Function at 0x4af470
Capabilities:
Check os version
Contain obfuscated stackstrings
Get number of processors
Parse credit card information
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5c031a
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x934
mov eax, dword [0x6c21e4]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x8a0], edi
push 0
call dword [0x5cda6c]
xor ecx, ecx
mov dword [ebp - 0x8a4], 0
call fcn.0050e640
test eax, eax
je 0x4af4df
push eax
call fcn.0041e876
add esp, 4
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 4
push dword [eax + 0x3c]
call fcn.004ecdd0
lea esi, [edi + 0x818]
test eax, eax
je 0x4af588
push 0x5fe70c
push 0xffffffffffffffb0
mov ecx, esi
call fcn.004e73c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x4ec], 0
push 0x5fe744
lea ecx, [edi + 0x264]
movq qword [ebp - 0x4f4], xmm0
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x4f4]
call fcn.00516e40
push 0
push 0
push 0
push 0xc
lea ecx, [ebp - 0x4f4]
mov dword [ebp - 4], 0
call fcn.00516ab0
mov edx, 0x64
mov ecx, eax
call fcn.004bfad0
lea ecx, [ebp - 0x4f4]
mov dword [ebp - 4], 0xffffffff
call fcn.00516d50
push 0x5fe768
push 0xffffffffffffffff
mov ecx, esi
call fcn.004e73c0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x5fe7c0
push dword [eax + 0x38]
call fcn.004ed600
xorps xmm0, xmm0
mov dword [ebp - 0x230], 0
lea ecx, [ebp - 0x238]
movq qword [ebp - 0x238], xmm0
call fcn.00516ef0
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x268]
xorps xmm0, xmm0
mov dword [ebp - 0x260], 0
movq qword [ebp - 0x268], xmm0
call fcn.00516ef0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x298]
xorps xmm0, xmm0
mov dword [ebp - 0x290], 0
movq qword [ebp - 0x298], xmm0
call fcn.00516ef0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1b8]
xorps xmm0, xmm0
mov dword [ebp - 0x1b0], 0
movq qword [ebp - 0x1b8], xmm0
call fcn.00516ef0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x49c]
xorps xmm0, xmm0
mov dword [ebp - 0x494], 0
movq qword [ebp - 0x49c], xmm0
call fcn.00516ef0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x3c4]
xorps xmm0, xmm0
mov dword [ebp - 0x3bc], 0
movq qword [ebp - 0x3c4], xmm0
call fcn.00516ef0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x334]
xorps xmm0, xmm0
mov dword [ebp - 0x32c], 0
movq qword [ebp - 0x334], xmm0
call fcn.00516ef0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x490]
xorps xmm0, xmm0
mov dword [ebp - 0x488], 0
movq qword [ebp - 0x490], xmm0
call fcn.00516ef0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x484]
xorps xmm0, xmm0
mov dword [ebp - 0x47c], 0
movq qword [ebp - 0x484], xmm0
call fcn.00516ef0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x328]
xorps xmm0, xmm0
mov dword [ebp - 0x320], 0
movq qword [ebp - 0x328], xmm0
call fcn.00516ef0
mov byte [ebp - 4], 0xa
xorps xmm0, xmm0
lea ecx, [ebp - 0x310]
movq qword [ebp - 0x310], xmm0
mov dword [ebp - 0x308], 0
call fcn.00516ef0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x40c]
xorps xmm0, xmm0
mov dword [ebp - 0x404], 0
movq qword [ebp - 0x40c], xmm0
call fcn.00516ef0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x478]
xorps xmm0, xmm0
mov dword [ebp - 0x470], 0
movq qword [ebp - 0x478], xmm0
call fcn.00516ef0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x46c]
xorps xmm0, xmm0
mov dword [ebp - 0x464], 0
movq qword [ebp - 0x46c], xmm0
call fcn.00516ef0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x400]
xorps xmm0, xmm0
mov dword [ebp - 0x3f8], 0
movq qword [ebp - 0x400], xmm0
call fcn.00516ef0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x304]
xorps xmm0, xmm0
mov dword [ebp - 0x2fc], 0
movq qword [ebp - 0x304], xmm0
call fcn.00516ef0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x56c]
xorps xmm0, xmm0
mov dword [ebp - 0x564], 0
movq qword [ebp - 0x56c], xmm0
call fcn.00516ef0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x460]
xorps xmm0, xmm0
mov dword [ebp - 0x458], 0
movq qword [ebp - 0x460], xmm0
call fcn.00516ef0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x2f8]
xorps xmm0, xmm0
mov dword [ebp - 0x2f0], 0
movq qword [ebp - 0x2f8], xmm0
call fcn.00516ef0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x454]
xorps xmm0, xmm0
mov dword [ebp - 0x44c], 0
movq qword [ebp - 0x454], xmm0
call fcn.00516ef0
mov byte [ebp - 4], 0x14
call dword [0x5cd4d8]
mov ecx, eax
call fcn.00502a90
mov esi, eax
mov edx, str.HKLM
test esi, esi
mov dword [ebp - 0x89c], esi
mov eax, str.HKLM64
setne cl
test cl, cl
mov byte [ebp - 0x8a5], cl
cmove eax, edx
mov dword [ebp - 0x8b0], eax
lea ecx, [ebp - 0x238]
push 0
mov edx, 0x5ed51c
mov eax, str.HKLM32
push 0
cmove eax, edx
push 0x104
mov dword [ebp - 0x8c4], eax
call fcn.005162e0
push eax
push 1
push dword [edi + 0x38]
push 0x1a
push 0
call dword [0x5cd5d8]
push 0
push 0
push 0x104
lea ecx, [ebp - 0x268]
call fcn.005162e0
push eax
push 1
push dword [edi + 0x38]
push 0x1c
push 0
call dword [0x5cd5d8]
push 0
push 0
push 0x104
lea ecx, [ebp - 0x1b8]
call fcn.005162e0
push eax
push 1
push dword [edi + 0x38]
push 2
push 0
call dword [0x5cd5d8]
push 0
push 0
push 0x104
lea ecx, [ebp - 0x3c4]
call fcn.005162e0
push eax
push 1
push dword [edi + 0x38]
push 0
push 0
call dword [0x5cd5d8]
push 0
push 0
push 0x104
lea ecx, [ebp - 0x400]
call fcn.005162e0
push eax
push 1
push dword [edi + 0x38]
push 0x23
push 0
call dword [0x5cd5d8]
push 0
push 0
push 0x104
lea ecx, [ebp - 0x490]
call fcn.005162e0
push eax
push 1
push dword [edi + 0x38]
push 7
push 0
call dword [0x5cd5d8]
push 0
push 0
push 0x104
lea ecx, [ebp - 0x484]
call fcn.005162e0
push eax
push 1
push dword [edi + 0x38]
push 5
push 0
call dword [0x5cd5d8]
push 0x400
push 0
push 0
push 0x400
lea ecx, [ebp - 0x334]
call fcn.005162e0
push eax
push 0x5fe7e0
push dword [edi + 0x38]
call dword [0x5cd818]
push 0x400
lea ecx, [ebp - 0x334]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x334]
call fcn.00516ab0
push eax
call dword [0x5cd4dc]
push 0x104
push 0
push 0
push 0x104
lea ecx, [ebp - 0x328]
call fcn.005162e0
push eax
call dword [0x5cd404]
test esi, esi
je 0x4afa7c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe7f0
lea ecx, [ebp - 0x328]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x310]
call fcn.00516b20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe808
jmp 0x4afabe
push 0x104
push 0
push 0
push 0x104
lea ecx, [ebp - 0x310]
call fcn.005162e0
push eax
call dword [0x5cd464]
cmp byte [ebp - 0x8a5], 0
je 0x4afad7
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe81c
lea ecx, [ebp - 0x328]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x40c]
call fcn.00516b20
jmp 0x4afae9
lea eax, [ebp - 0x310]
push eax
lea ecx, [ebp - 0x40c]
call fcn.00516e00
push esi
lea edx, [ebp - 0x46c]
lea ecx, [ebp - 0x478]
call fcn.004ff0e0
push 0
push 0
push 0x104
lea ecx, [ebp - 0x304]
call fcn.005162e0
mov esi, dword [0x5cd5d8]
push eax
push 1
push 0
push 0x2b
push 0
call esi
push 0
push 0
push 0x104
lea ecx, [ebp - 0x2f8]
call fcn.005162e0
push eax
push 1
push 0
push 0x17
push 0
call esi
push 0
push 0
push 0x104
lea ecx, [ebp - 0x454]
call fcn.005162e0
push eax
push 1
push 0
push 0x19
push 0
call esi
push 0
push 0
push 0x104
lea ecx, [ebp - 0x56c]
call fcn.005162e0
push eax
push 1
push 0
push 0x18
push 0
call esi
xorps xmm0, xmm0
mov dword [ebp - 0x1f8], 0
lea ecx, [ebp - 0x200]
movq qword [ebp - 0x200], xmm0
call fcn.00516ef0
push 0
push 0
push 0x104
lea ecx, [ebp - 0x200]
mov byte [ebp - 4], 0x15
call fcn.005162e0
push eax
push 1
push 0
push 0x28
push 0
call esi
lea ecx, [ebp - 0x200]
call fcn.00516cc0
push eax
lea ecx, [ebp - 0x238]
call fcn.00515800
lea ecx, [ebp - 0x200]
call fcn.00516cc0
push eax
lea ecx, [ebp - 0x268]
call fcn.00515800
push 1
push 0x5fe830
lea ecx, [ebp - 0x298]
call fcn.00516b80
lea ecx, [ebp - 0x200]
call fcn.00516cc0
push eax
lea ecx, [ebp - 0x1b8]
call fcn.00515800
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe858
lea ecx, [ebp - 0x238]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x49c]
call fcn.00516b20
lea ecx, [ebp - 0x200]
call fcn.00516cc0
push eax
lea ecx, [ebp - 0x3c4]
call fcn.00515800
lea ecx, [ebp - 0x200]
call fcn.00516cc0
push eax
lea ecx, [ebp - 0x334]
call fcn.00515800
lea ecx, [ebp - 0x200]
call fcn.00516cc0
push eax
lea ecx, [ebp - 0x490]
call fcn.00515800
lea ecx, [ebp - 0x200]
call fcn.00516cc0
push eax
lea ecx, [ebp - 0x484]
call fcn.00515800
push 1
lea ecx, [ebp - 0x304]
call fcn.00516840
lea eax, [ebp - 0x304]
push eax
lea ecx, [ebp - 0x460]
call fcn.00516e00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ed514
lea ecx, [ebp - 0x478]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x304]
call fcn.005150b0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ed514
lea ecx, [ebp - 0x46c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x460]
call fcn.005150b0
push fcn.005116a0
push fcn.00511760
push 3
push 4
lea eax, [ebp - 0x20]
push eax
call fcn.0041ec45
push fcn.00511770
push fcn.00511780
push 3
push 0xc
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x16
push eax
call fcn.0041ec45
push fcn.005117c0
push fcn.005117d0
push 2
push 0x10
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x17
push eax
call fcn.0041ec45
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xe0]
xorps xmm0, xmm0
mov dword [ebp - 0xd8], 0
movq qword [ebp - 0xe0], xmm0
call fcn.00516ef0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0xec]
xorps xmm0, xmm0
mov dword [ebp - 0xe4], 0
movq qword [ebp - 0xec], xmm0
call fcn.00516ef0
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x70]
xorps xmm0, xmm0
mov dword [ebp - 0x68], 0
movq qword [ebp - 0x70], xmm0
call fcn.00516ef0
mov byte [ebp - 4], 0x1b
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push dword [eax + 0xa0]
call fcn.004f5a60
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xa0]
call fcn.004eaf30
xorps xmm0, xmm0
movlpd qword [ebp - 0xbc], xmm0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push dword [eax + 0xa0]
call fcn.004ec1d0
mov dword [ebp - 0xbc], eax
lea ecx, [ebp - 0x4a8]
mov byte [ebp - 4], 0x1c
call fcn.0050b1b0
call fcn.0050b160
push edx
push eax
lea ecx, [edi + 0x60]
call fcn.00515e20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe8ac
lea ecx, [edi + 0x60]
call fcn.00516ab0
push eax
push 0x5fe8b8
lea ecx, [edi + 0x6c]
call fcn.00516ab0
push eax
lea ecx, [edi + 0x60]
call fcn.00516b20
xorps xmm0, xmm0
lea ecx, [edi + 0x60]
push 0
push 0x22
movups xmmword [ebp - 0x130], xmm0
movups xmmword [ebp - 0x120], xmm0
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x130]
call fcn.00505a10
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x1d
call fcn.00505900
test eax, eax
jne 0x4afeb2
lea ecx, [edi + 0x60]
call fcn.00516d20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe8c8
lea ecx, [edi + 0x264]
call fcn.00516ab0
push eax
push 0x5fe90c
lea ecx, [ebp - 0x70]
call fcn.00516b20
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x130]
call fcn.00504c50
cmp dword [ebp - 0x89c], 0
jne 0x4aff08
cmp byte [ebp - 0x8a5], 0
mov eax, 0x5ef468
jne 0x4aff0d
mov eax, 0x5ef470
push 0
push 0
push 0
push 0
push 0
push 0x5fe920
push eax
push 0x5f83bc
push 0x5fe934
push 0x5fe948
lea ecx, [edi + 0x264]
call fcn.00516ab0
push eax
push 0x5fe960
lea ecx, [ebp - 0x70]
call fcn.00516b20
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x130]
call fcn.00504c50
lea edx, [ebp - 0x70]
lea ecx, [ebp - 0x4a8]
call fcn.0050b220
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fe964
lea ecx, [ebp - 0x70]
call fcn.00516ab0
push eax
push 0x5fe970
lea ecx, [ebp - 0x70]
call fcn.00516b20
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x130]
call fcn.00504c50
push 0
push 0x5fe9a0
lea ecx, [ebp - 0x130]
call fcn.00504a30
mov dword [edi + 0x2c], 0
mov dword [edi + 0x28], 0
mov eax, dword [ebp - 0xbc]
cmp dword [eax], 0
je 0x4b28e2
push 0x5fea00
lea esi, [edi + 0x818]
mov dword [ebp - 0x8ac], 0
push 0xffffffffffffffff
mov ecx, esi
call fcn.004e73c0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x40
push dword [eax + 0xa0]
call fcn.004edcc0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fea3c
lea ecx, [edi + 0x78]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0xe0]
call fcn.00516b20
lea ecx, [ebp - 0xe0]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
je 0x4b28fa
mov eax, dword [ebp - 0xbc]
lea ecx, [ebp - 0x7e8]
xorps xmm0, xmm0
movlpd qword [ebp - 0x7e8], xmm0
mov eax, dword [eax]
inc eax
push eax
call fcn.00403040
mov byte [ebp - 4], 0x1e
mov edx, dword [ebp - 0x7e8]
test edx, edx
jne 0x4b007c
mov byte [ebp - 4], 0x1d
jmp 0x4b28fa
mov eax, dword [ebp - 0xbc]
mov ecx, 1
mov dword [ebp - 0x8b4], ecx
cmp dword [eax], ecx
jl 0x4b038b
mov esi, 0x58
mov dword [ebp - 0x890], esi
mov eax, dword [eax + ecx*4]
mov dword [esi + edx], eax
mov eax, dword [ebp - 0xbc]
push dword [eax + ecx*4]
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push dword [eax + 0xa0]
call fcn.004ebbb0
test eax, eax
je 0x4b0360
mov eax, dword [eax]
lea ecx, [ebp - 0xec]
cdq
push edx
push eax
call fcn.00515ed0
mov esi, dword [ebp - 0x7e8]
lea ecx, [ebp - 0xe0]
call fcn.00516ab0
push eax
push 0x800
push 0
push 0
lea ecx, [esi + 4]
add ecx, dword [ebp - 0x890]
push 0x800
call fcn.005162e0
push eax
push 0x5ed51c
push 0x5fb1b0
lea ecx, [ebp - 0xec]
call fcn.00516ab0
push eax
call dword [0x5cd440]
mov eax, dword [ebp - 0x7e8]
mov ecx, dword [ebp - 0x890]
add eax, 4
add ecx, eax
call fcn.00516cc0
add dword [ebp - 0x8ac], eax
lea ecx, [ebp - 0xe0]
mov esi, dword [ebp - 0x7e8]
call fcn.00516ab0
push eax
push 0x800
push 0
push 0
lea ecx, [esi + 0x10]
add ecx, dword [ebp - 0x890]
push 0x800
call fcn.005162e0
push eax
push 0x5ed51c
push 0x5fdde4
lea ecx, [ebp - 0xec]
call fcn.00516ab0
push eax
call dword [0x5cd440]
mov esi, dword [ebp - 0x7e8]
lea ecx, [ebp - 0xe0]
call fcn.00516ab0
push eax
push 0x800
push 0
push 0
lea ecx, [esi + 0x1c]
add ecx, dword [ebp - 0x890]
push 0x800
call fcn.005162e0
push eax
push 0x5ed51c
push 0x5fea50
lea ecx, [ebp - 0xec]
call fcn.00516ab0
push eax
call dword [0x5cd440]
mov esi, dword [ebp - 0x7e8]
lea ecx, [ebp - 0xe0]
call fcn.00516ab0
push eax
push 0x80
push 0
push 0
lea ecx, [esi + 0x28]
add ecx, dword [ebp - 0x890]
push 0x80
call fcn.005162e0
push eax
push 0x5ed51c
push 0x5fde00
lea ecx, [ebp - 0xec]
call fcn.00516ab0
push eax
call dword [0x5cd440]
mov esi, dword [ebp - 0x7e8]
lea ecx, [ebp - 0xe0]
call fcn.00516ab0
push eax
push 0x80
push 0
push 0
lea ecx, [esi + 0x34]
add ecx, dword [ebp - 0x890]
push 0x80
call fcn.005162e0
push eax
push 0x5ed51c
push 0x5fea74
lea ecx, [ebp - 0xec]
call fcn.00516ab0
push eax
call dword [0x5cd440]
mov esi, dword [ebp - 0x7e8]
lea ecx, [ebp - 0xe0]
call fcn.00516ab0
push eax
push 0x80
push 0
push 0
lea ecx, [esi + 0x4c]
add ecx, dword [ebp - 0x890]
push 0x80
call fcn.005162e0
push eax
push 0x5ed51c
push 0x5fea84
lea ecx, [ebp - 0xec]
call fcn.00516ab0
push eax
call dword [0x5cd440]
mov eax, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0x8b4]
mov esi, dword [ebp - 0x7e8]
push 1
push dword [eax + ecx*4]
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push dword [eax + 0xa0]
call fcn.004ebf00
lea ecx, [esi + 0x40]
add ecx, dword [ebp - 0x890]
push eax
call fcn.00516ae0
mov ecx, dword [ebp - 0x7e8]
mov esi, dword [ebp - 0x890]
add ecx, 0x40
push 0x5fea9c
add ecx, esi
call fcn.00516de0
test al, al
je 0x4b031c
mov ecx, dword [ebp - 0x7e8]
add ecx, 0x40
add ecx, esi
call fcn.00516d20
mov ecx, dword [ebp - 0x7e8]
add ecx, 4
add ecx, esi
call fcn.00516ab0
mov ecx, eax
call fcn.00502510
mov ecx, dword [ebp - 0x7e8]
add ecx, 4
add ecx, esi
test al, al
je 0x4b0352
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.004fbf70
jmp 0x4b0360
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.004fc4a0
mov ecx, dword [ebp - 0x8b4]
add esi, 0x58
mov eax, dword [ebp - 0xbc]
inc ecx
mov dword [ebp - 0x8b4], ecx
mov dword [ebp - 0x890], esi
cmp ecx, dword [eax]
jg 0x4b038b
mov edx, dword [ebp - 0x7e8]
jmp 0x4b00a0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0xa
push dword [eax + 0x44]
call fcn.004ea4c0
mov eax, dword [ebp - 0xbc]
mov eax, dword [eax]
mov dword [ebp - 0x890], eax
test eax, eax
jle 0x4b0c9f
imul esi, eax, 0x58
mov dword [ebp - 0x89c], esi
nop word [eax + eax]
mov ecx, dword [ebp - 0x7e8]
add ecx, 0x4c
add ecx, esi
call fcn.00516cc0
test eax, eax
je 0x4b03ef
mov ecx, dword [ebp - 0x7e8]
push 2
add ecx, 0x4c
push 0
add ecx, esi
call fcn.00516ab0
push eax
call dword [0x5cda5c]
mov ecx, dword [ebp - 0x7e8]
add ecx, 4
add ecx, esi
call fcn.00516cc0
cmp eax, 0xa
jl 0x4b0c81
mov ecx, dword [ebp - 0x7e8]
add ecx, 0x28
add ecx, esi
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004af390
mov ecx, dword [ebp - 0x7e8]
add ecx, 0x28
mov dword [ebp - 0x8b4], eax
push 0x5feab0
add ecx, esi
call fcn.00516de0
mov byte [ebp - 0x889], al
test al, al
jne 0x4b0452
cmp dword [ebp - 0x8b4], 0
jl 0x4b0c81
xorps xmm0, xmm0
mov dword [ebp - 0x4e0], 0
lea ecx, [ebp - 0x4e8]
movq qword [ebp - 0x4e8], xmm0
call fcn.00516ef0
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0xd4]
xorps xmm0, xmm0
mov dword [ebp - 0xcc], 0
movq qword [ebp - 0xd4], xmm0
call fcn.00516ef0
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x13c]
xorps xmm0, xmm0
mov dword [ebp - 0x134], 0
movq qword [ebp - 0x13c], xmm0
call fcn.00516ef0
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x7e8]
add ecx, 0x34
add ecx, esi
call fcn.00516cc0
test eax, eax
je 0x4b0509
mov ecx, dword [ebp - 0x7e8]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
add ecx, 0x34
push 0x5ed66c
add ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0xd4]
call fcn.00516b20
jmp 0x4b0553
mov eax, dword [ebp - 0x7e8]
lea ecx, [ebp - 0xd4]
add eax, 4
add eax, esi
push eax
call fcn.00516e00
push 1
lea ecx, [ebp - 0xd4]
call fcn.00516840
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ed66c
lea ecx, [ebp - 0xd4]
call fcn.00515270
lea ecx, [ebp - 0xd4]
call fcn.00516cc0
cmp eax, 2
jl 0x4b0c5c
push 0x5feac8
lea ecx, [ebp - 0xd4]
call fcn.00516de0
test al, al
jne 0x4b0c5c
mov eax, dword [ebp - 0x7e8]
lea ecx, [ebp - 0x13c]
add eax, 0x40
add eax, esi
push eax
call fcn.00516e00
lea ecx, [ebp - 0x13c]
call fcn.00516cc0
cmp eax, 4
jl 0x4b05ce
push 0x5fea9c
lea ecx, [ebp - 0x13c]
call fcn.00516de0
test al, al
jne 0x4b05ce
push str.Microsoft
lea ecx, [ebp - 0x13c]
call fcn.00516de0
test al, al
je 0x4b05d9
lea ecx, [ebp - 0x13c]
call fcn.00516d20
cmp byte [ebp - 0x889], 0
je 0x4b09ca
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x8b4], 0
jbe 0x4b0727
xor eax, eax
mov dword [ebp - 0x898], eax
mov edi, dword [edi + 0x44]
lea ecx, [ebp - 0xd4]
push 0
push 0
add edi, eax
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x238]
call fcn.00516ab0
mov ecx, edi
mov esi, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.0048b150
mov edi, dword [ebp - 0x8a0]
lea ecx, [ebp - 0xd4]
push 0
push 0
mov edi, dword [edi + 0x44]
add edi, dword [ebp - 0x898]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x268]
call fcn.00516ab0
mov ecx, edi
mov esi, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.0048b150
mov eax, dword [ebp - 0x8a0]
lea ecx, [ebp - 0xd4]
push 0
push 0
mov edi, dword [eax + 0x44]
add edi, dword [ebp - 0x898]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x298]
call fcn.00516ab0
mov ecx, edi
mov esi, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.0048b150
mov eax, dword [ebp - 0x8a0]
lea ecx, [ebp - 0xd4]
push 0
push 0
mov edi, dword [eax + 0x44]
add edi, dword [ebp - 0x898]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x1b8]
call fcn.00516ab0
mov ecx, edi
mov esi, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.0048b150
mov ecx, dword [ebp - 0x8b4]
mov edi, dword [ebp - 0x8a0]
inc ecx
mov eax, dword [ebp - 0x898]
add eax, 0xc
mov dword [ebp - 0x8b4], ecx
mov dword [ebp - 0x898], eax
cmp ecx, dword [edi + 0x30]
jb 0x4b0602
push 0
push 0
push 0
lea ecx, [ebp - 0xd4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1b8]
call fcn.00516ab0
mov edx, 0x5ed514
mov ecx, eax
call fcn.0048b150
push 0
push 0
push 0
lea ecx, [ebp - 0xd4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x400]
call fcn.00516ab0
mov edx, 0x5ed514
mov ecx, eax
call fcn.0048b150
push 0
push 0
push 0
lea ecx, [ebp - 0xd4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2f8]
call fcn.00516ab0
mov edx, 0x5ed514
mov ecx, eax
call fcn.0048b150
lea ecx, [ebp - 0x13c]
call fcn.00516cc0
test eax, eax
je 0x4b0c29
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x8b4], 0
jbe 0x4b092a
xor eax, eax
mov dword [ebp - 0x898], eax
mov edi, dword [edi + 0x44]
lea ecx, [ebp - 0xd4]
add edi, eax
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x13c]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x238]
call fcn.00516ab0
mov ecx, edi
mov esi, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.0048b150
mov eax, dword [ebp - 0x8a0]
lea ecx, [ebp - 0xd4]
mov edi, dword [eax + 0x44]
add edi, dword [ebp - 0x898]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x13c]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x268]
call fcn.00516ab0
mov ecx, edi
mov esi, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.0048b150
mov eax, dword [ebp - 0x8a0]
lea ecx, [ebp - 0xd4]
mov edi, dword [eax + 0x44]
add edi, dword [ebp - 0x898]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x13c]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x298]
call fcn.00516ab0
mov ecx, edi
mov esi, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.0048b150
mov eax, dword [ebp - 0x8a0]
lea ecx, [ebp - 0xd4]
mov edi, dword [eax + 0x44]
add edi, dword [ebp - 0x898]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x13c]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x1b8]
call fcn.00516ab0
mov ecx, edi
mov esi, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.0048b150
mov ecx, dword [ebp - 0x8b4]
mov eax, dword [ebp - 0x898]
inc ecx
add eax, 0xc
mov dword [ebp - 0x8b4], ecx
mov dword [ebp - 0x898], eax
mov edi, dword [ebp - 0x8a0]
cmp ecx, dword [edi + 0x30]
jb 0x4b07d1
push 0
lea ecx, [ebp - 0xd4]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x13c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1b8]
call fcn.00516ab0
mov edx, 0x5ed514
mov ecx, eax
call fcn.0048b150
push 0
lea ecx, [ebp - 0xd4]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x13c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x400]
call fcn.00516ab0
mov edx, 0x5ed514
mov ecx, eax
call fcn.0048b150
push 0
lea ecx, [ebp - 0xd4]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x13c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2f8]
call fcn.00516ab0
mov edx, 0x5ed514
jmp 0x4b0c22
mov eax, dword [ebp - 0x8b4]
test eax, eax
js 0x4b0c29
mov edi, dword [edi + 0x44]
lea eax, [eax + eax*2]
shl eax, 2
lea ecx, [ebp - 0xd4]
push 0
push 0
mov dword [ebp - 0x898], eax
add edi, eax
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x238]
call fcn.00516ab0
mov ecx, edi
mov esi, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.0048b150
mov eax, dword [ebp - 0x8a0]
lea ecx, [ebp - 0xd4]
push 0
push 0
mov edi, dword [eax + 0x44]
add edi, dword [ebp - 0x898]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x268]
call fcn.00516ab0
mov ecx, edi
mov esi, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.0048b150
mov eax, dword [ebp - 0x8a0]
lea ecx, [ebp - 0xd4]
push 0
push 0
mov edi, dword [eax + 0x44]
add edi, dword [ebp - 0x898]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x298]
call fcn.00516ab0
mov ecx, edi
mov esi, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.0048b150
mov eax, dword [ebp - 0x8a0]
lea ecx, [ebp - 0xd4]
push 0
push 0
mov edi, dword [eax + 0x44]
add edi, dword [ebp - 0x898]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x1b8]
call fcn.00516ab0
mov ecx, edi
mov esi, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.0048b150
lea ecx, [ebp - 0x13c]
call fcn.00516cc0
test eax, eax
je 0x4b0c29
mov eax, dword [ebp - 0x8a0]
lea ecx, [ebp - 0xd4]
mov edi, dword [eax + 0x44]
add edi, dword [ebp - 0x898]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x13c]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x238]
call fcn.00516ab0
mov ecx, edi
mov esi, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.0048b150
mov eax, dword [ebp - 0x8a0]
lea ecx, [ebp - 0xd4]
mov edi, dword [eax + 0x44]
add edi, dword [ebp - 0x898]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x13c]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x268]
call fcn.00516ab0
mov ecx, edi
mov esi, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.0048b150
mov eax, dword [ebp - 0x8a0]
lea ecx, [ebp - 0xd4]
mov edi, dword [eax + 0x44]
add edi, dword [ebp - 0x898]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x13c]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x298]
call fcn.00516ab0
mov ecx, edi
mov esi, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.0048b150
mov eax, dword [ebp - 0x8a0]
lea ecx, [ebp - 0xd4]
mov edi, dword [eax + 0x44]
add edi, dword [ebp - 0x898]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x13c]
call fcn.00516ab0
push eax
push 0x5ed514
lea ecx, [ebp - 0x1b8]
call fcn.00516ab0
mov ecx, edi
mov esi, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.0048b150
lea ecx, [ebp - 0x13c]
call fcn.00516d50
lea ecx, [ebp - 0xd4]
call fcn.00516d50
lea ecx, [ebp - 0x4e8]
mov byte [ebp - 4], 0x1e
call fcn.00516d50
mov edi, dword [ebp - 0x8a0]
mov esi, dword [ebp - 0x89c]
jmp 0x4b0c81
lea ecx, [ebp - 0x13c]
call fcn.00516d50
lea ecx, [ebp - 0xd4]
call fcn.00516d50
lea ecx, [ebp - 0x4e8]
mov byte [ebp - 4], 0x1e
call fcn.00516d50
mov eax, dword [ebp - 0x890]
sub esi, 0x58
dec eax
mov dword [ebp - 0x89c], esi
mov dword [ebp - 0x890], eax
test eax, eax
jg 0x4b03c0
xorps xmm0, xmm0
mov dword [ebp - 0xfc], 0
lea ecx, [ebp - 0x104]
movq qword [ebp - 0x104], xmm0
call fcn.00516ef0
mov byte [ebp - 4], 0x22
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x14
push dword [eax + 0x44]
call fcn.004ea4c0
mov esi, dword [ebp - 0x8ac]
test esi, esi
je 0x4b0f87
push 0
push 0x20019
push 0x5feae0
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x8b8], 0x5feae0
mov dword [ebp - 0x8b4], 0x5feafc
call fcn.005116f0
push 0
push 0x20019
push 0x5feafc
lea ecx, [ebp - 0x1c]
call fcn.005116f0
xorps xmm0, xmm0
mov dword [ebp - 0x26c], 0
lea ecx, [ebp - 0x274]
movq qword [ebp - 0x274], xmm0
call fcn.00516ef0
xor esi, esi
mov byte [ebp - 4], 0x23
mov dword [ebp - 0x898], esi
nop dword [eax]
lea ecx, [ebp - 0x20]
add ecx, esi
call fcn.00510fa0
test eax, eax
je 0x4b0f5a
lea edi, [eax - 1]
test edi, edi
js 0x4b0f5a
nop dword [eax]
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x20]
push edi
add ecx, esi
call fcn.005110a0
test al, al
je 0x4b0f51
push 0
mov esi, dword [ebp + esi - 0x8b8]
lea ecx, [ebp - 0x104]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feb30
push dword [ebp - 0x44]
push 0x5ed514
push esi
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x104]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x18]
call fcn.005116f0
test al, al
je 0x4b0df2
lea eax, [ebp - 0x274]
push eax
push 0x5ed51c
lea ecx, [ebp - 0x18]
call fcn.00511410
test al, al
jne 0x4b0eba
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feb50
push dword [ebp - 0x44]
lea ecx, [ebp - 0x104]
push 0x5ed514
push esi
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x104]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x18]
call fcn.005116f0
test al, al
je 0x4b0e52
lea eax, [ebp - 0x274]
push eax
push 0x5ed51c
lea ecx, [ebp - 0x18]
call fcn.00511410
test al, al
jne 0x4b0eba
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feb70
push dword [ebp - 0x44]
lea ecx, [ebp - 0x104]
push 0x5ed514
push esi
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x104]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x18]
call fcn.005116f0
test al, al
je 0x4b0f4b
lea eax, [ebp - 0x274]
push eax
push 0x5ed51c
lea ecx, [ebp - 0x18]
call fcn.00511410
test al, al
je 0x4b0f4b
push 0
lea ecx, [ebp - 0x274]
call fcn.00516530
lea ecx, [ebp - 0x274]
call fcn.00516cc0
cmp eax, 4
jl 0x4b0f4b
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x89c], 1
cmp dword [eax], 1
jl 0x4b0f4b
mov esi, 0x58
mov ecx, dword [ebp - 0x7e8]
add ecx, 4
add ecx, esi
call fcn.005167b0
test al, al
jne 0x4b0f31
mov ecx, dword [ebp - 0x7e8]
push 0
push 1
push 1
add ecx, 4
push 0
add ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x274]
call fcn.00515510
test eax, eax
jne 0x4b1184
mov ecx, dword [ebp - 0x89c]
add esi, 0x58
mov eax, dword [ebp - 0xbc]
inc ecx
mov dword [ebp - 0x89c], ecx
cmp ecx, dword [eax]
jle 0x4b0ef1
mov esi, dword [ebp - 0x898]
sub edi, 1
jns 0x4b0d70
add esi, 4
mov dword [ebp - 0x898], esi
cmp esi, 8
jl 0x4b0d50
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 0x22
call fcn.00516d50
mov edi, dword [ebp - 0x8a0]
mov esi, dword [ebp - 0x8ac]
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x1e
push dword [eax + 0x44]
call fcn.004ea4c0
test esi, esi
je 0x4b126d
push 0
push 0x20019
push 0x5feb98
lea ecx, [ebp - 0x20]
call fcn.005116f0
lea ecx, [ebp - 0x20]
call fcn.00510fa0
xorps xmm0, xmm0
mov dword [ebp - 0x20c], 0
lea ecx, [ebp - 0x214]
movq qword [ebp - 0x214], xmm0
mov esi, eax
call fcn.00516ef0
mov byte [ebp - 4], 0x24
test esi, esi
je 0x4b1258
lea eax, [esi - 1]
mov dword [ebp - 0x89c], eax
test eax, eax
js 0x4b1258
mov edi, eax
nop dword [eax]
lea eax, [ebp - 0x44]
push eax
push edi
lea ecx, [ebp - 0x20]
call fcn.005110a0
test al, al
je 0x4b1249
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x44]
lea ecx, [ebp - 0x104]
push 0x5ed514
push 0x5feb98
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x104]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1c]
call fcn.005116f0
lea eax, [ebp - 0x214]
push eax
push 0x5fa704
lea ecx, [ebp - 0x1c]
call fcn.00511410
test al, al
je 0x4b1082
lea ecx, [ebp - 0x214]
call fcn.00516cc0
cmp eax, 4
jge 0x4b10f3
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5febe8
lea ecx, [ebp - 0x104]
call fcn.00515270
push 0
push 0x20019
lea ecx, [ebp - 0x104]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1c]
call fcn.005116f0
lea eax, [ebp - 0x214]
push eax
push 0x5fec00
lea ecx, [ebp - 0x1c]
call fcn.00511410
test al, al
je 0x4b1249
lea ecx, [ebp - 0x214]
call fcn.00516cc0
cmp eax, 4
jl 0x4b1249
push 0
lea ecx, [ebp - 0x214]
call fcn.00516530
lea ecx, [ebp - 0x214]
call fcn.00516cc0
cmp eax, 4
jl 0x4b1249
mov eax, dword [ebp - 0xbc]
mov esi, 1
cmp dword [eax], esi
jl 0x4b1249
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x7e8]
call fcn.00402fc0
lea ecx, [eax + 4]
call fcn.005167b0
test al, al
jne 0x4b1174
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x7e8]
call fcn.00402fc0
lea ecx, [eax + 4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x214]
call fcn.00515510
test eax, eax
jne 0x4b11ef
mov eax, dword [ebp - 0xbc]
inc esi
cmp esi, dword [eax]
jle 0x4b1130
jmp 0x4b1249
mov esi, dword [ebp - 0x898]
lea ecx, [ebp - 0x104]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x44]
push 0x5ed514
push dword [ebp + esi - 0x8b8]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x104]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x18]
call fcn.00510300
test al, al
jne 0x4b0f51
push 0
lea ecx, [ebp - 0x104]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x18]
call fcn.00510300
jmp 0x4b0f51
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x44]
lea ecx, [ebp - 0x104]
push 0x5ed514
push 0x5feb98
call fcn.00516b20
push 0
lea ecx, [ebp - 0x104]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1c]
call fcn.00510300
test al, al
jne 0x4b1249
push 0
lea ecx, [ebp - 0x104]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1c]
call fcn.00510300
sub edi, 1
jns 0x4b1000
mov edi, dword [ebp - 0x8a0]
lea ecx, [ebp - 0x214]
mov byte [ebp - 4], 0x22
call fcn.00516d50
mov esi, dword [ebp - 0x8ac]
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x28
push dword [eax + 0x44]
call fcn.004ea4c0
call fcn.005133c0
movsd xmm1, qword [0x6a40a0]
comisd xmm1, xmm0
jbe 0x4b1650
test esi, esi
je 0x4b1d42
push 0xc
lea ecx, [ebp - 0x31c]
call fcn.00401d00
lea ecx, [ebp - 0x31c]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0x25
call fcn.00401d00
lea ecx, [ebp - 0x220]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x37c]
mov byte [ebp - 4], 0x26
call fcn.00401d00
lea ecx, [ebp - 0x37c]
call fcn.00516ef0
push 4
lea ecx, [ebp - 0x7f4]
mov byte [ebp - 4], 0x27
call fcn.00401d20
lea ecx, [ebp - 0x7f4]
call fcn.004015e0
lea eax, [ebp - 0x7f4]
mov byte [ebp - 4], 0x28
push eax
push 0x5f38c4
push 1
push 0
push 0x5f21fc
call dword [0x5cda74]
test eax, eax
js 0x4b161b
push 4
lea ecx, [ebp - 0x80c]
call fcn.00401d20
lea ecx, [ebp - 0x80c]
call fcn.004015e0
mov byte [ebp - 4], 0x29
lea edx, [ebp - 0x80c]
mov eax, dword [ebp - 0x7f4]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x14]
call eax
test eax, eax
js 0x4b1610
mov eax, dword [ebp - 0x80c]
lea edx, [ebp - 0x194]
push edx
mov dword [ebp - 0x194], 0
lea edx, [ebp - 0x818]
push edx
mov ecx, dword [eax]
push 5
push eax
mov eax, dword [ecx + 0xc]
call eax
test eax, eax
js 0x4b1610
mov esi, dword [0x5cda78]
nop
mov eax, dword [ebp - 0x194]
test eax, eax
je 0x4b160a
xor edi, edi
test eax, eax
je 0x4b15dc
nop dword [eax + eax]
mov eax, dword [ebp - 0x818]
lea ecx, [ebp - 0x31c]
push dword [eax + edi*4]
call fcn.00516e30
mov eax, dword [ebp - 0x818]
push dword [eax + edi*4]
call esi
push 4
lea ecx, [ebp - 0x804]
call fcn.00401d20
lea ecx, [ebp - 0x804]
call fcn.004015e0
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x31c]
mov eax, dword [ebp - 0x7f4]
mov esi, dword [eax]
lea eax, [ebp - 0x804]
push eax
push 0x5fa2f0
call fcn.00516ab0
push eax
push dword [ebp - 0x7f4]
mov eax, dword [esi + 0x18]
call eax
test eax, eax
js 0x4b15ba
mov eax, dword [ebp - 0x804]
lea edx, [ebp - 0x82c]
mov dword [ebp - 0x82c], 0
mov dword [ebp - 0x828], 0
push edx
mov ecx, dword [eax]
push eax
mov eax, dword [ecx + 0x84]
call eax
mov eax, dword [ebp - 0x804]
lea edx, [ebp - 0x828]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x8c]
call eax
push dword [ebp - 0x82c]
lea ecx, [ebp - 0x220]
call fcn.00516e30
push dword [ebp - 0x828]
lea ecx, [ebp - 0x37c]
call fcn.00516e30
mov eax, dword [ebp - 0x82c]
mov esi, dword [0x5cda78]
test eax, eax
je 0x4b14a7
push eax
call esi
mov eax, dword [ebp - 0x828]
test eax, eax
je 0x4b14b4
push eax
call esi
lea ecx, [ebp - 0x37c]
call fcn.00516cc0
test eax, eax
je 0x4b14f3
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x37c]
call fcn.00516ab0
push eax
push 0x5eff2c
lea ecx, [ebp - 0x220]
call fcn.00515270
push 0
lea ecx, [ebp - 0x220]
call fcn.00516530
push 0
push 0
push 0x5ed51c
push 0x5f0068
lea ecx, [ebp - 0x220]
call fcn.00514e30
lea ecx, [ebp - 0x220]
call fcn.00516cc0
cmp eax, 4
jl 0x4b15ba
push 0
lea ecx, [ebp - 0xbc]
mov esi, 1
call fcn.00403d40
cmp dword [eax], esi
jl 0x4b15ba
push esi
lea ecx, [ebp - 0x7e8]
call fcn.00402fc0
lea ecx, [eax + 4]
call fcn.005167b0
test al, al
jne 0x4b1587
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x7e8]
call fcn.00402fc0
lea ecx, [eax + 4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x220]
call fcn.00515510
test eax, eax
jne 0x4b159b
push 0
lea ecx, [ebp - 0xbc]
inc esi
call fcn.00403d40
cmp esi, dword [eax]
jle 0x4b1543
jmp 0x4b15ba
mov eax, dword [ebp - 0x7f4]
lea ecx, [ebp - 0x31c]
mov esi, dword [eax]
call fcn.00516ab0
push eax
push dword [ebp - 0x7f4]
mov eax, dword [esi + 0x1c]
call eax
lea ecx, [ebp - 0x804]
mov byte [ebp - 4], 0x29
call fcn.00402ef0
mov esi, dword [0x5cda78]
inc edi
cmp edi, dword [ebp - 0x194]
jb 0x4b13c0
push dword [ebp - 0x818]
call esi
mov eax, dword [ebp - 0x80c]
lea edx, [ebp - 0x194]
push edx
lea edx, [ebp - 0x818]
push edx
mov ecx, dword [eax]
push 5
push eax
mov eax, dword [ecx + 0xc]
call eax
test eax, eax
jns 0x4b13a0
mov edi, dword [ebp - 0x8a0]
lea ecx, [ebp - 0x80c]
call fcn.00402ef0
lea ecx, [ebp - 0x7f4]
call fcn.00402ef0
lea ecx, [ebp - 0x37c]
call fcn.00516d50
lea ecx, [ebp - 0x220]
call fcn.00516d50
lea ecx, [ebp - 0x31c]
mov byte [ebp - 4], 0x22
call fcn.00516d50
jmp 0x4b1d42
test esi, esi
je 0x4b1d42
push 4
lea ecx, [ebp - 0x7f0]
call fcn.00401d20
lea ecx, [ebp - 0x7f0]
call fcn.004015e0
lea eax, [ebp - 0x7f0]
push eax
push 0x5e78ec
push 1
push 0
push 0x5e7afc
call dword [0x5cda74]
test eax, eax
jns 0x4b16a3
lea ecx, [ebp - 0x7f0]
mov byte [ebp - 4], 0x22
call fcn.00402ef0
jmp 0x4b1d42
lea ecx, [ebp - 0x920]
call fcn.00401c60
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x910]
movups xmmword [ebp - 0x8c0], xmm0
call fcn.00401c60
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x900]
movups xmmword [ebp - 0x8e0], xmm0
call fcn.00401c60
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x940]
movups xmmword [ebp - 0x8f0], xmm0
call fcn.00401c60
mov edi, eax
mov byte [ebp - 4], 0x2f
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x8c0]
mov ecx, dword [ebp - 0x7f0]
mov edx, esp
sub esp, 0x10
mov eax, esp
sub esp, 0x10
mov esi, dword [ecx]
movups xmmword [edx], xmm0
movups xmm0, xmmword [ebp - 0x8e0]
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x8f0]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [edi]
push ecx
movups xmmword [eax], xmm0
mov eax, dword [esi + 0x28]
call eax
lea ecx, [ebp - 0x940]
mov esi, eax
call fcn.00401cf0
lea ecx, [ebp - 0x900]
call fcn.00401cf0
lea ecx, [ebp - 0x910]
call fcn.00401cf0
lea ecx, [ebp - 0x920]
mov byte [ebp - 4], 0x2b
call fcn.00401cf0
test esi, esi
js 0x4b1d2d
push 4
lea ecx, [ebp - 0x7fc]
call fcn.00401d20
lea ecx, [ebp - 0x7fc]
call fcn.004015e0
push 0x5ed514
lea ecx, [ebp - 0x8c8]
mov byte [ebp - 4], 0x30
call fcn.00401ae0
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x7f0]
mov esi, dword [ecx]
lea ecx, [ebp - 0x7fc]
push ecx
mov ecx, eax
call fcn.00401ba0
push eax
push dword [ebp - 0x7f0]
mov eax, dword [esi + 0x1c]
call eax
lea ecx, [ebp - 0x8c8]
mov byte [ebp - 4], 0x30
mov esi, eax
call fcn.00401b90
test esi, esi
js 0x4b1d22
push 4
lea ecx, [ebp - 0x814]
call fcn.00401d20
lea ecx, [ebp - 0x814]
call fcn.004015e0
mov byte [ebp - 4], 0x32
lea edx, [ebp - 0x814]
mov eax, dword [ebp - 0x7fc]
push edx
push 1
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x38]
call eax
test eax, eax
js 0x4b1d17
mov eax, dword [ebp - 0x814]
lea edx, [ebp - 0x208]
mov dword [ebp - 0x208], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
push 0xc
lea ecx, [ebp - 0x4d0]
call fcn.00401d00
lea ecx, [ebp - 0x4d0]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 0x33
call fcn.00401d00
lea ecx, [ebp - 0x340]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x4dc]
mov byte [ebp - 4], 0x34
call fcn.00401d00
lea ecx, [ebp - 0x4dc]
call fcn.00516ef0
mov esi, 1
mov byte [ebp - 4], 0x35
mov dword [ebp - 0x89c], esi
cmp dword [ebp - 0x208], esi
jl 0x4b1cf6
push 4
lea ecx, [ebp - 0x7f8]
mov dword [ebp - 0x824], 0
call fcn.00401d20
lea ecx, [ebp - 0x7f8]
call fcn.004015e0
push 3
push esi
lea ecx, [ebp - 0x930]
mov byte [ebp - 4], 0x36
call fcn.00401c70
mov esi, eax
mov byte [ebp - 4], 0x37
lea edx, [ebp - 0x7f8]
mov ecx, dword [ebp - 0x814]
movups xmm0, xmmword [esi]
push edx
sub esp, 0x10
mov eax, dword [ecx]
mov edx, esp
push ecx
mov eax, dword [eax + 0x20]
movups xmmword [edx], xmm0
call eax
lea ecx, [ebp - 0x930]
mov byte [ebp - 4], 0x36
mov esi, eax
call fcn.00401cf0
test esi, esi
js 0x4b1cce
mov eax, dword [ebp - 0x7f8]
lea edx, [ebp - 0x824]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
test eax, eax
js 0x4b1cce
push dword [ebp - 0x824]
lea ecx, [ebp - 0x4d0]
call fcn.00516e30
push dword [ebp - 0x824]
mov esi, dword [0x5cd550]
call esi
push 4
lea ecx, [ebp - 0x808]
call fcn.00401d20
lea ecx, [ebp - 0x808]
call fcn.004015e0
mov byte [ebp - 4], 0x38
lea edx, [ebp - 0x808]
mov eax, dword [ebp - 0x7f8]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x4c]
call eax
test eax, eax
js 0x4b1cc3
push 4
lea ecx, [ebp - 0x810]
call fcn.00401d20
lea ecx, [ebp - 0x810]
call fcn.004015e0
mov byte [ebp - 4], 0x39
lea edx, [ebp - 0x810]
mov eax, dword [ebp - 0x808]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x44]
call eax
test eax, eax
js 0x4b1cb8
mov eax, dword [ebp - 0x810]
lea edx, [ebp - 0x204]
mov dword [ebp - 0x204], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
mov edi, 1
cmp dword [ebp - 0x204], edi
jl 0x4b1cb8
nop dword [eax]
nop dword [eax + eax]
push 4
lea ecx, [ebp - 0x7ec]
call fcn.00401d20
lea ecx, [ebp - 0x7ec]
call fcn.004015e0
mov byte [ebp - 4], 0x3a
lea edx, [ebp - 0x7ec]
mov eax, dword [ebp - 0x810]
push edx
push edi
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x20]
call eax
test eax, eax
jns 0x4b1a4a
lea ecx, [ebp - 0x7ec]
mov byte [ebp - 4], 0x39
call fcn.00402ef0
jmp 0x4b1cab
mov eax, dword [ebp - 0x7ec]
lea edx, [ebp - 0x4ac]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x24]
call eax
test eax, eax
jns 0x4b1a77
lea ecx, [ebp - 0x7ec]
mov byte [ebp - 4], 0x39
call fcn.00402ef0
jmp 0x4b1cab
cmp dword [ebp - 0x4ac], 0
je 0x4b1a94
lea ecx, [ebp - 0x7ec]
mov byte [ebp - 4], 0x39
call fcn.00402ef0
jmp 0x4b1cab
push 4
lea ecx, [ebp - 0x800]
call fcn.00401d20
lea ecx, [ebp - 0x800]
call fcn.004015e0
mov byte [ebp - 4], 0x3b
lea edx, [ebp - 0x800]
mov eax, dword [ebp - 0x7ec]
push edx
push str.MbLk
push eax
mov ecx, dword [eax]
mov eax, dword [ecx]
call eax
test eax, eax
jns 0x4b1aec
lea ecx, [ebp - 0x800]
call fcn.00402ef0
lea ecx, [ebp - 0x7ec]
mov byte [ebp - 4], 0x39
call fcn.00402ef0
jmp 0x4b1cab
mov eax, dword [ebp - 0x800]
lea edx, [ebp - 0x820]
mov dword [ebp - 0x820], 0
mov dword [ebp - 0x81c], 0
push edx
mov ecx, dword [eax]
push eax
mov eax, dword [ecx + 0x28]
call eax
mov eax, dword [ebp - 0x800]
lea edx, [ebp - 0x81c]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x30]
call eax
push dword [ebp - 0x820]
lea ecx, [ebp - 0x340]
call fcn.00516e30
push dword [ebp - 0x81c]
lea ecx, [ebp - 0x4dc]
call fcn.00516e30
mov eax, dword [ebp - 0x820]
test eax, eax
je 0x4b1b59
push eax
call esi
mov eax, dword [ebp - 0x81c]
test eax, eax
je 0x4b1b66
push eax
call esi
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x4dc]
call fcn.00516ab0
push eax
push 0x5eff2c
lea ecx, [ebp - 0x340]
call fcn.00515270
push 0
lea ecx, [ebp - 0x340]
call fcn.00516530
lea ecx, [ebp - 0x340]
call fcn.00516cc0
cmp eax, 4
jge 0x4b1bd2
lea ecx, [ebp - 0x800]
call fcn.00402ef0
lea ecx, [ebp - 0x7ec]
mov byte [ebp - 4], 0x39
call fcn.00402ef0
jmp 0x4b1cab
push 0
lea ecx, [ebp - 0xbc]
mov esi, 1
call fcn.00403d40
cmp dword [eax], esi
jl 0x4b1c8b
nop dword [eax]
push esi
lea ecx, [ebp - 0x7e8]
call fcn.00402fc0
lea ecx, [eax + 4]
call fcn.005167b0
test al, al
jne 0x4b1c34
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x7e8]
call fcn.00402fc0
lea ecx, [eax + 4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x340]
call fcn.00515510
test eax, eax
jne 0x4b1c48
push 0
lea ecx, [ebp - 0xbc]
inc esi
call fcn.00403d40
cmp esi, dword [eax]
jle 0x4b1bf0
jmp 0x4b1c8b
lea ecx, [ebp - 0x4d0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x8cc]
call fcn.00401ae0
mov byte [ebp - 4], 0x3c
mov ecx, dword [ebp - 0x7fc]
push 0
mov esi, dword [ecx]
mov ecx, eax
call fcn.00401ba0
push eax
push dword [ebp - 0x7fc]
mov eax, dword [esi + 0x3c]
call eax
lea ecx, [ebp - 0x8cc]
call fcn.00401b90
lea ecx, [ebp - 0x800]
call fcn.00402ef0
lea ecx, [ebp - 0x7ec]
mov byte [ebp - 4], 0x39
call fcn.00402ef0
mov esi, dword [0x5cd550]
inc edi
cmp edi, dword [ebp - 0x204]
jle 0x4b1a00
lea ecx, [ebp - 0x810]
call fcn.00402ef0
lea ecx, [ebp - 0x808]
call fcn.00402ef0
lea ecx, [ebp - 0x7f8]
mov byte [ebp - 4], 0x35
call fcn.00402ef0
mov esi, dword [ebp - 0x89c]
inc esi
mov dword [ebp - 0x89c], esi
cmp esi, dword [ebp - 0x208]
jle 0x4b18a3
lea ecx, [ebp - 0x4dc]
call fcn.00516d50
lea ecx, [ebp - 0x340]
call fcn.00516d50
lea ecx, [ebp - 0x4d0]
call fcn.00516d50
lea ecx, [ebp - 0x814]
call fcn.00402ef0
lea ecx, [ebp - 0x7fc]
call fcn.00402ef0
lea ecx, [ebp - 0x7f0]
mov byte [ebp - 4], 0x22
call fcn.00402ef0
mov edi, dword [ebp - 0x8a0]
movzx ecx, byte [ebp - 0x8a5]
mov edx, 0xc
mov esi, dword [edi + 0x30]
inc ecx
add esi, ecx
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0x890], esi
mul edx
mov dword [ebp - 0x89c], esi
seto cl
neg ecx
or ecx, eax
xor eax, eax
add ecx, 4
setb al
neg eax
or eax, ecx
push eax
call fcn.0041ec10
add esp, 4
mov dword [ebp - 0x8b4], eax
mov byte [ebp - 4], 0x3d
test eax, eax
je 0x4b1db6
push fcn.00516d50
push fcn.00516ef0
push esi
mov dword [eax], esi
add eax, 4
push 0xc
push eax
mov dword [ebp - 0x898], eax
call fcn.0041ec45
mov edx, dword [ebp - 0x898]
jmp 0x4b1dbe
xor edx, edx
mov dword [ebp - 0x898], edx
mov byte [ebp - 4], 0x22
xor esi, esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x4b1e1b
lea ecx, [edi + 0x3c]
mov dword [ebp - 0x8b4], edx
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fec18
push esi
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
mov ecx, dword [ebp - 0x8b4]
push eax
push str.HKU_
call fcn.00516b20
add dword [ebp - 0x8b4], 0xc
lea ecx, [edi + 0x3c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4b1dd4
mov esi, dword [ebp - 0x898]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fec70
push dword [ebp - 0x8b0]
lea ecx, [esi + eax*4]
call fcn.00516b20
cmp byte [ebp - 0x8a5], 0
je 0x4b1e82
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x5fec70
push dword [ebp - 0x8c4]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00516b20
push 8
lea ecx, [ebp - 0x574]
call fcn.00401d40
push esi
lea ecx, [ebp - 0x574]
call fcn.00403790
mov byte [ebp - 4], 0x3e
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x32
push dword [eax + 0x44]
call fcn.004ea4c0
cmp dword [ebp - 0x8ac], 0
je 0x4b20bc
push 0xc
lea ecx, [ebp - 0x394]
mov dword [ebp - 0x8bc], 0x5fecc8
mov dword [ebp - 0x8b8], 0x5fecd0
mov dword [ebp - 0x8b4], 0x5fece0
call fcn.00401d00
lea ecx, [ebp - 0x394]
call fcn.00516ef0
cmp dword [ebp - 0x890], 0
mov byte [ebp - 4], 0x3f
jbe 0x4b20ad
xor eax, eax
mov dword [ebp - 0x89c], eax
nop dword [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + eax*4 - 0x8bc]
mov ecx, esi
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x104]
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x104]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.005116f0
test al, al
je 0x4b207b
lea ecx, [ebp - 0x20]
call fcn.00510f40
test eax, eax
je 0x4b207b
lea edi, [eax - 1]
test edi, edi
js 0x4b207b
nop dword [eax]
lea eax, [ebp - 0x44]
push eax
push edi
lea ecx, [ebp - 0x20]
call fcn.00511000
test al, al
je 0x4b206c
lea eax, [ebp - 0x394]
push eax
push dword [ebp - 0x44]
lea ecx, [ebp - 0x20]
call fcn.00511410
lea ecx, [ebp - 0x394]
call fcn.00516cc0
cmp eax, 4
jl 0x4b206c
push 0
lea ecx, [ebp - 0x394]
call fcn.00516530
push 0
lea ecx, [ebp - 0xbc]
mov esi, 1
call fcn.00403d40
cmp dword [eax], esi
jl 0x4b206c
push esi
lea ecx, [ebp - 0x7e8]
call fcn.00402fc0
lea ecx, [eax + 4]
call fcn.005167b0
test al, al
jne 0x4b2026
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x7e8]
call fcn.00402fc0
lea ecx, [eax + 4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x394]
call fcn.00515510
test eax, eax
jne 0x4b203a
push 0
lea ecx, [ebp - 0xbc]
inc esi
call fcn.00403d40
cmp esi, dword [eax]
jle 0x4b1fe2
jmp 0x4b206c
push dword [ebp - 0x44]
lea ecx, [ebp - 0x104]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1c]
call fcn.00510300
test al, al
jne 0x4b206c
push dword [ebp - 0x44]
lea ecx, [ebp - 0x104]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1c]
call fcn.00510300
sub edi, 1
jns 0x4b1f80
mov esi, dword [ebp - 0x898]
mov eax, dword [ebp - 0x89c]
inc eax
mov dword [ebp - 0x89c], eax
cmp eax, 3
jb 0x4b1f10
add esi, 0xc
sub dword [ebp - 0x890], 1
mov dword [ebp - 0x898], esi
jne 0x4b1f03
mov edi, dword [ebp - 0x8a0]
lea ecx, [ebp - 0x394]
mov byte [ebp - 4], 0x3e
call fcn.00516d50
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x3c
push dword [eax + 0x44]
call fcn.004ea4c0
cmp dword [ebp - 0x8ac], 0
je 0x4b221a
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x4b221a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x3c4]
call fcn.00516ab0
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x104]
call fcn.00516b20
push 0
lea ecx, [ebp - 0xbc]
call fcn.00403d40
lea ecx, [ebp - 0x104]
push dword [eax]
push dword [ebp - 0x7e8]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004aea40
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x1b8]
call fcn.00516ab0
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x104]
call fcn.00516b20
push 0
lea ecx, [ebp - 0xbc]
call fcn.00403d40
lea ecx, [ebp - 0x104]
push dword [eax]
push dword [ebp - 0x7e8]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004aea40
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x49c]
call fcn.00516ab0
push eax
push esi
lea ecx, [edi + 0x44]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x104]
call fcn.00516b20
push 0
lea ecx, [ebp - 0xbc]
call fcn.00403d40
lea ecx, [ebp - 0x104]
push dword [eax]
push dword [ebp - 0x7e8]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004aea40
inc esi
cmp esi, dword [edi + 0x30]
jb 0x4b20e4
push 0
lea ecx, [ebp - 0xbc]
call fcn.00403d40
lea ecx, [ebp - 0x454]
push dword [eax]
push dword [ebp - 0x7e8]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004aea40
push 0
lea ecx, [ebp - 0xbc]
call fcn.00403d40
lea ecx, [ebp - 0x2f8]
push dword [eax]
push dword [ebp - 0x7e8]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004aea40
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x41
push dword [eax + 0x44]
call fcn.004ea4c0
cmp dword [ebp - 0x8ac], 0
je 0x4b26dd
xor edi, edi
mov esi, str.HKCR
mov dword [ebp - 0x8b4], edi
cmp edi, 1
jne 0x4b22a6
cmp byte [ebp - 0x8a5], 0
je 0x4b26d7
push 0xc
lea ecx, [ebp - 0x34c]
call fcn.00401d00
lea ecx, [ebp - 0x34c]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x3ac]
mov byte [ebp - 4], 0x40
call fcn.00401d00
lea ecx, [ebp - 0x3ac]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x3a0]
mov byte [ebp - 4], 0x41
call fcn.00401d00
lea ecx, [ebp - 0x3a0]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x4c4]
mov byte [ebp - 4], 0x42
call fcn.00401d00
cmp edi, 1
lea ecx, [ebp - 0x4c4]
mov eax, 0x5fecf4
push 1
cmovne eax, esi
push eax
call fcn.00516e80
push 4
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0x43
call fcn.00401d20
lea ecx, [ebp - 0x150]
call fcn.00511760
push 4
lea ecx, [ebp - 0x190]
mov byte [ebp - 4], 0x44
call fcn.00401d20
lea ecx, [ebp - 0x190]
call fcn.00511760
push 4
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 0x45
call fcn.00401d20
lea ecx, [ebp - 0x14c]
call fcn.00511760
push 0xc
lea ecx, [ebp - 0x87c]
mov byte [ebp - 4], 0x46
call fcn.00401d00
lea ecx, [ebp - 0x87c]
call fcn.00511780
push 0xc
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0x47
call fcn.00401d00
lea ecx, [ebp - 0x888]
call fcn.00511780
push 0
push 0x20019
lea ecx, [ebp - 0x4c4]
mov byte [ebp - 4], 0x48
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x150]
call fcn.005116f0
test al, al
je 0x4b2660
lea eax, [ebp - 0x87c]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x150]
mov dword [ebp - 0x89c], esi
call fcn.005110a0
test al, al
je 0x4b265b
nop dword [eax]
mov eax, dword [ebp - 0x87c]
test eax, eax
je 0x4b2414
cmp word [eax], 0x2e
je 0x4b2633
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fa170
push eax
push 0x5ed514
lea ecx, [ebp - 0x4c4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3ac]
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x3ac]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x190]
call fcn.005116f0
test al, al
je 0x4b2633
lea ecx, [ebp - 0x190]
call fcn.00510fa0
test eax, eax
je 0x4b2633
lea edi, [eax - 1]
test edi, edi
js 0x4b2633
nop word [eax + eax]
lea eax, [ebp - 0x888]
push eax
push edi
lea ecx, [ebp - 0x150]
call fcn.005110a0
test al, al
je 0x4b2624
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.Command
push dword [ebp - 0x888]
lea ecx, [ebp - 0x3ac]
push 0x5ed514
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x34c]
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x34c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x14c]
call fcn.005116f0
test al, al
je 0x4b2624
lea eax, [ebp - 0x3a0]
push eax
push 0x5ed51c
lea ecx, [ebp - 0x14c]
call fcn.00511410
test al, al
je 0x4b2624
push 0
lea ecx, [ebp - 0x3a0]
call fcn.00516530
lea ecx, [ebp - 0x3a0]
call fcn.00516cc0
cmp eax, 4
jl 0x4b2624
push 0
lea ecx, [ebp - 0xbc]
mov esi, 1
call fcn.00403d40
cmp dword [eax], esi
jl 0x4b2624
push esi
lea ecx, [ebp - 0x7e8]
call fcn.00402fc0
lea ecx, [eax + 4]
call fcn.005167b0
test al, al
jne 0x4b25a6
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x7e8]
call fcn.00402fc0
lea ecx, [eax + 4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3a0]
call fcn.00515510
test eax, eax
jne 0x4b25ba
push 0
lea ecx, [ebp - 0xbc]
inc esi
call fcn.00403d40
cmp esi, dword [eax]
jle 0x4b2562
jmp 0x4b2624
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x888]
lea ecx, [ebp - 0x3ac]
push 0x5ed514
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x34c]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x34c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x14c]
call fcn.00510300
test al, al
jne 0x4b2624
push 0
lea ecx, [ebp - 0x34c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x14c]
call fcn.00510300
sub edi, 1
jns 0x4b2490
mov esi, dword [ebp - 0x89c]
lea eax, [ebp - 0x87c]
inc esi
push eax
push esi
lea ecx, [ebp - 0x150]
mov dword [ebp - 0x89c], esi
call fcn.005110a0
test al, al
jne 0x4b2400
mov edi, dword [ebp - 0x8b4]
mov esi, str.HKCR
lea ecx, [ebp - 0x888]
call fcn.00511770
lea ecx, [ebp - 0x87c]
call fcn.00511770
lea ecx, [ebp - 0x14c]
call fcn.005116a0
lea ecx, [ebp - 0x190]
call fcn.005116a0
lea ecx, [ebp - 0x150]
call fcn.005116a0
lea ecx, [ebp - 0x4c4]
call fcn.00516d50
lea ecx, [ebp - 0x3a0]
call fcn.00516d50
lea ecx, [ebp - 0x3ac]
call fcn.00516d50
lea ecx, [ebp - 0x34c]
mov byte [ebp - 4], 0x3e
call fcn.00516d50
inc edi
mov dword [ebp - 0x8b4], edi
cmp edi, 2
jl 0x4b2294
mov edi, dword [ebp - 0x8a0]
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x46
push dword [eax + 0x44]
call fcn.004ea4c0
push 0
lea ecx, [ebp - 0xbc]
call fcn.00403d40
mov esi, dword [eax]
test esi, esi
jle 0x4b28a9
push esi
lea ecx, [ebp - 0x7e8]
call fcn.00402fc0
lea ecx, [eax + 4]
call fcn.00516ab0
push eax
call dword [0x5cd624]
test eax, eax
je 0x4b2760
push esi
lea ecx, [ebp - 0x7e8]
call fcn.00402fc0
lea ecx, [eax + 4]
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.004fbf70
push esi
lea ecx, [ebp - 0x7e8]
call fcn.00402fc0
lea ecx, [eax + 4]
call fcn.00516ab0
mov edx, 3
mov ecx, eax
call fcn.00505ee0
push 0xc
lea ecx, [ebp - 0x50c]
call fcn.00401d00
push esi
lea ecx, [ebp - 0xbc]
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push 0
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa0]
call fcn.004ebf00
push eax
lea ecx, [ebp - 0x50c]
call fcn.00516e80
push esi
lea ecx, [ebp - 0x7e8]
mov byte [ebp - 4], 0x49
call fcn.00402fc0
lea ecx, [eax + 4]
call fcn.00516ab0
push eax
call dword [0x5cd624]
lea ecx, [ebp - 0x50c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test eax, eax
je 0x4b27e5
or dword [ebp - 0x8a4], 2
push 0x5fed18
jmp 0x4b27ea
push 0x5fed84
call fcn.00516ab0
push eax
push 0x5fe960
lea ecx, [ebp - 0x70]
call fcn.00516b20
push esi
lea ecx, [ebp - 0x7e8]
call fcn.00402fc0
lea ecx, [eax + 0x10]
call fcn.00516cc0
cmp eax, 0x28
jle 0x4b2858
push 0
push esi
lea ecx, [ebp - 0x7e8]
call fcn.00402fc0
lea ecx, [eax + 0x10]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
test al, al
jne 0x4b2858
push 0
push esi
lea ecx, [ebp - 0x7e8]
call fcn.00402fc0
lea ecx, [eax + 0x10]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
lea eax, [ebp - 0x70]
mov ecx, edi
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004bac70
push esi
lea ecx, [ebp - 0xbc]
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa0]
call fcn.004ec350
inc dword [edi + 0x28]
lea ecx, [ebp - 0x50c]
inc dword [edi + 0x2c]
mov byte [ebp - 4], 0x3e
call fcn.00516d50
dec esi
test esi, esi
jg 0x4b2704
push 0
push 0x5f36f4
lea ecx, [ebp - 0x130]
call fcn.00504a30
lea ecx, [ebp - 0x574]
call fcn.00403650
lea ecx, [ebp - 0x104]
call fcn.00516d50
lea ecx, [ebp - 0x7e8]
mov byte [ebp - 4], 0x1d
call fcn.00402fd0
jmp 0x4b28f4
push 0
push 0x5fedc0
lea ecx, [ebp - 0x130]
call fcn.00504a30
lea esi, [edi + 0x818]
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa0]
call fcn.004eaf30
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x20
push dword [eax + 0xa0]
call fcn.004edcc0
push 0
push 0x5fee10
lea ecx, [ebp - 0x130]
call fcn.00504a30
push 8
lea ecx, [ebp - 0x1ac]
call fcn.00401d40
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push dword [eax + 0xa4]
call fcn.004ec1d0
push eax
lea ecx, [ebp - 0x1ac]
call fcn.00403790
mov byte [ebp - 4], 0x4a
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x4b
push dword [eax + 0x44]
call fcn.004ea4c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5fbe48
lea ecx, [edi + 0x78]
push 0x5ed514
call fcn.00516ab0
push eax
lea ecx, [ebp - 0xe0]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x1ac]
call fcn.00403d40
push 0
cmp dword [eax], 0
je 0x4b31ee
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push dword [eax + 0xa4]
call fcn.004eaf30
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x40
push dword [eax + 0xa4]
call fcn.004edcc0
push 0x5fee80
push 0xffffffffffffffff
mov ecx, esi
call fcn.004e73c0
push 0xc
lea ecx, [ebp - 0x28c]
call fcn.00401d00
lea ecx, [ebp - 0x28c]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x3b8]
mov byte [ebp - 4], 0x4b
call fcn.00401d00
lea ecx, [ebp - 0x3b8]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 0x4c
call fcn.00401d00
lea ecx, [ebp - 0x168]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x174]
mov byte [ebp - 4], 0x4d
call fcn.00401d00
lea ecx, [ebp - 0x174]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x244]
mov byte [ebp - 4], 0x4e
call fcn.00401d00
lea ecx, [ebp - 0x244]
call fcn.00516ef0
push 0
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 0x4f
call fcn.00403d40
mov esi, dword [eax]
mov dword [ebp - 0x8b4], esi
test esi, esi
jle 0x4b319f
nop dword [eax]
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 0x889], 0
call fcn.00403d40
mov ecx, dword [edi + 4]
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa4]
call fcn.004ebfb0
push esi
lea ecx, [ebp - 0x1ac]
mov dword [ebp - 0x89c], eax
call fcn.00403d40
mov ecx, dword [edi + 8]
push dword [eax]
push dword [ecx + 0xa4]
mov ecx, dword [edi + 4]
call fcn.004ebbb0
test eax, eax
je 0x4b3190
mov eax, dword [eax]
lea ecx, [ebp - 0xec]
cdq
push edx
push eax
call fcn.00515ed0
lea ecx, [ebp - 0xe0]
call fcn.00516ab0
push eax
push 0x800
push 0
push 0
push 0x800
lea ecx, [ebp - 0x28c]
call fcn.005162e0
push eax
push 0x5ed51c
push 0x5fdde4
lea ecx, [ebp - 0xec]
call fcn.00516ab0
push eax
call dword [0x5cd440]
lea ecx, [ebp - 0xe0]
call fcn.00516ab0
push eax
push 0x80
push 0
push 0
push 0x80
lea ecx, [ebp - 0x174]
call fcn.005162e0
push eax
push 0x5ed51c
push 0x5fde00
lea ecx, [ebp - 0xec]
call fcn.00516ab0
push eax
call dword [0x5cd440]
lea ecx, [ebp - 0xe0]
call fcn.00516ab0
push eax
push 0x400
push 0
push 0
push 0x400
lea ecx, [ebp - 0x244]
call fcn.005162e0
push eax
push 0x5ed51c
push 0x5fde14
lea ecx, [ebp - 0xec]
call fcn.00516ab0
push eax
call dword [0x5cd440]
lea ecx, [ebp - 0xe0]
call fcn.00516ab0
push eax
push 0x400
push 0
push 0
push 0x400
lea ecx, [ebp - 0x3b8]
call fcn.005162e0
push eax
push 0x5ed51c
push 0x5fb1b0
lea ecx, [ebp - 0xec]
call fcn.00516ab0
push eax
call dword [0x5cd440]
push esi
lea ecx, [ebp - 0x1ac]
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa4]
call fcn.004ebf00
push eax
lea ecx, [ebp - 0x168]
call fcn.00516ae0
lea ecx, [ebp - 0x70]
call fcn.00516d20
mov eax, dword [ebp - 0x89c]
cmp eax, 0xb
jne 0x4b2d48
lea ecx, [ebp - 0x28c]
call fcn.00516cc0
test eax, eax
je 0x4b3127
lea ecx, [ebp - 0x244]
call fcn.00516ab0
lea ecx, [ebp - 0x28c]
mov esi, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.0050e4c0
test al, al
jne 0x4b2cd6
mov byte [ebp - 0x889], 1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x174]
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x244]
call fcn.00516ab0
push eax
push 0x5fef40
lea ecx, [ebp - 0x70]
call fcn.00516b20
mov esi, dword [ebp - 0x8b4]
jmp 0x4b3127
lea ecx, [ebp - 0x244]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x28c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
mov byte [ebp - 0x889], al
test al, al
jne 0x4b2c8e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x174]
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x244]
call fcn.00516ab0
push eax
push 0x5feee0
lea ecx, [ebp - 0x70]
call fcn.00516b20
mov esi, dword [ebp - 0x8b4]
jmp 0x4b3127
cmp eax, 0xc
jne 0x4b2e30
lea ecx, [ebp - 0x3b8]
call fcn.00516cc0
test eax, eax
je 0x4b3127
lea ecx, [ebp - 0x3b8]
call fcn.00516ab0
mov edx, 2
mov ecx, eax
call fcn.00505ee0
mov byte [ebp - 0x889], al
cmp al, 1
je 0x4b2da2
lea ecx, [ebp - 0x3b8]
call fcn.00516ab0
mov edx, 2
mov ecx, eax
call fcn.00505ee0
mov byte [ebp - 0x889], al
lea ecx, [ebp - 0x174]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
jne 0x4b2de0
push 0x5feec8
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x168]
call fcn.00516ab0
push eax
push 0x5fefa8
jmp 0x4b311f
cmp al, 2
jne 0x4b2e0a
push 0x5feff8
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x168]
call fcn.00516ab0
push eax
push 0x5ff020
jmp 0x4b311f
push 0x5feec8
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x168]
call fcn.00516ab0
push eax
push 0x5ff078
jmp 0x4b311f
cmp eax, 0xd
jne 0x4b2ee1
lea ecx, [ebp - 0x168]
call fcn.00516ab0
mov dl, 1
mov ecx, eax
call fcn.004c4170
mov byte [ebp - 0x889], al
lea ecx, [ebp - 0x174]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
jne 0x4b2e91
push 0x5feec8
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x168]
call fcn.00516ab0
push eax
push 0x5ff0d0
jmp 0x4b311f
cmp al, 2
jne 0x4b2ebb
push 0x5feff8
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x168]
call fcn.00516ab0
push eax
push 0x5ff118
jmp 0x4b311f
push 0x5feec8
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x168]
call fcn.00516ab0
push eax
push 0x5ff168
jmp 0x4b311f
cmp eax, 0xe
jne 0x4b3090
push 0xc
lea ecx, [ebp - 0x280]
mov byte [ebp - 0x889], 0
call fcn.00401d00
lea ecx, [ebp - 0x280]
call fcn.00516ef0
push 0
push 0x20019
lea ecx, [ebp - 0x28c]
mov byte [ebp - 4], 0x50
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.005116f0
test al, al
je 0x4b303f
lea eax, [ebp - 0x280]
push eax
lea ecx, [ebp - 0x244]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00511410
test al, al
je 0x4b303f
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x168]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x280]
call fcn.00515510
test eax, eax
je 0x4b303f
push 0
push 0
push 0x5ed51c
lea ecx, [ebp - 0x168]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x280]
call fcn.00514e30
push 0
push 0
push 0x5f3998
push 0x5ff1cc
lea ecx, [ebp - 0x280]
call fcn.00514e30
lea ecx, [ebp - 0x280]
call fcn.00516cc0
cmp eax, 3
jge 0x4b2fce
lea ecx, [ebp - 0x280]
call fcn.00516d20
push 0
lea ecx, [ebp - 0x280]
call fcn.00516ab0
push eax
push 7
lea ecx, [ebp - 0x244]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x28c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510910
mov byte [ebp - 0x889], al
test al, al
je 0x4b303f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x174]
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x168]
call fcn.00516ab0
push eax
push 0x5ff228
jmp 0x4b3074
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x174]
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x168]
call fcn.00516ab0
push eax
push 0x5ff1d8
lea ecx, [ebp - 0x70]
call fcn.00516b20
lea ecx, [ebp - 0x280]
mov byte [ebp - 4], 0x4f
call fcn.00516d50
jmp 0x4b3127
cmp eax, 0xf
jne 0x4b3127
push 0
push 0x5ed51c
push 1
lea ecx, [ebp - 0x244]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x28c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510910
mov byte [ebp - 0x889], al
lea ecx, [ebp - 0x174]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
test al, al
jne 0x4b3103
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x168]
call fcn.00516ab0
push eax
push 0x5ff280
jmp 0x4b311f
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x168]
call fcn.00516ab0
push eax
push 0x5ff2c8
lea ecx, [ebp - 0x70]
call fcn.00516b20
lea eax, [ebp - 0x70]
mov ecx, edi
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004bac70
mov cl, byte [ebp - 0x889]
test cl, cl
je 0x4b316a
push esi
lea ecx, [ebp - 0x1ac]
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa4]
call fcn.004ec350
mov cl, byte [ebp - 0x889]
xor eax, eax
test cl, cl
setne al
add dword [edi + 0x2c], eax
mov eax, dword [ebp - 0x8a4]
inc dword [edi + 0x28]
or eax, 2
cmp cl, 2
cmovne eax, dword [ebp - 0x8a4]
mov dword [ebp - 0x8a4], eax
dec esi
mov dword [ebp - 0x8b4], esi
test esi, esi
jg 0x4b2aa0
push 0
push 0x5f36f4
lea ecx, [ebp - 0x130]
call fcn.00504a30
lea ecx, [ebp - 0x244]
call fcn.00516d50
lea ecx, [ebp - 0x174]
call fcn.00516d50
lea ecx, [ebp - 0x168]
call fcn.00516d50
lea ecx, [ebp - 0x3b8]
call fcn.00516d50
lea ecx, [ebp - 0x28c]
mov byte [ebp - 4], 0x4a
call fcn.00516d50
jmp 0x4b31fe
push 0x5fedc0
lea ecx, [ebp - 0x130]
call fcn.00504a30
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa4]
call fcn.004eaf30
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x20
push dword [eax + 0xa4]
call fcn.004edcc0
push 0
push 0x5ff320
lea ecx, [ebp - 0x130]
call fcn.00504a30
push 8
lea ecx, [ebp - 0xa8]
call fcn.00401d40
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push dword [eax + 0xa8]
call fcn.004ec1d0
push eax
lea ecx, [ebp - 0xa8]
call fcn.00403790
mov byte [ebp - 4], 0x51
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x50
push dword [eax + 0x44]
call fcn.004ea4c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ff3a0
push 0x5ed514
lea ecx, [edi + 0x78]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0xe0]
call fcn.00516b20
push 0
lea ecx, [ebp - 0xa8]
call fcn.00403d40
cmp dword [eax], 0
je 0x4b9a7e
mov ecx, 0x5ff3c4
call fcn.004fc140
mov ecx, 0x5ff3e8
call fcn.004fc140
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xa8]
call fcn.004eaf30
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x40
push dword [eax + 0xa8]
call fcn.004edcc0
push 0x5ff408
push 0xffffffffffffffff
lea ecx, [edi + 0x818]
call fcn.004e73c0
push 0xc
lea ecx, [ebp - 0xa0]
call fcn.00401d00
lea ecx, [ebp - 0xa0]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x52
call fcn.00401d00
lea ecx, [ebp - 0x88]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x53
call fcn.00401d00
lea ecx, [ebp - 0x94]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x54
call fcn.00401d00
lea ecx, [ebp - 0x7c]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x2ec]
mov byte [ebp - 4], 0x55
call fcn.00401d00
lea ecx, [ebp - 0x2ec]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 0x56
call fcn.00401d00
lea ecx, [ebp - 0x110]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 0x57
call fcn.00401d00
lea ecx, [ebp - 0xb4]
call fcn.00516ef0
push 0
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x58
call fcn.00403d40
mov eax, dword [eax]
mov dword [ebp - 0x890], eax
test eax, eax
jle 0x4b9a1c
push eax
lea ecx, [ebp - 0xa8]
mov byte [ebp - 0x889], 0
call fcn.00403d40
mov ecx, dword [edi + 4]
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa8]
call fcn.004ebfb0
push dword [ebp - 0x890]
lea ecx, [ebp - 0xa8]
mov esi, eax
call fcn.00403d40
mov ecx, dword [edi + 8]
push dword [eax]
push dword [ecx + 0xa8]
mov ecx, dword [edi + 4]
call fcn.004ebbb0
test eax, eax
je 0x4b9a07
mov eax, dword [eax]
lea ecx, [ebp - 0xec]
cdq
push edx
push eax
call fcn.00515ed0
lea ecx, [ebp - 0xe0]
call fcn.00516ab0
push eax
push 0x800
push 0
push 0
push 0x800
lea ecx, [ebp - 0xa0]
call fcn.005162e0
push eax
push 0x5ed51c
push 0x5fdde4
lea ecx, [ebp - 0xec]
call fcn.00516ab0
push eax
call dword [0x5cd440]
lea ecx, [ebp - 0xe0]
call fcn.00516ab0
push eax
push 0x80
push 0
push 0
push 0x80
lea ecx, [ebp - 0x7c]
call fcn.005162e0
push eax
push 0x5ed51c
push 0x5fde00
lea ecx, [ebp - 0xec]
call fcn.00516ab0
push eax
call dword [0x5cd440]
lea ecx, [ebp - 0xe0]
call fcn.00516ab0
push eax
push 0x400
push 0
push 0
push 0x400
lea ecx, [ebp - 0x2ec]
call fcn.005162e0
push eax
push 0x5ed51c
push 0x5fde14
lea ecx, [ebp - 0xec]
call fcn.00516ab0
push eax
call dword [0x5cd440]
lea ecx, [ebp - 0xe0]
call fcn.00516ab0
push eax
push 0x400
push 0
push 0
push 0x400
lea ecx, [ebp - 0x88]
call fcn.005162e0
push eax
push 0x5ed51c
push 0x5fb1b0
lea ecx, [ebp - 0xec]
call fcn.00516ab0
push eax
call dword [0x5cd440]
lea ecx, [ebp - 0xe0]
call fcn.00516ab0
push eax
push 0x100
push 0
push 0
push 0x100
lea ecx, [ebp - 0xb4]
call fcn.005162e0
push eax
push 0x5ed51c
push 0x5fde6c
lea ecx, [ebp - 0xec]
call fcn.00516ab0
push eax
call dword [0x5cd440]
push dword [ebp - 0x890]
lea ecx, [ebp - 0xa8]
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa8]
call fcn.004ebf00
push eax
lea ecx, [ebp - 0x94]
call fcn.00516ae0
lea ecx, [ebp - 0x70]
call fcn.00516d20
cmp esi, 0x18
jne 0x4b3830
push 1
push 1
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x94]
call fcn.00516b80
mov ecx, eax
call fcn.00516840
push 0xc
lea ecx, [ebp - 0x2bc]
call fcn.00401d00
push 1
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x2bc]
call fcn.00516e80
push 0xc
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 0x59
call fcn.00401d00
lea ecx, [ebp - 0x250]
call fcn.00516ef0
push 0
push 0
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 4], 0x5a
call fcn.005167d0
mov ecx, eax
call fcn.005167d0
lea ecx, [ebp - 0x94]
call fcn.005167b0
test al, al
jne 0x4b3811
lea ecx, [ebp - 0x2bc]
call fcn.005167b0
test al, al
jne 0x4b3811
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x5ff458
lea ecx, [ebp - 0x2bc]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x250]
call fcn.00516b20
lea ecx, [ebp - 0x250]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510470
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x5ff4a0
lea ecx, [ebp - 0x2bc]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x250]
call fcn.00516b20
lea ecx, [ebp - 0x250]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510470
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ff500
push 0x5ff548
lea ecx, [ebp - 0x2bc]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x250]
call fcn.00516b20
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x250]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510ad0
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510470
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.0050e4c0
test al, al
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
sete al
lea ecx, [ebp - 0x94]
mov byte [ebp - 0x889], al
push 0
push 0x5f36f4
test al, al
jne 0x4b37cb
call fcn.00516ab0
push eax
push 0x5ff5c8
lea ecx, [ebp - 0x70]
call fcn.00516b20
jmp 0x4b3804
call fcn.00516ab0
push eax
push 0x5ff620
lea ecx, [ebp - 0x70]
call fcn.00516b20
push dword [ebp - 0x890]
lea ecx, [ebp - 0xa8]
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa8]
call fcn.004ec350
movzx eax, byte [ebp - 0x889]
add dword [edi + 0x2c], eax
inc dword [edi + 0x28]
lea ecx, [ebp - 0x250]
call fcn.00516d50
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 4], 0x58
call fcn.00516d50
jmp 0x4b9a07
cmp esi, 0x1a
jne 0x4b4157
push 0x5ff684
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b39dd
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.0050e4c0
test al, al
jne 0x4b3884
mov byte [ebp - 0x889], 1
push 1
push 0x5ff7c0
lea ecx, [ebp - 0x70]
call fcn.00516b80
jmp 0x4b4100
push 0xc
lea ecx, [ebp - 0x25c]
call fcn.00401d00
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x25c]
call fcn.00516ec0
push 0
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x5b
call fcn.005167d0
lea ecx, [ebp - 0x25c]
call fcn.00516ab0
mov edx, 1
mov ecx, eax
call fcn.0050e230
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
cmp eax, 0xffffffff
lea ecx, [ebp - 0xa0]
push 0
push 0x5ff6b0
setg byte [ebp - 0x889]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x25c]
call fcn.00516b20
lea ecx, [ebp - 0x25c]
call fcn.00516ab0
mov edx, 1
mov ecx, eax
call fcn.0050e230
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ff6f8
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x25c]
call fcn.00516b20
lea ecx, [ebp - 0x25c]
call fcn.00516ab0
mov edx, 1
mov ecx, eax
call fcn.0050e230
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ff500
push 0x5ff548
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x25c]
call fcn.00516b20
lea ecx, [ebp - 0x25c]
call fcn.00516ab0
mov edx, 2
mov ecx, eax
call fcn.0050e230
lea ecx, [ebp - 0x25c]
mov byte [ebp - 4], 0x58
call fcn.00516d50
cmp byte [ebp - 0x889], 0
jne 0x4b3870
push 1
push 0x5ff758
lea ecx, [ebp - 0x70]
call fcn.00516b80
jmp 0x4b4100
push 0x5ff830
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b3c0c
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.0050e4c0
test al, al
jne 0x4b3a28
mov byte [ebp - 0x889], 1
push 1
push 0x5ff978
lea ecx, [ebp - 0x70]
call fcn.00516b80
jmp 0x4b4100
push 0xc
lea ecx, [ebp - 0x1a4]
call fcn.00401d00
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x1a4]
call fcn.00516ec0
push 0
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x5c
call fcn.005167d0
lea ecx, [ebp - 0x1a4]
call fcn.00516ab0
mov edx, 3
mov ecx, eax
call fcn.0050e230
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
cmp eax, 0xffffffff
lea ecx, [ebp - 0xa0]
push 0
push 0x5ff864
setg byte [ebp - 0x889]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1a4]
call fcn.00516b20
lea ecx, [ebp - 0x1a4]
call fcn.00516ab0
mov edx, 3
mov ecx, eax
call fcn.0050e230
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ff89c
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1a4]
call fcn.00516b20
lea ecx, [ebp - 0x1a4]
call fcn.00516ab0
mov edx, 3
mov ecx, eax
call fcn.0050e230
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ff8b8
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1a4]
call fcn.00516b20
lea ecx, [ebp - 0x1a4]
call fcn.00516ab0
mov edx, 3
mov ecx, eax
call fcn.0050e230
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ff8d0
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1a4]
call fcn.00516b20
lea ecx, [ebp - 0x1a4]
call fcn.00516ab0
mov edx, 3
mov ecx, eax
call fcn.0050e230
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ff8f8
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1a4]
call fcn.00516b20
lea ecx, [ebp - 0x1a4]
call fcn.00516ab0
mov edx, 3
mov ecx, eax
call fcn.0050e230
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 4], 0x58
call fcn.00516d50
cmp byte [ebp - 0x889], 0
jne 0x4b3a14
push 1
push 0x5ff908
lea ecx, [ebp - 0x70]
call fcn.00516b80
jmp 0x4b4100
push 0x5ff9ec
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b3c9e
lea ecx, [ebp - 0x2ec]
call fcn.00516ab0
lea ecx, [ebp - 0xa0]
mov esi, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.0050e4c0
test al, al
jne 0x4b3c60
mov byte [ebp - 0x889], 1
push 1
push 0x5ffa90
lea ecx, [ebp - 0x70]
call fcn.00516b80
jmp 0x4b4100
lea ecx, [ebp - 0x2ec]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
mov byte [ebp - 0x889], al
test al, al
jne 0x4b3c4c
push 1
push 0x5ffa20
lea ecx, [ebp - 0x70]
call fcn.00516b80
jmp 0x4b4100
push 0x5ffb00
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b3d30
lea ecx, [ebp - 0x2ec]
call fcn.00516ab0
lea ecx, [ebp - 0xa0]
mov esi, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.0050e4c0
test al, al
jne 0x4b3cf2
mov byte [ebp - 0x889], 1
push 1
push 0x5ffbb0
lea ecx, [ebp - 0x70]
call fcn.00516b80
jmp 0x4b4100
lea ecx, [ebp - 0x2ec]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
mov byte [ebp - 0x889], al
test al, al
jne 0x4b3cde
push 1
push 0x5ffb38
lea ecx, [ebp - 0x70]
call fcn.00516b80
jmp 0x4b4100
push 0x5ffc2c
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
jne 0x4b3f88
push 0x5ffc58
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
jne 0x4b3f88
push 0x5ffe78
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b4100
push 4
lea ecx, [ebp - 0x154]
call fcn.00401d20
lea ecx, [ebp - 0x154]
call fcn.00511760
push 0xc
lea ecx, [ebp - 0x364]
mov byte [ebp - 4], 0x5f
call fcn.00401d00
push 1
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x364]
call fcn.00516e80
push 0xc
lea ecx, [ebp - 0x358]
mov byte [ebp - 4], 0x60
call fcn.00401d00
lea ecx, [ebp - 0x358]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x838]
mov byte [ebp - 4], 0x61
call fcn.00401d00
lea ecx, [ebp - 0x838]
call fcn.00511780
xor esi, esi
mov byte [ebp - 4], 0x62
push esi
push 1
push 0xd
push 1
push 0x5ed514
lea ecx, [ebp - 0x364]
call fcn.00515510
cmp eax, 0xa
jge 0x4b3e49
lea ecx, [ebp - 0x838]
call fcn.00511770
lea ecx, [ebp - 0x358]
call fcn.00516d50
lea ecx, [ebp - 0x364]
call fcn.00516d50
lea ecx, [ebp - 0x154]
mov byte [ebp - 4], 0x58
call fcn.005116a0
jmp 0x4b4100
push 0
push 0x20019
dec eax
lea ecx, [ebp - 0x364]
push eax
call fcn.005158b0
mov ecx, eax
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x154]
call fcn.005116f0
test al, al
je 0x4b3f58
lea eax, [ebp - 0x838]
push eax
push 0
lea ecx, [ebp - 0x154]
call fcn.005110a0
test al, al
je 0x4b3f58
mov edi, esi
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ffeb0
push dword [ebp - 0x838]
lea ecx, [ebp - 0x364]
push 0x5ed514
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x358]
call fcn.00516b20
lea ecx, [ebp - 0x358]
call fcn.00516ab0
mov edx, 1
mov ecx, eax
call fcn.0050e230
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ffef4
push dword [ebp - 0x838]
lea ecx, [ebp - 0x364]
add esi, eax
push 0x5ed514
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x358]
call fcn.00516b20
lea ecx, [ebp - 0x358]
call fcn.00516ab0
mov edx, 1
mov ecx, eax
call fcn.0050e230
add esi, eax
lea ecx, [ebp - 0x154]
lea eax, [ebp - 0x838]
inc edi
push eax
push edi
call fcn.005110a0
test al, al
jne 0x4b3e96
mov edi, dword [ebp - 0x8a0]
test esi, esi
lea ecx, [ebp - 0x70]
push 1
setg byte [ebp - 0x889]
test esi, esi
jg 0x4b3f79
push 0x5fff30
call fcn.00516b80
jmp 0x4b3e14
push 0x5fffa0
call fcn.00516b80
jmp 0x4b3e14
push 0xc
lea ecx, [ebp - 0x518]
call fcn.00401d00
lea ecx, [ebp - 0x518]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0x5d
call fcn.00401d00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5ffc94
lea ecx, [ebp - 0x88]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x524]
call fcn.00516e40
push 1
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0x5e
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x88]
call fcn.00516ab0
mov esi, dword [0x5cd348]
push eax
call esi
test eax, eax
je 0x4b409c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5f0068
lea ecx, [ebp - 0x88]
call fcn.00516ab0
push eax
push 0x5ffca0
lea ecx, [ebp - 0x310]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x518]
call fcn.00516b20
push 1
push 0
lea ecx, [ebp - 0x518]
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.00503ea0
lea ecx, [ebp - 0x88]
call fcn.00516ab0
push eax
call dword [0x5cd624]
mov byte [ebp - 0x889], al
test al, al
jne 0x4b409c
push 0
lea ecx, [ebp - 0x88]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x524]
call fcn.00516ab0
push eax
call esi
push 0x5ffc2c
lea ecx, [ebp - 0x94]
call fcn.00516de0
lea ecx, [ebp - 0x70]
push 1
test al, al
je 0x4b40cc
cmp byte [ebp - 0x889], 0
jne 0x4b40c5
push 0x5ffcd0
jmp 0x4b40e1
push 0x5ffd30
jmp 0x4b40e1
cmp byte [ebp - 0x889], 0
jne 0x4b40dc
push 0x5ffd98
jmp 0x4b40e1
push 0x5ffe08
call fcn.00516b80
lea ecx, [ebp - 0x524]
call fcn.00516d50
lea ecx, [ebp - 0x518]
mov byte [ebp - 4], 0x58
call fcn.00516d50
lea eax, [ebp - 0x70]
mov ecx, edi
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004bac70
cmp byte [ebp - 0x889], 0
je 0x4b4141
push dword [ebp - 0x890]
lea ecx, [ebp - 0xa8]
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa8]
call fcn.004ec350
xor eax, eax
cmp byte [ebp - 0x889], al
setne al
add dword [edi + 0x2c], eax
inc dword [edi + 0x28]
jmp 0x4b9a07
cmp esi, 0x6f
jne 0x4b41f6
push 0x5f4ad4
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x88]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004bae10
lea ecx, [ebp - 0x7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
test al, al
je 0x4b41cd
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x600010
lea ecx, [ebp - 0x70]
call fcn.00516b20
push dword [ebp - 0x890]
jmp 0x4b94f1
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x600050
lea ecx, [ebp - 0x70]
call fcn.00516b20
jmp 0x4b9514
cmp esi, 0x70
jne 0x4b42ad
push 0x5f4ad4
push 0x600088
lea ecx, [ebp - 0x88]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004bae10
lea ecx, [ebp - 0x7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
test al, al
je 0x4b427b
call fcn.00516ab0
push eax
push 0x6000c4
push 0x6000d0
lea ecx, [ebp - 0x70]
call fcn.00516b20
push dword [ebp - 0x890]
lea ecx, [ebp - 0xa8]
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa8]
call fcn.004ec350
inc dword [edi + 0x2c]
jmp 0x4b4293
call fcn.00516ab0
push eax
push 0x6000c4
push 0x600140
lea ecx, [ebp - 0x70]
call fcn.00516b20
lea eax, [ebp - 0x70]
mov ecx, edi
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004bac70
inc dword [edi + 0x28]
jmp 0x4b9a07
cmp esi, 0x71
jne 0x4b43b0
lea ecx, [ebp - 0xe0]
call fcn.00516ab0
push eax
push 0x800
push 0
push 0
push 0x800
lea ecx, [ebp - 0x88]
call fcn.005162e0
push eax
push 0x5ed51c
push 0x5fde2c
lea ecx, [ebp - 0xec]
call fcn.00516ab0
push eax
call dword [0x5cd440]
test eax, eax
je 0x4b4371
lea ecx, [ebp - 0x88]
call fcn.00516ab0
lea edx, [esi - 0x6f]
mov ecx, eax
call fcn.00505ee0
mov byte [ebp - 0x889], al
test al, al
jne 0x4b433a
lea ecx, [ebp - 0x88]
call fcn.00516ab0
lea edx, [esi - 0x6f]
mov ecx, eax
call fcn.00505ee0
mov byte [ebp - 0x889], al
test al, al
je 0x4b4371
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x6001a8
jmp 0x4b6421
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x600200
lea ecx, [ebp - 0x70]
call fcn.00516b20
jmp 0x4b9514
cmp esi, 0x72
jne 0x4b466e
push 0x600250
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b4562
push 4
lea ecx, [ebp - 0x18c]
call fcn.00401d20
push 0
push 0x2001f
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x18c]
call fcn.00511740
push 0xc
lea ecx, [ebp - 0x424]
mov byte [ebp - 4], 0x63
call fcn.00401d00
lea ecx, [ebp - 0x424]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x580]
mov byte [ebp - 4], 0x64
call fcn.00401d00
mov esi, dword [ebp - 0x890]
lea ecx, [ebp - 0xa8]
push esi
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push 2
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa8]
call fcn.004ebf00
push eax
lea ecx, [ebp - 0x580]
call fcn.00516e80
lea eax, [ebp - 0x424]
mov byte [ebp - 4], 0x65
push eax
push 0x5ed51c
lea ecx, [ebp - 0x18c]
call fcn.00511410
mov byte [ebp - 0x889], al
test al, al
je 0x4b4508
push 0
push 0
push 0x5ed51c
lea ecx, [ebp - 0x580]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x424]
call fcn.00514e30
push 3
lea ecx, [ebp - 0x424]
call fcn.00514ca0
push 0
lea ecx, [ebp - 0x424]
call fcn.00516ab0
push eax
push 1
push 0x5ed51c
lea ecx, [ebp - 0x18c]
call fcn.00510c50
mov byte [ebp - 0x889], al
test al, al
je 0x4b4508
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x6000c4
push 0x600290
jmp 0x4b4530
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x6000c4
push 0x600308
lea ecx, [ebp - 0x70]
call fcn.00516b20
lea ecx, [ebp - 0x580]
call fcn.00516d50
lea ecx, [ebp - 0x424]
call fcn.00516d50
lea ecx, [ebp - 0x18c]
mov byte [ebp - 4], 0x58
call fcn.005116a0
jmp 0x4b94e7
lea ecx, [ebp - 0x88]
call fcn.00516cc0
cmp eax, 0xa
jl 0x4b9a07
push 0x4c
lea ecx, [ebp - 0x6a0]
call fcn.00401e20
lea ecx, [ebp - 0x6a0]
call fcn.0050a400
push 2
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x66
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x6a0]
call fcn.0050a2c0
mov byte [ebp - 0x889], al
test al, al
je 0x4b4629
push 0x5ed51c
lea ecx, [ebp - 0x6a0]
call fcn.0050a0f0
mov byte [ebp - 0x889], al
test al, al
je 0x4b4629
lea ecx, [ebp - 0x6a0]
call fcn.00509fe0
mov byte [ebp - 0x889], al
test al, al
je 0x4b4629
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x600370
lea ecx, [ebp - 0x70]
call fcn.00516b20
lea ecx, [ebp - 0x6a0]
jmp 0x4b94d8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x6003c0
lea ecx, [ebp - 0x70]
call fcn.00516b20
lea ecx, [ebp - 0x6a0]
jmp 0x4b94d8
cmp esi, 0x74
jne 0x4b498a
push 0xc
lea ecx, [ebp - 0x388]
call fcn.00401d00
lea ecx, [ebp - 0x388]
call fcn.00516ef0
lea ecx, [ebp - 0x388]
mov byte [ebp - 4], 0x67
call fcn.00516ab0
lea ecx, [ebp - 0xa0]
mov esi, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.0050e4c0
test al, al
sete byte [ebp - 0x889]
test al, al
je 0x4b46e7
lea ecx, [ebp - 0x388]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
mov byte [ebp - 0x889], al
push 0x600404
lea ecx, [ebp - 0x388]
call fcn.00516de0
test al, al
je 0x4b47b6
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x7c]
push 0x5feec8
call fcn.00516ab0
cmp byte [ebp - 0x889], 0
lea ecx, [ebp - 0x70]
push eax
je 0x4b47aa
push 0x600428
call fcn.00516b20
push 0x6004a4
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
mov esi, dword [ebp - 0x890]
cmp byte [ebp - 0x889], 0
je 0x4b4781
push esi
lea ecx, [ebp - 0xa8]
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa8]
call fcn.004ec350
inc dword [edi + 0x2c]
inc dword [edi + 0x28]
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x130]
mov ecx, edi
push eax
call fcn.004bac70
lea ecx, [ebp - 0x388]
mov byte [ebp - 4], 0x58
call fcn.00516d50
jmp 0x4b9a07
push 0x6004d0
call fcn.00516b20
jmp 0x4b4781
push 0x600544
lea ecx, [ebp - 0x388]
call fcn.00516de0
test al, al
je 0x4b489e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x7c]
push 0x5feec8
call fcn.00516ab0
cmp byte [ebp - 0x889], 0
lea ecx, [ebp - 0x70]
push eax
je 0x4b488f
push 0x600588
call fcn.00516b20
push 0x600610
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0x600644
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0x600680
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0x6006c0
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0x600700
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0x600740
jmp 0x4b473a
push 0x600780
call fcn.00516b20
jmp 0x4b4781
push 0x600800
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b474e
push 0xc
lea ecx, [ebp - 0x530]
call fcn.00401d00
mov esi, dword [ebp - 0x890]
lea ecx, [ebp - 0xa8]
push esi
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push 2
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa8]
call fcn.004ebf00
push eax
lea ecx, [ebp - 0x530]
call fcn.00516e80
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x68
push 0x5feec8
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x530]
push 0x5feed0
call fcn.00516ab0
cmp byte [ebp - 0x889], 0
lea ecx, [ebp - 0x70]
push eax
je 0x4b496c
push 0x600830
call fcn.00516b20
push 0x600610
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
lea ecx, [ebp - 0x530]
mov byte [ebp - 4], 0x67
call fcn.00516d50
jmp 0x4b4754
push 0x6008a0
call fcn.00516b20
lea ecx, [ebp - 0x530]
mov byte [ebp - 4], 0x67
call fcn.00516d50
jmp 0x4b4754
cmp esi, 0x73
jne 0x4b4ccc
push 0x600904
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b4a57
lea ecx, [ebp - 0x88]
call fcn.00516cc0
cmp eax, 0xa
jl 0x4b9a07
lea ecx, [ebp - 0x88]
call fcn.00516ab0
lea edx, [esi - 0x71]
mov ecx, eax
call fcn.00505ee0
mov byte [ebp - 0x889], al
test al, al
jne 0x4b4a2a
lea ecx, [ebp - 0x88]
call fcn.00516ab0
lea edx, [esi - 0x70]
mov ecx, eax
call fcn.00505ee0
mov byte [ebp - 0x889], al
test al, al
jne 0x4b4a2a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x6000c4
push 0x6009a0
jmp 0x4b8a1d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x6000c4
push 0x600938
jmp 0x4b8a1d
push 0x600a00
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b4b1f
lea ecx, [ebp - 0x88]
call fcn.00516cc0
cmp eax, 0xa
jl 0x4b9a07
lea ecx, [ebp - 0x88]
call fcn.00516ab0
mov edx, 2
mov ecx, eax
call fcn.00505ee0
mov byte [ebp - 0x889], al
test al, al
jne 0x4b4af2
lea ecx, [ebp - 0x88]
call fcn.00516ab0
mov edx, 3
mov ecx, eax
call fcn.00505ee0
mov byte [ebp - 0x889], al
test al, al
jne 0x4b4af2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x6000c4
push 0x600a80
jmp 0x4b8a1d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x6000c4
push 0x600a28
jmp 0x4b8a1d
push 0x600ad0
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b4be7
lea ecx, [ebp - 0x88]
call fcn.00516cc0
cmp eax, 0xa
jl 0x4b9a07
lea ecx, [ebp - 0x88]
call fcn.00516ab0
mov edx, 2
mov ecx, eax
call fcn.00505ee0
mov byte [ebp - 0x889], al
test al, al
jne 0x4b4bba
lea ecx, [ebp - 0x88]
call fcn.00516ab0
mov edx, 3
mov ecx, eax
call fcn.00505ee0
mov byte [ebp - 0x889], al
test al, al
jne 0x4b4bba
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x6000c4
push 0x600b70
jmp 0x4b8a1d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x6000c4
push 0x600b08
jmp 0x4b8a1d
push 0x600bd0
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b8a25
lea ecx, [ebp - 0xa0]
call fcn.00516cc0
cmp eax, 0xa
jl 0x4b9a07
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.0050e4c0
test al, al
jne 0x4b4c5f
mov byte [ebp - 0x889], 1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x6000c4
push 0x600c00
jmp 0x4b8a1d
push 0
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
mov byte [ebp - 0x889], al
test al, al
jne 0x4b4c32
push 0
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
mov byte [ebp - 0x889], al
test al, al
jne 0x4b4c32
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x6000c4
push 0x600c50
jmp 0x4b8a1d
cmp esi, 0x1f
jne 0x4b50bc
lea ecx, [ebp - 0xa0]
call fcn.005167b0
test al, al
jne 0x4b9a07
push 0xc
lea ecx, [ebp - 0x418]
call fcn.00401d00
mov esi, dword [ebp - 0x890]
lea ecx, [ebp - 0xa8]
push esi
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push 2
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa8]
call fcn.004ebf00
push eax
lea ecx, [ebp - 0x418]
call fcn.00516e80
push 0x600c9c
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x69
call fcn.00516de0
test al, al
jne 0x4b4eed
push 0x600cb4
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
jne 0x4b4eed
push 0x600cd8
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
jne 0x4b4eed
push 0x600cf0
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b4d94
push 0x600d18
jmp 0x4b4ef2
push 0x600d74
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b4db2
push 0x600da8
jmp 0x4b4ef2
push 0x600df4
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b4dd6
lea ecx, [ebp - 0x110]
call fcn.00516d20
jmp 0x4b4efd
push 0x600e2c
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b4e46
push 4
lea ecx, [ebp - 0x198]
call fcn.00401d20
push 0
push 0x20019
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x198]
call fcn.00511740
lea eax, [ebp - 0x110]
mov byte [ebp - 4], 0x6a
push eax
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x198]
call fcn.00511410
test al, al
jne 0x4b4e5a
lea ecx, [ebp - 0x198]
call fcn.005116a0
lea ecx, [ebp - 0x418]
mov byte [ebp - 4], 0x58
call fcn.00516d50
jmp 0x4b9a07
push 0
push 0
push 0x5ed51c
lea ecx, [ebp - 0x418]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x110]
call fcn.00514e30
push 0
push 0
push 0x5f3998
push 0x5ff1cc
lea ecx, [ebp - 0x110]
call fcn.00514e30
lea ecx, [ebp - 0x110]
call fcn.00516cc0
dec eax
lea ecx, [ebp - 0x110]
push eax
call fcn.00516d60
cmp word [eax], 0xa
jne 0x4b4edc
push 1
lea ecx, [ebp - 0x110]
call fcn.00515870
lea ecx, [ebp - 0x110]
call fcn.00516cc0
dec eax
lea ecx, [ebp - 0x110]
push eax
call fcn.00516d60
cmp word [eax], 0xa
je 0x4b4eb1
lea ecx, [ebp - 0x198]
mov byte [ebp - 4], 0x69
call fcn.005116a0
jmp 0x4b4efd
push 0x5f3df4
lea ecx, [ebp - 0x110]
call fcn.00516e30
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
test al, al
jne 0x4b4f6d
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x110]
call fcn.00516ab0
push eax
push 0x600e58
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x600e68
lea ecx, [ebp - 0x70]
call fcn.00516b20
jmp 0x4b5093
lea ecx, [ebp - 0x110]
call fcn.00516cc0
test eax, eax
je 0x4b4ff5
push 0x600e2c
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b4ff5
push 0
lea ecx, [ebp - 0x110]
call fcn.00516ab0
push eax
push 7
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510c50
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x6000c4
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x600e90
lea ecx, [ebp - 0x418]
call fcn.00516ab0
push eax
push 0x600eb4
jmp 0x4b5067
lea ecx, [ebp - 0x110]
call fcn.00516cc0
test eax, eax
je 0x4b506f
push 0
lea ecx, [ebp - 0x110]
call fcn.00516ab0
push eax
push 1
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510c50
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x110]
call fcn.00516ab0
push eax
push 0x600e58
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x600ee4
lea ecx, [ebp - 0x70]
call fcn.00516b20
push esi
lea ecx, [ebp - 0xa8]
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa8]
call fcn.004ec350
inc dword [edi + 0x2c]
inc dword [edi + 0x28]
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x130]
mov ecx, edi
push eax
call fcn.004bac70
lea ecx, [ebp - 0x418]
mov byte [ebp - 4], 0x58
call fcn.00516d50
jmp 0x4b9a07
cmp esi, 0x20
jne 0x4b52a7
lea ecx, [ebp - 0xa0]
call fcn.005167b0
test al, al
jne 0x4b9a07
push 0
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
lea ecx, [ebp - 0x7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
test al, al
jne 0x4b512e
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x600f18
lea ecx, [ebp - 0x70]
call fcn.00516b20
jmp 0x4b517b
call fcn.00516ab0
push eax
push 0x6000c4
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x600f68
lea ecx, [ebp - 0x70]
call fcn.00516b20
push dword [ebp - 0x890]
lea ecx, [ebp - 0xa8]
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa8]
call fcn.004ec350
inc dword [edi + 0x2c]
inc dword [edi + 0x28]
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x130]
mov ecx, edi
push eax
call fcn.004bac70
push 0
lea ecx, [ebp - 0xa0]
call fcn.005167d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x600fc0
lea ecx, [ebp - 0xa0]
call fcn.00515270
push 0
push 0xffffffffffffffff
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.005116f0
test al, al
je 0x4b9a07
push 0
push 0x601010
push 1
push 0x5fa734
lea ecx, [ebp - 0x20]
call fcn.00510c50
push 0
push 0x601020
push 1
push 0x601068
lea ecx, [ebp - 0x20]
call fcn.00510c50
push 0
push 0x601080
push 1
push 0x601108
lea ecx, [ebp - 0x20]
call fcn.00510c50
push 0
lea eax, [ebp - 0x4a0]
mov dword [ebp - 0x4a0], 1
push eax
push 4
push 0x601120
lea ecx, [ebp - 0x20]
call fcn.00510c50
push 0
push 0x601150
push 1
push 0x6012cc
lea ecx, [ebp - 0x20]
call fcn.00510c50
push 0
push 0x6012f0
push 1
push 0x5fde4c
lea ecx, [ebp - 0x20]
call fcn.00510c50
push 0
lea ecx, [ebp - 0xa0]
call fcn.005167d0
push 0
push 0x601418
push 1
push 0x601468
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510b50
jmp 0x4b9a07
cmp esi, 0x21
jne 0x4b5920
lea ecx, [ebp - 0xb4]
call fcn.005167b0
test al, al
jne 0x4b9a07
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004af390
mov ecx, eax
test ecx, ecx
js 0x4b9a07
mov eax, dword [edi + 0x30]
mov dword [ebp - 0x8b4], eax
cmp ecx, eax
jl 0x4b52f4
cmp eax, 1
je 0x4b52fe
mov esi, dword [edi + 0x3c]
jmp 0x4b5309
mov dword [ebp - 0x8b4], 1
push ecx
lea ecx, [edi + 0x3c]
call fcn.00403630
mov esi, eax
push 0xc
lea ecx, [ebp - 0xc8]
call fcn.00401d00
lea ecx, [ebp - 0xc8]
call fcn.00516ef0
mov byte [ebp - 4], 0x6b
mov eax, dword [ebp - 0x8b4]
test eax, eax
jle 0x4b5527
mov edi, eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x601488
mov ecx, esi
call fcn.00516ab0
push eax
push str.HKU_
lea ecx, [ebp - 0xc8]
call fcn.00516b20
push 0
lea ecx, [ebp - 0xc8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x601500
mov ecx, esi
call fcn.00516ab0
push eax
push str.HKU_
lea ecx, [ebp - 0xc8]
call fcn.00516b20
push 0
lea ecx, [ebp - 0xc8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x601578
mov ecx, esi
call fcn.00516ab0
push eax
push str.HKU_
lea ecx, [ebp - 0xc8]
call fcn.00516b20
push 0
lea ecx, [ebp - 0xc8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x6015f0
mov ecx, esi
call fcn.00516ab0
push eax
push str.HKU_
lea ecx, [ebp - 0xc8]
call fcn.00516b20
push 0
lea ecx, [ebp - 0xc8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x601660
mov ecx, esi
call fcn.00516ab0
push eax
push str.HKU_
lea ecx, [ebp - 0xc8]
call fcn.00516b20
push 0
lea ecx, [ebp - 0xc8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6016f8
mov ecx, esi
call fcn.00516ab0
push eax
push str.HKU_
lea ecx, [ebp - 0xc8]
call fcn.00516b20
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0xc8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
add esi, 0xc
sub edi, 1
jne 0x4b5335
mov edi, dword [ebp - 0x8a0]
mov eax, dword [ebp - 0x8b4]
cmp eax, dword [edi + 0x30]
jl 0x4b56da
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
mov esi, dword [ebp - 0x8b0]
lea ecx, [ebp - 0xc8]
push eax
push 0x601758
push esi
call fcn.00516b20
push 0
lea ecx, [ebp - 0xc8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x6017d0
push esi
lea ecx, [ebp - 0xc8]
call fcn.00516b20
push 0
lea ecx, [ebp - 0xc8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x601848
push esi
lea ecx, [ebp - 0xc8]
call fcn.00516b20
push 0
lea ecx, [ebp - 0xc8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x6018c0
push esi
lea ecx, [ebp - 0xc8]
call fcn.00516b20
push 0
lea ecx, [ebp - 0xc8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x601930
push esi
lea ecx, [ebp - 0xc8]
call fcn.00516b20
push 0
lea ecx, [ebp - 0xc8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6019c8
push esi
lea ecx, [ebp - 0xc8]
call fcn.00516b20
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0xc8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
mov eax, dword [ebp - 0x8b4]
cmp byte [ebp - 0x8a5], 0
je 0x4b5894
cmp eax, dword [edi + 0x30]
jl 0x4b5894
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
mov esi, dword [ebp - 0x8c4]
lea ecx, [ebp - 0xc8]
push eax
push 0x601758
push esi
call fcn.00516b20
push 0
lea ecx, [ebp - 0xc8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x6017d0
push esi
lea ecx, [ebp - 0xc8]
call fcn.00516b20
push 0
lea ecx, [ebp - 0xc8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x601848
push esi
lea ecx, [ebp - 0xc8]
call fcn.00516b20
push 0
lea ecx, [ebp - 0xc8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x6018c0
push esi
lea ecx, [ebp - 0xc8]
call fcn.00516b20
push 0
lea ecx, [ebp - 0xc8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x601930
push esi
lea ecx, [ebp - 0xc8]
call fcn.00516b20
push 0
lea ecx, [ebp - 0xc8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6019c8
push esi
lea ecx, [ebp - 0xc8]
call fcn.00516b20
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0xc8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x601a28
lea ecx, [ebp - 0x70]
call fcn.00516b20
lea eax, [ebp - 0x70]
mov ecx, edi
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004bac70
push dword [ebp - 0x890]
lea ecx, [ebp - 0xa8]
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa8]
call fcn.004ec350
inc dword [edi + 0x2c]
lea ecx, [ebp - 0xc8]
inc dword [edi + 0x28]
mov byte [ebp - 4], 0x58
call fcn.00516d50
jmp 0x4b9a07
cmp esi, 0x23
jne 0x4b5c20
push 0x600250
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b5ad2
push 4
lea ecx, [ebp - 0x178]
call fcn.00401d20
push 0
push 0x2001f
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x178]
call fcn.00511740
push 0xc
lea ecx, [ebp - 0x3e8]
mov byte [ebp - 4], 0x6c
call fcn.00401d00
lea ecx, [ebp - 0x3e8]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x5bc]
mov byte [ebp - 4], 0x6d
call fcn.00401d00
mov esi, dword [ebp - 0x890]
lea ecx, [ebp - 0xa8]
push esi
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push 2
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa8]
call fcn.004ebf00
push eax
lea ecx, [ebp - 0x5bc]
call fcn.00516e80
lea eax, [ebp - 0x3e8]
mov byte [ebp - 4], 0x6e
push eax
push 0x5ed51c
lea ecx, [ebp - 0x178]
call fcn.00511410
mov byte [ebp - 0x889], al
test al, al
je 0x4b5a78
push 0
push 0
push 0x5ed51c
lea ecx, [ebp - 0x5bc]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3e8]
call fcn.00514e30
push 3
lea ecx, [ebp - 0x3e8]
call fcn.00514ca0
push 0
lea ecx, [ebp - 0x3e8]
call fcn.00516ab0
push eax
push 1
push 0x5ed51c
lea ecx, [ebp - 0x178]
call fcn.00510c50
mov byte [ebp - 0x889], al
test al, al
je 0x4b5a78
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x6000c4
push 0x601a70
jmp 0x4b5aa0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x6000c4
push 0x601ad8
lea ecx, [ebp - 0x70]
call fcn.00516b20
lea ecx, [ebp - 0x5bc]
call fcn.00516d50
lea ecx, [ebp - 0x3e8]
call fcn.00516d50
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x58
call fcn.005116a0
jmp 0x4b94e7
lea ecx, [ebp - 0xe0]
call fcn.00516ab0
push eax
push 0x400
push 0
push 0
push 0x400
lea ecx, [ebp - 0x88]
call fcn.005162e0
push eax
push 0x5ed51c
push 0x5fb1b0
lea ecx, [ebp - 0xec]
call fcn.00516ab0
push eax
call dword [0x5cd440]
lea ecx, [ebp - 0x88]
call fcn.00516cc0
cmp eax, 0xa
jl 0x4b9a07
push 0x4c
lea ecx, [ebp - 0x6f0]
call fcn.00401e20
lea ecx, [ebp - 0x6f0]
call fcn.0050a400
push 2
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x6f
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x6f0]
call fcn.0050a2c0
mov byte [ebp - 0x889], al
test al, al
je 0x4b5bdb
push 0x5ed51c
lea ecx, [ebp - 0x6f0]
call fcn.0050a0f0
mov byte [ebp - 0x889], al
test al, al
je 0x4b5bdb
lea ecx, [ebp - 0x6f0]
call fcn.00509fe0
mov byte [ebp - 0x889], al
test al, al
je 0x4b5bdb
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x601b38
lea ecx, [ebp - 0x70]
call fcn.00516b20
lea ecx, [ebp - 0x6f0]
jmp 0x4b94d8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x601b7c
lea ecx, [ebp - 0x70]
call fcn.00516b20
lea ecx, [ebp - 0x6f0]
jmp 0x4b94d8
cmp esi, 0x25
jne 0x4b6063
push 0xc
lea ecx, [ebp - 0x4b8]
call fcn.00401d00
lea ecx, [ebp - 0x4b8]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x430]
mov byte [ebp - 4], 0x70
call fcn.00401d00
mov esi, dword [ebp - 0x890]
lea ecx, [ebp - 0xa8]
push esi
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push 2
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa8]
call fcn.004ebf00
push eax
lea ecx, [ebp - 0x430]
call fcn.00516e80
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 0x71
call fcn.00516ab0
push eax
push 0x800
push 0
push 0
push 0x800
lea ecx, [ebp - 0x4b8]
call fcn.005162e0
push eax
push 0x5ed51c
push 0x5fde14
lea ecx, [ebp - 0xec]
call fcn.00516ab0
push eax
call dword [0x5cd440]
lea ecx, [ebp - 0x4b8]
call fcn.00516cc0
test eax, eax
je 0x4b5ce9
lea ecx, [ebp - 0x4b8]
call fcn.00516ab0
jmp 0x4b5ceb
xor eax, eax
push eax
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0xc
lea ecx, [ebp - 0x148]
mov byte [ebp - 0x889], al
call fcn.00401d00
lea ecx, [ebp - 0x148]
call fcn.00516ef0
push 0x600c9c
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x72
call fcn.00516de0
test al, al
je 0x4b5e39
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x7c]
push 0x5feec8
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x430]
push 0x5feed0
call fcn.00516ab0
cmp byte [ebp - 0x889], 0
lea ecx, [ebp - 0x70]
push eax
je 0x4b5e2f
push 0x601bb8
call fcn.00516b20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x601c10
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x148]
call fcn.00516b20
push 0
push 0x20019
lea ecx, [ebp - 0x148]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.005116f0
test al, al
je 0x4b5de0
lea ecx, [ebp - 0x20]
call fcn.00510f40
test eax, eax
jne 0x4b5ff4
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x148]
call fcn.00516e00
push 0
lea ecx, [ebp - 0x148]
call fcn.005167d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x601c3c
lea ecx, [ebp - 0x148]
call fcn.00515270
push 0x601c5c
jmp 0x4b5fe0
push 0x601c80
jmp 0x4b601f
push 0x601cd0
lea ecx, [ebp - 0x94]
call fcn.00516de0
lea ecx, [ebp - 0x7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
test al, al
je 0x4b5f26
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x430]
push 0x5feed0
call fcn.00516ab0
cmp byte [ebp - 0x889], 0
lea ecx, [ebp - 0x70]
push eax
je 0x4b5e2f
push 0x601bb8
call fcn.00516b20
lea ecx, [ebp - 0x20]
call fcn.00510f40
test eax, eax
jne 0x4b5ff4
push 1
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x148]
call fcn.00516b80
push 0
lea ecx, [ebp - 0x148]
call fcn.005167d0
lea ecx, [ebp - 0x148]
call fcn.00516ab0
mov edx, 0x600c9c
mov ecx, eax
call fcn.0050e4c0
test al, al
jne 0x4b5ff4
push 0
lea ecx, [ebp - 0x148]
call fcn.005167d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x601c3c
lea ecx, [ebp - 0x148]
call fcn.00515270
push 0x601c5c
jmp 0x4b5fe0
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x94]
push 0x5feed0
call fcn.00516ab0
cmp byte [ebp - 0x889], 0
lea ecx, [ebp - 0x70]
push eax
je 0x4b601a
push 0x601cf8
call fcn.00516b20
push 1
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x148]
call fcn.00516b80
push 0
lea ecx, [ebp - 0x148]
call fcn.005167d0
push 0
push 0x20019
lea ecx, [ebp - 0x148]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.005116f0
test al, al
je 0x4b5fa8
lea ecx, [ebp - 0x20]
call fcn.00510fa0
test eax, eax
jne 0x4b5ff4
push 0
lea ecx, [ebp - 0x148]
call fcn.005167d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x601d38
lea ecx, [ebp - 0x148]
call fcn.00515270
push 0x601d70
lea ecx, [ebp - 0x148]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push esi
lea ecx, [ebp - 0xa8]
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa8]
call fcn.004ec350
inc dword [edi + 0x2c]
jmp 0x4b6024
push 0x601dac
call fcn.00516b20
inc dword [edi + 0x28]
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x130]
mov ecx, edi
push eax
call fcn.004bac70
lea ecx, [ebp - 0x148]
call fcn.00516d50
lea ecx, [ebp - 0x430]
call fcn.00516d50
lea ecx, [ebp - 0x4b8]
mov byte [ebp - 4], 0x58
call fcn.00516d50
jmp 0x4b9a07
cmp esi, 0x24
jne 0x4b6441
push 0x601de4
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b6141
lea ecx, [ebp - 0xa0]
call fcn.005167b0
test al, al
jne 0x4b9a07
push 0x601dfc
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0x601e14
lea ecx, [ebp - 0xa0]
mov byte [ebp - 0x889], al
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
add byte [ebp - 0x889], al
lea ecx, [ebp - 0xa0]
push 0x601e2c
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
add al, byte [ebp - 0x889]
lea ecx, [ebp - 0x7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
setne byte [ebp - 0x889]
push 0
push 0x5feec8
test al, al
je 0x4b612c
call fcn.00516ab0
push eax
push 0x6000c4
push 0x601e48
jmp 0x4b6421
call fcn.00516ab0
push eax
push 0x6000c4
push 0x601e90
jmp 0x4b6421
push 0x601ed0
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b6208
lea ecx, [ebp - 0xa0]
call fcn.005167b0
test al, al
jne 0x4b9a07
push 0x5feab0
lea ecx, [ebp - 0x7c]
call fcn.00516de0
lea ecx, [ebp - 0xa0]
test al, al
je 0x4b61a1
push 0
push 0x601ee8
push 1
push 0x601f04
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510b50
jmp 0x4b61b4
push 0x601f04
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
mov byte [ebp - 0x889], al
lea ecx, [ebp - 0x7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
test al, al
je 0x4b61eb
call fcn.00516ab0
push eax
push 0x6000c4
push 0x601f10
jmp 0x4b6421
call fcn.00516ab0
push eax
push 0x6000c4
push 0x601f58
lea ecx, [ebp - 0x70]
call fcn.00516b20
jmp 0x4b9514
push 0x601f98
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b6340
lea ecx, [ebp - 0xa0]
call fcn.005167b0
test al, al
jne 0x4b9a07
push 0xc
lea ecx, [ebp - 0x448]
call fcn.00401d00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x601c3c
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x448]
call fcn.00516e40
push 0x601c5c
lea ecx, [ebp - 0x448]
mov byte [ebp - 4], 0x73
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x601fdc
lea ecx, [ebp - 0xa0]
mov byte [ebp - 0x889], al
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x448]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x448]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
add al, byte [ebp - 0x889]
lea ecx, [ebp - 0x7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
setne byte [ebp - 0x889]
push 0
push 0x5feec8
test al, al
je 0x4b6314
call fcn.00516ab0
push eax
push 0x6000c4
push 0x601fe8
jmp 0x4b6324
call fcn.00516ab0
push eax
push 0x6000c4
push 0x602028
lea ecx, [ebp - 0x70]
call fcn.00516b20
lea ecx, [ebp - 0x448]
mov byte [ebp - 4], 0x58
call fcn.00516d50
jmp 0x4b6429
push 0x602064
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b9a07
lea ecx, [ebp - 0xa0]
call fcn.005167b0
test al, al
jne 0x4b9a07
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
mov edx, 1
mov ecx, eax
call fcn.0050e230
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test eax, eax
lea ecx, [ebp - 0xa0]
push 0x602094
push 0
setg byte [ebp - 0x889]
call fcn.005167d0
mov ecx, eax
call fcn.00515270
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
mov edx, 1
mov ecx, eax
call fcn.0050e230
push 0
push 0
push 0
push 0
test eax, eax
lea ecx, [ebp - 0x7c]
push 0
setg al
add al, byte [ebp - 0x889]
push 0
push 0
setne byte [ebp - 0x889]
push 0
push 0x5feec8
test al, al
je 0x4b6411
call fcn.00516ab0
push eax
push 0x6000c4
push 0x6020b8
jmp 0x4b6421
call fcn.00516ab0
push eax
push 0x6000c4
push 0x602108
lea ecx, [ebp - 0x70]
call fcn.00516b20
cmp byte [ebp - 0x889], 0
je 0x4b9514
push dword [ebp - 0x890]
jmp 0x4b94f1
cmp esi, 0x2a
jne 0x4b64e0
push 0x5f4ad4
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x88]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004bae10
lea ecx, [ebp - 0x7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
test al, al
je 0x4b64b7
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x60214c
lea ecx, [ebp - 0x70]
call fcn.00516b20
push dword [ebp - 0x890]
jmp 0x4b94f1
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x60218c
lea ecx, [ebp - 0x70]
call fcn.00516b20
jmp 0x4b9514
cmp esi, 0x2b
jne 0x4b655e
push 0x5f4ad4
push 0x600088
lea ecx, [ebp - 0x88]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004bae10
lea ecx, [ebp - 0x7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
test al, al
je 0x4b6541
call fcn.00516ab0
push eax
push 0x6000c4
push 0x6021c0
lea ecx, [ebp - 0x70]
call fcn.00516b20
push dword [ebp - 0x890]
jmp 0x4b94f1
call fcn.00516ab0
push eax
push 0x6000c4
push 0x602230
lea ecx, [ebp - 0x70]
call fcn.00516b20
jmp 0x4b9514
cmp esi, 0x2c
jne 0x4b6661
lea ecx, [ebp - 0xe0]
call fcn.00516ab0
push eax
push 0x800
push 0
push 0
push 0x800
lea ecx, [ebp - 0x88]
call fcn.005162e0
push eax
push 0x5ed51c
push 0x5fde2c
lea ecx, [ebp - 0xec]
call fcn.00516ab0
push eax
call dword [0x5cd440]
test eax, eax
je 0x4b6622
lea ecx, [ebp - 0x88]
call fcn.00516ab0
lea edx, [esi - 0x2a]
mov ecx, eax
call fcn.00505ee0
mov byte [ebp - 0x889], al
test al, al
jne 0x4b65eb
lea ecx, [ebp - 0x88]
call fcn.00516ab0
lea edx, [esi - 0x2a]
mov ecx, eax
call fcn.00505ee0
mov byte [ebp - 0x889], al
test al, al
je 0x4b6622
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x602290
jmp 0x4b6421
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x6022e8
lea ecx, [ebp - 0x70]
call fcn.00516b20
jmp 0x4b9514
cmp esi, 0x2d
jne 0x4b691f
push 0x600250
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b6813
push 4
lea ecx, [ebp - 0x17c]
call fcn.00401d20
push 0
push 0x2001f
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x17c]
call fcn.00511740
push 0xc
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x74
call fcn.00401d00
lea ecx, [ebp - 0x43c]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x5b0]
mov byte [ebp - 4], 0x75
call fcn.00401d00
mov esi, dword [ebp - 0x890]
lea ecx, [ebp - 0xa8]
push esi
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push 2
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa8]
call fcn.004ebf00
push eax
lea ecx, [ebp - 0x5b0]
call fcn.00516e80
lea eax, [ebp - 0x43c]
mov byte [ebp - 4], 0x76
push eax
push 0x5ed51c
lea ecx, [ebp - 0x17c]
call fcn.00511410
mov byte [ebp - 0x889], al
test al, al
je 0x4b67b9
push 0
push 0
push 0x5ed51c
lea ecx, [ebp - 0x5b0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x43c]
call fcn.00514e30
push 3
lea ecx, [ebp - 0x43c]
call fcn.00514ca0
push 0
lea ecx, [ebp - 0x43c]
call fcn.00516ab0
push eax
push 1
push 0x5ed51c
lea ecx, [ebp - 0x17c]
call fcn.00510c50
mov byte [ebp - 0x889], al
test al, al
je 0x4b67b9
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x6000c4
push 0x602338
jmp 0x4b67e1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x6000c4
push 0x6023a8
lea ecx, [ebp - 0x70]
call fcn.00516b20
lea ecx, [ebp - 0x5b0]
call fcn.00516d50
lea ecx, [ebp - 0x43c]
call fcn.00516d50
lea ecx, [ebp - 0x17c]
mov byte [ebp - 4], 0x58
call fcn.005116a0
jmp 0x4b94e7
lea ecx, [ebp - 0x88]
call fcn.00516cc0
cmp eax, 0xa
jl 0x4b9a07
push 0x4c
lea ecx, [ebp - 0x740]
call fcn.00401e20
lea ecx, [ebp - 0x740]
call fcn.0050a400
push 2
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x77
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x740]
call fcn.0050a2c0
mov byte [ebp - 0x889], al
test al, al
je 0x4b68da
push 0x5ed51c
lea ecx, [ebp - 0x740]
call fcn.0050a0f0
mov byte [ebp - 0x889], al
test al, al
je 0x4b68da
lea ecx, [ebp - 0x740]
call fcn.00509fe0
mov byte [ebp - 0x889], al
test al, al
je 0x4b68da
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x602410
lea ecx, [ebp - 0x70]
call fcn.00516b20
lea ecx, [ebp - 0x740]
jmp 0x4b94d8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x602460
lea ecx, [ebp - 0x70]
call fcn.00516b20
lea ecx, [ebp - 0x740]
jmp 0x4b94d8
cmp esi, 0x2f
jne 0x4b6c81
push 0xc
lea ecx, [ebp - 0x370]
call fcn.00401d00
lea ecx, [ebp - 0x370]
call fcn.00516ef0
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 0x78
call fcn.00516ab0
push eax
push 0x800
push 0
push 0
push 0x800
lea ecx, [ebp - 0x370]
call fcn.005162e0
push eax
push 0x5ed51c
push 0x5fde14
lea ecx, [ebp - 0xec]
call fcn.00516ab0
push eax
call dword [0x5cd440]
lea ecx, [ebp - 0x370]
call fcn.00516ab0
lea ecx, [ebp - 0xa0]
mov esi, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.0050e4c0
test al, al
sete byte [ebp - 0x889]
test al, al
je 0x4b69da
lea ecx, [ebp - 0x370]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
mov byte [ebp - 0x889], al
push 0x600404
lea ecx, [ebp - 0x370]
call fcn.00516de0
test al, al
je 0x4b6aad
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x7c]
push 0x5feec8
call fcn.00516ab0
cmp byte [ebp - 0x889], 0
lea ecx, [ebp - 0x70]
push eax
je 0x4b6aa1
push 0x6024a8
call fcn.00516b20
push 0x6004a4
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
mov esi, dword [ebp - 0x890]
cmp byte [ebp - 0x889], 0
je 0x4b6a78
push esi
lea ecx, [ebp - 0xa8]
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa8]
call fcn.004ec350
inc dword [edi + 0x2c]
inc dword [edi + 0x28]
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x130]
mov ecx, edi
push eax
call fcn.004bac70
lea ecx, [ebp - 0x370]
mov byte [ebp - 4], 0x58
call fcn.00516d50
jmp 0x4b9a07
push 0x602520
call fcn.00516b20
jmp 0x4b6a78
push 0x600544
lea ecx, [ebp - 0x370]
call fcn.00516de0
test al, al
je 0x4b6b95
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x7c]
push 0x5feec8
call fcn.00516ab0
cmp byte [ebp - 0x889], 0
lea ecx, [ebp - 0x70]
push eax
je 0x4b6b86
push 0x602590
call fcn.00516b20
push 0x600610
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0x600644
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0x600680
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0x6006c0
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0x600700
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0x600740
jmp 0x4b6a31
push 0x602618
call fcn.00516b20
jmp 0x4b6a78
push 0x600800
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b6a45
push 0xc
lea ecx, [ebp - 0x53c]
call fcn.00401d00
mov esi, dword [ebp - 0x890]
lea ecx, [ebp - 0xa8]
push esi
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push 2
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa8]
call fcn.004ebf00
push eax
lea ecx, [ebp - 0x53c]
call fcn.00516e80
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x79
push 0x5feec8
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x53c]
push 0x5feed0
call fcn.00516ab0
cmp byte [ebp - 0x889], 0
lea ecx, [ebp - 0x70]
push eax
je 0x4b6c63
push 0x602698
call fcn.00516b20
push 0x600610
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
lea ecx, [ebp - 0x53c]
mov byte [ebp - 4], 0x78
call fcn.00516d50
jmp 0x4b6a4b
push 0x602708
call fcn.00516b20
lea ecx, [ebp - 0x53c]
mov byte [ebp - 4], 0x78
call fcn.00516d50
jmp 0x4b6a4b
cmp esi, 0x2e
jne 0x4b6fc3
push 0x600904
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b6d4e
lea ecx, [ebp - 0x88]
call fcn.00516cc0
cmp eax, 0xa
jl 0x4b9a07
lea ecx, [ebp - 0x88]
call fcn.00516ab0
lea edx, [esi - 0x2c]
mov ecx, eax
call fcn.00505ee0
mov byte [ebp - 0x889], al
test al, al
jne 0x4b6d21
lea ecx, [ebp - 0x88]
call fcn.00516ab0
lea edx, [esi - 0x2b]
mov ecx, eax
call fcn.00505ee0
mov byte [ebp - 0x889], al
test al, al
jne 0x4b6d21
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x6000c4
push 0x6027d8
jmp 0x4b8a1d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x6000c4
push 0x602770
jmp 0x4b8a1d
push 0x600a00
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b6e16
lea ecx, [ebp - 0x88]
call fcn.00516cc0
cmp eax, 0xa
jl 0x4b9a07
lea ecx, [ebp - 0x88]
call fcn.00516ab0
mov edx, 2
mov ecx, eax
call fcn.00505ee0
mov byte [ebp - 0x889], al
test al, al
jne 0x4b6de9
lea ecx, [ebp - 0x88]
call fcn.00516ab0
mov edx, 3
mov ecx, eax
call fcn.00505ee0
mov byte [ebp - 0x889], al
test al, al
jne 0x4b6de9
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x6000c4
push 0x602890
jmp 0x4b8a1d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x6000c4
push 0x602838
jmp 0x4b8a1d
push 0x600ad0
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b6ede
lea ecx, [ebp - 0x88]
call fcn.00516cc0
cmp eax, 0xa
jl 0x4b9a07
lea ecx, [ebp - 0x88]
call fcn.00516ab0
mov edx, 2
mov ecx, eax
call fcn.00505ee0
mov byte [ebp - 0x889], al
test al, al
jne 0x4b6eb1
lea ecx, [ebp - 0x88]
call fcn.00516ab0
mov edx, 3
mov ecx, eax
call fcn.00505ee0
mov byte [ebp - 0x889], al
test al, al
jne 0x4b6eb1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x6000c4
push 0x602948
jmp 0x4b8a1d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x6000c4
push 0x6028e0
jmp 0x4b8a1d
push 0x6029a8
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b8a25
lea ecx, [ebp - 0xa0]
call fcn.00516cc0
cmp eax, 0xa
jl 0x4b9a07
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.0050e4c0
test al, al
jne 0x4b6f56
mov byte [ebp - 0x889], 1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x6000c4
push 0x6029d8
jmp 0x4b8a1d
push 0
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
mov byte [ebp - 0x889], al
test al, al
jne 0x4b6f29
push 0
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
mov byte [ebp - 0x889], al
test al, al
jne 0x4b6f29
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x6000c4
push 0x602a28
jmp 0x4b8a1d
cmp esi, 0x33
jne 0x4b70b2
push 0x602a70
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b7045
push 0
lea ecx, [ebp - 0x88]
call fcn.00516ab0
mov edx, 0x602a94
mov ecx, eax
call fcn.004c1540
mov byte [ebp - 0x889], al
lea ecx, [ebp - 0x7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
test al, al
je 0x4b702d
call fcn.00516ab0
push eax
push 0x6000c4
push 0x602ac8
jmp 0x4b703d
call fcn.00516ab0
push eax
push 0x6000c4
push 0x602b18
lea ecx, [ebp - 0x70]
call fcn.00516b20
lea eax, [ebp - 0x70]
mov ecx, edi
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004bac70
mov al, byte [ebp - 0x889]
cmp al, 1
jne 0x4b7097
push dword [ebp - 0x890]
lea ecx, [ebp - 0xa8]
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa8]
call fcn.004ec350
inc dword [edi + 0x28]
xor eax, eax
cmp byte [ebp - 0x889], al
jmp 0x4b9a01
cmp al, 2
jne 0x4b70a2
or dword [ebp - 0x8a4], 2
inc dword [edi + 0x28]
xor eax, eax
cmp byte [ebp - 0x889], al
jmp 0x4b9a01
cmp esi, 0x34
jne 0x4b725c
lea ecx, [ebp - 0x88]
call fcn.00516cc0
cmp eax, 0xa
jl 0x4b9a07
push 0x602b70
lea ecx, [ebp - 0x94]
call fcn.00516de0
lea ecx, [ebp - 0x88]
test al, al
je 0x4b71b2
push 0
call fcn.00516ab0
mov edx, 0x602bb0
mov ecx, eax
call fcn.004c1540
push 0
lea ecx, [ebp - 0x88]
mov byte [ebp - 0x889], al
call fcn.005167d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x602bf4
lea ecx, [ebp - 0x88]
call fcn.00515270
push 0x5f45e4
push 0x602c20
lea ecx, [ebp - 0x88]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004bae10
lea ecx, [ebp - 0x7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
test al, al
je 0x4b7191
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x602c38
jmp 0x4b703d
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x602ca8
jmp 0x4b703d
call fcn.00516ab0
mov edx, 2
mov ecx, eax
call fcn.00505ee0
mov byte [ebp - 0x889], al
test al, al
jne 0x4b7225
lea ecx, [ebp - 0x88]
call fcn.00516ab0
mov edx, 3
mov ecx, eax
call fcn.00505ee0
mov byte [ebp - 0x889], al
test al, al
jne 0x4b7225
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x602d70
jmp 0x4b703d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x602d10
jmp 0x4b703d
cmp esi, 0x35
jne 0x4b76bf
lea ecx, [ebp - 0x88]
call fcn.00516cc0
cmp eax, 0xa
jl 0x4b9a07
lea ecx, [ebp - 0x88]
call fcn.00516ab0
lea edx, [esi - 0x32]
mov ecx, eax
call fcn.00505ee0
xorps xmm0, xmm0
mov byte [ebp - 0x891], al
push 0xc
lea ecx, [ebp - 0x2d4]
mov dword [ebp - 0x83c], 0
movups xmmword [ebp - 0x84c], xmm0
call fcn.00401d00
lea ecx, [ebp - 0x2d4]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x500]
mov byte [ebp - 4], 0x7a
call fcn.00401d00
lea ecx, [ebp - 0x500]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x7b
call fcn.00401d00
lea ecx, [ebp - 0x1e8]
call fcn.00516ef0
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 0x7c
call fcn.00516ab0
push eax
push 0x800
push 0
push 0
push 0x800
lea ecx, [ebp - 0x1e8]
call fcn.005162e0
push eax
push 0x5ed51c
push 0x5fde78
lea ecx, [ebp - 0xec]
call fcn.00516ab0
push eax
call dword [0x5cd440]
lea ecx, [edi + 0x518]
call fcn.00512d60
push 0
push 1
lea ecx, [ebp - 0x1e8]
call fcn.00516ab0
push eax
lea ecx, [edi + 0x518]
call fcn.00512990
push 0
push 0
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 0x889], al
call fcn.00516ab0
lea edx, [esi - 0x34]
mov ecx, eax
call fcn.00512210
push 0x100
lea ecx, [ebp - 0x1e8]
lea esi, [edi + 0x51c]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.004e6ab0
push 0
lea eax, [ebp - 0x5e4]
mov ecx, esi
push eax
push 0x602dc8
call fcn.004e64d0
test al, al
je 0x4b7486
lea eax, [ebp - 0x5e4]
mov ecx, esi
push eax
lea eax, [ebp - 0x84c]
push eax
call fcn.004e59f0
test al, al
je 0x4b7486
nop dword [eax + eax]
lea eax, [ebp - 0x2d4]
mov ecx, esi
push eax
push 0x602dd8
lea eax, [ebp - 0x84c]
push eax
call fcn.004e6250
test eax, eax
jne 0x4b741c
lea eax, [ebp - 0x2d4]
mov ecx, esi
push eax
push 0x602df0
lea eax, [ebp - 0x84c]
push eax
call fcn.004e6250
test eax, eax
je 0x4b7469
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x2d4]
call fcn.00516d70
test al, al
jne 0x4b7469
lea eax, [ebp - 0x500]
mov ecx, esi
push eax
push 0x602dfc
lea eax, [ebp - 0x84c]
push eax
call fcn.004e6250
lea eax, [ebp - 0x84c]
mov ecx, esi
push eax
call fcn.004e57c0
test al, al
je 0x4b7469
push 0
push 2
mov ecx, esi
call fcn.004e69c0
lea eax, [ebp - 0x5e4]
mov ecx, esi
push eax
lea eax, [ebp - 0x84c]
push eax
call fcn.004e59f0
test al, al
jne 0x4b73e0
cmp byte [ebp - 0x889], 0
je 0x4b74b0
push dword [edi + 0x540]
lea ecx, [ebp - 0x1e8]
push 0
push 1
call fcn.00516ab0
push eax
lea ecx, [edi + 0x518]
call fcn.005124b0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x602e04
push 0
lea ecx, [ebp - 0x1e8]
call fcn.005167d0
mov ecx, eax
call fcn.00515270
lea ecx, [edi + 0x518]
call fcn.00512d60
push 0
push 1
lea ecx, [ebp - 0x1e8]
call fcn.00516ab0
push eax
lea ecx, [edi + 0x518]
call fcn.00512990
push 0
push 0
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 0x889], al
call fcn.00516ab0
mov edx, 1
mov ecx, eax
call fcn.00512210
push 0x100
lea ecx, [ebp - 0x1e8]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.004e6ab0
push 0
lea eax, [ebp - 0x5e4]
mov ecx, esi
push eax
push 0x602dc8
call fcn.004e64d0
test al, al
je 0x4b75de
lea eax, [ebp - 0x5e4]
mov ecx, esi
push eax
lea eax, [ebp - 0x84c]
push eax
call fcn.004e59f0
test al, al
je 0x4b75de
lea eax, [ebp - 0x2d4]
mov ecx, esi
push eax
push 0x602dfc
lea eax, [ebp - 0x84c]
push eax
call fcn.004e6250
test eax, eax
je 0x4b75c5
lea eax, [ebp - 0x500]
push eax
lea ecx, [ebp - 0x2d4]
call fcn.00516d70
test al, al
jne 0x4b75c5
lea eax, [ebp - 0x84c]
mov ecx, esi
push eax
call fcn.004e57c0
test al, al
je 0x4b75c5
push 0
push 2
mov ecx, esi
call fcn.004e69c0
lea eax, [ebp - 0x5e4]
mov ecx, esi
push eax
lea eax, [ebp - 0x84c]
push eax
call fcn.004e59f0
test al, al
jne 0x4b7574
cmp byte [ebp - 0x889], 0
je 0x4b7608
push dword [edi + 0x540]
lea ecx, [ebp - 0x1e8]
push 0
push 1
call fcn.00516ab0
push eax
lea ecx, [edi + 0x518]
call fcn.005124b0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x7c]
push 0x5feec8
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x94]
push 0x5feed0
call fcn.00516ab0
cmp byte [ebp - 0x891], 0
lea ecx, [ebp - 0x70]
push eax
je 0x4b7676
push 0x602e20
call fcn.00516b20
push dword [ebp - 0x890]
lea ecx, [ebp - 0xa8]
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa8]
call fcn.004ec350
inc dword [edi + 0x2c]
jmp 0x4b7680
push 0x602e78
call fcn.00516b20
inc dword [edi + 0x28]
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x130]
mov ecx, edi
push eax
call fcn.004bac70
lea ecx, [ebp - 0x1e8]
call fcn.00516d50
lea ecx, [ebp - 0x500]
call fcn.00516d50
lea ecx, [ebp - 0x2d4]
mov byte [ebp - 4], 0x58
call fcn.00516d50
jmp 0x4b9a07
cmp esi, 0x37
jne 0x4b7961
push 0x600250
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b7855
push 4
lea ecx, [ebp - 0x180]
call fcn.00401d20
push 0
push 0x2001f
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x180]
call fcn.00511740
push 0xc
lea ecx, [ebp - 0x3d0]
mov byte [ebp - 4], 0x7d
call fcn.00401d00
lea ecx, [ebp - 0x3d0]
call fcn.00516ef0
mov esi, dword [ebp - 0x890]
lea ecx, [ebp - 0xa8]
push esi
mov byte [ebp - 4], 0x7e
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push 2
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa8]
call fcn.004ebf00
push eax
lea ecx, [ebp - 0x110]
call fcn.00516b80
lea eax, [ebp - 0x3d0]
push eax
push 0x5ed51c
lea ecx, [ebp - 0x180]
call fcn.00511410
mov byte [ebp - 0x889], al
test al, al
je 0x4b7806
push 0
push 0
push 0x5ed51c
lea ecx, [ebp - 0x110]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3d0]
call fcn.00514e30
push 3
lea ecx, [ebp - 0x3d0]
call fcn.00514ca0
push 0
lea ecx, [ebp - 0x3d0]
call fcn.00516ab0
push eax
push 1
push 0x5ed51c
lea ecx, [ebp - 0x180]
call fcn.00510c50
mov byte [ebp - 0x889], al
test al, al
je 0x4b7806
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x6000c4
push 0x602ec8
jmp 0x4b782e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x6000c4
push 0x602f40
lea ecx, [ebp - 0x70]
call fcn.00516b20
lea ecx, [ebp - 0x3d0]
call fcn.00516d50
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0x58
call fcn.005116a0
jmp 0x4b94e7
lea ecx, [ebp - 0x88]
call fcn.00516cc0
cmp eax, 0xa
jl 0x4b9a07
push 0x4c
lea ecx, [ebp - 0x790]
call fcn.00401e20
lea ecx, [ebp - 0x790]
call fcn.0050a400
push 2
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x7f
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x790]
call fcn.0050a2c0
mov byte [ebp - 0x889], al
test al, al
je 0x4b791c
push 0x5ed51c
lea ecx, [ebp - 0x790]
call fcn.0050a0f0
mov byte [ebp - 0x889], al
test al, al
je 0x4b791c
lea ecx, [ebp - 0x790]
call fcn.00509fe0
mov byte [ebp - 0x889], al
test al, al
je 0x4b791c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x602fa8
lea ecx, [ebp - 0x70]
call fcn.00516b20
lea ecx, [ebp - 0x790]
jmp 0x4b94d8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x602ff8
lea ecx, [ebp - 0x70]
call fcn.00516b20
lea ecx, [ebp - 0x790]
jmp 0x4b94d8
cmp esi, 0x38
jne 0x4b7e2b
lea ecx, [ebp - 0x88]
call fcn.00516cc0
cmp eax, 0xa
jl 0x4b9a07
push 0x603040
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b7ad2
push 0xc
lea ecx, [ebp - 0x5fc]
call fcn.00401d00
lea ecx, [ebp - 0x5fc]
call fcn.00516ef0
push 0
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x80
call fcn.005167d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x603088
lea ecx, [ebp - 0x88]
call fcn.00515270
lea ecx, [ebp - 0x88]
call fcn.00516ab0
lea edx, [esi - 0x36]
mov ecx, eax
call fcn.00505ee0
push 0
lea ecx, [ebp - 0x88]
mov byte [ebp - 0x891], al
call fcn.005167d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6030a4
lea ecx, [ebp - 0x88]
call fcn.00515270
lea ecx, [ebp - 0x88]
call fcn.00516ab0
lea edx, [esi - 0x36]
mov ecx, eax
call fcn.00505ee0
movzx ecx, byte [ebp - 0x891]
movzx eax, al
imul eax, ecx
lea ecx, [ebp - 0x88]
push 0
mov dword [ebp - 0x89c], eax
call fcn.005167d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x602bf4
lea ecx, [ebp - 0x88]
call fcn.00515270
lea ecx, [ebp - 0x88]
call fcn.00516ab0
lea edx, [esi - 0x36]
mov ecx, eax
call fcn.00505ee0
mov edx, dword [ebp - 0x89c]
movzx ecx, dl
movzx eax, al
imul eax, ecx
lea ecx, [ebp - 0x5fc]
mov byte [ebp - 4], 0x58
mov dword [ebp - 0x8ac], eax
call fcn.00516d50
mov ecx, dword [ebp - 0x8ac]
jmp 0x4b7d6e
push 0x6030c4
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b7c24
lea ecx, [ebp - 0x88]
call fcn.00516ab0
mov edx, 2
mov ecx, eax
call fcn.00505ee0
push 0xc
lea ecx, [ebp - 0x2a4]
mov byte [ebp - 0x8ac], al
call fcn.00401d00
lea ecx, [ebp - 0x2a4]
call fcn.00516ef0
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x81
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004af390
test eax, eax
js 0x4b7b8a
cmp eax, dword [edi + 0x30]
jge 0x4b7b8a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6030f0
push eax
lea ecx, [edi + 0x3c]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
push str.HKU_
lea ecx, [ebp - 0x2a4]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x2a4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x18]
call fcn.00510300
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x603124
push dword [ebp - 0x8c4]
lea ecx, [ebp - 0x2a4]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x2a4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x18]
call fcn.00510300
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x603124
push dword [ebp - 0x8b0]
lea ecx, [ebp - 0x2a4]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x2a4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x18]
call fcn.00510300
lea ecx, [ebp - 0x2a4]
mov byte [ebp - 4], 0x58
call fcn.00516d50
mov ecx, dword [ebp - 0x8ac]
jmp 0x4b7d6e
push 0x603158
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b7d37
push 0
lea ecx, [ebp - 0x88]
call fcn.005167d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60318c
lea ecx, [ebp - 0x88]
call fcn.00515270
lea ecx, [ebp - 0x88]
call fcn.00516ab0
mov edx, 2
mov ecx, eax
call fcn.00505ee0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6031a4
lea ecx, [ebp - 0x88]
mov byte [ebp - 0x891], al
call fcn.00515270
lea ecx, [ebp - 0x88]
call fcn.00516ab0
mov edx, 2
mov ecx, eax
call fcn.00505ee0
movzx ecx, byte [ebp - 0x891]
movzx eax, al
imul eax, ecx
lea ecx, [ebp - 0x88]
push 0
mov dword [ebp - 0x89c], eax
call fcn.005167d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6031b0
lea ecx, [ebp - 0x88]
call fcn.00515270
lea ecx, [ebp - 0x88]
call fcn.00516ab0
mov edx, 2
mov ecx, eax
call fcn.00505ee0
mov edx, dword [ebp - 0x89c]
movzx ecx, dl
movzx eax, al
imul ecx, eax
jmp 0x4b7d68
push 0x6031d4
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b9a07
lea ecx, [ebp - 0x88]
call fcn.00516ab0
mov edx, 2
mov ecx, eax
call fcn.00505ee0
mov cl, al
mov dword [ebp - 0x8ac], ecx
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test cl, cl
lea ecx, [ebp - 0x7c]
push 0x5feec8
je 0x4b7da6
call fcn.00516ab0
push eax
push 0x6000c4
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x603204
jmp 0x4b7dc2
call fcn.00516ab0
push eax
push 0x6000c4
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x603224
lea ecx, [ebp - 0x70]
call fcn.00516b20
lea eax, [ebp - 0x70]
mov ecx, edi
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004bac70
cmp byte [ebp - 0x8ac], 0
je 0x4b7e1b
push dword [ebp - 0x890]
lea ecx, [ebp - 0xa8]
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa8]
call fcn.004ec350
test byte [ebp - 0x8ac], 2
je 0x4b7e1b
or dword [ebp - 0x8a4], 2
inc dword [edi + 0x28]
xor eax, eax
cmp byte [ebp - 0x8ac], al
jmp 0x4b9a01
cmp esi, 0x3e
jne 0x4b7eca
push 0x5f4ad4
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x88]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004bae10
lea ecx, [ebp - 0x7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
test al, al
je 0x4b7ea1
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x60323c
lea ecx, [ebp - 0x70]
call fcn.00516b20
push dword [ebp - 0x890]
jmp 0x4b94f1
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x603268
lea ecx, [ebp - 0x70]
call fcn.00516b20
jmp 0x4b9514
cmp esi, 0x3f
jne 0x4b7f6a
push 0x5f4ad4
push 0x600088
lea ecx, [ebp - 0x88]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004bae10
lea ecx, [ebp - 0x7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
test al, al
je 0x4b7f3c
call fcn.00516ab0
push eax
push 0x6000c4
push 0x60328c
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x6032c4
lea ecx, [ebp - 0x70]
call fcn.00516b20
push dword [ebp - 0x890]
jmp 0x4b94f1
call fcn.00516ab0
push eax
push 0x6000c4
push 0x60328c
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x6032f0
lea ecx, [ebp - 0x70]
call fcn.00516b20
jmp 0x4b9514
cmp esi, 0x40
jne 0x4b808b
lea ecx, [ebp - 0xe0]
call fcn.00516ab0
push eax
push 0x800
push 0
push 0
push 0x800
lea ecx, [ebp - 0x88]
call fcn.005162e0
push eax
push 0x5ed51c
push 0x5fde2c
lea ecx, [ebp - 0xec]
call fcn.00516ab0
push eax
call dword [0x5cd440]
test eax, eax
je 0x4b803f
lea ecx, [ebp - 0x88]
call fcn.00516ab0
lea edx, [esi - 0x3e]
mov ecx, eax
call fcn.00505ee0
mov byte [ebp - 0x889], al
test al, al
jne 0x4b7ffb
lea ecx, [ebp - 0x88]
call fcn.00516ab0
lea edx, [esi - 0x3e]
mov ecx, eax
call fcn.00505ee0
mov byte [ebp - 0x889], al
test al, al
je 0x4b803f
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x603310
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x603330
jmp 0x4b6421
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x603310
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x603360
lea ecx, [ebp - 0x70]
call fcn.00516b20
jmp 0x4b9514
cmp esi, 0x41
jne 0x4b8381
push 0x600250
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b8257
push 4
lea ecx, [ebp - 0x184]
call fcn.00401d20
push 0
push 0x2001f
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x184]
call fcn.00511740
push 0xc
lea ecx, [ebp - 0x3dc]
mov byte [ebp - 4], 0x82
call fcn.00401d00
lea ecx, [ebp - 0x3dc]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x5a4]
mov byte [ebp - 4], 0x83
call fcn.00401d00
mov esi, dword [ebp - 0x890]
lea ecx, [ebp - 0xa8]
push esi
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push 2
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa8]
call fcn.004ebf00
push eax
lea ecx, [ebp - 0x5a4]
call fcn.00516e80
lea eax, [ebp - 0x3dc]
mov byte [ebp - 4], 0x84
push eax
push 0x5ed51c
lea ecx, [ebp - 0x184]
call fcn.00511410
mov byte [ebp - 0x889], al
test al, al
je 0x4b81f0
push 0
push 0
push 0x5ed51c
lea ecx, [ebp - 0x5a4]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3dc]
call fcn.00514e30
push 3
lea ecx, [ebp - 0x3dc]
call fcn.00514ca0
push 0
lea ecx, [ebp - 0x3dc]
call fcn.00516ab0
push eax
push 1
push 0x5ed51c
lea ecx, [ebp - 0x184]
call fcn.00510c50
mov byte [ebp - 0x889], al
test al, al
je 0x4b81f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x6000c4
push 0x603388
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x6032c4
jmp 0x4b8225
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x6000c4
push 0x6033c8
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x6032f0
lea ecx, [ebp - 0x70]
call fcn.00516b20
lea ecx, [ebp - 0x5a4]
call fcn.00516d50
lea ecx, [ebp - 0x3dc]
call fcn.00516d50
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 0x58
call fcn.005116a0
jmp 0x4b94e7
lea ecx, [ebp - 0x88]
call fcn.00516cc0
cmp eax, 0xa
jl 0x4b9a07
push 0x4c
lea ecx, [ebp - 0x7e0]
call fcn.00401e20
lea ecx, [ebp - 0x7e0]
call fcn.0050a400
push 2
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x85
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x7e0]
call fcn.0050a2c0
mov byte [ebp - 0x889], al
test al, al
je 0x4b832f
push 0x5ed51c
lea ecx, [ebp - 0x7e0]
call fcn.0050a0f0
mov byte [ebp - 0x889], al
test al, al
je 0x4b832f
lea ecx, [ebp - 0x7e0]
call fcn.00509fe0
mov byte [ebp - 0x889], al
test al, al
je 0x4b832f
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x603404
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x6032c4
lea ecx, [ebp - 0x70]
call fcn.00516b20
lea ecx, [ebp - 0x7e0]
jmp 0x4b94d8
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x603404
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x6032f0
lea ecx, [ebp - 0x70]
call fcn.00516b20
lea ecx, [ebp - 0x7e0]
jmp 0x4b94d8
cmp esi, 0x43
jne 0x4b86f7
push 0xc
lea ecx, [ebp - 0x2e0]
call fcn.00401d00
lea ecx, [ebp - 0x2e0]
call fcn.00516ef0
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 0x86
call fcn.00516ab0
push eax
push 0x800
push 0
push 0
push 0x800
lea ecx, [ebp - 0x2e0]
call fcn.005162e0
push eax
push 0x5ed51c
push 0x5fde14
lea ecx, [ebp - 0xec]
call fcn.00516ab0
push eax
call dword [0x5cd440]
lea ecx, [ebp - 0x2e0]
call fcn.00516ab0
lea ecx, [ebp - 0xa0]
mov esi, eax
call fcn.00516ab0
mov edx, esi
mov ecx, eax
call fcn.0050e4c0
test al, al
sete byte [ebp - 0x889]
test al, al
je 0x4b843c
lea ecx, [ebp - 0x2e0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
mov byte [ebp - 0x889], al
push 0x600404
lea ecx, [ebp - 0x2e0]
call fcn.00516de0
test al, al
je 0x4b851c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x7c]
push 0x5feec8
call fcn.00516ab0
push eax
lea ecx, [ebp - 0xb4]
push 0x603420
call fcn.00516ab0
cmp byte [ebp - 0x889], 0
lea ecx, [ebp - 0x70]
push eax
je 0x4b8510
push 0x603330
call fcn.00516b20
push 0x6004a4
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
mov esi, dword [ebp - 0x890]
cmp byte [ebp - 0x889], 0
je 0x4b84e7
push esi
lea ecx, [ebp - 0xa8]
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa8]
call fcn.004ec350
inc dword [edi + 0x2c]
inc dword [edi + 0x28]
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x130]
mov ecx, edi
push eax
call fcn.004bac70
lea ecx, [ebp - 0x2e0]
mov byte [ebp - 4], 0x58
call fcn.00516d50
jmp 0x4b9a07
push 0x603360
call fcn.00516b20
jmp 0x4b84e7
push 0x600544
lea ecx, [ebp - 0x2e0]
call fcn.00516de0
test al, al
je 0x4b85fe
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x7c]
push 0x5feec8
call fcn.00516ab0
push eax
lea ecx, [ebp - 0xb4]
push 0x603460
call fcn.00516ab0
cmp byte [ebp - 0x889], 0
lea ecx, [ebp - 0x70]
push eax
je 0x4b8510
push 0x603330
call fcn.00516b20
push 0x600610
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0x600644
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0x600680
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0x6006c0
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0x600700
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
push 0x600740
jmp 0x4b84a0
push 0x600800
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b84b4
push 0xc
lea ecx, [ebp - 0x548]
call fcn.00401d00
mov esi, dword [ebp - 0x890]
lea ecx, [ebp - 0xa8]
push esi
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push 2
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa8]
call fcn.004ebf00
push eax
lea ecx, [ebp - 0x548]
call fcn.00516e80
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x87
push 0x5feec8
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x548]
push 0x5feed0
call fcn.00516ab0
push eax
lea ecx, [ebp - 0xb4]
push 0x6034b0
call fcn.00516ab0
cmp byte [ebp - 0x889], 0
lea ecx, [ebp - 0x70]
push eax
je 0x4b86d9
push 0x603330
call fcn.00516b20
push 0x600610
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
lea ecx, [ebp - 0x548]
mov byte [ebp - 4], 0x86
call fcn.00516d50
jmp 0x4b84ba
push 0x603360
call fcn.00516b20
lea ecx, [ebp - 0x548]
mov byte [ebp - 4], 0x86
call fcn.00516d50
jmp 0x4b84ba
cmp esi, 0x42
jne 0x4b8b17
push 0
push 8
push 0x6034e4
lea ecx, [ebp - 0x94]
call fcn.005144f0
test al, al
je 0x4b87dc
lea ecx, [ebp - 0x88]
call fcn.00516cc0
cmp eax, 0xa
jl 0x4b9a07
lea ecx, [ebp - 0x88]
call fcn.00516ab0
lea edx, [esi - 0x40]
mov ecx, eax
call fcn.00505ee0
mov byte [ebp - 0x889], al
test al, al
jne 0x4b87a5
lea ecx, [ebp - 0x88]
call fcn.00516ab0
lea edx, [esi - 0x3f]
mov ecx, eax
call fcn.00505ee0
mov byte [ebp - 0x889], al
test al, al
jne 0x4b87a5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x603520
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x603584
jmp 0x4b8a1d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x603520
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x603558
jmp 0x4b8a1d
push 0
push 8
push 0x6035a8
lea ecx, [ebp - 0x94]
call fcn.005144f0
test al, al
je 0x4b88bc
lea ecx, [ebp - 0x88]
call fcn.00516cc0
cmp eax, 0xa
jl 0x4b9a07
lea ecx, [ebp - 0x88]
call fcn.00516ab0
mov edx, 2
mov ecx, eax
call fcn.00505ee0
mov byte [ebp - 0x889], al
test al, al
jne 0x4b8885
lea ecx, [ebp - 0x88]
call fcn.00516ab0
mov edx, 3
mov ecx, eax
call fcn.00505ee0
mov byte [ebp - 0x889], al
test al, al
jne 0x4b8885
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x6035e8
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x603584
jmp 0x4b8a1d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x6035e8
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x603558
jmp 0x4b8a1d
push 0
push 8
push 0x603620
lea ecx, [ebp - 0x94]
call fcn.005144f0
test al, al
je 0x4b899c
lea ecx, [ebp - 0x88]
call fcn.00516cc0
cmp eax, 0xa
jl 0x4b9a07
lea ecx, [ebp - 0x88]
call fcn.00516ab0
mov edx, 2
mov ecx, eax
call fcn.00505ee0
mov byte [ebp - 0x889], al
test al, al
jne 0x4b8965
lea ecx, [ebp - 0x88]
call fcn.00516ab0
mov edx, 3
mov ecx, eax
call fcn.00505ee0
mov byte [ebp - 0x889], al
test al, al
jne 0x4b8965
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x603650
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x603584
jmp 0x4b8a1d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x603650
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x603558
jmp 0x4b8a1d
push 0
push 8
push 0x603678
lea ecx, [ebp - 0x94]
call fcn.005144f0
test al, al
je 0x4b8a25
lea ecx, [ebp - 0xa0]
call fcn.00516cc0
cmp eax, 0xa
jl 0x4b9a07
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.0050e4c0
test al, al
jne 0x4b8a98
mov byte [ebp - 0x889], 1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x6000c4
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x603204
lea ecx, [ebp - 0x70]
call fcn.00516b20
lea eax, [ebp - 0x70]
mov ecx, edi
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004bac70
mov cl, byte [ebp - 0x889]
test cl, cl
je 0x4b8a6d
push dword [ebp - 0x890]
lea ecx, [ebp - 0xa8]
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa8]
call fcn.004ec350
mov cl, byte [ebp - 0x889]
inc dword [edi + 0x28]
xor eax, eax
test cl, cl
setne al
add dword [edi + 0x2c], eax
mov eax, dword [ebp - 0x8a4]
or eax, 2
cmp cl, 2
cmovne eax, dword [ebp - 0x8a4]
mov dword [ebp - 0x8a4], eax
jmp 0x4b9a07
push 0
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
mov byte [ebp - 0x889], al
test al, al
jne 0x4b89eb
push 0
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
mov byte [ebp - 0x889], al
test al, al
jne 0x4b89eb
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x6000c4
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x603224
jmp 0x4b8a1d
cmp esi, 0x47
jne 0x4b8bbf
push 0
push 8
push 0x6036a0
lea ecx, [ebp - 0x94]
call fcn.005144f0
test al, al
je 0x4b7045
push 0
lea ecx, [ebp - 0x88]
call fcn.00516ab0
mov edx, 0x602a94
mov ecx, eax
call fcn.004c1540
mov byte [ebp - 0x889], al
lea ecx, [ebp - 0x7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
test al, al
je 0x4b8b99
call fcn.00516ab0
push eax
push 0x6000c4
push 0x6036cc
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x603558
jmp 0x4b703d
call fcn.00516ab0
push eax
push 0x6000c4
push 0x6036e4
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x603584
jmp 0x4b703d
cmp esi, 0x48
jne 0x4b8da5
lea ecx, [ebp - 0x88]
call fcn.00516cc0
cmp eax, 0xa
jl 0x4b9a07
push 0
push 8
push 0x60370c
lea ecx, [ebp - 0x94]
call fcn.005144f0
lea ecx, [ebp - 0x88]
test al, al
je 0x4b8ce1
push 0
call fcn.00516ab0
mov edx, 0x602bb0
mov ecx, eax
call fcn.004c1540
push 0
lea ecx, [ebp - 0x88]
mov byte [ebp - 0x889], al
call fcn.005167d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x602bf4
lea ecx, [ebp - 0x88]
call fcn.00515270
push 0x5f45e4
push 0x602c20
lea ecx, [ebp - 0x88]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004bae10
lea ecx, [ebp - 0x7c]
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
test al, al
je 0x4b8caf
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x603744
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x603330
jmp 0x4b703d
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x603744
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x603360
jmp 0x4b703d
call fcn.00516ab0
mov edx, 2
mov ecx, eax
call fcn.00505ee0
mov byte [ebp - 0x889], al
test al, al
jne 0x4b8d61
lea ecx, [ebp - 0x88]
call fcn.00516ab0
mov edx, 3
mov ecx, eax
call fcn.00505ee0
mov byte [ebp - 0x889], al
test al, al
jne 0x4b8d61
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x60377c
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x603360
jmp 0x4b703d
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x60377c
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x603330
jmp 0x4b703d
cmp esi, 0x49
jne 0x4b9218
lea ecx, [ebp - 0x88]
call fcn.00516cc0
cmp eax, 0xa
jl 0x4b9a07
lea ecx, [ebp - 0x88]
call fcn.00516ab0
lea edx, [esi - 0x46]
mov ecx, eax
call fcn.00505ee0
xorps xmm0, xmm0
mov byte [ebp - 0x889], al
push 0xc
lea ecx, [ebp - 0x2c8]
mov dword [ebp - 0x850], 0
movups xmmword [ebp - 0x860], xmm0
call fcn.00401d00
lea ecx, [ebp - 0x2c8]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x554]
mov byte [ebp - 4], 0x88
call fcn.00401d00
lea ecx, [ebp - 0x554]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 0x89
call fcn.00401d00
lea ecx, [ebp - 0x1f4]
call fcn.00516ef0
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 0x8a
call fcn.00516ab0
push eax
push 0x800
push 0
push 0
push 0x800
lea ecx, [ebp - 0x1f4]
call fcn.005162e0
push eax
push 0x5ed51c
push 0x5fde78
lea ecx, [ebp - 0xec]
call fcn.00516ab0
push eax
call dword [0x5cd440]
lea ecx, [edi + 0x518]
call fcn.00512d60
push 0
push 1
lea ecx, [ebp - 0x1f4]
call fcn.00516ab0
push eax
lea ecx, [edi + 0x518]
call fcn.00512990
push 0
push 0
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 0x891], al
call fcn.00516ab0
lea edx, [esi - 0x48]
mov ecx, eax
call fcn.00512210
push 0x100
lea ecx, [ebp - 0x1f4]
lea esi, [edi + 0x51c]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.004e6ab0
push 0
lea eax, [ebp - 0x5d0]
mov ecx, esi
push eax
push 0x602dc8
call fcn.004e64d0
test al, al
je 0x4b8fca
lea eax, [ebp - 0x5d0]
mov ecx, esi
push eax
lea eax, [ebp - 0x860]
push eax
call fcn.004e59f0
test al, al
je 0x4b8fca
lea eax, [ebp - 0x2c8]
mov ecx, esi
push eax
push 0x602dd8
lea eax, [ebp - 0x860]
push eax
call fcn.004e6250
test eax, eax
jne 0x4b8f60
lea eax, [ebp - 0x2c8]
mov ecx, esi
push eax
push 0x602df0
lea eax, [ebp - 0x860]
push eax
call fcn.004e6250
test eax, eax
je 0x4b8fad
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x2c8]
call fcn.00516d70
test al, al
jne 0x4b8fad
lea eax, [ebp - 0x554]
mov ecx, esi
push eax
push 0x602dfc
lea eax, [ebp - 0x860]
push eax
call fcn.004e6250
lea eax, [ebp - 0x860]
mov ecx, esi
push eax
call fcn.004e57c0
test al, al
je 0x4b8fad
push 0
push 2
mov ecx, esi
call fcn.004e69c0
lea eax, [ebp - 0x5d0]
mov ecx, esi
push eax
lea eax, [ebp - 0x860]
push eax
call fcn.004e59f0
test al, al
jne 0x4b8f24
cmp byte [ebp - 0x891], 0
je 0x4b8ff4
push dword [edi + 0x540]
lea ecx, [ebp - 0x1f4]
push 0
push 1
call fcn.00516ab0
push eax
lea ecx, [edi + 0x518]
call fcn.005124b0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x602e04
push 0
lea ecx, [ebp - 0x1f4]
call fcn.005167d0
mov ecx, eax
call fcn.00515270
lea ecx, [edi + 0x518]
call fcn.00512d60
push 0
push 1
lea ecx, [ebp - 0x1f4]
call fcn.00516ab0
push eax
lea ecx, [edi + 0x518]
call fcn.00512990
push 0
push 0
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 0x891], al
call fcn.00516ab0
mov edx, 1
mov ecx, eax
call fcn.00512210
push 0x100
lea ecx, [ebp - 0x1f4]
call fcn.00516ab0
push eax
mov ecx, esi
call fcn.004e6ab0
push 0
lea eax, [ebp - 0x5d0]
mov ecx, esi
push eax
push 0x602dc8
call fcn.004e64d0
test al, al
je 0x4b912a
lea eax, [ebp - 0x5d0]
mov ecx, esi
push eax
lea eax, [ebp - 0x860]
push eax
call fcn.004e59f0
test al, al
je 0x4b912a
nop dword [eax + eax]
lea eax, [ebp - 0x2c8]
mov ecx, esi
push eax
push 0x602dfc
lea eax, [ebp - 0x860]
push eax
call fcn.004e6250
test eax, eax
je 0x4b9111
lea eax, [ebp - 0x554]
push eax
lea ecx, [ebp - 0x2c8]
call fcn.00516d70
test al, al
jne 0x4b9111
lea eax, [ebp - 0x860]
mov ecx, esi
push eax
call fcn.004e57c0
test al, al
je 0x4b9111
push 0
push 2
mov ecx, esi
call fcn.004e69c0
lea eax, [ebp - 0x5d0]
mov ecx, esi
push eax
lea eax, [ebp - 0x860]
push eax
call fcn.004e59f0
test al, al
jne 0x4b90c0
cmp byte [ebp - 0x891], 0
je 0x4b9154
push dword [edi + 0x540]
lea ecx, [ebp - 0x1f4]
push 0
push 1
call fcn.00516ab0
push eax
lea ecx, [edi + 0x518]
call fcn.005124b0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x7c]
push 0x5feec8
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x94]
push 0x5feed0
call fcn.00516ab0
push eax
lea ecx, [ebp - 0xb4]
push 0x6037a4
call fcn.00516ab0
cmp byte [ebp - 0x889], 0
lea ecx, [ebp - 0x70]
push eax
je 0x4b91cf
push 0x6037c0
call fcn.00516b20
push dword [ebp - 0x890]
lea ecx, [ebp - 0xa8]
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa8]
call fcn.004ec350
inc dword [edi + 0x2c]
jmp 0x4b91d9
push 0x6037f0
call fcn.00516b20
inc dword [edi + 0x28]
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x130]
mov ecx, edi
push eax
call fcn.004bac70
lea ecx, [ebp - 0x1f4]
call fcn.00516d50
lea ecx, [ebp - 0x554]
call fcn.00516d50
lea ecx, [ebp - 0x2c8]
mov byte [ebp - 4], 0x58
call fcn.00516d50
jmp 0x4b9a07
cmp esi, 0x4b
jne 0x4b952e
push 0x600250
lea ecx, [ebp - 0x94]
call fcn.00516de0
test al, al
je 0x4b93c8
push 4
lea ecx, [ebp - 0x188]
call fcn.00401d20
push 0
push 0x2001f
lea ecx, [ebp - 0xa0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x188]
call fcn.00511740
push 0xc
lea ecx, [ebp - 0x3f4]
mov byte [ebp - 4], 0x8b
call fcn.00401d00
lea ecx, [ebp - 0x3f4]
call fcn.00516ef0
mov esi, dword [ebp - 0x890]
lea ecx, [ebp - 0xa8]
push esi
mov byte [ebp - 4], 0x8c
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push 2
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa8]
call fcn.004ebf00
push eax
lea ecx, [ebp - 0x110]
call fcn.00516b80
lea eax, [ebp - 0x3f4]
push eax
push 0x5ed51c
lea ecx, [ebp - 0x188]
call fcn.00511410
mov byte [ebp - 0x889], al
test al, al
je 0x4b936c
push 0
push 0
push 0x5ed51c
lea ecx, [ebp - 0x110]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x3f4]
call fcn.00514e30
push 3
lea ecx, [ebp - 0x3f4]
call fcn.00514ca0
push 0
lea ecx, [ebp - 0x3f4]
call fcn.00516ab0
push eax
push 1
push 0x5ed51c
lea ecx, [ebp - 0x188]
call fcn.00510c50
mov byte [ebp - 0x889], al
test al, al
je 0x4b936c
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x6000c4
push 0x603388
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x6032c4
jmp 0x4b93a1
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x6000c4
push 0x603388
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x6032f0
lea ecx, [ebp - 0x70]
call fcn.00516b20
lea ecx, [ebp - 0x3f4]
call fcn.00516d50
lea ecx, [ebp - 0x188]
mov byte [ebp - 4], 0x58
call fcn.005116a0
jmp 0x4b94e7
lea ecx, [ebp - 0x88]
call fcn.00516cc0
cmp eax, 0xa
jl 0x4b9a07
push 0x4c
lea ecx, [ebp - 0x650]
call fcn.00401e20
lea ecx, [ebp - 0x650]
call fcn.0050a400
push 2
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x8d
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x650]
call fcn.0050a2c0
mov byte [ebp - 0x889], al
test al, al
je 0x4b948b
push 0x5ed51c
lea ecx, [ebp - 0x650]
call fcn.0050a0f0
mov byte [ebp - 0x889], al
test al, al
je 0x4b948b
lea ecx, [ebp - 0x650]
call fcn.00509fe0
mov byte [ebp - 0x889], al
test al, al
je 0x4b948b
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x603404
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x6032c4
jmp 0x4b94ca
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0x7c]
call fcn.00516ab0
push eax
push 0x5feed0
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x603404
lea ecx, [ebp - 0xb4]
call fcn.00516ab0
push eax
push 0x6032f0
lea ecx, [ebp - 0x70]
call fcn.00516b20
lea ecx, [ebp - 0x650]
mov byte [ebp - 4], 0x58
call fcn.00509f30
mov esi, dword [ebp - 0x890]
cmp byte [ebp - 0x889], 0
je 0x4b9514
push esi
lea ecx, [ebp - 0xa8]
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa8]
call fcn.004ec350
inc dword [edi + 0x2c]
inc dword [edi + 0x28]
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x130]
mov ecx, edi
push eax
call fcn.004bac70
jmp 0x4b9a07
cmp esi, 0x4c
jne 0x4b9a07
lea ecx, [ebp - 0x88]
call fcn.00516cc0
cmp eax, 0xa
jl 0x4b9a07
push 0
push 8
push 0x603818
lea ecx, [ebp - 0x94]
call fcn.005144f0
test al, al
je 0x4b96a3
push 0xc
lea ecx, [ebp - 0x5f0]
call fcn.00401d00
lea ecx, [ebp - 0x5f0]
call fcn.00516ef0
push 0
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x8e
call fcn.005167d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x603088
lea ecx, [ebp - 0x88]
call fcn.00515270
lea ecx, [ebp - 0x88]
call fcn.00516ab0
lea edx, [esi - 0x4a]
mov ecx, eax
call fcn.00505ee0
push 0
lea ecx, [ebp - 0x88]
mov byte [ebp - 0x891], al
call fcn.005167d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6030a4
lea ecx, [ebp - 0x88]
call fcn.00515270
lea ecx, [ebp - 0x88]
call fcn.00516ab0
lea edx, [esi - 0x4a]
mov ecx, eax
call fcn.00505ee0
movzx ecx, byte [ebp - 0x891]
movzx eax, al
imul eax, ecx
lea ecx, [ebp - 0x88]
push 0
mov dword [ebp - 0x89c], eax
call fcn.005167d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x602bf4
lea ecx, [ebp - 0x88]
call fcn.00515270
lea ecx, [ebp - 0x88]
call fcn.00516ab0
lea edx, [esi - 0x4a]
mov ecx, eax
call fcn.00505ee0
mov edx, dword [ebp - 0x89c]
movzx ecx, dl
movzx eax, al
imul eax, ecx
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 4], 0x58
mov dword [ebp - 0x898], eax
call fcn.00516d50
mov ecx, dword [ebp - 0x898]
jmp 0x4b9949
push 0
push 8
push 0x60385c
lea ecx, [ebp - 0x94]
call fcn.005144f0
test al, al
je 0x4b97f9
lea ecx, [ebp - 0x88]
call fcn.00516ab0
mov edx, 2
mov ecx, eax
call fcn.00505ee0
push 0xc
lea ecx, [ebp - 0x2b0]
mov byte [ebp - 0x898], al
call fcn.00401d00
lea ecx, [ebp - 0x2b0]
call fcn.00516ef0
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x8f
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.004af390
test eax, eax
js 0x4b975f
cmp eax, dword [edi + 0x30]
jge 0x4b975f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6030f0
push eax
lea ecx, [edi + 0x3c]
call fcn.00403630
mov ecx, eax
call fcn.00516ab0
push eax
push str.HKU_
lea ecx, [ebp - 0x2b0]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x2b0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x18]
call fcn.00510300
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x603124
push dword [ebp - 0x8c4]
lea ecx, [ebp - 0x2b0]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x2b0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x18]
call fcn.00510300
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x603124
push dword [ebp - 0x8b0]
lea ecx, [ebp - 0x2b0]
call fcn.00516b20
push 0
lea ecx, [ebp - 0x2b0]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x18]
call fcn.00510300
lea ecx, [ebp - 0x2b0]
mov byte [ebp - 4], 0x58
call fcn.00516d50
mov ecx, dword [ebp - 0x898]
jmp 0x4b9949
push 0
push 8
push 0x603880
lea ecx, [ebp - 0x94]
call fcn.005144f0
push 0
test al, al
je 0x4b9910
lea ecx, [ebp - 0x88]
call fcn.005167d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x60318c
lea ecx, [ebp - 0x88]
call fcn.00515270
lea ecx, [ebp - 0x88]
call fcn.00516ab0
mov edx, 2
mov ecx, eax
call fcn.00505ee0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6031a4
lea ecx, [ebp - 0x88]
mov byte [ebp - 0x891], al
call fcn.00515270
lea ecx, [ebp - 0x88]
call fcn.00516ab0
mov edx, 2
mov ecx, eax
call fcn.00505ee0
movzx ecx, byte [ebp - 0x891]
movzx eax, al
imul eax, ecx
lea ecx, [ebp - 0x88]
push 0
mov dword [ebp - 0x89c], eax
call fcn.005167d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6031b0
lea ecx, [ebp - 0x88]
call fcn.00515270
lea ecx, [ebp - 0x88]
call fcn.00516ab0
mov edx, 2
mov ecx, eax
call fcn.00505ee0
mov edx, dword [ebp - 0x89c]
movzx ecx, dl
movzx eax, al
imul ecx, eax
jmp 0x4b9943
push 8
push 0x6038ac
lea ecx, [ebp - 0x94]
call fcn.005144f0
test al, al
je 0x4b9a07
lea ecx, [ebp - 0x88]
call fcn.00516ab0
mov edx, 2
mov ecx, eax
call fcn.00505ee0
mov cl, al
mov dword [ebp - 0x898], ecx
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test cl, cl
lea ecx, [ebp - 0x7c]
push 0x5feec8
je 0x4b9981
call fcn.00516ab0
push eax
push 0x6000c4
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x603204
jmp 0x4b999d
call fcn.00516ab0
push eax
push 0x6000c4
lea ecx, [ebp - 0x94]
call fcn.00516ab0
push eax
push 0x603224
lea ecx, [ebp - 0x70]
call fcn.00516b20
lea eax, [ebp - 0x70]
mov ecx, edi
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004bac70
cmp byte [ebp - 0x898], 0
je 0x4b99f6
push dword [ebp - 0x890]
lea ecx, [ebp - 0xa8]
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xa8]
call fcn.004ec350
test byte [ebp - 0x898], 2
je 0x4b99f6
or dword [ebp - 0x8a4], 2
inc dword [edi + 0x28]
xor eax, eax
cmp byte [ebp - 0x898], al
setne al
add dword [edi + 0x2c], eax
mov eax, dword [ebp - 0x890]
dec eax
mov dword [ebp - 0x890], eax
test eax, eax
jg 0x4b33e1
push 0
push 0x5f36f4
lea ecx, [ebp - 0x130]
call fcn.00504a30
lea ecx, [ebp - 0xb4]
call fcn.00516d50
lea ecx, [ebp - 0x110]
call fcn.00516d50
lea ecx, [ebp - 0x2ec]
call fcn.00516d50
lea ecx, [ebp - 0x7c]
call fcn.00516d50
lea ecx, [ebp - 0x94]
call fcn.00516d50
lea ecx, [ebp - 0x88]
call fcn.00516d50
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x51
call fcn.00516d50
jmp 0x4b9a90
push 0
push 0x6038e0
lea ecx, [ebp - 0x130]
call fcn.00504a30
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004eaf30
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x20
push dword [eax + 0xa8]
call fcn.004edcc0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0x40]
call fcn.004edcc0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x22
push dword [eax + 0x30]
call fcn.004edcc0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x186a0
push 0
push 0x603928
push dword [eax + 0x30]
call fcn.004ed3c0
push 0
push 0x603970
lea ecx, [ebp - 0x130]
call fcn.00504a30
push 8
lea ecx, [ebp - 0x15c]
call fcn.00401d40
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push dword [eax + 0xb8]
call fcn.004ec1d0
push eax
lea ecx, [ebp - 0x15c]
call fcn.00403790
mov byte [ebp - 4], 0x90
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x63
push dword [eax + 0x44]
call fcn.004ea4c0
push 0
lea ecx, [ebp - 0x15c]
call fcn.00403d40
push 0
cmp dword [eax], 0
je 0x4ba5a1
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push dword [eax + 0xb8]
call fcn.004eaf30
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x40
push dword [eax + 0xb8]
call fcn.004edcc0
push 0x6039e0
push 0xffffffffffffffff
lea ecx, [edi + 0x818]
call fcn.004e73c0
push 0xc
lea ecx, [ebp - 0xf8]
call fcn.00401d00
lea ecx, [ebp - 0xf8]
call fcn.00516ef0
push 0xc
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 0x91
call fcn.00401d00
lea ecx, [ebp - 0x1c4]
call fcn.00516ef0
push 0
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x92
call fcn.00403d40
mov esi, dword [eax]
mov dword [ebp - 0x8b0], esi
test esi, esi
jle 0x4b9e20
nop dword [eax]
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x15c]
mov byte [ebp - 0x889], 0
call fcn.00403d40
mov ecx, dword [edi + 4]
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xb8]
call fcn.004ebfb0
push esi
lea ecx, [ebp - 0x15c]
mov dword [ebp - 0x89c], eax
call fcn.00403d40
mov ecx, dword [edi + 8]
push 0
push dword [eax]
push dword [ecx + 0xb8]
mov ecx, dword [edi + 4]
call fcn.004ebf00
push eax
lea ecx, [ebp - 0xf8]
call fcn.00516ae0
mov eax, dword [ebp - 0x89c]
cmp eax, 0x51
jne 0x4b9ec2
lea ecx, [ebp - 0xf8]
call fcn.00516ab0
push eax
push 0
call dword [0x5cdaa8]
mov esi, eax
lea ecx, [ebp - 0xf8]
test esi, esi
setne byte [ebp - 0x891]
call fcn.00516ab0
xor edx, edx
mov ecx, eax
call fcn.004fc4a0
lea ecx, [ebp - 0xf8]
call fcn.00516ab0
mov edx, 3
mov ecx, eax
call fcn.00505ee0
mov cl, al
mov byte [ebp - 0x889], cl
test esi, esi
je 0x4b9d3c
movsd xmm0, qword [edi + 0x298]
comisd xmm0, xmmword [0x6a40a0]
jb 0x4b9d3c
push 0xc
lea ecx, [ebp - 0x598]
call fcn.00401d00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5f0068
lea ecx, [ebp - 0xf8]
call fcn.00516ab0
push eax
push 0x603a24
push dword [edi + 0xbc]
lea ecx, [ebp - 0x598]
call fcn.00516e40
push 0
mov byte [ebp - 4], 0x93
lea ecx, [ebp - 0x598]
push dword [edi + 0xbc]
call fcn.00516ab0
push eax
mov ecx, edi
call fcn.0048ed80
lea ecx, [ebp - 0x598]
mov byte [ebp - 4], 0x92
call fcn.00516d50
mov cl, byte [ebp - 0x889]
mov esi, dword [ebp - 0x8a4]
push 0
push 0
push 0
push 0
push 0
or esi, 4
cmp byte [ebp - 0x891], 0
push 0
cmove esi, dword [ebp - 0x8a4]
push 0
push 0
push 0
cmp cl, 2
jne 0x4b9d99
push 0x603a50
lea ecx, [ebp - 0xf8]
call fcn.00516ab0
push eax
push 0x603a84
lea ecx, [ebp - 0x1c4]
call fcn.00516b20
or esi, 2
mov dword [ebp - 0x8a4], esi
jmp 0x4ba203
test cl, cl
lea ecx, [ebp - 0xf8]
push 0x5feec8
je 0x4b9dc9
call fcn.00516ab0
push eax
push 0x603ab8
lea ecx, [ebp - 0x1c4]
call fcn.00516b20
mov dword [ebp - 0x8a4], esi
jmp 0x4ba1f6
call fcn.00516ab0
push eax
push 0x603b08
lea ecx, [ebp - 0x1c4]
call fcn.00516b20
mov dword [ebp - 0x8a4], esi
mov esi, dword [ebp - 0x8b0]
inc dword [edi + 0x28]
xor eax, eax
cmp byte [ebp - 0x889], al
mov ecx, edi
setne al
add dword [edi + 0x2c], eax
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004bac70
dec esi
mov dword [ebp - 0x8b0], esi
test esi, esi
jg 0x4b9bf0
mov esi, 1
lea ecx, [ebp - 0x15c]
push 0
mov dword [ebp - 0x8b0], esi
call fcn.00403d40
cmp dword [eax], esi
jl 0x4ba585
push esi
lea ecx, [ebp - 0x15c]
call fcn.00403d40
mov ecx, dword [edi + 4]
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xb8]
call fcn.004ebfb0
push dword [ebp - 0x8b0]
lea ecx, [ebp - 0x15c]
mov esi, eax
call fcn.00403d40
mov ecx, dword [edi + 8]
push 0
push dword [eax]
push dword [ecx + 0xb8]
mov ecx, dword [edi + 4]
call fcn.004ebf00
push eax
lea ecx, [ebp - 0xf8]
call fcn.00516ae0
cmp esi, 0x53
jne 0x4ba563
push 0x603d50
lea ecx, [ebp - 0xf8]
xor esi, esi
call fcn.00516de0
test al, al
je 0x4ba3e3
mov ecx, edi
call fcn.0048eb10
jmp 0x4ba4b2
cmp eax, 0x52
jne 0x4ba3d5
push 0x18
lea ecx, [ebp - 0x1dc]
call fcn.00401d30
push 1
push 0x5f6828
lea ecx, [ebp - 0xf8]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x1dc]
call fcn.00513eb0
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0x94
call fcn.00513e20
cmp eax, 1
jbe 0x4b9f7c
push 4
push 1
push 1
push 0
push str.HKLM
lea ecx, [ebp - 0xf8]
call fcn.00515510
test eax, eax
je 0x4b9f7c
push 0
push 1
push 1
push 0
push 0x603b50
lea ecx, [ebp - 0xf8]
call fcn.00515510
test eax, eax
je 0x4b9f7c
push 0
push 0x601ee8
push 1
push 1
lea ecx, [ebp - 0x1dc]
call fcn.00513e30
push eax
push 0
lea ecx, [ebp - 0x1dc]
call fcn.00513e30
push eax
lea ecx, [ebp - 0x20]
call fcn.00510910
mov cl, al
mov byte [ebp - 0x889], cl
jmp 0x4ba392
lea ecx, [ebp - 0x1dc]
call fcn.00513e20
cmp eax, 1
jbe 0x4ba059
push 4
push 1
push 1
push 0
push str.HKLM
lea ecx, [ebp - 0xf8]
call fcn.00515510
test eax, eax
je 0x4ba059
push 0
push 1
push 1
push 0
push 0x603bd0
lea ecx, [ebp - 0xf8]
call fcn.00515510
test eax, eax
je 0x4ba059
push 0xc
lea ecx, [ebp - 0x58c]
call fcn.00401d00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x603c54
push dword [edi + 0xbc]
lea ecx, [ebp - 0x58c]
call fcn.00516e40
push 0
lea ecx, [ebp - 0x58c]
mov byte [ebp - 4], 0x95
call fcn.00516ab0
push eax
push 1
push 1
lea ecx, [ebp - 0x1dc]
call fcn.00513e30
push eax
push 0
lea ecx, [ebp - 0x1dc]
call fcn.00513e30
push eax
lea ecx, [ebp - 0x20]
call fcn.00510910
lea ecx, [ebp - 0x58c]
mov byte [ebp - 0x889], al
mov byte [ebp - 4], 0x94
call fcn.00516d50
jmp 0x4ba38c
lea ecx, [ebp - 0x1dc]
call fcn.00513e20
lea ecx, [ebp - 0x1dc]
cmp eax, 1
jne 0x4ba093
push 0
call fcn.00513e30
xor edx, edx
mov ecx, eax
call fcn.0050e4c0
test al, al
jne 0x4ba08f
mov byte [ebp - 0x889], 1
jmp 0x4ba39a
push 0
jmp 0x4ba0e0
call fcn.00513e20
lea ecx, [ebp - 0x1dc]
cmp eax, 2
jne 0x4ba103
push 1
call fcn.00513e30
push 0
lea ecx, [ebp - 0x1dc]
mov esi, eax
call fcn.00513e30
mov edx, esi
mov ecx, eax
call fcn.0050e4c0
test al, al
jne 0x4ba0d2
mov byte [ebp - 0x889], 1
jmp 0x4ba39a
push 1
lea ecx, [ebp - 0x1dc]
call fcn.00513e30
push eax
push 0
lea ecx, [ebp - 0x1dc]
call fcn.00513e30
push eax
lea ecx, [ebp - 0x20]
call fcn.00510300
mov cl, al
mov byte [ebp - 0x889], cl
jmp 0x4ba392
call fcn.00513e20
lea ecx, [ebp - 0x1dc]
cmp eax, 2
jbe 0x4ba3c7
push 1
call fcn.00513e30
push 0
lea ecx, [ebp - 0x1dc]
mov esi, eax
call fcn.00513e30
mov edx, esi
mov ecx, eax
call fcn.0050e4c0
test al, al
jne 0x4ba146
mov byte [ebp - 0x889], 1
jmp 0x4ba39a
push 0x10
lea ecx, [ebp - 0x870]
call fcn.00401d50
lea ecx, [ebp - 0x870]
call fcn.005117d0
lea eax, [ebp - 0x870]
mov byte [ebp - 4], 0x96
push eax
push 1
lea ecx, [ebp - 0x1dc]
call fcn.00513e30
push eax
push 0
lea ecx, [ebp - 0x1dc]
call fcn.00513e30
push eax
lea ecx, [ebp - 0x20]
call fcn.00511550
mov eax, dword [ebp - 0x868]
cmp eax, 1
je 0x4ba22f
cmp eax, 7
je 0x4ba22f
lea ecx, [ebp - 0x870]
mov byte [ebp - 4], 0x94
call fcn.005117c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0xf8]
call fcn.00516ab0
push eax
push 0x603cf8
lea ecx, [ebp - 0x1c4]
call fcn.00516b20
lea ecx, [ebp - 0x1dc]
mov byte [ebp - 4], 0x92
call fcn.00513e90
cmp byte [ebp - 0x889], 0
je 0x4b9de5
mov esi, dword [ebp - 0x8b0]
lea ecx, [ebp - 0x15c]
push esi
call fcn.00403d40
mov ecx, dword [edi + 4]
push 0
push dword [eax]
mov eax, dword [edi + 8]
push dword [eax + 0xb8]
call fcn.004ec350
jmp 0x4b9deb
push 0xc
lea ecx, [ebp - 0x560]
call fcn.00401d00
push 1
push dword [ebp - 0x870]
lea ecx, [ebp - 0x560]
call fcn.00516e80
push 0xc
lea ecx, [ebp - 0x22c]
mov byte [ebp - 4], 0x97
call fcn.00401d00
push 1
push 2
lea ecx, [ebp - 0x1dc]
call fcn.00513e30
push eax
lea ecx, [ebp - 0x22c]
call fcn.00516e80
push 1
lea edx, [ebp - 0x22c]
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0x8d0]
call fcn.00513890
lea ecx, [ebp - 0x8d0]
call fcn.00401ac0
cmp dword [ebp - 0x868], 1
lea ecx, [ebp - 0x22c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
jne 0x4ba2dd
push 0x603c74
call fcn.00516ab0
push eax
push 0x603c80
lea ecx, [ebp - 0x22c]
call fcn.00516ab0
push eax
push 0x603c74
jmp 0x4ba2fe
push 0x603c88
call fcn.00516ab0
push eax
push 0x5ed650
lea ecx, [ebp - 0x22c]
call fcn.00516ab0
push eax
push 0x603c88
lea ecx, [ebp - 0x22c]
call fcn.00516b20
push 8
push 0
push 0x5ed51c
lea ecx, [ebp - 0x22c]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x560]
call fcn.00514230
push 0
lea ecx, [ebp - 0x560]
call fcn.00516ab0
push eax
push dword [ebp - 0x868]
lea ecx, [ebp - 0x1dc]
push 1
call fcn.00513e30
push eax
push 0
lea ecx, [ebp - 0x1dc]
call fcn.00513e30
push eax
lea ecx, [ebp - 0x20]
call fcn.00510910
lea ecx, [ebp - 0x22c]
mov byte [ebp - 0x889], al
call fcn.00516d50
lea ecx, [ebp - 0x560]
call fcn.00516d50
lea ecx, [ebp - 0x870]
mov byte [ebp - 4], 0x94
call fcn.005117c0
mov cl, byte [ebp - 0x889]
test cl, cl
je 0x4ba1b4
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0xf8]
call fcn.00516ab0
push eax
push 0x603c90
jmp 0x4ba1dc
mov byte [ebp - 4], 0x92
call fcn.00513e90
jmp 0x4b9e11
cmp eax, 0x53
je 0x4b9e11
jmp 0x4b9deb
push 0x603d80
lea ecx, [ebp - 0xf8]
call fcn.00516de0
test al, al
je 0x4ba403
mov ecx, edi
call fcn.0048e6b0
jmp 0x4ba4b2
push 0x603da0
lea ecx, [ebp - 0xf8]
call fcn.00516de0
test al, al
je 0x4ba423
mov ecx, edi
call fcn.0048e5b0
jmp 0x4ba4b2
push 0x603dd4
lea ecx, [ebp - 0xf8]
call fcn.00516de0
test al, al
je 0x4ba440
mov ecx, edi
call fcn.0048e4a0
jmp 0x4ba4b2
push 0x603e04
lea ecx, [ebp - 0xf8]
call fcn.00516de0
test al, al
je 0x4ba45d
mov ecx, edi
call fcn.0048e340
jmp 0x4ba4b2
push 0x603e30
lea ecx, [ebp - 0xf8]
call fcn.00516de0
test al, al
je 0x4ba47a
mov ecx, edi
call fcn.0048e060
jmp 0x4ba4b2
push 0x603e68
lea ecx, [ebp - 0xf8]
call fcn.00516de0
test al, al
je 0x4ba497
mov ecx, edi
call fcn.0048ddf0
jmp 0x4ba4b2
push 0x603eb0
lea ecx, [ebp - 0xf8]
call fcn.00516de0
test al, al
je 0x4ba50e
mov ecx, edi
call fcn.0048db50
mov esi, eax
test esi, esi
jle 0x4ba4e2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0xf8]
call fcn.00516ab0
push eax
push 0x603ef8
jmp 0x4ba536
je 0x4ba50e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x603f90
lea ecx, [ebp - 0xf8]
call fcn.00516ab0
push eax
push 0x603fcc
jmp 0x4ba536
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5feec8
lea ecx, [ebp - 0xf8]
call fcn.00516ab0
push eax
push 0x603f48
lea ecx, [ebp - 0x1c4]
call fcn.00516b20
xor eax, eax
mov ecx, edi
test esi, esi
setg al
add dword [edi + 0x2c], eax
lea eax, [ebp - 0x1c4]
inc dword [edi + 0x28]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.004bac70
mov esi, dword [ebp - 0x8b0]
lea ecx, [ebp - 0x15c]
inc esi
push 0
mov dword [ebp - 0x8b0], esi
call fcn.00403d40
cmp esi, dword [eax]
jle 0x4b9e40
lea ecx, [ebp - 0x1c4]
call fcn.00516d50
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0x90
call fcn.00516d50
jmp 0x4ba5b1
push 0x5fedc0
lea ecx, [ebp - 0x130]
call fcn.00504a30
mov eax, dword [edi + 0x2c]
mov ecx, dword [edi + 4]
mov dword [ebp - 0x89c], eax
mov eax, dword [edi + 0x28]
mov dword [ebp - 0x8b0], eax
mov eax, dword [edi + 8]
push 1
push dword [eax + 0xb8]
call fcn.004eaf30
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x20
push dword [eax + 0xb8]
call fcn.004edcc0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 2
push dword [eax + 0x40]
call fcn.004edcc0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0x30]
call fcn.004edcc0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x186a0
push 0
push 0x5fb854
push dword [eax + 0x30]
call fcn.004ed3c0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x64
push dword [eax + 0x44]
call fcn.004ea4c0
lea ecx, [ebp - 0x4a8]
call fcn.0050b1b0
lea edx, [ebp - 0x70]
lea ecx, [ebp - 0x4a8]
call fcn.0050b220
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x603ff8
lea ecx, [ebp - 0x70]
call fcn.005150b0
push 0
lea ecx, [ebp - 0x70]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x130]
call fcn.00504a30
push 0
push 0x604050
lea ecx, [ebp - 0x130]
call fcn.00504a30
mov ecx, 0x60409c
call fcn.00513850
cdq
lea ecx, [ebp - 0x130]
mov esi, eax
mov edi, edx
call fcn.00505920
add eax, esi
lea ecx, [ebp - 0x70]
adc edx, edi
push edx
push eax
call fcn.00515ed0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x6040ac
lea ecx, [ebp - 0x70]
call fcn.00515270
push 0
lea ecx, [ebp - 0x70]
call fcn.00516ab0
push eax
lea ecx, [ebp - 0x130]
call fcn.00504a30
push 0
lea ecx, [ebp - 0x130]
call fcn.005048f0
mov ecx, dword [ebp - 0x8a0]
push 0x6040c8
push 0x64
lea ecx, [ecx + 0x818]
call fcn.004e73c0
mov esi, dword [ebp - 0x8a4]
lea ecx, [ebp - 0x15c]
mov eax, dword [ebp - 0x89c]
or esi, 1
cmp eax, dword [ebp - 0x8b0]
cmovae esi, dword [ebp - 0x8a4]
call fcn.00402fb0
lea ecx, [ebp - 0xa8]
call fcn.00402fb0
lea ecx, [ebp - 0x1ac]
call fcn.00402fb0
lea ecx, [ebp - 0x130]
call fcn.00401df0
lea ecx, [ebp - 0xbc]
call fcn.00402fb0
lea ecx, [ebp - 0x70]
call fcn.00516d50
lea ecx, [ebp - 0xec]
call fcn.00516d50
lea ecx, [ebp - 0xe0]
call fcn.00516d50
push fcn.005117c0
push 2
push 0x10
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x17
push eax
call fcn.0041eb04
push fcn.00511770
push 3
push 0xc
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x16
push eax
call fcn.0041eb04
push fcn.005116a0
push 3
push 4
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x15
push eax
call fcn.0041eb04
lea ecx, [ebp - 0x200]
call fcn.00516d50
lea ecx, [ebp - 0x454]
call fcn.00516d50
lea ecx, [ebp - 0x2f8]
call fcn.00516d50
lea ecx, [ebp - 0x460]
call fcn.00516d50
lea ecx, [ebp - 0x56c]
call fcn.00516d50
lea ecx, [ebp - 0x304]
call fcn.00516d50
lea ecx, [ebp - 0x400]
call fcn.00516d50
lea ecx, [ebp - 0x46c]
call fcn.00516d50
lea ecx, [ebp - 0x478]
call fcn.00516d50
lea ecx, [ebp - 0x40c]
call fcn.00516d50
lea ecx, [ebp - 0x310]
call fcn.00516d50
lea ecx, [ebp - 0x328]
call fcn.00516d50
lea ecx, [ebp - 0x484]
call fcn.00516d50
lea ecx, [ebp - 0x490]
call fcn.00516d50
lea ecx, [ebp - 0x334]
call fcn.00516d50
lea ecx, [ebp - 0x3c4]
call fcn.00516d50
lea ecx, [ebp - 0x49c]
call fcn.00516d50
lea ecx, [ebp - 0x1b8]
call fcn.00516d50
lea ecx, [ebp - 0x298]
call fcn.00516d50
lea ecx, [ebp - 0x268]
call fcn.00516d50
lea ecx, [ebp - 0x238]
call fcn.00516d50
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e865
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret