 4
lea ecx, [ebp - 0x6d30]
call fcn.00405970
lea ecx, [ebp - 0x6d30]
call fcn.00406240
mov byte [ebp - 4], 0x59
lea edx, [ebp - 0x6d30]
mov eax, dword [ebp - 0x6d14]
push edx
push 1
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x38]
call eax
test eax, eax
jns 0x4571bc
lea ecx, [ebp - 0x6d30]
call fcn.00478350
lea ecx, [ebp - 0x6d14]
mov byte [ebp - 4], 0x52
call fcn.00478350
mov edi, dword [ebp - 0x6f7c]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45864b
push 0x18
lea ecx, [ebp - 0x28a4]
call fcn.00401e30
lea ecx, [ebp - 0x28a4]
call fcn.004053a0
push 0
push 0x4e341c
lea ecx, [ebp - 0x1fc8]
mov byte [ebp - 4], 0x62
call fcn.0040e560
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x456dca
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d6848
push esi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402e00
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x456d80
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3450
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402e00
cmp dword [ebp - 0x6fdc], 0
je 0x456e31
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e3450
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402e00
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6fb4], 0
jbe 0x457ce6
mov esi, dword [ebp - 0x6fa8]
mov eax, dword [ebp - 0x6fa0]
sub eax, esi
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f80], eax
mov ecx, edi
call fcn.00472640
test al, al
jne 0x457ce6
mov eax, dword [ebp - 0x6f80]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f8c], eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x457cc4
lea eax, [ebp - 0x2418]
push eax
push 0x4da7f0
lea ecx, [ebp - 0x1f74]
call fcn.00407900
test al, al
je 0x457cc4
lea ecx, [ebp - 0x2418]
call fcn.00402d60
cmp eax, 2
jl 0x457cc4
push 0x18
lea ecx, [ebp - 0x29f4]
call fcn.00401e30
push 0
push 0x4ccce8
lea ecx, [ebp - 0x2418]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x29f4]
call fcn.00405460
xor esi, esi
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0x29f4]
mov dword [ebp - 0x6fa4], esi
call fcn.00405560
test eax, eax
je 0x457caf
nop
push esi
lea ecx, [ebp - 0x29f4]
call fcn.00405550
push eax
lea ecx, [ebp - 0x219c]
call fcn.00402c10
push 0
push 0x4e34bc
lea ecx, [ebp - 0x219c]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x457c95
push esi
lea ecx, [ebp - 0x29f4]
call fcn.00405550
push eax
lea ecx, [ebp - 0x2084]
call fcn.00402c10
lea ecx, [ebp - 0x2084]
call fcn.00403180
test al, al
jne 0x457c95
push 0
push 1
push 0xffffffffffffffff
push 0
push str..dll
lea ecx, [ebp - 0x2084]
call fcn.00403fc0
lea ecx, [ebp - 0x2084]
mov esi, eax
call fcn.00402d60
sub eax, 3
cmp esi, eax
je 0x456fd7
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str..dll
lea ecx, [ebp - 0x2084]
call fcn.00404260
push 3
lea edx, [edi + 0x1a8]
lea ecx, [ebp - 0x2084]
call fcn.00409bc0
lea ecx, [ebp - 0x2084]
call fcn.00402ea0
push eax
push 0
call dword [0x4ad814]
test eax, eax
jne 0x457c8f
push eax
push 1
push 1
push eax
push 0x4e33a4
lea ecx, [ebp - 0x2084]
call fcn.00403fc0
mov esi, dword [ebp - 0x6fa4]
xor ecx, ecx
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test eax, eax
push 0
setg cl
push 0
mov dword [ebp - 0x6f9c], ecx
lea ecx, [ebp - 0x29f4]
push esi
call fcn.00405550
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4e34d8
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x213c]
call fcn.00402e00
push 0
lea ecx, [ebp - 0x213c]
call fcn.00402ea0
push eax
lea eax, [ebp - 0x2084]
mov ecx, edi
push eax
call fcn.0046e890
test al, al
mov ecx, 1
mov eax, dword [ebp - 0x6f9c]
cmovne eax, ecx
lea ecx, [ebp - 0x2084]
push 0
mov dword [ebp - 0x6f9c], eax
call fcn.00402ea0
push eax
push 0
push dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x2084]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x219c]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xe
push dword [eax + 0xa4]
call fcn.00445530
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
je 0x457c95
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0x4da7f0
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2084]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
call fcn.00402ea0
push eax
push 0xe
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
cmp dword [ebp - 0x6f9c], 0
mov ecx, 0x4e260c
push 0
push 0
push 0
push 0x4ccce0
mov eax, 0x4d1a98
cmove eax, ecx
lea ecx, [ebp - 0x2084]
push eax
push 0x4e2624
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x4e3310
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x219c]
call fcn.00402ea0
push eax
push 0x4e32c0
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
jmp 0x457c95
mov eax, dword [ebp - 0x6d30]
lea edx, [ebp - 0x2590]
mov dword [ebp - 0x2590], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
mov eax, dword [ebp - 0x2590]
mov edi, dword [ebp - 0x6f7c]
test eax, eax
je 0x4577b4
mov esi, 1
mov dword [ebp - 0x6f8c], esi
cmp eax, esi
jl 0x4577b4
lea eax, [edi + 0x1a8]
mov dword [ebp - 0x6fcc], eax
nop
mov ecx, edi
call fcn.00472640
test al, al
jne 0x4577b4
push 4
lea ecx, [ebp - 0x6cf4]
call fcn.00405970
lea ecx, [ebp - 0x6cf4]
call fcn.00406240
push 3
push esi
lea ecx, [ebp - 0x7090]
mov byte [ebp - 4], 0x5a
call fcn.004016f0
mov esi, eax
mov byte [ebp - 4], 0x5b
lea edx, [ebp - 0x6cf4]
mov ecx, dword [ebp - 0x6d30]
movups xmm0, xmmword [esi]
push edx
sub esp, 0x10
mov eax, dword [ecx]
mov edx, esp
push ecx
mov eax, dword [eax + 0x20]
movups xmmword [edx], xmm0
call eax
shr eax, 0x1f
lea ecx, [ebp - 0x7090]
mov dword [ebp - 0x6f80], eax
mov byte [ebp - 4], 0x5a
call fcn.00401770
cmp byte [ebp - 0x6f80], 0
jne 0x45778c
mov eax, dword [ebp - 0x6cf4]
lea edx, [ebp - 0x6d48]
mov dword [ebp - 0x6d48], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
test eax, eax
js 0x45778c
mov eax, dword [ebp - 0x6d48]
test eax, eax
je 0x45778c
push eax
lea ecx, [ebp - 0x219c]
call fcn.00402c10
push dword [ebp - 0x6d48]
call dword [0x4ad430]
push 0
push 0x4e3384
lea ecx, [ebp - 0x219c]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x45778c
push 4
lea ecx, [ebp - 0x6d00]
call fcn.00405970
lea ecx, [ebp - 0x6d00]
call fcn.00406240
mov byte [ebp - 4], 0x5c
lea edx, [ebp - 0x6d00]
mov eax, dword [ebp - 0x6cf4]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x4c]
call eax
test eax, eax
js 0x457781
push 4
lea ecx, [ebp - 0x6d08]
call fcn.00405970
lea ecx, [ebp - 0x6d08]
call fcn.00406240
mov byte [ebp - 4], 0x5d
lea edx, [ebp - 0x6d08]
mov eax, dword [ebp - 0x6d00]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x44]
call eax
test eax, eax
js 0x457776
mov eax, dword [ebp - 0x6d08]
lea edx, [ebp - 0x2484]
mov dword [ebp - 0x2484], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
cmp dword [ebp - 0x2484], 0
je 0x457776
lea ecx, [ebp - 0x21a8]
call fcn.00402cf0
mov esi, 1
cmp dword [ebp - 0x2484], esi
jl 0x457591
mov edi, dword [ebp - 0x6fcc]
push 4
lea ecx, [ebp - 0x6cf8]
call fcn.00405970
lea ecx, [ebp - 0x6cf8]
call fcn.00406240
mov byte [ebp - 4], 0x5e
lea edx, [ebp - 0x6cf8]
mov eax, dword [ebp - 0x6d08]
push edx
push esi
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x20]
call eax
test eax, eax
js 0x45756f
mov eax, dword [ebp - 0x6cf8]
lea edx, [ebp - 0x28a8]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x24]
call eax
test eax, eax
js 0x45756f
cmp dword [ebp - 0x28a8], 0
jne 0x45756f
push 4
lea ecx, [ebp - 0x6d1c]
call fcn.00405970
lea ecx, [ebp - 0x6d1c]
call fcn.00406240
mov byte [ebp - 4], 0x5f
lea edx, [ebp - 0x6d1c]
mov eax, dword [ebp - 0x6cf8]
push edx
push str.MbLk
push eax
mov ecx, dword [eax]
mov eax, dword [ecx]
call eax
test eax, eax
js 0x457564
mov eax, dword [ebp - 0x6d1c]
lea edx, [ebp - 0x6d38]
mov dword [ebp - 0x6d38], 0
mov dword [ebp - 0x6d3c], 0
push edx
mov ecx, dword [eax]
push eax
mov eax, dword [ecx + 0x28]
call eax
mov eax, dword [ebp - 0x6d38]
test eax, eax
je 0x457564
push eax
lea ecx, [ebp - 0x234c]
call fcn.00402c10
mov eax, dword [ebp - 0x6d1c]
lea edx, [ebp - 0x6d3c]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x30]
call eax
mov ecx, dword [ebp - 0x6d3c]
call fcn.00405980
test eax, eax
je 0x45751d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6d3c]
lea ecx, [ebp - 0x234c]
push 0x4cd604
call fcn.00404260
push 3
push 1
lea ecx, [ebp - 0x234c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x21a8]
call fcn.00402db0
mov edx, edi
mov ecx, eax
call fcn.00409bc0
test al, al
jne 0x45752e
push dword [ebp - 0x6d38]
lea ecx, [ebp - 0x21a8]
call fcn.00402c10
push 0
push 1
push 0x4ccd04
push 0x4cd600
lea ecx, [ebp - 0x21a8]
call fcn.004047c0
push dword [ebp - 0x6d38]
call dword [0x4ad430]
mov eax, dword [ebp - 0x6d3c]
test eax, eax
je 0x457564
push eax
call dword [0x4ad430]
lea ecx, [ebp - 0x6d1c]
call fcn.00478350
lea ecx, [ebp - 0x6cf8]
mov byte [ebp - 4], 0x5d
call fcn.00478350
inc esi
cmp esi, dword [ebp - 0x2484]
jle 0x4573c3
mov edi, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x21a8]
call fcn.00403180
test al, al
jne 0x457776
mov eax, dword [ebp - 0x6d14]
lea edx, [ebp - 0x6dc0]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x20]
call eax
test eax, eax
js 0x45763f
movsd xmm0, qword [edi + 0x390]
comisd xmm0, xmmword [0x4edff8]
jbe 0x4575db
mov eax, dword [edi + 0x1b0]
jmp 0x4575e1
mov eax, dword [edi + 0x1ac]
push eax
lea ecx, [ebp - 0x2490]
call fcn.00402c10
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x219c]
call fcn.00402ea0
push eax
push 0x4cccfc
push dword [ebp - 0x6dc0]
lea ecx, [ebp - 0x2490]
push 0x4d14ec
call fcn.00404260
push 1
push 0
push 0x4cccfc
push 0x4ccd24
lea ecx, [ebp - 0x2490]
call fcn.004047c0
jmp 0x45764a
lea ecx, [ebp - 0x2490]
call fcn.00402cf0
push 0
push 1
push 1
push 0
push 0x4e33a4
lea ecx, [ebp - 0x21a8]
call fcn.00403fc0
push 0
lea ecx, [ebp - 0x2490]
mov esi, eax
call fcn.00402ea0
push eax
lea eax, [ebp - 0x21a8]
mov ecx, edi
push eax
call fcn.0046e890
test al, al
lea ecx, [ebp - 0x21a8]
mov eax, 1
push 0
cmovne esi, eax
call fcn.00402ea0
push eax
push 0
push esi
lea ecx, [ebp - 0x21a8]
call fcn.00402ea0
push eax
push 0x4dd460
lea ecx, [ebp - 0x219c]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xd
push dword [eax + 0xa4]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x457776
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dd460
lea ecx, [ebp - 0x21a8]
call fcn.00402ea0
push eax
push 0
push 0xd
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
test esi, esi
mov ecx, 0x4e260c
push 0x4ccce0
mov eax, 0x4d1a98
cmove eax, ecx
lea ecx, [ebp - 0x234c]
push eax
push 0x4e2624
call fcn.00402ea0
push eax
push 0x4e32a4
push 0x4e33b4
lea ecx, [ebp - 0x219c]
call fcn.00402ea0
push eax
push 0x4e33ec
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea ecx, [ebp - 0x6d08]
call fcn.00478350
lea ecx, [ebp - 0x6d00]
call fcn.00478350
lea ecx, [ebp - 0x6cf4]
mov byte [ebp - 4], 0x59
call fcn.00478350
mov esi, dword [ebp - 0x6f8c]
inc esi
mov dword [ebp - 0x6f8c], esi
cmp esi, dword [ebp - 0x2590]
jle 0x457210
lea ecx, [ebp - 0x6d30]
call fcn.00478350
lea ecx, [ebp - 0x6d14]
mov byte [ebp - 4], 0x52
call fcn.00478350
jmp 0x456d26
lea eax, [ebp - 0x6d10]
push eax
push 0x4edf84
push 1
push 0
push 0x4edf64
call esi
test eax, eax
js 0x456d20
push 4
lea ecx, [ebp - 0x6d34]
call fcn.00405970
lea ecx, [ebp - 0x6d34]
call fcn.00406240
mov byte [ebp - 4], 0x60
lea edx, [ebp - 0x6d34]
mov eax, dword [ebp - 0x6d10]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x14]
call eax
test eax, eax
jns 0x45783b
lea ecx, [ebp - 0x6d34]
mov byte [ebp - 4], 0x52
call fcn.00478350
jmp 0x456d20
mov eax, dword [ebp - 0x6d34]
lea edx, [ebp - 0x2494]
push edx
mov dword [ebp - 0x2494], 0
lea edx, [ebp - 0x6d40]
push edx
mov ecx, dword [eax]
push 5
push eax
mov eax, dword [ecx + 0xc]
call eax
mov edi, dword [ebp - 0x6f7c]
test eax, eax
js 0x457c7b
mov eax, dword [ebp - 0x2494]
test eax, eax
je 0x457c7b
xor esi, esi
mov dword [ebp - 0x6f8c], esi
test eax, eax
je 0x457c49
nop
mov ecx, edi
call fcn.00472640
test al, al
jne 0x457c49
mov eax, dword [ebp - 0x6d40]
lea ecx, [ebp - 0x219c]
push dword [eax + esi*4]
call fcn.00402c10
mov eax, dword [ebp - 0x6d40]
push dword [eax + esi*4]
call dword [0x4ad7fc]
push 0
push 0x4e3384
lea ecx, [ebp - 0x219c]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x457c2e
push 4
lea ecx, [ebp - 0x6cfc]
call fcn.00405970
lea ecx, [ebp - 0x6cfc]
call fcn.00406240
mov byte [ebp - 4], 0x61
lea ecx, [ebp - 0x219c]
mov eax, dword [ebp - 0x6d10]
mov esi, dword [eax]
lea eax, [ebp - 0x6cfc]
push eax
push 0x4edf94
call fcn.00402ea0
push eax
push dword [ebp - 0x6d10]
mov eax, dword [esi + 0x18]
call eax
test eax, eax
js 0x457c1f
mov eax, dword [ebp - 0x6cfc]
lea edx, [ebp - 0x6d2c]
mov dword [ebp - 0x6d2c], 0
mov dword [ebp - 0x6d44], 0
push edx
mov ecx, dword [eax]
push eax
mov eax, dword [ecx + 0x84]
call eax
cmp dword [ebp - 0x6d2c], 0
je 0x457c1f
mov eax, dword [ebp - 0x6cfc]
lea edx, [ebp - 0x6d44]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x8c]
call eax
push dword [ebp - 0x6d2c]
lea ecx, [ebp - 0x234c]
call fcn.00402c10
mov ecx, dword [ebp - 0x6d44]
call fcn.00405980
test eax, eax
je 0x4579fa
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6d44]
lea ecx, [ebp - 0x234c]
push 0x4cd604
call fcn.00404260
push 3
push 1
lea ecx, [ebp - 0x234c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x21a8]
call fcn.00402db0
lea edx, [edi + 0x1a8]
mov ecx, eax
call fcn.00409bc0
test al, al
jne 0x457a0b
push dword [ebp - 0x6d2c]
lea ecx, [ebp - 0x21a8]
call fcn.00402c10
push 0
push 1
push 0x4ccd04
push 0x4cd600
lea ecx, [ebp - 0x21a8]
call fcn.004047c0
push dword [ebp - 0x6d2c]
mov esi, dword [0x4ad7fc]
call esi
mov eax, dword [ebp - 0x6d44]
test eax, eax
je 0x457a3f
push eax
call esi
lea ecx, [ebp - 0x21a8]
call fcn.00403180
test al, al
jne 0x457c1f
push 0
push 1
push 1
push 0
push 0x4e33a4
lea ecx, [ebp - 0x21a8]
call fcn.00403fc0
xor ecx, ecx
test eax, eax
lea eax, [ebp - 0x219c]
setg cl
mov dword [ebp - 0x6f80], ecx
lea ecx, [ebp - 0x2490]
push eax
call fcn.00402c20
push 0
push 1
push 0xffffffffffffffff
push 0
push 0x4d14fc
lea ecx, [ebp - 0x2490]
call fcn.00403fc0
test eax, eax
jne 0x457ac0
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4d14fc
lea ecx, [ebp - 0x2490]
call fcn.00404260
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e340c
push dword [edi + 0x1ac]
lea ecx, [ebp - 0x2490]
call fcn.00404550
push 0
lea ecx, [ebp - 0x2490]
call fcn.00402ea0
push eax
lea eax, [ebp - 0x21a8]
mov ecx, edi
push eax
call fcn.0046e890
test al, al
je 0x457b11
mov esi, 1
jmp 0x457b33
lea ecx, [ebp - 0x21a8]
call fcn.00402ea0
push eax
push 0
call dword [0x4ad814]
test eax, eax
jne 0x457c1f
mov esi, dword [ebp - 0x6f80]
push 0
lea ecx, [ebp - 0x21a8]
call fcn.00402ea0
push eax
push 0
push esi
lea ecx, [ebp - 0x21a8]
call fcn.00402ea0
push eax
push 0x4dd460
lea ecx, [ebp - 0x219c]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xd
push dword [eax + 0xa4]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x457c1f
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dd460
lea ecx, [ebp - 0x21a8]
call fcn.00402ea0
push eax
push 0
push 0xd
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
test esi, esi
mov ecx, 0x4e260c
push 0x4ccce0
mov eax, 0x4d1a98
cmove eax, ecx
lea ecx, [ebp - 0x234c]
push eax
push 0x4e2624
call fcn.00402ea0
push eax
push 0x4e32a4
push 0x4e33b4
lea ecx, [ebp - 0x219c]
call fcn.00402ea0
push eax
push 0x4e33ec
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea ecx, [ebp - 0x6cfc]
mov byte [ebp - 4], 0x60
call fcn.00478350
mov eax, dword [ebp - 0x6f8c]
inc eax
mov esi, eax
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [ebp - 0x2494]
jb 0x457890
push dword [ebp - 0x6d40]
call dword [0x4ad7fc]
mov eax, dword [ebp - 0x6d34]
lea edx, [ebp - 0x2494]
push edx
lea edx, [ebp - 0x6d40]
push edx
mov ecx, dword [eax]
push 5
push eax
mov eax, dword [ecx + 0xc]
call eax
test eax, eax
jns 0x457871
lea ecx, [ebp - 0x6d34]
mov byte [ebp - 4], 0x52
call fcn.00478350
jmp 0x456d26
mov esi, dword [ebp - 0x6fa4]
inc esi
lea ecx, [ebp - 0x29f4]
mov dword [ebp - 0x6fa4], esi
call fcn.00405560
cmp esi, eax
jb 0x456f20
lea ecx, [ebp - 0x29f4]
mov byte [ebp - 4], 0x62
call fcn.004054e0
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x456e62
mov ecx, edi
call fcn.00472640
test al, al
jne 0x458640
push 0
push 0x4e3500
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
push 4
lea ecx, [ebp - 0x2304]
mov dword [ebp - 0x6fd0], 0x4e3538
mov dword [ebp - 0x6fcc], 0x4e35c0
call fcn.00405970
lea ecx, [ebp - 0x2304]
call fcn.00406240
push 4
lea ecx, [ebp - 0x2434]
mov byte [ebp - 4], 0x64
call fcn.00405970
lea ecx, [ebp - 0x2434]
call fcn.00406240
push 0xc
lea ecx, [ebp - 0x20cc]
mov byte [ebp - 4], 0x65
call fcn.00401970
lea ecx, [ebp - 0x20cc]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x272c]
mov byte [ebp - 4], 0x66
call fcn.00401970
lea ecx, [ebp - 0x272c]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x27b0]
mov byte [ebp - 4], 0x67
call fcn.00401970
lea ecx, [ebp - 0x27b0]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x6db4]
mov byte [ebp - 4], 0x68
call fcn.004076b0
lea ecx, [ebp - 0x6db4]
call fcn.004076f0
xor ecx, ecx
mov byte [ebp - 4], 0x69
mov dword [ebp - 0x6f9c], ecx
nop dword [eax + eax]
push 0
push 0x20019
push dword [ebp + ecx*4 - 0x6fd0]
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x4585d5
lea eax, [ebp - 0x6cec]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6fa4], esi
call fcn.00407b30
test al, al
je 0x4585d5
nop dword [eax]
nop dword [eax + eax]
mov eax, dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x2114]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
push 0x4cccfc
push dword [ebp + eax*4 - 0x6fd0]
call fcn.00402e00
push 0
push 0x20019
lea ecx, [ebp - 0x2114]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2304]
call fcn.00407750
test al, al
je 0x4585b3
lea eax, [ebp - 0x6db4]
mov dword [ebp - 0x6f8c], 0
push eax
push 0
lea ecx, [ebp - 0x2304]
call fcn.00407b30
test al, al
je 0x458261
mov eax, dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x27b0]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6db4]
push 0x4cccfc
push dword [ebp - 0x6cec]
push 0x4cccfc
push dword [ebp + eax*4 - 0x6fd0]
call fcn.00402e00
push 0
push 0x20019
lea ecx, [ebp - 0x27b0]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2434]
call fcn.00407750
test al, al
je 0x458233
lea eax, [ebp - 0x20cc]
push eax
push 0x4e3648
lea ecx, [ebp - 0x2434]
call fcn.00407900
test al, al
je 0x458233
lea ecx, [ebp - 0x20cc]
call fcn.00403180
test al, al
jne 0x458233
push 0
push 0x4da80c
lea ecx, [ebp - 0x20cc]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x458233
push 0
push 1
push 1
push 0
push 0x4e3660
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
je 0x457f93
push 0
push 1
push 1
push 0
push 0x4e3670
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
jne 0x458233
push 0
push 1
push 1
push 0
push 0x4e3680
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
je 0x457fcf
push 0
push 1
push 1
push 0
push 0x4e36ac
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
jne 0x458233
push 0
push 1
push 1
push 0
push 0x4e36d8
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
je 0x45800b
push 0
push 1
push 1
push 0
push 0x4e3710
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
jne 0x458233
push 0
push 1
push 1
push 0
push 0x4e3748
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
je 0x458047
push 0
push 1
push 1
push 0
push 0x4e3774
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
jne 0x458233
push 0
push 1
push 1
push 0
push 0x4e379c
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
je 0x458083
push 0
push 1
push 1
push 0
push 0x4e37d4
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
jne 0x458233
push 0
push 0x4e3808
lea ecx, [ebp - 0x20cc]
mov dword [ebp - 0x6f80], 0
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x28a4]
call fcn.004055c0
lea ecx, [ebp - 0x28a4]
xor esi, esi
call fcn.00405560
test eax, eax
je 0x45934a
push 1
push esi
lea ecx, [ebp - 0x28a4]
call fcn.00405550
push eax
lea ecx, [ebp - 0x272c]
call fcn.00402db0
mov ecx, eax
call fcn.00403180
test al, al
jne 0x458131
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2d88
lea ecx, [edi + 0x33c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x272c]
call fcn.00404550
lea ecx, [ebp - 0x272c]
call fcn.00402ea0
xor edx, edx
mov ecx, eax
call fcn.00409360
test al, al
jne 0x459340
lea ecx, [ebp - 0x28a4]
inc esi
call fcn.00405560
cmp esi, eax
jb 0x4580c0
mov esi, dword [ebp - 0x6f80]
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x27b0]
call fcn.00402ea0
push eax
push 0x4dd460
lea ecx, [ebp - 0x20cc]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xf
push dword [eax + 0xa4]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x458233
push 0
push 0
push 0
push 0
push 0
push 0x4e3648
push 0x4dd460
push 0
lea ecx, [ebp - 0x27b0]
call fcn.00402ea0
push eax
push 0xf
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0x4ccce0
test esi, esi
mov ecx, 0x4e260c
mov eax, 0x4d1a98
cmove eax, ecx
lea ecx, [ebp - 0x27b0]
push eax
push 0x4e2624
push 0x4e3810
call fcn.00402ea0
push eax
push 0x4e3848
push 0x4e33b4
lea ecx, [ebp - 0x20cc]
call fcn.00402ea0
push eax
push 0x4e32c0
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x6db4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x2304]
mov dword [ebp - 0x6f8c], eax
call fcn.00407b30
test al, al
jne 0x457ea1
mov esi, dword [ebp - 0x6fa4]
lea eax, [ebp - 0x20cc]
push eax
push 0x4e3648
lea ecx, [ebp - 0x2304]
call fcn.00407900
test al, al
je 0x4585b3
lea ecx, [ebp - 0x20cc]
call fcn.00403180
test al, al
jne 0x4585b3
push 0
push 0x4da80c
lea ecx, [ebp - 0x20cc]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x4585b3
push 0
push 1
push 1
push 0
push 0x4e3660
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
je 0x4582f1
push 0
push 1
push 1
push 0
push 0x4e3670
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
jne 0x4585b3
push 0
push 1
push 1
push 0
push 0x4e3680
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
je 0x45832d
push 0
push 1
push 1
push 0
push 0x4e36ac
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
jne 0x4585b3
push 0
push 1
push 1
push 0
push 0x4e36d8
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
je 0x458369
push 0
push 1
push 1
push 0
push 0x4e3710
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
jne 0x4585b3
push 0
push 1
push 1
push 0
push 0x4e3748
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
je 0x4583a5
push 0
push 1
push 1
push 0
push 0x4e3774
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
jne 0x4585b3
push 0
push 1
push 1
push 0
push 0x4e379c
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
je 0x4583e1
push 0
push 1
push 1
push 0
push 0x4e37d4
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
jne 0x4585b3
push 0
push 0x4e3808
lea ecx, [ebp - 0x20cc]
mov dword [ebp - 0x6f8c], 0
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x28a4]
call fcn.004055c0
lea ecx, [ebp - 0x28a4]
mov dword [ebp - 0x6f78], 0
call fcn.00405560
test eax, eax
je 0x459361
mov ecx, dword [ebp - 0x6f78]
nop dword [eax]
push 1
push ecx
lea ecx, [ebp - 0x28a4]
call fcn.00405550
push eax
lea ecx, [ebp - 0x272c]
call fcn.00402db0
mov ecx, eax
call fcn.00403180
test al, al
jne 0x4584a1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2d88
lea ecx, [edi + 0x33c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x272c]
call fcn.00404550
lea ecx, [ebp - 0x272c]
call fcn.00402ea0
xor edx, edx
mov ecx, eax
call fcn.00409360
test al, al
jne 0x459351
inc dword [ebp - 0x6f78]
lea ecx, [ebp - 0x28a4]
call fcn.00405560
mov ecx, dword [ebp - 0x6f78]
cmp ecx, eax
jb 0x458430
mov eax, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push eax
lea ecx, [ebp - 0x2114]
call fcn.00402ea0
push eax
push 0x4dd460
lea ecx, [ebp - 0x20cc]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xf
push dword [eax + 0xa4]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4585b3
push 0
push 0
push 0
push 0
push 0
push 0x4e3648
push 0x4dd460
push 0
lea ecx, [ebp - 0x2114]
call fcn.00402ea0
push eax
push 0xf
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
cmp dword [ebp - 0x6f8c], 0
mov ecx, 0x4e260c
push 0
push 0
push 0
push 0x4ccce0
mov eax, 0x4d1a98
cmove eax, ecx
lea ecx, [ebp - 0x2114]
push eax
push 0x4e2624
push 0x4e3810
call fcn.00402ea0
push eax
push 0x4e3848
push 0x4e33b4
lea ecx, [ebp - 0x20cc]
call fcn.00402ea0
push eax
push 0x4e32c0
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea eax, [ebp - 0x6cec]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6fa4], esi
call fcn.00407b30
test al, al
jne 0x457e20
mov ecx, dword [ebp - 0x6f9c]
inc ecx
mov dword [ebp - 0x6f9c], ecx
cmp ecx, 2
jb 0x457dd0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa4]
call fcn.00420b90
lea ecx, [ebp - 0x6db4]
call fcn.00402ce0
lea ecx, [ebp - 0x27b0]
call fcn.00402ce0
lea ecx, [ebp - 0x272c]
call fcn.00402ce0
lea ecx, [ebp - 0x20cc]
call fcn.00402ce0
lea ecx, [ebp - 0x2434]
call fcn.00407780
lea ecx, [ebp - 0x2304]
call fcn.00407780
lea ecx, [ebp - 0x28a4]
call fcn.004054e0
lea ecx, [ebp - 0x6d0c]
call fcn.00478350
lea ecx, [ebp - 0x6d10]
call fcn.00478350
lea ecx, [ebp - 0x21a8]
call fcn.00402ce0
lea ecx, [ebp - 0x2490]
call fcn.00402ce0
lea ecx, [ebp - 0x2ba8]
call fcn.00409a80
lea ecx, [ebp - 0x258c]
call fcn.00402ce0
lea ecx, [ebp - 0x234c]
call fcn.00402ce0
lea ecx, [ebp - 0x219c]
call fcn.00402ce0
lea ecx, [ebp - 0x2824]
call fcn.00402ce0
lea ecx, [ebp - 0x2418]
call fcn.00402ce0
lea ecx, [ebp - 0x2084]
mov byte [ebp - 4], 0x46
call fcn.00402ce0
mov eax, dword [ebp - 0x6f7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4ddd18
push 0x4cccfc
lea ecx, [eax + 0x140]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2780]
call fcn.00402e00
push 1
lea ecx, [ebp - 0x2780]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00401bd0
mov edi, dword [ebp - 0x6f7c]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45948e
test dword [edi + 0x34], 0x1000
jne 0x45948e
movsd xmm0, qword [edi + 0x390]
ucomisd xmm0, qword [0x4ee030]
lahf
test ah, 0x44
jp 0x45948e
push 0
push 0x4e3870
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x4e38b8
push dword [eax + 0x38]
call fcn.0041f410
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x26
push dword [eax + 0x34]
call fcn.00421b70
push 0xc
lea ecx, [ebp - 0x221c]
call fcn.00401970
lea ecx, [ebp - 0x221c]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x28f4]
mov byte [ebp - 4], 0x6a
call fcn.00401970
lea ecx, [ebp - 0x28f4]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2580]
mov byte [ebp - 4], 0x6b
call fcn.00401970
lea ecx, [ebp - 0x2580]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x261c]
mov byte [ebp - 4], 0x6c
call fcn.00401970
lea ecx, [ebp - 0x261c]
call fcn.00402b40
push 0
push 0x4e38f0
lea ecx, [ebp - 0x1fc8]
mov byte [ebp - 4], 0x6d
call fcn.0040e560
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.00420b90
xor esi, esi
mov dword [ebp - 0x6f78], esi
cmp dword [edi + 0x30], esi
jbe 0x458a90
lea ecx, [edi + 0x104]
nop dword [eax]
push esi
call fcn.00478820
mov ecx, eax
call fcn.00403180
test al, al
jne 0x458a7a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3930
push 0x4e39d8
push esi
lea ecx, [edi + 0x104]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
push str.HKU_
lea ecx, [ebp - 0x221c]
call fcn.00402e00
push 0
push 0x20019
lea ecx, [ebp - 0x221c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x458a7a
xor esi, esi
nop dword [eax + eax]
lea eax, [ebp - 0x6cec]
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.00407b30
test al, al
je 0x458a6e
push 8
push 0
push 0x4cccf4
push 0x4e3a70
push 1
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x261c]
call fcn.00402db0
mov ecx, eax
call fcn.004051f0
push 0
push 0x4e3a8c
lea ecx, [ebp - 0x261c]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x458a64
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x221c]
push 0x4cccfc
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2580]
call fcn.00402e00
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2580]
call fcn.00402ea0
push eax
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x114]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x261c]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 4
push 0x18
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x458a64
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x114]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
push 0
lea ecx, [ebp - 0x2580]
call fcn.00402ea0
push eax
push 0x18
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e3ac0
push dword [ebp - 0x6cec]
lea ecx, [edi + 0x114]
push 0x4e3afc
push dword [ebp - 0x6f78]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x261c]
call fcn.00402ea0
push eax
push 0x4e3b30
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
inc esi
cmp esi, 2
jb 0x4588c0
mov dword [ebp - 0x6fa4], esi
mov esi, dword [ebp - 0x6f78]
inc esi
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f78], esi
cmp esi, dword [edi + 0x30]
jb 0x458840
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45945e
push 0
push 0x4e3b60
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x458dbb
lea ecx, [edi + 0x104]
push esi
call fcn.00478820
mov ecx, eax
call fcn.00403180
test al, al
jne 0x458dab
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3930
push 0x4e39d8
push esi
lea ecx, [edi + 0x104]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
push str.HKU_
lea ecx, [ebp - 0x221c]
call fcn.00402e00
push 0
push 0x20019
lea ecx, [ebp - 0x221c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
lea eax, [ebp - 0x6cec]
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.00407b30
test al, al
je 0x458c50
push 0
push 0x4e3cf0
push 0x4ddfbc
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x458dab
push 0
push 0
push 0
push 0
push 0x4e3bb8
push esi
lea ecx, [edi + 0x114]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4ddfbc
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x458dab
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [edi + 0x114]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
push 0
lea ecx, [ebp - 0x221c]
call fcn.00402ea0
push eax
push 0x1a
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e3ac0
push 0x4e3bb8
push 0x4e3d2c
push esi
lea ecx, [edi + 0x114]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
push 0x4e2684
push 0x4ddfbc
push 0x4e3d44
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3d70
push 0x4e39d8
push esi
lea ecx, [edi + 0x104]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
push str.HKU_
lea ecx, [ebp - 0x221c]
call fcn.00402e00
lea ecx, [ebp - 0x221c]
call fcn.00402ea0
xor edx, edx
mov ecx, eax
call fcn.00409360
test al, al
je 0x458dab
push 0
push 0x4e3cf0
push 0x4de168
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x458dab
push 0
push 0
push 0
push 0
push 0x4e3c60
push esi
lea ecx, [edi + 0x114]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4de168
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x458dab
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [edi + 0x114]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
push 0
lea ecx, [ebp - 0x221c]
call fcn.00402ea0
push eax
push 0x1a
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e3ac0
push 0x4e3c60
push 0x4e3d2c
push esi
lea ecx, [edi + 0x114]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
push 0x4e2684
push 0x4de168
push 0x4e3d44
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
inc esi
lea ecx, [edi + 0x104]
cmp esi, dword [edi + 0x30]
jb 0x458ac2
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45945e
xor eax, eax
mov dword [ebp - 0x6fb8], 0x4d7750
mov dword [ebp - 0x6fb4], 0x4d7778
mov dword [ebp - 0x6fd0], 0x4de284
mov dword [ebp - 0x6fcc], 0x4de398
mov dword [ebp - 0x6f90], 0x4e3e10
mov dword [ebp - 0x6f8c], 0x4e3e98
mov dword [ebp - 0x6f78], eax
cmp dword [edi + 0x30], eax
jbe 0x458ffb
lea edx, [edi + 0x104]
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3f28
push 0x4e3fd0
push 0x4e4068
push eax
mov ecx, edx
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
push str.HKU_
lea ecx, [ebp - 0x221c]
call fcn.00402e00
lea ecx, [ebp - 0x221c]
call fcn.00402ea0
xor edx, edx
mov ecx, eax
call fcn.00409360
test al, al
je 0x458fdf
xor esi, esi
nop dword [eax + eax]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x458fd9
lea ecx, [ebp - 0x221c]
call fcn.00402ea0
mov edx, dword [ebp + esi*4 - 0x6fb8]
mov ecx, eax
call fcn.00409360
test al, al
je 0x458fcf
push 0
push 0x4e3cf0
push dword [ebp + esi*4 - 0x6fd0]
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x458fcf
push 0
push 0
push 0
push 0
push dword [ebp + esi*4 - 0x6f90]
lea ecx, [edi + 0x114]
push dword [ebp - 0x6f78]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
push dword [ebp + esi*4 - 0x6fd0]
mov eax, dword [edi + 8]
mov ecx, edi
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x458fcf
push 0
push 0
push 0
push 0
push 0
push dword [ebp + esi*4 - 0x6fb8]
lea ecx, [edi + 0x114]
push dword [ebp - 0x6f78]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
push 0
lea ecx, [ebp - 0x221c]
call fcn.00402ea0
push eax
push 0x1a
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e3ac0
push dword [ebp + esi*4 - 0x6f90]
lea ecx, [edi + 0x114]
push 0x4e3d2c
push dword [ebp - 0x6f78]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
push 0x4e2684
push dword [ebp + esi*4 - 0x6fd0]
lea ecx, [ebp - 0x1f80]
push 0x4e3d44
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
inc esi
cmp esi, 2
jb 0x458e80
mov dword [ebp - 0x6fa4], esi
mov eax, dword [ebp - 0x6f78]
lea edx, [edi + 0x104]
inc eax
mov dword [ebp - 0x6f78], eax
cmp eax, dword [edi + 0x30]
jb 0x458e20
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45945e
mov dword [ebp - 0x6fb8], 0x4d78b8
xor esi, esi
mov dword [ebp - 0x6fb4], 0x4d78d4
mov dword [ebp - 0x6fd0], 0x4de4c4
mov dword [ebp - 0x6fcc], 0x4de4f0
mov dword [ebp - 0x6f90], 0x4e4108
mov dword [ebp - 0x6f8c], 0x4e4190
nop dword [eax + eax]
push 0
push 0x4e3cf0
push dword [ebp + esi*4 - 0x6fd0]
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x45917a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + esi*4 - 0x6fb8]
lea ecx, [ebp - 0x25b0]
push 0x4d7850
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x221c]
call fcn.00402e00
lea ecx, [ebp - 0x221c]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
je 0x45917a
mov eax, dword [edi + 8]
mov ecx, edi
push 0
push 0
push 0
push 0
push dword [ebp + esi*4 - 0x6f90]
push 0x4dd460
push dword [ebp + esi*4 - 0x6fd0]
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x45917a
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dd460
lea ecx, [ebp - 0x221c]
call fcn.00402ea0
push eax
push 0
push 0x1a
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3ac0
push dword [ebp + esi*4 - 0x6f90]
lea ecx, [ebp - 0x1f80]
push 0x4e3d2c
push 0x4e33b4
push dword [ebp + esi*4 - 0x6fd0]
push 0x4e3d44
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
inc esi
cmp esi, 2
jb 0x459050
push 4
lea ecx, [ebp - 0x2360]
mov dword [ebp - 0x6fa4], esi
call fcn.00405970
lea ecx, [ebp - 0x2360]
call fcn.00406240
push 4
lea ecx, [ebp - 0x2444]
mov byte [ebp - 4], 0x6e
call fcn.00405970
lea ecx, [ebp - 0x2444]
call fcn.00406240
xor eax, eax
mov byte [ebp - 4], 0x6f
mov dword [ebp - 0x6f78], eax
cmp dword [edi + 0x30], eax
jbe 0x459424
lea edx, [edi + 0x104]
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e42a8
push 0x4e4330
push 0x4e43a8
push eax
mov ecx, edx
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
push str.HKU_
lea ecx, [ebp - 0x221c]
call fcn.00402e00
push 0
push 0x20019
lea ecx, [ebp - 0x221c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2360]
call fcn.00407750
test al, al
je 0x459408
lea eax, [ebp - 0x6cec]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x2360]
mov dword [ebp - 0x6fa4], esi
call fcn.00407b30
test al, al
je 0x459408
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e43cc
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x221c]
push 0x4cccfc
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2580]
call fcn.00402e00
push 0
push 0x20019
lea ecx, [ebp - 0x2580]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2444]
call fcn.00407750
test al, al
je 0x459319
lea ecx, [ebp - 0x2444]
call fcn.00407c50
cmp eax, 2
jb 0x459319
push 0
push 0
push 0
push 0
push 0x4e4220
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x114]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4de700
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
jne 0x459368
lea eax, [ebp - 0x6cec]
inc esi
push eax
push esi
lea ecx, [ebp - 0x2360]
mov dword [ebp - 0x6fa4], esi
call fcn.00407b30
test al, al
jne 0x459266
jmp 0x459408
mov esi, 1
jmp 0x45814b
xor esi, esi
jmp 0x45814b
mov eax, 1
mov dword [ebp - 0x6f8c], eax
jmp 0x4584c6
xor eax, eax
jmp 0x4584c6
mov esi, dword [ebp - 0x6f78]
lea ecx, [edi + 0x114]
push 0
push 0
push 0
push 0
push 0
push 0
push esi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
push 0
lea ecx, [ebp - 0x2580]
call fcn.00402ea0
push eax
push 0x1a
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3ac0
push 0x4e4220
push 0x4e3d2c
push esi
lea ecx, [edi + 0x114]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
push 0x4e2684
push 0x4e4408
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [ebp - 0x6f78]
lea edx, [edi + 0x104]
inc eax
mov dword [ebp - 0x6f78], eax
cmp eax, dword [edi + 0x30]
jb 0x4591e0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.00420b90
push 1
push 0
push 0
lea ecx, [ebp - 0x21e0]
call fcn.004025d0
lea ecx, [ebp - 0x2444]
call fcn.00407780
lea ecx, [ebp - 0x2360]
call fcn.00407780
lea ecx, [ebp - 0x261c]
call fcn.00402ce0
lea ecx, [ebp - 0x2580]
call fcn.00402ce0
lea ecx, [ebp - 0x28f4]
call fcn.00402ce0
lea ecx, [ebp - 0x221c]
mov byte [ebp - 4], 0x46
call fcn.00402ce0
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45bc52
test dword [edi + 0x34], 0x1000
jne 0x45bc52
push 0
push 0x4e4460
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x4e38b8
push dword [eax + 0x38]
call fcn.0041f410
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x26
push dword [eax + 0x34]
call fcn.00421b70
push 0xc
lea ecx, [ebp - 0x20c0]
call fcn.00401970
lea ecx, [ebp - 0x20c0]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x201c]
mov byte [ebp - 4], 0x70
call fcn.00401970
lea ecx, [ebp - 0x201c]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2400]
mov byte [ebp - 4], 0x71
call fcn.00401970
lea ecx, [ebp - 0x2400]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x1ff4]
mov byte [ebp - 4], 0x72
call fcn.00401970
lea ecx, [ebp - 0x1ff4]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x22d0]
mov byte [ebp - 4], 0x73
call fcn.00401970
lea ecx, [ebp - 0x22d0]
call fcn.00402b40
push 0x24
lea ecx, [ebp - 0x2548]
mov byte [ebp - 4], 0x74
call fcn.0042f010
lea ecx, [ebp - 0x2548]
call fcn.004101c0
mov byte [ebp - 4], 0x75
xor esi, esi
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
mov dword [ebp - 0x6f8c], esi
push dword [eax + 0xa8]
call fcn.00420b90
push esi
push 0x4e44a0
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
mov dword [ebp - 0x6f78], esi
cmp dword [edi + 0x30], esi
jbe 0x459b9c
mov esi, dword [ebp - 0x6fa8]
mov dword [ebp - 0x6fb4], esi
lea ecx, [ebp - 0x22d0]
call fcn.00403180
test al, al
je 0x45961c
lea eax, [ebp - 0x22d0]
push eax
push 1
lea ecx, [ebp - 0x2160]
call fcn.00402ea0
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
mov edx, esi
mov ecx, eax
call fcn.00434f80
mov esi, dword [ebp - 0x6fb4]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x459b96
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e44f0
lea ecx, [ebp - 0x2160]
call fcn.00402ea0
push eax
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00402e00
push 0x260
lea ecx, [ebp - 0x4d10]
call fcn.00409ba0
push 1
lea ecx, [ebp - 0x20c0]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x4d10]
call fcn.00401130
push 3
lea ecx, [ebp - 0x20c0]
mov byte [ebp - 4], 0x76
call fcn.00403ed0
lea ecx, [ebp - 0x4d10]
call fcn.00401270
test al, al
je 0x459b68
nop
push 1
lea ecx, [ebp - 0x4d10]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x201c]
call fcn.00402c10
push 0x4e452c
lea ecx, [ebp - 0x201c]
call fcn.00402c80
test al, al
je 0x45970e
push 0
push 1
push 1
push 0
push 0x4e453c
lea ecx, [ebp - 0x201c]
call fcn.00403fc0
cmp eax, 1
jne 0x459b55
inc dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x4d10]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4550
push 1
call fcn.004012d0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x201c]
call fcn.00402e00
push 0x100
lea ecx, [ebp - 0x201c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2548]
call fcn.00410270
test al, al
je 0x459b55
lea eax, [ebp - 0x1ff4]
push eax
push 0x4ceeac
push 0x4e4578
lea ecx, [ebp - 0x2548]
call fcn.00410b60
test eax, eax
je 0x459927
push 0
push 1
push 1
push 0
push 0x4e458c
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x459927
push eax
push 1
push 1
push eax
push 0x4e45ac
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x459927
push 0x4e45c8
lea ecx, [ebp - 0x1ff4]
call fcn.00402c50
test al, al
jne 0x459927
push 0
push 1
push 1
push 0
push 0x4e45e0
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x459927
push eax
push 1
push 1
push eax
push 0x4e45fc
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x459927
push eax
push 0x4e4614
lea ecx, [ebp - 0x1ff4]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x459927
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff4]
call fcn.00402ea0
push eax
mov ecx, esi
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e4650
push 0
push 0x6f
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x459927
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x201c]
call fcn.00402ea0
push eax
push 0x4e4578
push 0x6f
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
lea ecx, [ebp - 0x201c]
call fcn.00402ea0
push eax
push 0x4e3d2c
mov ecx, esi
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x1ff4]
call fcn.00402ea0
push eax
push 0x4e4698
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea eax, [ebp - 0x2b04]
mov dword [ebp - 0x6f50], 0
push eax
push 0x4ceeac
xorps xmm0, xmm0
lea ecx, [ebp - 0x2548]
push 0x4e46b8
movups xmmword [ebp - 0x6f60], xmm0
call fcn.00410980
test al, al
je 0x459b55
lea eax, [ebp - 0x2b04]
push eax
lea eax, [ebp - 0x6f60]
push eax
lea ecx, [ebp - 0x2548]
call fcn.004110e0
test al, al
je 0x459b55
lea eax, [ebp - 0x1ff4]
push eax
lea eax, [ebp - 0x6f60]
push eax
lea ecx, [ebp - 0x2548]
call fcn.00410af0
test eax, eax
je 0x459b34
push 0
push 1
push 1
push 0
push 0x4e458c
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x459b55
push eax
push 1
push 1
push eax
push 0x4e46e4
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x459b55
push eax
push 1
push 1
push eax
push 0x4e45ac
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x459b55
push eax
push 1
push 1
push eax
push 0x4e4708
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x459b55
push eax
push 1
push 1
push eax
push 0x4e45fc
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x459b55
push eax
push 0x4e4724
lea ecx, [ebp - 0x1ff4]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x459b34
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff4]
call fcn.00402ea0
push eax
mov ecx, esi
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e4750
push 0
push 0x6f
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x459b34
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x201c]
call fcn.00402ea0
push eax
push 0x4e46b8
push 0x6f
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
lea ecx, [ebp - 0x201c]
call fcn.00402ea0
push eax
push 0x4e3d2c
mov ecx, esi
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x1ff4]
call fcn.00402ea0
push eax
push 0x4e476c
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea eax, [ebp - 0x2b04]
push eax
lea eax, [ebp - 0x6f60]
push eax
lea ecx, [ebp - 0x2548]
call fcn.004110e0
test al, al
jne 0x459980
lea ecx, [ebp - 0x4d10]
call fcn.00401230
test al, al
jne 0x4596c0
lea ecx, [ebp - 0x4d10]
mov byte [ebp - 4], 0x75
call fcn.00401180
mov eax, dword [ebp - 0x6f78]
add esi, 0xc
inc eax
mov dword [ebp - 0x6fb4], esi
mov dword [ebp - 0x6f78], eax
cmp eax, dword [edi + 0x30]
jb 0x4595d0
mov esi, dword [ebp - 0x6f8c]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45bc0c
test esi, esi
jne 0x459bd4
lea ecx, [ebp - 0x22d0]
call fcn.00403180
test al, al
je 0x459bd4
push esi
push 0x4e4798
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
jmp 0x45bc0c
push 0
push 0x4e47e8
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x459f5f
mov esi, dword [ebp - 0x6fa8]
mov dword [ebp - 0x6f78], esi
mov ecx, edi
call fcn.00472640
test al, al
jne 0x459f5f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e44f0
lea ecx, [ebp - 0x2160]
call fcn.00402ea0
push eax
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00402e00
push 0x260
lea ecx, [ebp - 0x51d0]
call fcn.00409ba0
push 1
lea ecx, [ebp - 0x20c0]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x51d0]
call fcn.00401130
push 3
lea ecx, [ebp - 0x20c0]
mov byte [ebp - 4], 0x77
call fcn.00403ed0
lea ecx, [ebp - 0x51d0]
call fcn.00401270
test al, al
je 0x459f31
nop dword [eax]
push 1
lea ecx, [ebp - 0x51d0]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x201c]
call fcn.00402c10
push 0x4e452c
lea ecx, [ebp - 0x201c]
call fcn.00402c80
test al, al
je 0x459cfe
push 0
push 1
push 1
push 0
push 0x4e453c
lea ecx, [ebp - 0x201c]
call fcn.00403fc0
cmp eax, 1
jne 0x459f1e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4550
push 1
lea ecx, [ebp - 0x51d0]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x201c]
call fcn.00402e00
push 0x100
lea ecx, [ebp - 0x201c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2548]
call fcn.00410270
test al, al
je 0x459f1e
lea eax, [ebp - 0x1ff4]
push eax
push 0x4ceeac
push 0x4e4828
lea ecx, [ebp - 0x2548]
call fcn.00410b60
test eax, eax
je 0x459f1e
push 0
push 1
push 1
push 0
push 0x4e458c
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x459f1e
push eax
push 1
push 1
push eax
push 0x4e46e4
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x459f1e
push eax
push 1
push 1
push eax
push 0x4e45ac
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x459f1e
push eax
push 1
push 1
push eax
push 0x4e4708
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x459f1e
push eax
push 1
push 1
push eax
push 0x4e45fc
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x459f1e
push eax
push 0x4e4898
lea ecx, [ebp - 0x1ff4]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x459f1e
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff4]
call fcn.00402ea0
push eax
mov ecx, esi
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e48d8
push 0
push 0x70
push dword [eax + 0xa8]
call fcn.00445530
mov esi, eax
cmp esi, 0xffffffff
je 0x459f18
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x201c]
call fcn.00402ea0
push eax
push 0x4e4908
push 0x70
push esi
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
lea ecx, [ebp - 0x201c]
call fcn.00402ea0
mov esi, dword [ebp - 0x6f78]
mov ecx, esi
push eax
push 0x4e3d2c
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x1ff4]
call fcn.00402ea0
push eax
push 0x4e4968
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
jmp 0x459f1e
mov esi, dword [ebp - 0x6f78]
lea ecx, [ebp - 0x51d0]
call fcn.00401230
test al, al
jne 0x459cb0
lea ecx, [ebp - 0x51d0]
mov byte [ebp - 4], 0x75
call fcn.00401180
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [edi + 0x30]
jb 0x459c06
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45bc0c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e49b0
lea ecx, [edi + 0x33c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402e00
push 0
push 0x4e49fc
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x45a570
mov esi, dword [ebp - 0x6fa8]
mov dword [ebp - 0x6f78], esi
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45a570
push 0xc
lea ecx, [ebp - 0x2744]
call fcn.00401970
lea ecx, [ebp - 0x2744]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x27bc]
mov byte [ebp - 4], 0x78
call fcn.00401970
lea ecx, [ebp - 0x27bc]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2738]
mov byte [ebp - 4], 0x79
call fcn.00401970
lea ecx, [ebp - 0x2738]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x26d0]
mov byte [ebp - 4], 0x7a
call fcn.00401970
lea ecx, [ebp - 0x26d0]
call fcn.00402b40
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e44f0
lea ecx, [ebp - 0x2160]
mov byte [ebp - 4], 0x7b
call fcn.00402ea0
push eax
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00402e00
push 0x260
lea ecx, [ebp - 0x3a10]
call fcn.00409ba0
push 1
lea ecx, [ebp - 0x20c0]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x3a10]
call fcn.00401130
push 3
lea ecx, [ebp - 0x20c0]
mov byte [ebp - 4], 0x7c
call fcn.00403ed0
lea ecx, [ebp - 0x3a10]
call fcn.00401270
test al, al
je 0x45a516
push 1
lea ecx, [ebp - 0x3a10]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x201c]
call fcn.00402c10
push 0x4e452c
lea ecx, [ebp - 0x201c]
call fcn.00402c80
test al, al
je 0x45a131
push 0
push 1
push 1
push 0
push 0x4e453c
lea ecx, [ebp - 0x201c]
call fcn.00403fc0
cmp eax, 1
jne 0x45a503
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4550
push 1
lea ecx, [ebp - 0x3a10]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x201c]
call fcn.00402e00
push 0x100
lea ecx, [ebp - 0x201c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2548]
call fcn.00410270
test al, al
je 0x45a503
lea eax, [ebp - 0x2af0]
mov dword [ebp - 0x6f64], 0
push eax
push 0x4ceeac
xorps xmm0, xmm0
lea ecx, [ebp - 0x2548]
push 0x4e4a30
movups xmmword [ebp - 0x6f74], xmm0
call fcn.00410980
test al, al
je 0x45a503
lea eax, [ebp - 0x2af0]
push eax
lea eax, [ebp - 0x6f74]
push eax
lea ecx, [ebp - 0x2548]
call fcn.00410d20
test al, al
je 0x45a503
nop word [eax + eax]
lea eax, [ebp - 0x2744]
push eax
lea eax, [ebp - 0x6f74]
push eax
lea ecx, [ebp - 0x2548]
call fcn.00410ab0
test al, al
je 0x45a4e2
lea ecx, [ebp - 0x2744]
call fcn.00402ea0
lea ecx, [ebp - 0x1f8c]
mov esi, eax
call fcn.00402ea0
mov edx, esi
mov ecx, eax
call fcn.00409360
test al, al
jne 0x45a4dc
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4a5c
lea ecx, [ebp - 0x2744]
call fcn.00402ea0
push eax
push 0x4e4a80
lea ecx, [ebp - 0x2738]
call fcn.00402e00
lea eax, [ebp - 0x27bc]
push eax
push 0x4ceeac
lea ecx, [ebp - 0x2738]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2548]
call fcn.00410b60
test eax, eax
je 0x45a4dc
lea ecx, [ebp - 0x27bc]
call fcn.00402ea0
lea ecx, [ebp - 0x1f8c]
mov esi, eax
call fcn.00402ea0
mov edx, esi
mov ecx, eax
call fcn.00409360
test al, al
jne 0x45a4dc
push 0
push 0x4e3a8c
lea ecx, [ebp - 0x27bc]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x45a4dc
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4ab0
lea ecx, [ebp - 0x2744]
call fcn.00402ea0
push eax
push 0x4e4a80
lea ecx, [ebp - 0x2738]
call fcn.00402e00
lea eax, [ebp - 0x26d0]
push eax
push 0x4ceeac
lea ecx, [ebp - 0x2738]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2548]
call fcn.00410b60
test eax, eax
je 0x45a38c
push 0
push 1
push 1
push 5
push 0x4cd6ec
lea ecx, [ebp - 0x26d0]
call fcn.00403fc0
test eax, eax
jne 0x45a38c
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4e4ac0
push 1
lea ecx, [ebp - 0x3a10]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x26d0]
call fcn.00404550
lea ecx, [ebp - 0x26d0]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
je 0x45a4dc
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2744]
call fcn.00402ea0
push eax
push 0x4e4a80
lea ecx, [ebp - 0x2738]
call fcn.00402e00
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x26d0]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x27bc]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0
push 0x71
push dword [eax + 0xa8]
call fcn.00445530
mov esi, eax
cmp esi, 0xffffffff
je 0x45a4dc
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x26d0]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
push 0
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x201c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2738]
call fcn.00402ea0
push eax
push 0x71
push esi
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0x4e4664
lea ecx, [ebp - 0x26d0]
call fcn.00402ea0
mov esi, dword [ebp - 0x6f78]
mov ecx, esi
push eax
push 0x4e3310
call fcn.00402ea0
push eax
push 0x4e4adc
lea ecx, [ebp - 0x2744]
call fcn.00402ea0
push eax
push 0x4d1138
lea ecx, [ebp - 0x27bc]
call fcn.00402ea0
push eax
push 0x4e4b00
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
jmp 0x45a4e2
mov esi, dword [ebp - 0x6f78]
lea eax, [ebp - 0x2af0]
push eax
lea eax, [ebp - 0x6f74]
push eax
lea ecx, [ebp - 0x2548]
call fcn.00410d20
test al, al
jne 0x45a1f0
lea ecx, [ebp - 0x3a10]
call fcn.00401230
test al, al
jne 0x45a0e3
lea ecx, [ebp - 0x3a10]
call fcn.00401180
lea ecx, [ebp - 0x26d0]
call fcn.00402ce0
lea ecx, [ebp - 0x2738]
call fcn.00402ce0
lea ecx, [ebp - 0x27bc]
call fcn.00402ce0
lea ecx, [ebp - 0x2744]
mov byte [ebp - 4], 0x75
call fcn.00402ce0
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [edi + 0x30]
jb 0x459fd0
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45bc0c
push 0
push 0x4e4b30
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
lea ecx, [ebp - 0x6df4]
call fcn.0046ce40
mov byte [ebp - 4], 0x7d
lea ecx, [ebp - 0x6dcc]
mov eax, dword [edi + 8]
push 0x4e4b80
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6df4], eax
lea eax, [ebp - 0x21e0]
mov dword [ebp - 0x6ddc], eax
lea eax, [edi + 0x164]
mov dword [ebp - 0x6dd8], eax
lea eax, [ebp - 0x1fc8]
mov dword [ebp - 0x6df0], 0x72
mov dword [ebp - 0x6dd4], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0x6dd0], eax
call fcn.00402c10
push 0xc
lea ecx, [ebp - 0x2284]
call fcn.00401970
lea ecx, [ebp - 0x2284]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2248]
mov byte [ebp - 4], 0x7e
call fcn.00401970
lea ecx, [ebp - 0x2248]
call fcn.00402b40
mov ecx, edi
mov byte [ebp - 4], 0x7f
call fcn.00472640
test al, al
jne 0x45bbeb
xor esi, esi
mov dword [ebp - 0x6f78], esi
cmp dword [edi + 0x30], esi
jbe 0x45a7e7
nop
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45a7e7
push esi
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402d60
cmp eax, 3
jl 0x45a7d7
lea eax, [ebp - 0x6dec]
push eax
push 1
lea ecx, [ebp - 0x2160]
call fcn.00402ea0
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
mov edx, esi
mov ecx, eax
call fcn.00434f80
mov esi, dword [ebp - 0x6f78]
test al, al
je 0x45a7d7
push esi
lea ecx, [edi + 0x114]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x250c]
mov dword [ebp - 0x6de0], eax
call fcn.00402ea0
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2284]
call fcn.00402e00
lea ecx, [ebp - 0x2284]
call fcn.00402ea0
mov ecx, eax
call fcn.0040fba0
test al, al
je 0x45a7d7
lea ecx, [ebp - 0x2284]
call fcn.00402ea0
push eax
lea eax, [ebp - 0x6df4]
mov ecx, edi
push eax
call fcn.00451680
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45a7e7
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25bc]
call fcn.00402ea0
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2284]
call fcn.00402e00
lea ecx, [ebp - 0x2284]
call fcn.00402ea0
mov ecx, eax
call fcn.0040fba0
test al, al
je 0x45a7d7
push 0
lea ecx, [ebp - 0x2284]
call fcn.00403110
lea ecx, [ebp - 0x2284]
call fcn.00402ea0
push eax
lea eax, [ebp - 0x6df4]
mov ecx, edi
push eax
call fcn.00451680
inc esi
mov dword [ebp - 0x6f78], esi
cmp esi, dword [edi + 0x30]
jb 0x45a650
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45bbeb
lea ecx, [ebp - 0x264c]
mov dword [ebp - 0x6de0], 0x4dd460
call fcn.00402ea0
push eax
lea eax, [ebp - 0x6df4]
mov ecx, edi
push eax
call fcn.00451680
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45bbeb
lea eax, [ebp - 0x2640]
push eax
lea ecx, [ebp - 0x2284]
call fcn.00402c20
push 0
lea ecx, [ebp - 0x2284]
call fcn.00403110
lea ecx, [ebp - 0x2284]
call fcn.00402ea0
push eax
lea eax, [ebp - 0x6df4]
mov ecx, edi
push eax
call fcn.00451680
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45bbeb
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x45a8da
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4ba0
push esi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402e00
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x45a890
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4c30
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402e00
cmp dword [ebp - 0x6fdc], 0
je 0x45a941
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e4c30
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402e00
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x45ab3b
mov eax, dword [ebp - 0x6fa0]
mov esi, dword [ebp - 0x6fa8]
sub eax, esi
mov dword [ebp - 0x6fb4], eax
nop dword [eax]
push 0
push 0x20019
lea ecx, [esi + eax]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x45ab19
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45ab3b
lea eax, [ebp - 0x2248]
push eax
push 0x4ccd04
lea ecx, [ebp - 0x1f74]
call fcn.00407900
test al, al
je 0x45ab19
push 0
push 1
push 1
push 0
push 0x4e4cbc
lea ecx, [ebp - 0x2248]
call fcn.00403fc0
lea ecx, [ebp - 0x2248]
mov dword [ebp - 0x6f80], eax
call fcn.00402d60
mov edx, dword [ebp - 0x6f80]
lea ecx, [edx + 0xa]
cmp eax, ecx
jle 0x45ab19
lea eax, [edx + 0xb]
push eax
lea ecx, [ebp - 0x2248]
call fcn.00403f10
push 3
lea ecx, [ebp - 0x2248]
call fcn.00404ac0
lea ecx, [ebp - 0x2248]
call fcn.00403180
test al, al
jne 0x45ab19
push 0
push 0x4e2514
lea ecx, [ebp - 0x2248]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x45ab19
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2248]
call fcn.00402ea0
push eax
mov ecx, esi
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dead8
push 0
push 0x72
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x45ab19
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402ea0
mov ecx, dword [ebp - 0x6fb4]
push eax
push 0
lea ecx, [esi + ecx]
call fcn.00402ea0
push eax
push 0x72
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
mov ecx, esi
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x2248]
call fcn.00402ea0
push eax
push 0x4e4cd8
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
cmp eax, dword [ebp - 0x6fac]
mov dword [ebp - 0x6f8c], eax
mov eax, dword [ebp - 0x6fb4]
jb 0x45a970
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45bbeb
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x45abba
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4d30
push esi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402e00
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x45ab70
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4d78
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402e00
cmp dword [ebp - 0x6fdc], 0
je 0x45ac21
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e4d78
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402e00
push 0
push 0x4e4dbc
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
mov esi, dword [ebp - 0x6fac]
mov dword [ebp - 0x6fb4], 0
test esi, esi
je 0x45ae6e
mov eax, dword [ebp - 0x6fa0]
mov esi, dword [ebp - 0x6fa8]
sub eax, esi
mov dword [ebp - 0x6f8c], eax
nop
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45ae68
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0x20019
lea ecx, [esi + ecx]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
lea eax, [ebp - 0x1ff4]
push eax
push 0x4dec8c
lea ecx, [ebp - 0x1f74]
call fcn.00407900
test al, al
je 0x45ae4c
lea eax, [ebp - 0x2184]
mov dword [ebp - 0x2184], 0
push eax
push 0x4ded2c
lea ecx, [ebp - 0x1f74]
call fcn.00407a40
test al, al
je 0x45ace1
cmp dword [ebp - 0x2184], 0
jne 0x45ae4c
push 0
push 1
push 1
push 0
push 0x4e458c
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x45ae4c
push eax
push 1
push 1
push eax
push 0x4e45ac
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x45ae4c
push eax
push 1
push 1
push eax
push 0x4e45fc
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x45ae4c
push eax
push 1
push 1
push eax
push 0x4e45e0
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x45ae4c
push eax
push 0x4e4dfc
lea ecx, [ebp - 0x1ff4]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x45ae4c
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff4]
call fcn.00402ea0
push eax
mov ecx, esi
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dec8c
push 0
push 0x74
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x45ae4c
push 0
push 0
push 0
push 0
push 0
push 0x4dec8c
mov ecx, esi
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
lea ecx, [esi + ecx]
call fcn.00402ea0
push eax
push 0x74
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
mov ecx, esi
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x1ff4]
call fcn.00402ea0
push eax
push 0x4e4e38
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x45ac60
mov esi, dword [ebp - 0x6fac]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45bbeb
push 0xc
lea ecx, [ebp - 0x26c4]
call fcn.00401970
lea ecx, [ebp - 0x26c4]
call fcn.00402b40
mov byte [ebp - 4], 0x80
mov dword [ebp - 0x6fb4], 0
test esi, esi
je 0x45b137
mov eax, dword [ebp - 0x6fa0]
mov esi, dword [ebp - 0x6fa8]
sub eax, esi
mov dword [ebp - 0x6f8c], eax
nop
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45b131
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0x20019
lea ecx, [esi + ecx]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
lea eax, [ebp - 0x1ff4]
push eax
push 0x4dedcc
lea ecx, [ebp - 0x1f74]
call fcn.00407900
test al, al
je 0x45b115
lea eax, [ebp - 0x2184]
mov dword [ebp - 0x2184], 0
push eax
push 0x4deecc
lea ecx, [ebp - 0x1f74]
call fcn.00407a40
test al, al
je 0x45af41
cmp dword [ebp - 0x2184], 0
je 0x45b115
push 0
push 1
push 1
push 0
push 0x4e458c
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x45b115
push eax
push 1
push 1
push eax
push 0x4e45ac
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x45b115
push eax
push 1
push 1
push eax
push 0x4e45fc
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x45b115
push eax
push 1
push 1
push eax
push 0x4e45e0
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x45b115
push eax
push 0x4e4dfc
lea ecx, [ebp - 0x1ff4]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x45b115
lea eax, [ebp - 0x26c4]
push eax
push 0x4dee98
lea ecx, [ebp - 0x1f74]
call fcn.00407900
test al, al
je 0x45b115
lea ecx, [ebp - 0x26c4]
call fcn.00403180
test al, al
jne 0x45b115
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4e88
lea ecx, [ebp - 0x26c4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2248]
call fcn.00402e00
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff4]
call fcn.00402ea0
push eax
mov ecx, esi
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2248]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0
push 0x74
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x45b115
push 0
push 0
push 0
push 0
push 0
push 0x4dedcc
mov ecx, esi
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
lea ecx, [esi + ecx]
call fcn.00402ea0
push eax
push 0x74
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
mov ecx, esi
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x1ff4]
call fcn.00402ea0
push eax
push 0x4e4eb0
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x45aec0
mov esi, dword [ebp - 0x6fac]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45bbe0
mov dword [ebp - 0x6fb4], 0
test esi, esi
je 0x45b3b7
mov esi, dword [ebp - 0x6fa8]
mov eax, dword [ebp - 0x6fa0]
sub eax, esi
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f80], eax
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45b3b7
mov eax, dword [ebp - 0x6f80]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f8c], eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x45b395
lea eax, [ebp - 0x2184]
mov dword [ebp - 0x2184], 0
push eax
push 0x4e4f10
lea ecx, [ebp - 0x1f74]
call fcn.00407a40
test al, al
je 0x45b395
cmp dword [ebp - 0x2184], 4
jne 0x45b395
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4f34
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402e00
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x45b395
lea eax, [ebp - 0x6cec]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6fa4], esi
call fcn.00407bb0
test al, al
je 0x45b38f
lea eax, [ebp - 0x1ff4]
push eax
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f74]
call fcn.00407900
test al, al
je 0x45b36d
lea ecx, [ebp - 0x1ff4]
call fcn.00403180
test al, al
jne 0x45b36d
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff4]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4df088
push 0
push 0x74
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
je 0x45b36d
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
call fcn.00402ea0
push eax
push 0x74
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x1ff4]
call fcn.00402ea0
push eax
push 0x4e4f60
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea eax, [ebp - 0x6cec]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.00407bb0
test al, al
jne 0x45b260
mov dword [ebp - 0x6fa4], esi
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x45b172
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45bbe0
push 0
push 0x4e4fa8
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x45b7ab
mov esi, dword [ebp - 0x6fa8]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45b7ab
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e44f0
lea ecx, [ebp - 0x2160]
call fcn.00402ea0
push eax
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00402e00
push 0x260
lea ecx, [ebp - 0x3c70]
call fcn.00409ba0
push 1
lea ecx, [ebp - 0x20c0]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x3c70]
call fcn.00401130
push 3
lea ecx, [ebp - 0x20c0]
mov byte [ebp - 4], 0x81
call fcn.00403ed0
lea ecx, [ebp - 0x3c70]
call fcn.00401270
test al, al
je 0x45b783
nop word [eax + eax]
push 1
lea ecx, [ebp - 0x3c70]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x201c]
call fcn.00402c10
push 0x4e452c
lea ecx, [ebp - 0x201c]
call fcn.00402c80
test al, al
je 0x45b4ee
push 0
push 1
push 1
push 0
push 0x4e453c
lea ecx, [ebp - 0x201c]
call fcn.00403fc0
cmp eax, 1
jne 0x45b770
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4550
push 1
lea ecx, [ebp - 0x3c70]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x201c]
call fcn.00402e00
lea ecx, [ebp - 0x201c]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
je 0x45b62f
push 0
push 0x4e3cf0
push 0x4df18c
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x45b62f
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x201c]
call fcn.00402ea0
push eax
mov ecx, esi
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4df18c
push 0
push 0x73
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x45b770
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x201c]
call fcn.00402ea0
push eax
push 0
push 0x73
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4fe0
lea ecx, [ebp - 0x201c]
call fcn.00402ea0
push eax
push 0x4e3d2c
mov ecx, esi
call fcn.00402ea0
push eax
push 0x4e2684
push 0x4df18c
push 0x4e5018
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
push 0
push 0x4e3cf0
push 0x4df288
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x45b770
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e503c
push 1
lea ecx, [ebp - 0x3c70]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x201c]
call fcn.00402e00
lea ecx, [ebp - 0x201c]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
je 0x45b770
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x201c]
call fcn.00402ea0
push eax
mov ecx, esi
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4df288
push 0
push 0x73
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x45b770
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x201c]
call fcn.00402ea0
push eax
push 0
push 0x73
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4fe0
lea ecx, [ebp - 0x201c]
call fcn.00402ea0
push eax
push 0x4e3d2c
mov ecx, esi
call fcn.00402ea0
push eax
push 0x4e2684
push 0x4df288
push 0x4e5018
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea ecx, [ebp - 0x3c70]
call fcn.00401230
test al, al
jne 0x45b4a0
lea ecx, [ebp - 0x3c70]
mov byte [ebp - 4], 0x80
call fcn.00401180
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [edi + 0x30]
jb 0x45b3f2
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45bbe0
lea eax, [ebp - 0x22d0]
push eax
lea ecx, [ebp - 0x201c]
call fcn.00402c20
push 1
lea ecx, [ebp - 0x201c]
call fcn.00403110
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5058
lea ecx, [ebp - 0x201c]
call fcn.00404260
lea ecx, [ebp - 0x201c]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
je 0x45b991
push 0
push 0x4e3cf0
push 0x4df358
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x45b991
push 0
lea ecx, [ebp - 0x201c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2548]
call fcn.00410270
test al, al
je 0x45b991
lea eax, [ebp - 0x2a2c]
push eax
push 0x4ceeac
push 0x4e4578
lea ecx, [ebp - 0x2548]
call fcn.00410980
test al, al
jne 0x45b8d9
lea eax, [ebp - 0x2a2c]
push eax
push 0x4ceeac
push 0x4e46b8
lea ecx, [ebp - 0x2548]
call fcn.00410980
test al, al
jne 0x45b8d9
lea eax, [ebp - 0x2a2c]
push eax
push 0x4ceeac
push 0x4de910
lea ecx, [ebp - 0x2548]
call fcn.00410980
test al, al
jne 0x45b8d9
lea eax, [ebp - 0x2a2c]
push eax
push 0x4ceeac
push 0x4e4a30
lea ecx, [ebp - 0x2548]
call fcn.00410980
test al, al
je 0x45b991
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x201c]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dd460
push 0x4df358
push 0
push 0x73
push dword [eax + 0xa8]
call fcn.00445530
mov esi, eax
cmp esi, 0xffffffff
je 0x45b991
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dd460
lea ecx, [ebp - 0x201c]
call fcn.00402ea0
push eax
push 0
push 0x73
push esi
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
lea ecx, [ebp - 0x201c]
call fcn.00402ea0
push eax
push 0x4e3d2c
push 0x4e33b4
push 0x4e5080
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
push 0
push 0x4e3cf0
push 0x4df458
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x45bbe0
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x45ba11
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4d30
push esi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402e00
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x45b9c7
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4d30
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402e00
cmp dword [ebp - 0x6fdc], 0
je 0x45ba78
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e4d30
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402e00
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6fb4], 0
jbe 0x45bbbc
mov eax, dword [ebp - 0x6fa8]
sub eax, esi
mov dword [ebp - 0x6f8c], eax
nop dword [eax]
mov ecx, esi
call fcn.00402ea0
xor edx, edx
mov ecx, eax
call fcn.00409360
test al, al
je 0x45bba0
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45bbbc
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
lea ecx, [ecx + esi]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4df458
push 0
push 0x73
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x45bba0
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ecx + esi]
call fcn.00402ea0
push eax
push 0
mov ecx, esi
call fcn.00402ea0
push eax
push 0x73
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4fe0
mov ecx, esi
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4e3d2c
lea ecx, [ecx + esi]
call fcn.00402ea0
push eax
push 0x4e2684
push 0x4df458
push 0x4e5018
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x45baa0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.00420b90
push 1
push 0
push 0
lea ecx, [ebp - 0x21e0]
call fcn.004025d0
lea ecx, [ebp - 0x26c4]
call fcn.00402ce0
lea ecx, [ebp - 0x2248]
call fcn.00402ce0
lea ecx, [ebp - 0x2284]
call fcn.00402ce0
lea ecx, [ebp - 0x6df4]
call fcn.0046ce70
lea ecx, [ebp - 0x2548]
call fcn.0042dd90
lea ecx, [ebp - 0x22d0]
call fcn.00402ce0
lea ecx, [ebp - 0x1ff4]
call fcn.00402ce0
lea ecx, [ebp - 0x2400]
call fcn.00402ce0
lea ecx, [ebp - 0x201c]
call fcn.00402ce0
lea ecx, [ebp - 0x20c0]
mov byte [ebp - 4], 0x46
call fcn.00402ce0
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45efbd
test dword [edi + 0x34], 0x1000
jne 0x45efbd
push 0
push 0x4e50d8
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x4e5118
push dword [eax + 0x38]
call fcn.0041f410
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x28
push dword [eax + 0x34]
call fcn.00421b70
mov eax, dword [edi + 0x30]
xor esi, esi
mov dword [ebp - 0x7020], 0x4e5154
mov dword [ebp - 0x701c], 0x4e5164
mov dword [ebp - 0x7018], 0x4e5174
mov dword [ebp - 0x7014], 0x4e518c
mov dword [ebp - 0x7010], 0x4e51a0
mov dword [ebp - 0x700c], 0x4d5680
mov dword [ebp - 0x7008], 0x4e45c8
mov dword [ebp - 0x7004], 0x4e45fc
mov dword [ebp - 0x6ffc], 0x4df524
mov dword [ebp - 0x6ff8], 0x4df560
mov dword [ebp - 0x6ff4], 0x4df548
mov dword [ebp - 0x6ff0], 0x4d5668
mov dword [ebp - 0x6fec], 0x4df5e4
mov dword [ebp - 0x6fe8], 0x4df664
test eax, eax
je 0x45bd9a
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d5610
push esi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402e00
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x45bd50
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e51b8
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402e00
cmp dword [ebp - 0x6fdc], 0
je 0x45be01
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e51b8
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402e00
push 0xc
lea ecx, [ebp - 0x2004]
call fcn.00401970
lea ecx, [ebp - 0x2004]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x23f4]
mov byte [ebp - 4], 0x82
call fcn.00401970
lea ecx, [ebp - 0x23f4]
call fcn.00402b40
mov byte [ebp - 4], 0x83
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.00420b90
push 0
push 0x4e5210
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
mov esi, dword [ebp - 0x6fac]
mov dword [ebp - 0x6fb4], 0
test esi, esi
je 0x45c093
mov esi, dword [ebp - 0x6fa8]
mov eax, dword [ebp - 0x6fa0]
sub eax, esi
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f80], eax
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45c08d
mov eax, dword [ebp - 0x6f80]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6fcc], eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x45c06b
xor esi, esi
lea eax, [ebp - 0x2004]
push eax
push dword [ebp + esi*4 - 0x6ffc]
lea ecx, [ebp - 0x1f74]
call fcn.00407900
test al, al
je 0x45c055
lea ecx, [ebp - 0x2004]
call fcn.00403180
test al, al
jne 0x45c055
push 0
push 0x4e526c
lea ecx, [ebp - 0x2004]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x45c055
xor eax, eax
mov dword [ebp - 0x6f8c], eax
nop
push 0
push 1
push 1
push 0
push dword [ebp + eax*4 - 0x7020]
lea ecx, [ebp - 0x2004]
call fcn.00403fc0
dec eax
cmp eax, 0x10
jbe 0x45c055
mov eax, dword [ebp - 0x6f8c]
inc eax
mov dword [ebp - 0x6f8c], eax
cmp eax, 8
jb 0x45bf30
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2004]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402ea0
push eax
push dword [ebp + esi*4 - 0x6ffc]
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x1f
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f8c], eax
cmp eax, 0xffffffff
je 0x45c055
push 0
push 0
push 0
lea ecx, [ebp - 0x2004]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
push 0
push dword [ebp + esi*4 - 0x6ffc]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6fcc]
push eax
push 0
call fcn.00402ea0
push eax
push 0x1f
push dword [ebp - 0x6f8c]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
lea ecx, [ebp - 0x2004]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x4e5290
call fcn.00402ea0
push eax
push 0x4e2684
push dword [ebp + esi*4 - 0x6ffc]
lea ecx, [ebp - 0x1f80]
push 0x4e32c0
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
inc esi
cmp esi, 6
jb 0x45bed1
mov dword [ebp - 0x6fa4], esi
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x45be90
mov esi, dword [ebp - 0x6fac]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45efa3
push 0x18
lea ecx, [ebp - 0x2694]
call fcn.00401e30
lea ecx, [ebp - 0x2694]
call fcn.004053a0
mov byte [ebp - 4], 0x84
mov dword [ebp - 0x6fb4], 0
test esi, esi
je 0x45c386
mov esi, dword [ebp - 0x6fa8]
mov eax, dword [ebp - 0x6fa0]
sub eax, esi
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f80], eax
nop word [eax + eax]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45c386
mov eax, dword [ebp - 0x6f80]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6fcc], eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
lea ecx, [ebp - 0x1f74]
call fcn.00405560
test eax, eax
je 0x45c364
lea eax, [ebp - 0x2004]
push eax
push 0x4d572c
lea ecx, [ebp - 0x1f74]
call fcn.00407900
test al, al
je 0x45c364
push 1
push 0x4ccce8
lea ecx, [ebp - 0x2004]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2694]
call fcn.004055c0
xor esi, esi
lea ecx, [ebp - 0x2694]
mov dword [ebp - 0x6fa4], esi
call fcn.00405560
test eax, eax
je 0x45c35e
push esi
lea ecx, [ebp - 0x2694]
call fcn.00405550
push eax
lea ecx, [ebp - 0x2004]
call fcn.00402c10
lea ecx, [ebp - 0x2004]
call fcn.00403180
test al, al
jne 0x45c344
xor eax, eax
mov dl, 1
mov dword [ebp - 0x6f8c], eax
push 0
push 1
push 1
push 0
push dword [ebp + eax*4 - 0x7020]
lea ecx, [ebp - 0x2004]
mov byte [ebp - 0x6f81], dl
call fcn.00403fc0
dec eax
lea ecx, [ebp - 0x2004]
cmp eax, 0x10
jbe 0x45c330
push 0
push 0x4e526c
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
movzx ecx, byte [ebp - 0x6f81]
xor edx, edx
test al, al
cmove edx, ecx
test dl, dl
je 0x45c344
mov eax, dword [ebp - 0x6f8c]
inc eax
mov dword [ebp - 0x6f8c], eax
cmp eax, 7
jb 0x45c1c7
test dl, dl
je 0x45c344
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2004]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4d572c
push 1
push 0x1f
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f8c], eax
cmp eax, 0xffffffff
je 0x45c344
push 0
push 0
lea ecx, [ebp - 0x2004]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2004]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
push 0
push 0x4d572c
call fcn.00402ea0
mov ecx, dword [ebp - 0x6fcc]
push eax
push 0
call fcn.00402ea0
push eax
push 0x1f
push dword [ebp - 0x6f8c]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
lea ecx, [ebp - 0x2004]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x4e5290
call fcn.00402ea0
push eax
push 0x4e2684
push 0x4d572c
push 0x4e32c0
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
jmp 0x45c344
call fcn.00402ea0
push 0
push 0x4e526c
push eax
mov ecx, edi
call fcn.0046e160
lea ecx, [ebp - 0x2694]
inc esi
call fcn.00405560
cmp esi, eax
jb 0x45c192
mov dword [ebp - 0x6fa4], esi
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x45c0f0
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45ef98
push 4
lea ecx, [ebp - 0x1fd8]
call fcn.00405970
lea ecx, [ebp - 0x1fd8]
call fcn.00406240
push 4
lea ecx, [ebp - 0x2078]
mov byte [ebp - 4], 0x85
call fcn.00405970
lea ecx, [ebp - 0x2078]
call fcn.00406240
mov byte [ebp - 4], 0x86
xor esi, esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x45c432
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d5ab8
push esi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402e00
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x45c3e8
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e52a8
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402e00
cmp dword [ebp - 0x6fdc], 0
je 0x45c499
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e52a8
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402e00
push 0xc
lea ecx, [ebp - 0x20fc]
call fcn.00401970
lea ecx, [ebp - 0x20fc]
call fcn.00402b40
push 0
push 0x4e5310
lea ecx, [ebp - 0x1fc8]
mov byte [ebp - 4], 0x87
call fcn.0040e560
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6fb4], 0
jbe 0x45c804
mov esi, dword [ebp - 0x6fa8]
mov eax, dword [ebp - 0x6fa0]
sub eax, esi
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f80], eax
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45c804
mov eax, dword [ebp - 0x6f80]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6fcc], eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x45c7e2
lea eax, [ebp - 0x6cec]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6fa4], esi
call fcn.00407b30
test al, al
je 0x45c7dc
nop word [eax + eax]
mov ecx, dword [ebp - 0x6fcc]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
push 0x4cccfc
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402e00
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1fd8]
call fcn.00407750
test al, al
je 0x45c7ba
lea eax, [ebp - 0x20fc]
push eax
push 0x4d145c
lea ecx, [ebp - 0x1fd8]
call fcn.00407900
push 0
lea ecx, [ebp - 0x20fc]
call fcn.00402cd0
cmp word [eax], 0x40
jne 0x45c627
push 0
lea ecx, [ebp - 0x20fc]
call fcn.00402ea0
push eax
push 0x80
lea ecx, [ebp - 0x20fc]
call fcn.004033e0
push 0
push 0x80
lea ecx, [ebp - 0x20fc]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x20fc]
call fcn.00402ea0
push eax
call dword [0x4ad48c]
lea eax, [ebp - 0x2004]
push eax
push 0x4d79c0
lea ecx, [ebp - 0x1fd8]
call fcn.00407900
lea ecx, [ebp - 0x20fc]
call fcn.00403180
test al, al
je 0x45c660
lea ecx, [ebp - 0x2004]
call fcn.00403180
test al, al
jne 0x45c7ba
push 0
push 0x4e5364
lea ecx, [ebp - 0x2004]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x45c7ba
xor eax, eax
mov dword [ebp - 0x6f8c], eax
nop word [eax + eax]
push 0
push 1
push 1
push 0
push dword [ebp + eax*4 - 0x7020]
lea ecx, [ebp - 0x2004]
call fcn.00403fc0
dec eax
cmp eax, 0x10
jbe 0x45c7ba
mov eax, dword [ebp - 0x6f8c]
inc eax
mov dword [ebp - 0x6f8c], eax
cmp eax, 7
jb 0x45c690
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2004]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x20fc]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x20
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f8c], eax
cmp eax, 0xffffffff
je 0x45c7ba
push 0
push 0
push 0
lea ecx, [ebp - 0x2004]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
push 0
push 0
call fcn.00402ea0
push eax
push 0
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
push 0x20
push dword [ebp - 0x6f8c]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
lea ecx, [ebp - 0x2004]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x4e5290
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x20fc]
call fcn.00402ea0
push eax
push 0x4e32c0
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea eax, [ebp - 0x6cec]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.00407b30
test al, al
jne 0x45c560
mov dword [ebp - 0x6fa4], esi
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x45c4f8
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45ef77
push 0
push 0x4e538c
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
push 0xc
lea ecx, [ebp - 0x20a8]
call fcn.00401970
lea ecx, [ebp - 0x20a8]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x23a0]
mov byte [ebp - 4], 0x88
call fcn.00401970
lea ecx, [ebp - 0x23a0]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x20d8]
mov byte [ebp - 4], 0x89
call fcn.00401970
lea ecx, [ebp - 0x20d8]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2210]
mov byte [ebp - 4], 0x8a
call fcn.00401970
lea ecx, [ebp - 0x2210]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x23ac]
mov byte [ebp - 4], 0x8b
call fcn.00401970
lea ecx, [ebp - 0x23ac]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x20b4]
mov byte [ebp - 4], 0x8c
call fcn.00401970
lea ecx, [ebp - 0x20b4]
call fcn.00402b40
push 0xfc8
lea ecx, [ebp - 0x68b8]
mov byte [ebp - 4], 0x8d
call fcn.0040b4b0
lea ecx, [ebp - 0x68b8]
call fcn.004095f0
mov byte [ebp - 4], 0x8e
xor esi, esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x45c951
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dfa70
push esi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402e00
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x45c907
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dfd40
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402e00
cmp dword [ebp - 0x6fdc], 0
je 0x45c9b8
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4dfd40
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402e00
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x45ced0
mov esi, dword [ebp - 0x6fa8]
mov eax, dword [ebp - 0x6fa0]
sub eax, esi
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f80], eax
nop dword [eax]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45ced0
mov ecx, dword [ebp - 0x6f80]
push 1
lea ecx, [esi + ecx]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402db0
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x45ceae
lea eax, [ebp - 0x6cec]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6fa4], esi
call fcn.00407bb0
test al, al
je 0x45cea8
mov ecx, dword [ebp - 0x6cec]
call fcn.00408d80
test al, al
je 0x45ce86
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
lea ecx, [edi + 0x33c]
push 0x4e53cc
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00402e00
lea ecx, [ebp - 0x20b4]
call fcn.00402ea0
xor edx, edx
mov ecx, eax
call fcn.00409360
test al, al
jne 0x45ce86
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00402e00
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x20b4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x23a0]
call fcn.00403fc0
test eax, eax
jne 0x45ce86
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x23a0]
call fcn.00404260
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x23ac]
call fcn.00402c10
lea eax, [ebp - 0x20a8]
mov ecx, edi
push eax
lea eax, [ebp - 0x20d8]
push eax
lea eax, [ebp - 0x23ac]
push eax
call fcn.0046cf60
lea ecx, [ebp - 0x20d8]
call fcn.00403180
test al, al
je 0x45cb8e
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x20d8]
call fcn.00402c10
push 0
push 0x4e53e4
lea ecx, [ebp - 0x20d8]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x45ce86
push 0
push 1
push 1
push 0
push 0x4e53f8
lea ecx, [ebp - 0x20d8]
call fcn.00403fc0
cmp eax, 1
je 0x45ce86
push 0
push 1
push 1
push 0
push 0x4e5414
lea ecx, [ebp - 0x20d8]
call fcn.00403fc0
cmp eax, 1
je 0x45ce86
push 0
push 1
push 1
push 0
push 0x4ccd04
lea ecx, [ebp - 0x20d8]
call fcn.00403fc0
cmp eax, 1
je 0x45ce86
lea ecx, [ebp - 0x20a8]
call fcn.00403180
lea ecx, [ebp - 0x20a8]
test al, al
je 0x45cc34
push 0x4e5438
call fcn.00402c10
jmp 0x45cc54
push 0
push 0
push 0x4ccd04
push 0x4cd600
call fcn.004047c0
push 0
lea ecx, [ebp - 0x20a8]
call fcn.004032b0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f8c]
push 0x4d0b08
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x213c]
call fcn.00402e00
push 0
lea ecx, [ebp - 0x213c]
call fcn.00402ea0
push eax
lea eax, [ebp - 0x20a8]
mov ecx, edi
push eax
call fcn.0046e890
lea ecx, [ebp - 0x20a8]
call fcn.00402ea0
push eax
push 0
call dword [0x4ad814]
test eax, eax
jne 0x45ce86
lea ecx, [ebp - 0x20a8]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x68b8]
call fcn.00409790
test al, al
je 0x45cd84
push 0x4ccd04
push str.CompanyName
lea ecx, [ebp - 0x68b8]
call fcn.004096a0
push eax
lea ecx, [ebp - 0x2210]
call fcn.00402c10
push 0
push 1
push 1
push 0
push str.Microsoft
lea ecx, [ebp - 0x2210]
call fcn.00403fc0
cmp eax, 1
je 0x45ce86
push 0
push 1
push 1
push 0
push 0x4e5494
lea ecx, [ebp - 0x2210]
call fcn.00403fc0
cmp eax, 1
je 0x45ce86
push 0
push 1
push 1
push 0
push 0x4e54b0
lea ecx, [ebp - 0x2210]
call fcn.00403fc0
cmp eax, 1
je 0x45ce86
push 0
push 1
push 1
push 0
push 0x4d7a38
lea ecx, [ebp - 0x2210]
call fcn.00403fc0
cmp eax, 1
je 0x45ce86
push 0
lea ecx, [ebp - 0x20a8]
call fcn.00402ea0
push eax
push 0
push 1
lea ecx, [ebp - 0x20a8]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x20d8]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x21
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
je 0x45ce86
mov ecx, dword [ebp - 0x6f78]
push 0
push dword [ebp - 0x6cec]
push 0
push 0
push 0
push 0
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x20a8]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
push 0x21
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
lea ecx, [ebp - 0x20a8]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x4e54d8
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x20d8]
call fcn.00402ea0
push eax
push 0x4e32c0
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea eax, [ebp - 0x6cec]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.00407bb0
test al, al
jne 0x45ca64
mov dword [ebp - 0x6fa4], esi
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x45c9f0
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45ef2a
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x45cf4a
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
nop word [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dd598
push esi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402e00
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x45cf00
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dd5f0
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402e00
cmp dword [ebp - 0x6fdc], 0
je 0x45cfb1
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4dd5f0
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402e00
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6ff8], 0x4e54f0
mov dword [ebp - 0x6ff4], 0x4e5530
mov dword [ebp - 0x6ff0], 0x4e5550
mov dword [ebp - 0x6fec], 0x4e556c
mov dword [ebp - 0x6fe8], 0x4e5588
mov dword [ebp - 0x6fb4], 0
jbe 0x45d5b3
mov ecx, dword [ebp - 0x6fa8]
mov eax, esi
sub eax, ecx
mov dword [ebp - 0x6f78], ecx
mov dword [ebp - 0x6f80], eax
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45d5b3
xor esi, esi
mov dword [ebp - 0x6fa4], esi
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45d593
mov ecx, dword [ebp - 0x6f80]
add ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + esi*4 - 0x6ff8]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402e00
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x45d583
lea eax, [ebp - 0x6cec]
mov dword [ebp - 0x6f8c], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.00407b30
test al, al
je 0x45d583
mov esi, dword [ebp - 0x6f78]
mov ecx, dword [ebp - 0x6cec]
call fcn.00408d80
test al, al
je 0x45d555
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
lea ecx, [edi + 0x33c]
push 0x4e53cc
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00402e00
lea ecx, [ebp - 0x20b4]
call fcn.00402ea0
xor edx, edx
mov ecx, eax
call fcn.00409360
test al, al
jne 0x45d555
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
mov ecx, esi
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00402e00
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x20b4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x23a0]
call fcn.00403fc0
test eax, eax
jne 0x45d555
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x23a0]
call fcn.00404260
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x23ac]
call fcn.00402c10
lea eax, [ebp - 0x20a8]
mov ecx, edi
push eax
lea eax, [ebp - 0x20d8]
push eax
lea eax, [ebp - 0x23ac]
push eax
call fcn.0046cf60
lea ecx, [ebp - 0x20d8]
call fcn.00403180
lea ecx, [ebp - 0x20d8]
test al, al
je 0x45d1eb
push dword [ebp - 0x6cec]
call fcn.00402c10
jmp 0x45d2ab
push 0
push 1
push 1
push 0
push 0x4e53f8
call fcn.00403fc0
cmp eax, 1
je 0x45d555
push 0
push 1
push 1
push 0
push 0x4e5414
lea ecx, [ebp - 0x20d8]
call fcn.00403fc0
cmp eax, 1
je 0x45d555
push 0
push 1
push 1
push 0
push 0x4e559c
lea ecx, [ebp - 0x20d8]
call fcn.00403fc0
cmp eax, 1
je 0x45d555
push 0
push 1
push 1
push 0
push 0x4e55b8
lea ecx, [ebp - 0x20d8]
call fcn.00403fc0
cmp eax, 1
je 0x45d555
push 0
push 1
push 1
push 0
push 0x4e55e0
lea ecx, [ebp - 0x20d8]
call fcn.00403fc0
cmp eax, 1
je 0x45d555
push 0
push 1
push 1
push 0
push 0x4e5600
lea ecx, [ebp - 0x20d8]
call fcn.00403fc0
cmp eax, 1
je 0x45d555
push 0
push 0x4e53e4
lea ecx, [ebp - 0x20d8]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x45d555
lea ecx, [ebp - 0x20a8]
call fcn.00403180
lea ecx, [ebp - 0x20a8]
test al, al
je 0x45d2ee
push 0x4e5438
call fcn.00402c10
jmp 0x45d30e
push 0
push 0
push 0x4ccd04
push 0x4cd600
call fcn.004047c0
push 0
lea ecx, [ebp - 0x20a8]
call fcn.004032b0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f8c]
push 0x4cccfc
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x213c]
call fcn.00402e00
push 0
lea ecx, [ebp - 0x213c]
call fcn.00402ea0
push eax
lea eax, [ebp - 0x20a8]
mov ecx, edi
push eax
call fcn.0046e890
lea ecx, [ebp - 0x20a8]
call fcn.00402ea0
push eax
push 0
call dword [0x4ad814]
test eax, eax
jne 0x45d555
lea ecx, [ebp - 0x20a8]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x68b8]
call fcn.00409790
test al, al
je 0x45d45f
push 0x4ccd04
push str.CompanyName
lea ecx, [ebp - 0x68b8]
call fcn.004096a0
push eax
lea ecx, [ebp - 0x2210]
call fcn.00402c10
push 0
push 1
push 1
push 0
push str.Microsoft
lea ecx, [ebp - 0x2210]
call fcn.00403fc0
cmp eax, 1
je 0x45d555
push 0
push 1
push 1
push 0
push 0x4e5494
lea ecx, [ebp - 0x2210]
call fcn.00403fc0
cmp eax, 1
je 0x45d555
push 0
push 1
push 1
push 0
push 0x4e54b0
lea ecx, [ebp - 0x2210]
call fcn.00403fc0
cmp eax, 1
je 0x45d555
push 0
push 1
push 1
push 0
push 0x4e5630
lea ecx, [ebp - 0x2210]
call fcn.00403fc0
cmp eax, 1
je 0x45d555
push 0
push 1
push 1
push 0
push 0x4d7a38
lea ecx, [ebp - 0x2210]
call fcn.00403fc0
cmp eax, 1
je 0x45d555
push 0
lea ecx, [ebp - 0x20a8]
call fcn.00402ea0
push eax
push 0
push 1
lea ecx, [ebp - 0x20a8]
call fcn.00402ea0
push eax
mov ecx, esi
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x20d8]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x21
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
je 0x45d555
push 0
push dword [ebp - 0x6cec]
mov ecx, esi
push 0
push 0
push 0
push 0
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x20a8]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00402ea0
push eax
push 0x21
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
lea ecx, [ebp - 0x20a8]
call fcn.00402ea0
push eax
push 0x4e54d8
mov ecx, esi
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x20d8]
call fcn.00402ea0
push eax
push 0x4e32c0
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x6cec]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f8c], eax
call fcn.00407b30
test al, al
jne 0x45d0c0
mov esi, dword [ebp - 0x6fa4]
inc esi
mov dword [ebp - 0x6fa4], esi
cmp esi, 5
jb 0x45d027
mov esi, dword [ebp - 0x6fb4]
add dword [ebp - 0x6f78], 0xc
inc esi
mov dword [ebp - 0x6fb4], esi
cmp esi, dword [ebp - 0x6fac]
jb 0x45d010
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45ef2a
push 0
push 0x4e5650
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
lea ecx, [ebp - 0x6e6c]
call fcn.0046ce40
mov byte [ebp - 4], 0x8f
lea ecx, [ebp - 0x6e64]
mov eax, dword [edi + 8]
push 0x4d44fc
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6e6c], eax
mov dword [ebp - 0x6e68], 0x23
call fcn.00402c10
lea eax, [ebp - 0x21e0]
mov dword [ebp - 0x6e54], eax
lea ecx, [ebp - 0x6e44]
lea eax, [edi + 0x164]
mov dword [ebp - 0x6e50], eax
lea eax, [ebp - 0x1fc8]
mov dword [ebp - 0x6e4c], eax
mov eax, dword [edi + 4]
push 0x4d4530
mov dword [ebp - 0x6e48], eax
call fcn.00402c10
push 0xc
lea ecx, [ebp - 0x22c0]
call fcn.00401970
lea ecx, [ebp - 0x22c0]
call fcn.00402b40
xor esi, esi
mov byte [ebp - 4], 0x90
cmp dword [edi + 0x30], esi
jbe 0x45d7bc
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45d7bc
push esi
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402d60
cmp eax, 3
jl 0x45d7b2
push esi
lea ecx, [edi + 0x114]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x250c]
mov dword [ebp - 0x6e58], eax
call fcn.00402ea0
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x22c0]
call fcn.00402e00
lea ecx, [ebp - 0x22c0]
call fcn.00402ea0
mov ecx, eax
call fcn.0040fba0
test al, al
je 0x45d7b2
lea ecx, [ebp - 0x22c0]
call fcn.00402ea0
push eax
lea eax, [ebp - 0x6e6c]
mov ecx, edi
push eax
call fcn.00451680
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45d7bc
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25bc]
call fcn.00402ea0
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x22c0]
call fcn.00402e00
lea ecx, [ebp - 0x22c0]
call fcn.00402ea0
mov ecx, eax
call fcn.0040fba0
test al, al
je 0x45d7b2
push 0
lea ecx, [ebp - 0x22c0]
call fcn.00403110
lea ecx, [ebp - 0x22c0]
call fcn.00402ea0
push eax
lea eax, [ebp - 0x6e6c]
mov ecx, edi
push eax
call fcn.00451680
inc esi
cmp esi, dword [edi + 0x30]
jb 0x45d670
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45ef14
lea ecx, [ebp - 0x264c]
mov dword [ebp - 0x6e58], 0x4dd460
call fcn.00402ea0
push eax
lea eax, [ebp - 0x6e6c]
mov ecx, edi
push eax
call fcn.00451680
mov ecx, edi
call fcn.00472640
lea ecx, [ebp - 0x22c0]
test al, al
jne 0x45ef1a
lea eax, [ebp - 0x2640]
push eax
call fcn.00402c20
push 0
lea ecx, [ebp - 0x22c0]
call fcn.00403110
lea ecx, [ebp - 0x22c0]
call fcn.00402ea0
push eax
lea eax, [ebp - 0x6e6c]
mov ecx, edi
push eax
call fcn.00451680
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45ef14
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x45d8ab
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5698
push esi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402e00
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x45d861
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5720
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402e00
cmp dword [ebp - 0x6fdc], 0
je 0x45d912
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e5720
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402e00
mov edx, dword [ebp - 0x6fac]
test edx, edx
je 0x45daf0
mov eax, dword [ebp - 0x6fa0]
mov esi, dword [ebp - 0x6fa8]
sub eax, esi
mov dword [ebp - 0x6fb4], eax
mov dword [ebp - 0x6f8c], edx
nop word [eax + eax]
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x45dada
lea eax, [ebp - 0x20b4]
push eax
push 0x4ccd04
lea ecx, [ebp - 0x1f74]
call fcn.00407900
test al, al
je 0x45dada
push 0
push 1
push 1
push 0
push 0x4e57a8
lea ecx, [ebp - 0x20b4]
call fcn.00403fc0
lea ecx, [ebp - 0x20b4]
mov dword [ebp - 0x6f80], eax
call fcn.00402d60
mov edx, dword [ebp - 0x6f80]
lea ecx, [edx + 0xc]
cmp eax, ecx
jle 0x45dada
lea eax, [edx + 0xd]
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00403f10
push 3
lea ecx, [ebp - 0x20b4]
call fcn.00404ac0
lea ecx, [ebp - 0x20b4]
call fcn.00403180
test al, al
jne 0x45dada
push 0
push 0x4e25d4
lea ecx, [ebp - 0x20b4]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x45dada
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x20b4]
call fcn.00402ea0
push eax
mov ecx, esi
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dead8
push 1
push 0x23
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x45dada
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402ea0
mov ecx, dword [ebp - 0x6fb4]
push eax
push 0
lea ecx, [esi + ecx]
call fcn.00402ea0
push eax
push 0x23
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
mov ecx, esi
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x20b4]
call fcn.00402ea0
push eax
push 0x4e4cd8
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
sub dword [ebp - 0x6f8c], 1
jne 0x45d940
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45ef14
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x45db6a
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
nop word [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e57c8
push esi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402e00
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x45db20
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5828
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402e00
cmp dword [ebp - 0x6fdc], 0
je 0x45dbd1
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e5828
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402e00
push 0
push 0x4e5888
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
mov esi, dword [ebp - 0x6fac]
mov dword [ebp - 0x6f8c], 0
test esi, esi
je 0x45e0bf
mov esi, dword [ebp - 0x6fa8]
mov eax, dword [ebp - 0x6fa0]
sub eax, esi
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6fb4], eax
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45e0b9
mov eax, dword [edi + 0x30]
cmp eax, 2
jbe 0x45dc3b
add eax, 0xfffffffe
cmp dword [ebp - 0x6f8c], eax
je 0x45e097
mov ecx, dword [ebp - 0x6fb4]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
add ecx, esi
push 0x4e58dc
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402e00
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x45e097
lea eax, [ebp - 0x26d8]
mov dword [ebp - 0x26d8], 0
push eax
push 0x4d55fc
lea ecx, [ebp - 0x1f74]
call fcn.00407a40
test al, al
je 0x45e097
cmp dword [ebp - 0x26d8], 0
je 0x45e097
mov ecx, dword [ebp - 0x6fb4]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e58f8
lea ecx, [esi + ecx]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402e00
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x45e097
lea eax, [ebp - 0x2004]
push eax
push 0x4d5668
lea ecx, [ebp - 0x1f74]
call fcn.00407900
test al, al
je 0x45de8a
lea ecx, [ebp - 0x2004]
call fcn.00403180
test al, al
jne 0x45de8a
push 0
push 0x4e5904
lea ecx, [ebp - 0x2004]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x45de8a
xor esi, esi
push 0
push 1
push 1
push 0
push dword [ebp + esi*4 - 0x7020]
lea ecx, [ebp - 0x2004]
call fcn.00403fc0
dec eax
cmp eax, 0x10
jbe 0x45de84
inc esi
cmp esi, 7
jb 0x45dd78
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2004]
call fcn.00402ea0
mov esi, dword [ebp - 0x6f78]
mov ecx, esi
push eax
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4d5668
push 1
push 0x25
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x45de8a
push 0
push 0
push 0
lea ecx, [ebp - 0x2004]
call fcn.00402ea0
push eax
push 0
push 0x4d5668
mov ecx, esi
call fcn.00402ea0
push eax
push 0
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
push 0x25
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
lea ecx, [ebp - 0x2004]
call fcn.00402ea0
push eax
push 0x4e5290
mov ecx, esi
call fcn.00402ea0
push eax
push 0x4e2684
push 0x4e5928
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
jmp 0x45de8a
mov esi, dword [ebp - 0x6f78]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45e0b9
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d5700
lea ecx, [ebp - 0x1f8c]
call fcn.00404260
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x45e097
lea eax, [ebp - 0x6cec]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6fa4], esi
call fcn.00407bb0
test al, al
je 0x45e091
nop dword [eax + eax]
mov eax, dword [ebp - 0x6cec]
cmp word [eax], 0
je 0x45e06f
push eax
lea ecx, [ebp - 0x2004]
call fcn.00402c10
push 0
push 0x4e5904
lea ecx, [ebp - 0x2004]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x45e08b
xor eax, eax
mov dword [ebp - 0x6f9c], eax
push 0
push 1
push 1
push 0
push dword [ebp + eax*4 - 0x7020]
lea ecx, [ebp - 0x2004]
call fcn.00403fc0
dec eax
cmp eax, 0x10
jbe 0x45e06f
mov eax, dword [ebp - 0x6f9c]
inc eax
mov dword [ebp - 0x6f9c], eax
cmp eax, 7
jb 0x45df56
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2004]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dfff8
push 1
push 0x25
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x45e06f
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2004]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402ea0
push eax
push 0
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
push 0x25
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
lea ecx, [ebp - 0x2004]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x4e5290
call fcn.00402ea0
push eax
push 0x4e2684
push 0x4e5954
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea eax, [ebp - 0x6cec]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.00407bb0
test al, al
jne 0x45df10
mov dword [ebp - 0x6fa4], esi
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x45dc15
mov esi, dword [ebp - 0x6fac]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45ef14
mov dword [ebp - 0x6f8c], 0
test esi, esi
je 0x45e504
mov esi, dword [ebp - 0x6fa8]
mov eax, dword [ebp - 0x6fa0]
sub eax, esi
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f80], eax
nop word [eax + eax]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45e504
mov eax, dword [edi + 0x30]
cmp eax, 2
jbe 0x45e126
add eax, 0xfffffffe
cmp dword [ebp - 0x6f8c], eax
je 0x45e4e2
mov eax, dword [ebp - 0x6f80]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
add eax, esi
push 0
push 0x4e5990
mov ecx, eax
mov dword [ebp - 0x6fb4], eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402e00
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x45e4e2
lea eax, [ebp - 0x26d4]
mov dword [ebp - 0x26d4], 0
push eax
push 0x4d5a78
lea ecx, [ebp - 0x1f74]
call fcn.00407a40
test al, al
je 0x45e4e2
cmp dword [ebp - 0x26d4], 0
je 0x45e4e2
mov ecx, dword [ebp - 0x6fb4]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e59c4
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402e00
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x45e4e2
lea eax, [ebp - 0x6cec]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6fa4], esi
call fcn.00407b30
test al, al
je 0x45e4dc
mov ecx, dword [ebp - 0x6fb4]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
push 0x4e59e0
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402e00
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1fd8]
call fcn.00407750
test al, al
je 0x45e4ba
lea eax, [ebp - 0x20fc]
push eax
push 0x4d145c
lea ecx, [ebp - 0x1fd8]
call fcn.00407900
push 0
lea ecx, [ebp - 0x20fc]
call fcn.00402cd0
cmp word [eax], 0x40
jne 0x45e2fc
push 0
lea ecx, [ebp - 0x20fc]
call fcn.00402ea0
push eax
push 0x80
lea ecx, [ebp - 0x20fc]
call fcn.004033e0
push 0
push 0x80
lea ecx, [ebp - 0x20fc]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x20fc]
call fcn.00402ea0
push eax
call dword [0x4ad48c]
lea eax, [ebp - 0x2004]
push eax
push 0x4d79c0
lea ecx, [ebp - 0x1fd8]
call fcn.00407900
lea ecx, [ebp - 0x20fc]
call fcn.00403180
test al, al
je 0x45e335
lea ecx, [ebp - 0x2004]
call fcn.00403180
test al, al
jne 0x45e4ba
push 0
push 0x4e5904
lea ecx, [ebp - 0x2004]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x45e4d6
xor eax, eax
mov dword [ebp - 0x6f9c], eax
nop
push 0
push 1
push 1
push 0
push dword [ebp + eax*4 - 0x7020]
lea ecx, [ebp - 0x2004]
call fcn.00403fc0
dec eax
cmp eax, 0x10
jbe 0x45e4ba
mov eax, dword [ebp - 0x6f9c]
inc eax
mov dword [ebp - 0x6f9c], eax
cmp eax, 7
jb 0x45e360
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4e88
lea ecx, [ebp - 0x20fc]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00402e00
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2004]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x25
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
je 0x45e4ba
push 0
push 0
push 0
lea ecx, [ebp - 0x2004]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
push 0
push 0
call fcn.00402ea0
push eax
push 0
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
push 0x25
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
lea ecx, [ebp - 0x2004]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x4e5290
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x20fc]
call fcn.00402ea0
push eax
push 0x4e59fc
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea eax, [ebp - 0x6cec]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.00407b30
test al, al
jne 0x45e235
mov dword [ebp - 0x6fa4], esi
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x45e100
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x45e56d
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5a34
push esi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402e00
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x45e523
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5a60
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402e00
cmp dword [ebp - 0x6fdc], 0
je 0x45e5d4
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e5a60
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402e00
push 0xc
lea ecx, [ebp - 0x26b8]
call fcn.00401970
lea ecx, [ebp - 0x26b8]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x25c8]
mov byte [ebp - 4], 0x91
call fcn.00401970
lea ecx, [ebp - 0x25c8]
call fcn.00402b40
push 0
push 0x4e5ba0
lea ecx, [ebp - 0x1fc8]
mov byte [ebp - 4], 0x92
call fcn.0040e560
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x45e9d3
mov esi, dword [ebp - 0x6fa8]
mov eax, dword [ebp - 0x6fa0]
sub eax, esi
mov dword [ebp - 0x6fb4], esi
mov dword [ebp - 0x6f78], eax
nop
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45e9d3
mov eax, dword [edi + 0x30]
cmp eax, 2
jbe 0x45e676
add eax, 0xfffffffe
cmp dword [ebp - 0x6f8c], eax
je 0x45e9b1
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5c00
lea ecx, [esi + ecx]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402e00
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x45e7fa
push 0
push 0x4e5c54
push 0x4e0098
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x45e7fa
lea eax, [ebp - 0x26b8]
push eax
push 0x4e00b0
lea ecx, [ebp - 0x1f74]
call fcn.00407900
lea eax, [ebp - 0x28ac]
push eax
push 0x4e00c8
lea ecx, [ebp - 0x1f74]
call fcn.00407a40
lea ecx, [ebp - 0x26b8]
call fcn.00403180
test al, al
jne 0x45e7fa
cmp dword [ebp - 0x28ac], 0
je 0x45e7fa
push 0
push 0
push 0
push 0
push 0x4e5a90
mov ecx, esi
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e0098
push 1
push 0x24
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x45e7fa
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402ea0
push eax
push 0
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
push 0x24
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e3ac0
push 0x4e5a90
push 0x4e3d2c
mov ecx, esi
call fcn.00402ea0
push eax
push 0x4e2684
push 0x4e0098
push 0x4e5018
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
push 0
push 0x4e5c54
push 0x4e0188
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x45e9b1
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5c78
lea ecx, [esi + ecx]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402e00
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x45e9b1
lea eax, [ebp - 0x25c8]
push eax
push 0x4d21b4
lea ecx, [ebp - 0x1f74]
call fcn.00407900
test al, al
je 0x45e9b1
lea ecx, [ebp - 0x26b8]
call fcn.00403180
test al, al
jne 0x45e9b1
push 0
push 0
push 0x4ccd04
push 0x4cd6e8
lea ecx, [ebp - 0x25c8]
call fcn.004047c0
push 0
push 1
push 1
push 0
push 0x4d21c0
lea ecx, [ebp - 0x25c8]
call fcn.00403fc0
lea ecx, [ebp - 0x25c8]
mov esi, eax
call fcn.00402d60
sub eax, 0xb
cmp esi, eax
mov esi, dword [ebp - 0x6fb4]
je 0x45e9b1
push 0
push 0
push 0
push 0
push 0x4e5b10
mov ecx, esi
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e0188
push 1
push 0x24
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x45e9b1
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402ea0
push eax
push 0
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
push 0x24
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e3ac0
push 0x4e5b10
push 0x4e3d2c
mov ecx, esi
call fcn.00402ea0
push eax
push 0x4e2684
push 0x4e0188
push 0x4e5018
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6fb4], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x45e650
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45eefe
push 0
push 0x4e5c54
push 0x4e0228
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x45eefe
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x45ea6a
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d59e0
push esi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402e00
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x45ea20
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d59e0
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402e00
cmp dword [ebp - 0x6fdc], 0
je 0x45ead1
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4d59e0
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402e00
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6fb4], 0
jbe 0x45ec9a
mov eax, dword [ebp - 0x6fa8]
sub eax, esi
mov dword [ebp - 0x6f8c], eax
mov ecx, esi
call fcn.00402ea0
xor edx, edx
mov ecx, eax
call fcn.00409360
test al, al
je 0x45ec7e
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45ec9a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dff88
mov ecx, esi
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2114]
call fcn.00402e00
lea ecx, [ebp - 0x2114]
call fcn.00402ea0
mov edx, 0x4d55fc
mov ecx, eax
call fcn.00409360
test al, al
jne 0x45ebac
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d77a4
mov ecx, esi
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2114]
call fcn.00402e00
lea ecx, [ebp - 0x2114]
call fcn.00402ea0
xor edx, edx
mov ecx, eax
call fcn.00409360
test al, al
je 0x45ec7e
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
add ecx, esi
push 0x4e5cc0
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e0228
push 1
push 0x24
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x45ec7e
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ecx + esi]
call fcn.00402ea0
push eax
push 0
mov ecx, esi
call fcn.00402ea0
push eax
push 0x24
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0x4e3ac0
push 0x4e5cc0
push 0x4e3d2c
lea ecx, [ecx + esi]
call fcn.00402ea0
push eax
push 0x4e2684
push 0x4e0228
push 0x4e5018
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x45eaf6
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45eefe
push 0
push 0x4e5c54
push 0x4e02ec
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x45eefe
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x45ed2d
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5d68
push esi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402e00
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x45ece3
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5d68
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402e00
cmp dword [ebp - 0x6fdc], 0
je 0x45ed94
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e5d68
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402e00
mov edx, dword [ebp - 0x6fac]
test edx, edx
je 0x45eecf
mov eax, dword [ebp - 0x6fa0]
mov esi, dword [ebp - 0x6fa8]
sub eax, esi
mov dword [ebp - 0x6fb4], eax
mov dword [ebp - 0x6f8c], edx
nop dword [eax]
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1fd8]
call fcn.00407750
test al, al
je 0x45eeb9
lea ecx, [ebp - 0x1fd8]
call fcn.00407c50
cmp eax, 1
jbe 0x45eeb9
push 0
push 0
push 0
push 0
push 0x4e5dd0
mov ecx, esi
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e02ec
push 1
push 0x24
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x45eeb9
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402ea0
mov ecx, dword [ebp - 0x6fb4]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.00402ea0
push eax
push 0x24
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3ac0
push 0x4e5dd0
push 0x4e3d2c
mov ecx, esi
call fcn.00402ea0
push eax
push 0x4e2684
push 0x4e5e40
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
sub dword [ebp - 0x6f8c], 1
jne 0x45edc0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.00420b90
mov ecx, edi
call fcn.0046e570
test al, al
je 0x45eefe
push 1
push 0
push 0
lea ecx, [ebp - 0x21e0]
call fcn.004025d0
lea ecx, [ebp - 0x25c8]
call fcn.00402ce0
lea ecx, [ebp - 0x26b8]
call fcn.00402ce0
lea ecx, [ebp - 0x22c0]
call fcn.00402ce0
lea ecx, [ebp - 0x6e6c]
call fcn.0046ce70
lea ecx, [ebp - 0x68b8]
call fcn.0040b480
lea ecx, [ebp - 0x20b4]
call fcn.00402ce0
lea ecx, [ebp - 0x23ac]
call fcn.00402ce0
lea ecx, [ebp - 0x2210]
call fcn.00402ce0
lea ecx, [ebp - 0x20d8]
call fcn.00402ce0
lea ecx, [ebp - 0x23a0]
call fcn.00402ce0
lea ecx, [ebp - 0x20a8]
call fcn.00402ce0
lea ecx, [ebp - 0x20fc]
call fcn.00402ce0
lea ecx, [ebp - 0x2078]
call fcn.00407780
lea ecx, [ebp - 0x1fd8]
call fcn.00407780
lea ecx, [ebp - 0x2694]
call fcn.004054e0
lea ecx, [ebp - 0x23f4]
call fcn.00402ce0
lea ecx, [ebp - 0x2004]
mov byte [ebp - 4], 0x46
call fcn.00402ce0
mov ecx, edi
call fcn.00472640
test al, al
jne 0x461808
test dword [edi + 0x34], 0x1000
jne 0x461808
push 0
push 0x4e5e94
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x4e5ecc
push dword [eax + 0x38]
call fcn.0041f410
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x2d
push dword [eax + 0x34]
call fcn.00421b70
push 0xc
lea ecx, [ebp - 0x20e4]
call fcn.00401970
lea ecx, [ebp - 0x20e4]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2028]
mov byte [ebp - 4], 0x93
call fcn.00401970
lea ecx, [ebp - 0x2028]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x23e8]
mov byte [ebp - 4], 0x94
call fcn.00401970
lea ecx, [ebp - 0x23e8]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x1fe4]
mov byte [ebp - 4], 0x95
call fcn.00401970
lea ecx, [ebp - 0x1fe4]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x22e8]
mov byte [ebp - 4], 0x96
call fcn.00401970
lea ecx, [ebp - 0x22e8]
call fcn.00402b40
mov byte [ebp - 4], 0x97
lea ecx, [ebp - 0x256c]
xor esi, esi
push 0x24
mov dword [ebp - 0x6f8c], esi
call fcn.0042f010
lea ecx, [ebp - 0x256c]
call fcn.004101c0
mov byte [ebp - 4], 0x98
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.00420b90
push esi
push 0x4e5f00
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
mov dword [ebp - 0x6f78], esi
cmp dword [edi + 0x30], esi
jbe 0x45f70c
mov esi, dword [ebp - 0x6fa8]
mov dword [ebp - 0x6fb4], esi
nop
lea ecx, [ebp - 0x22e8]
call fcn.00403180
test al, al
je 0x45f14c
lea eax, [ebp - 0x22e8]
push eax
push 0
lea ecx, [ebp - 0x2160]
call fcn.00402ea0
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
mov edx, esi
mov ecx, eax
call fcn.00434f80
mov esi, dword [ebp - 0x6fb4]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45f706
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5f4c
lea ecx, [ebp - 0x2160]
call fcn.00402ea0
push eax
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00402e00
push 0x260
lea ecx, [ebp - 0x5430]
call fcn.00409ba0
push 1
lea ecx, [ebp - 0x20e4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x5430]
call fcn.00401130
push 3
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x99
call fcn.00403ed0
lea ecx, [ebp - 0x5430]
call fcn.00401270
test al, al
je 0x45f6d8
nop
push 1
lea ecx, [ebp - 0x5430]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00402c10
push 0x4e452c
lea ecx, [ebp - 0x2028]
call fcn.00402c80
test al, al
je 0x45f23e
push 0
push 1
push 1
push 0
push 0x4e453c
lea ecx, [ebp - 0x2028]
call fcn.00403fc0
cmp eax, 1
jne 0x45f6c5
inc dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x5430]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4550
push 1
call fcn.004012d0
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00402e00
push 0x100
lea ecx, [ebp - 0x2028]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x256c]
call fcn.00410270
test al, al
je 0x45f6c5
lea eax, [ebp - 0x1fe4]
push eax
push 0x4ceeac
push 0x4e4578
lea ecx, [ebp - 0x256c]
call fcn.00410b60
test eax, eax
je 0x45f479
push 0
push 1
push 1
push 0
push 0x4e458c
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x45f479
push eax
push 1
push 1
push eax
push 0x4e45ac
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x45f479
push eax
push 1
push 1
push eax
push 0x4e45fc
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x45f479
push 0x4e45c8
lea ecx, [ebp - 0x1fe4]
call fcn.00402c50
test al, al
jne 0x45f479
push 0
push 1
push 1
push 0
push 0x4e45e0
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x45f479
push eax
push 0x4e5f88
lea ecx, [ebp - 0x1fe4]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x45f479
push 0
push 0x4e5fb4
lea ecx, [ebp - 0x1fe4]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x45f479
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fe4]
call fcn.00402ea0
push eax
mov ecx, esi
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e4650
push 2
push 0x2a
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x45f479
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00402ea0
push eax
push 0x4e4578
push 0x2a
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
lea ecx, [ebp - 0x2028]
call fcn.00402ea0
push eax
push 0x4e3d2c
mov ecx, esi
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x1fe4]
call fcn.00402ea0
push eax
push 0x4e4698
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea eax, [ebp - 0x2adc]
mov dword [ebp - 0x6f14], 0
push eax
push 0x4ceeac
xorps xmm0, xmm0
lea ecx, [ebp - 0x256c]
push 0x4e46b8
movups xmmword [ebp - 0x6f24], xmm0
call fcn.00410980
test al, al
je 0x45f6c5
lea eax, [ebp - 0x2adc]
push eax
lea eax, [ebp - 0x6f24]
push eax
lea ecx, [ebp - 0x256c]
call fcn.004110e0
test al, al
je 0x45f6c5
lea eax, [ebp - 0x1fe4]
push eax
lea eax, [ebp - 0x6f24]
push eax
lea ecx, [ebp - 0x256c]
call fcn.00410af0
test eax, eax
je 0x45f6a4
push 0
push 1
push 1
push 0
push 0x4e458c
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x45f6a4
push eax
push 1
push 1
push eax
push 0x4e45ac
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x45f6a4
push eax
push 1
push 1
push eax
push 0x4e45fc
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x45f6a4
push 0x4e45c8
lea ecx, [ebp - 0x1fe4]
call fcn.00402c50
test al, al
jne 0x45f6a4
push 0
push 1
push 1
push 0
push 0x4e45e0
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x45f6a4
push eax
push 0x4e5f88
lea ecx, [ebp - 0x1fe4]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x45f6a4
push 0
push 0x4e5fb4
lea ecx, [ebp - 0x1fe4]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x45f6a4
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fe4]
call fcn.00402ea0
push eax
mov ecx, esi
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e4750
push 2
push 0x2a
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x45f6a4
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00402ea0
push eax
push 0x4e46b8
push 0x2a
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
lea ecx, [ebp - 0x2028]
call fcn.00402ea0
push eax
push 0x4e3d2c
mov ecx, esi
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x1fe4]
call fcn.00402ea0
push eax
push 0x4e476c
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea eax, [ebp - 0x2adc]
push eax
lea eax, [ebp - 0x6f24]
push eax
lea ecx, [ebp - 0x256c]
call fcn.004110e0
test al, al
jne 0x45f4d2
lea ecx, [ebp - 0x5430]
call fcn.00401230
test al, al
jne 0x45f1f0
lea ecx, [ebp - 0x5430]
mov byte [ebp - 4], 0x98
call fcn.00401180
mov eax, dword [ebp - 0x6f78]
add esi, 0xc
inc eax
mov dword [ebp - 0x6fb4], esi
mov dword [ebp - 0x6f78], eax
cmp eax, dword [edi + 0x30]
jb 0x45f100
mov esi, dword [ebp - 0x6f8c]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x4617c2
test esi, esi
jne 0x45f744
lea ecx, [ebp - 0x22e8]
call fcn.00403180
test al, al
je 0x45f744
push esi
push 0x4e5fe0
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
jmp 0x4617c2
push 0
push 0x4e6038
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x45faf1
mov esi, dword [ebp - 0x6fa8]
mov dword [ebp - 0x6f78], esi
mov ecx, edi
call fcn.00472640
test al, al
jne 0x45faf1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5f4c
lea ecx, [ebp - 0x2160]
call fcn.00402ea0
push eax
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00402e00
push 0x260
lea ecx, [ebp - 0x4f70]
call fcn.00409ba0
push 1
lea ecx, [ebp - 0x20e4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x4f70]
call fcn.00401130
push 3
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x9a
call fcn.00403ed0
lea ecx, [ebp - 0x4f70]
call fcn.00401270
test al, al
je 0x45fac3
nop dword [eax]
push 1
lea ecx, [ebp - 0x4f70]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00402c10
push 0x4e452c
lea ecx, [ebp - 0x2028]
call fcn.00402c80
test al, al
je 0x45f86e
push 0
push 1
push 1
push 0
push 0x4e453c
lea ecx, [ebp - 0x2028]
call fcn.00403fc0
cmp eax, 1
jne 0x45fab0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4550
push 1
lea ecx, [ebp - 0x4f70]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00402e00
push 0x100
lea ecx, [ebp - 0x2028]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x256c]
call fcn.00410270
test al, al
je 0x45fab0
lea eax, [ebp - 0x1fe4]
push eax
push 0x4ceeac
push 0x4e4828
lea ecx, [ebp - 0x256c]
call fcn.00410b60
test eax, eax
je 0x45fab0
push 0
push 1
push 1
push 0
push 0x4e458c
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x45fab0
push eax
push 1
push 1
push eax
push 0x4e46e4
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x45fab0
push eax
push 1
push 1
push eax
push 0x4e45ac
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x45fab0
push eax
push 1
push 1
push eax
push 0x4e45fc
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x45fab0
push eax
push 1
push 1
push eax
push 0x4e4708
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x45fab0
push eax
push 0x4e6078
lea ecx, [ebp - 0x1fe4]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x45fab0
push 0
push 0x4e60a8
lea ecx, [ebp - 0x1fe4]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x45fab0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fe4]
call fcn.00402ea0
push eax
mov ecx, esi
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e48d8
push 2
push 0x2b
push dword [eax + 0xa8]
call fcn.00445530
mov esi, eax
cmp esi, 0xffffffff
je 0x45faaa
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00402ea0
push eax
push 0x4e4908
push 0x2b
push esi
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
lea ecx, [ebp - 0x2028]
call fcn.00402ea0
mov esi, dword [ebp - 0x6f78]
mov ecx, esi
push eax
push 0x4e3d2c
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x1fe4]
call fcn.00402ea0
push eax
push 0x4e4968
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
jmp 0x45fab0
mov esi, dword [ebp - 0x6f78]
lea ecx, [ebp - 0x4f70]
call fcn.00401230
test al, al
jne 0x45f820
lea ecx, [ebp - 0x4f70]
mov byte [ebp - 4], 0x98
call fcn.00401180
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [edi + 0x30]
jb 0x45f776
mov ecx, edi
call fcn.00472640
test al, al
jne 0x4617c2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e60d8
lea ecx, [edi + 0x33c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402e00
push 0
push 0x4e6114
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x460110
mov esi, dword [ebp - 0x6fa8]
mov dword [ebp - 0x6f78], esi
mov ecx, edi
call fcn.00472640
test al, al
jne 0x460110
push 0xc
lea ecx, [ebp - 0x275c]
call fcn.00401970
lea ecx, [ebp - 0x275c]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x27c8]
mov byte [ebp - 4], 0x9b
call fcn.00401970
lea ecx, [ebp - 0x27c8]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2750]
mov byte [ebp - 4], 0x9c
call fcn.00401970
lea ecx, [ebp - 0x2750]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x26ac]
mov byte [ebp - 4], 0x9d
call fcn.00401970
lea ecx, [ebp - 0x26ac]
call fcn.00402b40
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5f4c
lea ecx, [ebp - 0x2160]
mov byte [ebp - 4], 0x9e
call fcn.00402ea0
push eax
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00402e00
push 0x260
lea ecx, [ebp - 0x4ab0]
call fcn.00409ba0
push 1
lea ecx, [ebp - 0x20e4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x4ab0]
call fcn.00401130
push 3
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x9f
call fcn.00403ed0
lea ecx, [ebp - 0x4ab0]
call fcn.00401270
test al, al
je 0x4600b6
nop word [eax + eax]
push 1
lea ecx, [ebp - 0x4ab0]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00402c10
push 0x4e452c
lea ecx, [ebp - 0x2028]
call fcn.00402c80
test al, al
je 0x45fcce
push 0
push 1
push 1
push 0
push 0x4e453c
lea ecx, [ebp - 0x2028]
call fcn.00403fc0
cmp eax, 1
jne 0x4600a3
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4550
push 1
lea ecx, [ebp - 0x4ab0]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00402e00
push 0x100
lea ecx, [ebp - 0x2028]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x256c]
call fcn.00410270
test al, al
je 0x4600a3
lea eax, [ebp - 0x2ac8]
mov dword [ebp - 0x6f28], 0
push eax
push 0x4ceeac
xorps xmm0, xmm0
lea ecx, [ebp - 0x256c]
push 0x4e4a30
movups xmmword [ebp - 0x6f38], xmm0
call fcn.00410980
test al, al
je 0x4600a3
lea eax, [ebp - 0x2ac8]
push eax
lea eax, [ebp - 0x6f38]
push eax
lea ecx, [ebp - 0x256c]
call fcn.00410d20
test al, al
je 0x4600a3
nop word [eax + eax]
lea eax, [ebp - 0x275c]
push eax
lea eax, [ebp - 0x6f38]
push eax
lea ecx, [ebp - 0x256c]
call fcn.00410ab0
test al, al
je 0x460082
lea ecx, [ebp - 0x275c]
call fcn.00402ea0
lea ecx, [ebp - 0x1f8c]
mov esi, eax
call fcn.00402ea0
mov edx, esi
mov ecx, eax
call fcn.00409360
test al, al
jne 0x46007c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4a5c
lea ecx, [ebp - 0x275c]
call fcn.00402ea0
push eax
push 0x4e4a80
lea ecx, [ebp - 0x2750]
call fcn.00402e00
lea eax, [ebp - 0x27c8]
push eax
push 0x4ceeac
lea ecx, [ebp - 0x2750]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x256c]
call fcn.00410b60
test eax, eax
je 0x46007c
lea ecx, [ebp - 0x27c8]
call fcn.00402ea0
lea ecx, [ebp - 0x1f8c]
mov esi, eax
call fcn.00402ea0
mov edx, esi
mov ecx, eax
call fcn.00409360
test al, al
jne 0x46007c
push 0
push 0x4e6144
lea ecx, [ebp - 0x27c8]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x46007c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4ab0
lea ecx, [ebp - 0x275c]
call fcn.00402ea0
push eax
push 0x4e4a80
lea ecx, [ebp - 0x2750]
call fcn.00402e00
lea eax, [ebp - 0x26ac]
push eax
push 0x4ceeac
lea ecx, [ebp - 0x2750]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x256c]
call fcn.00410b60
test eax, eax
je 0x45ff2c
push 0
push 1
push 1
push 5
push 0x4cd6ec
lea ecx, [ebp - 0x26ac]
call fcn.00403fc0
test eax, eax
jne 0x45ff2c
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4e4ac0
push 1
lea ecx, [ebp - 0x4ab0]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x26ac]
call fcn.00404550
lea ecx, [ebp - 0x26ac]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
je 0x46007c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x275c]
call fcn.00402ea0
push eax
push 0x4e4a80
lea ecx, [ebp - 0x2750]
call fcn.00402e00
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x26ac]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x27c8]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 2
push 0x2c
push dword [eax + 0xa8]
call fcn.00445530
mov esi, eax
cmp esi, 0xffffffff
je 0x46007c
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x26ac]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
push 0
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2750]
call fcn.00402ea0
push eax
push 0x2c
push esi
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0x4e4664
lea ecx, [ebp - 0x26ac]
call fcn.00402ea0
mov esi, dword [ebp - 0x6f78]
mov ecx, esi
push eax
push 0x4e3310
call fcn.00402ea0
push eax
push 0x4e4adc
lea ecx, [ebp - 0x275c]
call fcn.00402ea0
push eax
push 0x4d1138
lea ecx, [ebp - 0x27c8]
call fcn.00402ea0
push eax
push 0x4e4b00
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
jmp 0x460082
mov esi, dword [ebp - 0x6f78]
lea eax, [ebp - 0x2ac8]
push eax
lea eax, [ebp - 0x6f38]
push eax
lea ecx, [ebp - 0x256c]
call fcn.00410d20
test al, al
jne 0x45fd90
lea ecx, [ebp - 0x4ab0]
call fcn.00401230
test al, al
jne 0x45fc80
lea ecx, [ebp - 0x4ab0]
call fcn.00401180
lea ecx, [ebp - 0x26ac]
call fcn.00402ce0
lea ecx, [ebp - 0x2750]
call fcn.00402ce0
lea ecx, [ebp - 0x27c8]
call fcn.00402ce0
lea ecx, [ebp - 0x275c]
mov byte [ebp - 4], 0x98
call fcn.00402ce0
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [edi + 0x30]
jb 0x45fb62
mov ecx, edi
call fcn.00472640
test al, al
jne 0x4617c2
push 0
push 0x4e6168
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
lea ecx, [ebp - 0x6da8]
call fcn.0046ce40
mov byte [ebp - 4], 0xa0
lea ecx, [ebp - 0x6da0]
mov eax, dword [edi + 8]
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6da8], eax
mov dword [ebp - 0x6da4], 0x2d
call fcn.00402cf0
lea eax, [ebp - 0x21e0]
mov dword [ebp - 0x6d90], eax
lea ecx, [ebp - 0x6d80]
lea eax, [edi + 0x164]
mov dword [ebp - 0x6d8c], eax
lea eax, [ebp - 0x1fc8]
mov dword [ebp - 0x6d88], eax
mov eax, dword [edi + 4]
push 0x4d2164
mov dword [ebp - 0x6d84], eax
call fcn.00402c10
push 0xc
lea ecx, [ebp - 0x2278]
call fcn.00401970
lea ecx, [ebp - 0x2278]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2260]
mov byte [ebp - 4], 0xa1
call fcn.00401970
lea ecx, [ebp - 0x2260]
call fcn.00402b40
mov ecx, edi
mov byte [ebp - 4], 0xa2
call fcn.00472640
test al, al
jne 0x4617a1
xor esi, esi
mov dword [ebp - 0x6f78], esi
cmp dword [edi + 0x30], esi
jbe 0x460397
nop dword [eax]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x460397
push esi
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402d60
cmp eax, 3
jl 0x460387
lea eax, [ebp - 0x6da0]
push eax
push 0
lea ecx, [ebp - 0x2160]
call fcn.00402ea0
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
mov edx, esi
mov ecx, eax
call fcn.00434f80
mov esi, dword [ebp - 0x6f78]
test al, al
je 0x460387
push esi
lea ecx, [edi + 0x114]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x250c]
mov dword [ebp - 0x6d94], eax
call fcn.00402ea0
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2278]
call fcn.00402e00
lea ecx, [ebp - 0x2278]
call fcn.00402ea0
mov ecx, eax
call fcn.0040fba0
test al, al
je 0x460387
lea ecx, [ebp - 0x2278]
call fcn.00402ea0
push eax
lea eax, [ebp - 0x6da8]
mov ecx, edi
push eax
call fcn.00451680
mov ecx, edi
call fcn.00472640
test al, al
jne 0x460397
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25bc]
call fcn.00402ea0
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2278]
call fcn.00402e00
lea ecx, [ebp - 0x2278]
call fcn.00402ea0
mov ecx, eax
call fcn.0040fba0
test al, al
je 0x460387
push 0
lea ecx, [ebp - 0x2278]
call fcn.00403110
lea ecx, [ebp - 0x2278]
call fcn.00402ea0
push eax
lea eax, [ebp - 0x6da8]
mov ecx, edi
push eax
call fcn.00451680
inc esi
mov dword [ebp - 0x6f78], esi
cmp esi, dword [edi + 0x30]
jb 0x460200
mov ecx, edi
call fcn.00472640
test al, al
jne 0x4617a1
lea ecx, [ebp - 0x264c]
mov dword [ebp - 0x6d94], 0x4dd460
call fcn.00402ea0
push eax
lea eax, [ebp - 0x6da8]
mov ecx, edi
push eax
call fcn.00451680
mov ecx, edi
call fcn.00472640
test al, al
jne 0x4617a1
lea eax, [ebp - 0x2640]
push eax
lea ecx, [ebp - 0x2278]
call fcn.00402c20
push 0
lea ecx, [ebp - 0x2278]
call fcn.00403110
lea ecx, [ebp - 0x2278]
call fcn.00402ea0
push eax
lea eax, [ebp - 0x6da8]
mov ecx, edi
push eax
call fcn.00451680
mov ecx, edi
call fcn.00472640
test al, al
jne 0x4617a1
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x46048a
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e61b8
push esi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402e00
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x460440
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6248
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402e00
cmp dword [ebp - 0x6fdc], 0
je 0x4604f1
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e6248
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402e00
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x4606eb
mov eax, dword [ebp - 0x6fa0]
mov esi, dword [ebp - 0x6fa8]
sub eax, esi
mov dword [ebp - 0x6fb4], eax
nop dword [eax]
push 0
push 0x20019
lea ecx, [eax + esi]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x4606c9
mov ecx, edi
call fcn.00472640
test al, al
jne 0x4606eb
lea eax, [ebp - 0x2260]
push eax
push 0x4ccd04
lea ecx, [ebp - 0x1f74]
call fcn.00407900
test al, al
je 0x4606c9
push 0
push 1
push 1
push 0
push 0x4e62d4
lea ecx, [ebp - 0x2260]
call fcn.00403fc0
lea ecx, [ebp - 0x2260]
mov dword [ebp - 0x6f80], eax
call fcn.00402d60
mov edx, dword [ebp - 0x6f80]
lea ecx, [edx + 0xa]
cmp eax, ecx
jle 0x4606c9
lea eax, [edx + 0xb]
push eax
lea ecx, [ebp - 0x2260]
call fcn.00403f10
push 3
lea ecx, [ebp - 0x2260]
call fcn.00404ac0
lea ecx, [ebp - 0x2260]
call fcn.00403180
test al, al
jne 0x4606c9
push 0
push 0x4e24cc
lea ecx, [ebp - 0x2260]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x4606c9
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2260]
call fcn.00402ea0
push eax
mov ecx, esi
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dead8
push 2
push 0x2d
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4606c9
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402ea0
mov ecx, dword [ebp - 0x6fb4]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.00402ea0
push eax
push 0x2d
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
mov ecx, esi
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x2260]
call fcn.00402ea0
push eax
push 0x4e4cd8
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
cmp eax, dword [ebp - 0x6fac]
mov dword [ebp - 0x6f8c], eax
mov eax, dword [ebp - 0x6fb4]
jb 0x460520
mov ecx, edi
call fcn.00472640
test al, al
jne 0x4617a1
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x46076a
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e62f0
push esi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402e00
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x460720
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6338
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402e00
cmp dword [ebp - 0x6fdc], 0
je 0x4607d1
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e6338
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402e00
push 0
push 0x4e637c
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
mov esi, dword [ebp - 0x6fac]
mov dword [ebp - 0x6fb4], 0
test esi, esi
je 0x460a1e
mov eax, dword [ebp - 0x6fa0]
mov esi, dword [ebp - 0x6fa8]
sub eax, esi
mov dword [ebp - 0x6f8c], eax
nop
mov ecx, edi
call fcn.00472640
test al, al
jne 0x460a18
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0x20019
lea ecx, [ecx + esi]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
lea eax, [ebp - 0x1fe4]
push eax
push 0x4dec8c
lea ecx, [ebp - 0x1f74]
call fcn.00407900
test al, al
je 0x4609fc
lea eax, [ebp - 0x2180]
mov dword [ebp - 0x2180], 0
push eax
push 0x4ded2c
lea ecx, [ebp - 0x1f74]
call fcn.00407a40
test al, al
je 0x460891
cmp dword [ebp - 0x2180], 0
jne 0x4609fc
push 0
push 1
push 1
push 0
push 0x4e458c
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x4609fc
push eax
push 1
push 1
push eax
push 0x4e45ac
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x4609fc
push eax
push 1
push 1
push eax
push 0x4e45fc
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x4609fc
push eax
push 1
push 1
push eax
push 0x4e45e0
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x4609fc
push eax
push 0x4e63b8
lea ecx, [ebp - 0x1fe4]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x4609fc
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fe4]
call fcn.00402ea0
push eax
mov ecx, esi
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dec8c
push 2
push 0x2f
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4609fc
push 0
push 0
push 0
push 0
push 0
push 0x4dec8c
mov ecx, esi
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.00402ea0
push eax
push 0x2f
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
mov ecx, esi
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x1fe4]
call fcn.00402ea0
push eax
push 0x4e63e8
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x460810
mov esi, dword [ebp - 0x6fac]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x4617a1
push 0xc
lea ecx, [ebp - 0x26a0]
call fcn.00401970
lea ecx, [ebp - 0x26a0]
call fcn.00402b40
mov byte [ebp - 4], 0xa3
mov dword [ebp - 0x6fb4], 0
test esi, esi
je 0x460ce7
mov eax, dword [ebp - 0x6fa0]
mov esi, dword [ebp - 0x6fa8]
sub eax, esi
mov dword [ebp - 0x6f8c], eax
nop
mov ecx, edi
call fcn.00472640
test al, al
jne 0x460ce1
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0x20019
lea ecx, [ecx + esi]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
lea eax, [ebp - 0x1fe4]
push eax
push 0x4dedcc
lea ecx, [ebp - 0x1f74]
call fcn.00407900
test al, al
je 0x460cc5
lea eax, [ebp - 0x2180]
mov dword [ebp - 0x2180], 0
push eax
push 0x4deecc
lea ecx, [ebp - 0x1f74]
call fcn.00407a40
test al, al
je 0x460af1
cmp dword [ebp - 0x2180], 0
je 0x460cc5
push 0
push 1
push 1
push 0
push 0x4e458c
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x460cc5
push eax
push 1
push 1
push eax
push 0x4e45ac
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x460cc5
push eax
push 1
push 1
push eax
push 0x4e45fc
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x460cc5
push eax
push 1
push 1
push eax
push 0x4e45e0
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x460cc5
push eax
push 0x4e63b8
lea ecx, [ebp - 0x1fe4]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x460cc5
lea eax, [ebp - 0x26a0]
push eax
push 0x4dee98
lea ecx, [ebp - 0x1f74]
call fcn.00407900
test al, al
je 0x460cc5
lea ecx, [ebp - 0x26a0]
call fcn.00403180
test al, al
jne 0x460cc5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4e88
lea ecx, [ebp - 0x26a0]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2260]
call fcn.00402e00
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fe4]
call fcn.00402ea0
push eax
mov ecx, esi
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2260]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 2
push 0x2f
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x460cc5
push 0
push 0
push 0
push 0
push 0
push 0x4dedcc
mov ecx, esi
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.00402ea0
push eax
push 0x2f
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
mov ecx, esi
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x1fe4]
call fcn.00402ea0
push eax
push 0x4e6438
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x460a70
mov esi, dword [ebp - 0x6fac]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x461796
mov dword [ebp - 0x6fb4], 0
test esi, esi
je 0x460f67
mov esi, dword [ebp - 0x6fa8]
mov eax, dword [ebp - 0x6fa0]
sub eax, esi
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f80], eax
mov ecx, edi
call fcn.00472640
test al, al
jne 0x460f67
mov eax, dword [ebp - 0x6f80]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f8c], eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x460f45
lea eax, [ebp - 0x2180]
mov dword [ebp - 0x2180], 0
push eax
push 0x4e4f10
lea ecx, [ebp - 0x1f74]
call fcn.00407a40
test al, al
je 0x460f45
cmp dword [ebp - 0x2180], 4
jne 0x460f45
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4f34
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402e00
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x460f45
lea eax, [ebp - 0x6cec]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6fa4], esi
call fcn.00407bb0
test al, al
je 0x460f3f
lea eax, [ebp - 0x1fe4]
push eax
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f74]
call fcn.00407900
test al, al
je 0x460f1d
lea ecx, [ebp - 0x1fe4]
call fcn.00403180
test al, al
jne 0x460f1d
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fe4]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4df088
push 2
push 0x2f
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
je 0x460f1d
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
call fcn.00402ea0
push eax
push 0x2f
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x1fe4]
call fcn.00402ea0
push eax
push 0x4e6498
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea eax, [ebp - 0x6cec]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.00407bb0
test al, al
jne 0x460e10
mov dword [ebp - 0x6fa4], esi
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x460d22
mov ecx, edi
call fcn.00472640
test al, al
jne 0x461796
push 0
push 0x4e64e0
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x46135b
mov esi, dword [ebp - 0x6fa8]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46135b
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5f4c
lea ecx, [ebp - 0x2160]
call fcn.00402ea0
push eax
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00402e00
push 0x260
lea ecx, [ebp - 0x4850]
call fcn.00409ba0
push 1
lea ecx, [ebp - 0x20e4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x4850]
call fcn.00401130
push 3
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0xa4
call fcn.00403ed0
lea ecx, [ebp - 0x4850]
call fcn.00401270
test al, al
je 0x461333
nop word [eax + eax]
push 1
lea ecx, [ebp - 0x4850]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00402c10
push 0x4e452c
lea ecx, [ebp - 0x2028]
call fcn.00402c80
test al, al
je 0x46109e
push 0
push 1
push 1
push 0
push 0x4e453c
lea ecx, [ebp - 0x2028]
call fcn.00403fc0
cmp eax, 1
jne 0x461320
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4550
push 1
lea ecx, [ebp - 0x4850]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00402e00
lea ecx, [ebp - 0x2028]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
je 0x4611df
push 0
push 0x4e6518
push 0x4df18c
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x4611df
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2028]
call fcn.00402ea0
push eax
mov ecx, esi
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4df18c
push 2
push 0x2e
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x461320
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00402ea0
push eax
push 0
push 0x2e
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4fe0
lea ecx, [ebp - 0x2028]
call fcn.00402ea0
push eax
push 0x4e3d2c
mov ecx, esi
call fcn.00402ea0
push eax
push 0x4e2684
push 0x4df18c
push 0x4e5018
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
push 0
push 0x4e6518
push 0x4df288
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x461320
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e503c
push 1
lea ecx, [ebp - 0x4850]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00402e00
lea ecx, [ebp - 0x2028]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
je 0x461320
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2028]
call fcn.00402ea0
push eax
mov ecx, esi
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4df288
push 2
push 0x2e
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x461320
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00402ea0
push eax
push 0
push 0x2e
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4fe0
lea ecx, [ebp - 0x2028]
call fcn.00402ea0
push eax
push 0x4e3d2c
mov ecx, esi
call fcn.00402ea0
push eax
push 0x4e2684
push 0x4df288
push 0x4e5018
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea ecx, [ebp - 0x4850]
call fcn.00401230
test al, al
jne 0x461050
lea ecx, [ebp - 0x4850]
mov byte [ebp - 4], 0xa3
call fcn.00401180
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [edi + 0x30]
jb 0x460fa2
mov ecx, edi
call fcn.00472640
test al, al
jne 0x461796
lea eax, [ebp - 0x22e8]
push eax
lea ecx, [ebp - 0x2028]
call fcn.00402c20
push 1
lea ecx, [ebp - 0x2028]
call fcn.00403110
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5058
lea ecx, [ebp - 0x2028]
call fcn.00404260
lea ecx, [ebp - 0x2028]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
je 0x461545
push 0
push 0x4e6518
push 0x4df358
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x461545
push 0
lea ecx, [ebp - 0x2028]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x256c]
call fcn.00410270
test al, al
je 0x461545
lea eax, [ebp - 0x2a40]
push eax
push 0x4ceeac
push 0x4e4578
lea ecx, [ebp - 0x256c]
call fcn.00410980
test al, al
jne 0x46148d
lea eax, [ebp - 0x2a40]
push eax
push 0x4ceeac
push 0x4e46b8
lea ecx, [ebp - 0x256c]
call fcn.00410980
test al, al
jne 0x46148d
lea eax, [ebp - 0x2a40]
push eax
push 0x4ceeac
push 0x4de910
lea ecx, [ebp - 0x256c]
call fcn.00410980
test al, al
jne 0x46148d
lea eax, [ebp - 0x2a40]
push eax
push 0x4ceeac
push 0x4e4a30
lea ecx, [ebp - 0x256c]
call fcn.00410980
test al, al
je 0x461545
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2028]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dd460
push 0x4df358
push 2
push 0x2e
push dword [eax + 0xa8]
call fcn.00445530
mov esi, eax
cmp esi, 0xffffffff
je 0x461545
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dd460
lea ecx, [ebp - 0x2028]
call fcn.00402ea0
push eax
push 0
push 0x2e
push esi
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
lea ecx, [ebp - 0x2028]
call fcn.00402ea0
push eax
push 0x4e3d2c
push 0x4e33b4
push 0x4e5080
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
push 0
push 0x4e6518
push 0x4e0c30
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x461796
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4615ca
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
nop dword [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e62f0
push esi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402e00
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x461580
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e62f0
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402e00
cmp dword [ebp - 0x6fdc], 0
je 0x461631
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e62f0
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402e00
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6fb4], 0
jbe 0x461772
mov eax, dword [ebp - 0x6fa8]
sub eax, esi
mov dword [ebp - 0x6f8c], eax
mov ecx, esi
call fcn.00402ea0
xor edx, edx
mov ecx, eax
call fcn.00409360
test al, al
je 0x461756
mov ecx, edi
call fcn.00472640
test al, al
jne 0x461772
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
lea ecx, [ecx + esi]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e0c30
push 2
push 0x2e
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x461756
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ecx + esi]
call fcn.00402ea0
push eax
push 0
mov ecx, esi
call fcn.00402ea0
push eax
push 0x2e
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4fe0
mov ecx, esi
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4e3d2c
lea ecx, [ecx + esi]
call fcn.00402ea0
push eax
push 0x4e2684
push 0x4e0c30
push 0x4e5018
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x461656
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.00420b90
push 1
push 0
push 0
lea ecx, [ebp - 0x21e0]
call fcn.004025d0
lea ecx, [ebp - 0x26a0]
call fcn.00402ce0
lea ecx, [ebp - 0x2260]
call fcn.00402ce0
lea ecx, [ebp - 0x2278]
call fcn.00402ce0
lea ecx, [ebp - 0x6da8]
call fcn.0046ce70
lea ecx, [ebp - 0x256c]
call fcn.0042dd90
lea ecx, [ebp - 0x22e8]
call fcn.00402ce0
lea ecx, [ebp - 0x1fe4]
call fcn.00402ce0
lea ecx, [ebp - 0x23e8]
call fcn.00402ce0
lea ecx, [ebp - 0x2028]
call fcn.00402ce0
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x46
call fcn.00402ce0
mov ecx, edi
call fcn.00472640
test al, al
jne 0x4639bc
test dword [edi + 0x34], 0x1000
jne 0x4639bc
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x4e6544
push dword [eax + 0x38]
call fcn.0041f410
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x2f
push dword [eax + 0x34]
call fcn.00421b70
push 0xc
lea ecx, [ebp - 0x216c]
call fcn.00401970
lea ecx, [ebp - 0x216c]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2040]
mov byte [ebp - 4], 0xa5
call fcn.00401970
lea ecx, [ebp - 0x2040]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x24b8]
mov byte [ebp - 4], 0xa6
call fcn.00401970
lea ecx, [ebp - 0x24b8]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2178]
mov byte [ebp - 4], 0xa7
call fcn.00401970
lea ecx, [ebp - 0x2178]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2394]
mov byte [ebp - 4], 0xa8
call fcn.00401970
lea ecx, [ebp - 0x2394]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x229c]
mov byte [ebp - 4], 0xa9
call fcn.00401970
lea ecx, [ebp - 0x229c]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2340]
mov byte [ebp - 4], 0xaa
call fcn.00401970
lea ecx, [ebp - 0x2340]
call fcn.00402b40
mov byte [ebp - 4], 0xab
lea ecx, [ebp - 0x28cc]
xor esi, esi
push 0x20
mov dword [ebp - 0x6fb4], esi
call fcn.00401e20
lea ecx, [ebp - 0x28cc]
call fcn.0040d860
mov byte [ebp - 4], 0xac
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.00420b90
push esi
push 0x4e6570
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
mov dword [ebp - 0x6f9c], esi
cmp dword [edi + 0x30], esi
jbe 0x461d49
mov eax, dword [ebp - 0x6fa8]
lea esi, [edi + 0x10c]
mov dword [ebp - 0x6f78], eax
mov ecx, edi
call fcn.00472640
test al, al
jne 0x461d43
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d639c
lea ecx, [ebp - 0x226c]
call fcn.00402ea0
push eax
push dword [ebp - 0x6f9c]
mov ecx, esi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2394]
call fcn.00402e00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d63c0
lea ecx, [ebp - 0x2394]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x229c]
call fcn.00402e00
lea ecx, [ebp - 0x229c]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
je 0x461d26
lea ecx, [ebp - 0x2340]
call fcn.00403180
test al, al
je 0x461a56
lea eax, [ebp - 0x2340]
push eax
lea ecx, [ebp - 0x226c]
call fcn.00402ea0
push dword [ebp - 0x6f9c]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
mov edx, esi
mov ecx, eax
call fcn.00435160
lea eax, [ebp - 0x216c]
xor esi, esi
push eax
lea ecx, [ebp - 0x229c]
mov dword [ebp - 0x6f8c], esi
call fcn.00402ea0
xor edx, edx
mov ecx, eax
call fcn.00435360
test al, al
je 0x461d20
lea ecx, [ebp - 0x216c]
call fcn.00402ea0
mov ecx, eax
call fcn.0040fba0
test al, al
je 0x461cf6
inc dword [ebp - 0x6fb4]
lea ecx, [ebp - 0x2480]
push 0xc
call fcn.00401970
lea ecx, [ebp - 0x2480]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x267c]
mov byte [ebp - 4], 0xad
call fcn.00401970
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d6388
lea ecx, [ebp - 0x216c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x267c]
call fcn.00402bd0
lea eax, [ebp - 0x2480]
mov byte [ebp - 4], 0xae
push eax
lea ecx, [ebp - 0x267c]
call fcn.00402ea0
mov edx, 0x4e0d1c
mov ecx, eax
call fcn.00435540
test al, al
je 0x461cdc
push 0
push 1
push 1
push 0
push 0x4e458c
lea ecx, [ebp - 0x2480]
call fcn.00403fc0
test eax, eax
jne 0x461cdc
push eax
push 1
push 1
push eax
push 0x4e45ac
lea ecx, [ebp - 0x2480]
call fcn.00403fc0
test eax, eax
jne 0x461cdc
push eax
push 1
push 1
push eax
push 0x4e45fc
lea ecx, [ebp - 0x2480]
call fcn.00403fc0
test eax, eax
jne 0x461cdc
push eax
push 1
push 1
push eax
push 0x4e45e0
lea ecx, [ebp - 0x2480]
call fcn.00403fc0
test eax, eax
jne 0x461cdc
push eax
push 0x4e65e4
lea ecx, [ebp - 0x2480]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x461cdc
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2480]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e0cf8
push 3
push 0x33
push dword [eax + 0xa8]
call fcn.00445530
mov esi, eax
cmp esi, 0xffffffff
jne 0x461c24
lea ecx, [ebp - 0x267c]
call fcn.00402ce0
lea ecx, [ebp - 0x2480]
mov byte [ebp - 4], 0xac
call fcn.00402ce0
mov esi, dword [ebp - 0x6f8c]
jmp 0x461cf6
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x267c]
call fcn.00402ea0
push eax
push 0
push 0x33
push esi
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
lea ecx, [ebp - 0x267c]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x4e3310
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x2480]
call fcn.00402ea0
push eax
push 0x4e6610
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea ecx, [ebp - 0x267c]
call fcn.00402ce0
lea ecx, [ebp - 0x2480]
mov byte [ebp - 4], 0xac
call fcn.00402ce0
mov esi, dword [ebp - 0x6f8c]
jmp 0x461cf6
lea ecx, [ebp - 0x267c]
call fcn.00402ce0
lea ecx, [ebp - 0x2480]
mov byte [ebp - 4], 0xac
call fcn.00402ce0
lea eax, [ebp - 0x216c]
inc esi
push eax
lea ecx, [ebp - 0x229c]
mov dword [ebp - 0x6f8c], esi
call fcn.00402ea0
mov edx, esi
mov ecx, eax
call fcn.00435360
test al, al
jne 0x461a81
lea esi, [edi + 0x10c]
mov eax, dword [ebp - 0x6f9c]
add dword [ebp - 0x6f78], 0xc
inc eax
mov dword [ebp - 0x6f9c], eax
cmp eax, dword [edi + 0x30]
jb 0x461976
mov esi, dword [ebp - 0x6fb4]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x463960
test esi, esi
jne 0x461d81
lea ecx, [ebp - 0x2340]
call fcn.00403180
test al, al
je 0x461d81
push esi
push 0x4e6640
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
jmp 0x463960
push fcn.00402ce0
push fcn.00402b40
push 2
push 0xc
lea eax, [ebp - 0x2c]
push eax
call fcn.00479454
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6698
lea ecx, [ebp - 0x2708]
mov byte [ebp - 4], 0xaf
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402e00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6698
lea ecx, [ebp - 0x26fc]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x20]
call fcn.00402e00
push 0xc
lea ecx, [ebp - 0x24e8]
call fcn.00401970
push 1
push 0x4e66e8
lea ecx, [ebp - 0x24e8]
call fcn.00402b90
push 0
push 0x4e67b0
lea ecx, [ebp - 0x1fc8]
mov byte [ebp - 4], 0xb0
call fcn.0040e560
xor esi, esi
mov dword [ebp - 0x6fb4], esi
cmp dword [edi + 0x30], esi
jbe 0x4621ad
mov eax, dword [ebp - 0x6fa8]
mov dword [ebp - 0x6f78], eax
mov ecx, edi
call fcn.00472640
test al, al
jne 0x4621ad
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d639c
lea ecx, [ebp - 0x226c]
call fcn.00402ea0
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2394]
call fcn.00402e00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d63c0
lea ecx, [ebp - 0x2394]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x229c]
call fcn.00402e00
lea ecx, [ebp - 0x229c]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
je 0x462196
lea eax, [ebp - 0x216c]
xor esi, esi
push eax
lea ecx, [ebp - 0x229c]
mov dword [ebp - 0x6f8c], esi
call fcn.00402ea0
xor edx, edx
mov ecx, eax
call fcn.00435360
test al, al
je 0x462190
nop
lea ecx, [ebp - 0x216c]
call fcn.00402ea0
mov ecx, eax
call fcn.0040fba0
test al, al
je 0x462166
push 0xc
lea ecx, [ebp - 0x2474]
call fcn.00401970
lea ecx, [ebp - 0x2474]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2634]
mov byte [ebp - 4], 0xb1
call fcn.00401970
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d6388
lea ecx, [ebp - 0x216c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2634]
call fcn.00402bd0
lea eax, [ebp - 0x2474]
mov byte [ebp - 4], 0xb2
push eax
lea ecx, [ebp - 0x2634]
call fcn.00402ea0
mov edx, 0x4e0e38
mov ecx, eax
call fcn.00435540
test al, al
je 0x46214c
push 0x4d7a38
lea ecx, [ebp - 0x2474]
call fcn.00402c50
test al, al
jne 0x46214c
push 0x4d799c
lea ecx, [ebp - 0x2474]
call fcn.00402c50
test al, al
jne 0x46214c
push 0x4d7e04
lea ecx, [ebp - 0x2474]
call fcn.00402c50
test al, al
jne 0x46214c
push 0x4e67ec
lea ecx, [ebp - 0x2474]
call fcn.00402c50
test al, al
jne 0x46214c
push 0
push 0x4e6804
lea ecx, [ebp - 0x2474]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x46214c
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2474]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e0df8
push 3
push 0x34
push dword [eax + 0xa8]
call fcn.00445530
mov esi, eax
cmp esi, 0xffffffff
jne 0x462094
lea ecx, [ebp - 0x2634]
call fcn.00402ce0
lea ecx, [ebp - 0x2474]
mov byte [ebp - 4], 0xb0
call fcn.00402ce0
mov esi, dword [ebp - 0x6f8c]
jmp 0x462166
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2634]
call fcn.00402ea0
push eax
push 0
push 0x34
push esi
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
lea ecx, [ebp - 0x2634]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x4e3310
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x2474]
call fcn.00402ea0
push eax
push 0x4e6838
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea ecx, [ebp - 0x2634]
call fcn.00402ce0
lea ecx, [ebp - 0x2474]
mov byte [ebp - 4], 0xb0
call fcn.00402ce0
mov esi, dword [ebp - 0x6f8c]
jmp 0x462166
lea ecx, [ebp - 0x2634]
call fcn.00402ce0
lea ecx, [ebp - 0x2474]
mov byte [ebp - 4], 0xb0
call fcn.00402ce0
lea eax, [ebp - 0x216c]
inc esi
push eax
lea ecx, [ebp - 0x229c]
mov dword [ebp - 0x6f8c], esi
call fcn.00402ea0
mov edx, esi
mov ecx, eax
call fcn.00435360
test al, al
jne 0x461f10
mov esi, dword [ebp - 0x6fb4]
add dword [ebp - 0x6f78], 0xc
inc esi
mov dword [ebp - 0x6fb4], esi
cmp esi, dword [edi + 0x30]
jb 0x461e48
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46393f
lea esi, [ebp - 0x2c]
mov dword [ebp - 0x6fb4], 0
mov dword [ebp - 0x6f8c], esi
nop
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46250b
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6864
mov ecx, esi
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00402e00
push 0x260
lea ecx, [ebp - 0x45f0]
call fcn.00409ba0
push 1
lea ecx, [ebp - 0x2040]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x45f0]
call fcn.00401130
push 1
lea ecx, [ebp - 0x2040]
mov byte [ebp - 4], 0xb3
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x45f0]
call fcn.00401280
test al, al
je 0x4624dd
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4ccd8c
push 1
lea ecx, [ebp - 0x45f0]
call fcn.004012d0
push eax
push 0x4ccd8c
lea ecx, [ebp - 0x2178]
call fcn.00402e00
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2178]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x24e8]
call fcn.00403fc0
test eax, eax
jne 0x4624c4
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 1
lea ecx, [ebp - 0x45f0]
call fcn.004012d0
push eax
push 0x4cccfc
mov ecx, esi
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00402e00
lea ecx, [ebp - 0x2178]
call fcn.00402cf0
push 0
push 0x80
lea ecx, [ebp - 0x2040]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x28cc]
call fcn.0040db00
test eax, eax
je 0x462392
push 0
lea eax, [ebp - 0x2178]
push eax
lea ecx, [ebp - 0x28cc]
call fcn.0040dec0
test eax, eax
je 0x462392
push 0
push 1
push 1
push 0
push 0x4e6874
lea ecx, [ebp - 0x2178]
call fcn.00403fc0
mov esi, eax
push 0
lea ecx, [esi + 0xa]
push ecx
push 1
push 0
push 0x4e688c
lea ecx, [ebp - 0x2178]
call fcn.00403fc0
test esi, esi
je 0x462387
test eax, eax
je 0x462387
sub eax, esi
lea ecx, [ebp - 0x2178]
sub eax, 0xb
push eax
lea eax, [esi + 0xb]
push eax
call fcn.00403f80
jmp 0x462392
lea ecx, [ebp - 0x2178]
call fcn.00402cf0
lea ecx, [ebp - 0x2178]
call fcn.00403180
test al, al
je 0x4623c9
push 1
lea ecx, [ebp - 0x45f0]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x2178]
call fcn.00402c10
push 0
lea ecx, [ebp - 0x2178]
call fcn.00403090
jmp 0x4623d6
push 3
lea ecx, [ebp - 0x2178]
call fcn.00404ac0
push 0
push 0x4e6804
lea ecx, [ebp - 0x2040]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x4624c4
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2040]
call fcn.00402ea0
push eax
push 0x4dd460
lea ecx, [ebp - 0x2178]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 3
push 0x34
push dword [eax + 0xa8]
call fcn.00445530
mov esi, eax
cmp esi, 0xffffffff
je 0x4624c4
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dd460
lea ecx, [ebp - 0x2040]
call fcn.00402ea0
push eax
push 0
push 0x34
push esi
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
lea ecx, [ebp - 0x2040]
call fcn.00402ea0
push eax
push 0x4e3310
push 0x4dd460
push 0x4e2684
lea ecx, [ebp - 0x2178]
call fcn.00402ea0
push eax
push 0x4e68a8
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea ecx, [ebp - 0x45f0]
call fcn.00401230
mov esi, dword [ebp - 0x6f8c]
test al, al
jne 0x462260
lea ecx, [ebp - 0x45f0]
mov byte [ebp - 4], 0xb0
call fcn.00401180
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f8c], esi
mov dword [ebp - 0x6fb4], eax
cmp eax, 2
jb 0x4621d0
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46393f
push 0x24
lea ecx, [ebp - 0x2868]
call fcn.0042f010
lea ecx, [ebp - 0x2868]
call fcn.004101c0
push 0xc
lea ecx, [ebp - 0x2290]
mov byte [ebp - 4], 0xb4
call fcn.00401970
lea ecx, [ebp - 0x2290]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x245c]
mov byte [ebp - 4], 0xb5
call fcn.00401970
lea ecx, [ebp - 0x245c]
call fcn.00402b40
push 0
push 0x4e68cc
lea ecx, [ebp - 0x1fc8]
mov byte [ebp - 4], 0xb6
call fcn.0040e560
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6900
lea ecx, [edi + 0x33c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402e00
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6fb4], 0
jbe 0x462a00
mov esi, dword [ebp - 0x6fa8]
mov dword [ebp - 0x6f9c], esi
mov ecx, edi
call fcn.00472640
test al, al
jne 0x462a00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e693c
lea ecx, [ebp - 0x226c]
call fcn.00402ea0
push eax
push dword [ebp - 0x6fb4]
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x216c]
call fcn.00402e00
lea eax, [ebp - 0x2040]
xor edx, edx
push eax
lea ecx, [ebp - 0x216c]
mov dword [ebp - 0x6f8c], edx
call fcn.00402ea0
xor edx, edx
mov ecx, eax
call fcn.00435360
test al, al
je 0x4629e1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e13b8
lea ecx, [ebp - 0x2040]
call fcn.00404260
push 0x100
lea ecx, [ebp - 0x2040]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2868]
call fcn.00410270
test al, al
je 0x4629b4
push 0
lea eax, [ebp - 0x2a78]
mov dword [ebp - 0x6eec], 0
push eax
xorps xmm0, xmm0
lea ecx, [ebp - 0x2868]
push 0x4e1050
movups xmmword [ebp - 0x6efc], xmm0
call fcn.004108c0
test al, al
je 0x4629b4
lea eax, [ebp - 0x2a78]
push eax
lea eax, [ebp - 0x6efc]
push eax
lea ecx, [ebp - 0x2868]
call fcn.004110e0
test al, al
je 0x4629b4
lea eax, [ebp - 0x2290]
push eax
push 0x4e1084
lea eax, [ebp - 0x6efc]
push eax
lea ecx, [ebp - 0x2868]
call fcn.00410bb0
test eax, eax
je 0x462993
push 0
push 1
push 1
push 0
push 0x4e6978
lea ecx, [ebp - 0x2290]
call fcn.00403fc0
lea ecx, [ebp - 0x2290]
mov esi, eax
call fcn.00402d60
sub eax, 0x12
cmp esi, eax
je 0x46298d
push 0
push 1
push 1
push 0
push 0x4e69a0
lea ecx, [ebp - 0x2290]
call fcn.00403fc0
lea ecx, [ebp - 0x2290]
mov esi, eax
call fcn.00402d60
sub eax, 0xb
cmp esi, eax
je 0x46298d
push 0
push 1
push 1
push 0
push 0x4e69bc
lea ecx, [ebp - 0x2290]
call fcn.00403fc0
lea ecx, [ebp - 0x2290]
mov esi, eax
call fcn.00402d60
sub eax, 0xb
cmp esi, eax
je 0x46298d
lea eax, [ebp - 0x6efc]
push eax
lea eax, [ebp - 0x2bbc]
push eax
push 0x4e69d8
lea ecx, [ebp - 0x2868]
call fcn.004108c0
test al, al
je 0x46298d
lea eax, [ebp - 0x2290]
push eax
push 0x4e69f4
lea eax, [ebp - 0x2bbc]
push eax
lea ecx, [ebp - 0x2868]
call fcn.00410bb0
test eax, eax
je 0x46298d
push 0x4e452c
lea ecx, [ebp - 0x2290]
call fcn.00402c50
test al, al
jne 0x46298d
lea eax, [ebp - 0x245c]
push eax
push 0x4e1060
lea eax, [ebp - 0x6efc]
push eax
lea ecx, [ebp - 0x2868]
call fcn.00410bb0
test eax, eax
jne 0x462853
lea eax, [ebp - 0x245c]
push eax
push 0x4e1078
lea eax, [ebp - 0x6efc]
push eax
lea ecx, [ebp - 0x2868]
call fcn.00410bb0
test eax, eax
je 0x46298d
lea ecx, [ebp - 0x2290]
call fcn.00402ea0
lea ecx, [ebp - 0x1f8c]
mov esi, eax
call fcn.00402ea0
mov edx, esi
mov ecx, eax
call fcn.00409360
test al, al
jne 0x46298d
push 0
push 0x4e6a00
lea ecx, [ebp - 0x2290]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x46298d
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x245c]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f9c]
push eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2290]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 3
push 0x35
push dword [eax + 0xa8]
call fcn.00445530
mov esi, eax
cmp esi, 0xffffffff
je 0x46298d
lea ecx, [ebp - 0x2040]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f9c]
push eax
push 0
push 0
push 0
push 0
push 0
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x245c]
call fcn.00402ea0
push eax
push 0
push 0x35
push esi
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
lea ecx, [ebp - 0x245c]
call fcn.00402ea0
mov esi, dword [ebp - 0x6f9c]
mov ecx, esi
push eax
push 0x4e3310
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x2290]
call fcn.00402ea0
push eax
push 0x4e3b30
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
jmp 0x462993
mov esi, dword [ebp - 0x6f9c]
lea eax, [ebp - 0x2a78]
push eax
lea eax, [ebp - 0x6efc]
push eax
lea ecx, [ebp - 0x2868]
call fcn.004110e0
test al, al
jne 0x4626f1
inc dword [ebp - 0x6f8c]
lea eax, [ebp - 0x2040]
push eax
lea ecx, [ebp - 0x216c]
call fcn.00402ea0
mov edx, dword [ebp - 0x6f8c]
mov ecx, eax
call fcn.00435360
test al, al
jne 0x462651
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f9c], esi
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [edi + 0x30]
jb 0x4625d0
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46391e
push 0
push 0x4e6a28
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
lea ecx, [ebp - 0x6ea0]
call fcn.0046ce40
mov byte [ebp - 4], 0xb7
lea ecx, [ebp - 0x6e98]
mov eax, dword [edi + 8]
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6ea0], eax
mov dword [ebp - 0x6e9c], 0x37
call fcn.00402cf0
lea eax, [ebp - 0x21e0]
mov dword [ebp - 0x6e88], eax
lea ecx, [ebp - 0x6e78]
lea eax, [edi + 0x164]
mov dword [ebp - 0x6e84], eax
lea eax, [ebp - 0x1fc8]
mov dword [ebp - 0x6e80], eax
mov eax, dword [edi + 4]
push 0x4d2180
mov dword [ebp - 0x6e7c], eax
call fcn.00402c10
mov ecx, edi
call fcn.00472640
test al, al
jne 0x463913
push 0xc
lea ecx, [ebp - 0x23c4]
call fcn.00401970
lea ecx, [ebp - 0x23c4]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2430]
mov byte [ebp - 4], 0xb8
call fcn.00401970
lea ecx, [ebp - 0x2430]
call fcn.00402b40
xor esi, esi
mov byte [ebp - 4], 0xb9
mov dword [ebp - 0x6f78], esi
cmp dword [edi + 0x30], esi
jbe 0x462c85
nop dword [eax]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x462c85
push esi
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402d60
cmp eax, 3
jl 0x462c75
lea eax, [ebp - 0x6e98]
push eax
lea ecx, [ebp - 0x226c]
call fcn.00402ea0
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
mov edx, esi
mov ecx, eax
call fcn.00435160
mov esi, dword [ebp - 0x6f78]
test al, al
je 0x462c75
push esi
lea ecx, [edi + 0x114]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x250c]
mov dword [ebp - 0x6e8c], eax
call fcn.00402ea0
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x23c4]
call fcn.00402e00
lea ecx, [ebp - 0x23c4]
call fcn.00402ea0
mov ecx, eax
call fcn.0040fba0
test al, al
je 0x462c75
lea ecx, [ebp - 0x23c4]
call fcn.00402ea0
push eax
lea eax, [ebp - 0x6ea0]
mov ecx, edi
push eax
call fcn.00451680
mov ecx, edi
call fcn.00472640
test al, al
jne 0x462c85
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25bc]
call fcn.00402ea0
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x23c4]
call fcn.00402e00
lea ecx, [ebp - 0x23c4]
call fcn.00402ea0
mov ecx, eax
call fcn.0040fba0
test al, al
je 0x462c75
push 0
lea ecx, [ebp - 0x23c4]
call fcn.00403110
lea ecx, [ebp - 0x23c4]
call fcn.00402ea0
push eax
lea eax, [ebp - 0x6ea0]
mov ecx, edi
push eax
call fcn.00451680
inc esi
mov dword [ebp - 0x6f78], esi
cmp esi, dword [edi + 0x30]
jb 0x462af0
mov ecx, edi
call fcn.00472640
test al, al
jne 0x4638fd
lea ecx, [ebp - 0x264c]
mov dword [ebp - 0x6e8c], 0x4dd460
call fcn.00402ea0
push eax
lea eax, [ebp - 0x6ea0]
mov ecx, edi
push eax
call fcn.00451680
mov ecx, edi
call fcn.00472640
test al, al
jne 0x4638fd
push 0
push 1
lea ecx, [ebp - 0x2640]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x23c4]
call fcn.00402db0
mov ecx, eax
call fcn.00403110
lea ecx, [ebp - 0x23c4]
call fcn.00402ea0
push eax
lea eax, [ebp - 0x6ea0]
mov ecx, edi
push eax
call fcn.00451680
mov ecx, edi
call fcn.00472640
test al, al
jne 0x4638fd
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x462d7b
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6a58
push esi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402e00
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x462d31
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6aa0
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402e00
cmp dword [ebp - 0x6fdc], 0
je 0x462de2
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e6aa0
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402e00
push 4
lea ecx, [ebp - 0x22c4]
call fcn.00405970
lea ecx, [ebp - 0x22c4]
call fcn.00406240
cmp dword [ebp - 0x6fac], 0
mov byte [ebp - 4], 0xba
mov dword [ebp - 0x6fb4], 0
jbe 0x463117
mov eax, dword [ebp - 0x6fa8]
mov ecx, esi
sub ecx, eax
mov dword [ebp - 0x6f78], eax
mov dword [ebp - 0x6fcc], ecx
nop dword [eax + eax]
add eax, ecx
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f8c], eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x22c4]
call fcn.00407750
test al, al
je 0x4630e9
mov ecx, edi
call fcn.00472640
test al, al
jne 0x463117
xor esi, esi
mov ecx, edi
mov dword [ebp - 0x6fa4], esi
call fcn.00472640
test al, al
jne 0x4630e9
lea eax, [ebp - 0x6cec]
push eax
push esi
lea ecx, [ebp - 0x22c4]
call fcn.00407b30
test al, al
je 0x4630e3
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6ae8
push dword [ebp - 0x6cec]
push 0x4cccfc
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402e00
mov ecx, dword [ebp - 0x6f8c]
push 0
call fcn.00402d60
push eax
push 1
push 0
push 0x4e6b10
lea ecx, [ebp - 0x1f8c]
call fcn.00403fc0
test eax, eax
je 0x4630d3
lea eax, [ebp - 0x2430]
push eax
push 0x4ccd04
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407ad0
test al, al
je 0x4630d3
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2340]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2430]
call fcn.00403fc0
mov dword [ebp - 0x6f80], eax
test eax, eax
je 0x4630d3
lea ecx, [ebp - 0x2340]
call fcn.00402d60
add eax, dword [ebp - 0x6f80]
lea ecx, [ebp - 0x2430]
push eax
call fcn.00403f10
push 3
push 0
push 0
push 0x4ccd04
push 0x4cd600
lea ecx, [ebp - 0x2430]
call fcn.004047c0
mov ecx, eax
call fcn.00404ac0
lea ecx, [ebp - 0x2430]
call fcn.00402d60
cmp eax, 3
jl 0x4630d3
push 0
push 0x4e24f0
lea ecx, [ebp - 0x2430]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x4630d3
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
push 0x4cccfc
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402e00
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2430]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dead8
push 3
push 0x37
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4630d3
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.00402ea0
push eax
push 0
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
push 0x37
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x2430]
call fcn.00402ea0
push eax
push 0x4e4cd8
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov ecx, edi
inc esi
call fcn.00472640
test al, al
je 0x462e80
mov dword [ebp - 0x6fa4], esi
mov ecx, dword [ebp - 0x6fb4]
mov eax, dword [ebp - 0x6f78]
inc ecx
add eax, 0xc
mov dword [ebp - 0x6fb4], ecx
cmp ecx, dword [ebp - 0x6fac]
mov ecx, dword [ebp - 0x6fcc]
mov dword [ebp - 0x6f78], eax
jb 0x462e30
mov ecx, edi
call fcn.00472640
test al, al
jne 0x4638f2
push 0
push 0x4e6b24
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
push 0xc
lea ecx, [ebp - 0x24f4]
call fcn.00401970
lea ecx, [ebp - 0x24f4]
call fcn.00402b40
mov byte [ebp - 4], 0xbb
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6fb4], 0
jbe 0x4638b8
mov esi, dword [ebp - 0x6fa8]
nop
mov ecx, edi
call fcn.00472640
test al, al
jne 0x4638b8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e693c
lea ecx, [ebp - 0x226c]
call fcn.00402ea0
push eax
push dword [ebp - 0x6fb4]
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x216c]
call fcn.00402e00
lea eax, [ebp - 0x24f4]
xor edx, edx
push eax
lea ecx, [ebp - 0x216c]
mov dword [ebp - 0x6f8c], edx
call fcn.00402ea0
xor edx, edx
mov ecx, eax
call fcn.00435360
test al, al
je 0x46389f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d6338
lea ecx, [ebp - 0x24f4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00402e00
lea ecx, [ebp - 0x2040]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
je 0x463326
push 0
push 0x4e6b5c
push 0x4e1318
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x463326
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2040]
call fcn.00402ea0
push eax
mov ecx, esi
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e1318
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x463326
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00402ea0
push eax
push 0
push 0x38
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4fe0
lea ecx, [ebp - 0x2040]
call fcn.00402ea0
push eax
push 0x4e3310
mov ecx, esi
call fcn.00402ea0
push eax
push 0x4e2684
push 0x4e1318
push 0x4e5018
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d6354
lea ecx, [ebp - 0x24f4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00402e00
lea ecx, [ebp - 0x2040]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
jne 0x463392
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4e13b8
lea ecx, [ebp - 0x24f4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00402e00
lea ecx, [ebp - 0x2040]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
je 0x463497
push 0
push 0x4e6b5c
push 0x4e1378
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x463497
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2040]
call fcn.00402ea0
push eax
mov ecx, esi
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e1378
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x463497
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00402ea0
push eax
push 0
push 0x38
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4fe0
lea ecx, [ebp - 0x2040]
call fcn.00402ea0
push eax
push 0x4e3310
mov ecx, esi
call fcn.00402ea0
push eax
push 0x4e2684
push 0x4e1378
push 0x4e5018
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d636c
lea ecx, [ebp - 0x24f4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00402e00
lea ecx, [ebp - 0x2040]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
jne 0x463503
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4e12f8
lea ecx, [ebp - 0x24f4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00402e00
lea ecx, [ebp - 0x2040]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
je 0x463608
push 0
push 0x4e6b5c
push 0x4e12b0
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x463608
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2040]
call fcn.00402ea0
push eax
mov ecx, esi
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e12b0
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x463608
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00402ea0
push eax
push 0
push 0x38
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4fe0
lea ecx, [ebp - 0x2040]
call fcn.00402ea0
push eax
push 0x4e3310
mov ecx, esi
call fcn.00402ea0
push eax
push 0x4e2684
push 0x4e12b0
push 0x4e5018
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d6388
lea ecx, [ebp - 0x24f4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00402e00
lea ecx, [ebp - 0x2040]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
je 0x46373d
push 0
push 0x4e6b5c
push 0x4e13dc
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x46373d
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2040]
call fcn.00402ea0
push eax
mov ecx, esi
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e13dc
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x46373d
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00402ea0
push eax
push 0
push 0x38
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4fe0
lea ecx, [ebp - 0x2040]
call fcn.00402ea0
push eax
push 0x4e3310
mov ecx, esi
call fcn.00402ea0
push eax
push 0x4e2684
push 0x4e13dc
push 0x4e5018
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6b88
lea ecx, [ebp - 0x24f4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00402e00
lea ecx, [ebp - 0x2040]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
je 0x463872
push 0
push 0x4e6b5c
push 0x4e6b9c
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x463872
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2040]
call fcn.00402ea0
push eax
mov ecx, esi
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e6b9c
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x463872
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2040]
call fcn.00402ea0
push eax
push 0
push 0x38
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4fe0
lea ecx, [ebp - 0x2040]
call fcn.00402ea0
push eax
push 0x4e3310
mov ecx, esi
call fcn.00402ea0
push eax
push 0x4e2684
push 0x4e6b9c
push 0x4e5018
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
inc dword [ebp - 0x6f8c]
lea eax, [ebp - 0x24f4]
push eax
lea ecx, [ebp - 0x216c]
call fcn.00402ea0
mov edx, dword [ebp - 0x6f8c]
mov ecx, eax
call fcn.00435360
test al, al
jne 0x4631f1
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [edi + 0x30]
jb 0x463170
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.00420b90
mov ecx, edi
call fcn.00472640
test al, al
jne 0x4638e7
push 1
push 0
push 0
lea ecx, [ebp - 0x21e0]
call fcn.004025d0
lea ecx, [ebp - 0x24f4]
call fcn.00402ce0
lea ecx, [ebp - 0x22c4]
call fcn.00407780
lea ecx, [ebp - 0x2430]
call fcn.00402ce0
lea ecx, [ebp - 0x23c4]
call fcn.00402ce0
lea ecx, [ebp - 0x6ea0]
call fcn.0046ce70
lea ecx, [ebp - 0x245c]
call fcn.00402ce0
lea ecx, [ebp - 0x2290]
call fcn.00402ce0
lea ecx, [ebp - 0x2868]
call fcn.0042dd90
lea ecx, [ebp - 0x24e8]
call fcn.00402ce0
push fcn.00402ce0
push 2
push 0xc
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0xac
push eax
call fcn.004794c8
lea ecx, [ebp - 0x28cc]
call fcn.00401e00
lea ecx, [ebp - 0x2340]
call fcn.00402ce0
lea ecx, [ebp - 0x229c]
call fcn.00402ce0
lea ecx, [ebp - 0x2394]
call fcn.00402ce0
lea ecx, [ebp - 0x2178]
call fcn.00402ce0
lea ecx, [ebp - 0x24b8]
call fcn.00402ce0
lea ecx, [ebp - 0x2040]
call fcn.00402ce0
lea ecx, [ebp - 0x216c]
mov byte [ebp - 4], 0x46
call fcn.00402ce0
mov ecx, edi
call fcn.00472640
test al, al
jne 0x4673ab
test dword [edi + 0x34], 0x1000
jne 0x4673ab
push 0
push 0x4e6be0
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x4e6c2c
push dword [eax + 0x38]
call fcn.0041f410
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x32
push dword [eax + 0x34]
call fcn.00421b70
push 0xc
lea ecx, [ebp - 0x205c]
call fcn.00401970
lea ecx, [ebp - 0x205c]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x1fd4]
mov byte [ebp - 4], 0xbc
call fcn.00401970
lea ecx, [ebp - 0x1fd4]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2524]
mov byte [ebp - 4], 0xbd
call fcn.00401970
lea ecx, [ebp - 0x2524]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2010]
mov byte [ebp - 4], 0xbe
call fcn.00401970
lea ecx, [ebp - 0x2010]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2090]
mov byte [ebp - 4], 0xbf
call fcn.00401970
lea ecx, [ebp - 0x2090]
call fcn.00402b40
push 0x24
lea ecx, [ebp - 0x2610]
mov byte [ebp - 4], 0xc0
call fcn.0042f010
lea ecx, [ebp - 0x2610]
call fcn.004101c0
push 0x260
lea ecx, [ebp - 0x2e30]
mov byte [ebp - 4], 0xc1
call fcn.00409ba0
lea ecx, [ebp - 0x2e30]
call fcn.00401100
push 0x260
lea ecx, [ebp - 0x32f0]
mov byte [ebp - 4], 0xc2
call fcn.00409ba0
lea ecx, [ebp - 0x32f0]
call fcn.00401100
push 0xc
lea ecx, [ebp - 0x21f8]
mov byte [ebp - 4], 0xc3
call fcn.004076b0
lea ecx, [ebp - 0x21f8]
call fcn.00478d70
push 0xc
lea ecx, [ebp - 0x235c]
mov byte [ebp - 4], 0xc4
call fcn.004076b0
push 0xc
push 0
lea ecx, [ebp - 0x235c]
call fcn.00478fa0
push 0xc
lea ecx, [ebp - 0x204c]
mov byte [ebp - 4], 0xc5
call fcn.004076b0
push 0xc
push 0
lea ecx, [ebp - 0x204c]
call fcn.00478fa0
push 0xc
lea ecx, [ebp - 0x2228]
mov byte [ebp - 4], 0xc6
call fcn.004076b0
lea ecx, [ebp - 0x2228]
call fcn.00478d70
push 0xc
lea ecx, [ebp - 0x2254]
mov byte [ebp - 4], 0xc7
call fcn.004076b0
push 0xc
push 0
lea ecx, [ebp - 0x2254]
call fcn.00478700
xor esi, esi
mov byte [ebp - 4], 0xc8
push 0x20
lea ecx, [ebp - 0x2844]
mov dword [ebp - 0x6f9c], esi
call fcn.00401e20
lea ecx, [ebp - 0x2844]
call fcn.0040d860
mov byte [ebp - 4], 0xc9
mov ecx, dword [edi + 0x30]
mov dword [ebp - 0x6f8c], esi
test ecx, ecx
je 0x464275
lea eax, [edi + 0x10c]
mov dword [ebp - 0x6fb4], eax
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4ccda0
lea ecx, [ebp - 0x2160]
call fcn.00402ea0
push eax
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402e00
push 5
lea ecx, [ebp - 0x1fd4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2e30]
call fcn.00401280
test al, al
je 0x46425d
mov edi, dword [ebp - 0x6f8c]
nop
push 1
push 1
lea ecx, [ebp - 0x2e30]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x2090]
call fcn.00402db0
push 0x4d7a38
lea ecx, [ebp - 0x2090]
call fcn.00402c50
test al, al
jne 0x46423e
push str.Microsoft
lea ecx, [ebp - 0x2090]
call fcn.00402c50
test al, al
jne 0x46423e
push 0x4e6c64
lea ecx, [ebp - 0x2090]
call fcn.00402c50
test al, al
jne 0x46423e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6c78
push 1
lea ecx, [ebp - 0x2e30]
call fcn.004012d0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x2160]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6fb4]
push eax
push edi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402e00
lea ecx, [ebp - 0x205c]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test al, al
jne 0x464096
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6cb0
push 1
lea ecx, [ebp - 0x2e30]
call fcn.004012d0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x2160]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6fb4]
push eax
push edi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402e00
lea ecx, [ebp - 0x205c]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test al, al
jne 0x464096
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4ccda0
push 1
lea ecx, [ebp - 0x2e30]
call fcn.004012d0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x2160]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6fb4]
push eax
push edi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402e00
push 5
lea ecx, [ebp - 0x1fd4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x32f0]
call fcn.00401280
test al, al
je 0x46423e
push 2
lea ecx, [ebp - 0x1fd4]
call fcn.00403ed0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6c78
push 1
lea ecx, [ebp - 0x32f0]
call fcn.004012d0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x1fd4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402e00
lea ecx, [ebp - 0x205c]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
jne 0x463ea2
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4e6cb0
push 1
lea ecx, [ebp - 0x32f0]
call fcn.004012d0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x1fd4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402e00
lea ecx, [ebp - 0x205c]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
je 0x46407e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6cf4
lea eax, [esi + 1]
push 1
lea ecx, [ebp - 0x32f0]
mov dword [ebp - 0x6f78], eax
call fcn.004012d0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x1fd4]
call fcn.00402ea0
push eax
push esi
push 2
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x21f8]
call fcn.00478da0
mov ecx, eax
call fcn.00478f10
mov ecx, eax
call fcn.00402e00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x32f0]
call fcn.004012d0
push eax
push 0x4cccfc
push 1
lea ecx, [ebp - 0x2e30]
call fcn.004012d0
push eax
push esi
push 2
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x235c]
call fcn.00478da0
mov ecx, eax
call fcn.00478f10
mov ecx, eax
call fcn.00402e00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x32f0]
call fcn.004012d0
push eax
push 0x4cd604
push 1
lea ecx, [ebp - 0x2e30]
call fcn.004012d0
push eax
push esi
push 2
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x204c]
call fcn.00478da0
mov ecx, eax
call fcn.00478f10
mov ecx, eax
call fcn.00402e00
push esi
push 2
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2254]
call fcn.00478610
mov ecx, eax
call fcn.004786e0
push 2
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2228]
mov dword [eax], edi
call fcn.00478da0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6d0c
push esi
lea ecx, [ebp - 0x21f8]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402e00
lea ecx, [ebp - 0x205c]
call fcn.00402ea0
mov dl, 1
mov ecx, eax
call fcn.0040e8c0
push 0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2844]
call fcn.0040db00
test eax, eax
je 0x464078
push 0
push esi
lea ecx, [ebp - 0x2228]
call fcn.00478f10
push eax
lea ecx, [ebp - 0x2844]
call fcn.0040dec0
test eax, eax
je 0x464078
push 3
push esi
lea ecx, [ebp - 0x2228]
call fcn.00478f10
mov ecx, eax
call fcn.00404ac0
mov esi, dword [ebp - 0x6f78]
lea ecx, [ebp - 0x32f0]
call fcn.00401230
test al, al
jne 0x463df8
jmp 0x46423e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6cf4
lea eax, [esi + 1]
push 1
lea ecx, [ebp - 0x2e30]
mov dword [ebp - 0x6f78], eax
call fcn.004012d0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x2160]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6fb4]
push eax
push edi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
push esi
push 2
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x21f8]
call fcn.00478da0
mov ecx, eax
call fcn.00478f10
mov ecx, eax
call fcn.00402e00
push 1
push 1
lea ecx, [ebp - 0x2e30]
call fcn.004012d0
push eax
push esi
push 2
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x235c]
call fcn.00478da0
mov ecx, eax
call fcn.00478f10
mov ecx, eax
call fcn.00402db0
push 1
push 1
lea ecx, [ebp - 0x2e30]
call fcn.004012d0
push eax
push esi
push 2
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x204c]
call fcn.00478da0
mov ecx, eax
call fcn.00478f10
mov ecx, eax
call fcn.00402db0
push esi
push 2
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2254]
call fcn.00478610
mov ecx, eax
call fcn.004786e0
push 2
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2228]
mov dword [eax], edi
call fcn.00478da0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6d0c
push esi
lea ecx, [ebp - 0x21f8]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402e00
lea ecx, [ebp - 0x205c]
call fcn.00402ea0
mov dl, 1
mov ecx, eax
call fcn.0040e8c0
push 0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2844]
call fcn.0040db00
test eax, eax
je 0x464238
push 0
push esi
lea ecx, [ebp - 0x2228]
call fcn.00478f10
push eax
lea ecx, [ebp - 0x2844]
call fcn.0040dec0
test eax, eax
je 0x464238
push 3
push esi
lea ecx, [ebp - 0x2228]
call fcn.00478f10
mov ecx, eax
call fcn.00404ac0
mov esi, dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2e30]
call fcn.00401230
test al, al
jne 0x463c40
mov edi, dword [ebp - 0x6f7c]
mov dword [ebp - 0x6f9c], esi
mov eax, dword [ebp - 0x6f8c]
mov ecx, dword [edi + 0x30]
inc eax
mov dword [ebp - 0x6f8c], eax
cmp eax, ecx
jb 0x463bd0
mov dword [ebp - 0x6f78], 0
test ecx, ecx
je 0x46448f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6d28
lea ecx, [ebp - 0x226c]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
push ecx
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402e00
lea ecx, [ebp - 0x205c]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
jne 0x464341
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4e6d80
lea ecx, [ebp - 0x226c]
call fcn.00402ea0
push eax
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402e00
lea ecx, [ebp - 0x205c]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
je 0x464479
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6de8
lea ecx, [ebp - 0x226c]
inc esi
call fcn.00402ea0
push eax
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
push dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x21f8]
push 2
push esi
call fcn.00478da0
mov ecx, eax
call fcn.00478f10
mov ecx, eax
call fcn.00402e00
push 1
push 0x4e6e08
push dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x235c]
push 2
push esi
call fcn.00478da0
mov ecx, eax
call fcn.00478f10
mov ecx, eax
call fcn.00402db0
push 1
push 0x4e6e40
push dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x204c]
push 2
push esi
call fcn.00478da0
mov ecx, eax
call fcn.00478f10
mov ecx, eax
call fcn.00402db0
push dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x2254]
push 2
push esi
call fcn.00478610
mov ecx, eax
call fcn.004786e0
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov dword [eax], ecx
lea ecx, [ebp - 0x2160]
push 0x4e6e5c
call fcn.00402ea0
push eax
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
push dword [ebp - 0x6f9c]
push 2
push esi
lea ecx, [ebp - 0x2228]
call fcn.00478da0
mov ecx, eax
call fcn.00478f10
mov ecx, eax
call fcn.00402e00
mov dword [ebp - 0x6f9c], esi
mov eax, dword [ebp - 0x6f78]
inc eax
mov dword [ebp - 0x6f78], eax
cmp eax, dword [edi + 0x30]
jb 0x464287
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46730d
lea ecx, [ebp - 0x1fc8]
push 0
test esi, esi
jne 0x4644b9
push 0x4e6e98
call fcn.0040e560
jmp 0x46730d
push 0x4e6f18
call fcn.0040e560
mov dword [ebp - 0x6f78], 0
test esi, esi
je 0x464bab
mov ecx, edi
call fcn.00472640
test al, al
jne 0x464bab
push 0x4e6e40
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402c50
mov byte [ebp - 0x6f81], al
lea ecx, [ebp - 0x21f8]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
je 0x46452c
push 0x4e6f84
jmp 0x464531
push 0x4e6f90
push dword [ebp - 0x6f78]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402e00
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2254]
call fcn.004786e0
push 0x260
lea ecx, [ebp - 0x5690]
mov eax, dword [eax]
mov dword [ebp - 0x6fb4], eax
call fcn.00409ba0
push 1
lea ecx, [ebp - 0x205c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x5690]
call fcn.00401130
push 3
lea ecx, [ebp - 0x205c]
mov byte [ebp - 4], 0xca
call fcn.00403ed0
lea ecx, [ebp - 0x5690]
call fcn.00401270
test al, al
je 0x464b87
mov esi, dword [ebp - 0x6f78]
nop dword [eax + eax]
push 1
lea ecx, [ebp - 0x5690]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402c10
cmp byte [ebp - 0x6f81], 0
jne 0x464617
push 0x4e452c
lea ecx, [ebp - 0x1fd4]
call fcn.00402c80
test al, al
je 0x464617
push 0
push 1
push 1
push 0
push 0x4e453c
lea ecx, [ebp - 0x1fd4]
call fcn.00403fc0
cmp eax, 1
jne 0x464b6e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4550
push 1
lea ecx, [ebp - 0x5690]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402e00
push 0x100
lea ecx, [ebp - 0x1fd4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2610]
call fcn.00410270
test al, al
je 0x464b6e
lea eax, [ebp - 0x2010]
push eax
push 0x4ceeac
push 0x4e4578
lea ecx, [ebp - 0x2610]
call fcn.00410b60
test eax, eax
je 0x4648b7
push 0
push 1
push 1
push 0
push 0x4e458c
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x4648b7
push eax
push 1
push 1
push eax
push 0x4e45ac
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x4648b7
push eax
push 1
push 1
push eax
push 0x4e45fc
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x4648b7
push 0x4e45c8
lea ecx, [ebp - 0x2010]
call fcn.00402c50
test al, al
jne 0x4648b7
push 0
push 1
push 1
push 0
push 0x4e45e0
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x4648b7
push eax
push 0x4e6fa0
lea ecx, [ebp - 0x2010]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x4648b7
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4ccd78
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
push 0x4e6fec
lea ecx, [ebp - 0x25e0]
call fcn.00402e00
mov eax, dword [ebp - 0x6fb4]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 1
lea ecx, [ebp - 0x2010]
mov dword [ebp - 0x6f8c], eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x25e0]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x3e
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4648b7
push 0
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
push 0
push 0
push 0
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402ea0
push eax
push 0x4e4578
push 0x3e
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0x4e4664
lea ecx, [ebp - 0x1fd4]
call fcn.00402ea0
push eax
push 0x4e3d2c
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4e2668
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x2010]
call fcn.00402ea0
push eax
push 0x4e4698
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea eax, [ebp - 0x2ab4]
mov dword [ebp - 0x6f3c], 0
push eax
push 0x4ceeac
xorps xmm0, xmm0
lea ecx, [ebp - 0x2610]
push 0x4e46b8
movups xmmword [ebp - 0x6f4c], xmm0
call fcn.00410980
test al, al
je 0x464b6e
lea eax, [ebp - 0x2ab4]
push eax
lea eax, [ebp - 0x6f4c]
push eax
lea ecx, [ebp - 0x2610]
call fcn.004110e0
test al, al
je 0x464b6e
lea eax, [ebp - 0x2010]
push eax
lea eax, [ebp - 0x6f4c]
push eax
lea ecx, [ebp - 0x2610]
call fcn.00410af0
test eax, eax
je 0x464b4d
push 0
push 1
push 1
push 0
push 0x4e458c
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x464b4d
push eax
push 1
push 1
push eax
push 0x4e45ac
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x464b4d
push eax
push 1
push 1
push eax
push 0x4e45fc
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x464b4d
push 0x4e45c8
lea ecx, [ebp - 0x2010]
call fcn.00402c50
test al, al
jne 0x464b4d
push 0
push 1
push 1
push 0
push 0x4e45e0
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x464b4d
push eax
push 0x4e6fa0
lea ecx, [ebp - 0x2010]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x464b4d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4ccd78
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
push 0x4e7004
lea ecx, [ebp - 0x25e0]
call fcn.00402e00
mov eax, dword [ebp - 0x6fb4]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 1
lea ecx, [ebp - 0x2010]
mov dword [ebp - 0x6f8c], eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x25e0]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x3e
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x464b4d
push 0
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
push 0
push 0
push 0
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402ea0
push eax
push 0x4e46b8
push 0x3e
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0x4e4664
lea ecx, [ebp - 0x1fd4]
call fcn.00402ea0
push eax
push 0x4e3d2c
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4e2668
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x2010]
call fcn.00402ea0
push eax
push 0x4e7024
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea eax, [ebp - 0x2ab4]
push eax
lea eax, [ebp - 0x6f4c]
push eax
lea ecx, [ebp - 0x2610]
call fcn.004110e0
test al, al
jne 0x464910
lea ecx, [ebp - 0x5690]
call fcn.00401230
test al, al
jne 0x4645c0
mov esi, dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x5690]
mov byte [ebp - 4], 0xc9
call fcn.00401180
mov eax, dword [ebp - 0x6f78]
inc eax
mov dword [ebp - 0x6f78], eax
cmp eax, esi
jb 0x4644d5
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46730d
push 0
push 0x4e7050
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
mov dword [ebp - 0x6f78], 0
test esi, esi
je 0x465008
nop
mov ecx, edi
call fcn.00472640
test al, al
jne 0x465008
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2254]
call fcn.004786e0
push 0x4e6e40
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x204c]
mov eax, dword [eax]
mov dword [ebp - 0x6f80], eax
call fcn.00478f10
mov ecx, eax
call fcn.00402c50
mov byte [ebp - 0x6f81], al
lea ecx, [ebp - 0x21f8]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
je 0x464c50
push 0x4e6f84
jmp 0x464c55
push 0x4e6f90
push dword [ebp - 0x6f78]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402e00
push 0x260
lea ecx, [ebp - 0x58f0]
call fcn.00409ba0
push 1
lea ecx, [ebp - 0x205c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x58f0]
call fcn.00401130
push 3
lea ecx, [ebp - 0x205c]
mov byte [ebp - 4], 0xcb
call fcn.00403ed0
lea ecx, [ebp - 0x58f0]
call fcn.00401270
test al, al
je 0x464fe4
mov esi, dword [ebp - 0x6f78]
nop word [eax + eax]
push 1
lea ecx, [ebp - 0x58f0]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402c10
cmp byte [ebp - 0x6f81], 0
jne 0x464d27
push 0x4e452c
lea ecx, [ebp - 0x1fd4]
call fcn.00402c80
test al, al
je 0x464d27
push 0
push 1
push 1
push 0
push 0x4e453c
lea ecx, [ebp - 0x1fd4]
call fcn.00403fc0
cmp eax, 1
jne 0x464fcb
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4550
push 1
lea ecx, [ebp - 0x58f0]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402e00
push 0x100
lea ecx, [ebp - 0x1fd4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2610]
call fcn.00410270
test al, al
je 0x464fcb
lea eax, [ebp - 0x2010]
push eax
push 0x4ceeac
push 0x4e4828
lea ecx, [ebp - 0x2610]
call fcn.00410b60
test eax, eax
je 0x464fcb
push 0
push 1
push 1
push 0
push 0x4e458c
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x464fcb
push eax
push 1
push 1
push eax
push 0x4e46e4
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x464fcb
push eax
push 1
push 1
push eax
push 0x4e45ac
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x464fcb
push eax
push 1
push 1
push eax
push 0x4e45fc
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x464fcb
push eax
push 1
push 1
push eax
push 0x4e4708
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x464fcb
push eax
push 0x4e70b0
lea ecx, [ebp - 0x2010]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x464fcb
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4ccd78
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
push 0x4e7104
lea ecx, [ebp - 0x25e0]
call fcn.00402e00
mov eax, dword [ebp - 0x6f80]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 1
lea ecx, [ebp - 0x2010]
mov dword [ebp - 0x6f8c], eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x25e0]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x3f
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
je 0x464fcb
push 0
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
push 0
push 0
push 0
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402ea0
push eax
push 0x4e4908
push 0x3f
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0x4e4664
lea ecx, [ebp - 0x1fd4]
call fcn.00402ea0
push eax
push 0x4e3d2c
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4e2668
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x2010]
call fcn.00402ea0
push eax
push 0x4e7138
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea ecx, [ebp - 0x58f0]
call fcn.00401230
test al, al
jne 0x464cd0
mov esi, dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x58f0]
mov byte [ebp - 4], 0xc9
call fcn.00401180
mov eax, dword [ebp - 0x6f78]
inc eax
mov dword [ebp - 0x6f78], eax
cmp eax, esi
jb 0x464be0
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46730d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e7180
lea ecx, [edi + 0x33c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402e00
push 0
push 0x4e71b8
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
mov dword [ebp - 0x6f78], 0
test esi, esi
je 0x46566b
nop dword [eax + eax]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46566b
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2254]
call fcn.004786e0
push 0xc
lea ecx, [ebp - 0x2774]
mov eax, dword [eax]
mov dword [ebp - 0x6f80], eax
call fcn.00401970
lea ecx, [ebp - 0x2774]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2768]
mov byte [ebp - 4], 0xcc
call fcn.00401970
lea ecx, [ebp - 0x2768]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2670]
mov byte [ebp - 4], 0xcd
call fcn.00401970
lea ecx, [ebp - 0x2670]
call fcn.00402b40
push 0x4e6e40
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x204c]
mov byte [ebp - 4], 0xce
call fcn.00478f10
mov ecx, eax
call fcn.00402c50
mov byte [ebp - 0x6f81], al
lea ecx, [ebp - 0x21f8]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
je 0x465134
push 0x4e6f84
jmp 0x465139
push 0x4e6f90
push dword [ebp - 0x6f78]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402e00
push 0x260
lea ecx, [ebp - 0x4390]
call fcn.00409ba0
push 1
lea ecx, [ebp - 0x205c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x4390]
call fcn.00401130
push 3
lea ecx, [ebp - 0x205c]
mov byte [ebp - 4], 0xcf
call fcn.00403ed0
lea ecx, [ebp - 0x4390]
call fcn.00401270
test al, al
je 0x465626
nop dword [eax]
nop dword [eax + eax]
push 1
lea ecx, [ebp - 0x4390]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402c10
cmp byte [ebp - 0x6f81], 0
jne 0x465207
push 0x4e452c
lea ecx, [ebp - 0x1fd4]
call fcn.00402c80
test al, al
je 0x465207
push 0
push 1
push 1
push 0
push 0x4e453c
lea ecx, [ebp - 0x1fd4]
call fcn.00403fc0
cmp eax, 1
jne 0x46560d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4550
push 1
lea ecx, [ebp - 0x4390]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402e00
push 0x100
lea ecx, [ebp - 0x1fd4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2610]
call fcn.00410270
test al, al
je 0x46560d
lea eax, [ebp - 0x2aa0]
mov dword [ebp - 0x6f00], 0
push eax
push 0x4ceeac
xorps xmm0, xmm0
lea ecx, [ebp - 0x2610]
push 0x4e4a30
movups xmmword [ebp - 0x6f10], xmm0
call fcn.00410980
test al, al
je 0x46560d
lea eax, [ebp - 0x2aa0]
push eax
lea eax, [ebp - 0x6f10]
push eax
lea ecx, [ebp - 0x2610]
call fcn.00410d20
test al, al
je 0x46560d
lea eax, [ebp - 0x2774]
push eax
lea eax, [ebp - 0x6f10]
push eax
lea ecx, [ebp - 0x2610]
call fcn.00410ab0
test al, al
je 0x4655ec
lea ecx, [ebp - 0x2774]
call fcn.00402ea0
lea ecx, [ebp - 0x1f8c]
mov esi, eax
call fcn.00402ea0
mov edx, esi
mov ecx, eax
call fcn.00409360
test al, al
jne 0x4655ec
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4a5c
lea ecx, [ebp - 0x2774]
call fcn.00402ea0
push eax
push 0x4e4a80
lea ecx, [ebp - 0x2768]
call fcn.00402e00
lea eax, [ebp - 0x2090]
push eax
push 0x4ceeac
lea ecx, [ebp - 0x2768]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2610]
call fcn.00410b60
test eax, eax
je 0x4655ec
lea ecx, [ebp - 0x2090]
call fcn.00402ea0
lea ecx, [ebp - 0x1f8c]
mov esi, eax
call fcn.00402ea0
mov edx, esi
mov ecx, eax
call fcn.00409360
test al, al
jne 0x4655ec
push 0
push 0x4e7210
lea ecx, [ebp - 0x2090]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x4655ec
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4ab0
lea ecx, [ebp - 0x2774]
call fcn.00402ea0
push eax
push 0x4e4a80
lea ecx, [ebp - 0x2768]
call fcn.00402e00
lea eax, [ebp - 0x2670]
push eax
push 0x4ceeac
lea ecx, [ebp - 0x2768]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2610]
call fcn.00410b60
test eax, eax
je 0x465460
push 0
push 1
push 1
push 5
push 0x4cd6ec
lea ecx, [ebp - 0x2670]
call fcn.00403fc0
test eax, eax
jne 0x465460
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4e4ac0
push 1
lea ecx, [ebp - 0x4390]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2670]
call fcn.00404550
lea ecx, [ebp - 0x2670]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
je 0x4655ec
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2774]
call fcn.00402ea0
push eax
push 0x4e4a80
lea ecx, [ebp - 0x2768]
call fcn.00402e00
mov eax, dword [ebp - 0x6f80]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x2670]
call fcn.00402ea0
push eax
mov ecx, esi
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2090]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x40
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
je 0x4655ec
push 0
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
push 0
push 0
lea ecx, [ebp - 0x2670]
call fcn.00402ea0
push eax
push 0
mov ecx, esi
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2768]
call fcn.00402ea0
push eax
push 0x40
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0x4e4664
lea ecx, [ebp - 0x2670]
call fcn.00402ea0
push eax
push 0x4e3310
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
push 0x4e2668
mov ecx, esi
call fcn.00402ea0
push eax
push 0x4e4adc
lea ecx, [ebp - 0x2774]
call fcn.00402ea0
push eax
push 0x4d1138
lea ecx, [ebp - 0x2090]
call fcn.00402ea0
push eax
push 0x4e7258
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea eax, [ebp - 0x2aa0]
push eax
lea eax, [ebp - 0x6f10]
push eax
lea ecx, [ebp - 0x2610]
call fcn.00410d20
test al, al
jne 0x4652c0
lea ecx, [ebp - 0x4390]
call fcn.00401230
test al, al
jne 0x4651b0
mov esi, dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x4390]
call fcn.00401180
lea ecx, [ebp - 0x2670]
call fcn.00402ce0
lea ecx, [ebp - 0x2768]
call fcn.00402ce0
lea ecx, [ebp - 0x2774]
mov byte [ebp - 4], 0xc9
call fcn.00402ce0
mov eax, dword [ebp - 0x6f78]
inc eax
mov dword [ebp - 0x6f78], eax
cmp eax, esi
jb 0x465070
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46730d
push 0
push 0x4e7288
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
lea ecx, [ebp - 0x6e38]
call fcn.0046ce40
mov byte [ebp - 4], 0xd0
lea ecx, [ebp - 0x6e30]
mov eax, dword [edi + 8]
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6e38], eax
mov dword [ebp - 0x6e34], 0x41
call fcn.00402cf0
lea eax, [ebp - 0x21e0]
mov dword [ebp - 0x6e20], eax
lea ecx, [ebp - 0x6e10]
lea eax, [edi + 0x164]
mov dword [ebp - 0x6e1c], eax
lea eax, [ebp - 0x1fc8]
mov dword [ebp - 0x6e18], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0x6e14], eax
call fcn.00402cf0
push 0xc
lea ecx, [ebp - 0x237c]
call fcn.00401970
lea ecx, [ebp - 0x237c]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2310]
mov byte [ebp - 4], 0xd1
call fcn.00401970
lea ecx, [ebp - 0x2310]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2388]
mov byte [ebp - 4], 0xd2
call fcn.00401970
lea ecx, [ebp - 0x2388]
call fcn.00402b40
mov ecx, edi
mov byte [ebp - 4], 0xd3
call fcn.00472640
test al, al
jne 0x4672e1
mov dword [ebp - 0x6f78], 0
test esi, esi
je 0x465a00
nop dword [eax]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x465a00
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2228]
call fcn.00478f10
mov ecx, eax
call fcn.00402d60
cmp eax, 5
jl 0x4659e3
mov esi, dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2228]
push esi
call fcn.00478f10
push eax
lea ecx, [ebp - 0x6e30]
call fcn.00402c20
push esi
lea ecx, [ebp - 0x2254]
call fcn.004786e0
mov ecx, dword [ebp - 0x6fa8]
mov eax, dword [eax]
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
call fcn.00402ea0
push esi
lea ecx, [ebp - 0x204c]
mov dword [ebp - 0x6e24], eax
call fcn.00478f10
push eax
lea ecx, [ebp - 0x6e10]
call fcn.00402c20
push esi
lea ecx, [ebp - 0x2254]
call fcn.004786e0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x250c]
mov esi, eax
call fcn.00402ea0
push eax
push dword [esi]
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x237c]
call fcn.00402e00
lea ecx, [ebp - 0x237c]
call fcn.00402ea0
mov ecx, eax
call fcn.0040fba0
test al, al
je 0x4659dd
lea ecx, [ebp - 0x237c]
call fcn.00402ea0
push eax
lea eax, [ebp - 0x6e38]
mov ecx, edi
push eax
call fcn.00451680
mov ecx, edi
call fcn.00472640
test al, al
jne 0x4659fa
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2254]
call fcn.004786e0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25bc]
mov esi, eax
call fcn.00402ea0
push eax
push dword [esi]
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x237c]
call fcn.00402e00
lea ecx, [ebp - 0x237c]
call fcn.00402ea0
mov ecx, eax
call fcn.0040fba0
test al, al
je 0x4659dd
push 0
lea ecx, [ebp - 0x237c]
call fcn.00403110
lea ecx, [ebp - 0x237c]
call fcn.00402ea0
push eax
lea eax, [ebp - 0x6e38]
mov ecx, edi
push eax
call fcn.00451680
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x6e30]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2388]
call fcn.00403fc0
test eax, eax
jne 0x4659dd
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4ccd8c
lea ecx, [ebp - 0x6e30]
call fcn.00402ea0
push eax
push 0x4ccd8c
lea ecx, [ebp - 0x2388]
call fcn.00404260
lea ecx, [ebp - 0x264c]
mov dword [ebp - 0x6e24], 0x4dd460
call fcn.00402ea0
push eax
lea eax, [ebp - 0x6e38]
mov ecx, edi
push eax
call fcn.00451680
mov ecx, edi
call fcn.00472640
test al, al
jne 0x4659fa
lea eax, [ebp - 0x2640]
push eax
lea ecx, [ebp - 0x237c]
call fcn.00402c20
push 0
lea ecx, [ebp - 0x237c]
call fcn.00403110
lea ecx, [ebp - 0x237c]
call fcn.00402ea0
push eax
lea eax, [ebp - 0x6e38]
mov ecx, edi
push eax
call fcn.00451680
mov esi, dword [ebp - 0x6f9c]
mov eax, dword [ebp - 0x6f78]
inc eax
mov dword [ebp - 0x6f78], eax
cmp eax, esi
jb 0x465770
jmp 0x465a00
mov esi, dword [ebp - 0x6f9c]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x4672e1
push 4
lea ecx, [ebp - 0x2130]
call fcn.00405970
lea ecx, [ebp - 0x2130]
call fcn.00406240
xor eax, eax
mov byte [ebp - 4], 0xd4
mov dword [ebp - 0x6fb4], eax
test esi, esi
je 0x465e40
nop dword [eax + eax]
xor esi, esi
mov dword [ebp - 0x6fa4], esi
nop dword [eax + eax]
push eax
lea ecx, [ebp - 0x2254]
call fcn.004786e0
mov eax, dword [eax]
mov dword [ebp - 0x6f78], eax
test esi, esi
jne 0x465ac0
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push 0x4e6a58
push eax
lea ecx, [edi + 0x104]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
push str.HKU_
lea ecx, [ebp - 0x1f8c]
call fcn.00402e00
mov eax, dword [ebp - 0x6f78]
mov ecx, dword [ebp - 0x6fa8]
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
call fcn.00402ea0
mov dword [ebp - 0x6f8c], eax
jmp 0x465b1f
cmp esi, 1
jne 0x465ae6
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6a58
push dword [ebp - 0x6fc4]
jmp 0x465b0a
cmp esi, 2
jne 0x465b15
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6a58
push dword [ebp - 0x6fe0]
lea ecx, [ebp - 0x1f8c]
call fcn.00402e00
mov dword [ebp - 0x6f8c], 0x4dd460
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2130]
call fcn.00407750
test al, al
je 0x465e17
lea eax, [ebp - 0x6cec]
mov dword [ebp - 0x6fcc], 0
push eax
push 0
lea ecx, [ebp - 0x2130]
call fcn.00407b30
test al, al
je 0x465e17
mov esi, dword [ebp - 0x6fb4]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6ae8
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f8c]
push 0x4cccfc
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402e00
push 0
push 0x20019
lea ecx, [ebp - 0x1fd4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x465de9
lea eax, [ebp - 0x2310]
push eax
push 0x4ccd04
lea ecx, [ebp - 0x1f74]
call fcn.00407900
test al, al
je 0x465de9
lea ecx, [ebp - 0x2310]
call fcn.00403180
test al, al
jne 0x465de9
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2310]
call fcn.004032b0
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x2228]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2310]
call fcn.00403fc0
test eax, eax
je 0x465de9
push esi
lea ecx, [ebp - 0x2228]
call fcn.00478f10
mov ecx, eax
call fcn.00402d60
inc eax
lea ecx, [ebp - 0x2310]
push eax
call fcn.00403f10
push 0
push 0
push 0x4ccd04
push 0x4cd600
push 3
lea ecx, [ebp - 0x2310]
call fcn.00404ac0
mov ecx, eax
call fcn.004047c0
lea ecx, [ebp - 0x2310]
call fcn.00403180
test al, al
jne 0x465de9
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f8c]
push 0x4cccfc
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402e00
push 0
push 0x4e2548
lea ecx, [ebp - 0x2310]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x465de9
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2310]
call fcn.00402ea0
push eax
push dword [ebp - 0x6f8c]
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dead8
push 5
push 0x41
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x465de9
push 0
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
push 0
push 0
push 0
push 0
push dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x1fd4]
push 0
call fcn.00402ea0
push eax
push 0x41
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
push 0x4e2668
push dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x2310]
push 0x4e2684
call fcn.00402ea0
push eax
push 0x4e4cd8
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [ebp - 0x6fcc]
lea ecx, [ebp - 0x6cec]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x2130]
mov dword [ebp - 0x6fcc], eax
call fcn.00407b30
test al, al
jne 0x465b71
mov esi, dword [ebp - 0x6fa4]
mov eax, dword [ebp - 0x6fb4]
inc esi
mov dword [ebp - 0x6fa4], esi
cmp esi, 3
jb 0x465a50
inc eax
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6f9c]
jb 0x465a40
mov ecx, edi
call fcn.00472640
test al, al
jne 0x4672d6
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x465eba
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e72f4
push esi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402e00
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x465e70
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e731c
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402e00
cmp dword [ebp - 0x6fdc], 0
je 0x465f21
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e731c
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402e00
push 0
push 0x4e7348
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
lea ecx, [ebp - 0x2388]
call fcn.00402cf0
cmp dword [ebp - 0x6fac], 0
jbe 0x4666ff
mov ecx, dword [ebp - 0x6fa8]
mov eax, esi
mov edx, dword [ebp - 0x6fac]
sub eax, ecx
mov dword [ebp - 0x6f80], eax
mov eax, dword [ebp - 0x6f9c]
mov dword [ebp - 0x6f78], ecx
mov dword [ebp - 0x6f8c], edx
xor esi, esi
mov dword [ebp - 0x6fa4], esi
test eax, eax
je 0x4666e7
mov ecx, edi
call fcn.00472640
test al, al
jne 0x4666cf
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x235c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f80]
add ecx, dword [ebp - 0x6f78]
push eax
push 0x4cccfc
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2114]
call fcn.00402e00
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2114]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2388]
call fcn.00403fc0
test eax, eax
jne 0x4666be
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4ccd8c
lea ecx, [ebp - 0x2114]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2388]
call fcn.00404260
push 0
push 0x20019
lea ecx, [ebp - 0x2114]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x466239
lea eax, [ebp - 0x2010]
push eax
push 0x4dec8c
lea ecx, [ebp - 0x1f74]
call fcn.00407900
test al, al
je 0x466239
lea eax, [ebp - 0x217c]
mov dword [ebp - 0x217c], 0
push eax
push 0x4ded2c
lea ecx, [ebp - 0x1f74]
call fcn.00407a40
test al, al
je 0x46609e
cmp dword [ebp - 0x217c], 0
jne 0x466239
push 0
push 1
push 1
push 0
push 0x4e458c
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x466239
push eax
push 1
push 1
push eax
push 0x4e45ac
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x466239
push eax
push 1
push 1
push eax
push 0x4e45fc
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x466239
push eax
push 1
push 1
push eax
push 0x4e45e0
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x466239
push eax
push 0x4e73a8
lea ecx, [ebp - 0x2010]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x466239
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dec8c
push 5
push 0x43
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
je 0x466239
push 0
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
push 0
push 0
push 0
push 0x4dec8c
call fcn.00402ea0
push eax
push 0
lea ecx, [ebp - 0x2114]
call fcn.00402ea0
push eax
push 0x43
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x4e2668
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x2010]
call fcn.00402ea0
push eax
push 0x4e73f8
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea eax, [ebp - 0x2010]
push eax
push 0x4dedcc
lea ecx, [ebp - 0x1f74]
call fcn.00407900
test al, al
je 0x46648e
lea eax, [ebp - 0x217c]
mov dword [ebp - 0x217c], 0
push eax
push 0x4deecc
lea ecx, [ebp - 0x1f74]
call fcn.00407a40
test al, al
je 0x46628a
cmp dword [ebp - 0x217c], 0
je 0x46648e
push 0
push 1
push 1
push 0
push 0x4e458c
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x46648e
push eax
push 1
push 1
push eax
push 0x4e45ac
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x46648e
push eax
push 1
push 1
push eax
push 0x4e45fc
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x46648e
push eax
push 1
push 1
push eax
push 0x4e45e0
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x46648e
push eax
push 0x4e73a8
lea ecx, [ebp - 0x2010]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x46648e
lea eax, [ebp - 0x2090]
push eax
push 0x4dee98
lea ecx, [ebp - 0x1f74]
call fcn.00407900
test al, al
je 0x46648e
lea ecx, [ebp - 0x2090]
call fcn.00403180
test al, al
jne 0x46648e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4e88
lea ecx, [ebp - 0x2090]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2310]
call fcn.00402e00
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2310]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x43
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
je 0x46648e
push 0
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
push 0
push 0
push 0
push 0x4dedcc
call fcn.00402ea0
push eax
push 0
lea ecx, [ebp - 0x2114]
call fcn.00402ea0
push eax
push 0x43
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x4e2668
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x2010]
call fcn.00402ea0
push eax
push 0x4e7438
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea eax, [ebp - 0x217c]
mov dword [ebp - 0x217c], 0
push eax
push 0x4e4f10
lea ecx, [ebp - 0x1f74]
call fcn.00407a40
test al, al
je 0x4666be
cmp dword [ebp - 0x217c], 4
jne 0x4666be
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4f34
lea ecx, [ebp - 0x2114]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402e00
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2130]
call fcn.00407750
test al, al
je 0x4666be
lea eax, [ebp - 0x6cec]
mov dword [ebp - 0x6fcc], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.00407bb0
test al, al
je 0x4666be
lea eax, [ebp - 0x2010]
push eax
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f74]
call fcn.00407900
test al, al
je 0x466696
lea ecx, [ebp - 0x2010]
call fcn.00403180
test al, al
jne 0x466696
push 0
push 0x4e73a8
lea ecx, [ebp - 0x2010]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x466696
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4df088
push 5
push 0x43
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6fb4], eax
cmp eax, 0xffffffff
je 0x466696
push 0
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
push 0
push 0
push 0
push dword [ebp - 0x6cec]
call fcn.00402ea0
push eax
push 0
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
push 0x43
push dword [ebp - 0x6fb4]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x4e2668
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x2010]
call fcn.00402ea0
push eax
push 0x4e7484
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [ebp - 0x6fcc]
lea ecx, [ebp - 0x6cec]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6fcc], eax
call fcn.00407bb0
test al, al
jne 0x466540
mov eax, dword [ebp - 0x6f9c]
inc esi
cmp esi, eax
jb 0x465f83
jmp 0x4666d5
mov eax, dword [ebp - 0x6f9c]
mov ecx, dword [ebp - 0x6f78]
mov edx, dword [ebp - 0x6f8c]
mov dword [ebp - 0x6fa4], esi
add ecx, 0xc
sub edx, 1
mov dword [ebp - 0x6f78], ecx
mov dword [ebp - 0x6f8c], edx
jne 0x465f73
mov ecx, edi
call fcn.00472640
test al, al
jne 0x4672d6
push 0
push 0x4e74b8
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
mov esi, dword [ebp - 0x6f9c]
mov dword [ebp - 0x6f78], 0
test esi, esi
je 0x466ca7
mov ecx, edi
call fcn.00472640
test al, al
jne 0x466ca7
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2254]
call fcn.004786e0
push 0x4e6e40
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x204c]
mov eax, dword [eax]
mov dword [ebp - 0x6fcc], eax
call fcn.00478f10
mov ecx, eax
call fcn.00402c50
mov byte [ebp - 0x6f81], al
lea ecx, [ebp - 0x21f8]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
je 0x4667a8
push 0x4e6f84
jmp 0x4667ad
push 0x4e6f90
push dword [ebp - 0x6f78]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402e00
push 0x260
lea ecx, [ebp - 0x3ed0]
call fcn.00409ba0
push 1
lea ecx, [ebp - 0x205c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x3ed0]
call fcn.00401130
push 3
lea ecx, [ebp - 0x205c]
mov byte [ebp - 4], 0xd5
call fcn.00403ed0
lea ecx, [ebp - 0x3ed0]
call fcn.00401270
test al, al
je 0x466c83
mov esi, dword [ebp - 0x6f78]
nop
push 1
lea ecx, [ebp - 0x3ed0]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402c10
cmp byte [ebp - 0x6f81], 0
jne 0x466877
push 0x4e452c
lea ecx, [ebp - 0x1fd4]
call fcn.00402c80
test al, al
je 0x466877
push 0
push 1
push 1
push 0
push 0x4e453c
lea ecx, [ebp - 0x1fd4]
call fcn.00403fc0
cmp eax, 1
jne 0x466c6a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4550
push 1
lea ecx, [ebp - 0x3ed0]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402e00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e7510
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
push 0x4e7538
lea ecx, [ebp - 0x2090]
call fcn.00402e00
lea ecx, [ebp - 0x1fd4]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
je 0x466a8e
push 0
push 0x4e7548
lea ecx, [ebp - 0x2090]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x466a8e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e7510
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
push 0x4e7538
lea ecx, [ebp - 0x2090]
call fcn.00402e00
mov eax, dword [ebp - 0x6fcc]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x1fd4]
mov dword [ebp - 0x6f8c], eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2090]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x42
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x466c6a
push 0
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
push 0
push 0
push 0
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402ea0
push eax
push 0
push 0x42
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0x4e4fe0
lea ecx, [ebp - 0x1fd4]
call fcn.00402ea0
push eax
push 0x4e3d2c
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4e2668
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x2090]
call fcn.00402ea0
push eax
push 0x4e5018
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e7594
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
push 0x4e7538
lea ecx, [ebp - 0x2090]
call fcn.00402e00
push 0
push 0x4e7548
lea ecx, [ebp - 0x2090]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x466c6a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e503c
push 1
lea ecx, [ebp - 0x3ed0]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402e00
lea ecx, [ebp - 0x1fd4]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
je 0x466c6a
mov eax, dword [ebp - 0x6fcc]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x1fd4]
mov dword [ebp - 0x6f8c], eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2090]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x42
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x466c6a
push 0
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
push 0
push 0
push 0
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402ea0
push eax
push 0
push 0x42
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0x4e4fe0
lea ecx, [ebp - 0x1fd4]
call fcn.00402ea0
push eax
push 0x4e3d2c
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4e2668
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x2090]
call fcn.00402ea0
push eax
push 0x4e5018
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea ecx, [ebp - 0x3ed0]
call fcn.00401230
test al, al
jne 0x466820
mov esi, dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x3ed0]
mov byte [ebp - 4], 0xd4
call fcn.00401180
mov eax, dword [ebp - 0x6f78]
inc eax
mov dword [ebp - 0x6f78], eax
cmp eax, esi
jb 0x466738
mov ecx, edi
call fcn.00472640
test al, al
jne 0x4672d6
mov dword [ebp - 0x6f78], 0
test esi, esi
je 0x466fb9
mov ecx, edi
call fcn.00472640
test al, al
jne 0x466fb9
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2228]
call fcn.00478f10
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402c20
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x1fd4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2388]
call fcn.00403fc0
test eax, eax
jne 0x466fa4
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4ccd8c
lea ecx, [ebp - 0x1fd4]
call fcn.00402ea0
push eax
push 0x4ccd8c
lea ecx, [ebp - 0x2388]
call fcn.00404260
push 1
lea ecx, [ebp - 0x1fd4]
call fcn.00403110
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5058
lea ecx, [ebp - 0x1fd4]
call fcn.00404260
lea ecx, [ebp - 0x1fd4]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
je 0x466fa4
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e75b0
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
push 0x4e7538
lea ecx, [ebp - 0x2090]
call fcn.00402e00
push 0
push 0x4e7548
lea ecx, [ebp - 0x2090]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x466fa4
push 0
lea ecx, [ebp - 0x1fd4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2610]
call fcn.00410270
test al, al
je 0x466fa4
lea eax, [ebp - 0x2a54]
push eax
push 0x4ceeac
push 0x4e4578
lea ecx, [ebp - 0x2610]
call fcn.00410980
test al, al
jne 0x466ea1
lea eax, [ebp - 0x2a54]
push eax
push 0x4ceeac
push 0x4e46b8
lea ecx, [ebp - 0x2610]
call fcn.00410980
test al, al
jne 0x466ea1
lea eax, [ebp - 0x2a54]
push eax
push 0x4ceeac
push 0x4de910
lea ecx, [ebp - 0x2610]
call fcn.00410980
test al, al
jne 0x466ea1
lea eax, [ebp - 0x2a54]
push eax
push 0x4ceeac
push 0x4e4a30
lea ecx, [ebp - 0x2610]
call fcn.00410980
test al, al
je 0x466fa4
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fd4]
call fcn.00402ea0
push eax
push 0x4dd460
lea ecx, [ebp - 0x2090]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x42
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x466fa4
push 0
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
push 0
push 0
push 0
push 0
push 0x4dd460
lea ecx, [ebp - 0x1fd4]
call fcn.00402ea0
push eax
push 0
push 0x42
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0x4e4664
lea ecx, [ebp - 0x1fd4]
call fcn.00402ea0
push eax
push 0x4e3d2c
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
push 0x4e2668
push 0x4e33b4
lea ecx, [ebp - 0x2090]
call fcn.00402ea0
push eax
push 0x4e5018
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [ebp - 0x6f78]
inc eax
mov dword [ebp - 0x6f78], eax
cmp eax, esi
jb 0x466cc8
lea ecx, [ebp - 0x2388]
call fcn.00402cf0
mov esi, dword [ebp - 0x6fac]
test esi, esi
je 0x4672b2
mov ecx, dword [ebp - 0x6fa8]
mov edx, esi
mov eax, dword [ebp - 0x6fa0]
sub eax, ecx
mov dword [ebp - 0x6f78], ecx
mov dword [ebp - 0x6f80], eax
mov eax, dword [ebp - 0x6f9c]
mov dword [ebp - 0x6fcc], edx
nop word [eax + eax]
xor esi, esi
mov dword [ebp - 0x6fa4], esi
test eax, eax
je 0x46729a
mov ecx, edi
call fcn.00472640
test al, al
jne 0x467282
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2388]
call fcn.00403fc0
test eax, eax
jne 0x467271
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4ccd8c
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
push 0x4ccd8c
lea ecx, [ebp - 0x2388]
call fcn.00404260
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x235c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f80]
add ecx, dword [ebp - 0x6f78]
push eax
push 0x4cccfc
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2114]
call fcn.00402e00
push 0
push 0x20019
lea ecx, [ebp - 0x2114]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x467271
xor dl, dl
lea ecx, [ebp - 0x1f74]
call fcn.00408dd0
test al, al
jne 0x467271
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e75dc
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
push 0x4e7538
lea ecx, [ebp - 0x2090]
call fcn.00402e00
push 0
push 0x4e7548
lea ecx, [ebp - 0x2090]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x467271
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2114]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2090]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x42
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f8c], eax
cmp eax, 0xffffffff
je 0x467271
push 0
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
push 0
push 0
push 0
push 0
call fcn.00402ea0
push eax
push 0
lea ecx, [ebp - 0x2114]
call fcn.00402ea0
push eax
push 0x42
push dword [ebp - 0x6f8c]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0x4e4fe0
lea ecx, [ebp - 0x2114]
call fcn.00402ea0
push eax
push 0x4e3d2c
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x4e2668
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x2090]
call fcn.00402ea0
push eax
push 0x4e5018
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [ebp - 0x6f9c]
inc esi
cmp esi, eax
jb 0x467010
jmp 0x467288
mov eax, dword [ebp - 0x6f9c]
mov ecx, dword [ebp - 0x6f78]
mov edx, dword [ebp - 0x6fcc]
mov dword [ebp - 0x6fa4], esi
add ecx, 0xc
sub edx, 1
mov dword [ebp - 0x6f78], ecx
mov dword [ebp - 0x6fcc], edx
jne 0x467000
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.00420b90
push 1
push 0
push 0
lea ecx, [ebp - 0x21e0]
call fcn.004025d0
lea ecx, [ebp - 0x2130]
call fcn.00407780
lea ecx, [ebp - 0x2388]
call fcn.00402ce0
lea ecx, [ebp - 0x2310]
call fcn.00402ce0
lea ecx, [ebp - 0x237c]
call fcn.00402ce0
lea ecx, [ebp - 0x6e38]
call fcn.0046ce70
lea ecx, [ebp - 0x2844]
call fcn.00401e00
lea ecx, [ebp - 0x2254]
call fcn.00478600
lea ecx, [ebp - 0x2228]
call fcn.00478f30
lea ecx, [ebp - 0x204c]
call fcn.00478f30
lea ecx, [ebp - 0x235c]
call fcn.00478f30
lea ecx, [ebp - 0x21f8]
call fcn.00478f30
lea ecx, [ebp - 0x32f0]
call fcn.00401180
lea ecx, [ebp - 0x2e30]
call fcn.00401180
lea ecx, [ebp - 0x2610]
call fcn.0042dd90
lea ecx, [ebp - 0x2090]
call fcn.00402ce0
lea ecx, [ebp - 0x2010]
call fcn.00402ce0
lea ecx, [ebp - 0x2524]
call fcn.00402ce0
lea ecx, [ebp - 0x1fd4]
call fcn.00402ce0
lea ecx, [ebp - 0x205c]
mov byte [ebp - 4], 0x46
call fcn.00402ce0
mov ecx, edi
call fcn.00472640
test al, al
jne 0x469f11
test dword [edi + 0x34], 0x1000
jne 0x469f11
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x4e75f0
push dword [eax + 0x38]
call fcn.0041f410
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x34
push dword [eax + 0x34]
call fcn.00421b70
push 0xc
lea ecx, [ebp - 0x2300]
call fcn.004076b0
push 0xa
push 0
lea ecx, [ebp - 0x2300]
call fcn.00478fa0
push 0xc
lea ecx, [ebp - 0x223c]
mov byte [ebp - 4], 0xd6
call fcn.004076b0
push 0xa
push 0
lea ecx, [ebp - 0x223c]
call fcn.00478fa0
push 0xc
lea ecx, [ebp - 0x2370]
mov byte [ebp - 4], 0xd7
call fcn.004076b0
push 0xa
push 0
lea ecx, [ebp - 0x2370]
call fcn.00478fa0
push 0xc
lea ecx, [ebp - 0x209c]
mov byte [ebp - 4], 0xd8
call fcn.004076b0
lea ecx, [ebp - 0x209c]
call fcn.00478d70
push 0xc
lea ecx, [ebp - 0x22a8]
mov byte [ebp - 4], 0xd9
call fcn.004076b0
push 0xa
push 0
lea ecx, [ebp - 0x22a8]
call fcn.00478700
push 0x260
lea ecx, [ebp - 0x3090]
mov byte [ebp - 4], 0xda
call fcn.00409ba0
lea ecx, [ebp - 0x3090]
call fcn.00401100
push 0x260
lea ecx, [ebp - 0x3550]
mov byte [ebp - 4], 0xdb
call fcn.00409ba0
lea ecx, [ebp - 0x3550]
call fcn.00401100
push 0xc
lea ecx, [ebp - 0x2074]
mov byte [ebp - 4], 0xdc
call fcn.00401970
lea ecx, [ebp - 0x2074]
call fcn.00402b40
xor esi, esi
mov byte [ebp - 4], 0xdd
cmp dword [edi + 0x30], esi
jbe 0x4678c2
lea eax, [edi + 0x10c]
mov dword [ebp - 0x6f80], eax
nop dword [eax]
push 1
push 1
lea ecx, [ebp - 0x3090]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x2074]
call fcn.00402db0
push 0x4d7a38
lea ecx, [ebp - 0x2074]
call fcn.00402c50
test al, al
jne 0x4678b8
push str.Microsoft
lea ecx, [ebp - 0x2074]
call fcn.00402c50
test al, al
jne 0x4678b8
push 0x4e6c64
lea ecx, [ebp - 0x2074]
call fcn.00402c50
test al, al
jne 0x4678b8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4ccda0
lea ecx, [ebp - 0x226c]
call fcn.00402ea0
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2154]
call fcn.00402e00
push 5
lea ecx, [ebp - 0x2154]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x3090]
call fcn.00401280
test al, al
je 0x467821
mov edi, dword [ebp - 0x6f80]
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e7624
push 1
lea ecx, [ebp - 0x3090]
call fcn.004012d0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x226c]
call fcn.00402ea0
push eax
push esi
mov ecx, edi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2154]
call fcn.00402e00
lea ecx, [ebp - 0x2154]
call fcn.00402ea0
push eax
call dword [0x4ad490]
test eax, eax
je 0x467808
push 1
lea ecx, [ebp - 0x3090]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x2074]
call fcn.00402c10
push eax
lea eax, [ebp - 0x209c]
push eax
push esi
lea eax, [ebp - 0x22a8]
push eax
lea eax, [ebp - 0x2370]
push eax
lea eax, [ebp - 0x223c]
push eax
push 0
lea ecx, [ebp - 0x2154]
call fcn.00403110
lea edx, [ebp - 0x2300]
mov ecx, eax
call fcn.00435a70
test al, al
jne 0x467808
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4ccda0
lea ecx, [ebp - 0x2154]
call fcn.00404260
push 5
lea ecx, [ebp - 0x2154]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x3550]
call fcn.00401280
test al, al
je 0x467808
nop word [eax + eax]
push 0
push 1
lea ecx, [ebp - 0x3550]
call fcn.004012d0
mov edx, 0x4e7638
mov ecx, eax
call fcn.00405a60
test eax, eax
je 0x4677f5
push 0
push 0
push 0
push 0
push 0
push 0x4e7624
push 1
lea ecx, [ebp - 0x3550]
call fcn.004012d0
push eax
push 0x4cccfc
push 1
lea ecx, [ebp - 0x3090]
call fcn.004012d0
push eax
push 0x4cccfc
lea ecx, [ebp - 0x226c]
call fcn.00402ea0
push eax
push esi
mov ecx, edi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2154]
call fcn.00402e00
lea ecx, [ebp - 0x2154]
call fcn.00402ea0
push eax
call dword [0x4ad490]
test eax, eax
je 0x4677f5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x3550]
call fcn.004012d0
push eax
push 0x4cd604
push 1
lea ecx, [ebp - 0x3090]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x2074]
call fcn.00402e00
lea eax, [ebp - 0x2074]
push eax
lea eax, [ebp - 0x209c]
push eax
push esi
lea eax, [ebp - 0x22a8]
push eax
lea eax, [ebp - 0x2370]
push eax
lea eax, [ebp - 0x223c]
push eax
push 0
lea ecx, [ebp - 0x2154]
call fcn.00403110
lea edx, [ebp - 0x2300]
mov ecx, eax
call fcn.00435a70
lea ecx, [ebp - 0x3550]
call fcn.00401230
test al, al
jne 0x4676e0
lea ecx, [ebp - 0x3090]
call fcn.00401230
test al, al
jne 0x4675d0
mov edi, dword [ebp - 0x6f7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e7648
lea ecx, [ebp - 0x250c]
call fcn.00402ea0
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2154]
call fcn.00402e00
lea ecx, [ebp - 0x2154]
call fcn.00402ea0
push eax
call dword [0x4ad490]
test eax, eax
je 0x4678b8
push 0x4e76a4
lea ecx, [ebp - 0x2074]
call fcn.00402c10
push eax
lea eax, [ebp - 0x209c]
push eax
push esi
lea eax, [ebp - 0x22a8]
push eax
lea eax, [ebp - 0x2370]
push eax
lea eax, [ebp - 0x223c]
push eax
lea edx, [ebp - 0x2300]
lea ecx, [ebp - 0x2154]
call fcn.00435a70
inc esi
cmp esi, dword [edi + 0x30]
jb 0x467500
lea ecx, [ebp - 0x2300]
call fcn.00405560
mov esi, eax
mov ecx, edi
mov dword [ebp - 0x6f9c], esi
call fcn.00472640
test al, al
jne 0x469eb5
test esi, esi
jne 0x4678fe
push esi
push 0x4e76c0
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
jmp 0x469eb5
push 0xc
lea ecx, [ebp - 0x2204]
call fcn.00401970
lea ecx, [ebp - 0x2204]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2034]
mov byte [ebp - 4], 0xde
call fcn.00401970
lea ecx, [ebp - 0x2034]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x25a4]
mov byte [ebp - 4], 0xdf
call fcn.00401970
lea ecx, [ebp - 0x25a4]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x21ec]
mov byte [ebp - 4], 0xe0
call fcn.00401970
lea ecx, [ebp - 0x21ec]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2440]
mov byte [ebp - 4], 0xe1
call fcn.00401970
lea ecx, [ebp - 0x2440]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2334]
mov byte [ebp - 4], 0xe2
call fcn.00401970
lea ecx, [ebp - 0x2334]
call fcn.00402b40
push 0x20
lea ecx, [ebp - 0x29b0]
mov byte [ebp - 4], 0xe3
call fcn.00401e20
lea ecx, [ebp - 0x29b0]
call fcn.0040d860
mov byte [ebp - 4], 0xe4
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.00420b90
push 0
push 0x4e7740
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
xor esi, esi
mov dword [ebp - 0x6f78], esi
cmp dword [ebp - 0x6f9c], esi
jbe 0x467def
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x22a8]
call fcn.004786e0
push 0
push 0
push 0
mov eax, dword [eax]
lea ecx, [ebp - 0x2300]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4cccfc
push esi
mov dword [ebp - 0x6f80], eax
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2440]
call fcn.00402e00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d63c0
lea ecx, [ebp - 0x2440]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2334]
call fcn.00402e00
lea ecx, [ebp - 0x2334]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
je 0x467ddc
lea eax, [ebp - 0x2204]
xor edx, edx
push eax
lea ecx, [ebp - 0x2334]
mov dword [ebp - 0x6f8c], edx
call fcn.00402ea0
xor edx, edx
mov ecx, eax
call fcn.00435360
test al, al
je 0x467ddc
lea ecx, [ebp - 0x2204]
call fcn.00402ea0
mov ecx, eax
call fcn.0040fba0
test al, al
je 0x467daf
push 0xc
lea ecx, [ebp - 0x2450]
call fcn.00401970
lea ecx, [ebp - 0x2450]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2628]
mov byte [ebp - 4], 0xe5
call fcn.00401970
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d6388
lea ecx, [ebp - 0x2204]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2628]
call fcn.00402bd0
lea eax, [ebp - 0x2450]
mov byte [ebp - 4], 0xe6
push eax
lea ecx, [ebp - 0x2628]
call fcn.00402ea0
mov edx, 0x4e0d1c
mov ecx, eax
call fcn.00435540
test al, al
je 0x467d95
push 0
push 1
push 1
push 0
push 0x4e458c
lea ecx, [ebp - 0x2450]
call fcn.00403fc0
test eax, eax
jne 0x467d95
push eax
push 1
push 1
push eax
push 0x4e45ac
lea ecx, [ebp - 0x2450]
call fcn.00403fc0
test eax, eax
jne 0x467d95
push eax
push 1
push 1
push eax
push 0x4e45fc
lea ecx, [ebp - 0x2450]
call fcn.00403fc0
test eax, eax
jne 0x467d95
push eax
push 1
push 1
push eax
push 0x4e45e0
lea ecx, [ebp - 0x2450]
call fcn.00403fc0
test eax, eax
jne 0x467d95
push eax
push 0x4e77b0
lea ecx, [ebp - 0x2450]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x467d95
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e77fc
push esi
lea ecx, [ebp - 0x209c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2074]
call fcn.00402e00
mov eax, dword [ebp - 0x6f80]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x2450]
call fcn.00402ea0
push eax
mov ecx, esi
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2074]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x47
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
jne 0x467caf
lea ecx, [ebp - 0x2628]
call fcn.00402ce0
lea ecx, [ebp - 0x2450]
mov byte [ebp - 4], 0xe4
call fcn.00402ce0
mov esi, dword [ebp - 0x6f78]
jmp 0x467daf
push 0
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x209c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2628]
call fcn.00402ea0
push eax
push 0
push 0x47
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0x4e4664
lea ecx, [ebp - 0x2628]
call fcn.00402ea0
push eax
push 0x4e3310
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x209c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
push 0x4e2668
mov ecx, esi
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x2450]
call fcn.00402ea0
push eax
push 0x4e6610
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea ecx, [ebp - 0x2628]
call fcn.00402ce0
lea ecx, [ebp - 0x2450]
mov byte [ebp - 4], 0xe4
call fcn.00402ce0
mov esi, dword [ebp - 0x6f78]
jmp 0x467daf
lea ecx, [ebp - 0x2628]
call fcn.00402ce0
lea ecx, [ebp - 0x2450]
mov byte [ebp - 4], 0xe4
call fcn.00402ce0
inc dword [ebp - 0x6f8c]
lea eax, [ebp - 0x2204]
push eax
lea ecx, [ebp - 0x2334]
call fcn.00402ea0
mov edx, dword [ebp - 0x6f8c]
mov ecx, eax
call fcn.00435360
test al, al
jne 0x467ac1
inc esi
mov dword [ebp - 0x6f78], esi
cmp esi, dword [ebp - 0x6f9c]
jb 0x467a00
mov ecx, edi
call fcn.00472640
test al, al
jne 0x469e68
push 0xc
lea ecx, [ebp - 0x25d4]
call fcn.00401970
push 1
push 0x4e66e8
lea ecx, [ebp - 0x25d4]
call fcn.00402b90
push 0
push 0x4e7820
lea ecx, [ebp - 0x1fc8]
mov byte [ebp - 4], 0xe7
call fcn.0040e560
xor esi, esi
mov dword [ebp - 0x6f78], esi
cmp dword [ebp - 0x6f9c], esi
jbe 0x468226
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x22a8]
call fcn.004786e0
push 0
push 0
push 0
mov eax, dword [eax]
lea ecx, [ebp - 0x2300]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4cccfc
push esi
mov dword [ebp - 0x6f80], eax
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2440]
call fcn.00402e00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d63c0
lea ecx, [ebp - 0x2440]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2334]
call fcn.00402e00
lea ecx, [ebp - 0x2334]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
je 0x468213
lea eax, [ebp - 0x2204]
xor edx, edx
push eax
lea ecx, [ebp - 0x2334]
mov dword [ebp - 0x6f8c], edx
call fcn.00402ea0
xor edx, edx
mov ecx, eax
call fcn.00435360
test al, al
je 0x468213
lea ecx, [ebp - 0x2204]
call fcn.00402ea0
mov ecx, eax
call fcn.0040fba0
test al, al
je 0x4681e6
push 0xc
lea ecx, [ebp - 0x24a0]
call fcn.00401970
lea ecx, [ebp - 0x24a0]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2664]
mov byte [ebp - 4], 0xe8
call fcn.00401970
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d6388
lea ecx, [ebp - 0x2204]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2664]
call fcn.00402bd0
lea eax, [ebp - 0x24a0]
mov byte [ebp - 4], 0xe9
push eax
lea ecx, [ebp - 0x2664]
call fcn.00402ea0
mov edx, 0x4e0e38
mov ecx, eax
call fcn.00435540
test al, al
je 0x4681cc
push 0x4d7a38
lea ecx, [ebp - 0x24a0]
call fcn.00402c50
test al, al
jne 0x4681cc
push 0x4d799c
lea ecx, [ebp - 0x24a0]
call fcn.00402c50
test al, al
jne 0x4681cc
push 0x4d7e04
lea ecx, [ebp - 0x24a0]
call fcn.00402c50
test al, al
jne 0x4681cc
push 0x4e67ec
lea ecx, [ebp - 0x24a0]
call fcn.00402c50
test al, al
jne 0x4681cc
push 0
push 0x4e7880
lea ecx, [ebp - 0x24a0]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x4681cc
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e78d0
push esi
lea ecx, [ebp - 0x209c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2074]
call fcn.00402e00
mov eax, dword [ebp - 0x6f80]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x24a0]
call fcn.00402ea0
push eax
mov ecx, esi
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2074]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x48
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
jne 0x4680e6
lea ecx, [ebp - 0x2664]
call fcn.00402ce0
lea ecx, [ebp - 0x24a0]
mov byte [ebp - 4], 0xe7
call fcn.00402ce0
mov esi, dword [ebp - 0x6f78]
jmp 0x4681e6
push 0
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x209c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2664]
call fcn.00402ea0
push eax
push 0
push 0x48
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0x4e4664
lea ecx, [ebp - 0x2664]
call fcn.00402ea0
push eax
push 0x4e3310
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x209c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
push 0x4e2668
mov ecx, esi
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x24a0]
call fcn.00402ea0
push eax
push 0x4e6838
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea ecx, [ebp - 0x2664]
call fcn.00402ce0
lea ecx, [ebp - 0x24a0]
mov byte [ebp - 4], 0xe7
call fcn.00402ce0
mov esi, dword [ebp - 0x6f78]
jmp 0x4681e6
lea ecx, [ebp - 0x2664]
call fcn.00402ce0
lea ecx, [ebp - 0x24a0]
mov byte [ebp - 4], 0xe7
call fcn.00402ce0
inc dword [ebp - 0x6f8c]
lea eax, [ebp - 0x2204]
push eax
lea ecx, [ebp - 0x2334]
call fcn.00402ea0
mov edx, dword [ebp - 0x6f8c]
mov ecx, eax
call fcn.00435360
test al, al
jne 0x467f11
inc esi
mov dword [ebp - 0x6f78], esi
cmp esi, dword [ebp - 0x6f9c]
jb 0x467e50
mov ecx, edi
call fcn.00472640
test al, al
jne 0x469e5d
push 0xc
lea ecx, [ebp - 0x2468]
call fcn.00401970
lea ecx, [ebp - 0x2468]
call fcn.00402b40
xor esi, esi
mov byte [ebp - 4], 0xea
mov dword [ebp - 0x6f8c], esi
cmp dword [ebp - 0x6f9c], esi
jbe 0x46863f
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x223c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2468]
call fcn.00403fc0
test eax, eax
jne 0x46862c
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4ccce8
push esi
lea ecx, [ebp - 0x223c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2468]
call fcn.00404260
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6864
push esi
lea ecx, [ebp - 0x223c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2034]
call fcn.00402e00
push 0x260
lea ecx, [ebp - 0x4130]
call fcn.00409ba0
push 1
lea ecx, [ebp - 0x2034]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x4130]
call fcn.00401130
push 1
lea ecx, [ebp - 0x2034]
mov byte [ebp - 4], 0xeb
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x4130]
call fcn.00401280
test al, al
je 0x46861d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4ccd8c
push 1
lea ecx, [ebp - 0x4130]
call fcn.004012d0
push eax
push 0x4ccd8c
lea ecx, [ebp - 0x21ec]
call fcn.00402e00
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x21ec]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x25d4]
call fcn.00403fc0
test eax, eax
jne 0x46860a
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 1
lea ecx, [ebp - 0x4130]
call fcn.004012d0
push eax
push 0x4cccfc
push esi
lea ecx, [ebp - 0x223c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2034]
call fcn.00402e00
lea ecx, [ebp - 0x21ec]
call fcn.00402cf0
push 0
push 0x80
lea ecx, [ebp - 0x2034]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x29b0]
call fcn.0040db00
test eax, eax
je 0x468490
push 0
lea eax, [ebp - 0x21ec]
push eax
lea ecx, [ebp - 0x29b0]
call fcn.0040dec0
test eax, eax
je 0x468490
push 0
push 1
push 1
push 0
push 0x4e6874
lea ecx, [ebp - 0x21ec]
call fcn.00403fc0
mov esi, eax
push 0
lea ecx, [esi + 0xa]
push ecx
push 1
push 0
push 0x4e688c
lea ecx, [ebp - 0x21ec]
call fcn.00403fc0
test esi, esi
je 0x46847f
test eax, eax
je 0x46847f
sub eax, esi
lea ecx, [ebp - 0x21ec]
sub eax, 0xb
push eax
lea eax, [esi + 0xb]
push eax
call fcn.00403f80
jmp 0x46848a
lea ecx, [ebp - 0x21ec]
call fcn.00402cf0
mov esi, dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x21ec]
call fcn.00403180
test al, al
je 0x4684c7
push 1
lea ecx, [ebp - 0x4130]
call fcn.004012d0
push eax
lea ecx, [ebp - 0x21ec]
call fcn.00402c10
push 0
lea ecx, [ebp - 0x21ec]
call fcn.00403090
jmp 0x4684d4
push 3
lea ecx, [ebp - 0x21ec]
call fcn.00404ac0
push 0x4e7904
lea ecx, [ebp - 0x21ec]
call fcn.00402c50
test al, al
jne 0x46860a
push 0
push 0x4e7880
lea ecx, [ebp - 0x2034]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x46860a
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2034]
call fcn.00402ea0
push eax
push 0x4dd460
lea ecx, [ebp - 0x21ec]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x48
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x46860a
push 0
push esi
lea ecx, [ebp - 0x209c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
push 0
push 0
push 0
push 0
push 0x4dd460
lea ecx, [ebp - 0x2034]
call fcn.00402ea0
push eax
push 0
push 0x48
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0x4e4664
lea ecx, [ebp - 0x2034]
call fcn.00402ea0
push eax
push 0x4e3310
push esi
lea ecx, [ebp - 0x209c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
push 0x4e2668
push 0x4dd460
push 0x4e2684
lea ecx, [ebp - 0x21ec]
call fcn.00402ea0
push eax
push 0x4e68a8
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea ecx, [ebp - 0x4130]
call fcn.00401230
test al, al
jne 0x468348
lea ecx, [ebp - 0x4130]
mov byte [ebp - 4], 0xea
call fcn.00401180
inc esi
mov dword [ebp - 0x6f8c], esi
cmp esi, dword [ebp - 0x6f9c]
jb 0x468265
mov ecx, edi
call fcn.00472640
test al, al
jne 0x469e52
push 0x24
lea ecx, [ebp - 0x2924]
call fcn.0042f010
lea ecx, [ebp - 0x2924]
call fcn.004101c0
push 0xc
lea ecx, [ebp - 0x22b4]
mov byte [ebp - 4], 0xec
call fcn.00401970
lea ecx, [ebp - 0x22b4]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x24c4]
mov byte [ebp - 4], 0xed
call fcn.00401970
lea ecx, [ebp - 0x24c4]
call fcn.00402b40
push 0
push 0x4e7948
lea ecx, [ebp - 0x1fc8]
mov byte [ebp - 4], 0xee
call fcn.0040e560
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e7998
lea ecx, [edi + 0x33c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402e00
xor esi, esi
mov dword [ebp - 0x6f8c], esi
cmp dword [ebp - 0x6f9c], esi
jbe 0x468ba2
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x22a8]
call fcn.004786e0
mov ecx, edi
mov eax, dword [eax]
mov dword [ebp - 0x6f80], eax
call fcn.00472640
test al, al
jne 0x468ba2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e79cc
push esi
lea ecx, [ebp - 0x2300]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2204]
call fcn.00402e00
lea eax, [ebp - 0x2034]
mov dword [ebp - 0x6fb4], 0
push eax
lea ecx, [ebp - 0x2204]
call fcn.00402ea0
xor edx, edx
mov ecx, eax
call fcn.00435360
test al, al
je 0x468b8f
mov esi, dword [ebp - 0x6fb4]
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e13b8
lea ecx, [ebp - 0x2034]
call fcn.00404260
push 0x100
lea ecx, [ebp - 0x2034]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2924]
call fcn.00410270
test al, al
je 0x468b5f
push 0
lea eax, [ebp - 0x2a8c]
mov dword [ebp - 0x6ed8], 0
push eax
xorps xmm0, xmm0
lea ecx, [ebp - 0x2924]
push 0x4e1050
movups xmmword [ebp - 0x6ee8], xmm0
call fcn.004108c0
test al, al
je 0x468b5f
lea eax, [ebp - 0x2a8c]
push eax
lea eax, [ebp - 0x6ee8]
push eax
lea ecx, [ebp - 0x2924]
call fcn.004110e0
test al, al
je 0x468b5f
lea eax, [ebp - 0x22b4]
push eax
push 0x4e1084
lea eax, [ebp - 0x6ee8]
push eax
lea ecx, [ebp - 0x2924]
call fcn.00410bb0
test eax, eax
je 0x468b38
push 0
push 1
push 1
push 0
push 0x4e6978
lea ecx, [ebp - 0x22b4]
call fcn.00403fc0
lea ecx, [ebp - 0x22b4]
mov esi, eax
call fcn.00402d60
sub eax, 0x12
cmp esi, eax
je 0x468b38
push 0
push 1
push 1
push 0
push 0x4e69a0
lea ecx, [ebp - 0x22b4]
call fcn.00403fc0
lea ecx, [ebp - 0x22b4]
mov esi, eax
call fcn.00402d60
sub eax, 0xb
cmp esi, eax
je 0x468b38
push 0
push 1
push 1
push 0
push 0x4e69bc
lea ecx, [ebp - 0x22b4]
call fcn.00403fc0
lea ecx, [ebp - 0x22b4]
mov esi, eax
call fcn.00402d60
sub eax, 0xb
cmp esi, eax
je 0x468b38
lea eax, [ebp - 0x6ee8]
push eax
lea eax, [ebp - 0x2bd0]
push eax
push 0x4e69d8
lea ecx, [ebp - 0x2924]
call fcn.004108c0
test al, al
je 0x468b38
lea eax, [ebp - 0x22b4]
push eax
push 0x4e69f4
lea eax, [ebp - 0x2bd0]
push eax
lea ecx, [ebp - 0x2924]
call fcn.00410bb0
test eax, eax
je 0x468b38
push 0x4e452c
lea ecx, [ebp - 0x22b4]
call fcn.00402c50
test al, al
jne 0x468b38
push 0x4e79e8
lea ecx, [ebp - 0x22b4]
call fcn.00402c50
test al, al
jne 0x468b38
lea eax, [ebp - 0x24c4]
push eax
push 0x4e1060
lea eax, [ebp - 0x6ee8]
push eax
lea ecx, [ebp - 0x2924]
call fcn.00410bb0
test eax, eax
jne 0x4689aa
lea eax, [ebp - 0x24c4]
push eax
push 0x4e1078
lea eax, [ebp - 0x6ee8]
push eax
lea ecx, [ebp - 0x2924]
call fcn.00410bb0
test eax, eax
je 0x468b38
push str.null
lea ecx, [ebp - 0x24c4]
call fcn.00402c50
test al, al
jne 0x468b38
lea ecx, [ebp - 0x22b4]
call fcn.00402ea0
lea ecx, [ebp - 0x1f8c]
mov esi, eax
call fcn.00402ea0
mov edx, esi
mov ecx, eax
call fcn.00409360
test al, al
jne 0x468b38
push 0
push 0x4e7a18
lea ecx, [ebp - 0x22b4]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x468b38
mov eax, dword [ebp - 0x6f80]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x24c4]
call fcn.00402ea0
push eax
mov ecx, esi
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x22b4]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x49
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
je 0x468b38
lea ecx, [ebp - 0x2034]
call fcn.00402ea0
push eax
push dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x209c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x24c4]
call fcn.00402ea0
push eax
push 0
push 0x49
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0x4e4664
lea ecx, [ebp - 0x24c4]
call fcn.00402ea0
push eax
push 0x4e3310
push dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x209c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
push 0x4e2668
mov ecx, esi
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x22b4]
call fcn.00402ea0
push eax
push 0x4e3b30
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea eax, [ebp - 0x2a8c]
push eax
lea eax, [ebp - 0x6ee8]
push eax
lea ecx, [ebp - 0x2924]
call fcn.004110e0
test al, al
jne 0x468830
mov esi, dword [ebp - 0x6fb4]
lea eax, [ebp - 0x2034]
inc esi
push eax
lea ecx, [ebp - 0x2204]
mov dword [ebp - 0x6fb4], esi
call fcn.00402ea0
mov edx, esi
mov ecx, eax
call fcn.00435360
test al, al
jne 0x468790
mov esi, dword [ebp - 0x6f8c]
inc esi
mov dword [ebp - 0x6f8c], esi
cmp esi, dword [ebp - 0x6f9c]
jb 0x468700
mov ecx, edi
call fcn.00472640
test al, al
jne 0x469e31
push 0
push 0x4e7a60
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
lea ecx, [ebp - 0x6ed4]
call fcn.0046ce40
mov byte [ebp - 4], 0xef
lea ecx, [ebp - 0x6ecc]
mov eax, dword [edi + 8]
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6ed4], eax
mov dword [ebp - 0x6ed0], 0x4b
call fcn.00402cf0
lea eax, [ebp - 0x21e0]
mov dword [ebp - 0x6ebc], eax
lea ecx, [ebp - 0x6eac]
lea eax, [edi + 0x164]
mov dword [ebp - 0x6eb8], eax
lea eax, [ebp - 0x1fc8]
mov dword [ebp - 0x6eb4], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0x6eb0], eax
call fcn.00402cf0
mov ecx, edi
call fcn.00472640
test al, al
jne 0x469e26
push 0xc
lea ecx, [ebp - 0x24ac]
call fcn.00401970
lea ecx, [ebp - 0x24ac]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2424]
mov byte [ebp - 4], 0xf0
call fcn.00401970
lea ecx, [ebp - 0x2424]
call fcn.00402b40
lea ecx, [ebp - 0x2468]
mov byte [ebp - 4], 0xf1
call fcn.00402cf0
xor esi, esi
cmp dword [ebp - 0x6f9c], esi
jbe 0x468f23
nop
mov ecx, edi
call fcn.00472640
test al, al
jne 0x468f23
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x223c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2468]
call fcn.00403fc0
test eax, eax
jne 0x468f16
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4ccce8
push esi
lea ecx, [ebp - 0x223c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2468]
call fcn.00404260
push esi
lea ecx, [ebp - 0x22a8]
call fcn.004786e0
push 0
push 0
push 0
mov eax, dword [eax]
lea ecx, [ebp - 0x2370]
push 0
push 0
push 0
push 0
push 0
push 0
push esi
mov dword [ebp - 0x6f8c], eax
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
push 0x4cccfc
push esi
lea ecx, [ebp - 0x223c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x6ecc]
call fcn.00402e00
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x114]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push esi
lea ecx, [ebp - 0x209c]
mov dword [ebp - 0x6ec0], eax
call fcn.00478f10
push eax
lea ecx, [ebp - 0x6eac]
call fcn.00402c20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x250c]
call fcn.00402ea0
push eax
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x24ac]
call fcn.00402e00
lea ecx, [ebp - 0x24ac]
call fcn.00402ea0
mov ecx, eax
call fcn.0040fba0
test al, al
je 0x468f16
lea ecx, [ebp - 0x24ac]
call fcn.00402ea0
push eax
lea eax, [ebp - 0x6ed4]
mov ecx, edi
push eax
call fcn.00451680
mov ecx, edi
call fcn.00472640
test al, al
jne 0x468f23
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25bc]
call fcn.00402ea0
push eax
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x24ac]
call fcn.00402e00
lea ecx, [ebp - 0x24ac]
call fcn.00402ea0
mov ecx, eax
call fcn.0040fba0
test al, al
je 0x468f16
push 0
lea ecx, [ebp - 0x24ac]
call fcn.00403110
lea ecx, [ebp - 0x24ac]
call fcn.00402ea0
push eax
lea eax, [ebp - 0x6ed4]
mov ecx, edi
push eax
call fcn.00451680
lea ecx, [ebp - 0x264c]
mov dword [ebp - 0x6ec0], 0x4dd460
call fcn.00402ea0
push eax
lea eax, [ebp - 0x6ed4]
mov ecx, edi
push eax
call fcn.00451680
mov ecx, edi
call fcn.00472640
test al, al
jne 0x468f23
push 0
push 1
lea ecx, [ebp - 0x2640]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x24ac]
call fcn.00402db0
mov ecx, eax
call fcn.00403110
lea ecx, [ebp - 0x24ac]
call fcn.00402ea0
push eax
lea eax, [ebp - 0x6ed4]
mov ecx, edi
push eax
call fcn.00451680
mov ecx, edi
call fcn.00472640
test al, al
jne 0x468f23
inc esi
cmp esi, dword [ebp - 0x6f9c]
jb 0x468c90
mov ecx, edi
call fcn.00472640
test al, al
jne 0x469e10
lea ecx, [ebp - 0x2468]
call fcn.00402cf0
push 4
lea ecx, [ebp - 0x222c]
call fcn.00405970
lea ecx, [ebp - 0x222c]
call fcn.00406240
xor eax, eax
mov byte [ebp - 4], 0xf2
mov dword [ebp - 0x6f8c], eax
cmp dword [ebp - 0x6f9c], eax
jbe 0x46939b
nop dword [eax]
xor esi, esi
mov dword [ebp - 0x6fa4], esi
nop dword [eax + eax]
push eax
lea ecx, [ebp - 0x22a8]
call fcn.004786e0
mov eax, dword [eax]
mov dword [ebp - 0x6fcc], eax
test esi, esi
jne 0x468fc1
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push 0x4e6a58
push eax
lea ecx, [edi + 0x104]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
push str.HKU_
jmp 0x46900b
cmp esi, 1
jne 0x468fe7
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6a58
push dword [ebp - 0x6fc4]
jmp 0x46900b
cmp esi, 2
jne 0x469016
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6a58
push dword [ebp - 0x6fe0]
lea ecx, [ebp - 0x1f8c]
call fcn.00402e00
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x222c]
call fcn.00407750
test al, al
je 0x469372
lea eax, [ebp - 0x6cec]
mov dword [ebp - 0x6f78], 0
push eax
push 0
lea ecx, [ebp - 0x222c]
call fcn.00407b30
test al, al
je 0x469372
mov esi, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6ae8
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f8c]
push 0x4cccfc
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2034]
call fcn.00402e00
push 0
push 0x20019
lea ecx, [ebp - 0x2034]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x469344
lea eax, [ebp - 0x2424]
push eax
push 0x4ccd04
lea ecx, [ebp - 0x1f74]
call fcn.00407900
test al, al
je 0x469344
lea ecx, [ebp - 0x2424]
call fcn.00403180
test al, al
jne 0x469344
push dword [ebp - 0x6fcc]
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2424]
call fcn.004032b0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x2370]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
push 0x4cccfc
push esi
lea ecx, [ebp - 0x223c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2074]
call fcn.00402e00
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2074]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2424]
call fcn.00403fc0
test eax, eax
je 0x469344
lea ecx, [ebp - 0x2074]
call fcn.00402d60
inc eax
lea ecx, [ebp - 0x2424]
push eax
call fcn.00403f10
push 0
push 0
push 0x4ccd04
push 0x4cd600
push 3
lea ecx, [ebp - 0x2424]
call fcn.00404ac0
mov ecx, eax
call fcn.004047c0
lea ecx, [ebp - 0x2424]
call fcn.00403180
test al, al
jne 0x469344
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f8c]
push 0x4cccfc
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2034]
call fcn.00402e00
push 0
push 0x4e2590
lea ecx, [ebp - 0x2424]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x469344
mov eax, dword [ebp - 0x6fcc]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 1
lea ecx, [ebp - 0x2424]
mov dword [ebp - 0x6fb4], eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6fb4]
push eax
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dead8
push 5
push 0x4b
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x469344
push 0
push esi
lea ecx, [ebp - 0x209c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6fb4]
push eax
push 0
push 0
push 0
push 0
call fcn.00402ea0
push eax
push 0
lea ecx, [ebp - 0x2034]
call fcn.00402ea0
push eax
push 0x4b
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
push esi
lea ecx, [ebp - 0x209c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6fb4]
push eax
push 0x4e2668
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x2424]
call fcn.00402ea0
push eax
push 0x4e4cd8
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [ebp - 0x6f78]
lea ecx, [ebp - 0x6cec]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x222c]
mov dword [ebp - 0x6f78], eax
call fcn.00407b30
test al, al
jne 0x469068
mov esi, dword [ebp - 0x6fa4]
mov eax, dword [ebp - 0x6f8c]
inc esi
mov dword [ebp - 0x6fa4], esi
cmp esi, 3
jb 0x468f80
inc eax
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [ebp - 0x6f9c]
jb 0x468f70
mov ecx, edi
call fcn.00472640
test al, al
jne 0x469e05
push 0
push 0x4e7ab0
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
push 0xc
lea ecx, [ebp - 0x2518]
call fcn.00401970
lea ecx, [ebp - 0x2518]
call fcn.00402b40
xor esi, esi
mov byte [ebp - 4], 0xf3
cmp dword [ebp - 0x6f9c], esi
jbe 0x469dcf
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x22a8]
call fcn.004786e0
mov ecx, edi
mov eax, dword [eax]
mov dword [ebp - 0x6f78], eax
call fcn.00472640
test al, al
jne 0x469dcf
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e79cc
push esi
lea ecx, [ebp - 0x2300]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2204]
call fcn.00402e00
lea eax, [ebp - 0x2518]
xor edx, edx
push eax
lea ecx, [ebp - 0x2204]
mov dword [ebp - 0x6fb4], edx
call fcn.00402ea0
xor edx, edx
mov ecx, eax
call fcn.00435360
test al, al
je 0x469dc2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e7b08
push esi
lea ecx, [ebp - 0x209c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
push 0x4e7538
lea ecx, [ebp - 0x2074]
call fcn.00402e00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d6338
lea ecx, [ebp - 0x2518]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2034]
call fcn.00402e00
lea ecx, [ebp - 0x2034]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
je 0x469631
push 0
push 0x4e7b18
lea ecx, [ebp - 0x2074]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x469631
mov eax, dword [ebp - 0x6f78]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2034]
mov dword [ebp - 0x6f8c], eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2074]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x469631
push 0
push esi
lea ecx, [ebp - 0x209c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
push 0
push 0
push 0
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2034]
call fcn.00402ea0
push eax
push 0
push 0x4c
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4fe0
lea ecx, [ebp - 0x2034]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4e3310
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x2074]
call fcn.00402ea0
push eax
push 0x4e5018
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e7b64
push esi
lea ecx, [ebp - 0x209c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
push 0x4e7538
lea ecx, [ebp - 0x2074]
call fcn.00402e00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d6354
lea ecx, [ebp - 0x2518]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2034]
call fcn.00402e00
lea ecx, [ebp - 0x2034]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
jne 0x4696d8
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4e13b8
lea ecx, [ebp - 0x2518]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2034]
call fcn.00402e00
lea ecx, [ebp - 0x2034]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
je 0x469828
push 0
push 0x4e7b18
lea ecx, [ebp - 0x2074]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x469828
mov eax, dword [ebp - 0x6f78]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2034]
mov dword [ebp - 0x6f8c], eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2074]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x469828
push 0
push esi
lea ecx, [ebp - 0x209c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
push 0
push 0
push 0
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2034]
call fcn.00402ea0
push eax
push 0
push 0x4c
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4fe0
lea ecx, [ebp - 0x2034]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4e3310
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x2074]
call fcn.00402ea0
push eax
push 0x4e5018
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e7b7c
push esi
lea ecx, [ebp - 0x209c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
push 0x4e7538
lea ecx, [ebp - 0x2074]
call fcn.00402e00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d636c
lea ecx, [ebp - 0x2518]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2034]
call fcn.00402e00
lea ecx, [ebp - 0x2034]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
jne 0x4698cf
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4e12f8
lea ecx, [ebp - 0x2518]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2034]
call fcn.00402e00
lea ecx, [ebp - 0x2034]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
je 0x469a1f
push 0
push 0x4e7b18
lea ecx, [ebp - 0x2074]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x469a1f
mov eax, dword [ebp - 0x6f78]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2034]
mov dword [ebp - 0x6f8c], eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2074]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x469a1f
push 0
push esi
lea ecx, [ebp - 0x209c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
push 0
push 0
push 0
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2034]
call fcn.00402ea0
push eax
push 0
push 0x4c
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4fe0
lea ecx, [ebp - 0x2034]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4e3310
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x2074]
call fcn.00402ea0
push eax
push 0x4e5018
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e7bac
push esi
lea ecx, [ebp - 0x209c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
push 0x4e7538
lea ecx, [ebp - 0x2074]
call fcn.00402e00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d6388
lea ecx, [ebp - 0x2518]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2034]
call fcn.00402e00
lea ecx, [ebp - 0x2034]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
je 0x469bda
push 0
push 0x4e7b18
lea ecx, [ebp - 0x2074]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x469bda
mov eax, dword [ebp - 0x6f78]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2034]
mov dword [ebp - 0x6f8c], eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2074]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x469bda
push 0
push esi
lea ecx, [ebp - 0x209c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
push 0
push 0
push 0
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2034]
call fcn.00402ea0
push eax
push 0
push 0x4c
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4fe0
lea ecx, [ebp - 0x2034]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4e3310
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x2074]
call fcn.00402ea0
push eax
push 0x4e5018
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e7bc0
push esi
lea ecx, [ebp - 0x209c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
push 0x4e7538
lea ecx, [ebp - 0x2074]
call fcn.00402e00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6b88
lea ecx, [ebp - 0x2518]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2034]
call fcn.00402e00
lea ecx, [ebp - 0x2034]
call fcn.00402ea0
push eax
call dword [0x4ad494]
test eax, eax
je 0x469d95
push 0
push 0x4e7b18
lea ecx, [ebp - 0x2074]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.0046e160
test al, al
jne 0x469d95
mov eax, dword [ebp - 0x6f78]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2034]
mov dword [ebp - 0x6f8c], eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2074]
call fcn.00402ea0
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.00445530
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x469d95
push 0
push esi
lea ecx, [ebp - 0x209c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
push 0
push 0
push 0
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2034]
call fcn.00402ea0
push eax
push 0
push 0x4c
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.004455f0
push 0
push 0
push 0
push 0
push 0
push 0x4e4fe0
lea ecx, [ebp - 0x2034]
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4e3310
call fcn.00402ea0
push eax
push 0x4e2684
lea ecx, [ebp - 0x2074]
call fcn.00402ea0
push eax
push 0x4e5018
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
inc dword [ebp - 0x6fb4]
lea eax, [ebp - 0x2518]
push eax
lea ecx, [ebp - 0x2204]
call fcn.00402ea0
mov edx, dword [ebp - 0x6fb4]
mov ecx, eax
call fcn.00435360
test al, al
jne 0x469476
inc esi
cmp esi, dword [ebp - 0x6f9c]
jb 0x4693f0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.00420b90
push 1
push 0
push 0
lea ecx, [ebp - 0x21e0]
call fcn.004025d0
mov ecx, edi
call fcn.00472640
lea ecx, [ebp - 0x2518]
call fcn.00402ce0
lea ecx, [ebp - 0x222c]
call fcn.00407780
lea ecx, [ebp - 0x2424]
call fcn.00402ce0
lea ecx, [ebp - 0x24ac]
call fcn.00402ce0
lea ecx, [ebp - 0x6ed4]
call fcn.0046ce70
lea ecx, [ebp - 0x24c4]
call fcn.00402ce0
lea ecx, [ebp - 0x22b4]
call fcn.00402ce0
lea ecx, [ebp - 0x2924]
call fcn.0042dd90
lea ecx, [ebp - 0x2468]
call fcn.00402ce0
lea ecx, [ebp - 0x25d4]
call fcn.00402ce0
lea ecx, [ebp - 0x29b0]
call fcn.00401e00
lea ecx, [ebp - 0x2334]
call fcn.00402ce0
lea ecx, [ebp - 0x2440]
call fcn.00402ce0
lea ecx, [ebp - 0x21ec]
call fcn.00402ce0
lea ecx, [ebp - 0x25a4]
call fcn.00402ce0
lea ecx, [ebp - 0x2034]
call fcn.00402ce0
lea ecx, [ebp - 0x2204]
call fcn.00402ce0
lea ecx, [ebp - 0x2074]
call fcn.00402ce0
lea ecx, [ebp - 0x3550]
call fcn.00401180
lea ecx, [ebp - 0x3090]
call fcn.00401180
lea ecx, [ebp - 0x22a8]
call fcn.00478600
lea ecx, [ebp - 0x209c]
call fcn.00478f30
lea ecx, [ebp - 0x2370]
call fcn.00478f30
lea ecx, [ebp - 0x223c]
call fcn.00478f30
lea ecx, [ebp - 0x2300]
mov byte [ebp - 4], 0x46
call fcn.00478f30
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46c1fb
test dword [edi + 0x34], 0x40
jne 0x46c1fb
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x4e7be4
push dword [eax + 0x38]
call fcn.0041f410
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x37
push dword [eax + 0x34]
call fcn.00421b70
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x469fbb
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dd598
push esi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402e00
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x469f71
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dd5f0
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402e00
cmp dword [ebp - 0x6fdc], 0
je 0x46a022
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4dd5f0
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402e00
push 0xc
lea ecx, [ebp - 0x1fa4]
mov dword [ebp - 0x6ffc], 0x4dd648
mov dword [ebp - 0x6ff8], 0x4dd658
mov dword [ebp - 0x6ff4], 0x4e7c10
mov dword [ebp - 0x6ff0], 0x4e7c30
mov dword [ebp - 0x6fec], 0x4e7c48
mov dword [ebp - 0x6fe8], 0x4e7c5c
call fcn.00401970
lea ecx, [ebp - 0x1fa4]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x22f4]
mov byte [ebp - 4], 0xf4
call fcn.00401970
lea ecx, [ebp - 0x22f4]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2190]
mov byte [ebp - 4], 0xf5
call fcn.00401970
lea ecx, [ebp - 0x2190]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2328]
mov byte [ebp - 4], 0xf6
call fcn.00401970
lea ecx, [ebp - 0x2328]
call fcn.00402b40
cmp dword [ebp - 0x6fac], 0
mov byte [ebp - 4], 0xf7
mov dword [ebp - 0x6fcc], 0
jbe 0x46a28f
mov dword [ebp - 0x6f8c], esi
nop dword [eax + eax]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46a28f
xor esi, esi
mov dword [ebp - 0x6fa4], esi
nop word [eax + eax]
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + esi*4 - 0x6ffc]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402e00
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x46a25f
lea eax, [ebp - 0x6cec]
mov dword [ebp - 0x6f80], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.00407bb0
test al, al
je 0x46a25f
mov esi, dword [ebp - 0x6f80]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46a259
lea eax, [ebp - 0x1fa4]
push eax
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f74]
call fcn.00407900
test al, al
je 0x46a23d
lea ecx, [ebp - 0x1fa4]
call fcn.00403180
test al, al
jne 0x46a23d
push 3
lea edx, [edi + 0x1a8]
lea ecx, [ebp - 0x1fa4]
call fcn.00409bc0
test al, al
je 0x46a23d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f8c]
push 0x4d0b08
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x213c]
call fcn.00402e00
push 0
lea ecx, [ebp - 0x213c]
call fcn.00402ea0
push eax
lea eax, [ebp - 0x1fa4]
mov ecx, edi
push eax
call fcn.0046e890
lea eax, [ebp - 0x6cec]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.00407bb0
test al, al
jne 0x46a194
mov esi, dword [ebp - 0x6fa4]
inc esi
mov dword [ebp - 0x6fa4], esi
cmp esi, 6
jb 0x46a110
mov esi, dword [ebp - 0x6fcc]
add dword [ebp - 0x6f8c], 0xc
inc esi
mov dword [ebp - 0x6fcc], esi
cmp esi, dword [ebp - 0x6fac]
jb 0x46a0f0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x39
push dword [eax + 0x34]
call fcn.00421b70
push 4
lea ecx, [ebp - 0x6cf0]
call fcn.00405970
lea ecx, [ebp - 0x6cf0]
call fcn.00406240
lea eax, [ebp - 0x6cf0]
mov byte [ebp - 4], 0xf8
push eax
push 0x4c73a4
push 1
push 0
push 0x4c73b4
call dword [0x4ad7f8]
test eax, eax
js 0x46a596
lea ecx, [ebp - 0x70f0]
call fcn.004016e0
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x7060]
movups xmmword [ebp - 0x6fd8], xmm0
call fcn.004016e0
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x7070]
movups xmmword [ebp - 0x6f98], xmm0
call fcn.004016e0
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x7080]
movups xmmword [ebp - 0x6fc0], xmm0
call fcn.004016e0
mov edi, eax
mov byte [ebp - 4], 0xfc
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x6fd8]
mov ecx, dword [ebp - 0x6cf0]
mov edx, esp
sub esp, 0x10
mov eax, esp
sub esp, 0x10
mov esi, dword [ecx]
movups xmmword [edx], xmm0
movups xmm0, xmmword [ebp - 0x6f98]
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x6fc0]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [edi]
push ecx
movups xmmword [eax], xmm0
mov eax, dword [esi + 0x28]
call eax
shr eax, 0x1f
lea ecx, [ebp - 0x7080]
mov dword [ebp - 0x6f80], eax
call fcn.00401770
lea ecx, [ebp - 0x7070]
call fcn.00401770
lea ecx, [ebp - 0x7060]
call fcn.00401770
lea ecx, [ebp - 0x70f0]
mov byte [ebp - 4], 0xf8
call fcn.00401770
cmp byte [ebp - 0x6f80], 0
jne 0x46a590
push 4
lea ecx, [ebp - 0x6d18]
call fcn.00405970
lea ecx, [ebp - 0x6d18]
call fcn.00406240
push 0x4cccfc
lea ecx, [ebp - 0x7030]
mov byte [ebp - 4], 0xfd
call fcn.004015c0
mov byte [ebp - 4], 0xfe
mov ecx, dword [ebp - 0x6cf0]
mov esi, dword [ecx]
lea ecx, [ebp - 0x6d18]
push ecx
mov ecx, eax
call fcn.004016d0
push eax
push dword [ebp - 0x6cf0]
mov eax, dword [esi + 0x1c]
call eax
shr eax, 0x1f
lea ecx, [ebp - 0x7030]
mov dword [ebp - 0x6f80], eax
mov byte [ebp - 4], 0xfd
call fcn.00401670
cmp byte [ebp - 0x6f80], 0
jne 0x46a581
push 4
lea ecx, [ebp - 0x6d24]
call fcn.00405970
lea ecx, [ebp - 0x6d24]
call fcn.00406240
mov byte [ebp - 4], 0xff
lea edx, [ebp - 0x6d24]
mov eax, dword [ebp - 0x6d18]
push edx
push 0
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x28]
call eax
test eax, eax
js 0x46a576
mov eax, dword [ebp - 0x6d24]
lea edx, [ebp - 0x2594]
mov dword [ebp - 0x2594], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
mov eax, dword [ebp - 0x2594]
test eax, eax
je 0x46a576
mov esi, 1
mov dword [ebp - 0x6fcc], esi
cmp eax, esi
jl 0x46a576
mov edi, dword [ebp - 0x6f7c]
push 4
lea ecx, [ebp - 0x6d28]
call fcn.00405970
lea ecx, [ebp - 0x6d28]
call fcn.00406240
push 3
push esi
lea ecx, [ebp - 0x70b0]
mov dword [ebp - 4], 0x100
call fcn.004016f0
mov esi, eax
mov byte [ebp - 4], 1
lea edx, [ebp - 0x6d28]
mov ecx, dword [ebp - 0x6d24]
movups xmm0, xmmword [esi]
push edx
sub esp, 0x10
mov eax, dword [ecx]
mov edx, esp
push ecx
mov eax, dword [eax + 0x20]
movups xmmword [edx], xmm0
call eax
shr eax, 0x1f
lea ecx, [ebp - 0x70b0]
mov dword [ebp - 0x6f80], eax
mov byte [ebp - 4], 0
call fcn.00401770
cmp byte [ebp - 0x6f80], 0
jne 0x46a537
push dword [ebp - 0x6d28]
mov ecx, edi
call fcn.00470960
test al, al
je 0x46a564
lea ecx, [ebp - 0x6d28]
mov dword [ebp - 4], 0xff
call fcn.00478350
mov esi, dword [ebp - 0x6fcc]
inc esi
mov dword [ebp - 0x6fcc], esi
cmp esi, dword [ebp - 0x2594]
jle 0x46a4b2
jmp 0x46a576
lea ecx, [ebp - 0x6d28]
mov dword [ebp - 4], 0xff
call fcn.00478350
lea ecx, [ebp - 0x6d24]
call fcn.00478350
lea ecx, [ebp - 0x6d18]
mov byte [ebp - 4], 0xf8
call fcn.00478350
mov edi, dword [ebp - 0x6f7c]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46c1c0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x3c
push dword [eax + 0x34]
call fcn.00421b70
push 0x18
lea ecx, [ebp - 0x24dc]
call fcn.00401e30
lea ecx, [ebp - 0x24dc]
call fcn.004053a0
mov dword [ebp - 4], 0x102
xor esi, esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x46a63d
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e7c88
push esi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402e00
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x46a5f3
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d3fb0
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402e00
cmp dword [ebp - 0x6fdc], 0
je 0x46a6a4
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4d3fb0
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402e00
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x7000], 0x4d21b4
mov dword [ebp - 0x6ffc], 0x4d21a0
mov dword [ebp - 0x6ff8], 0x4d1424
mov dword [ebp - 0x6ff4], 0x4d4020
mov dword [ebp - 0x6ff0], 0x4d3fa8
mov dword [ebp - 0x6fec], 0x4d21dc
mov dword [ebp - 0x6fe8], 0x4da7f0
mov dword [ebp - 0x6fcc], 0
jbe 0x46a8a8
mov dword [ebp - 0x6f8c], esi
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46a8a8
xor esi, esi
mov dword [ebp - 0x6fa4], esi
nop
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46a888
mov eax, dword [ebp + esi*4 - 0x7000]
lea ecx, [ebp - 0x1fa4]
push ecx
mov ecx, dword [ebp - 0x6f8c]
push eax
mov dword [ebp - 0x6fb4], eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407ad0
test al, al
je 0x46a888
push 0
push 0x4cddfc
lea ecx, [ebp - 0x1fa4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x24dc]
call fcn.004055c0
lea ecx, [ebp - 0x24dc]
mov dword [ebp - 0x6f80], 0
call fcn.00405560
test eax, eax
je 0x46a878
mov esi, dword [ebp - 0x6f80]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46a872
push 3
push 1
push esi
lea ecx, [ebp - 0x24dc]
call fcn.00405550
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00402db0
mov ecx, eax
call fcn.00404ac0
mov ecx, eax
call fcn.00402d60
test eax, eax
je 0x46a85e
push 3
lea edx, [edi + 0x1a8]
lea ecx, [ebp - 0x1fa4]
call fcn.00409bc0
test al, al
je 0x46a85e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x24dc]
call fcn.00405550
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4d0b08
push dword [ebp - 0x6fb4]
push 0x4d0b08
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x213c]
call fcn.00402e00
push 0
lea ecx, [ebp - 0x213c]
call fcn.00402ea0
push eax
lea eax, [ebp - 0x1fa4]
mov ecx, edi
push eax
call fcn.0046e890
lea ecx, [ebp - 0x24dc]
inc esi
call fcn.00405560
cmp esi, eax
jb 0x46a7a4
mov esi, dword [ebp - 0x6fa4]
inc esi
mov dword [ebp - 0x6fa4], esi
cmp esi, 7
jb 0x46a720
mov esi, dword [ebp - 0x6fcc]
add dword [ebp - 0x6f8c], 0xc
inc esi
mov dword [ebp - 0x6fcc], esi
cmp esi, dword [ebp - 0x6fac]
jb 0x46a707
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46c1ae
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x3e
push dword [eax + 0x34]
call fcn.00421b70
push 0xc
lea ecx, [ebp - 0x20f0]
call fcn.00401970
lea ecx, [ebp - 0x20f0]
call fcn.00402b40
mov esi, dword [ebp - 0x6fa4]
xor eax, eax
mov byte [ebp - 4], 3
mov dword [ebp - 0x6fcc], eax
test eax, eax
jne 0x46a8fc
push 0x4d5fe8
jmp 0x46a913
cmp esi, 1
jne 0x46a91e
cmp byte [edi + 0x1b4], 0
je 0x46aa4c
push 0x4e7cf8
lea ecx, [ebp - 0x1f8c]
call fcn.00402c10
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x46aa36
lea eax, [ebp - 0x6cec]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.00407b30
test al, al
je 0x46aa36
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46aa36
lea eax, [ebp - 0x1fa4]
push eax
lea eax, [ebp - 0x2190]
push eax
push 1
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x20f0]
call fcn.00402db0
push eax
mov ecx, edi
call fcn.0046cf60
test al, al
je 0x46aa1a
push 0
lea ecx, [ebp - 0x20f0]
call fcn.00402ea0
push eax
lea eax, [ebp - 0x1fa4]
mov ecx, edi
push eax
call fcn.0046e890
test al, al
je 0x46aa1a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f8c]
push 0x4cccfc
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x213c]
call fcn.00402e00
push 0
lea ecx, [ebp - 0x213c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00402cf0
push eax
mov ecx, edi
call fcn.0046e890
lea eax, [ebp - 0x6cec]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.00407b30
test al, al
jne 0x46a961
mov eax, dword [ebp - 0x6fcc]
inc eax
mov dword [ebp - 0x6fcc], eax
cmp eax, 2
jb 0x46a8f1
mov ecx, edi
call fcn.0046e570
test al, al
je 0x46c1a3
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x41
push dword [eax + 0x34]
call fcn.00421b70
push 4
lea ecx, [ebp - 0x1fa8]
call fcn.00405970
lea ecx, [ebp - 0x1fa8]
call fcn.00406240
push 4
lea ecx, [ebp - 0x2050]
mov byte [ebp - 4], 4
call fcn.00405970
lea ecx, [ebp - 0x2050]
call fcn.00406240
push 4
lea ecx, [ebp - 0x1ff8]
mov byte [ebp - 4], 5
call fcn.00405970
lea ecx, [ebp - 0x1ff8]
call fcn.00406240
mov byte [ebp - 4], 6
lea esi, [ebp - 0x7028]
mov dword [ebp - 0x7028], 0x4e7da4
mov dword [ebp - 0x7024], 0x4e7dc0
mov dword [ebp - 0x7020], 0x4e7e08
mov dword [ebp - 0x701c], 0x4e7e48
mov dword [ebp - 0x7018], 0x4e7eb4
mov dword [ebp - 0x7014], 0x4e7ed8
mov dword [ebp - 0x7010], 0x4e7f28
mov dword [ebp - 0x700c], 0x4e7f58
mov dword [ebp - 0x7008], 0x4e7fb0
mov dword [ebp - 0x7004], 0x4e7ff0
mov dword [ebp - 0x6f8c], 0
mov dword [ebp - 0x6f78], esi
nop dword [eax]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46ae1a
push 0
push 0x20019
push dword [esi]
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x46adfb
mov ecx, edi
xor esi, esi
call fcn.00472640
test al, al
jne 0x46adf5
nop dword [eax]
lea eax, [ebp - 0x6cec]
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.00407b30
test al, al
je 0x46adf5
lea ecx, [ebp - 0x1fa4]
call fcn.00402cf0
lea ecx, [ebp - 0x213c]
call fcn.00402cf0
lea ecx, [ebp - 0x20f0]
call fcn.00402cf0
test dword [ebp - 0x6f8c], 1
jne 0x46aca6
mov eax, dword [ebp - 0x6f78]
lea ecx, [ebp - 0x1f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.Command
push dword [ebp - 0x6cec]
push 0x4cccfc
push dword [eax]
call fcn.00402e00
lea eax, [ebp - 0x1fa4]
push eax
push 0x4ccd04
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1fa8]
call fcn.00407ad0
test al, al
je 0x46ac5b
lea ecx, [ebp - 0x1fa4]
call fcn.00402d60
test eax, eax
je 0x46ac5b
push 3
lea edx, [edi + 0x1a8]
lea ecx, [ebp - 0x1fa4]
call fcn.00409bc0
test al, al
jne 0x46ad6c
lea ecx, [ebp - 0x1fa4]
jmp 0x46ad67
lea eax, [ebp - 0x20f0]
push eax
push str.DelegateExecute
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1fa8]
call fcn.00407ad0
test al, al
je 0x46ac95
lea ecx, [ebp - 0x20f0]
call fcn.00402d60
test eax, eax
jne 0x46ad41
lea eax, [ebp - 0x20f0]
push eax
push 0x4e805c
jmp 0x46ad17
mov ecx, dword [ebp - 0x6cec]
call fcn.00408d80
test al, al
je 0x46acdb
lea eax, [ebp - 0x1fa4]
push eax
lea eax, [ebp - 0x2190]
push eax
push 1
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x20f0]
call fcn.00402db0
jmp 0x46ad55
mov eax, dword [ebp - 0x6f78]
lea ecx, [ebp - 0x1f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
push 0x4cccfc
push dword [eax]
call fcn.00402e00
lea eax, [ebp - 0x20f0]
push eax
push 0x4ccd04
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1fa8]
call fcn.00407ad0
test al, al
je 0x46ad6c
lea ecx, [ebp - 0x20f0]
call fcn.00402d60
test eax, eax
je 0x46ad6c
lea eax, [ebp - 0x1fa4]
push eax
lea eax, [ebp - 0x2190]
push eax
lea eax, [ebp - 0x20f0]
push eax
mov ecx, edi
call fcn.0046cf60
test al, al
jne 0x46ad6c
lea ecx, [ebp - 0x20f0]
call fcn.00402cf0
push 0
lea ecx, [ebp - 0x20f0]
call fcn.00402ea0
push eax
lea eax, [ebp - 0x1fa4]
mov ecx, edi
push eax
call fcn.0046e890
test al, al
je 0x46ade5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f8c]
push 0x4cccfc
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x213c]
call fcn.00402e00
push 0
lea ecx, [ebp - 0x213c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00402cf0
push eax
mov ecx, edi
call fcn.0046e890
mov ecx, edi
inc esi
call fcn.00472640
test al, al
je 0x46ab80
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6f8c]
add esi, 4
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, 0xa
jb 0x46ab40
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46c182
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x46
push dword [eax + 0x34]
call fcn.00421b70
xor esi, esi
mov dword [ebp - 0x7028], 0x4d4fa8
mov dword [ebp - 0x7024], 0x4d5048
mov dword [ebp - 0x6f8c], esi
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46af66
push 0
push 0x20019
push dword [ebp + esi*4 - 0x7028]
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x46af56
mov ecx, edi
xor esi, esi
call fcn.00472640
test al, al
jne 0x46af50
lea eax, [ebp - 0x6cec]
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.00407b30
test al, al
je 0x46af50
mov eax, dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x213c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
push 0x4cccfc
push dword [ebp + eax*4 - 0x7028]
call fcn.00402e00
lea eax, [ebp - 0x1fa4]
push eax
push str.Debugger
lea ecx, [ebp - 0x213c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1fa8]
call fcn.00407ad0
test al, al
je 0x46af40
push 3
lea edx, [edi + 0x1a8]
lea ecx, [ebp - 0x1fa4]
call fcn.00409bc0
test al, al
je 0x46af40
push 0
lea ecx, [ebp - 0x213c]
call fcn.00402ea0
push eax
lea eax, [ebp - 0x1fa4]
mov ecx, edi
push eax
call fcn.0046e890
mov ecx, edi
inc esi
call fcn.00472640
test al, al
je 0x46ae96
mov esi, dword [ebp - 0x6f8c]
inc esi
mov dword [ebp - 0x6f8c], esi
cmp esi, 2
jb 0x46ae55
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46c182
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x48
push dword [eax + 0x34]
call fcn.00421b70
push 0x4d4f18
lea ecx, [ebp - 0x2114]
mov dword [ebp - 0x7028], 0x4e8074
mov dword [ebp - 0x7024], 0x4e8098
mov dword [ebp - 0x7020], 0x4e80c8
mov dword [ebp - 0x701c], 0x4e80f4
call fcn.00402c10
push 0xc
lea ecx, [ebp - 0x240c]
call fcn.00401970
push 1
push 0x4cd6e8
lea ecx, [ebp - 0x240c]
call fcn.00402b90
push 0
push 0x20019
lea ecx, [ebp - 0x2114]
mov byte [ebp - 4], 7
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x46b22d
xor esi, esi
mov dword [ebp - 0x6f8c], esi
nop
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46b22d
cmp esi, 1
jne 0x46b06a
push 0x4e8118
lea ecx, [ebp - 0x2114]
call fcn.00402c10
push 0
push 0x20019
lea ecx, [ebp - 0x2114]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x46b22d
push 0x4ccce8
lea ecx, [ebp - 0x240c]
call fcn.00402c10
lea eax, [ebp - 0x1fa4]
push eax
push dword [ebp + esi*4 - 0x7028]
lea ecx, [ebp - 0x1f74]
call fcn.00407900
test al, al
je 0x46b21d
lea ecx, [ebp - 0x1fa4]
call fcn.00403180
test al, al
jne 0x46b21d
push 0x4cdde4
lea ecx, [ebp - 0x1fa4]
call fcn.00402c50
test al, al
jne 0x46b21d
push 1
lea ecx, [ebp - 0x240c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x24dc]
call fcn.004055c0
lea ecx, [ebp - 0x24dc]
xor esi, esi
call fcn.00405560
test eax, eax
je 0x46b217
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46b217
push 3
push 1
push esi
lea ecx, [ebp - 0x24dc]
call fcn.00405550
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00402db0
mov ecx, eax
call fcn.00404ac0
mov ecx, eax
call fcn.00403180
test al, al
jne 0x46b203
lea ecx, [ebp - 0x1fa4]
call fcn.00402d60
cmp eax, 5
jl 0x46b15d
push 0
push 1
push 1
push 0
push 0x4ccd00
lea ecx, [ebp - 0x1fa4]
call fcn.00403fc0
test eax, eax
jne 0x46b183
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str..dll
lea ecx, [ebp - 0x1fa4]
call fcn.00404260
push 3
lea edx, [edi + 0x1a8]
lea ecx, [ebp - 0x1fa4]
call fcn.00409bc0
test al, al
je 0x46b203
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x24dc]
call fcn.00405550
push eax
mov eax, dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x2114]
push 0x4d0b08
push dword [ebp + eax*4 - 0x7028]
push 0x4d0b08
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x213c]
call fcn.00402e00
push 0
lea ecx, [ebp - 0x213c]
call fcn.00402ea0
push eax
lea eax, [ebp - 0x1fa4]
mov ecx, edi
push eax
call fcn.0046e890
lea ecx, [ebp - 0x24dc]
inc esi
call fcn.00405560
cmp esi, eax
jb 0x46b0f0
mov esi, dword [ebp - 0x6f8c]
inc esi
mov dword [ebp - 0x6f8c], esi
cmp esi, 4
jb 0x46b010
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46c177
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x4b
push dword [eax + 0x34]
call fcn.00421b70
movsd xmm0, qword [0x4ee000]
mov eax, 0x4e81d8
comisd xmm0, xmmword [edi + 0x390]
mov ecx, 0x4e8170
cmovbe ecx, eax
mov eax, dword [edi + 0x30]
xor esi, esi
mov dword [ebp - 0x6fb4], ecx
test eax, eax
je 0x46b2de
mov eax, dword [ebp - 0x6fa0]
lea edx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push ecx
push esi
mov ecx, edx
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402e00
add dword [ebp - 0x6f8c], 0xc
lea edx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
mov ecx, dword [ebp - 0x6fb4]
cmp esi, eax
jb 0x46b290
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push ecx
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402e00
cmp dword [ebp - 0x6fdc], 0
je 0x46b342
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6fb4]
inc eax
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402e00
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6fb4], 0
jbe 0x46b52b
mov dword [ebp - 0x6f8c], esi
nop
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46b52b
push 0
push 0x20019
mov ecx, esi
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407750
test al, al
je 0x46b509
lea eax, [ebp - 0x6cec]
mov dword [ebp - 0x6fcc], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.00407bb0
test al, al
je 0x46b509
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46b503
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1fa4]
call fcn.00402c10
lea ecx, [ebp - 0x1fa4]
call fcn.00402d60
mov esi, eax
cmp esi, 3
jl 0x46b4db
push 1
lea ecx, [ebp - 0x1fa4]
call fcn.00402cd0
cmp word [eax], 0x3a
jne 0x46b4db
push 2
lea ecx, [ebp - 0x1fa4]
call fcn.00402cd0
cmp word [eax], 0x5c
jne 0x46b4db
movsd xmm0, qword [edi + 0x390]
comisd xmm0, xmmword [0x4ee008]
jbe 0x46b48b
cmp esi, 0x14
jle 0x46b48b
push 0
push 1
push 0xffffffffffffffff
push 0
push 0x4e8270
lea ecx, [ebp - 0x1fa4]
call fcn.00403fc0
mov edx, eax
lea ecx, [esi - 0xf]
cmp edx, ecx
jge 0x46b475
push 0
push 1
push 0xffffffffffffffff
push 0
push 0x4e8294
lea ecx, [ebp - 0x1fa4]
call fcn.00403fc0
mov edx, eax
lea eax, [esi - 0x13]
cmp edx, eax
jle 0x46b48b
lea eax, [edx - 1]
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00403e90
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
push 0x4d0b08
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x213c]
call fcn.00402e00
push 0
lea ecx, [ebp - 0x213c]
call fcn.00402ea0
push eax
lea eax, [ebp - 0x1fa4]
mov ecx, edi
push eax
call fcn.0046e890
mov esi, dword [ebp - 0x6fcc]
lea eax, [ebp - 0x6cec]
inc esi
lea ecx, [ebp - 0x1f74]
push eax
push esi
mov dword [ebp - 0x6fcc], esi
call fcn.00407bb0
test al, al
jne 0x46b3b7
mov esi, dword [ebp - 0x6f8c]
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f8c], esi
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x46b360
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46c177
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x50
push dword [eax + 0x34]
call fcn.00421b70
push 0xc
lea ecx, [ebp - 0x212c]
call fcn.004076b0
push 0xbb8
push 0
lea ecx, [ebp - 0x212c]
call fcn.00478fa0
mov byte [ebp - 4], 8
xor esi, esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x46b5d8
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x10c]
mov dword [ebp - 0x6f8c], eax
nop dword [eax]
push esi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x104]
push esi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
mov edx, 0x4d1d98
mov ecx, eax
call fcn.004260d0
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x10c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x46b590
mov ecx, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0x16
lea ecx, [ecx + eax*4]
call fcn.00403330
mov eax, dword [ebp - 0x6fa0]
xor esi, esi
mov dword [ebp - 0x6f8c], eax
nop dword [eax]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46b638
mov ecx, dword [ebp - 0x6f8c]
lea eax, [ebp - 0x212c]
push 1
push eax
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.00471100
test al, al
je 0x46b638
add dword [ebp - 0x6f8c], 0xc
inc esi
cmp esi, dword [edi + 0x30]
jbe 0x46b600
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46c16c
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x51
push dword [eax + 0x34]
call fcn.00421b70
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x46b6ee
lea eax, [edi + 0x10c]
push esi
mov ecx, eax
call fcn.00478820
mov ecx, eax
call fcn.00403180
test al, al
jne 0x46b6de
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2978]
call fcn.00402ea0
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00402e00
push 1
lea eax, [ebp - 0x212c]
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.00471100
test al, al
je 0x46b6ee
inc esi
lea eax, [edi + 0x10c]
cmp esi, dword [edi + 0x30]
jb 0x46b668
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46c16c
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x52
push dword [eax + 0x34]
call fcn.00421b70
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x46b7a9
lea eax, [edi + 0x10c]
nop
push esi
mov ecx, eax
call fcn.00478820
mov ecx, eax
call fcn.00403180
test al, al
jne 0x46b799
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e82bc
lea ecx, [ebp - 0x226c]
call fcn.00402ea0
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00402e00
push 1
lea eax, [ebp - 0x212c]
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.00471100
test al, al
je 0x46b7a9
inc esi
lea eax, [edi + 0x10c]
cmp esi, dword [edi + 0x30]
jb 0x46b720
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46c16c
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x53
push dword [eax + 0x34]
call fcn.00421b70
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x46b866
lea eax, [edi + 0x10c]
nop dword [eax]
push esi
mov ecx, eax
call fcn.00478820
mov ecx, eax
call fcn.00403180
test al, al
jne 0x46b856
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x250c]
call fcn.00402ea0
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00402e00
push 0
lea eax, [ebp - 0x212c]
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.00471100
test al, al
je 0x46b866
inc esi
lea eax, [edi + 0x10c]
cmp esi, dword [edi + 0x30]
jb 0x46b7e0
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46c16c
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x46b8da
mov ecx, dword [ebp - 0x6fa0]
lea eax, [edi + 0x10c]
mov dword [ebp - 0x6f8c], ecx
push esi
mov ecx, eax
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
push eax
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x104]
push esi
call fcn.00478820
mov ecx, eax
call fcn.00402ea0
mov edx, str.374DE290_123F_4565_9164_39C4925E467B
mov ecx, eax
call fcn.004260d0
add dword [ebp - 0x6f8c], 0xc
lea eax, [edi + 0x10c]
inc esi
cmp esi, dword [edi + 0x30]
jb 0x46b892
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x54
push dword [eax + 0x34]
call fcn.00421b70
mov eax, dword [edi + 0x30]
mov ecx, dword [ebp - 0x6fa0]
push 0
push 0
lea eax, [eax + eax*2]
push 0x19
lea ecx, [ecx + eax*4]
call fcn.00403330
xor esi, esi
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46b93e
mov ecx, dword [ebp - 0x6fa0]
lea eax, [ebp - 0x212c]
push 0
push eax
call fcn.00402ea0
push eax
mov ecx, edi
call fcn.00471100
test al, al
je 0x46b93e
add dword [ebp - 0x6fa0], 0xc
inc esi
cmp esi, dword [edi + 0x30]
jbe 0x46b906
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46c16c
push 0xc
lea ecx, [ebp - 0x27d4]
call fcn.00401970
lea ecx, [ebp - 0x27d4]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2658]
mov byte [ebp - 4], 9
call fcn.00401970
lea ecx, [ebp - 0x2658]
call fcn.00402b40
push 0x4c
lea ecx, [ebp - 0x2b58]
mov byte [ebp - 4], 0xa
call fcn.004100c0
lea ecx, [ebp - 0x2b58]
call fcn.004098a0
lea ecx, [ebp - 0x212c]
mov byte [ebp - 4], 0xb
call fcn.00405560
xor esi, esi
mov dword [ebp - 0x6f80], eax
test eax, eax
je 0x46bb41
nop dword [eax]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46bb41
push 0x4d4084
push 1
push 1
push esi
lea ecx, [ebp - 0x212c]
call fcn.00478f10
mov ecx, eax
call fcn.00402f40
push eax
lea ecx, [ebp - 0x27d4]
call fcn.00402db0
mov ecx, eax
call fcn.00402c50
test al, al
je 0x46bb07
push 0
push esi
lea ecx, [ebp - 0x212c]
call fcn.00478f10
mov ecx, eax
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2b58]
call fcn.004098f0
test al, al
je 0x46bb07
push esi
lea ecx, [ebp - 0x212c]
call fcn.00478f10
push eax
lea ecx, [ebp - 0x2658]
call fcn.00402c20
push 1
push 0
lea ecx, [ebp - 0x2b58]
call fcn.00409990
push eax
push esi
lea ecx, [ebp - 0x212c]
call fcn.00478f10
mov ecx, eax
call fcn.00402db0
mov ecx, eax
call fcn.00403180
test al, al
jne 0x46bb34
lea ecx, [ebp - 0x2b58]
call fcn.004099e0
mov ecx, eax
call fcn.00405980
push 0
push 0
test eax, eax
je 0x46bae8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2b58]
call fcn.004099e0
push eax
push 0x4cd604
push esi
lea ecx, [ebp - 0x212c]
call fcn.00478f10
mov ecx, eax
call fcn.00404260
push 3
push esi
lea ecx, [ebp - 0x212c]
call fcn.00478f10
lea edx, [edi + 0x1a8]
mov ecx, eax
call fcn.00409bc0
test al, al
je 0x46bb34
jmp 0x46bb12
push 0x4ccd04
push 0x4cd600
push esi
lea ecx, [ebp - 0x212c]
call fcn.00478f10
mov ecx, eax
call fcn.004047c0
jmp 0x46bb12
lea ecx, [ebp - 0x2658]
call fcn.00402cf0
push 0
lea ecx, [ebp - 0x2658]
call fcn.00402ea0
push eax
push esi
lea ecx, [ebp - 0x212c]
call fcn.00478f10
push eax
mov ecx, edi
call fcn.0046e890
inc esi
cmp esi, dword [ebp - 0x6f80]
jb 0x46b9c0
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46c14b
mov ecx, edi
call fcn.0046e570
test al, al
je 0x46c14b
push 0
push 0
lea ecx, [ebp - 0x212c]
call fcn.00478df0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x55
push dword [eax + 0x34]
call fcn.00421b70
push 0xc
lea ecx, [ebp - 0x6d60]
call fcn.004076b0
lea ecx, [ebp - 0x6d60]
call fcn.004076f0
push 0xc
lea ecx, [ebp - 0x6d74]
mov byte [ebp - 4], 0xc
call fcn.004076b0
lea ecx, [ebp - 0x6d74]
call fcn.004076f0
push 0
push 0x20019
push 0x4d6908
lea ecx, [ebp - 0x1fa8]
mov byte [ebp - 4], 0xd
call fcn.00407750
test al, al
je 0x46bf5a
lea eax, [ebp - 0x6d60]
mov dword [ebp - 0x6fcc], 0
push eax
push 0
lea ecx, [ebp - 0x1fa8]
call fcn.00407b30
test al, al
je 0x46bf5a
nop dword [eax + eax]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46bf5a
push dword [ebp - 0x6d60]
lea ecx, [ebp - 0x2190]
call fcn.00402c10
push 0x4e82f0
lea ecx, [ebp - 0x2190]
call fcn.00402c80
test al, al
je 0x46bc54
push 0xa
push 1
push 1
push 0
push 0x4e8314
lea ecx, [ebp - 0x2190]
call fcn.00403fc0
test eax, eax
je 0x46bf32
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e832c
push dword [ebp - 0x6d60]
lea ecx, [ebp - 0x1f8c]
push 0x4e8340
call fcn.00402e00
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2050]
call fcn.00407750
test al, al
je 0x46bf32
mov ecx, edi
xor esi, esi
call fcn.00472640
test al, al
jne 0x46bf32
lea eax, [ebp - 0x6d74]
push eax
push esi
lea ecx, [ebp - 0x2050]
call fcn.00407b30
test al, al
je 0x46bf32
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6d74]
lea ecx, [ebp - 0x1f8c]
push 0x4e835c
push dword [ebp - 0x6d60]
push 0x4e8340
call fcn.00402e00
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1ff8]
call fcn.00407750
test al, al
je 0x46bf22
lea eax, [ebp - 0x28d0]
push eax
push 0x4d1418
lea ecx, [ebp - 0x1ff8]
call fcn.00407a40
test al, al
je 0x46bf22
cmp dword [ebp - 0x28d0], 0xb
jne 0x46bda1
lea eax, [ebp - 0x1fa4]
push eax
push 0x4d1448
lea ecx, [ebp - 0x1ff8]
call fcn.00407900
test al, al
je 0x46bf22
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00402ea0
push eax
push 0x1000
lea ecx, [ebp - 0x1fa4]
call fcn.004033e0
lea edx, [edi + 0x1a8]
mov ecx, eax
call fcn.0040ae00
jmp 0x46be5b
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d67c4
lea ecx, [ebp - 0x1f8c]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x22f4]
call fcn.00402e00
lea eax, [ebp - 0x1fa4]
push eax
push 0x4d6830
lea ecx, [ebp - 0x22f4]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407ad0
test al, al
je 0x46be07
lea ecx, [ebp - 0x1fa4]
call fcn.00403180
test al, al
je 0x46be48
lea eax, [ebp - 0x1fa4]
push eax
push 0x4d6830
lea ecx, [ebp - 0x1ff8]
call fcn.00407900
test al, al
je 0x46be31
lea ecx, [ebp - 0x1fa4]
call fcn.00403180
test al, al
je 0x46be48
lea eax, [ebp - 0x1fa4]
push eax
push 0x4d1448
lea ecx, [ebp - 0x1ff8]
call fcn.00407900
push 3
lea edx, [edi + 0x1a8]
lea ecx, [ebp - 0x1fa4]
call fcn.00409bc0
test al, al
je 0x46bf22
lea ecx, [ebp - 0x1fa4]
call fcn.00402ea0
push eax
push 0
call dword [0x4ad814]
test eax, eax
je 0x46be97
push 1
push 0
lea ecx, [ebp - 0x7050]
call fcn.00402b90
mov byte [ebp - 4], 0xe
or dword [ebp - 0x6fe4], 1
jmp 0x46beb7
lea eax, [ebp - 0x1f8c]
push eax
lea ecx, [ebp - 0x7044]
call fcn.00402b60
mov dword [ebp - 4], 0x10f
or dword [ebp - 0x6fe4], 2
push eax
lea ecx, [ebp - 0x213c]
call fcn.00402c20
mov eax, dword [ebp - 0x6fe4]
test al, 2
je 0x46bee7
and eax, 0xfffffffd
lea ecx, [ebp - 0x7044]
mov dword [ebp - 0x6fe4], eax
call fcn.00402ce0
mov eax, dword [ebp - 0x6fe4]
mov dword [ebp - 4], 0x10d
test al, 1
je 0x46bf06
and eax, 0xfffffffe
lea ecx, [ebp - 0x7050]
mov dword [ebp - 0x6fe4], eax
call fcn.00402ce0
push 0
lea ecx, [ebp - 0x213c]
call fcn.00402ea0
push eax
lea eax, [ebp - 0x1fa4]
mov ecx, edi
push eax
call fcn.0046e890
mov ecx, edi
inc esi
call fcn.00472640
test al, al
je 0x46bcb8
mov eax, dword [ebp - 0x6fcc]
lea ecx, [ebp - 0x6d60]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1fa8]
mov dword [ebp - 0x6fcc], eax
call fcn.00407b30
test al, al
jne 0x46bc00
mov ecx, edi
call fcn.0046e570
test al, al
je 0x46c135
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x58
push dword [eax + 0x34]
call fcn.00421b70
push 4
lea ecx, [ebp - 0x6d20]
call fcn.00405970
lea ecx, [ebp - 0x6d20]
call fcn.00401040
lea eax, [ebp - 0x2598]
mov byte [ebp - 4], 0x10
push eax
push 0x1f40
lea eax, [ebp - 0x1f70]
mov dword [ebp - 0x6ce0], 0x428
push eax
mov dword [ebp - 0x2598], 0
call dword [0x4ad2b8]
test eax, eax
je 0x46c08c
xor esi, esi
test dword [ebp - 0x2598], 0xfffffffc
jbe 0x46c08c
nop dword [eax]
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46c08c
push dword [ebp + esi*4 - 0x1f70]
push 0x18
call dword [0x4ad2c8]
push eax
lea ecx, [ebp - 0x6d20]
call fcn.00401070
lea ecx, [ebp - 0x6d20]
call fcn.004010a0
test al, al
jne 0x46c07a
lea eax, [ebp - 0x6ce0]
push eax
push dword [ebp - 0x6d20]
call dword [0x4ad31c]
test eax, eax
je 0x46c06f
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46c06f
lea eax, [ebp - 0x6ac0]
mov ecx, edi
push eax
lea eax, [ebp - 0x212c]
push eax
call fcn.00471440
test al, al
je 0x46c06f
lea eax, [ebp - 0x6ce0]
push eax
push dword [ebp - 0x6d20]
call dword [0x4ad318]
test eax, eax
jne 0x46c034
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46c08c
mov eax, dword [ebp - 0x2598]
inc esi
shr eax, 2
cmp esi, eax
jb 0x46bfe0
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46c12a
lea ecx, [ebp - 0x212c]
call fcn.00405560
mov ecx, dword [edi + 8]
push 0x5a
mov dword [ebp - 0x6fb4], eax
push dword [ecx + 0x34]
mov ecx, dword [edi + 4]
call fcn.00421b70
xor esi, esi
cmp dword [ebp - 0x6fb4], esi
jbe 0x46c123
mov dword [ebp - 0x6f8c], esi
mov ecx, edi
call fcn.00472640
test al, al
jne 0x46c123
mov eax, dword [ebp - 0x6f8c]
xor edx, edx
div dword [ebp - 0x6fb4]
mov ecx, dword [edi + 4]
add eax, 0x5a
push eax
mov eax, dword [edi + 8]
push dword [eax + 0x34]
call fcn.00421b70
push 0
push 0
push esi
lea ecx, [ebp - 0x212c]
call fcn.00478f10
push eax
mov ecx, edi
call fcn.0046e890
add dword [ebp - 0x6f8c], 0xa
inc esi
cmp esi, dword [ebp - 0x6fb4]
jb 0x46c0d0
mov ecx, edi
call fcn.0046e570
lea ecx, [ebp - 0x6d20]
call fcn.00401050
lea ecx, [ebp - 0x6d74]
call fcn.00402ce0
lea ecx, [ebp - 0x6d60]
call fcn.00402ce0
lea ecx, [ebp - 0x2b58]
call fcn.00409a80
lea ecx, [ebp - 0x2658]
call fcn.00402ce0
lea ecx, [ebp - 0x27d4]
call fcn.00402ce0
lea ecx, [ebp - 0x212c]
call fcn.00478f30
lea ecx, [ebp - 0x240c]
call fcn.00402ce0
lea ecx, [ebp - 0x1ff8]
call fcn.00407780
lea ecx, [ebp - 0x2050]
call fcn.00407780
lea ecx, [ebp - 0x1fa8]
call fcn.00407780
lea ecx, [ebp - 0x20f0]
call fcn.00402ce0
lea ecx, [ebp - 0x24dc]
mov dword [ebp - 4], 0xf8
call fcn.004054e0
lea ecx, [ebp - 0x6cf0]
call fcn.00478350
lea ecx, [ebp - 0x2328]
call fcn.00402ce0
lea ecx, [ebp - 0x2190]
call fcn.00402ce0
lea ecx, [ebp - 0x22f4]
call fcn.00402ce0
lea ecx, [ebp - 0x1fa4]
mov byte [ebp - 4], 0x46
call fcn.00402ce0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0
push 0x1004
push dword [eax + 0xb8]
call fcn.0041dc10
push 0xc
lea ecx, [ebp - 0x2800]
mov dword [ebp - 0x6f8c], eax
call fcn.00401970
lea ecx, [ebp - 0x2800]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x27f4]
mov dword [ebp - 4], 0x111
call fcn.00401970
lea ecx, [ebp - 0x27f4]
call fcn.00402b40
push 0xc
lea ecx, [ebp - 0x2990]
mov byte [ebp - 4], 0x12
call fcn.00401970
lea ecx, [ebp - 0x2990]
call fcn.00402b40
push 0
push 0x4e8378
lea ecx, [ebp - 0x1fc8]
mov byte [ebp - 4], 0x13
call fcn.0040e560
xor esi, esi
cmp dword [ebp - 0x6f8c], esi
jbe 0x46c3a6
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push esi
push dword [eax + 0xb8]
call fcn.00420dd0
cmp eax, 0x51
jne 0x46c399
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push esi
push dword [eax + 0xb8]
call fcn.00420ed0
push eax
lea ecx, [ebp - 0x2154]
call fcn.00402e60
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push esi
push dword [eax + 0xb8]
call fcn.00420ed0
push eax
lea ecx, [ebp - 0x2800]
call fcn.00402e60
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 2
push esi
push dword [eax + 0xb8]
call fcn.00420ed0
push eax
lea ecx, [ebp - 0x27f4]
call fcn.00402e60
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 3
push esi
push dword [eax + 0xb8]
call fcn.00420ed0
push eax
lea ecx, [ebp - 0x2990]
call fcn.00402e60
push 0
push 0
push 0
push 0x4e4664
lea ecx, [ebp - 0x2990]
call fcn.00402ea0
push eax
push 0x4e83e4
lea ecx, [ebp - 0x27f4]
call fcn.00402ea0
push eax
push 0x4e8408
lea ecx, [ebp - 0x2800]
call fcn.00402ea0
push eax
push 0x4e8430
lea ecx, [ebp - 0x2154]
call fcn.00402ea0
push eax
push 0x4e3310
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
inc esi
cmp esi, dword [ebp - 0x6f8c]
jb 0x46c292
push 0
push 0x4e8458
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
push 0x18
lea ecx, [ebp - 0x29c8]
call fcn.00401e30
lea ecx, [ebp - 0x29c8]
call fcn.004053a0
xor esi, esi
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x6f8c], esi
jbe 0x46c590
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push esi
push dword [eax + 0xb8]
call fcn.00420dd0
cmp eax, 0x52
jne 0x46c583
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push esi
push dword [eax + 0xb8]
call fcn.00420ed0
push eax
lea ecx, [ebp - 0x2154]
call fcn.00402e60
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push esi
push dword [eax + 0xb8]
call fcn.00420ed0
push eax
lea ecx, [ebp - 0x2800]
call fcn.00402e60
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 2
push esi
push dword [eax + 0xb8]
call fcn.00420ed0
push eax
lea ecx, [ebp - 0x27f4]
call fcn.00402e60
push 1
push 0x4d0b08
lea ecx, [ebp - 0x2154]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x29c8]
call fcn.004055c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x29c8]
call fcn.00405550
push eax
push 0x4e8494
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea ecx, [ebp - 0x29c8]
call fcn.00405560
cmp eax, 1
jbe 0x46c4ef
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x29c8]
call fcn.00405550
push eax
push 0x4e84a8
lea ecx, [ebp - 0x1f80]
call fcn.00404260
lea ecx, [ebp - 0x29c8]
call fcn.00405560
cmp eax, 2
jbe 0x46c531
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 2
lea ecx, [ebp - 0x29c8]
call fcn.00405550
push eax
push 0x4e84c0
lea ecx, [ebp - 0x1f80]
call fcn.00404260
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4664
lea ecx, [ebp - 0x27f4]
call fcn.00402ea0
push eax
push 0x4e8408
lea ecx, [ebp - 0x2800]
call fcn.00402ea0
push eax
push 0x4e8430
lea ecx, [ebp - 0x1f80]
call fcn.00404260
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
inc esi
cmp esi, dword [ebp - 0x6f8c]
jb 0x46c3e2
push 0
push 0x4e84d8
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e1f18
call fcn.004207f0
push 0
push 0x4e8528
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e1f48
call fcn.004207f0
push 0
push 0x4e85b0
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
movsd xmm0, qword [edi + 0x390]
comisd xmm0, xmmword [0x4ee008]
jbe 0x46c638
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e1f68
call fcn.004207f0
push 0
push 0x4e8628
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e1f9c
call fcn.004207f0
push 0
push 0x4e86b8
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e1fcc
call fcn.004207f0
push 0
push 0x4e8740
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e1ff8
call fcn.004207f0
push 0
push 0x4e87c8
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e2030
call fcn.004207f0
push 0
push 0x4e8858
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e2078
call fcn.004207f0
push 0
push 0x4e88f8
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
mov eax, dword [edi + 8]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
mov ecx, dword [edi + 4]
push 0x4e20c0
call fcn.004207f0
push 0
push 0x4e8998
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e2108
call fcn.004207f0
push 0
push 0x4e8a38
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e2140
call fcn.004207f0
push 0
push 0x4e8ac8
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e2188
call fcn.004207f0
push 0
push 0x4e8b68
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e21e8
call fcn.004207f0
push 0
push 0x4e8bf0
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e222c
call fcn.004207f0
push 0
push 0x4e8c90
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
mov eax, dword [edi + 8]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
mov ecx, dword [edi + 4]
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e2268
call fcn.004207f0
push 0
push 0x4e8d28
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e8dc0
call fcn.004207f0
push 0
push 0x4e8e10
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e22a8
call fcn.004207f0
push 0
push 0x4e8eb8
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
movsd xmm0, qword [edi + 0x390]
lea ecx, [ebp - 0x1fc8]
xor eax, eax
comisd xmm0, xmmword [0x4ee008]
seta al
add eax, 8
add dword [edi + 0x24], eax
call fcn.0040da20
test eax, eax
je 0x46cab3
lea ecx, [ebp - 0x29d0]
call fcn.00413340
lea ecx, [ebp - 0x29d0]
call fcn.00413330
mov edi, eax
lea ecx, [ebp - 0x29d0]
sub edi, dword [ebp - 0x7038]
mov esi, edx
lea edx, [ebp - 0x1f80]
sbb esi, dword [ebp - 0x702c]
call fcn.004132f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dd848
lea ecx, [ebp - 0x1f80]
call fcn.00402ea0
push eax
push 0x4e8f48
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
push esi
push edi
xor edx, edx
lea ecx, [ebp - 0x1f80]
call fcn.004136e0
mov ecx, dword [ebp - 0x6f7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dd314
call fcn.00472640
test al, al
mov edx, 0x4e8fe8
mov ecx, 0x4e8fa0
cmove ecx, edx
push ecx
push 0x4e9028
lea ecx, [ebp - 0x1f80]
call fcn.00402ea0
push eax
push 0x4e9038
lea ecx, [ebp - 0x1f80]
call fcn.00402e00
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
push 0
push 0x4e9060
lea ecx, [ebp - 0x1fc8]
call fcn.0040e560
lea ecx, [ebp - 0x1fc8]
call fcn.0040d9b0
mov edi, eax
lea ecx, [ebp - 0x1f80]
add edi, 0x26
mov esi, edx
adc esi, 0
push esi
push edi
call fcn.00403790
lea ecx, [ebp - 0x1f80]
call fcn.00402d60
add eax, eax
add edi, eax
adc esi, 0
push esi
push edi
lea ecx, [ebp - 0x1f80]
call fcn.00403790
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e909c
lea ecx, [ebp - 0x1f80]
call fcn.00404260
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov edi, dword [ebp - 0x6f7c]
jmp 0x46cabe
lea ecx, [edi + 0x11c]
call fcn.00402cf0
lea ecx, [ebp - 0x1f74]
call fcn.00408830
lea ecx, [ebp - 0x2570]
call fcn.00408830
push 5
lea ecx, [edi + 0x33c]
call fcn.00403f10
lea ecx, [edi + 0x33c]
call fcn.00402ea0
push eax
push 0x80000002
call dword [0x4ad0e0]
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x64
push dword [eax + 0x34]
call fcn.00421b70
push 0
mov ecx, edi
call fcn.00472640
test al, al
mov edx, 0x4e90e0
mov eax, dword [edi + 8]
mov ecx, 0x4e90c4
cmove ecx, edx
push ecx
mov ecx, dword [edi + 4]
push dword [eax + 0x38]
call fcn.0041f410
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e9100
lea ecx, [edi + 0x134]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2154]
call fcn.00402e00
lea ecx, [ebp - 0x2154]
call fcn.00402ea0
mov esi, 2
mov ecx, eax
mov edx, esi
call fcn.0040d1e0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e9110
lea ecx, [edi + 0x134]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2154]
call fcn.00402e00
lea ecx, [ebp - 0x2154]
call fcn.00402ea0
mov edx, esi
mov ecx, eax
call fcn.0040d1e0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e9120
lea ecx, [edi + 0x134]
call fcn.00402ea0
push eax
lea ecx, [ebp - 0x2154]
call fcn.00402e00
lea ecx, [ebp - 0x2154]
call fcn.00402ea0
mov edx, esi
mov ecx, eax
call fcn.0040d1e0
lea ecx, [edi + 0x248]
call fcn.0042e540
lea ecx, [ebp - 0x29c8]
xor esi, esi
call fcn.004054e0
lea ecx, [ebp - 0x2990]
call fcn.00402ce0
lea ecx, [ebp - 0x27f4]
call fcn.00402ce0
lea ecx, [ebp - 0x2800]
call fcn.00402ce0
lea ecx, [ebp - 0x213c]
call fcn.00402ce0
lea ecx, [ebp - 0x6e04]
call fcn.00478840
lea ecx, [ebp - 0x21e0]
call fcn.00401ae0
lea ecx, [ebp - 0x2574]
call fcn.0042cfd0
lea ecx, [ebp - 0x2984]
call fcn.00402ce0
lea ecx, [ebp - 0x6dfc]
call fcn.00478840
lea ecx, [ebp - 0x6d4c]
call fcn.00401370
lea ecx, [ebp - 0x1fc8]
call fcn.00401e00
lea ecx, [ebp - 0x25e0]
call fcn.00402ce0
lea ecx, [ebp - 0x1f80]
call fcn.00402ce0
lea ecx, [ebp - 0x2960]
call fcn.00402ce0
lea ecx, [ebp - 0x2780]
call fcn.00402ce0
lea ecx, [ebp - 0x2a64]
call fcn.00402ce0
lea ecx, [ebp - 0x2a18]
call fcn.00402ce0
lea ecx, [ebp - 0x6cec]
call fcn.00402ce0
lea ecx, [ebp - 0x2570]
call fcn.00407780
lea ecx, [ebp - 0x1f74]
call fcn.00407780
lea ecx, [ebp - 0x25ec]
call fcn.00402ce0
lea ecx, [ebp - 0x296c]
call fcn.00402ce0
lea ecx, [ebp - 0x264c]
call fcn.00402ce0
lea ecx, [ebp - 0x2640]
call fcn.00402ce0
lea ecx, [ebp - 0x2954]
call fcn.00402ce0
lea ecx, [ebp - 0x2948]
call fcn.00402ce0
lea ecx, [ebp - 0x280c]
call fcn.00402ce0
lea ecx, [ebp - 0x26f0]
call fcn.00402ce0
lea ecx, [ebp - 0x26fc]
call fcn.00402ce0
lea ecx, [ebp - 0x2708]
call fcn.00402ce0
lea ecx, [ebp - 0x293c]
call fcn.00402ce0
lea ecx, [ebp - 0x2818]
call fcn.00402ce0
lea ecx, [ebp - 0x25b0]
call fcn.00402ce0
lea ecx, [ebp - 0x2930]
call fcn.00402ce0
lea ecx, [ebp - 0x2900]
call fcn.00402ce0
lea ecx, [ebp - 0x2720]
call fcn.00402ce0
lea ecx, [ebp - 0x250c]
call fcn.00402ce0
lea ecx, [ebp - 0x2978]
call fcn.00402ce0
lea ecx, [ebp - 0x25bc]
call fcn.00402ce0
lea ecx, [ebp - 0x2a00]
call fcn.00402ce0
lea ecx, [ebp - 0x2160]
call fcn.00402ce0
lea ecx, [ebp - 0x226c]
call fcn.00402ce0
lea ecx, [ebp - 0x2874]
call fcn.00402ce0
lea ecx, [ebp - 0x2114]
call fcn.00402ce0
lea ecx, [ebp - 0x2154]
call fcn.00402ce0
lea ecx, [ebp - 0x1f8c]
call fcn.00402ce0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0047916f
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret