Function at 0x451e50
Capabilities:
Contain obfuscated stackstrings
Encode data using base64
Parse pe header

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4aae42
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x70e0
call fcn.004a38f0
mov eax, dword [0x4fb040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, ecx
mov dword [ebp - 0x6f7c], eax
mov dword [ebp - 0x6fe4], 0
lea ecx, [ebp - 0x27dc]
mov byte [eax + 0x19c], 0
call fcn.00413310
mov ecx, dword [ebp - 0x6f7c]
lea ecx, [ecx + 0x11c]
call fcn.00402ce0
xor ecx, ecx
call fcn.004090c0
test eax, eax
je 0x451ede
push eax
call fcn.00478e4b
add esp, 4
mov ecx, dword [ebp - 0x6f7c]
push 0
call fcn.004456a0
mov eax, dword [ebp - 0x6f7c]
push 1
mov eax, dword [eax + 8]
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.004219b0
mov eax, dword [ebp - 0x6f7c]
push 0
push 0x4e16bc
mov eax, dword [eax + 8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.0041f260
push 0xc
lea ecx, [ebp - 0x1f8c]
call fcn.00401960
lea ecx, [ebp - 0x1f8c]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2154]
mov dword [ebp - 4], 0
call fcn.00401960
lea ecx, [ebp - 0x2154]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2114]
mov byte [ebp - 4], 1
call fcn.00401960
lea ecx, [ebp - 0x2114]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2874]
mov byte [ebp - 4], 2
call fcn.00401960
lea ecx, [ebp - 0x2874]
call fcn.00402b30
mov byte [ebp - 4], 3
mov esi, 0xa0
mov eax, dword [ebp - 0x6f7c]
push 0
push 0
push 0x1009
mov eax, dword [eax + 8]
push dword [eax + esi]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.0041da40
add esi, 4
cmp esi, 0xb8
jb 0x451fa0
push 0
push 0
push 0x80
lea ecx, [ebp - 0x2114]
call fcn.004033e0
push eax
push 0
push 0
push 0x104
lea ecx, [ebp - 0x2154]
call fcn.004033e0
push 0
push 0
push 0x80
lea ecx, [ebp - 0x2874]
mov esi, eax
call fcn.004033e0
mov edx, esi
mov ecx, eax
call fcn.00425980
mov edi, dword [ebp - 0x6f7c]
push 4
mov byte [ebp - 0x6f81], 1
mov dword [edi + 0x38], eax
mov eax, edi
mov eax, dword [eax + 8]
push dword [eax + 0x28]
mov eax, edi
mov ecx, dword [eax + 4]
call fcn.0041fce0
mov dword [ebp - 0x6f78], eax
test eax, eax
je 0x452072
mov eax, edi
push 1
lea ecx, [eax + 0x114]
push ecx
lea edx, [eax + 0x10c]
lea ecx, [eax + 0x104]
call fcn.004254a0
test eax, eax
mov dword [edi + 0x30], eax
setne cl
test eax, eax
jne 0x4520f2
jmp 0x452078
mov cl, byte [ebp - 0x6f81]
mov eax, dword [ebp - 0x6f7c]
cmp dword [eax + 0x38], 0
je 0x4520ea
lea ecx, [ebp - 0x2114]
mov dword [eax + 0x30], 1
push ecx
push 1
lea ecx, [eax + 0x104]
call fcn.00478410
mov ecx, eax
call fcn.00402c10
mov ecx, dword [ebp - 0x6f7c]
lea eax, [ebp - 0x2154]
push eax
push 1
lea ecx, [ecx + 0x10c]
call fcn.00478410
mov ecx, eax
call fcn.00402c10
mov ecx, dword [ebp - 0x6f7c]
lea eax, [ebp - 0x2874]
push eax
push 1
lea ecx, [ecx + 0x114]
call fcn.00478410
mov ecx, eax
call fcn.00402c10
jmp 0x4520f2
test cl, cl
je 0x452458
push 8
lea ecx, [ebp - 0x288c]
call fcn.00417f00
mov eax, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x288c]
add eax, 0x114
push eax
mov dword [ebp - 0x6fcc], eax
call fcn.00478570
push 8
lea ecx, [ebp - 0x2884]
mov byte [ebp - 4], 4
call fcn.00417f00
mov esi, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x2884]
add esi, 0x10c
push esi
mov dword [ebp - 0x6fb4], esi
call fcn.00478570
push 8
lea ecx, [ebp - 0x287c]
mov byte [ebp - 4], 5
call fcn.00417f00
mov edi, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x287c]
add edi, 0x104
push edi
mov dword [ebp - 0x6f8c], edi
call fcn.00478570
mov eax, dword [ebp - 0x6f7c]
mov ecx, edi
mov byte [ebp - 4], 6
mov eax, dword [eax + 0x30]
add eax, 2
push eax
call fcn.00478410
mov edi, dword [ebp - 0x6f7c]
mov ecx, esi
mov eax, dword [edi + 0x30]
add eax, 2
push eax
call fcn.00478410
mov eax, dword [edi + 0x30]
mov edi, dword [ebp - 0x6fcc]
add eax, 2
push eax
mov ecx, edi
call fcn.00478410
mov eax, dword [ebp - 0x6f7c]
xor esi, esi
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x45224f
nop dword [eax]
push esi
lea ecx, [ebp - 0x287c]
call fcn.004784e0
mov ecx, eax
call fcn.00402d10
mov ecx, dword [ebp - 0x6f8c]
push eax
push esi
call fcn.004784e0
mov ecx, eax
call fcn.00402e50
push esi
lea ecx, [ebp - 0x2884]
call fcn.004784e0
mov ecx, eax
call fcn.00402d10
mov ecx, dword [ebp - 0x6fb4]
push eax
push esi
call fcn.004784e0
mov ecx, eax
call fcn.00402e50
push esi
lea ecx, [ebp - 0x288c]
call fcn.004784e0
mov ecx, eax
call fcn.00402d10
push eax
push esi
mov ecx, edi
call fcn.004784e0
mov ecx, eax
call fcn.00402e50
mov eax, dword [ebp - 0x6f7c]
inc esi
mov ecx, dword [eax + 0x30]
cmp esi, ecx
jb 0x4521d0
push 0
push 0x4e16e8
push 0x104
push ecx
lea ecx, [eax + 0x114]
call fcn.004784e0
mov ecx, eax
call fcn.004033e0
mov ecx, eax
call fcn.00426440
mov eax, dword [ebp - 0x6f7c]
push 0x4e16e8
push dword [eax + 0x30]
lea ecx, [eax + 0x104]
call fcn.004784e0
mov ecx, eax
call fcn.00402c00
mov edi, dword [ebp - 0x6f7c]
mov ecx, edi
push 0x4e16fc
mov eax, dword [edi + 0x30]
lea ecx, [ecx + 0x104]
inc eax
push eax
mov dword [edi + 0x30], eax
call fcn.004784e0
mov ecx, eax
call fcn.00402c00
mov eax, edi
push 0x4e16fc
push dword [eax + 0x30]
lea ecx, [eax + 0x114]
call fcn.004784e0
mov ecx, eax
call fcn.00402c00
lea eax, [ebp - 0x6db8]
mov dword [ebp - 0x6db8], 0x400
push eax
push 0
mov eax, edi
push 0
push 0x400
push dword [eax + 0x30]
lea ecx, [eax + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.004033e0
push eax
call dword [0x4ac618]
mov edx, 0x4e16fc
mov ecx, 0x80000003
call fcn.00408ce0
test al, al
jne 0x4523bd
push 0xc
lea ecx, [ebp - 0x29dc]
call fcn.00401960
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov eax, edi
push 0
push str.NTUSER.DAT
push dword [eax + 0x30]
lea ecx, [eax + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x29dc]
call fcn.00402bc0
lea ecx, [ebp - 0x29dc]
mov byte [ebp - 4], 7
call fcn.00402e90
push eax
mov eax, edi
push dword [eax + 0x30]
lea ecx, [eax + 0x104]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
push 0x80000003
call dword [0x4ac008]
test eax, eax
jne 0x4523b0
mov eax, edi
mov eax, dword [eax + 0x30]
inc eax
mov dword [edi + 0x30], eax
lea ecx, [ebp - 0x29dc]
call fcn.00402cd0
jmp 0x4523c6
mov eax, edi
mov eax, dword [eax + 0x30]
inc eax
mov dword [edi + 0x30], eax
lea ecx, [ebp - 0x287c]
call fcn.00478500
lea ecx, [ebp - 0x2884]
call fcn.00478500
lea ecx, [ebp - 0x288c]
mov byte [ebp - 4], 3
call fcn.00478500
mov esi, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x27dc]
add esi, 0x140
call fcn.00413300
push edx
push eax
mov ecx, esi
call fcn.004038a0
mov ecx, dword [ebp - 0x6f7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d0d64
lea ecx, [ecx + 0x134]
call fcn.00402e90
push eax
mov ecx, esi
call fcn.00404550
mov ecx, esi
call fcn.00402e90
or edx, 0xffffffff
mov ecx, eax
call fcn.0040fb90
test al, al
jne 0x452468
mov eax, dword [ebp - 0x6f7c]
push 1
mov ecx, eax
call fcn.004456a0
mov esi, eax
jmp 0x46cae6
mov ecx, esi
call fcn.00402e90
push eax
call dword [0x4ac3a8]
or eax, 2
mov ecx, esi
push eax
call fcn.00402e90
push eax
call dword [0x4ac3a4]
push 0
call dword [0x4ac7e8]
push 0xc
lea ecx, [ebp - 0x226c]
call fcn.00401960
lea ecx, [ebp - 0x226c]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2160]
mov byte [ebp - 4], 8
call fcn.00401960
lea ecx, [ebp - 0x2160]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2a00]
mov byte [ebp - 4], 9
call fcn.00401960
lea ecx, [ebp - 0x2a00]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x25bc]
mov byte [ebp - 4], 0xa
call fcn.00401960
lea ecx, [ebp - 0x25bc]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2978]
mov byte [ebp - 4], 0xb
call fcn.00401960
lea ecx, [ebp - 0x2978]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x250c]
mov byte [ebp - 4], 0xc
call fcn.00401960
lea ecx, [ebp - 0x250c]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2720]
mov byte [ebp - 4], 0xd
call fcn.00401960
lea ecx, [ebp - 0x2720]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2900]
mov byte [ebp - 4], 0xe
call fcn.00401960
lea ecx, [ebp - 0x2900]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2930]
mov byte [ebp - 4], 0xf
call fcn.00401960
lea ecx, [ebp - 0x2930]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x25b0]
mov byte [ebp - 4], 0x10
call fcn.00401960
lea ecx, [ebp - 0x25b0]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2818]
mov byte [ebp - 4], 0x11
call fcn.00401960
lea ecx, [ebp - 0x2818]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x293c]
mov byte [ebp - 4], 0x12
call fcn.00401960
lea ecx, [ebp - 0x293c]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2708]
mov byte [ebp - 4], 0x13
call fcn.00401960
lea ecx, [ebp - 0x2708]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x26fc]
mov byte [ebp - 4], 0x14
call fcn.00401960
lea ecx, [ebp - 0x26fc]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x26f0]
mov byte [ebp - 4], 0x15
call fcn.00401960
lea ecx, [ebp - 0x26f0]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x280c]
mov byte [ebp - 4], 0x16
call fcn.00401960
lea ecx, [ebp - 0x280c]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2948]
mov byte [ebp - 4], 0x17
call fcn.00401960
lea ecx, [ebp - 0x2948]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2954]
mov byte [ebp - 4], 0x18
call fcn.00401960
lea ecx, [ebp - 0x2954]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2640]
mov byte [ebp - 4], 0x19
call fcn.00401960
lea ecx, [ebp - 0x2640]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x264c]
mov byte [ebp - 4], 0x1a
call fcn.00401960
lea ecx, [ebp - 0x264c]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x296c]
mov byte [ebp - 4], 0x1b
call fcn.00401960
lea ecx, [ebp - 0x296c]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x25ec]
mov byte [ebp - 4], 0x1c
call fcn.00401960
lea ecx, [ebp - 0x25ec]
call fcn.00402b30
mov byte [ebp - 4], 0x1d
call dword [0x4ac3c8]
mov ecx, eax
call fcn.0040f850
mov edi, eax
mov ecx, str.HKLM
test edi, edi
mov dword [ebp - 0x6fdc], edi
mov eax, str.HKLM64
setne byte [ebp - 0x6f81]
test edi, edi
push 1
cmove eax, ecx
mov ecx, 0x4cbcf4
mov dword [ebp - 0x6fc4], eax
mov eax, str.HKLM32
cmove eax, ecx
lea ecx, [ebp - 0x226c]
mov dword [ebp - 0x6fe0], eax
mov eax, dword [ebp - 0x6f7c]
push dword [eax + 0x38]
push 0x1a
call fcn.00403330
mov eax, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x2160]
push 1
push dword [eax + 0x38]
push 0x1c
call fcn.00403330
mov eax, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x25bc]
push 1
push dword [eax + 0x38]
push 2
call fcn.00403330
mov eax, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x250c]
push 1
push dword [eax + 0x38]
push 0x10
call fcn.00403330
mov eax, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x26f0]
push 1
push dword [eax + 0x38]
push 0x23
call fcn.00403330
mov eax, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x2900]
push 1
push dword [eax + 0x38]
push 7
call fcn.00403330
mov eax, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x2930]
push 1
push dword [eax + 0x38]
push 5
call fcn.00403330
push 0x400
push 0
push 0
push 0x400
lea ecx, [ebp - 0x2720]
call fcn.004033e0
push eax
mov eax, dword [ebp - 0x6f7c]
push 0x4dc218
push dword [eax + 0x38]
call dword [0x4ac61c]
push 0x400
lea ecx, [ebp - 0x2720]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2720]
call fcn.00402e90
push eax
call dword [0x4ac238]
push 0x104
push 0
push 0
push 0x104
lea ecx, [ebp - 0x25b0]
call fcn.004033e0
push eax
call dword [0x4ac3b4]
test edi, edi
je 0x4528bd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d0cb4
lea ecx, [ebp - 0x25b0]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2818]
call fcn.00402df0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dc228
lea ecx, [ebp - 0x25b0]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x293c]
call fcn.00402df0
jmp 0x4528ef
push 0x104
push 0
push 0
push 0x104
lea ecx, [ebp - 0x2818]
call fcn.004033e0
push eax
call dword [0x4ac3b8]
lea eax, [ebp - 0x2818]
push eax
lea ecx, [ebp - 0x293c]
call fcn.00402c10
push edi
lea edx, [ebp - 0x26fc]
lea ecx, [ebp - 0x2708]
call fcn.0040ff20
push 0
push 0
push 0x2b
lea ecx, [ebp - 0x280c]
call fcn.00403330
push 0
push 0
push 0x17
lea ecx, [ebp - 0x2640]
call fcn.00403330
push 0
push 0
push 0x19
lea ecx, [ebp - 0x264c]
call fcn.00403330
push 0
push 0
push 0x18
lea ecx, [ebp - 0x2948]
call fcn.00403330
push 1
push 0
push 0x28
lea ecx, [ebp - 0x25ec]
call fcn.00403330
lea ecx, [ebp - 0x25ec]
call fcn.00402d50
push eax
lea ecx, [ebp - 0x226c]
call fcn.00403f10
lea ecx, [ebp - 0x25ec]
call fcn.00402d50
push eax
lea ecx, [ebp - 0x2160]
call fcn.00403f10
push 1
push 0x4dc23c
lea ecx, [ebp - 0x2a00]
call fcn.00402da0
lea ecx, [ebp - 0x25ec]
call fcn.00402d50
push eax
lea ecx, [ebp - 0x25bc]
call fcn.00403f10
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d3020
lea ecx, [ebp - 0x226c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2978]
call fcn.00402df0
lea ecx, [ebp - 0x25ec]
call fcn.00402d50
push eax
lea ecx, [ebp - 0x250c]
call fcn.00403f10
lea ecx, [ebp - 0x25ec]
call fcn.00402d50
push eax
lea ecx, [ebp - 0x2720]
call fcn.00403f10
lea ecx, [ebp - 0x25ec]
call fcn.00402d50
push eax
lea ecx, [ebp - 0x2900]
call fcn.00403f10
lea ecx, [ebp - 0x25ec]
call fcn.00402d50
push eax
lea ecx, [ebp - 0x2930]
call fcn.00403f10
push 2
push 1
lea ecx, [ebp - 0x25b0]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x296c]
call fcn.00404e50
push 1
lea ecx, [ebp - 0x280c]
call fcn.00403080
lea eax, [ebp - 0x280c]
push eax
lea ecx, [ebp - 0x2954]
call fcn.00402c10
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4cbcec
lea ecx, [ebp - 0x2708]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x280c]
call fcn.00404550
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4cbcec
lea ecx, [ebp - 0x26fc]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2954]
call fcn.00404550
mov eax, dword [ebp - 0x6f7c]
cmp byte [eax + 0x40], 0
je 0x452ae6
xor esi, esi
jmp 0x46c9f4
mov eax, dword [eax + 8]
push 3
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.004219b0
mov eax, dword [ebp - 0x6f7c]
push 0
push 0x4e1714
mov eax, dword [eax + 8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.0041f260
mov eax, dword [ebp - 0x6f7c]
cmp dword [eax + 0x10], 0
jne 0x452b36
mov ecx, eax
call fcn.0046f570
mov eax, dword [ebp - 0x6f7c]
cmp dword [eax + 0x10], 1
jne 0x452b61
mov esi, dword [0x4ac348]
mov ecx, eax
call fcn.00472340
test al, al
jne 0x452bf1
push 0x64
call esi
mov eax, dword [ebp - 0x6f7c]
cmp dword [eax + 0x10], 1
je 0x452b42
mov eax, dword [eax + 8]
push 6
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.004219b0
mov eax, dword [ebp - 0x6f7c]
push 0
push 0x4e1744
mov eax, dword [eax + 8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.0041f260
mov esi, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x27dc]
add esi, 0x33c
call fcn.00413300
push edx
push eax
mov ecx, esi
call fcn.004038a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e1774
mov ecx, esi
call fcn.00404550
mov ecx, esi
call fcn.00402e90
mov ecx, dword [ebp - 0x6f7c]
push eax
call fcn.0046fa60
test eax, eax
jne 0x452bfb
mov esi, 3
jmp 0x46c9f4
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.HKLM_
mov ecx, esi
call fcn.00404550
push 4
lea ecx, [ebp - 0x1f74]
call fcn.00405950
lea ecx, [ebp - 0x1f74]
call fcn.00406220
push 4
lea ecx, [ebp - 0x2570]
mov byte [ebp - 4], 0x1e
call fcn.00405950
push 0
push 0x20019
mov ecx, esi
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2570]
call fcn.00407710
push 0xc
lea ecx, [ebp - 0x6cec]
mov byte [ebp - 4], 0x1f
call fcn.00407690
lea ecx, [ebp - 0x6cec]
call fcn.004076d0
push 0xc
lea ecx, [ebp - 0x2a18]
mov byte [ebp - 4], 0x20
call fcn.00407690
lea ecx, [ebp - 0x2a18]
call fcn.004076d0
push 0x10
lea ecx, [ebp - 0x2a64]
mov byte [ebp - 4], 0x21
call fcn.00407b00
lea ecx, [ebp - 0x2a64]
call fcn.004076b0
push 0xc
lea ecx, [ebp - 0x2780]
mov byte [ebp - 4], 0x22
call fcn.00401960
lea ecx, [ebp - 0x2780]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2960]
mov byte [ebp - 4], 0x23
call fcn.00401960
lea ecx, [ebp - 0x2960]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x1f80]
mov byte [ebp - 4], 0x24
call fcn.00401960
lea ecx, [ebp - 0x1f80]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x25e0]
mov byte [ebp - 4], 0x25
call fcn.00401960
lea ecx, [ebp - 0x25e0]
call fcn.00402b30
lea ecx, [ebp - 0x27dc]
mov byte [ebp - 4], 0x26
call fcn.00413300
mov ecx, edx
mov dword [ebp - 0x7038], eax
push ecx
mov dword [ebp - 0x702c], ecx
lea ecx, [ebp - 0x2960]
push eax
call fcn.004038a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dc260
lea ecx, [ebp - 0x2960]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f7c]
push eax
push 0x4e1784
lea ecx, [ecx + 0x134]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f7c]
push eax
lea ecx, [ecx + 0x11c]
call fcn.00402df0
push 0x20
lea ecx, [ebp - 0x1fc8]
call fcn.00401e10
lea ecx, [ebp - 0x1fc8]
call fcn.0040d830
mov ecx, dword [ebp - 0x6f7c]
push 0
push 0x22
mov byte [ebp - 4], 0x27
lea ecx, [ecx + 0x11c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040dad0
test eax, eax
je 0x452fe7
push 0
mov esi, dword [ebp - 0x6f7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e1798
push 0
push 1
push 1
push 0
add esi, 0x354
push 0x4e17c8
mov ecx, esi
call fcn.00403fc0
test eax, eax
mov edx, 0x4e17e0
mov ecx, 0x4e17d8
cmove ecx, edx
push ecx
mov ecx, esi
call fcn.00402e90
push eax
push 0x4dc2c4
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
push 0
push 0
push 0
push 0
push 0
push 0x4dc2d8
push 0x4cc1b8
push 0x4d0110
push str.10.9.2.0
push 0x4dc2ec
mov ecx, esi
call fcn.00402e90
push eax
push 0x4cdb5c
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
mov eax, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x25e0]
push 0
push dword [eax + 0xc]
call fcn.004038a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dc838
lea ecx, [ebp - 0x25e0]
call fcn.00402e90
push eax
push 0x4e17f8
mov ecx, esi
call fcn.00402e90
push eax
push 0x4cdb5c
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
push edi
mov ecx, dword [ebp - 0x6f7c]
lea eax, [ebp - 0x1f80]
push eax
call fcn.0046d970
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
cmp dword [ebp - 0x6f78], 0
mov ecx, 0x4e1838
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dc838
mov eax, 0x4d0a70
cmove eax, ecx
lea ecx, [ebp - 0x2874]
push eax
push 0x4e184c
push 0x4dc838
call fcn.00402e90
push eax
push 0x4e1884
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
lea edx, [ebp - 0x1f80]
lea ecx, [ebp - 0x27dc]
call fcn.004132c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dc304
lea ecx, [ebp - 0x1f80]
call fcn.00402e90
push eax
push 0x4e18b8
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
push 0
push 0x4e18e0
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea ecx, [ebp - 0x296c]
call fcn.00402e90
lea ecx, [ebp - 0x25b0]
mov dword [ebp - 0x6fd8], eax
call fcn.00402e90
lea ecx, [ebp - 0x2818]
mov dword [ebp - 0x6fd4], eax
call fcn.00402e90
mov dword [ebp - 0x6fd0], eax
mov al, byte [ebp - 0x6f81]
mov byte [ebp - 0x6fcc], al
mov eax, dword [ebp - 0x6f7c]
movups xmm0, xmmword [ebp - 0x6fd8]
lea ecx, [eax + 0x2f8]
movups xmmword [eax + 0x1a8], xmm0
call fcn.00476030
mov esi, dword [ebp - 0x6f7c]
add esi, 0x248
mov ecx, esi
call fcn.0042e380
mov ecx, dword [ebp - 0x6f7c]
push 0
lea ecx, [ecx + 0x230]
call fcn.0042dfd0
push 0x4d8e38
mov ecx, esi
call fcn.0042e300
push 1
mov ecx, esi
call fcn.0042f0a0
mov eax, dword [ebp - 0x6f7c]
xor ecx, ecx
test edi, edi
push 4
setne cl
inc ecx
add ecx, dword [eax + 0x30]
mov dword [ebp - 0x6fac], ecx
lea ecx, [ebp - 0x6d4c]
call fcn.00405950
push 8
push 0x4e1b94
lea ecx, [ebp - 0x6d4c]
call fcn.00401310
push 8
lea ecx, [ebp - 0x6dfc]
mov byte [ebp - 4], 0x28
call fcn.00417f00
mov edi, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x6dfc]
mov eax, dword [edi + 0x30]
add eax, 2
push eax
call fcn.004785a0
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x2984]
mov edi, dword [ebp - 0x6dfc]
push 0xc
mov dword [ebp - 0x6fa8], edi
call fcn.00401960
push 1
push 0x4cbd7c
lea ecx, [ebp - 0x2984]
call fcn.00402b80
mov eax, dword [ebp - 0x6f7c]
xor esi, esi
mov byte [ebp - 4], 0x2a
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x453164
add eax, 0x114
mov dword [ebp - 0x6fcc], eax
nop dword [eax]
push esi
mov ecx, eax
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
mov ecx, edi
call fcn.00402c00
mov eax, dword [ebp - 0x6f7c]
inc esi
add edi, 0xc
mov ecx, dword [eax + 0x30]
mov eax, dword [ebp - 0x6fcc]
cmp esi, ecx
jb 0x453130
mov edi, dword [ebp - 0x6fa8]
lea eax, [ecx + ecx*2]
push 0x4dc450
lea ecx, [edi + eax*4]
call fcn.00402c00
cmp dword [ebp - 0x6fdc], 0
je 0x453197
mov eax, dword [ebp - 0x6f7c]
push 0x4dc450
mov eax, dword [eax + 0x30]
inc eax
lea eax, [eax + eax*2]
lea ecx, [edi + eax*4]
call fcn.00402c00
push 4
lea ecx, [ebp - 0x2574]
call fcn.00405950
lea ecx, [ebp - 0x2574]
call fcn.00406220
push 0x38
lea ecx, [ebp - 0x21e0]
mov byte [ebp - 4], 0x2b
call fcn.00401980
lea ecx, [ebp - 0x21e0]
call fcn.00401990
mov ecx, dword [ebp - 0x6f7c]
mov byte [ebp - 4], 0x2c
call fcn.00472340
test al, al
jne 0x455bfb
mov eax, dword [ebp - 0x6f7c]
test dword [eax + 0x34], 0x400
jne 0x455bfb
push 0
push 0x4e1bd4
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [ebp - 0x6f7c]
push 0
push 0x4e1c04
mov eax, dword [eax + 8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.0041f260
push 8
lea ecx, [ebp - 0x6d54]
call fcn.00417f00
push dword [ebp - 0x6fac]
lea ecx, [ebp - 0x6d54]
call fcn.004785a0
mov eax, dword [ebp - 0x6f7c]
xor esi, esi
mov byte [ebp - 4], 0x2d
mov edi, dword [ebp - 0x6d54]
mov dword [ebp - 0x6fa0], edi
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x4532c0
add eax, 0x104
mov dword [ebp - 0x6fcc], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e1c30
push esi
mov ecx, eax
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
push str.HKU_
mov ecx, edi
call fcn.00402df0
mov eax, dword [ebp - 0x6f7c]
inc esi
add edi, 0xc
mov ecx, dword [eax + 0x30]
mov eax, dword [ebp - 0x6fcc]
cmp esi, ecx
jb 0x453270
mov edi, dword [ebp - 0x6fa0]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d5960
push dword [ebp - 0x6fc4]
lea eax, [ecx + ecx*2]
lea ecx, [edi + eax*4]
call fcn.00402df0
cmp dword [ebp - 0x6fdc], 0
je 0x453327
mov eax, dword [ebp - 0x6f7c]
push 0
push 0
push 0
mov eax, dword [eax + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4d5960
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [edi + eax*4]
call fcn.00402df0
push 4
lea ecx, [ebp - 0x2230]
call fcn.00405950
lea ecx, [ebp - 0x2230]
call fcn.00406220
push 4
lea ecx, [ebp - 0x1fe8]
mov byte [ebp - 4], 0x2e
call fcn.00405950
lea ecx, [ebp - 0x1fe8]
call fcn.00406220
push 0xc
lea ecx, [ebp - 0x23d0]
mov byte [ebp - 4], 0x2f
call fcn.00401960
lea ecx, [ebp - 0x23d0]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2120]
mov byte [ebp - 4], 0x30
call fcn.00401960
lea ecx, [ebp - 0x2120]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x1f98]
mov byte [ebp - 4], 0x31
call fcn.00401960
lea ecx, [ebp - 0x1f98]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2068]
mov byte [ebp - 4], 0x32
call fcn.00401960
lea ecx, [ebp - 0x2068]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x23dc]
mov byte [ebp - 4], 0x33
call fcn.00401960
lea ecx, [ebp - 0x23dc]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x22dc]
mov byte [ebp - 4], 0x34
call fcn.00401960
lea ecx, [ebp - 0x22dc]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2148]
mov byte [ebp - 4], 0x35
call fcn.00401960
lea ecx, [ebp - 0x2148]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2108]
mov byte [ebp - 4], 0x36
call fcn.00401960
lea ecx, [ebp - 0x2108]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x231c]
mov byte [ebp - 4], 0x37
call fcn.00401960
lea ecx, [ebp - 0x231c]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x28e8]
mov byte [ebp - 4], 0x38
call fcn.00401960
lea ecx, [ebp - 0x28e8]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x27a4]
mov byte [ebp - 4], 0x39
call fcn.00401960
lea ecx, [ebp - 0x27a4]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x28dc]
mov byte [ebp - 4], 0x3a
call fcn.00401960
lea ecx, [ebp - 0x28dc]
call fcn.00402b30
mov ecx, dword [ebp - 0x6f7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov byte [ebp - 4], 0x3b
lea ecx, [ecx + 0x140]
push 0x4dc3dc
mov dword [ebp - 0x2350], 0
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2780]
call fcn.00402df0
push 1
lea ecx, [ebp - 0x2780]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00401bc0
push 1
lea ecx, [ebp - 0x21e0]
call fcn.00401b80
mov esi, dword [ebp - 0x2364]
xor edi, edi
mov dword [ebp - 0x6f9c], edi
mov dword [ebp - 0x6fa4], esi
cmp dword [ebp - 0x6fac], edi
jbe 0x454695
mov eax, dword [ebp - 0x6f7c]
lea ecx, [eax + 0x33c]
mov dword [ebp - 0x6f8c], ecx
lea ecx, [eax + 0x10c]
mov dword [ebp - 0x6f78], ecx
jmp 0x453566
mov eax, dword [ebp - 0x6f7c]
mov ecx, eax
call fcn.00472340
test al, al
jne 0x454695
movd xmm1, edi
mov eax, edi
cvtdq2pd xmm1, xmm1
shr eax, 0x1f
addsd xmm1, qword [eax*8 + 0x4ed1d0]
mov eax, dword [ebp - 0x6fac]
mulsd xmm1, qword [0x4ed010]
movd xmm0, eax
shr eax, 0x1f
cvtdq2pd xmm0, xmm0
addsd xmm0, qword [eax*8 + 0x4ed1d0]
divsd xmm1, xmm0
addsd xmm1, qword [0x4ecfe0]
cvttsd2si eax, xmm1
push eax
mov eax, dword [ebp - 0x6f7c]
mov eax, dword [eax + 8]
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.004219b0
lea eax, [edi + edi*2]
shl eax, 2
mov dword [ebp - 0x6fb4], eax
add eax, dword [ebp - 0x6fa0]
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6fcc], eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2230]
call fcn.00407730
test al, al
je 0x454682
mov ecx, dword [ebp - 0x6f7c]
xor esi, esi
mov dword [ebp - 0x6fa4], esi
call fcn.00472340
test al, al
jne 0x454682
nop dword [eax]
lea eax, [ebp - 0x6cec]
push eax
push esi
lea ecx, [ebp - 0x2230]
call fcn.00407b10
test al, al
je 0x45467c
mov ecx, dword [ebp - 0x6fcc]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
push 0x4cbcec
call fcn.00402e90
push eax
lea ecx, [ebp - 0x23d0]
call fcn.00402df0
push 0
push 0x20019
lea ecx, [ebp - 0x23d0]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1fe8]
call fcn.00407730
test al, al
je 0x454668
lea eax, [ebp - 0x2120]
push eax
push 0x4d0434
lea ecx, [ebp - 0x1fe8]
call fcn.004078e0
test al, al
je 0x454668
lea eax, [ebp - 0x6d04]
push eax
push 0x4e1c9c
lea ecx, [ebp - 0x1fe8]
call fcn.00407a20
test al, al
je 0x4536ec
cmp dword [ebp - 0x6d04], 1
je 0x454668
lea eax, [ebp - 0x23dc]
push eax
push 0x4e1cbc
lea ecx, [ebp - 0x1fe8]
call fcn.004078e0
test al, al
je 0x45371a
lea ecx, [ebp - 0x23dc]
call fcn.00402d50
test eax, eax
jne 0x454668
lea eax, [ebp - 0x23dc]
push eax
push 0x4e1cd8
lea ecx, [ebp - 0x1fe8]
call fcn.004078e0
test al, al
je 0x453795
push 0x4e1cf0
lea ecx, [ebp - 0x23dc]
call fcn.00402c40
test al, al
jne 0x454668
push 0x4e1d00
lea ecx, [ebp - 0x23dc]
call fcn.00402c40
test al, al
jne 0x454668
push 0x4e1d10
lea ecx, [ebp - 0x23dc]
call fcn.00402c40
test al, al
jne 0x454668
push 0x4e1d24
lea ecx, [ebp - 0x23dc]
call fcn.00402c40
test al, al
jne 0x454668
lea eax, [ebp - 0x1f98]
push eax
push 0x4e1d44
lea ecx, [ebp - 0x1fe8]
call fcn.004078e0
lea eax, [ebp - 0x22dc]
push eax
push 0x4d59cc
lea ecx, [ebp - 0x1fe8]
call fcn.004078e0
test al, al
jne 0x4537da
lea ecx, [ebp - 0x1f98]
call fcn.00402d50
test eax, eax
je 0x454668
lea eax, [ebp - 0x2148]
push eax
push 0x4e1d64
lea ecx, [ebp - 0x1fe8]
call fcn.004078e0
test al, al
je 0x453804
lea ecx, [ebp - 0x2148]
call fcn.00402d50
test eax, eax
jne 0x453814
push 0x4dc43c
lea ecx, [ebp - 0x2148]
call fcn.00402c00
lea eax, [ebp - 0x2120]
push eax
lea ecx, [ebp - 0x2108]
call fcn.00402c10
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4cbd44
lea ecx, [ebp - 0x2108]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4e1d78
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402df0
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
xor edx, edx
mov ecx, eax
call fcn.00409350
mov byte [ebp - 0x6f81], al
test al, al
jne 0x453975
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2108]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4e1d78
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402df0
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
xor edx, edx
mov ecx, eax
call fcn.00409350
mov byte [ebp - 0x6f81], al
test al, al
jne 0x453975
push 0
push 1
push 0xffffffffffffffff
push 1
push 0x4cc5dc
lea ecx, [ebp - 0x2108]
call fcn.00403fc0
cmp eax, 4
jl 0x453a82
dec eax
lea ecx, [ebp - 0x2108]
push eax
call fcn.00403e90
cmp byte [eax + 8], 0
je 0x453a75
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2108]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4e1d78
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402df0
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
xor edx, edx
mov ecx, eax
call fcn.00409350
mov byte [ebp - 0x6f81], al
test al, al
je 0x4538e1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4cbd7c
lea ecx, [ebp - 0x2108]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2984]
call fcn.00404260
cmp byte [ebp - 0x6f81], 0
jne 0x453a0a
lea eax, [ebp - 0x2350]
push eax
lea eax, [ebp - 0x27a4]
push eax
lea ecx, [ebp - 0x23d0]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f7c]
push eax
call fcn.004700d0
test al, al
je 0x454668
push 0
lea ecx, [ebp - 0x23d0]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f7c]
push eax
lea eax, [ebp - 0x27a4]
push eax
call fcn.0046e590
test al, al
je 0x454668
mov byte [ebp - 0x6f81], 2
push 0
push str.Programs
lea ecx, [ebp - 0x2120]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f7c]
push eax
call fcn.0046de60
test al, al
jne 0x454668
lea ecx, [ebp - 0x1f98]
call fcn.00402e90
mov ecx, eax
call fcn.0040fb70
test al, al
je 0x453b24
push 0
lea ecx, [ebp - 0x1f98]
call fcn.004032b0
push 0
push 0
push 0x4cbcf4
push 0x4cc5d8
lea ecx, [ebp - 0x1f98]
call fcn.004047c0
jmp 0x4540fd
cmp byte [ebp - 0x6f81], 0
jne 0x453975
lea ecx, [ebp - 0x2108]
call fcn.00402ce0
lea ecx, [ebp - 0x2120]
call fcn.00402d50
push 0
push 1
push 1
push 0
push 0x4e1d8c
lea ecx, [ebp - 0x2120]
call fcn.00403fc0
test eax, eax
jne 0x453b06
push eax
push 1
push 1
push eax
push 0x4e1da0
lea ecx, [ebp - 0x2120]
call fcn.00403fc0
test eax, eax
jne 0x453b06
push eax
push 1
push 1
push eax
push 0x4e1dc4
lea ecx, [ebp - 0x2120]
call fcn.00403fc0
test eax, eax
jne 0x453b06
push eax
push 1
push 1
push eax
push 0x4e1de4
lea ecx, [ebp - 0x2120]
call fcn.00403fc0
test eax, eax
je 0x4539ae
lea eax, [ebp - 0x2120]
mov byte [ebp - 0x6f81], 2
push eax
lea ecx, [ebp - 0x2108]
call fcn.00402c10
jmp 0x453a0a
cmp dword [ebp - 0x2350], 0
je 0x453be6
lea eax, [ebp - 0x6d04]
mov dword [ebp - 0x6d04], 0x400
push eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
push eax
push 0x4e1d44
push dword [ebp - 0x6cec]
call dword [0x4ac7e0]
push 0
push 1
push 1
push 0
push 0x4cc6c4
lea ecx, [ebp - 0x1f98]
call fcn.00403fc0
test eax, eax
jne 0x453be6
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4e1e0c
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x23dc]
push 0x4e1e38
push dword [ebp - 0x6fc4]
call fcn.00402df0
push 0
push 0x20019
lea ecx, [ebp - 0x23dc]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x453be6
lea eax, [ebp - 0x1f98]
push eax
push 0x4e1d44
lea ecx, [ebp - 0x1f74]
call fcn.004078e0
lea ecx, [ebp - 0x1f98]
call fcn.00402d50
cmp eax, 0xa
jle 0x453c03
push 0
lea ecx, [ebp - 0x1f98]
call fcn.004032b0
lea ecx, [ebp - 0x1f98]
call fcn.00402e90
push eax
call dword [0x4ac48c]
test eax, eax
jne 0x4540fd
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push str.__0
lea ecx, [ebp - 0x2120]
call fcn.00402e90
push eax
push 0x4cbcec
lea ecx, [ebp - 0x2708]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402df0
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00402e90
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
mov edx, 0x400
mov ecx, eax
call fcn.0040fa30
test al, al
jne 0x4540fd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2120]
call fcn.00402e90
push eax
push 0x4cbcec
lea ecx, [ebp - 0x26fc]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402df0
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00402e90
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
mov edx, 0x400
mov ecx, eax
call fcn.0040fa30
test al, al
jne 0x4540fd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2120]
call fcn.00402e90
push eax
push 0x4cbcec
lea ecx, [ebp - 0x26f0]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402df0
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00402e90
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
mov edx, 0x400
mov ecx, eax
call fcn.0040fa30
test al, al
jne 0x4540fd
lea ecx, [ebp - 0x2148]
call fcn.00402d50
cmp eax, 4
jle 0x453e13
push 0
push 1
push 1
push 0
push 0x4e1edc
lea ecx, [ebp - 0x2148]
call fcn.00403fc0
cmp eax, 1
je 0x453e13
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2120]
call fcn.00402e90
push eax
push 0x4cbcec
lea ecx, [ebp - 0x2148]
call fcn.00402e90
push eax
push 0x4cbcec
lea ecx, [ebp - 0x26f0]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402df0
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00402e90
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
mov edx, 0x400
mov ecx, eax
call fcn.0040fa30
test al, al
jne 0x4540fd
mov eax, dword [ebp - 0x6f7c]
cmp edi, dword [eax + 0x30]
jae 0x454075
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2120]
call fcn.00402e90
push eax
push 0x4cbcec
lea ecx, [ebp - 0x226c]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
push edi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402df0
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00402e90
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
mov edx, 0x400
mov ecx, eax
call fcn.0040fa30
test al, al
jne 0x4540fd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2120]
call fcn.00402e90
push eax
push 0x4cbcec
lea ecx, [ebp - 0x2160]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
push edi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402df0
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00402e90
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
mov edx, 0x400
mov ecx, eax
call fcn.0040fa30
test al, al
jne 0x4540fd
lea ecx, [ebp - 0x2148]
call fcn.00402d50
cmp eax, 4
jle 0x454075
push 0
push 1
push 1
push 0
push 0x4e1edc
lea ecx, [ebp - 0x2148]
call fcn.00403fc0
cmp eax, 1
je 0x454075
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2120]
call fcn.00402e90
push eax
push 0x4cbcec
lea ecx, [ebp - 0x2148]
call fcn.00402e90
push eax
push 0x4cbcec
lea ecx, [ebp - 0x226c]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
push edi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402df0
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00402e90
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
mov edx, 0x400
mov ecx, eax
call fcn.0040fa30
test al, al
jne 0x4540fd
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2120]
call fcn.00402e90
push eax
push 0x4cbcec
lea ecx, [ebp - 0x2148]
call fcn.00402e90
push eax
push 0x4cbcec
lea ecx, [ebp - 0x2160]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
push edi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402df0
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00402e90
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
mov edx, 0x400
mov ecx, eax
call fcn.0040fa30
test al, al
jne 0x4540fd
lea ecx, [ebp - 0x22dc]
call fcn.00402d50
lea ecx, [ebp - 0x1f98]
cmp eax, 0xa
jle 0x4540f8
lea eax, [ebp - 0x22dc]
push eax
call fcn.00402c10
push 0
push 0
push 0x4cbcf4
push 0x4cc5d8
lea ecx, [ebp - 0x1f98]
call fcn.004047c0
push 0
lea ecx, [ebp - 0x1f98]
call fcn.004032b0
push 0
push 1
push 0xffffffffffffffff
push 1
push 0x4cc6c4
lea ecx, [ebp - 0x1f98]
call fcn.00403fc0
cmp eax, 2
jle 0x4540e9
add eax, 0xfffffffe
lea ecx, [ebp - 0x1f98]
push eax
call fcn.00403f10
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00403100
jmp 0x4540fd
call fcn.00402ce0
lea ecx, [ebp - 0x1f98]
call fcn.00402e90
mov ecx, eax
call fcn.0040b0d0
test al, al
je 0x45411e
lea ecx, [ebp - 0x1f98]
call fcn.00402ce0
lea eax, [ebp - 0x2068]
mov dword [ebp - 0x6fa4], 0
push eax
push 0x4d5708
lea ecx, [ebp - 0x1fe8]
call fcn.004078e0
test al, al
je 0x45417b
push 0
lea ecx, [ebp - 0x2068]
call fcn.00402e90
push eax
push 0x104
lea ecx, [ebp - 0x2068]
call fcn.004033e0
lea ecx, [ebp - 0x2068]
call fcn.00402e90
push eax
call dword [0x4ac498]
mov dword [ebp - 0x6fa4], eax
jmp 0x4541d1
cmp dword [ebp - 0x2350], 0
je 0x4541de
lea eax, [ebp - 0x6d64]
mov dword [ebp - 0x6d64], 0x400
push eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0x2068]
call fcn.004033e0
push eax
push 0x4e1ef4
push dword [ebp - 0x6cec]
call dword [0x4ac7e0]
push dword [ebp - 0x6d64]
lea ecx, [ebp - 0x2068]
call fcn.00402cc0
xor ecx, ecx
mov word [eax], cx
cmp dword [ebp - 0x2350], 0
jne 0x454328
lea ecx, [ebp - 0x2068]
call fcn.00402d50
test eax, eax
jne 0x454328
push eax
lea ecx, [ebp - 0x22dc]
call fcn.00402e90
push eax
push 0x800
lea ecx, [ebp - 0x2068]
call fcn.004033e0
push 0x800
lea ecx, [ebp - 0x2068]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x22dc]
call fcn.00402e90
push eax
call dword [0x4ac3e0]
lea ecx, [ebp - 0x2068]
call fcn.00402d50
test eax, eax
je 0x454328
push 0
push 1
push 0xffffffffffffffff
push 0
push str..exe
lea ecx, [ebp - 0x2068]
call fcn.00403fc0
test eax, eax
je 0x45426f
add eax, 3
lea ecx, [ebp - 0x2068]
push eax
call fcn.00403e90
lea ecx, [ebp - 0x2068]
call fcn.00402e90
mov edi, dword [0x4ac490]
push eax
call edi
test eax, eax
jne 0x454328
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x4cc6c4
lea ecx, [ebp - 0x2068]
call fcn.00403fc0
cmp eax, 2
jle 0x4542b6
add eax, 0xfffffffe
lea ecx, [ebp - 0x2068]
push eax
call fcn.00403f10
lea ecx, [ebp - 0x2068]
call fcn.00402e90
push eax
call edi
test eax, eax
jne 0x454328
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x4cc5d8
lea ecx, [ebp - 0x2068]
call fcn.00403fc0
test eax, eax
je 0x4542ef
push eax
lea ecx, [ebp - 0x2068]
call fcn.00403f10
lea ecx, [ebp - 0x2068]
call fcn.00402e90
push eax
call edi
test eax, eax
jne 0x454328
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x4cc5dc
lea ecx, [ebp - 0x2068]
call fcn.00403fc0
test eax, eax
je 0x454328
push eax
lea ecx, [ebp - 0x2068]
call fcn.00403f10
push 0x5c
lea ecx, [ebp - 0x1f98]
call fcn.00404bc0
mov eax, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x2120]
push 0
mov eax, dword [eax + 8]
push dword [eax + 0xa0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
call fcn.00402e90
push eax
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.00420630
mov edi, eax
cmp edi, 0xffffffff
je 0x454662
push 1
lea ecx, [ebp - 0x2148]
call fcn.00402e90
push eax
mov eax, dword [ebp - 0x6f7c]
push edi
mov ecx, dword [eax + 8]
push dword [ecx + 0xa0]
mov ecx, dword [eax + 4]
call fcn.004218c0
lea ecx, [ebp - 0x2068]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
je 0x4543e3
push 0
push 0x10
push dword [ebp - 0x6fa4]
lea ecx, [ebp - 0x2068]
call fcn.00402e90
push eax
mov eax, dword [ebp - 0x6f7c]
push edi
mov eax, dword [eax + 8]
push dword [eax + 0xa0]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.00421000
mov ecx, dword [ebp - 0x6fa8]
add ecx, dword [ebp - 0x6fb4]
push 2
call fcn.00402e90
push eax
mov eax, dword [ebp - 0x6f7c]
push edi
mov eax, dword [eax + 8]
push dword [eax + 0xa0]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.004218c0
mov eax, dword [ebp - 0x6f7c]
push edi
push edi
mov eax, dword [eax + 8]
push dword [eax + 0xa0]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.00420e10
lea ecx, [ebp - 0x2108]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f7c]
push eax
mov eax, dword [ebp - 0x6f7c]
push edi
mov eax, dword [eax + 8]
push dword [eax + 0xa0]
call fcn.0046d730
test eax, eax
jne 0x45447b
cmp byte [ebp - 0x6f81], 1
mov ecx, 2
movzx eax, byte [ebp - 0x6f81]
cmove eax, ecx
mov byte [ebp - 0x6f81], al
push edi
lea ecx, [ebp - 0x231c]
call fcn.00403a30
lea ecx, [ebp - 0x23d0]
call fcn.00402e90
push eax
push 0x4db7fc
lea ecx, [ebp - 0x231c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00401f20
lea ecx, [ebp - 0x1f98]
call fcn.00402e90
push eax
push 0x4d0a28
lea ecx, [ebp - 0x231c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00401f20
lea ecx, [ebp - 0x2108]
call fcn.00402d50
test eax, eax
je 0x45452f
lea ecx, [ebp - 0x2108]
call fcn.00402e90
push eax
push 0x4dc414
lea ecx, [ebp - 0x231c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00401f20
push 0x4cd5f8
lea ecx, [ebp - 0x2108]
call fcn.00402e90
push eax
push 0x4e1f0c
lea ecx, [ebp - 0x21e0]
call fcn.00401f20
lea ecx, [ebp - 0x22dc]
call fcn.00402d50
test eax, eax
je 0x454566
lea ecx, [ebp - 0x22dc]
call fcn.00402e90
push eax
push 0x4dc3f0
lea ecx, [ebp - 0x231c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00401f20
mov ecx, dword [ebp - 0x6fa8]
add ecx, dword [ebp - 0x6fb4]
call fcn.00402e90
push eax
push 0x4db818
lea ecx, [ebp - 0x231c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00401f20
cmp dword [ebp - 0x2350], 0
je 0x4545bf
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x231c]
push 0x4dc424
call fcn.00402e90
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00401f20
mov eax, dword [ebp - 0x6f7c]
mov ecx, 0x4e1f4c
mov edi, dword [ebp - 0x6f7c]
push 0
push 0
inc dword [eax + 0x24]
xor eax, eax
cmp byte [ebp - 0x6f81], 1
sete al
add dword [edi + 0x28], eax
mov eax, 0x4e1f38
cmp byte [ebp - 0x6f81], 1
cmovne eax, ecx
mov ecx, dword [ebp - 0x6fa8]
add ecx, dword [ebp - 0x6fb4]
push eax
push 0x4e1614
call fcn.00402e90
push eax
push 0x4e1f64
lea ecx, [ebp - 0x1f98]
call fcn.00402e90
push eax
push 0x4e1f88
lea ecx, [ebp - 0x23d0]
call fcn.00402e90
push eax
push 0x4e1fac
lea ecx, [ebp - 0x2120]
call fcn.00402e90
push eax
push 0x4e1fd4
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
mov edi, dword [ebp - 0x6f9c]
mov ecx, dword [ebp - 0x6f7c]
inc esi
call fcn.00472340
test al, al
je 0x453630
mov dword [ebp - 0x6fa4], esi
inc edi
mov dword [ebp - 0x6f9c], edi
cmp edi, dword [ebp - 0x6fac]
jb 0x453560
mov ecx, dword [ebp - 0x6f7c]
call fcn.00472340
test al, al
je 0x454756
lea ecx, [ebp - 0x28dc]
call fcn.00402cd0
lea ecx, [ebp - 0x27a4]
call fcn.00402cd0
lea ecx, [ebp - 0x28e8]
call fcn.00402cd0
lea ecx, [ebp - 0x231c]
call fcn.00402cd0
lea ecx, [ebp - 0x2108]
call fcn.00402cd0
lea ecx, [ebp - 0x2148]
call fcn.00402cd0
lea ecx, [ebp - 0x22dc]
call fcn.00402cd0
lea ecx, [ebp - 0x23dc]
call fcn.00402cd0
lea ecx, [ebp - 0x2068]
call fcn.00402cd0
lea ecx, [ebp - 0x1f98]
call fcn.00402cd0
lea ecx, [ebp - 0x2120]
call fcn.00402cd0
lea ecx, [ebp - 0x23d0]
call fcn.00402cd0
lea ecx, [ebp - 0x1fe8]
call fcn.00407760
lea ecx, [ebp - 0x2230]
call fcn.00407760
lea ecx, [ebp - 0x6d54]
mov byte [ebp - 4], 0x2c
call fcn.00478500
jmp 0x455c07
mov eax, dword [ebp - 0x6f7c]
cmp dword [eax + 0x230], 0
je 0x454784
mov ecx, dword [ebp - 0x6f7c]
add eax, 0x230
push 0
push eax
lea ecx, [ecx + 0x248]
call fcn.0042f1a0
mov eax, dword [ebp - 0x6f7c]
mov ecx, eax
call fcn.00472340
test al, al
jne 0x4546a8
push 0xc
lea ecx, [ebp - 0x2a0c]
call fcn.00401960
lea ecx, [ebp - 0x2a0c]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2714]
mov byte [ebp - 4], 0x3c
call fcn.00401960
lea ecx, [ebp - 0x2714]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x26e4]
mov byte [ebp - 4], 0x3d
call fcn.00401960
lea ecx, [ebp - 0x26e4]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x27e8]
mov byte [ebp - 4], 0x3e
call fcn.00401960
lea ecx, [ebp - 0x27e8]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2798]
mov byte [ebp - 4], 0x3f
call fcn.00401960
lea ecx, [ebp - 0x2798]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x278c]
mov byte [ebp - 4], 0x40
call fcn.00401960
lea ecx, [ebp - 0x278c]
call fcn.00402b30
mov eax, dword [ebp - 0x6f7c]
mov edi, 1
mov byte [ebp - 4], 0x41
lea ecx, [eax + 0x334]
mov dword [ebp - 0x6f8c], edi
mov dword [ebp - 0x6fcc], ecx
cmp dword [ecx], edi
jbe 0x45557a
mov esi, dword [ebp - 0x6fcc]
lea ecx, [eax + 0x33c]
mov dword [ebp - 0x6fb4], ecx
mov ecx, eax
call fcn.00472340
test al, al
jne 0x45556e
lea eax, [edi + edi*4]
xor edx, edx
add eax, eax
div dword [esi]
add eax, 0x10
movd xmm0, eax
shr eax, 0x1f
cvtdq2pd xmm0, xmm0
addsd xmm0, qword [eax*8 + 0x4ed1d0]
cvttsd2si eax, xmm0
push eax
mov eax, dword [ebp - 0x6f7c]
mov eax, dword [eax + 8]
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.004219b0
mov ecx, dword [ebp - 0x6f7c]
push edi
call fcn.0046ea40
test al, al
je 0x455559
mov ecx, dword [ebp - 0x6f7c]
push edi
lea ecx, [ecx + 0x310]
call fcn.00478ba0
push eax
lea ecx, [ebp - 0x23d0]
call fcn.00402c10
push 0
push 0x20019
lea ecx, [ebp - 0x23d0]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1fe8]
call fcn.00407730
test al, al
je 0x455559
lea eax, [ebp - 0x2120]
push eax
push 0x4d0434
lea ecx, [ebp - 0x1fe8]
call fcn.004078e0
test al, al
je 0x455559
lea eax, [ebp - 0x1f98]
push eax
push 0x4e1d44
lea ecx, [ebp - 0x1fe8]
call fcn.004078e0
lea eax, [ebp - 0x22dc]
push eax
push 0x4d59cc
lea ecx, [ebp - 0x1fe8]
call fcn.004078e0
test al, al
jne 0x45497c
lea ecx, [ebp - 0x1f98]
call fcn.00402d50
test eax, eax
je 0x455559
lea eax, [ebp - 0x2148]
push eax
push 0x4e1d64
lea ecx, [ebp - 0x1fe8]
call fcn.004078e0
test al, al
je 0x4549a6
lea ecx, [ebp - 0x2148]
call fcn.00402d50
test eax, eax
jne 0x4549b6
push 0x4dc43c
lea ecx, [ebp - 0x2148]
call fcn.00402c00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d0d88
lea ecx, [ebp - 0x2120]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2798]
call fcn.00404260
push 0
push 1
push 1
push 0
push str.msiexec
lea ecx, [ebp - 0x22dc]
call fcn.00403fc0
test eax, eax
setne byte [ebp - 0x6f78]
test eax, eax
jne 0x454a44
lea eax, [ebp - 0x6d04]
push eax
push 0x4e2000
lea ecx, [ebp - 0x1fe8]
call fcn.00407a20
test al, al
je 0x454a44
mov eax, dword [ebp - 0x6f78]
mov ecx, 1
cmp dword [ebp - 0x6d04], 1
movzx eax, al
cmove eax, ecx
mov dword [ebp - 0x6f78], eax
lea eax, [ebp - 0x2120]
push eax
lea ecx, [ebp - 0x2108]
call fcn.00402c10
lea ecx, [ebp - 0x1f98]
call fcn.00402e90
mov ecx, eax
call fcn.0040fb70
test al, al
je 0x454a97
push 0
lea ecx, [ebp - 0x1f98]
call fcn.004032b0
push 0
push 0
push 0x4cbcf4
push 0x4cc5d8
lea ecx, [ebp - 0x1f98]
call fcn.004047c0
jmp 0x4550c3
cmp byte [ebp - 0x6f78], 0
je 0x454b59
lea eax, [ebp - 0x6d04]
mov dword [ebp - 0x6d04], 0x400
push eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
push eax
push 0x4e1d44
push dword [ebp - 0x6cec]
call dword [0x4ac7e0]
push 0
push 1
push 1
push 0
push 0x4cc6c4
lea ecx, [ebp - 0x1f98]
call fcn.00403fc0
test eax, eax
jne 0x454b59
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4e1e0c
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x23dc]
push 0x4e1e38
push dword [ebp - 0x6fc4]
call fcn.00402df0
push 0
push 0x20019
lea ecx, [ebp - 0x23dc]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x454b59
lea eax, [ebp - 0x1f98]
push eax
push 0x4e1d44
lea ecx, [ebp - 0x1f74]
call fcn.004078e0
lea ecx, [ebp - 0x1f98]
call fcn.00402d50
cmp eax, 0xa
jle 0x454b76
push 0
lea ecx, [ebp - 0x1f98]
call fcn.004032b0
push 0
push 1
push 1
push 0
push 0x4cc6c4
lea ecx, [ebp - 0x1f98]
call fcn.00403fc0
test eax, eax
jne 0x4550c3
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push str.__0
lea ecx, [ebp - 0x2108]
call fcn.00402e90
push eax
push 0x4cbcec
lea ecx, [ebp - 0x2708]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402df0
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00402e90
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
mov edx, 0x400
mov ecx, eax
call fcn.0040fa30
test al, al
jne 0x4550c3
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2108]
call fcn.00402e90
push eax
push 0x4cbcec
lea ecx, [ebp - 0x26fc]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402df0
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00402e90
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
mov edx, 0x400
mov ecx, eax
call fcn.0040fa30
test al, al
jne 0x4550c3
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2108]
call fcn.00402e90
push eax
push 0x4cbcec
lea ecx, [ebp - 0x26f0]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402df0
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00402e90
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
mov edx, 0x400
mov ecx, eax
call fcn.0040fa30
test al, al
jne 0x4550c3
lea ecx, [ebp - 0x2148]
call fcn.00402d50
cmp eax, 4
jle 0x454d8c
push 0
push 1
push 1
push 0
push 0x4e1edc
lea ecx, [ebp - 0x2148]
call fcn.00403fc0
cmp eax, 1
je 0x454d8c
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2108]
call fcn.00402e90
push eax
push 0x4cbcec
lea ecx, [ebp - 0x2148]
call fcn.00402e90
push eax
push 0x4cbcec
lea ecx, [ebp - 0x26f0]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402df0
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00402e90
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
mov edx, 0x400
mov ecx, eax
call fcn.0040fa30
test al, al
jne 0x4550c3
push 1
push 0x4cbce4
push dword [ebp - 0x6d4c]
lea ecx, [ebp - 0x23d0]
push 1
call fcn.00402e90
push eax
lea ecx, [ebp - 0x27e8]
call fcn.00402da0
mov ecx, eax
call fcn.00405220
test eax, eax
je 0x45502e
lea ecx, [ebp - 0x27e8]
call fcn.00402e90
lea edx, [ebp - 0x2714]
mov ecx, eax
call fcn.00426510
test al, al
je 0x45502e
lea ecx, [ebp - 0x27e8]
call fcn.00402e90
lea edx, [ebp - 0x26e4]
mov ecx, eax
call fcn.00425e10
test al, al
je 0x45502e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2108]
call fcn.00402e90
push eax
push 0x4cbcec
lea ecx, [ebp - 0x226c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x26e4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402df0
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00402e90
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
mov edx, 0x400
mov ecx, eax
call fcn.0040fa30
test al, al
jne 0x45503e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2108]
call fcn.00402e90
push eax
push 0x4cbcec
lea ecx, [ebp - 0x2160]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x26e4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402df0
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00402e90
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
mov edx, 0x400
mov ecx, eax
call fcn.0040fa30
test al, al
jne 0x45503e
lea ecx, [ebp - 0x2148]
call fcn.00402d50
cmp eax, 4
jle 0x45503e
push 0
push 1
push 1
push 0
push 0x4e1edc
lea ecx, [ebp - 0x2148]
call fcn.00403fc0
cmp eax, 1
je 0x45503e
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2108]
call fcn.00402e90
push eax
push 0x4cbcec
lea ecx, [ebp - 0x2148]
call fcn.00402e90
push eax
push 0x4cbcec
lea ecx, [ebp - 0x226c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x26e4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402df0
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00402e90
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
mov edx, 0x400
mov ecx, eax
call fcn.0040fa30
test al, al
jne 0x45503e
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2108]
call fcn.00402e90
push eax
push 0x4cbcec
lea ecx, [ebp - 0x2148]
call fcn.00402e90
push eax
push 0x4cbcec
lea ecx, [ebp - 0x2160]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x26e4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402df0
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00402e90
push eax
push 0x400
lea ecx, [ebp - 0x1f98]
call fcn.004033e0
mov edx, 0x400
mov ecx, eax
call fcn.0040fa30
jmp 0x45503e
push 0x4dc450
lea ecx, [ebp - 0x2714]
call fcn.00402c00
lea ecx, [ebp - 0x22dc]
call fcn.00402d50
cmp eax, 0xa
jle 0x4550c3
lea eax, [ebp - 0x22dc]
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00402c10
push 0
push 0
push 0x4cbcf4
push 0x4cc5d8
lea ecx, [ebp - 0x1f98]
call fcn.004047c0
push 0
lea ecx, [ebp - 0x1f98]
call fcn.004032b0
push 0
push 1
push 0xffffffffffffffff
push 1
push 0x4cc6c4
lea ecx, [ebp - 0x1f98]
call fcn.00403fc0
cmp eax, 2
jle 0x4550b6
add eax, 0xfffffffe
lea ecx, [ebp - 0x1f98]
push eax
call fcn.00403f10
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00403100
lea ecx, [ebp - 0x1f98]
call fcn.00402e90
mov ecx, eax
call fcn.0040b0d0
test al, al
je 0x4550e4
lea ecx, [ebp - 0x1f98]
call fcn.00402ce0
lea eax, [ebp - 0x2068]
xor edi, edi
push eax
push 0x4d5708
lea ecx, [ebp - 0x1fe8]
call fcn.004078e0
test al, al
je 0x4555d0
push edi
lea ecx, [ebp - 0x2068]
call fcn.00402e90
push eax
push 0x104
lea ecx, [ebp - 0x2068]
call fcn.004033e0
lea ecx, [ebp - 0x2068]
call fcn.00402e90
push eax
call dword [0x4ac498]
cmp byte [ebp - 0x6f78], 0
mov edi, eax
jne 0x455293
lea ecx, [ebp - 0x2068]
call fcn.00402d50
test eax, eax
jne 0x455293
push eax
lea ecx, [ebp - 0x22dc]
call fcn.00402e90
push eax
push 0x800
lea ecx, [ebp - 0x2068]
call fcn.004033e0
push 0x800
lea ecx, [ebp - 0x2068]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x22dc]
call fcn.00402e90
push eax
call dword [0x4ac3e0]
lea ecx, [ebp - 0x2068]
call fcn.00402d50
test eax, eax
je 0x455293
push 0
push 1
push 0xffffffffffffffff
push 0
push str..exe
lea ecx, [ebp - 0x2068]
call fcn.00403fc0
test eax, eax
je 0x4551d4
add eax, 3
lea ecx, [ebp - 0x2068]
push eax
call fcn.00403e90
lea ecx, [ebp - 0x2068]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
jne 0x455293
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x4cc6c4
lea ecx, [ebp - 0x2068]
call fcn.00403fc0
cmp eax, 2
jle 0x455219
add eax, 0xfffffffe
lea ecx, [ebp - 0x2068]
push eax
call fcn.00403f10
lea ecx, [ebp - 0x2068]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
jne 0x455293
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x4cc5d8
lea ecx, [ebp - 0x2068]
call fcn.00403fc0
test eax, eax
je 0x455256
push eax
lea ecx, [ebp - 0x2068]
call fcn.00403f10
lea ecx, [ebp - 0x2068]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
jne 0x455293
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x4cc5dc
lea ecx, [ebp - 0x2068]
call fcn.00403fc0
test eax, eax
je 0x455293
push eax
lea ecx, [ebp - 0x2068]
call fcn.00403f10
push 0x5c
lea ecx, [ebp - 0x1f98]
call fcn.00404bc0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2108]
mov byte [ebp - 0x6f9c], 1
call fcn.00402e90
mov ecx, dword [ebp - 0x6fb4]
push eax
push 0x4e1d78
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402df0
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
lea eax, [ebp - 0x6d04]
push eax
push 0x4e2024
lea ecx, [ebp - 0x1f74]
call fcn.00407a20
test al, al
je 0x455338
mov eax, dword [ebp - 0x6f9c]
mov ecx, 2
cmp dword [ebp - 0x6d04], 0
movzx eax, al
cmove eax, ecx
mov dword [ebp - 0x6f9c], eax
push edi
lea ecx, [ebp - 0x2068]
call fcn.00402e90
push eax
xor eax, eax
lea ecx, [ebp - 0x2714]
cmp byte [ebp - 0x6f9c], 1
push 0
sete al
push eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2148]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2120]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f7c]
push eax
mov eax, dword [ebp - 0x6f7c]
push 0xffffffffffffffff
push 0xffffffffffffffff
mov eax, dword [eax + 8]
push dword [eax + 0xa0]
call fcn.004452b0
push eax
lea ecx, [ebp - 0x231c]
call fcn.00403a30
lea ecx, [ebp - 0x23d0]
call fcn.00402e90
push eax
push 0x4db7fc
lea ecx, [ebp - 0x231c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00401f20
lea ecx, [ebp - 0x1f98]
call fcn.00402e90
push eax
push 0x4d0a28
lea ecx, [ebp - 0x231c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00401f20
lea ecx, [ebp - 0x2108]
call fcn.00402d50
test eax, eax
je 0x45544a
lea ecx, [ebp - 0x2108]
call fcn.00402e90
push eax
push 0x4dc414
lea ecx, [ebp - 0x231c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00401f20
push 0x4cd5f8
lea ecx, [ebp - 0x2108]
call fcn.00402e90
push eax
push 0x4e1f0c
lea ecx, [ebp - 0x21e0]
call fcn.00401f20
lea ecx, [ebp - 0x22dc]
call fcn.00402d50
test eax, eax
je 0x455481
lea ecx, [ebp - 0x22dc]
call fcn.00402e90
push eax
push 0x4dc3f0
lea ecx, [ebp - 0x231c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00401f20
lea ecx, [ebp - 0x2714]
call fcn.00402e90
push eax
push 0x4db818
lea ecx, [ebp - 0x231c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00401f20
cmp byte [ebp - 0x6f78], 0
je 0x4554d4
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x231c]
push 0x4dc424
call fcn.00402e90
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00401f20
cmp byte [ebp - 0x6f9c], 1
mov ecx, 0x4e1f4c
push 0
push 0
mov eax, 0x4e1f38
cmovne eax, ecx
lea ecx, [ebp - 0x2714]
push eax
push 0x4e1614
call fcn.00402e90
push eax
push 0x4e1f64
lea ecx, [ebp - 0x1f98]
call fcn.00402e90
push eax
push 0x4e1f88
lea ecx, [ebp - 0x23d0]
call fcn.00402e90
push eax
push 0x4e1fac
lea ecx, [ebp - 0x2120]
call fcn.00402e90
push eax
push 0x4e1fd4
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
mov edi, dword [ebp - 0x6f8c]
mov eax, dword [ebp - 0x6f7c]
inc edi
mov dword [ebp - 0x6f8c], edi
cmp edi, dword [esi]
jb 0x454872
mov eax, dword [ebp - 0x6f7c]
mov esi, dword [ebp - 0x6fa4]
mov ecx, eax
call fcn.00472340
test al, al
je 0x45562f
lea ecx, [ebp - 0x278c]
call fcn.00402cd0
lea ecx, [ebp - 0x2798]
call fcn.00402cd0
lea ecx, [ebp - 0x27e8]
call fcn.00402cd0
lea ecx, [ebp - 0x26e4]
call fcn.00402cd0
lea ecx, [ebp - 0x2714]
call fcn.00402cd0
lea ecx, [ebp - 0x2a0c]
call fcn.00402cd0
jmp 0x4546a8
cmp byte [ebp - 0x6f78], 0
je 0x455143
lea eax, [ebp - 0x6d68]
mov dword [ebp - 0x6d68], 0x400
push eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0x2068]
call fcn.004033e0
push eax
push 0x4e1ef4
push dword [ebp - 0x6cec]
call dword [0x4ac7e0]
push dword [ebp - 0x6d68]
lea ecx, [ebp - 0x2068]
call fcn.00402cc0
xor ecx, ecx
mov word [eax], cx
jmp 0x455293
lea ecx, [ebp - 0x2798]
call fcn.00402d50
cmp eax, 6
jle 0x4556ec
push 0x2000
lea eax, [ebp - 0x6dbc]
mov dword [ebp - 0x6dbc], 0x1000
push eax
push 0
push 0
push 0x1000
lea ecx, [ebp - 0x278c]
call fcn.004033e0
push eax
lea ecx, [ebp - 0x2798]
call fcn.00402e90
push eax
call dword [0x4ac484]
test eax, eax
je 0x455696
lea eax, [ebp - 0x2798]
push eax
lea ecx, [ebp - 0x278c]
call fcn.00402c10
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2040
lea ecx, [ebp - 0x278c]
call fcn.00404550
push 0
push 0
push 0x4d00d4
push 0x4cda60
push 6
lea ecx, [ebp - 0x278c]
call fcn.00402e90
xor edx, edx
mov ecx, eax
call fcn.0042bd70
push eax
lea ecx, [ebp - 0x2574]
call fcn.0042ce30
mov eax, dword [ebp - 0x6f7c]
push 0x1e
mov eax, dword [eax + 8]
push dword [eax + 0x34]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.004219b0
mov eax, dword [ebp - 0x6f7c]
push 0
push 0x4e20c0
mov eax, dword [eax + 8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x6f7c]
mov ecx, dword [eax + 4]
call fcn.0041f260
push 0xc
lea ecx, [ebp - 0x23b8]
call fcn.00401960
lea ecx, [ebp - 0x23b8]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2500]
mov byte [ebp - 4], 0x42
call fcn.00401960
lea ecx, [ebp - 0x2500]
call fcn.00402b30
mov ecx, dword [ebp - 0x6f7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e20f4
lea ecx, [ecx + 0x33c]
mov byte [ebp - 4], 0x43
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402df0
push 4
lea ecx, [ebp - 0x2364]
call fcn.00405950
lea ecx, [ebp - 0x2364]
call fcn.00406220
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0x44
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x455bd5
lea eax, [ebp - 0x6cec]
mov dword [ebp - 0x6fb4], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.00407b10
test al, al
je 0x455bd5
mov eax, dword [ebp - 0x6f7c]
lea ecx, [eax + 0x10c]
mov dword [ebp - 0x6f8c], ecx
jmp 0x455819
mov eax, dword [ebp - 0x6f7c]
mov ecx, eax
call fcn.00472340
test al, al
jne 0x455bd5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4cbd7c
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x2500]
push 0x4cbd7c
call fcn.00402df0
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2500]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2984]
call fcn.00403fc0
test eax, eax
jne 0x455bad
mov ecx, dword [ebp - 0x6f7c]
push eax
push str.Programs
push dword [ebp - 0x6cec]
call fcn.0046de60
test al, al
jne 0x455bad
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x2500]
xor edi, edi
call fcn.00402c00
push 0x4e2104
lea ecx, [ebp - 0x2500]
call fcn.00402c70
test al, al
je 0x4558dd
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push str.__0
lea ecx, [ebp - 0x2500]
call fcn.00404260
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2500]
call fcn.00402e90
push eax
push 0x4cbcec
lea ecx, [ebp - 0x2708]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x23b8]
call fcn.00402df0
lea ecx, [ebp - 0x23b8]
call fcn.0040f930
test al, al
je 0x455954
push esi
lea eax, [ebp - 0x21e0]
push eax
lea eax, [ebp - 0x1fc8]
push eax
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x23b8]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f7c]
push eax
call fcn.0046d4a0
mov edi, eax
cmp dword [ebp - 0x6fdc], 0
je 0x4559d8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2500]
call fcn.00402e90
push eax
push 0x4cbcec
lea ecx, [ebp - 0x26fc]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x23b8]
call fcn.00402df0
lea ecx, [ebp - 0x23b8]
call fcn.0040f930
test al, al
je 0x4559d8
push esi
lea eax, [ebp - 0x21e0]
push eax
lea eax, [ebp - 0x1fc8]
push eax
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x23b8]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f7c]
push eax
call fcn.0046d4a0
add edi, eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2500]
call fcn.00402e90
push eax
push 0x4cbcec
lea ecx, [ebp - 0x26f0]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x23b8]
call fcn.00402df0
lea ecx, [ebp - 0x23b8]
call fcn.0040f930
test al, al
je 0x455a4f
push esi
lea eax, [ebp - 0x21e0]
push eax
lea eax, [ebp - 0x1fc8]
push eax
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x23b8]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f7c]
push eax
call fcn.0046d4a0
add edi, eax
mov eax, dword [ebp - 0x6f7c]
xor esi, esi
mov dword [ebp - 0x6fa4], esi
cmp dword [eax + 0x30], esi
jbe 0x455b8e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2500]
call fcn.00402e90
push eax
push 0x4cbcec
lea ecx, [ebp - 0x226c]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push esi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x23b8]
call fcn.00402df0
lea ecx, [ebp - 0x23b8]
call fcn.0040f930
test al, al
je 0x455aef
push esi
lea eax, [ebp - 0x21e0]
push eax
lea eax, [ebp - 0x1fc8]
push eax
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x23b8]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f7c]
push eax
call fcn.0046d4a0
add edi, eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2500]
call fcn.00402e90
push eax
push 0x4cbcec
lea ecx, [ebp - 0x2160]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push esi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x23b8]
call fcn.00402df0
lea ecx, [ebp - 0x23b8]
call fcn.0040f930
test al, al
je 0x455b78
push esi
lea eax, [ebp - 0x21e0]
push eax
lea eax, [ebp - 0x1fc8]
push eax
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x23b8]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f7c]
push eax
call fcn.0046d4a0
add edi, eax
mov eax, dword [ebp - 0x6f7c]
inc esi
cmp esi, dword [eax + 0x30]
jb 0x455a66
mov dword [ebp - 0x6fa4], esi
test edi, edi
jle 0x455bad
push 0x4cd5f8
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x21e0]
push 0x4e1f0c
call fcn.00401f20
mov eax, dword [ebp - 0x6fb4]
lea ecx, [ebp - 0x6cec]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6fb4], eax
call fcn.00407b10
test al, al
jne 0x455813
lea ecx, [ebp - 0x2364]
call fcn.00407760
lea ecx, [ebp - 0x2500]
call fcn.00402cd0
lea ecx, [ebp - 0x23b8]
call fcn.00402cd0
jmp 0x455589
mov eax, dword [ebp - 0x2364]
mov dword [ebp - 0x6fa4], eax
push 8
lea ecx, [ebp - 0x6e04]
call fcn.00417f00
mov edi, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x6e04]
mov eax, dword [edi + 0x30]
add eax, 2
push eax
call fcn.004785a0
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x213c]
mov esi, dword [ebp - 0x6e04]
push 0xc
mov dword [ebp - 0x6fa0], esi
call fcn.00401960
lea ecx, [ebp - 0x213c]
call fcn.00402b30
mov ecx, edi
mov byte [ebp - 4], 0x46
call fcn.00472340
test al, al
mov eax, edi
jne 0x4583ce
test dword [eax + 0x34], 0x400
jne 0x4583ce
push 0
push 0x4e2118
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x4e2148
push dword [eax + 0x38]
call fcn.0041f260
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x23
push dword [eax + 0x34]
call fcn.004219b0
mov eax, edi
xor esi, esi
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x455d1a
mov edi, dword [ebp - 0x6fa0]
add eax, 0x104
mov dword [ebp - 0x6fcc], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2178
push esi
mov ecx, eax
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
push str.HKU_
mov ecx, edi
call fcn.00402df0
mov eax, dword [ebp - 0x6f7c]
inc esi
add edi, 0xc
mov ecx, dword [eax + 0x30]
mov eax, dword [ebp - 0x6fcc]
cmp esi, ecx
jb 0x455cd0
mov esi, dword [ebp - 0x6fa0]
lea eax, [ecx + ecx*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e21d8
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402df0
cmp dword [ebp - 0x6fdc], 0
mov edi, dword [ebp - 0x6f7c]
je 0x455d87
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e21d8
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402df0
push 0xc
lea ecx, [ebp - 0x2084]
call fcn.00401960
lea ecx, [ebp - 0x2084]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2418]
mov byte [ebp - 4], 0x47
call fcn.00401960
lea ecx, [ebp - 0x2418]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2824]
mov byte [ebp - 4], 0x48
call fcn.00401960
lea ecx, [ebp - 0x2824]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x219c]
mov byte [ebp - 4], 0x49
call fcn.00401960
lea ecx, [ebp - 0x219c]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x234c]
mov byte [ebp - 4], 0x4a
call fcn.00401960
lea ecx, [ebp - 0x234c]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x258c]
mov byte [ebp - 4], 0x4b
call fcn.00401960
lea ecx, [ebp - 0x258c]
call fcn.00402b30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2238
push 0x4cbcec
lea ecx, [edi + 0x140]
mov byte [ebp - 4], 0x4c
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2780]
call fcn.00402df0
push 1
lea ecx, [ebp - 0x2780]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00401bc0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa4]
call fcn.004209d0
push 0
push 0x4e2250
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x456248
mov eax, dword [ebp - 0x6f7c]
mov esi, dword [ebp - 0x6fa8]
mov dword [ebp - 0x6f78], esi
lea ecx, [eax + 0x10c]
mov dword [ebp - 0x6fcc], ecx
mov ecx, dword [ebp - 0x6fa0]
sub ecx, esi
mov dword [ebp - 0x6f80], ecx
jmp 0x455ef6
mov eax, dword [ebp - 0x6f7c]
mov ecx, eax
call fcn.00472340
test al, al
jne 0x456242
mov eax, dword [ebp - 0x6f7c]
mov edi, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
cmp edi, dword [eax + 0x30]
jae 0x455f46
lea ecx, [ebp - 0x2720]
call fcn.00402e90
mov ecx, dword [ebp - 0x6fcc]
push eax
push edi
call fcn.004784e0
mov ecx, eax
jmp 0x455f51
push str._temp
lea ecx, [ebp - 0x25b0]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2418]
call fcn.00402df0
mov eax, dword [ebp - 0x6f80]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6fb4], eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x45623a
lea eax, [ebp - 0x6cec]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6fa4], esi
call fcn.00407b90
mov edi, dword [ebp - 0x6f7c]
test al, al
je 0x456210
nop dword [eax + eax]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45620a
mov eax, dword [ebp - 0x6cec]
cmp word [eax], 0
je 0x4561ee
push 0
push 0x4d9734
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x4561ee
lea eax, [ebp - 0x2084]
push eax
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f74]
call fcn.004078e0
test al, al
je 0x4561ee
push 3
lea edx, [edi + 0x1a8]
mov dword [ebp - 0x6f9c], 0
lea ecx, [ebp - 0x2084]
call fcn.00409ba0
test al, al
je 0x4560c6
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2418]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2084]
call fcn.00403fc0
mov ecx, dword [ebp - 0x6fb4]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
mov dword [ebp - 0x6f9c], eax
push 0x4cfae0
call fcn.00402e90
push eax
lea ecx, [ebp - 0x213c]
call fcn.00402df0
push 0
lea ecx, [ebp - 0x213c]
call fcn.00402e90
push eax
lea eax, [ebp - 0x2084]
mov ecx, edi
push eax
call fcn.0046e590
test al, al
mov ecx, 1
mov eax, dword [ebp - 0x6f9c]
cmovne eax, ecx
mov dword [ebp - 0x6f9c], eax
push 0
lea ecx, [ebp - 0x2084]
call fcn.00402e90
push eax
push 0
push dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x2084]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402e90
push eax
push dword [ebp - 0x6cec]
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xb
push dword [eax + 0xa4]
call fcn.004452b0
mov dword [ebp - 0x6fa4], eax
cmp eax, 0xffffffff
je 0x4561ee
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2084]
call fcn.00402e90
mov ecx, dword [ebp - 0x6fb4]
push eax
call fcn.00402e90
push eax
push 0xb
push dword [ebp - 0x6fa4]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
lea eax, [ebp - 0x2084]
push eax
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f74]
call fcn.004078e0
cmp dword [ebp - 0x6f9c], 0
mov ecx, 0x4e15fc
push 0
push 0
push 0
push 0x4cbcd0
mov eax, 0x4d0a70
cmove eax, ecx
lea ecx, [ebp - 0x2084]
push eax
push 0x4e1614
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x4e2294
call fcn.00402e90
push eax
push 0x4e1674
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f80]
push 0x4e22b0
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
lea eax, [ebp - 0x6cec]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.00407b90
test al, al
jne 0x455fc0
mov dword [ebp - 0x6fa4], esi
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x455ef0
jmp 0x456248
mov edi, dword [ebp - 0x6f7c]
jmp 0x456216
mov edi, dword [ebp - 0x6f7c]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x458382
mov eax, dword [ebp - 0x6f7c]
xor esi, esi
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x4562c3
mov edi, dword [ebp - 0x6fa0]
add eax, 0x10c
mov dword [ebp - 0x6f80], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2900]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f80]
push eax
push esi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
mov ecx, edi
call fcn.00402df0
mov eax, dword [ebp - 0x6f7c]
inc esi
add edi, 0xc
mov ecx, dword [eax + 0x30]
cmp esi, ecx
jb 0x456277
lea eax, [ebp - 0x2948]
push eax
lea eax, [ecx + ecx*2]
mov ecx, dword [ebp - 0x6fa0]
lea ecx, [ecx + eax*4]
call fcn.00402c10
push 0
push 0x4e22c8
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
push 0x4c
lea ecx, [ebp - 0x2ba8]
call fcn.00410090
lea ecx, [ebp - 0x2ba8]
call fcn.00409880
mov eax, dword [ebp - 0x6f7c]
xor edi, edi
mov edx, dword [ebp - 0x6fa8]
mov esi, edx
mov byte [ebp - 4], 0x4d
mov dword [ebp - 0x6fb4], edi
lea ecx, [eax + 0x10c]
mov dword [ebp - 0x6f78], edx
mov dword [ebp - 0x6fcc], ecx
mov ecx, dword [ebp - 0x6fa0]
sub ecx, edx
mov dword [ebp - 0x6f80], ecx
nop
mov ecx, eax
call fcn.00472340
test al, al
jne 0x4567c0
mov eax, dword [ebp - 0x6f80]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
add eax, esi
push 0
push 0x4d11d0
mov ecx, eax
mov dword [ebp - 0x6f8c], eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2084]
call fcn.00402df0
push 0x260
lea ecx, [ebp - 0x37b0]
call fcn.00409b80
push 3
lea ecx, [ebp - 0x2084]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x37b0]
call fcn.00401120
mov eax, dword [ebp - 0x6f7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov byte [ebp - 4], 0x4e
push 0
push 0
cmp edi, dword [eax + 0x30]
jae 0x4563f1
lea ecx, [ebp - 0x2720]
call fcn.00402e90
mov ecx, dword [ebp - 0x6fcc]
push eax
push edi
call fcn.004784e0
mov ecx, eax
jmp 0x4563fc
push str._temp
lea ecx, [ebp - 0x25b0]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2418]
call fcn.00402df0
lea ecx, [ebp - 0x37b0]
call fcn.00401260
test al, al
je 0x456790
mov edi, dword [ebp - 0x6f7c]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45678a
push 1
lea ecx, [ebp - 0x37b0]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x219c]
call fcn.00402c00
push 0x4d3508
lea ecx, [ebp - 0x219c]
call fcn.00402c40
test al, al
jne 0x456777
push 0
push 0x4d976c
lea ecx, [ebp - 0x219c]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x456777
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x37b0]
call fcn.004012c0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4cbcec
call fcn.00402e90
push eax
lea ecx, [ebp - 0x258c]
call fcn.00402df0
lea eax, [ebp - 0x258c]
push eax
lea ecx, [ebp - 0x234c]
call fcn.00402c10
push 0
push 0
lea ecx, [ebp - 0x37b0]
call fcn.004012d0
mov edx, 0x4e15e0
mov ecx, eax
call fcn.00405a40
test eax, eax
jne 0x4565bf
push eax
lea ecx, [ebp - 0x258c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2ba8]
call fcn.004098d0
test al, al
je 0x4565bf
push 0
lea ecx, [ebp - 0x2ba8]
call fcn.00409970
push eax
lea ecx, [ebp - 0x234c]
call fcn.00402c00
lea ecx, [ebp - 0x2ba8]
call fcn.004099c0
mov ecx, eax
call fcn.00405960
test eax, eax
je 0x456578
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2ba8]
call fcn.004099c0
push eax
push 0x4cc5dc
lea ecx, [ebp - 0x234c]
call fcn.00404260
push 3
push 1
lea ecx, [ebp - 0x234c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2084]
call fcn.00402da0
lea edx, [edi + 0x1a8]
mov ecx, eax
call fcn.00409ba0
test al, al
jne 0x4565d1
push 0
lea ecx, [ebp - 0x2ba8]
call fcn.00409970
push eax
lea ecx, [ebp - 0x2084]
call fcn.00402c00
jmp 0x4565d1
lea eax, [ebp - 0x258c]
push eax
lea ecx, [ebp - 0x2084]
call fcn.00402c10
push 0
push 0
push 0x4cbcf4
push 0x4cc5d8
lea ecx, [ebp - 0x2084]
call fcn.004047c0
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2418]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2084]
call fcn.00403fc0
push 0
lea ecx, [ebp - 0x258c]
mov esi, eax
call fcn.00402e90
push eax
lea eax, [ebp - 0x2084]
mov ecx, edi
push eax
call fcn.0046e590
test al, al
lea ecx, [ebp - 0x2084]
mov eax, 1
push 0
cmovne esi, eax
call fcn.00402e90
push eax
push 0
push esi
lea ecx, [ebp - 0x2084]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x219c]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xc
push dword [eax + 0xa4]
call fcn.004452b0
mov dword [ebp - 0x6f9c], eax
cmp eax, 0xffffffff
je 0x456771
push 0
push 0
push 0
test esi, esi
mov eax, 0x4e15fc
push 0x4cbcd0
mov ecx, 0x4d0a70
cmove ecx, eax
push ecx
push 0x4e1614
lea ecx, [ebp - 0x2084]
call fcn.00402e90
mov esi, dword [ebp - 0x6f78]
mov ecx, esi
push eax
push 0x4e2300
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x219c]
call fcn.00402e90
push eax
push 0x4e22b0
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x37b0]
call fcn.004012c0
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4cbcec
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2084]
call fcn.00402df0
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2084]
call fcn.00402e90
push eax
push 0
push 0xc
push dword [ebp - 0x6f9c]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
jmp 0x456777
mov esi, dword [ebp - 0x6f78]
lea ecx, [ebp - 0x37b0]
call fcn.00401220
test al, al
jne 0x456426
mov edi, dword [ebp - 0x6fb4]
lea ecx, [ebp - 0x37b0]
mov byte [ebp - 4], 0x4d
call fcn.00401170
mov eax, dword [ebp - 0x6f7c]
inc edi
add esi, 0xc
mov dword [ebp - 0x6fb4], edi
mov dword [ebp - 0x6f78], esi
cmp edi, dword [eax + 0x30]
jbe 0x456340
jmp 0x4567c6
mov eax, dword [ebp - 0x6f7c]
mov ecx, eax
call fcn.00472340
test al, al
jne 0x458377
push 0
push 0x4e2318
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
push 0xc
lea ecx, [ebp - 0x2490]
call fcn.00401960
lea ecx, [ebp - 0x2490]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x21a8]
mov byte [ebp - 4], 0x4f
call fcn.00401960
lea ecx, [ebp - 0x21a8]
call fcn.00402b30
push 4
lea ecx, [ebp - 0x6d10]
mov byte [ebp - 4], 0x50
call fcn.00405950
lea ecx, [ebp - 0x6d10]
call fcn.00406220
push 4
lea ecx, [ebp - 0x6d0c]
mov byte [ebp - 4], 0x51
call fcn.00405950
lea ecx, [ebp - 0x6d0c]
call fcn.00406220
lea eax, [ebp - 0x6d0c]
mov byte [ebp - 4], 0x52
mov esi, dword [0x4ac7f0]
push eax
push 0x4c6394
push 1
push 0
push 0x4c63a4
call esi
test eax, eax
js 0x4574d3
lea ecx, [ebp - 0x70a0]
call fcn.004016d0
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x70d0]
movups xmmword [ebp - 0x6fd8], xmm0
call fcn.004016d0
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x70c0]
movups xmmword [ebp - 0x6f98], xmm0
call fcn.004016d0
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x70e0]
movups xmmword [ebp - 0x6fc0], xmm0
call fcn.004016d0
mov edi, eax
mov byte [ebp - 4], 0x56
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x6fd8]
mov ecx, dword [ebp - 0x6d0c]
mov edx, esp
sub esp, 0x10
mov eax, esp
sub esp, 0x10
mov esi, dword [ecx]
movups xmmword [edx], xmm0
movups xmm0, xmmword [ebp - 0x6f98]
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x6fc0]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [edi]
push ecx
movups xmmword [eax], xmm0
mov eax, dword [esi + 0x28]
call eax
shr eax, 0x1f
lea ecx, [ebp - 0x70e0]
mov dword [ebp - 0x6f80], eax
call fcn.00401760
lea ecx, [ebp - 0x70c0]
call fcn.00401760
lea ecx, [ebp - 0x70d0]
call fcn.00401760
lea ecx, [ebp - 0x70a0]
mov byte [ebp - 4], 0x52
call fcn.00401760
cmp byte [ebp - 0x6f80], 0
jne 0x456a20
push 4
lea ecx, [ebp - 0x6d14]
call fcn.00405950
lea ecx, [ebp - 0x6d14]
call fcn.00406220
push 0x4cbcec
lea ecx, [ebp - 0x7034]
mov byte [ebp - 4], 0x57
call fcn.004015b0
mov byte [ebp - 4], 0x58
mov ecx, dword [ebp - 0x6d0c]
mov esi, dword [ecx]
lea ecx, [ebp - 0x6d14]
push ecx
mov ecx, eax
call fcn.004016c0
push eax
push dword [ebp - 0x6d0c]
mov eax, dword [esi + 0x1c]
call eax
shr eax, 0x1f
lea ecx, [ebp - 0x7034]
mov dword [ebp - 0x6f80], eax
mov byte [ebp - 4], 0x57
call fcn.00401660
cmp byte [ebp - 0x6f80], 0
jne 0x456a11
push 4
lea ecx, [ebp - 0x6d30]
call fcn.00405950
lea ecx, [ebp - 0x6d30]
call fcn.00406220
mov byte [ebp - 4], 0x59
lea edx, [ebp - 0x6d30]
mov eax, dword [ebp - 0x6d14]
push edx
push 1
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x38]
call eax
test eax, eax
jns 0x456ebc
lea ecx, [ebp - 0x6d30]
call fcn.00478020
lea ecx, [ebp - 0x6d14]
mov byte [ebp - 4], 0x52
call fcn.00478020
mov edi, dword [ebp - 0x6f7c]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45834b
push 0x18
lea ecx, [ebp - 0x28a4]
call fcn.00401e20
lea ecx, [ebp - 0x28a4]
call fcn.00405380
push 0
push 0x4e240c
lea ecx, [ebp - 0x1fc8]
mov byte [ebp - 4], 0x62
call fcn.0040e530
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x456aca
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d5838
push esi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402df0
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x456a80
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2440
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402df0
cmp dword [ebp - 0x6fdc], 0
je 0x456b31
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e2440
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402df0
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6fb4], 0
jbe 0x4579e6
mov esi, dword [ebp - 0x6fa8]
mov eax, dword [ebp - 0x6fa0]
sub eax, esi
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f80], eax
mov ecx, edi
call fcn.00472340
test al, al
jne 0x4579e6
mov eax, dword [ebp - 0x6f80]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f8c], eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x4579c4
lea eax, [ebp - 0x2418]
push eax
push 0x4d97e0
lea ecx, [ebp - 0x1f74]
call fcn.004078e0
test al, al
je 0x4579c4
lea ecx, [ebp - 0x2418]
call fcn.00402d50
cmp eax, 2
jl 0x4579c4
push 0x18
lea ecx, [ebp - 0x29f4]
call fcn.00401e20
push 0
push 0x4cbcd8
lea ecx, [ebp - 0x2418]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x29f4]
call fcn.00405440
xor esi, esi
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0x29f4]
mov dword [ebp - 0x6fa4], esi
call fcn.00405540
test eax, eax
je 0x4579af
nop
push esi
lea ecx, [ebp - 0x29f4]
call fcn.00405530
push eax
lea ecx, [ebp - 0x219c]
call fcn.00402c00
push 0
push 0x4e24ac
lea ecx, [ebp - 0x219c]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x457995
push esi
lea ecx, [ebp - 0x29f4]
call fcn.00405530
push eax
lea ecx, [ebp - 0x2084]
call fcn.00402c00
lea ecx, [ebp - 0x2084]
call fcn.00403170
test al, al
jne 0x457995
push 0
push 1
push 0xffffffffffffffff
push 0
push str..dll
lea ecx, [ebp - 0x2084]
call fcn.00403fc0
lea ecx, [ebp - 0x2084]
mov esi, eax
call fcn.00402d50
sub eax, 3
cmp esi, eax
je 0x456cd7
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str..dll
lea ecx, [ebp - 0x2084]
call fcn.00404260
push 3
lea edx, [edi + 0x1a8]
lea ecx, [ebp - 0x2084]
call fcn.00409ba0
lea ecx, [ebp - 0x2084]
call fcn.00402e90
push eax
push 0
call dword [0x4ac80c]
test eax, eax
jne 0x45798f
push eax
push 1
push 1
push eax
push 0x4e2394
lea ecx, [ebp - 0x2084]
call fcn.00403fc0
mov esi, dword [ebp - 0x6fa4]
xor ecx, ecx
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test eax, eax
push 0
setg cl
push 0
mov dword [ebp - 0x6f9c], ecx
lea ecx, [ebp - 0x29f4]
push esi
call fcn.00405530
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4e24c8
call fcn.00402e90
push eax
lea ecx, [ebp - 0x213c]
call fcn.00402df0
push 0
lea ecx, [ebp - 0x213c]
call fcn.00402e90
push eax
lea eax, [ebp - 0x2084]
mov ecx, edi
push eax
call fcn.0046e590
test al, al
mov ecx, 1
mov eax, dword [ebp - 0x6f9c]
cmovne eax, ecx
lea ecx, [ebp - 0x2084]
push 0
mov dword [ebp - 0x6f9c], eax
call fcn.00402e90
push eax
push 0
push dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x2084]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x219c]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xe
push dword [eax + 0xa4]
call fcn.004452b0
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
je 0x457995
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0x4d97e0
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2084]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
call fcn.00402e90
push eax
push 0xe
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
cmp dword [ebp - 0x6f9c], 0
mov ecx, 0x4e15fc
push 0
push 0
push 0
push 0x4cbcd0
mov eax, 0x4d0a70
cmove eax, ecx
lea ecx, [ebp - 0x2084]
push eax
push 0x4e1614
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x4e2300
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x219c]
call fcn.00402e90
push eax
push 0x4e22b0
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
jmp 0x457995
mov eax, dword [ebp - 0x6d30]
lea edx, [ebp - 0x2590]
mov dword [ebp - 0x2590], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
mov eax, dword [ebp - 0x2590]
mov edi, dword [ebp - 0x6f7c]
test eax, eax
je 0x4574b4
mov esi, 1
mov dword [ebp - 0x6f8c], esi
cmp eax, esi
jl 0x4574b4
lea eax, [edi + 0x1a8]
mov dword [ebp - 0x6fcc], eax
nop
mov ecx, edi
call fcn.00472340
test al, al
jne 0x4574b4
push 4
lea ecx, [ebp - 0x6cf4]
call fcn.00405950
lea ecx, [ebp - 0x6cf4]
call fcn.00406220
push 3
push esi
lea ecx, [ebp - 0x7090]
mov byte [ebp - 4], 0x5a
call fcn.004016e0
mov esi, eax
mov byte [ebp - 4], 0x5b
lea edx, [ebp - 0x6cf4]
mov ecx, dword [ebp - 0x6d30]
movups xmm0, xmmword [esi]
push edx
sub esp, 0x10
mov eax, dword [ecx]
mov edx, esp
push ecx
mov eax, dword [eax + 0x20]
movups xmmword [edx], xmm0
call eax
shr eax, 0x1f
lea ecx, [ebp - 0x7090]
mov dword [ebp - 0x6f80], eax
mov byte [ebp - 4], 0x5a
call fcn.00401760
cmp byte [ebp - 0x6f80], 0
jne 0x45748c
mov eax, dword [ebp - 0x6cf4]
lea edx, [ebp - 0x6d48]
mov dword [ebp - 0x6d48], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
test eax, eax
js 0x45748c
mov eax, dword [ebp - 0x6d48]
test eax, eax
je 0x45748c
push eax
lea ecx, [ebp - 0x219c]
call fcn.00402c00
push dword [ebp - 0x6d48]
call dword [0x4ac430]
push 0
push 0x4e2374
lea ecx, [ebp - 0x219c]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x45748c
push 4
lea ecx, [ebp - 0x6d00]
call fcn.00405950
lea ecx, [ebp - 0x6d00]
call fcn.00406220
mov byte [ebp - 4], 0x5c
lea edx, [ebp - 0x6d00]
mov eax, dword [ebp - 0x6cf4]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x4c]
call eax
test eax, eax
js 0x457481
push 4
lea ecx, [ebp - 0x6d08]
call fcn.00405950
lea ecx, [ebp - 0x6d08]
call fcn.00406220
mov byte [ebp - 4], 0x5d
lea edx, [ebp - 0x6d08]
mov eax, dword [ebp - 0x6d00]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x44]
call eax
test eax, eax
js 0x457476
mov eax, dword [ebp - 0x6d08]
lea edx, [ebp - 0x2484]
mov dword [ebp - 0x2484], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
cmp dword [ebp - 0x2484], 0
je 0x457476
lea ecx, [ebp - 0x21a8]
call fcn.00402ce0
mov esi, 1
cmp dword [ebp - 0x2484], esi
jl 0x457291
mov edi, dword [ebp - 0x6fcc]
push 4
lea ecx, [ebp - 0x6cf8]
call fcn.00405950
lea ecx, [ebp - 0x6cf8]
call fcn.00406220
mov byte [ebp - 4], 0x5e
lea edx, [ebp - 0x6cf8]
mov eax, dword [ebp - 0x6d08]
push edx
push esi
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x20]
call eax
test eax, eax
js 0x45726f
mov eax, dword [ebp - 0x6cf8]
lea edx, [ebp - 0x28a8]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x24]
call eax
test eax, eax
js 0x45726f
cmp dword [ebp - 0x28a8], 0
jne 0x45726f
push 4
lea ecx, [ebp - 0x6d1c]
call fcn.00405950
lea ecx, [ebp - 0x6d1c]
call fcn.00406220
mov byte [ebp - 4], 0x5f
lea edx, [ebp - 0x6d1c]
mov eax, dword [ebp - 0x6cf8]
push edx
push str.MbLk
push eax
mov ecx, dword [eax]
mov eax, dword [ecx]
call eax
test eax, eax
js 0x457264
mov eax, dword [ebp - 0x6d1c]
lea edx, [ebp - 0x6d38]
mov dword [ebp - 0x6d38], 0
mov dword [ebp - 0x6d3c], 0
push edx
mov ecx, dword [eax]
push eax
mov eax, dword [ecx + 0x28]
call eax
mov eax, dword [ebp - 0x6d38]
test eax, eax
je 0x457264
push eax
lea ecx, [ebp - 0x234c]
call fcn.00402c00
mov eax, dword [ebp - 0x6d1c]
lea edx, [ebp - 0x6d3c]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x30]
call eax
mov ecx, dword [ebp - 0x6d3c]
call fcn.00405960
test eax, eax
je 0x45721d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6d3c]
lea ecx, [ebp - 0x234c]
push 0x4cc5dc
call fcn.00404260
push 3
push 1
lea ecx, [ebp - 0x234c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x21a8]
call fcn.00402da0
mov edx, edi
mov ecx, eax
call fcn.00409ba0
test al, al
jne 0x45722e
push dword [ebp - 0x6d38]
lea ecx, [ebp - 0x21a8]
call fcn.00402c00
push 0
push 1
push 0x4cbcf4
push 0x4cc5d8
lea ecx, [ebp - 0x21a8]
call fcn.004047c0
push dword [ebp - 0x6d38]
call dword [0x4ac430]
mov eax, dword [ebp - 0x6d3c]
test eax, eax
je 0x457264
push eax
call dword [0x4ac430]
lea ecx, [ebp - 0x6d1c]
call fcn.00478020
lea ecx, [ebp - 0x6cf8]
mov byte [ebp - 4], 0x5d
call fcn.00478020
inc esi
cmp esi, dword [ebp - 0x2484]
jle 0x4570c3
mov edi, dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x21a8]
call fcn.00403170
test al, al
jne 0x457476
mov eax, dword [ebp - 0x6d14]
lea edx, [ebp - 0x6dc0]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x20]
call eax
test eax, eax
js 0x45733f
movsd xmm0, qword [edi + 0x390]
comisd xmm0, xmmword [0x4ecfd8]
jbe 0x4572db
mov eax, dword [edi + 0x1b0]
jmp 0x4572e1
mov eax, dword [edi + 0x1ac]
push eax
lea ecx, [ebp - 0x2490]
call fcn.00402c00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x219c]
call fcn.00402e90
push eax
push 0x4cbcec
push dword [ebp - 0x6dc0]
lea ecx, [ebp - 0x2490]
push 0x4d04c4
call fcn.00404260
push 1
push 0
push 0x4cbcec
push 0x4cbd14
lea ecx, [ebp - 0x2490]
call fcn.004047c0
jmp 0x45734a
lea ecx, [ebp - 0x2490]
call fcn.00402ce0
push 0
push 1
push 1
push 0
push 0x4e2394
lea ecx, [ebp - 0x21a8]
call fcn.00403fc0
push 0
lea ecx, [ebp - 0x2490]
mov esi, eax
call fcn.00402e90
push eax
lea eax, [ebp - 0x21a8]
mov ecx, edi
push eax
call fcn.0046e590
test al, al
lea ecx, [ebp - 0x21a8]
mov eax, 1
push 0
cmovne esi, eax
call fcn.00402e90
push eax
push 0
push esi
lea ecx, [ebp - 0x21a8]
call fcn.00402e90
push eax
push 0x4dc450
lea ecx, [ebp - 0x219c]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xd
push dword [eax + 0xa4]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x457476
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dc450
lea ecx, [ebp - 0x21a8]
call fcn.00402e90
push eax
push 0
push 0xd
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
test esi, esi
mov ecx, 0x4e15fc
push 0x4cbcd0
mov eax, 0x4d0a70
cmove eax, ecx
lea ecx, [ebp - 0x234c]
push eax
push 0x4e1614
call fcn.00402e90
push eax
push 0x4e2294
push 0x4e23a4
lea ecx, [ebp - 0x219c]
call fcn.00402e90
push eax
push 0x4e23dc
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
lea ecx, [ebp - 0x6d08]
call fcn.00478020
lea ecx, [ebp - 0x6d00]
call fcn.00478020
lea ecx, [ebp - 0x6cf4]
mov byte [ebp - 4], 0x59
call fcn.00478020
mov esi, dword [ebp - 0x6f8c]
inc esi
mov dword [ebp - 0x6f8c], esi
cmp esi, dword [ebp - 0x2590]
jle 0x456f10
lea ecx, [ebp - 0x6d30]
call fcn.00478020
lea ecx, [ebp - 0x6d14]
mov byte [ebp - 4], 0x52
call fcn.00478020
jmp 0x456a26
lea eax, [ebp - 0x6d10]
push eax
push 0x4ecf64
push 1
push 0
push 0x4ecf44
call esi
test eax, eax
js 0x456a20
push 4
lea ecx, [ebp - 0x6d34]
call fcn.00405950
lea ecx, [ebp - 0x6d34]
call fcn.00406220
mov byte [ebp - 4], 0x60
lea edx, [ebp - 0x6d34]
mov eax, dword [ebp - 0x6d10]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x14]
call eax
test eax, eax
jns 0x45753b
lea ecx, [ebp - 0x6d34]
mov byte [ebp - 4], 0x52
call fcn.00478020
jmp 0x456a20
mov eax, dword [ebp - 0x6d34]
lea edx, [ebp - 0x2494]
push edx
mov dword [ebp - 0x2494], 0
lea edx, [ebp - 0x6d40]
push edx
mov ecx, dword [eax]
push 5
push eax
mov eax, dword [ecx + 0xc]
call eax
mov edi, dword [ebp - 0x6f7c]
test eax, eax
js 0x45797b
mov eax, dword [ebp - 0x2494]
test eax, eax
je 0x45797b
xor esi, esi
mov dword [ebp - 0x6f8c], esi
test eax, eax
je 0x457949
nop
mov ecx, edi
call fcn.00472340
test al, al
jne 0x457949
mov eax, dword [ebp - 0x6d40]
lea ecx, [ebp - 0x219c]
push dword [eax + esi*4]
call fcn.00402c00
mov eax, dword [ebp - 0x6d40]
push dword [eax + esi*4]
call dword [0x4ac7f4]
push 0
push 0x4e2374
lea ecx, [ebp - 0x219c]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x45792e
push 4
lea ecx, [ebp - 0x6cfc]
call fcn.00405950
lea ecx, [ebp - 0x6cfc]
call fcn.00406220
mov byte [ebp - 4], 0x61
lea ecx, [ebp - 0x219c]
mov eax, dword [ebp - 0x6d10]
mov esi, dword [eax]
lea eax, [ebp - 0x6cfc]
push eax
push 0x4ecf74
call fcn.00402e90
push eax
push dword [ebp - 0x6d10]
mov eax, dword [esi + 0x18]
call eax
test eax, eax
js 0x45791f
mov eax, dword [ebp - 0x6cfc]
lea edx, [ebp - 0x6d2c]
mov dword [ebp - 0x6d2c], 0
mov dword [ebp - 0x6d44], 0
push edx
mov ecx, dword [eax]
push eax
mov eax, dword [ecx + 0x84]
call eax
cmp dword [ebp - 0x6d2c], 0
je 0x45791f
mov eax, dword [ebp - 0x6cfc]
lea edx, [ebp - 0x6d44]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x8c]
call eax
push dword [ebp - 0x6d2c]
lea ecx, [ebp - 0x234c]
call fcn.00402c00
mov ecx, dword [ebp - 0x6d44]
call fcn.00405960
test eax, eax
je 0x4576fa
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6d44]
lea ecx, [ebp - 0x234c]
push 0x4cc5dc
call fcn.00404260
push 3
push 1
lea ecx, [ebp - 0x234c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x21a8]
call fcn.00402da0
lea edx, [edi + 0x1a8]
mov ecx, eax
call fcn.00409ba0
test al, al
jne 0x45770b
push dword [ebp - 0x6d2c]
lea ecx, [ebp - 0x21a8]
call fcn.00402c00
push 0
push 1
push 0x4cbcf4
push 0x4cc5d8
lea ecx, [ebp - 0x21a8]
call fcn.004047c0
push dword [ebp - 0x6d2c]
mov esi, dword [0x4ac7f4]
call esi
mov eax, dword [ebp - 0x6d44]
test eax, eax
je 0x45773f
push eax
call esi
lea ecx, [ebp - 0x21a8]
call fcn.00403170
test al, al
jne 0x45791f
push 0
push 1
push 1
push 0
push 0x4e2394
lea ecx, [ebp - 0x21a8]
call fcn.00403fc0
xor ecx, ecx
test eax, eax
lea eax, [ebp - 0x219c]
setg cl
mov dword [ebp - 0x6f80], ecx
lea ecx, [ebp - 0x2490]
push eax
call fcn.00402c10
push 0
push 1
push 0xffffffffffffffff
push 0
push 0x4d04d4
lea ecx, [ebp - 0x2490]
call fcn.00403fc0
test eax, eax
jne 0x4577c0
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4d04d4
lea ecx, [ebp - 0x2490]
call fcn.00404260
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e23fc
push dword [edi + 0x1ac]
lea ecx, [ebp - 0x2490]
call fcn.00404550
push 0
lea ecx, [ebp - 0x2490]
call fcn.00402e90
push eax
lea eax, [ebp - 0x21a8]
mov ecx, edi
push eax
call fcn.0046e590
test al, al
je 0x457811
mov esi, 1
jmp 0x457833
lea ecx, [ebp - 0x21a8]
call fcn.00402e90
push eax
push 0
call dword [0x4ac80c]
test eax, eax
jne 0x45791f
mov esi, dword [ebp - 0x6f80]
push 0
lea ecx, [ebp - 0x21a8]
call fcn.00402e90
push eax
push 0
push esi
lea ecx, [ebp - 0x21a8]
call fcn.00402e90
push eax
push 0x4dc450
lea ecx, [ebp - 0x219c]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xd
push dword [eax + 0xa4]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x45791f
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dc450
lea ecx, [ebp - 0x21a8]
call fcn.00402e90
push eax
push 0
push 0xd
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
test esi, esi
mov ecx, 0x4e15fc
push 0x4cbcd0
mov eax, 0x4d0a70
cmove eax, ecx
lea ecx, [ebp - 0x234c]
push eax
push 0x4e1614
call fcn.00402e90
push eax
push 0x4e2294
push 0x4e23a4
lea ecx, [ebp - 0x219c]
call fcn.00402e90
push eax
push 0x4e23dc
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
lea ecx, [ebp - 0x6cfc]
mov byte [ebp - 4], 0x60
call fcn.00478020
mov eax, dword [ebp - 0x6f8c]
inc eax
mov esi, eax
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [ebp - 0x2494]
jb 0x457590
push dword [ebp - 0x6d40]
call dword [0x4ac7f4]
mov eax, dword [ebp - 0x6d34]
lea edx, [ebp - 0x2494]
push edx
lea edx, [ebp - 0x6d40]
push edx
mov ecx, dword [eax]
push 5
push eax
mov eax, dword [ecx + 0xc]
call eax
test eax, eax
jns 0x457571
lea ecx, [ebp - 0x6d34]
mov byte [ebp - 4], 0x52
call fcn.00478020
jmp 0x456a26
mov esi, dword [ebp - 0x6fa4]
inc esi
lea ecx, [ebp - 0x29f4]
mov dword [ebp - 0x6fa4], esi
call fcn.00405540
cmp esi, eax
jb 0x456c20
lea ecx, [ebp - 0x29f4]
mov byte [ebp - 4], 0x62
call fcn.004054c0
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x456b62
mov ecx, edi
call fcn.00472340
test al, al
jne 0x458340
push 0
push 0x4e24f0
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
push 4
lea ecx, [ebp - 0x2304]
mov dword [ebp - 0x6fd0], 0x4e2528
mov dword [ebp - 0x6fcc], 0x4e25b0
call fcn.00405950
lea ecx, [ebp - 0x2304]
call fcn.00406220
push 4
lea ecx, [ebp - 0x2434]
mov byte [ebp - 4], 0x64
call fcn.00405950
lea ecx, [ebp - 0x2434]
call fcn.00406220
push 0xc
lea ecx, [ebp - 0x20cc]
mov byte [ebp - 4], 0x65
call fcn.00401960
lea ecx, [ebp - 0x20cc]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x272c]
mov byte [ebp - 4], 0x66
call fcn.00401960
lea ecx, [ebp - 0x272c]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x27b0]
mov byte [ebp - 4], 0x67
call fcn.00401960
lea ecx, [ebp - 0x27b0]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x6db4]
mov byte [ebp - 4], 0x68
call fcn.00407690
lea ecx, [ebp - 0x6db4]
call fcn.004076d0
xor ecx, ecx
mov byte [ebp - 4], 0x69
mov dword [ebp - 0x6f9c], ecx
nop dword [eax + eax]
push 0
push 0x20019
push dword [ebp + ecx*4 - 0x6fd0]
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x4582d5
lea eax, [ebp - 0x6cec]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6fa4], esi
call fcn.00407b10
test al, al
je 0x4582d5
nop dword [eax]
nop dword [eax + eax]
mov eax, dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x2114]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
push 0x4cbcec
push dword [ebp + eax*4 - 0x6fd0]
call fcn.00402df0
push 0
push 0x20019
lea ecx, [ebp - 0x2114]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2304]
call fcn.00407730
test al, al
je 0x4582b3
lea eax, [ebp - 0x6db4]
mov dword [ebp - 0x6f8c], 0
push eax
push 0
lea ecx, [ebp - 0x2304]
call fcn.00407b10
test al, al
je 0x457f61
mov eax, dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x27b0]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6db4]
push 0x4cbcec
push dword [ebp - 0x6cec]
push 0x4cbcec
push dword [ebp + eax*4 - 0x6fd0]
call fcn.00402df0
push 0
push 0x20019
lea ecx, [ebp - 0x27b0]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2434]
call fcn.00407730
test al, al
je 0x457f33
lea eax, [ebp - 0x20cc]
push eax
push 0x4e2638
lea ecx, [ebp - 0x2434]
call fcn.004078e0
test al, al
je 0x457f33
lea ecx, [ebp - 0x20cc]
call fcn.00403170
test al, al
jne 0x457f33
push 0
push 0x4d97fc
lea ecx, [ebp - 0x20cc]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x457f33
push 0
push 1
push 1
push 0
push 0x4e2650
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
je 0x457c93
push 0
push 1
push 1
push 0
push 0x4e2660
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
jne 0x457f33
push 0
push 1
push 1
push 0
push 0x4e2670
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
je 0x457ccf
push 0
push 1
push 1
push 0
push 0x4e269c
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
jne 0x457f33
push 0
push 1
push 1
push 0
push 0x4e26c8
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
je 0x457d0b
push 0
push 1
push 1
push 0
push 0x4e2700
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
jne 0x457f33
push 0
push 1
push 1
push 0
push 0x4e2738
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
je 0x457d47
push 0
push 1
push 1
push 0
push 0x4e2764
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
jne 0x457f33
push 0
push 1
push 1
push 0
push 0x4e278c
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
je 0x457d83
push 0
push 1
push 1
push 0
push 0x4e27c4
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
jne 0x457f33
push 0
push 0x4e27f8
lea ecx, [ebp - 0x20cc]
mov dword [ebp - 0x6f80], 0
call fcn.00402e90
push eax
lea ecx, [ebp - 0x28a4]
call fcn.004055a0
lea ecx, [ebp - 0x28a4]
xor esi, esi
call fcn.00405540
test eax, eax
je 0x45904a
push 1
push esi
lea ecx, [ebp - 0x28a4]
call fcn.00405530
push eax
lea ecx, [ebp - 0x272c]
call fcn.00402da0
mov ecx, eax
call fcn.00403170
test al, al
jne 0x457e31
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e1d78
lea ecx, [edi + 0x33c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x272c]
call fcn.00404550
lea ecx, [ebp - 0x272c]
call fcn.00402e90
xor edx, edx
mov ecx, eax
call fcn.00409350
test al, al
jne 0x459040
lea ecx, [ebp - 0x28a4]
inc esi
call fcn.00405540
cmp esi, eax
jb 0x457dc0
mov esi, dword [ebp - 0x6f80]
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x27b0]
call fcn.00402e90
push eax
push 0x4dc450
lea ecx, [ebp - 0x20cc]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xf
push dword [eax + 0xa4]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x457f33
push 0
push 0
push 0
push 0
push 0
push 0x4e2638
push 0x4dc450
push 0
lea ecx, [ebp - 0x27b0]
call fcn.00402e90
push eax
push 0xf
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0x4cbcd0
test esi, esi
mov ecx, 0x4e15fc
mov eax, 0x4d0a70
cmove eax, ecx
lea ecx, [ebp - 0x27b0]
push eax
push 0x4e1614
push 0x4e2800
call fcn.00402e90
push eax
push 0x4e2838
push 0x4e23a4
lea ecx, [ebp - 0x20cc]
call fcn.00402e90
push eax
push 0x4e22b0
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
mov eax, dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x6db4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x2304]
mov dword [ebp - 0x6f8c], eax
call fcn.00407b10
test al, al
jne 0x457ba1
mov esi, dword [ebp - 0x6fa4]
lea eax, [ebp - 0x20cc]
push eax
push 0x4e2638
lea ecx, [ebp - 0x2304]
call fcn.004078e0
test al, al
je 0x4582b3
lea ecx, [ebp - 0x20cc]
call fcn.00403170
test al, al
jne 0x4582b3
push 0
push 0x4d97fc
lea ecx, [ebp - 0x20cc]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x4582b3
push 0
push 1
push 1
push 0
push 0x4e2650
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
je 0x457ff1
push 0
push 1
push 1
push 0
push 0x4e2660
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
jne 0x4582b3
push 0
push 1
push 1
push 0
push 0x4e2670
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
je 0x45802d
push 0
push 1
push 1
push 0
push 0x4e269c
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
jne 0x4582b3
push 0
push 1
push 1
push 0
push 0x4e26c8
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
je 0x458069
push 0
push 1
push 1
push 0
push 0x4e2700
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
jne 0x4582b3
push 0
push 1
push 1
push 0
push 0x4e2738
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
je 0x4580a5
push 0
push 1
push 1
push 0
push 0x4e2764
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
jne 0x4582b3
push 0
push 1
push 1
push 0
push 0x4e278c
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
je 0x4580e1
push 0
push 1
push 1
push 0
push 0x4e27c4
lea ecx, [ebp - 0x20cc]
call fcn.00403fc0
test eax, eax
jne 0x4582b3
push 0
push 0x4e27f8
lea ecx, [ebp - 0x20cc]
mov dword [ebp - 0x6f8c], 0
call fcn.00402e90
push eax
lea ecx, [ebp - 0x28a4]
call fcn.004055a0
lea ecx, [ebp - 0x28a4]
mov dword [ebp - 0x6f78], 0
call fcn.00405540
test eax, eax
je 0x459061
mov ecx, dword [ebp - 0x6f78]
nop dword [eax]
push 1
push ecx
lea ecx, [ebp - 0x28a4]
call fcn.00405530
push eax
lea ecx, [ebp - 0x272c]
call fcn.00402da0
mov ecx, eax
call fcn.00403170
test al, al
jne 0x4581a1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e1d78
lea ecx, [edi + 0x33c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x272c]
call fcn.00404550
lea ecx, [ebp - 0x272c]
call fcn.00402e90
xor edx, edx
mov ecx, eax
call fcn.00409350
test al, al
jne 0x459051
inc dword [ebp - 0x6f78]
lea ecx, [ebp - 0x28a4]
call fcn.00405540
mov ecx, dword [ebp - 0x6f78]
cmp ecx, eax
jb 0x458130
mov eax, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push eax
lea ecx, [ebp - 0x2114]
call fcn.00402e90
push eax
push 0x4dc450
lea ecx, [ebp - 0x20cc]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xf
push dword [eax + 0xa4]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4582b3
push 0
push 0
push 0
push 0
push 0
push 0x4e2638
push 0x4dc450
push 0
lea ecx, [ebp - 0x2114]
call fcn.00402e90
push eax
push 0xf
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
cmp dword [ebp - 0x6f8c], 0
mov ecx, 0x4e15fc
push 0
push 0
push 0
push 0x4cbcd0
mov eax, 0x4d0a70
cmove eax, ecx
lea ecx, [ebp - 0x2114]
push eax
push 0x4e1614
push 0x4e2800
call fcn.00402e90
push eax
push 0x4e2838
push 0x4e23a4
lea ecx, [ebp - 0x20cc]
call fcn.00402e90
push eax
push 0x4e22b0
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
lea eax, [ebp - 0x6cec]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6fa4], esi
call fcn.00407b10
test al, al
jne 0x457b20
mov ecx, dword [ebp - 0x6f9c]
inc ecx
mov dword [ebp - 0x6f9c], ecx
cmp ecx, 2
jb 0x457ad0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa4]
call fcn.004209d0
lea ecx, [ebp - 0x6db4]
call fcn.00402cd0
lea ecx, [ebp - 0x27b0]
call fcn.00402cd0
lea ecx, [ebp - 0x272c]
call fcn.00402cd0
lea ecx, [ebp - 0x20cc]
call fcn.00402cd0
lea ecx, [ebp - 0x2434]
call fcn.00407760
lea ecx, [ebp - 0x2304]
call fcn.00407760
lea ecx, [ebp - 0x28a4]
call fcn.004054c0
lea ecx, [ebp - 0x6d0c]
call fcn.00478020
lea ecx, [ebp - 0x6d10]
call fcn.00478020
lea ecx, [ebp - 0x21a8]
call fcn.00402cd0
lea ecx, [ebp - 0x2490]
call fcn.00402cd0
lea ecx, [ebp - 0x2ba8]
call fcn.00409a60
lea ecx, [ebp - 0x258c]
call fcn.00402cd0
lea ecx, [ebp - 0x234c]
call fcn.00402cd0
lea ecx, [ebp - 0x219c]
call fcn.00402cd0
lea ecx, [ebp - 0x2824]
call fcn.00402cd0
lea ecx, [ebp - 0x2418]
call fcn.00402cd0
lea ecx, [ebp - 0x2084]
mov byte [ebp - 4], 0x46
call fcn.00402cd0
mov eax, dword [ebp - 0x6f7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dcd08
push 0x4cbcec
lea ecx, [eax + 0x140]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2780]
call fcn.00402df0
push 1
lea ecx, [ebp - 0x2780]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x21e0]
call fcn.00401bc0
mov edi, dword [ebp - 0x6f7c]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45918e
test dword [edi + 0x34], 0x1000
jne 0x45918e
movsd xmm0, qword [edi + 0x390]
ucomisd xmm0, qword [0x4ed010]
lahf
test ah, 0x44
jp 0x45918e
push 0
push 0x4e2860
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x4e28a8
push dword [eax + 0x38]
call fcn.0041f260
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x26
push dword [eax + 0x34]
call fcn.004219b0
push 0xc
lea ecx, [ebp - 0x221c]
call fcn.00401960
lea ecx, [ebp - 0x221c]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x28f4]
mov byte [ebp - 4], 0x6a
call fcn.00401960
lea ecx, [ebp - 0x28f4]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2580]
mov byte [ebp - 4], 0x6b
call fcn.00401960
lea ecx, [ebp - 0x2580]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x261c]
mov byte [ebp - 4], 0x6c
call fcn.00401960
lea ecx, [ebp - 0x261c]
call fcn.00402b30
push 0
push 0x4e28e0
lea ecx, [ebp - 0x1fc8]
mov byte [ebp - 4], 0x6d
call fcn.0040e530
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004209d0
xor esi, esi
mov dword [ebp - 0x6f78], esi
cmp dword [edi + 0x30], esi
jbe 0x458790
lea ecx, [edi + 0x104]
nop dword [eax]
push esi
call fcn.004784e0
mov ecx, eax
call fcn.00403170
test al, al
jne 0x45877a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2920
push 0x4e29c8
push esi
lea ecx, [edi + 0x104]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
push str.HKU_
lea ecx, [ebp - 0x221c]
call fcn.00402df0
push 0
push 0x20019
lea ecx, [ebp - 0x221c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x45877a
xor esi, esi
nop dword [eax + eax]
lea eax, [ebp - 0x6cec]
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.00407b10
test al, al
je 0x45876e
push 8
push 0
push 0x4cbce4
push 0x4e2a60
push 1
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x261c]
call fcn.00402da0
mov ecx, eax
call fcn.004051d0
push 0
push 0x4e2a7c
lea ecx, [ebp - 0x261c]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x458764
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x221c]
push 0x4cbcec
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2580]
call fcn.00402df0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2580]
call fcn.00402e90
push eax
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x114]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x261c]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 4
push 0x18
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x458764
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x114]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
push 0
lea ecx, [ebp - 0x2580]
call fcn.00402e90
push eax
push 0x18
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e2ab0
push dword [ebp - 0x6cec]
lea ecx, [edi + 0x114]
push 0x4e2aec
push dword [ebp - 0x6f78]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x261c]
call fcn.00402e90
push eax
push 0x4e2b20
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
inc esi
cmp esi, 2
jb 0x4585c0
mov dword [ebp - 0x6fa4], esi
mov esi, dword [ebp - 0x6f78]
inc esi
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f78], esi
cmp esi, dword [edi + 0x30]
jb 0x458540
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45915e
push 0
push 0x4e2b50
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x458abb
lea ecx, [edi + 0x104]
push esi
call fcn.004784e0
mov ecx, eax
call fcn.00403170
test al, al
jne 0x458aab
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2920
push 0x4e29c8
push esi
lea ecx, [edi + 0x104]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
push str.HKU_
lea ecx, [ebp - 0x221c]
call fcn.00402df0
push 0
push 0x20019
lea ecx, [ebp - 0x221c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
lea eax, [ebp - 0x6cec]
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.00407b10
test al, al
je 0x458950
push 0
push 0x4e2ce0
push 0x4dcfac
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x458aab
push 0
push 0
push 0
push 0
push 0x4e2ba8
push esi
lea ecx, [edi + 0x114]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dcfac
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x458aab
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [edi + 0x114]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
push 0
lea ecx, [ebp - 0x221c]
call fcn.00402e90
push eax
push 0x1a
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e2ab0
push 0x4e2ba8
push 0x4e2d1c
push esi
lea ecx, [edi + 0x114]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
push 0x4e1674
push 0x4dcfac
push 0x4e2d34
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2d60
push 0x4e29c8
push esi
lea ecx, [edi + 0x104]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
push str.HKU_
lea ecx, [ebp - 0x221c]
call fcn.00402df0
lea ecx, [ebp - 0x221c]
call fcn.00402e90
xor edx, edx
mov ecx, eax
call fcn.00409350
test al, al
je 0x458aab
push 0
push 0x4e2ce0
push 0x4dd158
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x458aab
push 0
push 0
push 0
push 0
push 0x4e2c50
push esi
lea ecx, [edi + 0x114]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dd158
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x458aab
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [edi + 0x114]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
push 0
lea ecx, [ebp - 0x221c]
call fcn.00402e90
push eax
push 0x1a
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e2ab0
push 0x4e2c50
push 0x4e2d1c
push esi
lea ecx, [edi + 0x114]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
push 0x4e1674
push 0x4dd158
push 0x4e2d34
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
inc esi
lea ecx, [edi + 0x104]
cmp esi, dword [edi + 0x30]
jb 0x4587c2
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45915e
xor eax, eax
mov dword [ebp - 0x6fb8], 0x4d6740
mov dword [ebp - 0x6fb4], 0x4d6768
mov dword [ebp - 0x6fd0], 0x4dd274
mov dword [ebp - 0x6fcc], 0x4dd388
mov dword [ebp - 0x6f90], 0x4e2e00
mov dword [ebp - 0x6f8c], 0x4e2e88
mov dword [ebp - 0x6f78], eax
cmp dword [edi + 0x30], eax
jbe 0x458cfb
lea edx, [edi + 0x104]
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2f18
push 0x4e2fc0
push 0x4e3058
push eax
mov ecx, edx
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
push str.HKU_
lea ecx, [ebp - 0x221c]
call fcn.00402df0
lea ecx, [ebp - 0x221c]
call fcn.00402e90
xor edx, edx
mov ecx, eax
call fcn.00409350
test al, al
je 0x458cdf
xor esi, esi
nop dword [eax + eax]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x458cd9
lea ecx, [ebp - 0x221c]
call fcn.00402e90
mov edx, dword [ebp + esi*4 - 0x6fb8]
mov ecx, eax
call fcn.00409350
test al, al
je 0x458ccf
push 0
push 0x4e2ce0
push dword [ebp + esi*4 - 0x6fd0]
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x458ccf
push 0
push 0
push 0
push 0
push dword [ebp + esi*4 - 0x6f90]
lea ecx, [edi + 0x114]
push dword [ebp - 0x6f78]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
push dword [ebp + esi*4 - 0x6fd0]
mov eax, dword [edi + 8]
mov ecx, edi
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x458ccf
push 0
push 0
push 0
push 0
push 0
push dword [ebp + esi*4 - 0x6fb8]
lea ecx, [edi + 0x114]
push dword [ebp - 0x6f78]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
push 0
lea ecx, [ebp - 0x221c]
call fcn.00402e90
push eax
push 0x1a
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e2ab0
push dword [ebp + esi*4 - 0x6f90]
lea ecx, [edi + 0x114]
push 0x4e2d1c
push dword [ebp - 0x6f78]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
push 0x4e1674
push dword [ebp + esi*4 - 0x6fd0]
lea ecx, [ebp - 0x1f80]
push 0x4e2d34
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
inc esi
cmp esi, 2
jb 0x458b80
mov dword [ebp - 0x6fa4], esi
mov eax, dword [ebp - 0x6f78]
lea edx, [edi + 0x104]
inc eax
mov dword [ebp - 0x6f78], eax
cmp eax, dword [edi + 0x30]
jb 0x458b20
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45915e
mov dword [ebp - 0x6fb8], 0x4d68a8
xor esi, esi
mov dword [ebp - 0x6fb4], 0x4d68c4
mov dword [ebp - 0x6fd0], 0x4dd4b4
mov dword [ebp - 0x6fcc], 0x4dd4e0
mov dword [ebp - 0x6f90], 0x4e30f8
mov dword [ebp - 0x6f8c], 0x4e3180
nop dword [eax + eax]
push 0
push 0x4e2ce0
push dword [ebp + esi*4 - 0x6fd0]
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x458e7a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + esi*4 - 0x6fb8]
lea ecx, [ebp - 0x25b0]
push 0x4d6840
call fcn.00402e90
push eax
lea ecx, [ebp - 0x221c]
call fcn.00402df0
lea ecx, [ebp - 0x221c]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
je 0x458e7a
mov eax, dword [edi + 8]
mov ecx, edi
push 0
push 0
push 0
push 0
push dword [ebp + esi*4 - 0x6f90]
push 0x4dc450
push dword [ebp + esi*4 - 0x6fd0]
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x458e7a
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dc450
lea ecx, [ebp - 0x221c]
call fcn.00402e90
push eax
push 0
push 0x1a
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2ab0
push dword [ebp + esi*4 - 0x6f90]
lea ecx, [ebp - 0x1f80]
push 0x4e2d1c
push 0x4e23a4
push dword [ebp + esi*4 - 0x6fd0]
push 0x4e2d34
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
inc esi
cmp esi, 2
jb 0x458d50
push 4
lea ecx, [ebp - 0x2360]
mov dword [ebp - 0x6fa4], esi
call fcn.00405950
lea ecx, [ebp - 0x2360]
call fcn.00406220
push 4
lea ecx, [ebp - 0x2444]
mov byte [ebp - 4], 0x6e
call fcn.00405950
lea ecx, [ebp - 0x2444]
call fcn.00406220
xor eax, eax
mov byte [ebp - 4], 0x6f
mov dword [ebp - 0x6f78], eax
cmp dword [edi + 0x30], eax
jbe 0x459124
lea edx, [edi + 0x104]
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3298
push 0x4e3320
push 0x4e3398
push eax
mov ecx, edx
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
push str.HKU_
lea ecx, [ebp - 0x221c]
call fcn.00402df0
push 0
push 0x20019
lea ecx, [ebp - 0x221c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2360]
call fcn.00407730
test al, al
je 0x459108
lea eax, [ebp - 0x6cec]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x2360]
mov dword [ebp - 0x6fa4], esi
call fcn.00407b10
test al, al
je 0x459108
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e33bc
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x221c]
push 0x4cbcec
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2580]
call fcn.00402df0
push 0
push 0x20019
lea ecx, [ebp - 0x2580]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2444]
call fcn.00407730
test al, al
je 0x459019
lea ecx, [ebp - 0x2444]
call fcn.00407c30
cmp eax, 2
jb 0x459019
push 0
push 0
push 0
push 0
push 0x4e3210
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x114]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dd6f0
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
jne 0x459068
lea eax, [ebp - 0x6cec]
inc esi
push eax
push esi
lea ecx, [ebp - 0x2360]
mov dword [ebp - 0x6fa4], esi
call fcn.00407b10
test al, al
jne 0x458f66
jmp 0x459108
mov esi, 1
jmp 0x457e4b
xor esi, esi
jmp 0x457e4b
mov eax, 1
mov dword [ebp - 0x6f8c], eax
jmp 0x4581c6
xor eax, eax
jmp 0x4581c6
mov esi, dword [ebp - 0x6f78]
lea ecx, [edi + 0x114]
push 0
push 0
push 0
push 0
push 0
push 0
push esi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
push 0
lea ecx, [ebp - 0x2580]
call fcn.00402e90
push eax
push 0x1a
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2ab0
push 0x4e3210
push 0x4e2d1c
push esi
lea ecx, [edi + 0x114]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
push 0x4e1674
push 0x4e33f8
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
mov eax, dword [ebp - 0x6f78]
lea edx, [edi + 0x104]
inc eax
mov dword [ebp - 0x6f78], eax
cmp eax, dword [edi + 0x30]
jb 0x458ee0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004209d0
push 1
push 0
push 0
lea ecx, [ebp - 0x21e0]
call fcn.004025c0
lea ecx, [ebp - 0x2444]
call fcn.00407760
lea ecx, [ebp - 0x2360]
call fcn.00407760
lea ecx, [ebp - 0x261c]
call fcn.00402cd0
lea ecx, [ebp - 0x2580]
call fcn.00402cd0
lea ecx, [ebp - 0x28f4]
call fcn.00402cd0
lea ecx, [ebp - 0x221c]
mov byte [ebp - 4], 0x46
call fcn.00402cd0
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45b952
test dword [edi + 0x34], 0x1000
jne 0x45b952
push 0
push 0x4e3450
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x4e28a8
push dword [eax + 0x38]
call fcn.0041f260
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x26
push dword [eax + 0x34]
call fcn.004219b0
push 0xc
lea ecx, [ebp - 0x20c0]
call fcn.00401960
lea ecx, [ebp - 0x20c0]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x201c]
mov byte [ebp - 4], 0x70
call fcn.00401960
lea ecx, [ebp - 0x201c]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2400]
mov byte [ebp - 4], 0x71
call fcn.00401960
lea ecx, [ebp - 0x2400]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x1ff4]
mov byte [ebp - 4], 0x72
call fcn.00401960
lea ecx, [ebp - 0x1ff4]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x22d0]
mov byte [ebp - 4], 0x73
call fcn.00401960
lea ecx, [ebp - 0x22d0]
call fcn.00402b30
push 0x24
lea ecx, [ebp - 0x2548]
mov byte [ebp - 4], 0x74
call fcn.0042ee40
lea ecx, [ebp - 0x2548]
call fcn.00410190
mov byte [ebp - 4], 0x75
xor esi, esi
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
mov dword [ebp - 0x6f8c], esi
push dword [eax + 0xa8]
call fcn.004209d0
push esi
push 0x4e3490
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov dword [ebp - 0x6f78], esi
cmp dword [edi + 0x30], esi
jbe 0x45989c
mov esi, dword [ebp - 0x6fa8]
mov dword [ebp - 0x6fb4], esi
lea ecx, [ebp - 0x22d0]
call fcn.00403170
test al, al
je 0x45931c
lea eax, [ebp - 0x22d0]
push eax
push 1
lea ecx, [ebp - 0x2160]
call fcn.00402e90
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
mov edx, esi
mov ecx, eax
call fcn.00434db0
mov esi, dword [ebp - 0x6fb4]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x459896
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e34e0
lea ecx, [ebp - 0x2160]
call fcn.00402e90
push eax
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00402df0
push 0x260
lea ecx, [ebp - 0x4d10]
call fcn.00409b80
push 1
lea ecx, [ebp - 0x20c0]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x4d10]
call fcn.00401120
push 3
lea ecx, [ebp - 0x20c0]
mov byte [ebp - 4], 0x76
call fcn.00403ed0
lea ecx, [ebp - 0x4d10]
call fcn.00401260
test al, al
je 0x459868
nop
push 1
lea ecx, [ebp - 0x4d10]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x201c]
call fcn.00402c00
push 0x4e351c
lea ecx, [ebp - 0x201c]
call fcn.00402c70
test al, al
je 0x45940e
push 0
push 1
push 1
push 0
push 0x4e352c
lea ecx, [ebp - 0x201c]
call fcn.00403fc0
cmp eax, 1
jne 0x459855
inc dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x4d10]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3540
push 1
call fcn.004012c0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x201c]
call fcn.00402df0
push 0x100
lea ecx, [ebp - 0x201c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2548]
call fcn.00410240
test al, al
je 0x459855
lea eax, [ebp - 0x1ff4]
push eax
push 0x4cde84
push 0x4e3568
lea ecx, [ebp - 0x2548]
call fcn.00410b30
test eax, eax
je 0x459627
push 0
push 1
push 1
push 0
push 0x4e357c
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x459627
push eax
push 1
push 1
push eax
push 0x4e359c
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x459627
push 0x4e35b8
lea ecx, [ebp - 0x1ff4]
call fcn.00402c40
test al, al
jne 0x459627
push 0
push 1
push 1
push 0
push 0x4e35d0
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x459627
push eax
push 1
push 1
push eax
push 0x4e35ec
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x459627
push eax
push 0x4e3604
lea ecx, [ebp - 0x1ff4]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x459627
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff4]
call fcn.00402e90
push eax
mov ecx, esi
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e3640
push 0
push 0x6f
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x459627
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402e90
push eax
lea ecx, [ebp - 0x201c]
call fcn.00402e90
push eax
push 0x4e3568
push 0x6f
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
lea ecx, [ebp - 0x201c]
call fcn.00402e90
push eax
push 0x4e2d1c
mov ecx, esi
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x1ff4]
call fcn.00402e90
push eax
push 0x4e3688
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
lea eax, [ebp - 0x2b04]
mov dword [ebp - 0x6f50], 0
push eax
push 0x4cde84
xorps xmm0, xmm0
lea ecx, [ebp - 0x2548]
push 0x4e36a8
movups xmmword [ebp - 0x6f60], xmm0
call fcn.00410950
test al, al
je 0x459855
lea eax, [ebp - 0x2b04]
push eax
lea eax, [ebp - 0x6f60]
push eax
lea ecx, [ebp - 0x2548]
call fcn.004110b0
test al, al
je 0x459855
lea eax, [ebp - 0x1ff4]
push eax
lea eax, [ebp - 0x6f60]
push eax
lea ecx, [ebp - 0x2548]
call fcn.00410ac0
test eax, eax
je 0x459834
push 0
push 1
push 1
push 0
push 0x4e357c
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x459855
push eax
push 1
push 1
push eax
push 0x4e36d4
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x459855
push eax
push 1
push 1
push eax
push 0x4e359c
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x459855
push eax
push 1
push 1
push eax
push 0x4e36f8
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x459855
push eax
push 1
push 1
push eax
push 0x4e35ec
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x459855
push eax
push 0x4e3714
lea ecx, [ebp - 0x1ff4]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x459834
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff4]
call fcn.00402e90
push eax
mov ecx, esi
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e3740
push 0
push 0x6f
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x459834
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402e90
push eax
lea ecx, [ebp - 0x201c]
call fcn.00402e90
push eax
push 0x4e36a8
push 0x6f
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
lea ecx, [ebp - 0x201c]
call fcn.00402e90
push eax
push 0x4e2d1c
mov ecx, esi
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x1ff4]
call fcn.00402e90
push eax
push 0x4e375c
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
lea eax, [ebp - 0x2b04]
push eax
lea eax, [ebp - 0x6f60]
push eax
lea ecx, [ebp - 0x2548]
call fcn.004110b0
test al, al
jne 0x459680
lea ecx, [ebp - 0x4d10]
call fcn.00401220
test al, al
jne 0x4593c0
lea ecx, [ebp - 0x4d10]
mov byte [ebp - 4], 0x75
call fcn.00401170
mov eax, dword [ebp - 0x6f78]
add esi, 0xc
inc eax
mov dword [ebp - 0x6fb4], esi
mov dword [ebp - 0x6f78], eax
cmp eax, dword [edi + 0x30]
jb 0x4592d0
mov esi, dword [ebp - 0x6f8c]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45b90c
test esi, esi
jne 0x4598d4
lea ecx, [ebp - 0x22d0]
call fcn.00403170
test al, al
je 0x4598d4
push esi
push 0x4e3788
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
jmp 0x45b90c
push 0
push 0x4e37d8
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x459c5f
mov esi, dword [ebp - 0x6fa8]
mov dword [ebp - 0x6f78], esi
mov ecx, edi
call fcn.00472340
test al, al
jne 0x459c5f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e34e0
lea ecx, [ebp - 0x2160]
call fcn.00402e90
push eax
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00402df0
push 0x260
lea ecx, [ebp - 0x51d0]
call fcn.00409b80
push 1
lea ecx, [ebp - 0x20c0]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x51d0]
call fcn.00401120
push 3
lea ecx, [ebp - 0x20c0]
mov byte [ebp - 4], 0x77
call fcn.00403ed0
lea ecx, [ebp - 0x51d0]
call fcn.00401260
test al, al
je 0x459c31
nop dword [eax]
push 1
lea ecx, [ebp - 0x51d0]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x201c]
call fcn.00402c00
push 0x4e351c
lea ecx, [ebp - 0x201c]
call fcn.00402c70
test al, al
je 0x4599fe
push 0
push 1
push 1
push 0
push 0x4e352c
lea ecx, [ebp - 0x201c]
call fcn.00403fc0
cmp eax, 1
jne 0x459c1e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3540
push 1
lea ecx, [ebp - 0x51d0]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x201c]
call fcn.00402df0
push 0x100
lea ecx, [ebp - 0x201c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2548]
call fcn.00410240
test al, al
je 0x459c1e
lea eax, [ebp - 0x1ff4]
push eax
push 0x4cde84
push 0x4e3818
lea ecx, [ebp - 0x2548]
call fcn.00410b30
test eax, eax
je 0x459c1e
push 0
push 1
push 1
push 0
push 0x4e357c
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x459c1e
push eax
push 1
push 1
push eax
push 0x4e36d4
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x459c1e
push eax
push 1
push 1
push eax
push 0x4e359c
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x459c1e
push eax
push 1
push 1
push eax
push 0x4e36f8
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x459c1e
push eax
push 1
push 1
push eax
push 0x4e35ec
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x459c1e
push eax
push 0x4e3888
lea ecx, [ebp - 0x1ff4]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x459c1e
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff4]
call fcn.00402e90
push eax
mov ecx, esi
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e38c8
push 0
push 0x70
push dword [eax + 0xa8]
call fcn.004452b0
mov esi, eax
cmp esi, 0xffffffff
je 0x459c18
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.00402e90
push eax
lea ecx, [ebp - 0x201c]
call fcn.00402e90
push eax
push 0x4e38f8
push 0x70
push esi
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
lea ecx, [ebp - 0x201c]
call fcn.00402e90
mov esi, dword [ebp - 0x6f78]
mov ecx, esi
push eax
push 0x4e2d1c
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x1ff4]
call fcn.00402e90
push eax
push 0x4e3958
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
jmp 0x459c1e
mov esi, dword [ebp - 0x6f78]
lea ecx, [ebp - 0x51d0]
call fcn.00401220
test al, al
jne 0x4599b0
lea ecx, [ebp - 0x51d0]
mov byte [ebp - 4], 0x75
call fcn.00401170
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [edi + 0x30]
jb 0x459906
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45b90c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e39a0
lea ecx, [edi + 0x33c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402df0
push 0
push 0x4e39ec
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x45a270
mov esi, dword [ebp - 0x6fa8]
mov dword [ebp - 0x6f78], esi
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45a270
push 0xc
lea ecx, [ebp - 0x2744]
call fcn.00401960
lea ecx, [ebp - 0x2744]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x27bc]
mov byte [ebp - 4], 0x78
call fcn.00401960
lea ecx, [ebp - 0x27bc]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2738]
mov byte [ebp - 4], 0x79
call fcn.00401960
lea ecx, [ebp - 0x2738]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x26d0]
mov byte [ebp - 4], 0x7a
call fcn.00401960
lea ecx, [ebp - 0x26d0]
call fcn.00402b30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e34e0
lea ecx, [ebp - 0x2160]
mov byte [ebp - 4], 0x7b
call fcn.00402e90
push eax
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00402df0
push 0x260
lea ecx, [ebp - 0x3a10]
call fcn.00409b80
push 1
lea ecx, [ebp - 0x20c0]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x3a10]
call fcn.00401120
push 3
lea ecx, [ebp - 0x20c0]
mov byte [ebp - 4], 0x7c
call fcn.00403ed0
lea ecx, [ebp - 0x3a10]
call fcn.00401260
test al, al
je 0x45a216
push 1
lea ecx, [ebp - 0x3a10]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x201c]
call fcn.00402c00
push 0x4e351c
lea ecx, [ebp - 0x201c]
call fcn.00402c70
test al, al
je 0x459e31
push 0
push 1
push 1
push 0
push 0x4e352c
lea ecx, [ebp - 0x201c]
call fcn.00403fc0
cmp eax, 1
jne 0x45a203
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3540
push 1
lea ecx, [ebp - 0x3a10]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x201c]
call fcn.00402df0
push 0x100
lea ecx, [ebp - 0x201c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2548]
call fcn.00410240
test al, al
je 0x45a203
lea eax, [ebp - 0x2af0]
mov dword [ebp - 0x6f64], 0
push eax
push 0x4cde84
xorps xmm0, xmm0
lea ecx, [ebp - 0x2548]
push 0x4e3a20
movups xmmword [ebp - 0x6f74], xmm0
call fcn.00410950
test al, al
je 0x45a203
lea eax, [ebp - 0x2af0]
push eax
lea eax, [ebp - 0x6f74]
push eax
lea ecx, [ebp - 0x2548]
call fcn.00410cf0
test al, al
je 0x45a203
nop word [eax + eax]
lea eax, [ebp - 0x2744]
push eax
lea eax, [ebp - 0x6f74]
push eax
lea ecx, [ebp - 0x2548]
call fcn.00410a80
test al, al
je 0x45a1e2
lea ecx, [ebp - 0x2744]
call fcn.00402e90
lea ecx, [ebp - 0x1f8c]
mov esi, eax
call fcn.00402e90
mov edx, esi
mov ecx, eax
call fcn.00409350
test al, al
jne 0x45a1dc
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3a4c
lea ecx, [ebp - 0x2744]
call fcn.00402e90
push eax
push 0x4e3a70
lea ecx, [ebp - 0x2738]
call fcn.00402df0
lea eax, [ebp - 0x27bc]
push eax
push 0x4cde84
lea ecx, [ebp - 0x2738]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2548]
call fcn.00410b30
test eax, eax
je 0x45a1dc
lea ecx, [ebp - 0x27bc]
call fcn.00402e90
lea ecx, [ebp - 0x1f8c]
mov esi, eax
call fcn.00402e90
mov edx, esi
mov ecx, eax
call fcn.00409350
test al, al
jne 0x45a1dc
push 0
push 0x4e2a7c
lea ecx, [ebp - 0x27bc]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x45a1dc
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3aa0
lea ecx, [ebp - 0x2744]
call fcn.00402e90
push eax
push 0x4e3a70
lea ecx, [ebp - 0x2738]
call fcn.00402df0
lea eax, [ebp - 0x26d0]
push eax
push 0x4cde84
lea ecx, [ebp - 0x2738]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2548]
call fcn.00410b30
test eax, eax
je 0x45a08c
push 0
push 1
push 1
push 5
push 0x4cc6c4
lea ecx, [ebp - 0x26d0]
call fcn.00403fc0
test eax, eax
jne 0x45a08c
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4e3ab0
push 1
lea ecx, [ebp - 0x3a10]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x26d0]
call fcn.00404550
lea ecx, [ebp - 0x26d0]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
je 0x45a1dc
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2744]
call fcn.00402e90
push eax
push 0x4e3a70
lea ecx, [ebp - 0x2738]
call fcn.00402df0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x26d0]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x27bc]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0
push 0x71
push dword [eax + 0xa8]
call fcn.004452b0
mov esi, eax
cmp esi, 0xffffffff
je 0x45a1dc
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x26d0]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
push 0
call fcn.00402e90
push eax
lea ecx, [ebp - 0x201c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2738]
call fcn.00402e90
push eax
push 0x71
push esi
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0x4e3654
lea ecx, [ebp - 0x26d0]
call fcn.00402e90
mov esi, dword [ebp - 0x6f78]
mov ecx, esi
push eax
push 0x4e2300
call fcn.00402e90
push eax
push 0x4e3acc
lea ecx, [ebp - 0x2744]
call fcn.00402e90
push eax
push 0x4d0110
lea ecx, [ebp - 0x27bc]
call fcn.00402e90
push eax
push 0x4e3af0
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
jmp 0x45a1e2
mov esi, dword [ebp - 0x6f78]
lea eax, [ebp - 0x2af0]
push eax
lea eax, [ebp - 0x6f74]
push eax
lea ecx, [ebp - 0x2548]
call fcn.00410cf0
test al, al
jne 0x459ef0
lea ecx, [ebp - 0x3a10]
call fcn.00401220
test al, al
jne 0x459de3
lea ecx, [ebp - 0x3a10]
call fcn.00401170
lea ecx, [ebp - 0x26d0]
call fcn.00402cd0
lea ecx, [ebp - 0x2738]
call fcn.00402cd0
lea ecx, [ebp - 0x27bc]
call fcn.00402cd0
lea ecx, [ebp - 0x2744]
mov byte [ebp - 4], 0x75
call fcn.00402cd0
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [edi + 0x30]
jb 0x459cd0
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45b90c
push 0
push 0x4e3b20
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea ecx, [ebp - 0x6df4]
call fcn.0046cb40
mov byte [ebp - 4], 0x7d
lea ecx, [ebp - 0x6dcc]
mov eax, dword [edi + 8]
push 0x4e3b70
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6df4], eax
lea eax, [ebp - 0x21e0]
mov dword [ebp - 0x6ddc], eax
lea eax, [edi + 0x164]
mov dword [ebp - 0x6dd8], eax
lea eax, [ebp - 0x1fc8]
mov dword [ebp - 0x6df0], 0x72
mov dword [ebp - 0x6dd4], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0x6dd0], eax
call fcn.00402c00
push 0xc
lea ecx, [ebp - 0x2284]
call fcn.00401960
lea ecx, [ebp - 0x2284]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2248]
mov byte [ebp - 4], 0x7e
call fcn.00401960
lea ecx, [ebp - 0x2248]
call fcn.00402b30
mov ecx, edi
mov byte [ebp - 4], 0x7f
call fcn.00472340
test al, al
jne 0x45b8eb
xor esi, esi
mov dword [ebp - 0x6f78], esi
cmp dword [edi + 0x30], esi
jbe 0x45a4e7
nop
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45a4e7
push esi
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402d50
cmp eax, 3
jl 0x45a4d7
lea eax, [ebp - 0x6dec]
push eax
push 1
lea ecx, [ebp - 0x2160]
call fcn.00402e90
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
mov edx, esi
mov ecx, eax
call fcn.00434db0
mov esi, dword [ebp - 0x6f78]
test al, al
je 0x45a4d7
push esi
lea ecx, [edi + 0x114]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x250c]
mov dword [ebp - 0x6de0], eax
call fcn.00402e90
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2284]
call fcn.00402df0
lea ecx, [ebp - 0x2284]
call fcn.00402e90
mov ecx, eax
call fcn.0040fb70
test al, al
je 0x45a4d7
lea ecx, [ebp - 0x2284]
call fcn.00402e90
push eax
lea eax, [ebp - 0x6df4]
mov ecx, edi
push eax
call fcn.00451370
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45a4e7
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25bc]
call fcn.00402e90
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2284]
call fcn.00402df0
lea ecx, [ebp - 0x2284]
call fcn.00402e90
mov ecx, eax
call fcn.0040fb70
test al, al
je 0x45a4d7
push 0
lea ecx, [ebp - 0x2284]
call fcn.00403100
lea ecx, [ebp - 0x2284]
call fcn.00402e90
push eax
lea eax, [ebp - 0x6df4]
mov ecx, edi
push eax
call fcn.00451370
inc esi
mov dword [ebp - 0x6f78], esi
cmp esi, dword [edi + 0x30]
jb 0x45a350
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45b8eb
lea ecx, [ebp - 0x264c]
mov dword [ebp - 0x6de0], 0x4dc450
call fcn.00402e90
push eax
lea eax, [ebp - 0x6df4]
mov ecx, edi
push eax
call fcn.00451370
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45b8eb
lea eax, [ebp - 0x2640]
push eax
lea ecx, [ebp - 0x2284]
call fcn.00402c10
push 0
lea ecx, [ebp - 0x2284]
call fcn.00403100
lea ecx, [ebp - 0x2284]
call fcn.00402e90
push eax
lea eax, [ebp - 0x6df4]
mov ecx, edi
push eax
call fcn.00451370
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45b8eb
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x45a5da
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3b90
push esi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402df0
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x45a590
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3c20
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402df0
cmp dword [ebp - 0x6fdc], 0
je 0x45a641
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e3c20
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402df0
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x45a83b
mov eax, dword [ebp - 0x6fa0]
mov esi, dword [ebp - 0x6fa8]
sub eax, esi
mov dword [ebp - 0x6fb4], eax
nop dword [eax]
push 0
push 0x20019
lea ecx, [esi + eax]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x45a819
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45a83b
lea eax, [ebp - 0x2248]
push eax
push 0x4cbcf4
lea ecx, [ebp - 0x1f74]
call fcn.004078e0
test al, al
je 0x45a819
push 0
push 1
push 1
push 0
push 0x4e3cac
lea ecx, [ebp - 0x2248]
call fcn.00403fc0
lea ecx, [ebp - 0x2248]
mov dword [ebp - 0x6f80], eax
call fcn.00402d50
mov edx, dword [ebp - 0x6f80]
lea ecx, [edx + 0xa]
cmp eax, ecx
jle 0x45a819
lea eax, [edx + 0xb]
push eax
lea ecx, [ebp - 0x2248]
call fcn.00403f10
push 3
lea ecx, [ebp - 0x2248]
call fcn.00404aa0
lea ecx, [ebp - 0x2248]
call fcn.00403170
test al, al
jne 0x45a819
push 0
push 0x4e1504
lea ecx, [ebp - 0x2248]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x45a819
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2248]
call fcn.00402e90
push eax
mov ecx, esi
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4ddac8
push 0
push 0x72
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x45a819
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402e90
mov ecx, dword [ebp - 0x6fb4]
push eax
push 0
lea ecx, [esi + ecx]
call fcn.00402e90
push eax
push 0x72
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
mov ecx, esi
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x2248]
call fcn.00402e90
push eax
push 0x4e3cc8
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
cmp eax, dword [ebp - 0x6fac]
mov dword [ebp - 0x6f8c], eax
mov eax, dword [ebp - 0x6fb4]
jb 0x45a670
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45b8eb
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x45a8ba
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3d20
push esi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402df0
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x45a870
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3d68
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402df0
cmp dword [ebp - 0x6fdc], 0
je 0x45a921
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e3d68
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402df0
push 0
push 0x4e3dac
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov esi, dword [ebp - 0x6fac]
mov dword [ebp - 0x6fb4], 0
test esi, esi
je 0x45ab6e
mov eax, dword [ebp - 0x6fa0]
mov esi, dword [ebp - 0x6fa8]
sub eax, esi
mov dword [ebp - 0x6f8c], eax
nop
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45ab68
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0x20019
lea ecx, [esi + ecx]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
lea eax, [ebp - 0x1ff4]
push eax
push 0x4ddc7c
lea ecx, [ebp - 0x1f74]
call fcn.004078e0
test al, al
je 0x45ab4c
lea eax, [ebp - 0x2184]
mov dword [ebp - 0x2184], 0
push eax
push 0x4ddd1c
lea ecx, [ebp - 0x1f74]
call fcn.00407a20
test al, al
je 0x45a9e1
cmp dword [ebp - 0x2184], 0
jne 0x45ab4c
push 0
push 1
push 1
push 0
push 0x4e357c
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x45ab4c
push eax
push 1
push 1
push eax
push 0x4e359c
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x45ab4c
push eax
push 1
push 1
push eax
push 0x4e35ec
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x45ab4c
push eax
push 1
push 1
push eax
push 0x4e35d0
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x45ab4c
push eax
push 0x4e3dec
lea ecx, [ebp - 0x1ff4]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x45ab4c
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff4]
call fcn.00402e90
push eax
mov ecx, esi
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4ddc7c
push 0
push 0x74
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x45ab4c
push 0
push 0
push 0
push 0
push 0
push 0x4ddc7c
mov ecx, esi
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
lea ecx, [esi + ecx]
call fcn.00402e90
push eax
push 0x74
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
mov ecx, esi
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x1ff4]
call fcn.00402e90
push eax
push 0x4e3e28
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x45a960
mov esi, dword [ebp - 0x6fac]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45b8eb
push 0xc
lea ecx, [ebp - 0x26c4]
call fcn.00401960
lea ecx, [ebp - 0x26c4]
call fcn.00402b30
mov byte [ebp - 4], 0x80
mov dword [ebp - 0x6fb4], 0
test esi, esi
je 0x45ae37
mov eax, dword [ebp - 0x6fa0]
mov esi, dword [ebp - 0x6fa8]
sub eax, esi
mov dword [ebp - 0x6f8c], eax
nop
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45ae31
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0x20019
lea ecx, [esi + ecx]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
lea eax, [ebp - 0x1ff4]
push eax
push 0x4dddbc
lea ecx, [ebp - 0x1f74]
call fcn.004078e0
test al, al
je 0x45ae15
lea eax, [ebp - 0x2184]
mov dword [ebp - 0x2184], 0
push eax
push 0x4ddebc
lea ecx, [ebp - 0x1f74]
call fcn.00407a20
test al, al
je 0x45ac41
cmp dword [ebp - 0x2184], 0
je 0x45ae15
push 0
push 1
push 1
push 0
push 0x4e357c
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x45ae15
push eax
push 1
push 1
push eax
push 0x4e359c
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x45ae15
push eax
push 1
push 1
push eax
push 0x4e35ec
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x45ae15
push eax
push 1
push 1
push eax
push 0x4e35d0
lea ecx, [ebp - 0x1ff4]
call fcn.00403fc0
test eax, eax
jne 0x45ae15
push eax
push 0x4e3dec
lea ecx, [ebp - 0x1ff4]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x45ae15
lea eax, [ebp - 0x26c4]
push eax
push 0x4dde88
lea ecx, [ebp - 0x1f74]
call fcn.004078e0
test al, al
je 0x45ae15
lea ecx, [ebp - 0x26c4]
call fcn.00403170
test al, al
jne 0x45ae15
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3e78
lea ecx, [ebp - 0x26c4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2248]
call fcn.00402df0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff4]
call fcn.00402e90
push eax
mov ecx, esi
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2248]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0
push 0x74
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x45ae15
push 0
push 0
push 0
push 0
push 0
push 0x4dddbc
mov ecx, esi
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
lea ecx, [esi + ecx]
call fcn.00402e90
push eax
push 0x74
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
mov ecx, esi
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x1ff4]
call fcn.00402e90
push eax
push 0x4e3ea0
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x45abc0
mov esi, dword [ebp - 0x6fac]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45b8e0
mov dword [ebp - 0x6fb4], 0
test esi, esi
je 0x45b0b7
mov esi, dword [ebp - 0x6fa8]
mov eax, dword [ebp - 0x6fa0]
sub eax, esi
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f80], eax
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45b0b7
mov eax, dword [ebp - 0x6f80]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f8c], eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x45b095
lea eax, [ebp - 0x2184]
mov dword [ebp - 0x2184], 0
push eax
push 0x4e3f00
lea ecx, [ebp - 0x1f74]
call fcn.00407a20
test al, al
je 0x45b095
cmp dword [ebp - 0x2184], 4
jne 0x45b095
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3f24
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402df0
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x45b095
lea eax, [ebp - 0x6cec]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6fa4], esi
call fcn.00407b90
test al, al
je 0x45b08f
lea eax, [ebp - 0x1ff4]
push eax
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f74]
call fcn.004078e0
test al, al
je 0x45b06d
lea ecx, [ebp - 0x1ff4]
call fcn.00403170
test al, al
jne 0x45b06d
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff4]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4de078
push 0
push 0x74
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
je 0x45b06d
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
call fcn.00402e90
push eax
push 0x74
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x1ff4]
call fcn.00402e90
push eax
push 0x4e3f50
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
lea eax, [ebp - 0x6cec]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.00407b90
test al, al
jne 0x45af60
mov dword [ebp - 0x6fa4], esi
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x45ae72
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45b8e0
push 0
push 0x4e3f98
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x45b4ab
mov esi, dword [ebp - 0x6fa8]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45b4ab
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e34e0
lea ecx, [ebp - 0x2160]
call fcn.00402e90
push eax
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00402df0
push 0x260
lea ecx, [ebp - 0x3c70]
call fcn.00409b80
push 1
lea ecx, [ebp - 0x20c0]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x3c70]
call fcn.00401120
push 3
lea ecx, [ebp - 0x20c0]
mov byte [ebp - 4], 0x81
call fcn.00403ed0
lea ecx, [ebp - 0x3c70]
call fcn.00401260
test al, al
je 0x45b483
nop word [eax + eax]
push 1
lea ecx, [ebp - 0x3c70]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x201c]
call fcn.00402c00
push 0x4e351c
lea ecx, [ebp - 0x201c]
call fcn.00402c70
test al, al
je 0x45b1ee
push 0
push 1
push 1
push 0
push 0x4e352c
lea ecx, [ebp - 0x201c]
call fcn.00403fc0
cmp eax, 1
jne 0x45b470
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3540
push 1
lea ecx, [ebp - 0x3c70]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x201c]
call fcn.00402df0
lea ecx, [ebp - 0x201c]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
je 0x45b32f
push 0
push 0x4e2ce0
push 0x4de17c
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x45b32f
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x201c]
call fcn.00402e90
push eax
mov ecx, esi
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4de17c
push 0
push 0x73
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x45b470
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402e90
push eax
lea ecx, [ebp - 0x201c]
call fcn.00402e90
push eax
push 0
push 0x73
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3fd0
lea ecx, [ebp - 0x201c]
call fcn.00402e90
push eax
push 0x4e2d1c
mov ecx, esi
call fcn.00402e90
push eax
push 0x4e1674
push 0x4de17c
push 0x4e4008
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
push 0
push 0x4e2ce0
push 0x4de278
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x45b470
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e402c
push 1
lea ecx, [ebp - 0x3c70]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x201c]
call fcn.00402df0
lea ecx, [ebp - 0x201c]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
je 0x45b470
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x201c]
call fcn.00402e90
push eax
mov ecx, esi
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4de278
push 0
push 0x73
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x45b470
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402e90
push eax
lea ecx, [ebp - 0x201c]
call fcn.00402e90
push eax
push 0
push 0x73
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3fd0
lea ecx, [ebp - 0x201c]
call fcn.00402e90
push eax
push 0x4e2d1c
mov ecx, esi
call fcn.00402e90
push eax
push 0x4e1674
push 0x4de278
push 0x4e4008
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
lea ecx, [ebp - 0x3c70]
call fcn.00401220
test al, al
jne 0x45b1a0
lea ecx, [ebp - 0x3c70]
mov byte [ebp - 4], 0x80
call fcn.00401170
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [edi + 0x30]
jb 0x45b0f2
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45b8e0
lea eax, [ebp - 0x22d0]
push eax
lea ecx, [ebp - 0x201c]
call fcn.00402c10
push 1
lea ecx, [ebp - 0x201c]
call fcn.00403100
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4048
lea ecx, [ebp - 0x201c]
call fcn.00404260
lea ecx, [ebp - 0x201c]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
je 0x45b691
push 0
push 0x4e2ce0
push 0x4de348
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x45b691
push 0
lea ecx, [ebp - 0x201c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2548]
call fcn.00410240
test al, al
je 0x45b691
lea eax, [ebp - 0x2a2c]
push eax
push 0x4cde84
push 0x4e3568
lea ecx, [ebp - 0x2548]
call fcn.00410950
test al, al
jne 0x45b5d9
lea eax, [ebp - 0x2a2c]
push eax
push 0x4cde84
push 0x4e36a8
lea ecx, [ebp - 0x2548]
call fcn.00410950
test al, al
jne 0x45b5d9
lea eax, [ebp - 0x2a2c]
push eax
push 0x4cde84
push 0x4dd900
lea ecx, [ebp - 0x2548]
call fcn.00410950
test al, al
jne 0x45b5d9
lea eax, [ebp - 0x2a2c]
push eax
push 0x4cde84
push 0x4e3a20
lea ecx, [ebp - 0x2548]
call fcn.00410950
test al, al
je 0x45b691
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x201c]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dc450
push 0x4de348
push 0
push 0x73
push dword [eax + 0xa8]
call fcn.004452b0
mov esi, eax
cmp esi, 0xffffffff
je 0x45b691
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dc450
lea ecx, [ebp - 0x201c]
call fcn.00402e90
push eax
push 0
push 0x73
push esi
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
lea ecx, [ebp - 0x201c]
call fcn.00402e90
push eax
push 0x4e2d1c
push 0x4e23a4
push 0x4e4070
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
push 0
push 0x4e2ce0
push 0x4de448
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x45b8e0
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x45b711
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3d20
push esi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402df0
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x45b6c7
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3d20
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402df0
cmp dword [ebp - 0x6fdc], 0
je 0x45b778
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e3d20
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402df0
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6fb4], 0
jbe 0x45b8bc
mov eax, dword [ebp - 0x6fa8]
sub eax, esi
mov dword [ebp - 0x6f8c], eax
nop dword [eax]
mov ecx, esi
call fcn.00402e90
xor edx, edx
mov ecx, eax
call fcn.00409350
test al, al
je 0x45b8a0
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45b8bc
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
lea ecx, [ecx + esi]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4de448
push 0
push 0x73
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x45b8a0
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ecx + esi]
call fcn.00402e90
push eax
push 0
mov ecx, esi
call fcn.00402e90
push eax
push 0x73
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3fd0
mov ecx, esi
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4e2d1c
lea ecx, [ecx + esi]
call fcn.00402e90
push eax
push 0x4e1674
push 0x4de448
push 0x4e4008
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x45b7a0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004209d0
push 1
push 0
push 0
lea ecx, [ebp - 0x21e0]
call fcn.004025c0
lea ecx, [ebp - 0x26c4]
call fcn.00402cd0
lea ecx, [ebp - 0x2248]
call fcn.00402cd0
lea ecx, [ebp - 0x2284]
call fcn.00402cd0
lea ecx, [ebp - 0x6df4]
call fcn.0046cb70
lea ecx, [ebp - 0x2548]
call fcn.0042dbd0
lea ecx, [ebp - 0x22d0]
call fcn.00402cd0
lea ecx, [ebp - 0x1ff4]
call fcn.00402cd0
lea ecx, [ebp - 0x2400]
call fcn.00402cd0
lea ecx, [ebp - 0x201c]
call fcn.00402cd0
lea ecx, [ebp - 0x20c0]
mov byte [ebp - 4], 0x46
call fcn.00402cd0
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45ecbd
test dword [edi + 0x34], 0x1000
jne 0x45ecbd
push 0
push 0x4e40c8
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x4e4108
push dword [eax + 0x38]
call fcn.0041f260
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x28
push dword [eax + 0x34]
call fcn.004219b0
mov eax, dword [edi + 0x30]
xor esi, esi
mov dword [ebp - 0x7020], 0x4e4144
mov dword [ebp - 0x701c], 0x4e4154
mov dword [ebp - 0x7018], 0x4e4164
mov dword [ebp - 0x7014], 0x4e417c
mov dword [ebp - 0x7010], 0x4e4190
mov dword [ebp - 0x700c], 0x4d4670
mov dword [ebp - 0x7008], 0x4e35b8
mov dword [ebp - 0x7004], 0x4e35ec
mov dword [ebp - 0x6ffc], 0x4de514
mov dword [ebp - 0x6ff8], 0x4de550
mov dword [ebp - 0x6ff4], 0x4de538
mov dword [ebp - 0x6ff0], 0x4d4658
mov dword [ebp - 0x6fec], 0x4de5d4
mov dword [ebp - 0x6fe8], 0x4de654
test eax, eax
je 0x45ba9a
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d4600
push esi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402df0
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x45ba50
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e41a8
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402df0
cmp dword [ebp - 0x6fdc], 0
je 0x45bb01
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e41a8
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402df0
push 0xc
lea ecx, [ebp - 0x2004]
call fcn.00401960
lea ecx, [ebp - 0x2004]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x23f4]
mov byte [ebp - 4], 0x82
call fcn.00401960
lea ecx, [ebp - 0x23f4]
call fcn.00402b30
mov byte [ebp - 4], 0x83
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004209d0
push 0
push 0x4e4200
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov esi, dword [ebp - 0x6fac]
mov dword [ebp - 0x6fb4], 0
test esi, esi
je 0x45bd93
mov esi, dword [ebp - 0x6fa8]
mov eax, dword [ebp - 0x6fa0]
sub eax, esi
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f80], eax
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45bd8d
mov eax, dword [ebp - 0x6f80]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6fcc], eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x45bd6b
xor esi, esi
lea eax, [ebp - 0x2004]
push eax
push dword [ebp + esi*4 - 0x6ffc]
lea ecx, [ebp - 0x1f74]
call fcn.004078e0
test al, al
je 0x45bd55
lea ecx, [ebp - 0x2004]
call fcn.00403170
test al, al
jne 0x45bd55
push 0
push 0x4e425c
lea ecx, [ebp - 0x2004]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x45bd55
xor eax, eax
mov dword [ebp - 0x6f8c], eax
nop
push 0
push 1
push 1
push 0
push dword [ebp + eax*4 - 0x7020]
lea ecx, [ebp - 0x2004]
call fcn.00403fc0
dec eax
cmp eax, 0x10
jbe 0x45bd55
mov eax, dword [ebp - 0x6f8c]
inc eax
mov dword [ebp - 0x6f8c], eax
cmp eax, 8
jb 0x45bc30
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2004]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402e90
push eax
push dword [ebp + esi*4 - 0x6ffc]
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x1f
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f8c], eax
cmp eax, 0xffffffff
je 0x45bd55
push 0
push 0
push 0
lea ecx, [ebp - 0x2004]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
push 0
push dword [ebp + esi*4 - 0x6ffc]
call fcn.00402e90
mov ecx, dword [ebp - 0x6fcc]
push eax
push 0
call fcn.00402e90
push eax
push 0x1f
push dword [ebp - 0x6f8c]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
lea ecx, [ebp - 0x2004]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x4e4280
call fcn.00402e90
push eax
push 0x4e1674
push dword [ebp + esi*4 - 0x6ffc]
lea ecx, [ebp - 0x1f80]
push 0x4e22b0
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
inc esi
cmp esi, 6
jb 0x45bbd1
mov dword [ebp - 0x6fa4], esi
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x45bb90
mov esi, dword [ebp - 0x6fac]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45eca3
push 0x18
lea ecx, [ebp - 0x2694]
call fcn.00401e20
lea ecx, [ebp - 0x2694]
call fcn.00405380
mov byte [ebp - 4], 0x84
mov dword [ebp - 0x6fb4], 0
test esi, esi
je 0x45c086
mov esi, dword [ebp - 0x6fa8]
mov eax, dword [ebp - 0x6fa0]
sub eax, esi
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f80], eax
nop word [eax + eax]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45c086
mov eax, dword [ebp - 0x6f80]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6fcc], eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
lea ecx, [ebp - 0x1f74]
call fcn.00405540
test eax, eax
je 0x45c064
lea eax, [ebp - 0x2004]
push eax
push 0x4d471c
lea ecx, [ebp - 0x1f74]
call fcn.004078e0
test al, al
je 0x45c064
push 1
push 0x4cbcd8
lea ecx, [ebp - 0x2004]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2694]
call fcn.004055a0
xor esi, esi
lea ecx, [ebp - 0x2694]
mov dword [ebp - 0x6fa4], esi
call fcn.00405540
test eax, eax
je 0x45c05e
push esi
lea ecx, [ebp - 0x2694]
call fcn.00405530
push eax
lea ecx, [ebp - 0x2004]
call fcn.00402c00
lea ecx, [ebp - 0x2004]
call fcn.00403170
test al, al
jne 0x45c044
xor eax, eax
mov dl, 1
mov dword [ebp - 0x6f8c], eax
push 0
push 1
push 1
push 0
push dword [ebp + eax*4 - 0x7020]
lea ecx, [ebp - 0x2004]
mov byte [ebp - 0x6f81], dl
call fcn.00403fc0
dec eax
lea ecx, [ebp - 0x2004]
cmp eax, 0x10
jbe 0x45c030
push 0
push 0x4e425c
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
movzx ecx, byte [ebp - 0x6f81]
xor edx, edx
test al, al
cmove edx, ecx
test dl, dl
je 0x45c044
mov eax, dword [ebp - 0x6f8c]
inc eax
mov dword [ebp - 0x6f8c], eax
cmp eax, 7
jb 0x45bec7
test dl, dl
je 0x45c044
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2004]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4d471c
push 1
push 0x1f
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f8c], eax
cmp eax, 0xffffffff
je 0x45c044
push 0
push 0
lea ecx, [ebp - 0x2004]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2004]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
push 0
push 0x4d471c
call fcn.00402e90
mov ecx, dword [ebp - 0x6fcc]
push eax
push 0
call fcn.00402e90
push eax
push 0x1f
push dword [ebp - 0x6f8c]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
lea ecx, [ebp - 0x2004]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x4e4280
call fcn.00402e90
push eax
push 0x4e1674
push 0x4d471c
push 0x4e22b0
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
jmp 0x45c044
call fcn.00402e90
push 0
push 0x4e425c
push eax
mov ecx, edi
call fcn.0046de60
lea ecx, [ebp - 0x2694]
inc esi
call fcn.00405540
cmp esi, eax
jb 0x45be92
mov dword [ebp - 0x6fa4], esi
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x45bdf0
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45ec98
push 4
lea ecx, [ebp - 0x1fd8]
call fcn.00405950
lea ecx, [ebp - 0x1fd8]
call fcn.00406220
push 4
lea ecx, [ebp - 0x2078]
mov byte [ebp - 4], 0x85
call fcn.00405950
lea ecx, [ebp - 0x2078]
call fcn.00406220
mov byte [ebp - 4], 0x86
xor esi, esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x45c132
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d4aa8
push esi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402df0
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x45c0e8
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4298
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402df0
cmp dword [ebp - 0x6fdc], 0
je 0x45c199
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e4298
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402df0
push 0xc
lea ecx, [ebp - 0x20fc]
call fcn.00401960
lea ecx, [ebp - 0x20fc]
call fcn.00402b30
push 0
push 0x4e4300
lea ecx, [ebp - 0x1fc8]
mov byte [ebp - 4], 0x87
call fcn.0040e530
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6fb4], 0
jbe 0x45c504
mov esi, dword [ebp - 0x6fa8]
mov eax, dword [ebp - 0x6fa0]
sub eax, esi
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f80], eax
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45c504
mov eax, dword [ebp - 0x6f80]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6fcc], eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x45c4e2
lea eax, [ebp - 0x6cec]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6fa4], esi
call fcn.00407b10
test al, al
je 0x45c4dc
nop word [eax + eax]
mov ecx, dword [ebp - 0x6fcc]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
push 0x4cbcec
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402df0
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1fd8]
call fcn.00407730
test al, al
je 0x45c4ba
lea eax, [ebp - 0x20fc]
push eax
push 0x4d0434
lea ecx, [ebp - 0x1fd8]
call fcn.004078e0
push 0
lea ecx, [ebp - 0x20fc]
call fcn.00402cc0
cmp word [eax], 0x40
jne 0x45c327
push 0
lea ecx, [ebp - 0x20fc]
call fcn.00402e90
push eax
push 0x80
lea ecx, [ebp - 0x20fc]
call fcn.004033e0
push 0
push 0x80
lea ecx, [ebp - 0x20fc]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x20fc]
call fcn.00402e90
push eax
call dword [0x4ac488]
lea eax, [ebp - 0x2004]
push eax
push 0x4d69b0
lea ecx, [ebp - 0x1fd8]
call fcn.004078e0
lea ecx, [ebp - 0x20fc]
call fcn.00403170
test al, al
je 0x45c360
lea ecx, [ebp - 0x2004]
call fcn.00403170
test al, al
jne 0x45c4ba
push 0
push 0x4e4354
lea ecx, [ebp - 0x2004]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x45c4ba
xor eax, eax
mov dword [ebp - 0x6f8c], eax
nop word [eax + eax]
push 0
push 1
push 1
push 0
push dword [ebp + eax*4 - 0x7020]
lea ecx, [ebp - 0x2004]
call fcn.00403fc0
dec eax
cmp eax, 0x10
jbe 0x45c4ba
mov eax, dword [ebp - 0x6f8c]
inc eax
mov dword [ebp - 0x6f8c], eax
cmp eax, 7
jb 0x45c390
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2004]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x20fc]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x20
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f8c], eax
cmp eax, 0xffffffff
je 0x45c4ba
push 0
push 0
push 0
lea ecx, [ebp - 0x2004]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
push 0
push 0
call fcn.00402e90
push eax
push 0
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
push 0x20
push dword [ebp - 0x6f8c]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
lea ecx, [ebp - 0x2004]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x4e4280
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x20fc]
call fcn.00402e90
push eax
push 0x4e22b0
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
lea eax, [ebp - 0x6cec]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.00407b10
test al, al
jne 0x45c260
mov dword [ebp - 0x6fa4], esi
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x45c1f8
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45ec77
push 0
push 0x4e437c
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
push 0xc
lea ecx, [ebp - 0x20a8]
call fcn.00401960
lea ecx, [ebp - 0x20a8]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x23a0]
mov byte [ebp - 4], 0x88
call fcn.00401960
lea ecx, [ebp - 0x23a0]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x20d8]
mov byte [ebp - 4], 0x89
call fcn.00401960
lea ecx, [ebp - 0x20d8]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2210]
mov byte [ebp - 4], 0x8a
call fcn.00401960
lea ecx, [ebp - 0x2210]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x23ac]
mov byte [ebp - 4], 0x8b
call fcn.00401960
lea ecx, [ebp - 0x23ac]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x20b4]
mov byte [ebp - 4], 0x8c
call fcn.00401960
lea ecx, [ebp - 0x20b4]
call fcn.00402b30
push 0xfc8
lea ecx, [ebp - 0x68b8]
mov byte [ebp - 4], 0x8d
call fcn.0040b490
lea ecx, [ebp - 0x68b8]
call fcn.004095e0
mov byte [ebp - 4], 0x8e
xor esi, esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x45c651
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dea60
push esi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402df0
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x45c607
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4ded30
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402df0
cmp dword [ebp - 0x6fdc], 0
je 0x45c6b8
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4ded30
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402df0
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x45cbd0
mov esi, dword [ebp - 0x6fa8]
mov eax, dword [ebp - 0x6fa0]
sub eax, esi
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f80], eax
nop dword [eax]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45cbd0
mov ecx, dword [ebp - 0x6f80]
push 1
lea ecx, [esi + ecx]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402da0
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x45cbae
lea eax, [ebp - 0x6cec]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6fa4], esi
call fcn.00407b90
test al, al
je 0x45cba8
mov ecx, dword [ebp - 0x6cec]
call fcn.00408d60
test al, al
je 0x45cb86
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
lea ecx, [edi + 0x33c]
push 0x4e43bc
call fcn.00402e90
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00402df0
lea ecx, [ebp - 0x20b4]
call fcn.00402e90
xor edx, edx
mov ecx, eax
call fcn.00409350
test al, al
jne 0x45cb86
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00402df0
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x20b4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x23a0]
call fcn.00403fc0
test eax, eax
jne 0x45cb86
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x23a0]
call fcn.00404260
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x23ac]
call fcn.00402c00
lea eax, [ebp - 0x20a8]
mov ecx, edi
push eax
lea eax, [ebp - 0x20d8]
push eax
lea eax, [ebp - 0x23ac]
push eax
call fcn.0046cc60
lea ecx, [ebp - 0x20d8]
call fcn.00403170
test al, al
je 0x45c88e
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x20d8]
call fcn.00402c00
push 0
push 0x4e43d4
lea ecx, [ebp - 0x20d8]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x45cb86
push 0
push 1
push 1
push 0
push 0x4e43e8
lea ecx, [ebp - 0x20d8]
call fcn.00403fc0
cmp eax, 1
je 0x45cb86
push 0
push 1
push 1
push 0
push 0x4e4404
lea ecx, [ebp - 0x20d8]
call fcn.00403fc0
cmp eax, 1
je 0x45cb86
push 0
push 1
push 1
push 0
push 0x4cbcf4
lea ecx, [ebp - 0x20d8]
call fcn.00403fc0
cmp eax, 1
je 0x45cb86
lea ecx, [ebp - 0x20a8]
call fcn.00403170
lea ecx, [ebp - 0x20a8]
test al, al
je 0x45c934
push 0x4e4428
call fcn.00402c00
jmp 0x45c954
push 0
push 0
push 0x4cbcf4
push 0x4cc5d8
call fcn.004047c0
push 0
lea ecx, [ebp - 0x20a8]
call fcn.004032b0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f8c]
push 0x4cfae0
call fcn.00402e90
push eax
lea ecx, [ebp - 0x213c]
call fcn.00402df0
push 0
lea ecx, [ebp - 0x213c]
call fcn.00402e90
push eax
lea eax, [ebp - 0x20a8]
mov ecx, edi
push eax
call fcn.0046e590
lea ecx, [ebp - 0x20a8]
call fcn.00402e90
push eax
push 0
call dword [0x4ac80c]
test eax, eax
jne 0x45cb86
lea ecx, [ebp - 0x20a8]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x68b8]
call fcn.00409780
test al, al
je 0x45ca84
push 0x4cbcf4
push str.CompanyName
lea ecx, [ebp - 0x68b8]
call fcn.00409690
push eax
lea ecx, [ebp - 0x2210]
call fcn.00402c00
push 0
push 1
push 1
push 0
push str.Microsoft
lea ecx, [ebp - 0x2210]
call fcn.00403fc0
cmp eax, 1
je 0x45cb86
push 0
push 1
push 1
push 0
push 0x4e4484
lea ecx, [ebp - 0x2210]
call fcn.00403fc0
cmp eax, 1
je 0x45cb86
push 0
push 1
push 1
push 0
push 0x4e44a0
lea ecx, [ebp - 0x2210]
call fcn.00403fc0
cmp eax, 1
je 0x45cb86
push 0
push 1
push 1
push 0
push 0x4d6a28
lea ecx, [ebp - 0x2210]
call fcn.00403fc0
cmp eax, 1
je 0x45cb86
push 0
lea ecx, [ebp - 0x20a8]
call fcn.00402e90
push eax
push 0
push 1
lea ecx, [ebp - 0x20a8]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x20d8]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x21
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
je 0x45cb86
mov ecx, dword [ebp - 0x6f78]
push 0
push dword [ebp - 0x6cec]
push 0
push 0
push 0
push 0
call fcn.00402e90
push eax
lea ecx, [ebp - 0x20a8]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
push 0x21
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
lea ecx, [ebp - 0x20a8]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x4e44c8
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x20d8]
call fcn.00402e90
push eax
push 0x4e22b0
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
lea eax, [ebp - 0x6cec]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.00407b90
test al, al
jne 0x45c764
mov dword [ebp - 0x6fa4], esi
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x45c6f0
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45ec2a
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x45cc4a
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
nop word [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dc588
push esi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402df0
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x45cc00
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dc5e0
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402df0
cmp dword [ebp - 0x6fdc], 0
je 0x45ccb1
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4dc5e0
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402df0
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6ff8], 0x4e44e0
mov dword [ebp - 0x6ff4], 0x4e4520
mov dword [ebp - 0x6ff0], 0x4e4540
mov dword [ebp - 0x6fec], 0x4e455c
mov dword [ebp - 0x6fe8], 0x4e4578
mov dword [ebp - 0x6fb4], 0
jbe 0x45d2b3
mov ecx, dword [ebp - 0x6fa8]
mov eax, esi
sub eax, ecx
mov dword [ebp - 0x6f78], ecx
mov dword [ebp - 0x6f80], eax
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45d2b3
xor esi, esi
mov dword [ebp - 0x6fa4], esi
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45d293
mov ecx, dword [ebp - 0x6f80]
add ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + esi*4 - 0x6ff8]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402df0
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x45d283
lea eax, [ebp - 0x6cec]
mov dword [ebp - 0x6f8c], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.00407b10
test al, al
je 0x45d283
mov esi, dword [ebp - 0x6f78]
mov ecx, dword [ebp - 0x6cec]
call fcn.00408d60
test al, al
je 0x45d255
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
lea ecx, [edi + 0x33c]
push 0x4e43bc
call fcn.00402e90
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00402df0
lea ecx, [ebp - 0x20b4]
call fcn.00402e90
xor edx, edx
mov ecx, eax
call fcn.00409350
test al, al
jne 0x45d255
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
mov ecx, esi
call fcn.00402e90
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00402df0
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x20b4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x23a0]
call fcn.00403fc0
test eax, eax
jne 0x45d255
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x23a0]
call fcn.00404260
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x23ac]
call fcn.00402c00
lea eax, [ebp - 0x20a8]
mov ecx, edi
push eax
lea eax, [ebp - 0x20d8]
push eax
lea eax, [ebp - 0x23ac]
push eax
call fcn.0046cc60
lea ecx, [ebp - 0x20d8]
call fcn.00403170
lea ecx, [ebp - 0x20d8]
test al, al
je 0x45ceeb
push dword [ebp - 0x6cec]
call fcn.00402c00
jmp 0x45cfab
push 0
push 1
push 1
push 0
push 0x4e43e8
call fcn.00403fc0
cmp eax, 1
je 0x45d255
push 0
push 1
push 1
push 0
push 0x4e4404
lea ecx, [ebp - 0x20d8]
call fcn.00403fc0
cmp eax, 1
je 0x45d255
push 0
push 1
push 1
push 0
push 0x4e458c
lea ecx, [ebp - 0x20d8]
call fcn.00403fc0
cmp eax, 1
je 0x45d255
push 0
push 1
push 1
push 0
push 0x4e45a8
lea ecx, [ebp - 0x20d8]
call fcn.00403fc0
cmp eax, 1
je 0x45d255
push 0
push 1
push 1
push 0
push 0x4e45d0
lea ecx, [ebp - 0x20d8]
call fcn.00403fc0
cmp eax, 1
je 0x45d255
push 0
push 1
push 1
push 0
push 0x4e45f0
lea ecx, [ebp - 0x20d8]
call fcn.00403fc0
cmp eax, 1
je 0x45d255
push 0
push 0x4e43d4
lea ecx, [ebp - 0x20d8]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x45d255
lea ecx, [ebp - 0x20a8]
call fcn.00403170
lea ecx, [ebp - 0x20a8]
test al, al
je 0x45cfee
push 0x4e4428
call fcn.00402c00
jmp 0x45d00e
push 0
push 0
push 0x4cbcf4
push 0x4cc5d8
call fcn.004047c0
push 0
lea ecx, [ebp - 0x20a8]
call fcn.004032b0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f8c]
push 0x4cbcec
call fcn.00402e90
push eax
lea ecx, [ebp - 0x213c]
call fcn.00402df0
push 0
lea ecx, [ebp - 0x213c]
call fcn.00402e90
push eax
lea eax, [ebp - 0x20a8]
mov ecx, edi
push eax
call fcn.0046e590
lea ecx, [ebp - 0x20a8]
call fcn.00402e90
push eax
push 0
call dword [0x4ac80c]
test eax, eax
jne 0x45d255
lea ecx, [ebp - 0x20a8]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x68b8]
call fcn.00409780
test al, al
je 0x45d15f
push 0x4cbcf4
push str.CompanyName
lea ecx, [ebp - 0x68b8]
call fcn.00409690
push eax
lea ecx, [ebp - 0x2210]
call fcn.00402c00
push 0
push 1
push 1
push 0
push str.Microsoft
lea ecx, [ebp - 0x2210]
call fcn.00403fc0
cmp eax, 1
je 0x45d255
push 0
push 1
push 1
push 0
push 0x4e4484
lea ecx, [ebp - 0x2210]
call fcn.00403fc0
cmp eax, 1
je 0x45d255
push 0
push 1
push 1
push 0
push 0x4e44a0
lea ecx, [ebp - 0x2210]
call fcn.00403fc0
cmp eax, 1
je 0x45d255
push 0
push 1
push 1
push 0
push 0x4e4620
lea ecx, [ebp - 0x2210]
call fcn.00403fc0
cmp eax, 1
je 0x45d255
push 0
push 1
push 1
push 0
push 0x4d6a28
lea ecx, [ebp - 0x2210]
call fcn.00403fc0
cmp eax, 1
je 0x45d255
push 0
lea ecx, [ebp - 0x20a8]
call fcn.00402e90
push eax
push 0
push 1
lea ecx, [ebp - 0x20a8]
call fcn.00402e90
push eax
mov ecx, esi
call fcn.00402e90
push eax
lea ecx, [ebp - 0x20d8]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x21
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
je 0x45d255
push 0
push dword [ebp - 0x6cec]
mov ecx, esi
push 0
push 0
push 0
push 0
call fcn.00402e90
push eax
lea ecx, [ebp - 0x20a8]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00402e90
push eax
push 0x21
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
lea ecx, [ebp - 0x20a8]
call fcn.00402e90
push eax
push 0x4e44c8
mov ecx, esi
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x20d8]
call fcn.00402e90
push eax
push 0x4e22b0
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
mov eax, dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x6cec]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f8c], eax
call fcn.00407b10
test al, al
jne 0x45cdc0
mov esi, dword [ebp - 0x6fa4]
inc esi
mov dword [ebp - 0x6fa4], esi
cmp esi, 5
jb 0x45cd27
mov esi, dword [ebp - 0x6fb4]
add dword [ebp - 0x6f78], 0xc
inc esi
mov dword [ebp - 0x6fb4], esi
cmp esi, dword [ebp - 0x6fac]
jb 0x45cd10
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45ec2a
push 0
push 0x4e4640
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea ecx, [ebp - 0x6e6c]
call fcn.0046cb40
mov byte [ebp - 4], 0x8f
lea ecx, [ebp - 0x6e64]
mov eax, dword [edi + 8]
push 0x4d34ec
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6e6c], eax
mov dword [ebp - 0x6e68], 0x23
call fcn.00402c00
lea eax, [ebp - 0x21e0]
mov dword [ebp - 0x6e54], eax
lea ecx, [ebp - 0x6e44]
lea eax, [edi + 0x164]
mov dword [ebp - 0x6e50], eax
lea eax, [ebp - 0x1fc8]
mov dword [ebp - 0x6e4c], eax
mov eax, dword [edi + 4]
push 0x4d3520
mov dword [ebp - 0x6e48], eax
call fcn.00402c00
push 0xc
lea ecx, [ebp - 0x22c0]
call fcn.00401960
lea ecx, [ebp - 0x22c0]
call fcn.00402b30
xor esi, esi
mov byte [ebp - 4], 0x90
cmp dword [edi + 0x30], esi
jbe 0x45d4bc
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45d4bc
push esi
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402d50
cmp eax, 3
jl 0x45d4b2
push esi
lea ecx, [edi + 0x114]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x250c]
mov dword [ebp - 0x6e58], eax
call fcn.00402e90
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x22c0]
call fcn.00402df0
lea ecx, [ebp - 0x22c0]
call fcn.00402e90
mov ecx, eax
call fcn.0040fb70
test al, al
je 0x45d4b2
lea ecx, [ebp - 0x22c0]
call fcn.00402e90
push eax
lea eax, [ebp - 0x6e6c]
mov ecx, edi
push eax
call fcn.00451370
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45d4bc
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25bc]
call fcn.00402e90
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x22c0]
call fcn.00402df0
lea ecx, [ebp - 0x22c0]
call fcn.00402e90
mov ecx, eax
call fcn.0040fb70
test al, al
je 0x45d4b2
push 0
lea ecx, [ebp - 0x22c0]
call fcn.00403100
lea ecx, [ebp - 0x22c0]
call fcn.00402e90
push eax
lea eax, [ebp - 0x6e6c]
mov ecx, edi
push eax
call fcn.00451370
inc esi
cmp esi, dword [edi + 0x30]
jb 0x45d370
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45ec14
lea ecx, [ebp - 0x264c]
mov dword [ebp - 0x6e58], 0x4dc450
call fcn.00402e90
push eax
lea eax, [ebp - 0x6e6c]
mov ecx, edi
push eax
call fcn.00451370
mov ecx, edi
call fcn.00472340
lea ecx, [ebp - 0x22c0]
test al, al
jne 0x45ec1a
lea eax, [ebp - 0x2640]
push eax
call fcn.00402c10
push 0
lea ecx, [ebp - 0x22c0]
call fcn.00403100
lea ecx, [ebp - 0x22c0]
call fcn.00402e90
push eax
lea eax, [ebp - 0x6e6c]
mov ecx, edi
push eax
call fcn.00451370
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45ec14
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x45d5ab
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4688
push esi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402df0
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x45d561
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4710
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402df0
cmp dword [ebp - 0x6fdc], 0
je 0x45d612
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e4710
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402df0
mov edx, dword [ebp - 0x6fac]
test edx, edx
je 0x45d7f0
mov eax, dword [ebp - 0x6fa0]
mov esi, dword [ebp - 0x6fa8]
sub eax, esi
mov dword [ebp - 0x6fb4], eax
mov dword [ebp - 0x6f8c], edx
nop word [eax + eax]
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x45d7da
lea eax, [ebp - 0x20b4]
push eax
push 0x4cbcf4
lea ecx, [ebp - 0x1f74]
call fcn.004078e0
test al, al
je 0x45d7da
push 0
push 1
push 1
push 0
push 0x4e4798
lea ecx, [ebp - 0x20b4]
call fcn.00403fc0
lea ecx, [ebp - 0x20b4]
mov dword [ebp - 0x6f80], eax
call fcn.00402d50
mov edx, dword [ebp - 0x6f80]
lea ecx, [edx + 0xc]
cmp eax, ecx
jle 0x45d7da
lea eax, [edx + 0xd]
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00403f10
push 3
lea ecx, [ebp - 0x20b4]
call fcn.00404aa0
lea ecx, [ebp - 0x20b4]
call fcn.00403170
test al, al
jne 0x45d7da
push 0
push 0x4e15c4
lea ecx, [ebp - 0x20b4]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x45d7da
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x20b4]
call fcn.00402e90
push eax
mov ecx, esi
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4ddac8
push 1
push 0x23
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x45d7da
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402e90
mov ecx, dword [ebp - 0x6fb4]
push eax
push 0
lea ecx, [esi + ecx]
call fcn.00402e90
push eax
push 0x23
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
mov ecx, esi
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x20b4]
call fcn.00402e90
push eax
push 0x4e3cc8
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
sub dword [ebp - 0x6f8c], 1
jne 0x45d640
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45ec14
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x45d86a
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
nop word [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e47b8
push esi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402df0
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x45d820
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4818
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402df0
cmp dword [ebp - 0x6fdc], 0
je 0x45d8d1
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e4818
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402df0
push 0
push 0x4e4878
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov esi, dword [ebp - 0x6fac]
mov dword [ebp - 0x6f8c], 0
test esi, esi
je 0x45ddbf
mov esi, dword [ebp - 0x6fa8]
mov eax, dword [ebp - 0x6fa0]
sub eax, esi
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6fb4], eax
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45ddb9
mov eax, dword [edi + 0x30]
cmp eax, 2
jbe 0x45d93b
add eax, 0xfffffffe
cmp dword [ebp - 0x6f8c], eax
je 0x45dd97
mov ecx, dword [ebp - 0x6fb4]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
add ecx, esi
push 0x4e48cc
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402df0
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x45dd97
lea eax, [ebp - 0x26d8]
mov dword [ebp - 0x26d8], 0
push eax
push 0x4d45ec
lea ecx, [ebp - 0x1f74]
call fcn.00407a20
test al, al
je 0x45dd97
cmp dword [ebp - 0x26d8], 0
je 0x45dd97
mov ecx, dword [ebp - 0x6fb4]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e48e8
lea ecx, [esi + ecx]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402df0
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x45dd97
lea eax, [ebp - 0x2004]
push eax
push 0x4d4658
lea ecx, [ebp - 0x1f74]
call fcn.004078e0
test al, al
je 0x45db8a
lea ecx, [ebp - 0x2004]
call fcn.00403170
test al, al
jne 0x45db8a
push 0
push 0x4e48f4
lea ecx, [ebp - 0x2004]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x45db8a
xor esi, esi
push 0
push 1
push 1
push 0
push dword [ebp + esi*4 - 0x7020]
lea ecx, [ebp - 0x2004]
call fcn.00403fc0
dec eax
cmp eax, 0x10
jbe 0x45db84
inc esi
cmp esi, 7
jb 0x45da78
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2004]
call fcn.00402e90
mov esi, dword [ebp - 0x6f78]
mov ecx, esi
push eax
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4d4658
push 1
push 0x25
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x45db8a
push 0
push 0
push 0
lea ecx, [ebp - 0x2004]
call fcn.00402e90
push eax
push 0
push 0x4d4658
mov ecx, esi
call fcn.00402e90
push eax
push 0
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
push 0x25
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
lea ecx, [ebp - 0x2004]
call fcn.00402e90
push eax
push 0x4e4280
mov ecx, esi
call fcn.00402e90
push eax
push 0x4e1674
push 0x4e4918
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
jmp 0x45db8a
mov esi, dword [ebp - 0x6f78]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45ddb9
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d46f0
lea ecx, [ebp - 0x1f8c]
call fcn.00404260
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x45dd97
lea eax, [ebp - 0x6cec]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6fa4], esi
call fcn.00407b90
test al, al
je 0x45dd91
nop dword [eax + eax]
mov eax, dword [ebp - 0x6cec]
cmp word [eax], 0
je 0x45dd6f
push eax
lea ecx, [ebp - 0x2004]
call fcn.00402c00
push 0
push 0x4e48f4
lea ecx, [ebp - 0x2004]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x45dd8b
xor eax, eax
mov dword [ebp - 0x6f9c], eax
push 0
push 1
push 1
push 0
push dword [ebp + eax*4 - 0x7020]
lea ecx, [ebp - 0x2004]
call fcn.00403fc0
dec eax
cmp eax, 0x10
jbe 0x45dd6f
mov eax, dword [ebp - 0x6f9c]
inc eax
mov dword [ebp - 0x6f9c], eax
cmp eax, 7
jb 0x45dc56
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2004]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4defe8
push 1
push 0x25
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x45dd6f
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2004]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402e90
push eax
push 0
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
push 0x25
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
lea ecx, [ebp - 0x2004]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x4e4280
call fcn.00402e90
push eax
push 0x4e1674
push 0x4e4944
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
lea eax, [ebp - 0x6cec]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.00407b90
test al, al
jne 0x45dc10
mov dword [ebp - 0x6fa4], esi
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x45d915
mov esi, dword [ebp - 0x6fac]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45ec14
mov dword [ebp - 0x6f8c], 0
test esi, esi
je 0x45e204
mov esi, dword [ebp - 0x6fa8]
mov eax, dword [ebp - 0x6fa0]
sub eax, esi
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f80], eax
nop word [eax + eax]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45e204
mov eax, dword [edi + 0x30]
cmp eax, 2
jbe 0x45de26
add eax, 0xfffffffe
cmp dword [ebp - 0x6f8c], eax
je 0x45e1e2
mov eax, dword [ebp - 0x6f80]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
add eax, esi
push 0
push 0x4e4980
mov ecx, eax
mov dword [ebp - 0x6fb4], eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402df0
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x45e1e2
lea eax, [ebp - 0x26d4]
mov dword [ebp - 0x26d4], 0
push eax
push 0x4d4a68
lea ecx, [ebp - 0x1f74]
call fcn.00407a20
test al, al
je 0x45e1e2
cmp dword [ebp - 0x26d4], 0
je 0x45e1e2
mov ecx, dword [ebp - 0x6fb4]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e49b4
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402df0
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x45e1e2
lea eax, [ebp - 0x6cec]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6fa4], esi
call fcn.00407b10
test al, al
je 0x45e1dc
mov ecx, dword [ebp - 0x6fb4]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
push 0x4e49d0
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402df0
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1fd8]
call fcn.00407730
test al, al
je 0x45e1ba
lea eax, [ebp - 0x20fc]
push eax
push 0x4d0434
lea ecx, [ebp - 0x1fd8]
call fcn.004078e0
push 0
lea ecx, [ebp - 0x20fc]
call fcn.00402cc0
cmp word [eax], 0x40
jne 0x45dffc
push 0
lea ecx, [ebp - 0x20fc]
call fcn.00402e90
push eax
push 0x80
lea ecx, [ebp - 0x20fc]
call fcn.004033e0
push 0
push 0x80
lea ecx, [ebp - 0x20fc]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x20fc]
call fcn.00402e90
push eax
call dword [0x4ac488]
lea eax, [ebp - 0x2004]
push eax
push 0x4d69b0
lea ecx, [ebp - 0x1fd8]
call fcn.004078e0
lea ecx, [ebp - 0x20fc]
call fcn.00403170
test al, al
je 0x45e035
lea ecx, [ebp - 0x2004]
call fcn.00403170
test al, al
jne 0x45e1ba
push 0
push 0x4e48f4
lea ecx, [ebp - 0x2004]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x45e1d6
xor eax, eax
mov dword [ebp - 0x6f9c], eax
nop
push 0
push 1
push 1
push 0
push dword [ebp + eax*4 - 0x7020]
lea ecx, [ebp - 0x2004]
call fcn.00403fc0
dec eax
cmp eax, 0x10
jbe 0x45e1ba
mov eax, dword [ebp - 0x6f9c]
inc eax
mov dword [ebp - 0x6f9c], eax
cmp eax, 7
jb 0x45e060
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3e78
lea ecx, [ebp - 0x20fc]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00402df0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2004]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x25
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
je 0x45e1ba
push 0
push 0
push 0
lea ecx, [ebp - 0x2004]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
push 0
push 0
call fcn.00402e90
push eax
push 0
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
push 0x25
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
lea ecx, [ebp - 0x2004]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x4e4280
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x20fc]
call fcn.00402e90
push eax
push 0x4e49ec
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
lea eax, [ebp - 0x6cec]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.00407b10
test al, al
jne 0x45df35
mov dword [ebp - 0x6fa4], esi
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x45de00
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x45e26d
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4a24
push esi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402df0
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x45e223
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4a50
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402df0
cmp dword [ebp - 0x6fdc], 0
je 0x45e2d4
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e4a50
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402df0
push 0xc
lea ecx, [ebp - 0x26b8]
call fcn.00401960
lea ecx, [ebp - 0x26b8]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x25c8]
mov byte [ebp - 4], 0x91
call fcn.00401960
lea ecx, [ebp - 0x25c8]
call fcn.00402b30
push 0
push 0x4e4b90
lea ecx, [ebp - 0x1fc8]
mov byte [ebp - 4], 0x92
call fcn.0040e530
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x45e6d3
mov esi, dword [ebp - 0x6fa8]
mov eax, dword [ebp - 0x6fa0]
sub eax, esi
mov dword [ebp - 0x6fb4], esi
mov dword [ebp - 0x6f78], eax
nop
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45e6d3
mov eax, dword [edi + 0x30]
cmp eax, 2
jbe 0x45e376
add eax, 0xfffffffe
cmp dword [ebp - 0x6f8c], eax
je 0x45e6b1
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4bf0
lea ecx, [ecx + esi]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402df0
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x45e4fa
push 0
push 0x4e4c44
push 0x4df088
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x45e4fa
lea eax, [ebp - 0x26b8]
push eax
push 0x4df0a0
lea ecx, [ebp - 0x1f74]
call fcn.004078e0
lea eax, [ebp - 0x28ac]
push eax
push 0x4df0b8
lea ecx, [ebp - 0x1f74]
call fcn.00407a20
lea ecx, [ebp - 0x26b8]
call fcn.00403170
test al, al
jne 0x45e4fa
cmp dword [ebp - 0x28ac], 0
je 0x45e4fa
push 0
push 0
push 0
push 0
push 0x4e4a80
mov ecx, esi
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4df088
push 1
push 0x24
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x45e4fa
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402e90
push eax
push 0
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
push 0x24
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e2ab0
push 0x4e4a80
push 0x4e2d1c
mov ecx, esi
call fcn.00402e90
push eax
push 0x4e1674
push 0x4df088
push 0x4e4008
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
push 0
push 0x4e4c44
push 0x4df178
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x45e6b1
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4c68
lea ecx, [ecx + esi]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402df0
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x45e6b1
lea eax, [ebp - 0x25c8]
push eax
push 0x4d118c
lea ecx, [ebp - 0x1f74]
call fcn.004078e0
test al, al
je 0x45e6b1
lea ecx, [ebp - 0x26b8]
call fcn.00403170
test al, al
jne 0x45e6b1
push 0
push 0
push 0x4cbcf4
push 0x4cc6c0
lea ecx, [ebp - 0x25c8]
call fcn.004047c0
push 0
push 1
push 1
push 0
push 0x4d1198
lea ecx, [ebp - 0x25c8]
call fcn.00403fc0
lea ecx, [ebp - 0x25c8]
mov esi, eax
call fcn.00402d50
sub eax, 0xb
cmp esi, eax
mov esi, dword [ebp - 0x6fb4]
je 0x45e6b1
push 0
push 0
push 0
push 0
push 0x4e4b00
mov ecx, esi
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4df178
push 1
push 0x24
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x45e6b1
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402e90
push eax
push 0
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
push 0x24
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e2ab0
push 0x4e4b00
push 0x4e2d1c
mov ecx, esi
call fcn.00402e90
push eax
push 0x4e1674
push 0x4df178
push 0x4e4008
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6fb4], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x45e350
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45ebfe
push 0
push 0x4e4c44
push 0x4df218
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x45ebfe
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x45e76a
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d49d0
push esi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402df0
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x45e720
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d49d0
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402df0
cmp dword [ebp - 0x6fdc], 0
je 0x45e7d1
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4d49d0
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402df0
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6fb4], 0
jbe 0x45e99a
mov eax, dword [ebp - 0x6fa8]
sub eax, esi
mov dword [ebp - 0x6f8c], eax
mov ecx, esi
call fcn.00402e90
xor edx, edx
mov ecx, eax
call fcn.00409350
test al, al
je 0x45e97e
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45e99a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4def78
mov ecx, esi
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2114]
call fcn.00402df0
lea ecx, [ebp - 0x2114]
call fcn.00402e90
mov edx, 0x4d45ec
mov ecx, eax
call fcn.00409350
test al, al
jne 0x45e8ac
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d6794
mov ecx, esi
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2114]
call fcn.00402df0
lea ecx, [ebp - 0x2114]
call fcn.00402e90
xor edx, edx
mov ecx, eax
call fcn.00409350
test al, al
je 0x45e97e
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
add ecx, esi
push 0x4e4cb0
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4df218
push 1
push 0x24
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x45e97e
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ecx + esi]
call fcn.00402e90
push eax
push 0
mov ecx, esi
call fcn.00402e90
push eax
push 0x24
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0x4e2ab0
push 0x4e4cb0
push 0x4e2d1c
lea ecx, [ecx + esi]
call fcn.00402e90
push eax
push 0x4e1674
push 0x4df218
push 0x4e4008
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x45e7f6
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45ebfe
push 0
push 0x4e4c44
push 0x4df2dc
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x45ebfe
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x45ea2d
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4d58
push esi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402df0
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x45e9e3
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4d58
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402df0
cmp dword [ebp - 0x6fdc], 0
je 0x45ea94
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e4d58
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402df0
mov edx, dword [ebp - 0x6fac]
test edx, edx
je 0x45ebcf
mov eax, dword [ebp - 0x6fa0]
mov esi, dword [ebp - 0x6fa8]
sub eax, esi
mov dword [ebp - 0x6fb4], eax
mov dword [ebp - 0x6f8c], edx
nop dword [eax]
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1fd8]
call fcn.00407730
test al, al
je 0x45ebb9
lea ecx, [ebp - 0x1fd8]
call fcn.00407c30
cmp eax, 1
jbe 0x45ebb9
push 0
push 0
push 0
push 0
push 0x4e4dc0
mov ecx, esi
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4df2dc
push 1
push 0x24
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x45ebb9
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402e90
mov ecx, dword [ebp - 0x6fb4]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.00402e90
push eax
push 0x24
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2ab0
push 0x4e4dc0
push 0x4e2d1c
mov ecx, esi
call fcn.00402e90
push eax
push 0x4e1674
push 0x4e4e30
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
sub dword [ebp - 0x6f8c], 1
jne 0x45eac0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004209d0
mov ecx, edi
call fcn.0046e270
test al, al
je 0x45ebfe
push 1
push 0
push 0
lea ecx, [ebp - 0x21e0]
call fcn.004025c0
lea ecx, [ebp - 0x25c8]
call fcn.00402cd0
lea ecx, [ebp - 0x26b8]
call fcn.00402cd0
lea ecx, [ebp - 0x22c0]
call fcn.00402cd0
lea ecx, [ebp - 0x6e6c]
call fcn.0046cb70
lea ecx, [ebp - 0x68b8]
call fcn.0040b460
lea ecx, [ebp - 0x20b4]
call fcn.00402cd0
lea ecx, [ebp - 0x23ac]
call fcn.00402cd0
lea ecx, [ebp - 0x2210]
call fcn.00402cd0
lea ecx, [ebp - 0x20d8]
call fcn.00402cd0
lea ecx, [ebp - 0x23a0]
call fcn.00402cd0
lea ecx, [ebp - 0x20a8]
call fcn.00402cd0
lea ecx, [ebp - 0x20fc]
call fcn.00402cd0
lea ecx, [ebp - 0x2078]
call fcn.00407760
lea ecx, [ebp - 0x1fd8]
call fcn.00407760
lea ecx, [ebp - 0x2694]
call fcn.004054c0
lea ecx, [ebp - 0x23f4]
call fcn.00402cd0
lea ecx, [ebp - 0x2004]
mov byte [ebp - 4], 0x46
call fcn.00402cd0
mov ecx, edi
call fcn.00472340
test al, al
jne 0x461508
test dword [edi + 0x34], 0x1000
jne 0x461508
push 0
push 0x4e4e84
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x4e4ebc
push dword [eax + 0x38]
call fcn.0041f260
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x2d
push dword [eax + 0x34]
call fcn.004219b0
push 0xc
lea ecx, [ebp - 0x20e4]
call fcn.00401960
lea ecx, [ebp - 0x20e4]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2028]
mov byte [ebp - 4], 0x93
call fcn.00401960
lea ecx, [ebp - 0x2028]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x23e8]
mov byte [ebp - 4], 0x94
call fcn.00401960
lea ecx, [ebp - 0x23e8]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x1fe4]
mov byte [ebp - 4], 0x95
call fcn.00401960
lea ecx, [ebp - 0x1fe4]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x22e8]
mov byte [ebp - 4], 0x96
call fcn.00401960
lea ecx, [ebp - 0x22e8]
call fcn.00402b30
mov byte [ebp - 4], 0x97
lea ecx, [ebp - 0x256c]
xor esi, esi
push 0x24
mov dword [ebp - 0x6f8c], esi
call fcn.0042ee40
lea ecx, [ebp - 0x256c]
call fcn.00410190
mov byte [ebp - 4], 0x98
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004209d0
push esi
push 0x4e4ef0
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov dword [ebp - 0x6f78], esi
cmp dword [edi + 0x30], esi
jbe 0x45f40c
mov esi, dword [ebp - 0x6fa8]
mov dword [ebp - 0x6fb4], esi
nop
lea ecx, [ebp - 0x22e8]
call fcn.00403170
test al, al
je 0x45ee4c
lea eax, [ebp - 0x22e8]
push eax
push 0
lea ecx, [ebp - 0x2160]
call fcn.00402e90
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
mov edx, esi
mov ecx, eax
call fcn.00434db0
mov esi, dword [ebp - 0x6fb4]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45f406
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4f3c
lea ecx, [ebp - 0x2160]
call fcn.00402e90
push eax
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00402df0
push 0x260
lea ecx, [ebp - 0x5430]
call fcn.00409b80
push 1
lea ecx, [ebp - 0x20e4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x5430]
call fcn.00401120
push 3
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x99
call fcn.00403ed0
lea ecx, [ebp - 0x5430]
call fcn.00401260
test al, al
je 0x45f3d8
nop
push 1
lea ecx, [ebp - 0x5430]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00402c00
push 0x4e351c
lea ecx, [ebp - 0x2028]
call fcn.00402c70
test al, al
je 0x45ef3e
push 0
push 1
push 1
push 0
push 0x4e352c
lea ecx, [ebp - 0x2028]
call fcn.00403fc0
cmp eax, 1
jne 0x45f3c5
inc dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x5430]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3540
push 1
call fcn.004012c0
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2028]
call fcn.00402df0
push 0x100
lea ecx, [ebp - 0x2028]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x256c]
call fcn.00410240
test al, al
je 0x45f3c5
lea eax, [ebp - 0x1fe4]
push eax
push 0x4cde84
push 0x4e3568
lea ecx, [ebp - 0x256c]
call fcn.00410b30
test eax, eax
je 0x45f179
push 0
push 1
push 1
push 0
push 0x4e357c
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x45f179
push eax
push 1
push 1
push eax
push 0x4e359c
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x45f179
push eax
push 1
push 1
push eax
push 0x4e35ec
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x45f179
push 0x4e35b8
lea ecx, [ebp - 0x1fe4]
call fcn.00402c40
test al, al
jne 0x45f179
push 0
push 1
push 1
push 0
push 0x4e35d0
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x45f179
push eax
push 0x4e4f78
lea ecx, [ebp - 0x1fe4]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x45f179
push 0
push 0x4e4fa4
lea ecx, [ebp - 0x1fe4]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x45f179
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fe4]
call fcn.00402e90
push eax
mov ecx, esi
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e3640
push 2
push 0x2a
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x45f179
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2028]
call fcn.00402e90
push eax
push 0x4e3568
push 0x2a
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
lea ecx, [ebp - 0x2028]
call fcn.00402e90
push eax
push 0x4e2d1c
mov ecx, esi
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x1fe4]
call fcn.00402e90
push eax
push 0x4e3688
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
lea eax, [ebp - 0x2adc]
mov dword [ebp - 0x6f14], 0
push eax
push 0x4cde84
xorps xmm0, xmm0
lea ecx, [ebp - 0x256c]
push 0x4e36a8
movups xmmword [ebp - 0x6f24], xmm0
call fcn.00410950
test al, al
je 0x45f3c5
lea eax, [ebp - 0x2adc]
push eax
lea eax, [ebp - 0x6f24]
push eax
lea ecx, [ebp - 0x256c]
call fcn.004110b0
test al, al
je 0x45f3c5
lea eax, [ebp - 0x1fe4]
push eax
lea eax, [ebp - 0x6f24]
push eax
lea ecx, [ebp - 0x256c]
call fcn.00410ac0
test eax, eax
je 0x45f3a4
push 0
push 1
push 1
push 0
push 0x4e357c
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x45f3a4
push eax
push 1
push 1
push eax
push 0x4e359c
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x45f3a4
push eax
push 1
push 1
push eax
push 0x4e35ec
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x45f3a4
push 0x4e35b8
lea ecx, [ebp - 0x1fe4]
call fcn.00402c40
test al, al
jne 0x45f3a4
push 0
push 1
push 1
push 0
push 0x4e35d0
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x45f3a4
push eax
push 0x4e4f78
lea ecx, [ebp - 0x1fe4]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x45f3a4
push 0
push 0x4e4fa4
lea ecx, [ebp - 0x1fe4]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x45f3a4
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fe4]
call fcn.00402e90
push eax
mov ecx, esi
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e3740
push 2
push 0x2a
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x45f3a4
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2028]
call fcn.00402e90
push eax
push 0x4e36a8
push 0x2a
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
lea ecx, [ebp - 0x2028]
call fcn.00402e90
push eax
push 0x4e2d1c
mov ecx, esi
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x1fe4]
call fcn.00402e90
push eax
push 0x4e375c
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
lea eax, [ebp - 0x2adc]
push eax
lea eax, [ebp - 0x6f24]
push eax
lea ecx, [ebp - 0x256c]
call fcn.004110b0
test al, al
jne 0x45f1d2
lea ecx, [ebp - 0x5430]
call fcn.00401220
test al, al
jne 0x45eef0
lea ecx, [ebp - 0x5430]
mov byte [ebp - 4], 0x98
call fcn.00401170
mov eax, dword [ebp - 0x6f78]
add esi, 0xc
inc eax
mov dword [ebp - 0x6fb4], esi
mov dword [ebp - 0x6f78], eax
cmp eax, dword [edi + 0x30]
jb 0x45ee00
mov esi, dword [ebp - 0x6f8c]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x4614c2
test esi, esi
jne 0x45f444
lea ecx, [ebp - 0x22e8]
call fcn.00403170
test al, al
je 0x45f444
push esi
push 0x4e4fd0
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
jmp 0x4614c2
push 0
push 0x4e5028
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x45f7f1
mov esi, dword [ebp - 0x6fa8]
mov dword [ebp - 0x6f78], esi
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45f7f1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4f3c
lea ecx, [ebp - 0x2160]
call fcn.00402e90
push eax
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00402df0
push 0x260
lea ecx, [ebp - 0x4f70]
call fcn.00409b80
push 1
lea ecx, [ebp - 0x20e4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x4f70]
call fcn.00401120
push 3
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x9a
call fcn.00403ed0
lea ecx, [ebp - 0x4f70]
call fcn.00401260
test al, al
je 0x45f7c3
nop dword [eax]
push 1
lea ecx, [ebp - 0x4f70]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00402c00
push 0x4e351c
lea ecx, [ebp - 0x2028]
call fcn.00402c70
test al, al
je 0x45f56e
push 0
push 1
push 1
push 0
push 0x4e352c
lea ecx, [ebp - 0x2028]
call fcn.00403fc0
cmp eax, 1
jne 0x45f7b0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3540
push 1
lea ecx, [ebp - 0x4f70]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2028]
call fcn.00402df0
push 0x100
lea ecx, [ebp - 0x2028]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x256c]
call fcn.00410240
test al, al
je 0x45f7b0
lea eax, [ebp - 0x1fe4]
push eax
push 0x4cde84
push 0x4e3818
lea ecx, [ebp - 0x256c]
call fcn.00410b30
test eax, eax
je 0x45f7b0
push 0
push 1
push 1
push 0
push 0x4e357c
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x45f7b0
push eax
push 1
push 1
push eax
push 0x4e36d4
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x45f7b0
push eax
push 1
push 1
push eax
push 0x4e359c
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x45f7b0
push eax
push 1
push 1
push eax
push 0x4e35ec
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x45f7b0
push eax
push 1
push 1
push eax
push 0x4e36f8
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x45f7b0
push eax
push 0x4e5068
lea ecx, [ebp - 0x1fe4]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x45f7b0
push 0
push 0x4e5098
lea ecx, [ebp - 0x1fe4]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x45f7b0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fe4]
call fcn.00402e90
push eax
mov ecx, esi
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e38c8
push 2
push 0x2b
push dword [eax + 0xa8]
call fcn.004452b0
mov esi, eax
cmp esi, 0xffffffff
je 0x45f7aa
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2028]
call fcn.00402e90
push eax
push 0x4e38f8
push 0x2b
push esi
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
lea ecx, [ebp - 0x2028]
call fcn.00402e90
mov esi, dword [ebp - 0x6f78]
mov ecx, esi
push eax
push 0x4e2d1c
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x1fe4]
call fcn.00402e90
push eax
push 0x4e3958
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
jmp 0x45f7b0
mov esi, dword [ebp - 0x6f78]
lea ecx, [ebp - 0x4f70]
call fcn.00401220
test al, al
jne 0x45f520
lea ecx, [ebp - 0x4f70]
mov byte [ebp - 4], 0x98
call fcn.00401170
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [edi + 0x30]
jb 0x45f476
mov ecx, edi
call fcn.00472340
test al, al
jne 0x4614c2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e50c8
lea ecx, [edi + 0x33c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402df0
push 0
push 0x4e5104
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x45fe10
mov esi, dword [ebp - 0x6fa8]
mov dword [ebp - 0x6f78], esi
mov ecx, edi
call fcn.00472340
test al, al
jne 0x45fe10
push 0xc
lea ecx, [ebp - 0x275c]
call fcn.00401960
lea ecx, [ebp - 0x275c]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x27c8]
mov byte [ebp - 4], 0x9b
call fcn.00401960
lea ecx, [ebp - 0x27c8]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2750]
mov byte [ebp - 4], 0x9c
call fcn.00401960
lea ecx, [ebp - 0x2750]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x26ac]
mov byte [ebp - 4], 0x9d
call fcn.00401960
lea ecx, [ebp - 0x26ac]
call fcn.00402b30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4f3c
lea ecx, [ebp - 0x2160]
mov byte [ebp - 4], 0x9e
call fcn.00402e90
push eax
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00402df0
push 0x260
lea ecx, [ebp - 0x4ab0]
call fcn.00409b80
push 1
lea ecx, [ebp - 0x20e4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x4ab0]
call fcn.00401120
push 3
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x9f
call fcn.00403ed0
lea ecx, [ebp - 0x4ab0]
call fcn.00401260
test al, al
je 0x45fdb6
nop word [eax + eax]
push 1
lea ecx, [ebp - 0x4ab0]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00402c00
push 0x4e351c
lea ecx, [ebp - 0x2028]
call fcn.00402c70
test al, al
je 0x45f9ce
push 0
push 1
push 1
push 0
push 0x4e352c
lea ecx, [ebp - 0x2028]
call fcn.00403fc0
cmp eax, 1
jne 0x45fda3
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3540
push 1
lea ecx, [ebp - 0x4ab0]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2028]
call fcn.00402df0
push 0x100
lea ecx, [ebp - 0x2028]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x256c]
call fcn.00410240
test al, al
je 0x45fda3
lea eax, [ebp - 0x2ac8]
mov dword [ebp - 0x6f28], 0
push eax
push 0x4cde84
xorps xmm0, xmm0
lea ecx, [ebp - 0x256c]
push 0x4e3a20
movups xmmword [ebp - 0x6f38], xmm0
call fcn.00410950
test al, al
je 0x45fda3
lea eax, [ebp - 0x2ac8]
push eax
lea eax, [ebp - 0x6f38]
push eax
lea ecx, [ebp - 0x256c]
call fcn.00410cf0
test al, al
je 0x45fda3
nop word [eax + eax]
lea eax, [ebp - 0x275c]
push eax
lea eax, [ebp - 0x6f38]
push eax
lea ecx, [ebp - 0x256c]
call fcn.00410a80
test al, al
je 0x45fd82
lea ecx, [ebp - 0x275c]
call fcn.00402e90
lea ecx, [ebp - 0x1f8c]
mov esi, eax
call fcn.00402e90
mov edx, esi
mov ecx, eax
call fcn.00409350
test al, al
jne 0x45fd7c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3a4c
lea ecx, [ebp - 0x275c]
call fcn.00402e90
push eax
push 0x4e3a70
lea ecx, [ebp - 0x2750]
call fcn.00402df0
lea eax, [ebp - 0x27c8]
push eax
push 0x4cde84
lea ecx, [ebp - 0x2750]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x256c]
call fcn.00410b30
test eax, eax
je 0x45fd7c
lea ecx, [ebp - 0x27c8]
call fcn.00402e90
lea ecx, [ebp - 0x1f8c]
mov esi, eax
call fcn.00402e90
mov edx, esi
mov ecx, eax
call fcn.00409350
test al, al
jne 0x45fd7c
push 0
push 0x4e5134
lea ecx, [ebp - 0x27c8]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x45fd7c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3aa0
lea ecx, [ebp - 0x275c]
call fcn.00402e90
push eax
push 0x4e3a70
lea ecx, [ebp - 0x2750]
call fcn.00402df0
lea eax, [ebp - 0x26ac]
push eax
push 0x4cde84
lea ecx, [ebp - 0x2750]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x256c]
call fcn.00410b30
test eax, eax
je 0x45fc2c
push 0
push 1
push 1
push 5
push 0x4cc6c4
lea ecx, [ebp - 0x26ac]
call fcn.00403fc0
test eax, eax
jne 0x45fc2c
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4e3ab0
push 1
lea ecx, [ebp - 0x4ab0]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x26ac]
call fcn.00404550
lea ecx, [ebp - 0x26ac]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
je 0x45fd7c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x275c]
call fcn.00402e90
push eax
push 0x4e3a70
lea ecx, [ebp - 0x2750]
call fcn.00402df0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x26ac]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x27c8]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 2
push 0x2c
push dword [eax + 0xa8]
call fcn.004452b0
mov esi, eax
cmp esi, 0xffffffff
je 0x45fd7c
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x26ac]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
push 0
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2028]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2750]
call fcn.00402e90
push eax
push 0x2c
push esi
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0x4e3654
lea ecx, [ebp - 0x26ac]
call fcn.00402e90
mov esi, dword [ebp - 0x6f78]
mov ecx, esi
push eax
push 0x4e2300
call fcn.00402e90
push eax
push 0x4e3acc
lea ecx, [ebp - 0x275c]
call fcn.00402e90
push eax
push 0x4d0110
lea ecx, [ebp - 0x27c8]
call fcn.00402e90
push eax
push 0x4e3af0
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
jmp 0x45fd82
mov esi, dword [ebp - 0x6f78]
lea eax, [ebp - 0x2ac8]
push eax
lea eax, [ebp - 0x6f38]
push eax
lea ecx, [ebp - 0x256c]
call fcn.00410cf0
test al, al
jne 0x45fa90
lea ecx, [ebp - 0x4ab0]
call fcn.00401220
test al, al
jne 0x45f980
lea ecx, [ebp - 0x4ab0]
call fcn.00401170
lea ecx, [ebp - 0x26ac]
call fcn.00402cd0
lea ecx, [ebp - 0x2750]
call fcn.00402cd0
lea ecx, [ebp - 0x27c8]
call fcn.00402cd0
lea ecx, [ebp - 0x275c]
mov byte [ebp - 4], 0x98
call fcn.00402cd0
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [edi + 0x30]
jb 0x45f862
mov ecx, edi
call fcn.00472340
test al, al
jne 0x4614c2
push 0
push 0x4e5158
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea ecx, [ebp - 0x6da8]
call fcn.0046cb40
mov byte [ebp - 4], 0xa0
lea ecx, [ebp - 0x6da0]
mov eax, dword [edi + 8]
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6da8], eax
mov dword [ebp - 0x6da4], 0x2d
call fcn.00402ce0
lea eax, [ebp - 0x21e0]
mov dword [ebp - 0x6d90], eax
lea ecx, [ebp - 0x6d80]
lea eax, [edi + 0x164]
mov dword [ebp - 0x6d8c], eax
lea eax, [ebp - 0x1fc8]
mov dword [ebp - 0x6d88], eax
mov eax, dword [edi + 4]
push 0x4d113c
mov dword [ebp - 0x6d84], eax
call fcn.00402c00
push 0xc
lea ecx, [ebp - 0x2278]
call fcn.00401960
lea ecx, [ebp - 0x2278]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2260]
mov byte [ebp - 4], 0xa1
call fcn.00401960
lea ecx, [ebp - 0x2260]
call fcn.00402b30
mov ecx, edi
mov byte [ebp - 4], 0xa2
call fcn.00472340
test al, al
jne 0x4614a1
xor esi, esi
mov dword [ebp - 0x6f78], esi
cmp dword [edi + 0x30], esi
jbe 0x460097
nop dword [eax]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x460097
push esi
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402d50
cmp eax, 3
jl 0x460087
lea eax, [ebp - 0x6da0]
push eax
push 0
lea ecx, [ebp - 0x2160]
call fcn.00402e90
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
mov edx, esi
mov ecx, eax
call fcn.00434db0
mov esi, dword [ebp - 0x6f78]
test al, al
je 0x460087
push esi
lea ecx, [edi + 0x114]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x250c]
mov dword [ebp - 0x6d94], eax
call fcn.00402e90
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2278]
call fcn.00402df0
lea ecx, [ebp - 0x2278]
call fcn.00402e90
mov ecx, eax
call fcn.0040fb70
test al, al
je 0x460087
lea ecx, [ebp - 0x2278]
call fcn.00402e90
push eax
lea eax, [ebp - 0x6da8]
mov ecx, edi
push eax
call fcn.00451370
mov ecx, edi
call fcn.00472340
test al, al
jne 0x460097
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25bc]
call fcn.00402e90
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2278]
call fcn.00402df0
lea ecx, [ebp - 0x2278]
call fcn.00402e90
mov ecx, eax
call fcn.0040fb70
test al, al
je 0x460087
push 0
lea ecx, [ebp - 0x2278]
call fcn.00403100
lea ecx, [ebp - 0x2278]
call fcn.00402e90
push eax
lea eax, [ebp - 0x6da8]
mov ecx, edi
push eax
call fcn.00451370
inc esi
mov dword [ebp - 0x6f78], esi
cmp esi, dword [edi + 0x30]
jb 0x45ff00
mov ecx, edi
call fcn.00472340
test al, al
jne 0x4614a1
lea ecx, [ebp - 0x264c]
mov dword [ebp - 0x6d94], 0x4dc450
call fcn.00402e90
push eax
lea eax, [ebp - 0x6da8]
mov ecx, edi
push eax
call fcn.00451370
mov ecx, edi
call fcn.00472340
test al, al
jne 0x4614a1
lea eax, [ebp - 0x2640]
push eax
lea ecx, [ebp - 0x2278]
call fcn.00402c10
push 0
lea ecx, [ebp - 0x2278]
call fcn.00403100
lea ecx, [ebp - 0x2278]
call fcn.00402e90
push eax
lea eax, [ebp - 0x6da8]
mov ecx, edi
push eax
call fcn.00451370
mov ecx, edi
call fcn.00472340
test al, al
jne 0x4614a1
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x46018a
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e51a8
push esi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402df0
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x460140
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5238
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402df0
cmp dword [ebp - 0x6fdc], 0
je 0x4601f1
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e5238
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402df0
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x4603eb
mov eax, dword [ebp - 0x6fa0]
mov esi, dword [ebp - 0x6fa8]
sub eax, esi
mov dword [ebp - 0x6fb4], eax
nop dword [eax]
push 0
push 0x20019
lea ecx, [eax + esi]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x4603c9
mov ecx, edi
call fcn.00472340
test al, al
jne 0x4603eb
lea eax, [ebp - 0x2260]
push eax
push 0x4cbcf4
lea ecx, [ebp - 0x1f74]
call fcn.004078e0
test al, al
je 0x4603c9
push 0
push 1
push 1
push 0
push 0x4e52c4
lea ecx, [ebp - 0x2260]
call fcn.00403fc0
lea ecx, [ebp - 0x2260]
mov dword [ebp - 0x6f80], eax
call fcn.00402d50
mov edx, dword [ebp - 0x6f80]
lea ecx, [edx + 0xa]
cmp eax, ecx
jle 0x4603c9
lea eax, [edx + 0xb]
push eax
lea ecx, [ebp - 0x2260]
call fcn.00403f10
push 3
lea ecx, [ebp - 0x2260]
call fcn.00404aa0
lea ecx, [ebp - 0x2260]
call fcn.00403170
test al, al
jne 0x4603c9
push 0
push 0x4e14bc
lea ecx, [ebp - 0x2260]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x4603c9
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2260]
call fcn.00402e90
push eax
mov ecx, esi
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4ddac8
push 2
push 0x2d
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4603c9
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402e90
mov ecx, dword [ebp - 0x6fb4]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.00402e90
push eax
push 0x2d
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
mov ecx, esi
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x2260]
call fcn.00402e90
push eax
push 0x4e3cc8
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
cmp eax, dword [ebp - 0x6fac]
mov dword [ebp - 0x6f8c], eax
mov eax, dword [ebp - 0x6fb4]
jb 0x460220
mov ecx, edi
call fcn.00472340
test al, al
jne 0x4614a1
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x46046a
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e52e0
push esi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402df0
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x460420
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5328
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402df0
cmp dword [ebp - 0x6fdc], 0
je 0x4604d1
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e5328
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402df0
push 0
push 0x4e536c
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov esi, dword [ebp - 0x6fac]
mov dword [ebp - 0x6fb4], 0
test esi, esi
je 0x46071e
mov eax, dword [ebp - 0x6fa0]
mov esi, dword [ebp - 0x6fa8]
sub eax, esi
mov dword [ebp - 0x6f8c], eax
nop
mov ecx, edi
call fcn.00472340
test al, al
jne 0x460718
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0x20019
lea ecx, [ecx + esi]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
lea eax, [ebp - 0x1fe4]
push eax
push 0x4ddc7c
lea ecx, [ebp - 0x1f74]
call fcn.004078e0
test al, al
je 0x4606fc
lea eax, [ebp - 0x2180]
mov dword [ebp - 0x2180], 0
push eax
push 0x4ddd1c
lea ecx, [ebp - 0x1f74]
call fcn.00407a20
test al, al
je 0x460591
cmp dword [ebp - 0x2180], 0
jne 0x4606fc
push 0
push 1
push 1
push 0
push 0x4e357c
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x4606fc
push eax
push 1
push 1
push eax
push 0x4e359c
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x4606fc
push eax
push 1
push 1
push eax
push 0x4e35ec
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x4606fc
push eax
push 1
push 1
push eax
push 0x4e35d0
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x4606fc
push eax
push 0x4e53a8
lea ecx, [ebp - 0x1fe4]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x4606fc
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fe4]
call fcn.00402e90
push eax
mov ecx, esi
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4ddc7c
push 2
push 0x2f
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4606fc
push 0
push 0
push 0
push 0
push 0
push 0x4ddc7c
mov ecx, esi
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.00402e90
push eax
push 0x2f
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
mov ecx, esi
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x1fe4]
call fcn.00402e90
push eax
push 0x4e53d8
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x460510
mov esi, dword [ebp - 0x6fac]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x4614a1
push 0xc
lea ecx, [ebp - 0x26a0]
call fcn.00401960
lea ecx, [ebp - 0x26a0]
call fcn.00402b30
mov byte [ebp - 4], 0xa3
mov dword [ebp - 0x6fb4], 0
test esi, esi
je 0x4609e7
mov eax, dword [ebp - 0x6fa0]
mov esi, dword [ebp - 0x6fa8]
sub eax, esi
mov dword [ebp - 0x6f8c], eax
nop
mov ecx, edi
call fcn.00472340
test al, al
jne 0x4609e1
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0x20019
lea ecx, [ecx + esi]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
lea eax, [ebp - 0x1fe4]
push eax
push 0x4dddbc
lea ecx, [ebp - 0x1f74]
call fcn.004078e0
test al, al
je 0x4609c5
lea eax, [ebp - 0x2180]
mov dword [ebp - 0x2180], 0
push eax
push 0x4ddebc
lea ecx, [ebp - 0x1f74]
call fcn.00407a20
test al, al
je 0x4607f1
cmp dword [ebp - 0x2180], 0
je 0x4609c5
push 0
push 1
push 1
push 0
push 0x4e357c
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x4609c5
push eax
push 1
push 1
push eax
push 0x4e359c
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x4609c5
push eax
push 1
push 1
push eax
push 0x4e35ec
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x4609c5
push eax
push 1
push 1
push eax
push 0x4e35d0
lea ecx, [ebp - 0x1fe4]
call fcn.00403fc0
test eax, eax
jne 0x4609c5
push eax
push 0x4e53a8
lea ecx, [ebp - 0x1fe4]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x4609c5
lea eax, [ebp - 0x26a0]
push eax
push 0x4dde88
lea ecx, [ebp - 0x1f74]
call fcn.004078e0
test al, al
je 0x4609c5
lea ecx, [ebp - 0x26a0]
call fcn.00403170
test al, al
jne 0x4609c5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3e78
lea ecx, [ebp - 0x26a0]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2260]
call fcn.00402df0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fe4]
call fcn.00402e90
push eax
mov ecx, esi
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2260]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 2
push 0x2f
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4609c5
push 0
push 0
push 0
push 0
push 0
push 0x4dddbc
mov ecx, esi
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
lea ecx, [ecx + esi]
call fcn.00402e90
push eax
push 0x2f
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
mov ecx, esi
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x1fe4]
call fcn.00402e90
push eax
push 0x4e5428
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x460770
mov esi, dword [ebp - 0x6fac]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x461496
mov dword [ebp - 0x6fb4], 0
test esi, esi
je 0x460c67
mov esi, dword [ebp - 0x6fa8]
mov eax, dword [ebp - 0x6fa0]
sub eax, esi
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f80], eax
mov ecx, edi
call fcn.00472340
test al, al
jne 0x460c67
mov eax, dword [ebp - 0x6f80]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f8c], eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x460c45
lea eax, [ebp - 0x2180]
mov dword [ebp - 0x2180], 0
push eax
push 0x4e3f00
lea ecx, [ebp - 0x1f74]
call fcn.00407a20
test al, al
je 0x460c45
cmp dword [ebp - 0x2180], 4
jne 0x460c45
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3f24
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402df0
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x460c45
lea eax, [ebp - 0x6cec]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6fa4], esi
call fcn.00407b90
test al, al
je 0x460c3f
lea eax, [ebp - 0x1fe4]
push eax
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f74]
call fcn.004078e0
test al, al
je 0x460c1d
lea ecx, [ebp - 0x1fe4]
call fcn.00403170
test al, al
jne 0x460c1d
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fe4]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4de078
push 2
push 0x2f
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
je 0x460c1d
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
call fcn.00402e90
push eax
push 0x2f
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x1fe4]
call fcn.00402e90
push eax
push 0x4e5488
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
lea eax, [ebp - 0x6cec]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.00407b90
test al, al
jne 0x460b10
mov dword [ebp - 0x6fa4], esi
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x460a22
mov ecx, edi
call fcn.00472340
test al, al
jne 0x461496
push 0
push 0x4e54d0
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x46105b
mov esi, dword [ebp - 0x6fa8]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46105b
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4f3c
lea ecx, [ebp - 0x2160]
call fcn.00402e90
push eax
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00402df0
push 0x260
lea ecx, [ebp - 0x4850]
call fcn.00409b80
push 1
lea ecx, [ebp - 0x20e4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x4850]
call fcn.00401120
push 3
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0xa4
call fcn.00403ed0
lea ecx, [ebp - 0x4850]
call fcn.00401260
test al, al
je 0x461033
nop word [eax + eax]
push 1
lea ecx, [ebp - 0x4850]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x2028]
call fcn.00402c00
push 0x4e351c
lea ecx, [ebp - 0x2028]
call fcn.00402c70
test al, al
je 0x460d9e
push 0
push 1
push 1
push 0
push 0x4e352c
lea ecx, [ebp - 0x2028]
call fcn.00403fc0
cmp eax, 1
jne 0x461020
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3540
push 1
lea ecx, [ebp - 0x4850]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2028]
call fcn.00402df0
lea ecx, [ebp - 0x2028]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
je 0x460edf
push 0
push 0x4e5508
push 0x4de17c
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x460edf
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2028]
call fcn.00402e90
push eax
mov ecx, esi
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4de17c
push 2
push 0x2e
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x461020
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2028]
call fcn.00402e90
push eax
push 0
push 0x2e
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3fd0
lea ecx, [ebp - 0x2028]
call fcn.00402e90
push eax
push 0x4e2d1c
mov ecx, esi
call fcn.00402e90
push eax
push 0x4e1674
push 0x4de17c
push 0x4e4008
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
push 0
push 0x4e5508
push 0x4de278
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x461020
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e402c
push 1
lea ecx, [ebp - 0x4850]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2028]
call fcn.00402df0
lea ecx, [ebp - 0x2028]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
je 0x461020
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2028]
call fcn.00402e90
push eax
mov ecx, esi
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4de278
push 2
push 0x2e
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x461020
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2028]
call fcn.00402e90
push eax
push 0
push 0x2e
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3fd0
lea ecx, [ebp - 0x2028]
call fcn.00402e90
push eax
push 0x4e2d1c
mov ecx, esi
call fcn.00402e90
push eax
push 0x4e1674
push 0x4de278
push 0x4e4008
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
lea ecx, [ebp - 0x4850]
call fcn.00401220
test al, al
jne 0x460d50
lea ecx, [ebp - 0x4850]
mov byte [ebp - 4], 0xa3
call fcn.00401170
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [edi + 0x30]
jb 0x460ca2
mov ecx, edi
call fcn.00472340
test al, al
jne 0x461496
lea eax, [ebp - 0x22e8]
push eax
lea ecx, [ebp - 0x2028]
call fcn.00402c10
push 1
lea ecx, [ebp - 0x2028]
call fcn.00403100
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4048
lea ecx, [ebp - 0x2028]
call fcn.00404260
lea ecx, [ebp - 0x2028]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
je 0x461245
push 0
push 0x4e5508
push 0x4de348
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x461245
push 0
lea ecx, [ebp - 0x2028]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x256c]
call fcn.00410240
test al, al
je 0x461245
lea eax, [ebp - 0x2a40]
push eax
push 0x4cde84
push 0x4e3568
lea ecx, [ebp - 0x256c]
call fcn.00410950
test al, al
jne 0x46118d
lea eax, [ebp - 0x2a40]
push eax
push 0x4cde84
push 0x4e36a8
lea ecx, [ebp - 0x256c]
call fcn.00410950
test al, al
jne 0x46118d
lea eax, [ebp - 0x2a40]
push eax
push 0x4cde84
push 0x4dd900
lea ecx, [ebp - 0x256c]
call fcn.00410950
test al, al
jne 0x46118d
lea eax, [ebp - 0x2a40]
push eax
push 0x4cde84
push 0x4e3a20
lea ecx, [ebp - 0x256c]
call fcn.00410950
test al, al
je 0x461245
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2028]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dc450
push 0x4de348
push 2
push 0x2e
push dword [eax + 0xa8]
call fcn.004452b0
mov esi, eax
cmp esi, 0xffffffff
je 0x461245
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dc450
lea ecx, [ebp - 0x2028]
call fcn.00402e90
push eax
push 0
push 0x2e
push esi
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
lea ecx, [ebp - 0x2028]
call fcn.00402e90
push eax
push 0x4e2d1c
push 0x4e23a4
push 0x4e4070
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
push 0
push 0x4e5508
push 0x4dfc20
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x461496
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4612ca
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
nop dword [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e52e0
push esi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402df0
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x461280
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e52e0
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402df0
cmp dword [ebp - 0x6fdc], 0
je 0x461331
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e52e0
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402df0
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6fb4], 0
jbe 0x461472
mov eax, dword [ebp - 0x6fa8]
sub eax, esi
mov dword [ebp - 0x6f8c], eax
mov ecx, esi
call fcn.00402e90
xor edx, edx
mov ecx, eax
call fcn.00409350
test al, al
je 0x461456
mov ecx, edi
call fcn.00472340
test al, al
jne 0x461472
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
lea ecx, [ecx + esi]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dfc20
push 2
push 0x2e
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x461456
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ecx + esi]
call fcn.00402e90
push eax
push 0
mov ecx, esi
call fcn.00402e90
push eax
push 0x2e
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3fd0
mov ecx, esi
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4e2d1c
lea ecx, [ecx + esi]
call fcn.00402e90
push eax
push 0x4e1674
push 0x4dfc20
push 0x4e4008
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x461356
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004209d0
push 1
push 0
push 0
lea ecx, [ebp - 0x21e0]
call fcn.004025c0
lea ecx, [ebp - 0x26a0]
call fcn.00402cd0
lea ecx, [ebp - 0x2260]
call fcn.00402cd0
lea ecx, [ebp - 0x2278]
call fcn.00402cd0
lea ecx, [ebp - 0x6da8]
call fcn.0046cb70
lea ecx, [ebp - 0x256c]
call fcn.0042dbd0
lea ecx, [ebp - 0x22e8]
call fcn.00402cd0
lea ecx, [ebp - 0x1fe4]
call fcn.00402cd0
lea ecx, [ebp - 0x23e8]
call fcn.00402cd0
lea ecx, [ebp - 0x2028]
call fcn.00402cd0
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x46
call fcn.00402cd0
mov ecx, edi
call fcn.00472340
test al, al
jne 0x4636bc
test dword [edi + 0x34], 0x1000
jne 0x4636bc
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x4e5534
push dword [eax + 0x38]
call fcn.0041f260
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x2f
push dword [eax + 0x34]
call fcn.004219b0
push 0xc
lea ecx, [ebp - 0x216c]
call fcn.00401960
lea ecx, [ebp - 0x216c]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2040]
mov byte [ebp - 4], 0xa5
call fcn.00401960
lea ecx, [ebp - 0x2040]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x24b8]
mov byte [ebp - 4], 0xa6
call fcn.00401960
lea ecx, [ebp - 0x24b8]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2178]
mov byte [ebp - 4], 0xa7
call fcn.00401960
lea ecx, [ebp - 0x2178]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2394]
mov byte [ebp - 4], 0xa8
call fcn.00401960
lea ecx, [ebp - 0x2394]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x229c]
mov byte [ebp - 4], 0xa9
call fcn.00401960
lea ecx, [ebp - 0x229c]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2340]
mov byte [ebp - 4], 0xaa
call fcn.00401960
lea ecx, [ebp - 0x2340]
call fcn.00402b30
mov byte [ebp - 4], 0xab
lea ecx, [ebp - 0x28cc]
xor esi, esi
push 0x20
mov dword [ebp - 0x6fb4], esi
call fcn.00401e10
lea ecx, [ebp - 0x28cc]
call fcn.0040d830
mov byte [ebp - 4], 0xac
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004209d0
push esi
push 0x4e5560
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov dword [ebp - 0x6f9c], esi
cmp dword [edi + 0x30], esi
jbe 0x461a49
mov eax, dword [ebp - 0x6fa8]
lea esi, [edi + 0x10c]
mov dword [ebp - 0x6f78], eax
mov ecx, edi
call fcn.00472340
test al, al
jne 0x461a43
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d538c
lea ecx, [ebp - 0x226c]
call fcn.00402e90
push eax
push dword [ebp - 0x6f9c]
mov ecx, esi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2394]
call fcn.00402df0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d53b0
lea ecx, [ebp - 0x2394]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x229c]
call fcn.00402df0
lea ecx, [ebp - 0x229c]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
je 0x461a26
lea ecx, [ebp - 0x2340]
call fcn.00403170
test al, al
je 0x461756
lea eax, [ebp - 0x2340]
push eax
lea ecx, [ebp - 0x226c]
call fcn.00402e90
push dword [ebp - 0x6f9c]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
mov edx, esi
mov ecx, eax
call fcn.00434f90
lea eax, [ebp - 0x216c]
xor esi, esi
push eax
lea ecx, [ebp - 0x229c]
mov dword [ebp - 0x6f8c], esi
call fcn.00402e90
xor edx, edx
mov ecx, eax
call fcn.00435190
test al, al
je 0x461a20
lea ecx, [ebp - 0x216c]
call fcn.00402e90
mov ecx, eax
call fcn.0040fb70
test al, al
je 0x4619f6
inc dword [ebp - 0x6fb4]
lea ecx, [ebp - 0x2480]
push 0xc
call fcn.00401960
lea ecx, [ebp - 0x2480]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x267c]
mov byte [ebp - 4], 0xad
call fcn.00401960
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d5378
lea ecx, [ebp - 0x216c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x267c]
call fcn.00402bc0
lea eax, [ebp - 0x2480]
mov byte [ebp - 4], 0xae
push eax
lea ecx, [ebp - 0x267c]
call fcn.00402e90
mov edx, 0x4dfd0c
mov ecx, eax
call fcn.00435370
test al, al
je 0x4619dc
push 0
push 1
push 1
push 0
push 0x4e357c
lea ecx, [ebp - 0x2480]
call fcn.00403fc0
test eax, eax
jne 0x4619dc
push eax
push 1
push 1
push eax
push 0x4e359c
lea ecx, [ebp - 0x2480]
call fcn.00403fc0
test eax, eax
jne 0x4619dc
push eax
push 1
push 1
push eax
push 0x4e35ec
lea ecx, [ebp - 0x2480]
call fcn.00403fc0
test eax, eax
jne 0x4619dc
push eax
push 1
push 1
push eax
push 0x4e35d0
lea ecx, [ebp - 0x2480]
call fcn.00403fc0
test eax, eax
jne 0x4619dc
push eax
push 0x4e55d4
lea ecx, [ebp - 0x2480]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x4619dc
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2480]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dfce8
push 3
push 0x33
push dword [eax + 0xa8]
call fcn.004452b0
mov esi, eax
cmp esi, 0xffffffff
jne 0x461924
lea ecx, [ebp - 0x267c]
call fcn.00402cd0
lea ecx, [ebp - 0x2480]
mov byte [ebp - 4], 0xac
call fcn.00402cd0
mov esi, dword [ebp - 0x6f8c]
jmp 0x4619f6
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.00402e90
push eax
lea ecx, [ebp - 0x267c]
call fcn.00402e90
push eax
push 0
push 0x33
push esi
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
lea ecx, [ebp - 0x267c]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x4e2300
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x2480]
call fcn.00402e90
push eax
push 0x4e5600
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
lea ecx, [ebp - 0x267c]
call fcn.00402cd0
lea ecx, [ebp - 0x2480]
mov byte [ebp - 4], 0xac
call fcn.00402cd0
mov esi, dword [ebp - 0x6f8c]
jmp 0x4619f6
lea ecx, [ebp - 0x267c]
call fcn.00402cd0
lea ecx, [ebp - 0x2480]
mov byte [ebp - 4], 0xac
call fcn.00402cd0
lea eax, [ebp - 0x216c]
inc esi
push eax
lea ecx, [ebp - 0x229c]
mov dword [ebp - 0x6f8c], esi
call fcn.00402e90
mov edx, esi
mov ecx, eax
call fcn.00435190
test al, al
jne 0x461781
lea esi, [edi + 0x10c]
mov eax, dword [ebp - 0x6f9c]
add dword [ebp - 0x6f78], 0xc
inc eax
mov dword [ebp - 0x6f9c], eax
cmp eax, dword [edi + 0x30]
jb 0x461676
mov esi, dword [ebp - 0x6fb4]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x463660
test esi, esi
jne 0x461a81
lea ecx, [ebp - 0x2340]
call fcn.00403170
test al, al
je 0x461a81
push esi
push 0x4e5630
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
jmp 0x463660
push fcn.00402cd0
push fcn.00402b30
push 2
push 0xc
lea eax, [ebp - 0x2c]
push eax
call fcn.004790e4
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5688
lea ecx, [ebp - 0x2708]
mov byte [ebp - 4], 0xaf
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402df0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5688
lea ecx, [ebp - 0x26fc]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x20]
call fcn.00402df0
push 0xc
lea ecx, [ebp - 0x24e8]
call fcn.00401960
push 1
push 0x4e56d8
lea ecx, [ebp - 0x24e8]
call fcn.00402b80
push 0
push 0x4e57a0
lea ecx, [ebp - 0x1fc8]
mov byte [ebp - 4], 0xb0
call fcn.0040e530
xor esi, esi
mov dword [ebp - 0x6fb4], esi
cmp dword [edi + 0x30], esi
jbe 0x461ead
mov eax, dword [ebp - 0x6fa8]
mov dword [ebp - 0x6f78], eax
mov ecx, edi
call fcn.00472340
test al, al
jne 0x461ead
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d538c
lea ecx, [ebp - 0x226c]
call fcn.00402e90
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2394]
call fcn.00402df0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d53b0
lea ecx, [ebp - 0x2394]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x229c]
call fcn.00402df0
lea ecx, [ebp - 0x229c]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
je 0x461e96
lea eax, [ebp - 0x216c]
xor esi, esi
push eax
lea ecx, [ebp - 0x229c]
mov dword [ebp - 0x6f8c], esi
call fcn.00402e90
xor edx, edx
mov ecx, eax
call fcn.00435190
test al, al
je 0x461e90
nop
lea ecx, [ebp - 0x216c]
call fcn.00402e90
mov ecx, eax
call fcn.0040fb70
test al, al
je 0x461e66
push 0xc
lea ecx, [ebp - 0x2474]
call fcn.00401960
lea ecx, [ebp - 0x2474]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2634]
mov byte [ebp - 4], 0xb1
call fcn.00401960
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d5378
lea ecx, [ebp - 0x216c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2634]
call fcn.00402bc0
lea eax, [ebp - 0x2474]
mov byte [ebp - 4], 0xb2
push eax
lea ecx, [ebp - 0x2634]
call fcn.00402e90
mov edx, 0x4dfe28
mov ecx, eax
call fcn.00435370
test al, al
je 0x461e4c
push 0x4d6a28
lea ecx, [ebp - 0x2474]
call fcn.00402c40
test al, al
jne 0x461e4c
push 0x4d698c
lea ecx, [ebp - 0x2474]
call fcn.00402c40
test al, al
jne 0x461e4c
push 0x4d6df4
lea ecx, [ebp - 0x2474]
call fcn.00402c40
test al, al
jne 0x461e4c
push 0x4e57dc
lea ecx, [ebp - 0x2474]
call fcn.00402c40
test al, al
jne 0x461e4c
push 0
push 0x4e57f4
lea ecx, [ebp - 0x2474]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x461e4c
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2474]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dfde8
push 3
push 0x34
push dword [eax + 0xa8]
call fcn.004452b0
mov esi, eax
cmp esi, 0xffffffff
jne 0x461d94
lea ecx, [ebp - 0x2634]
call fcn.00402cd0
lea ecx, [ebp - 0x2474]
mov byte [ebp - 4], 0xb0
call fcn.00402cd0
mov esi, dword [ebp - 0x6f8c]
jmp 0x461e66
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2634]
call fcn.00402e90
push eax
push 0
push 0x34
push esi
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
lea ecx, [ebp - 0x2634]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x4e2300
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x2474]
call fcn.00402e90
push eax
push 0x4e5828
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
lea ecx, [ebp - 0x2634]
call fcn.00402cd0
lea ecx, [ebp - 0x2474]
mov byte [ebp - 4], 0xb0
call fcn.00402cd0
mov esi, dword [ebp - 0x6f8c]
jmp 0x461e66
lea ecx, [ebp - 0x2634]
call fcn.00402cd0
lea ecx, [ebp - 0x2474]
mov byte [ebp - 4], 0xb0
call fcn.00402cd0
lea eax, [ebp - 0x216c]
inc esi
push eax
lea ecx, [ebp - 0x229c]
mov dword [ebp - 0x6f8c], esi
call fcn.00402e90
mov edx, esi
mov ecx, eax
call fcn.00435190
test al, al
jne 0x461c10
mov esi, dword [ebp - 0x6fb4]
add dword [ebp - 0x6f78], 0xc
inc esi
mov dword [ebp - 0x6fb4], esi
cmp esi, dword [edi + 0x30]
jb 0x461b48
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46363f
lea esi, [ebp - 0x2c]
mov dword [ebp - 0x6fb4], 0
mov dword [ebp - 0x6f8c], esi
nop
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46220b
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5854
mov ecx, esi
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2040]
call fcn.00402df0
push 0x260
lea ecx, [ebp - 0x45f0]
call fcn.00409b80
push 1
lea ecx, [ebp - 0x2040]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x45f0]
call fcn.00401120
push 1
lea ecx, [ebp - 0x2040]
mov byte [ebp - 4], 0xb3
call fcn.00402e90
push eax
lea ecx, [ebp - 0x45f0]
call fcn.00401270
test al, al
je 0x4621dd
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4cbd7c
push 1
lea ecx, [ebp - 0x45f0]
call fcn.004012c0
push eax
push 0x4cbd7c
lea ecx, [ebp - 0x2178]
call fcn.00402df0
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2178]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x24e8]
call fcn.00403fc0
test eax, eax
jne 0x4621c4
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 1
lea ecx, [ebp - 0x45f0]
call fcn.004012c0
push eax
push 0x4cbcec
mov ecx, esi
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2040]
call fcn.00402df0
lea ecx, [ebp - 0x2178]
call fcn.00402ce0
push 0
push 0x80
lea ecx, [ebp - 0x2040]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x28cc]
call fcn.0040dad0
test eax, eax
je 0x462092
push 0
lea eax, [ebp - 0x2178]
push eax
lea ecx, [ebp - 0x28cc]
call fcn.0040de90
test eax, eax
je 0x462092
push 0
push 1
push 1
push 0
push 0x4e5864
lea ecx, [ebp - 0x2178]
call fcn.00403fc0
mov esi, eax
push 0
lea ecx, [esi + 0xa]
push ecx
push 1
push 0
push 0x4e587c
lea ecx, [ebp - 0x2178]
call fcn.00403fc0
test esi, esi
je 0x462087
test eax, eax
je 0x462087
sub eax, esi
lea ecx, [ebp - 0x2178]
sub eax, 0xb
push eax
lea eax, [esi + 0xb]
push eax
call fcn.00403f80
jmp 0x462092
lea ecx, [ebp - 0x2178]
call fcn.00402ce0
lea ecx, [ebp - 0x2178]
call fcn.00403170
test al, al
je 0x4620c9
push 1
lea ecx, [ebp - 0x45f0]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x2178]
call fcn.00402c00
push 0
lea ecx, [ebp - 0x2178]
call fcn.00403080
jmp 0x4620d6
push 3
lea ecx, [ebp - 0x2178]
call fcn.00404aa0
push 0
push 0x4e57f4
lea ecx, [ebp - 0x2040]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x4621c4
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2040]
call fcn.00402e90
push eax
push 0x4dc450
lea ecx, [ebp - 0x2178]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 3
push 0x34
push dword [eax + 0xa8]
call fcn.004452b0
mov esi, eax
cmp esi, 0xffffffff
je 0x4621c4
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dc450
lea ecx, [ebp - 0x2040]
call fcn.00402e90
push eax
push 0
push 0x34
push esi
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
lea ecx, [ebp - 0x2040]
call fcn.00402e90
push eax
push 0x4e2300
push 0x4dc450
push 0x4e1674
lea ecx, [ebp - 0x2178]
call fcn.00402e90
push eax
push 0x4e5898
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
lea ecx, [ebp - 0x45f0]
call fcn.00401220
mov esi, dword [ebp - 0x6f8c]
test al, al
jne 0x461f60
lea ecx, [ebp - 0x45f0]
mov byte [ebp - 4], 0xb0
call fcn.00401170
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f8c], esi
mov dword [ebp - 0x6fb4], eax
cmp eax, 2
jb 0x461ed0
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46363f
push 0x24
lea ecx, [ebp - 0x2868]
call fcn.0042ee40
lea ecx, [ebp - 0x2868]
call fcn.00410190
push 0xc
lea ecx, [ebp - 0x2290]
mov byte [ebp - 4], 0xb4
call fcn.00401960
lea ecx, [ebp - 0x2290]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x245c]
mov byte [ebp - 4], 0xb5
call fcn.00401960
lea ecx, [ebp - 0x245c]
call fcn.00402b30
push 0
push 0x4e58bc
lea ecx, [ebp - 0x1fc8]
mov byte [ebp - 4], 0xb6
call fcn.0040e530
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e58f0
lea ecx, [edi + 0x33c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402df0
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6fb4], 0
jbe 0x462700
mov esi, dword [ebp - 0x6fa8]
mov dword [ebp - 0x6f9c], esi
mov ecx, edi
call fcn.00472340
test al, al
jne 0x462700
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e592c
lea ecx, [ebp - 0x226c]
call fcn.00402e90
push eax
push dword [ebp - 0x6fb4]
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x216c]
call fcn.00402df0
lea eax, [ebp - 0x2040]
xor edx, edx
push eax
lea ecx, [ebp - 0x216c]
mov dword [ebp - 0x6f8c], edx
call fcn.00402e90
xor edx, edx
mov ecx, eax
call fcn.00435190
test al, al
je 0x4626e1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e03a8
lea ecx, [ebp - 0x2040]
call fcn.00404260
push 0x100
lea ecx, [ebp - 0x2040]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2868]
call fcn.00410240
test al, al
je 0x4626b4
push 0
lea eax, [ebp - 0x2a78]
mov dword [ebp - 0x6eec], 0
push eax
xorps xmm0, xmm0
lea ecx, [ebp - 0x2868]
push 0x4e0040
movups xmmword [ebp - 0x6efc], xmm0
call fcn.00410890
test al, al
je 0x4626b4
lea eax, [ebp - 0x2a78]
push eax
lea eax, [ebp - 0x6efc]
push eax
lea ecx, [ebp - 0x2868]
call fcn.004110b0
test al, al
je 0x4626b4
lea eax, [ebp - 0x2290]
push eax
push 0x4e0074
lea eax, [ebp - 0x6efc]
push eax
lea ecx, [ebp - 0x2868]
call fcn.00410b80
test eax, eax
je 0x462693
push 0
push 1
push 1
push 0
push 0x4e5968
lea ecx, [ebp - 0x2290]
call fcn.00403fc0
lea ecx, [ebp - 0x2290]
mov esi, eax
call fcn.00402d50
sub eax, 0x12
cmp esi, eax
je 0x46268d
push 0
push 1
push 1
push 0
push 0x4e5990
lea ecx, [ebp - 0x2290]
call fcn.00403fc0
lea ecx, [ebp - 0x2290]
mov esi, eax
call fcn.00402d50
sub eax, 0xb
cmp esi, eax
je 0x46268d
push 0
push 1
push 1
push 0
push 0x4e59ac
lea ecx, [ebp - 0x2290]
call fcn.00403fc0
lea ecx, [ebp - 0x2290]
mov esi, eax
call fcn.00402d50
sub eax, 0xb
cmp esi, eax
je 0x46268d
lea eax, [ebp - 0x6efc]
push eax
lea eax, [ebp - 0x2bbc]
push eax
push 0x4e59c8
lea ecx, [ebp - 0x2868]
call fcn.00410890
test al, al
je 0x46268d
lea eax, [ebp - 0x2290]
push eax
push 0x4e59e4
lea eax, [ebp - 0x2bbc]
push eax
lea ecx, [ebp - 0x2868]
call fcn.00410b80
test eax, eax
je 0x46268d
push 0x4e351c
lea ecx, [ebp - 0x2290]
call fcn.00402c40
test al, al
jne 0x46268d
lea eax, [ebp - 0x245c]
push eax
push 0x4e0050
lea eax, [ebp - 0x6efc]
push eax
lea ecx, [ebp - 0x2868]
call fcn.00410b80
test eax, eax
jne 0x462553
lea eax, [ebp - 0x245c]
push eax
push 0x4e0068
lea eax, [ebp - 0x6efc]
push eax
lea ecx, [ebp - 0x2868]
call fcn.00410b80
test eax, eax
je 0x46268d
lea ecx, [ebp - 0x2290]
call fcn.00402e90
lea ecx, [ebp - 0x1f8c]
mov esi, eax
call fcn.00402e90
mov edx, esi
mov ecx, eax
call fcn.00409350
test al, al
jne 0x46268d
push 0
push 0x4e59f0
lea ecx, [ebp - 0x2290]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x46268d
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x245c]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f9c]
push eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2290]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 3
push 0x35
push dword [eax + 0xa8]
call fcn.004452b0
mov esi, eax
cmp esi, 0xffffffff
je 0x46268d
lea ecx, [ebp - 0x2040]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f9c]
push eax
push 0
push 0
push 0
push 0
push 0
call fcn.00402e90
push eax
lea ecx, [ebp - 0x245c]
call fcn.00402e90
push eax
push 0
push 0x35
push esi
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
lea ecx, [ebp - 0x245c]
call fcn.00402e90
mov esi, dword [ebp - 0x6f9c]
mov ecx, esi
push eax
push 0x4e2300
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x2290]
call fcn.00402e90
push eax
push 0x4e2b20
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
jmp 0x462693
mov esi, dword [ebp - 0x6f9c]
lea eax, [ebp - 0x2a78]
push eax
lea eax, [ebp - 0x6efc]
push eax
lea ecx, [ebp - 0x2868]
call fcn.004110b0
test al, al
jne 0x4623f1
inc dword [ebp - 0x6f8c]
lea eax, [ebp - 0x2040]
push eax
lea ecx, [ebp - 0x216c]
call fcn.00402e90
mov edx, dword [ebp - 0x6f8c]
mov ecx, eax
call fcn.00435190
test al, al
jne 0x462351
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f9c], esi
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [edi + 0x30]
jb 0x4622d0
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46361e
push 0
push 0x4e5a18
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea ecx, [ebp - 0x6ea0]
call fcn.0046cb40
mov byte [ebp - 4], 0xb7
lea ecx, [ebp - 0x6e98]
mov eax, dword [edi + 8]
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6ea0], eax
mov dword [ebp - 0x6e9c], 0x37
call fcn.00402ce0
lea eax, [ebp - 0x21e0]
mov dword [ebp - 0x6e88], eax
lea ecx, [ebp - 0x6e78]
lea eax, [edi + 0x164]
mov dword [ebp - 0x6e84], eax
lea eax, [ebp - 0x1fc8]
mov dword [ebp - 0x6e80], eax
mov eax, dword [edi + 4]
push 0x4d1158
mov dword [ebp - 0x6e7c], eax
call fcn.00402c00
mov ecx, edi
call fcn.00472340
test al, al
jne 0x463613
push 0xc
lea ecx, [ebp - 0x23c4]
call fcn.00401960
lea ecx, [ebp - 0x23c4]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2430]
mov byte [ebp - 4], 0xb8
call fcn.00401960
lea ecx, [ebp - 0x2430]
call fcn.00402b30
xor esi, esi
mov byte [ebp - 4], 0xb9
mov dword [ebp - 0x6f78], esi
cmp dword [edi + 0x30], esi
jbe 0x462985
nop dword [eax]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x462985
push esi
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402d50
cmp eax, 3
jl 0x462975
lea eax, [ebp - 0x6e98]
push eax
lea ecx, [ebp - 0x226c]
call fcn.00402e90
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
mov edx, esi
mov ecx, eax
call fcn.00434f90
mov esi, dword [ebp - 0x6f78]
test al, al
je 0x462975
push esi
lea ecx, [edi + 0x114]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x250c]
mov dword [ebp - 0x6e8c], eax
call fcn.00402e90
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x23c4]
call fcn.00402df0
lea ecx, [ebp - 0x23c4]
call fcn.00402e90
mov ecx, eax
call fcn.0040fb70
test al, al
je 0x462975
lea ecx, [ebp - 0x23c4]
call fcn.00402e90
push eax
lea eax, [ebp - 0x6ea0]
mov ecx, edi
push eax
call fcn.00451370
mov ecx, edi
call fcn.00472340
test al, al
jne 0x462985
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25bc]
call fcn.00402e90
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x23c4]
call fcn.00402df0
lea ecx, [ebp - 0x23c4]
call fcn.00402e90
mov ecx, eax
call fcn.0040fb70
test al, al
je 0x462975
push 0
lea ecx, [ebp - 0x23c4]
call fcn.00403100
lea ecx, [ebp - 0x23c4]
call fcn.00402e90
push eax
lea eax, [ebp - 0x6ea0]
mov ecx, edi
push eax
call fcn.00451370
inc esi
mov dword [ebp - 0x6f78], esi
cmp esi, dword [edi + 0x30]
jb 0x4627f0
mov ecx, edi
call fcn.00472340
test al, al
jne 0x4635fd
lea ecx, [ebp - 0x264c]
mov dword [ebp - 0x6e8c], 0x4dc450
call fcn.00402e90
push eax
lea eax, [ebp - 0x6ea0]
mov ecx, edi
push eax
call fcn.00451370
mov ecx, edi
call fcn.00472340
test al, al
jne 0x4635fd
push 0
push 1
lea ecx, [ebp - 0x2640]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x23c4]
call fcn.00402da0
mov ecx, eax
call fcn.00403100
lea ecx, [ebp - 0x23c4]
call fcn.00402e90
push eax
lea eax, [ebp - 0x6ea0]
mov ecx, edi
push eax
call fcn.00451370
mov ecx, edi
call fcn.00472340
test al, al
jne 0x4635fd
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x462a7b
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5a48
push esi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402df0
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x462a31
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5a90
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402df0
cmp dword [ebp - 0x6fdc], 0
je 0x462ae2
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e5a90
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402df0
push 4
lea ecx, [ebp - 0x22c4]
call fcn.00405950
lea ecx, [ebp - 0x22c4]
call fcn.00406220
cmp dword [ebp - 0x6fac], 0
mov byte [ebp - 4], 0xba
mov dword [ebp - 0x6fb4], 0
jbe 0x462e17
mov eax, dword [ebp - 0x6fa8]
mov ecx, esi
sub ecx, eax
mov dword [ebp - 0x6f78], eax
mov dword [ebp - 0x6fcc], ecx
nop dword [eax + eax]
add eax, ecx
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f8c], eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x22c4]
call fcn.00407730
test al, al
je 0x462de9
mov ecx, edi
call fcn.00472340
test al, al
jne 0x462e17
xor esi, esi
mov ecx, edi
mov dword [ebp - 0x6fa4], esi
call fcn.00472340
test al, al
jne 0x462de9
lea eax, [ebp - 0x6cec]
push eax
push esi
lea ecx, [ebp - 0x22c4]
call fcn.00407b10
test al, al
je 0x462de3
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5ad8
push dword [ebp - 0x6cec]
push 0x4cbcec
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402df0
mov ecx, dword [ebp - 0x6f8c]
push 0
call fcn.00402d50
push eax
push 1
push 0
push 0x4e5b00
lea ecx, [ebp - 0x1f8c]
call fcn.00403fc0
test eax, eax
je 0x462dd3
lea eax, [ebp - 0x2430]
push eax
push 0x4cbcf4
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407ab0
test al, al
je 0x462dd3
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2340]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2430]
call fcn.00403fc0
mov dword [ebp - 0x6f80], eax
test eax, eax
je 0x462dd3
lea ecx, [ebp - 0x2340]
call fcn.00402d50
add eax, dword [ebp - 0x6f80]
lea ecx, [ebp - 0x2430]
push eax
call fcn.00403f10
push 3
push 0
push 0
push 0x4cbcf4
push 0x4cc5d8
lea ecx, [ebp - 0x2430]
call fcn.004047c0
mov ecx, eax
call fcn.00404aa0
lea ecx, [ebp - 0x2430]
call fcn.00402d50
cmp eax, 3
jl 0x462dd3
push 0
push 0x4e14e0
lea ecx, [ebp - 0x2430]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x462dd3
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
push 0x4cbcec
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402df0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2430]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4ddac8
push 3
push 0x37
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x462dd3
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.00402e90
push eax
push 0
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
push 0x37
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x2430]
call fcn.00402e90
push eax
push 0x4e3cc8
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
mov ecx, edi
inc esi
call fcn.00472340
test al, al
je 0x462b80
mov dword [ebp - 0x6fa4], esi
mov ecx, dword [ebp - 0x6fb4]
mov eax, dword [ebp - 0x6f78]
inc ecx
add eax, 0xc
mov dword [ebp - 0x6fb4], ecx
cmp ecx, dword [ebp - 0x6fac]
mov ecx, dword [ebp - 0x6fcc]
mov dword [ebp - 0x6f78], eax
jb 0x462b30
mov ecx, edi
call fcn.00472340
test al, al
jne 0x4635f2
push 0
push 0x4e5b14
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
push 0xc
lea ecx, [ebp - 0x24f4]
call fcn.00401960
lea ecx, [ebp - 0x24f4]
call fcn.00402b30
mov byte [ebp - 4], 0xbb
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6fb4], 0
jbe 0x4635b8
mov esi, dword [ebp - 0x6fa8]
nop
mov ecx, edi
call fcn.00472340
test al, al
jne 0x4635b8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e592c
lea ecx, [ebp - 0x226c]
call fcn.00402e90
push eax
push dword [ebp - 0x6fb4]
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x216c]
call fcn.00402df0
lea eax, [ebp - 0x24f4]
xor edx, edx
push eax
lea ecx, [ebp - 0x216c]
mov dword [ebp - 0x6f8c], edx
call fcn.00402e90
xor edx, edx
mov ecx, eax
call fcn.00435190
test al, al
je 0x46359f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d5328
lea ecx, [ebp - 0x24f4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2040]
call fcn.00402df0
lea ecx, [ebp - 0x2040]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
je 0x463026
push 0
push 0x4e5b4c
push 0x4e0308
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x463026
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2040]
call fcn.00402e90
push eax
mov ecx, esi
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e0308
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x463026
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2040]
call fcn.00402e90
push eax
push 0
push 0x38
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3fd0
lea ecx, [ebp - 0x2040]
call fcn.00402e90
push eax
push 0x4e2300
mov ecx, esi
call fcn.00402e90
push eax
push 0x4e1674
push 0x4e0308
push 0x4e4008
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d5344
lea ecx, [ebp - 0x24f4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2040]
call fcn.00402df0
lea ecx, [ebp - 0x2040]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
jne 0x463092
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4e03a8
lea ecx, [ebp - 0x24f4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2040]
call fcn.00402df0
lea ecx, [ebp - 0x2040]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
je 0x463197
push 0
push 0x4e5b4c
push 0x4e0368
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x463197
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2040]
call fcn.00402e90
push eax
mov ecx, esi
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e0368
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x463197
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2040]
call fcn.00402e90
push eax
push 0
push 0x38
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3fd0
lea ecx, [ebp - 0x2040]
call fcn.00402e90
push eax
push 0x4e2300
mov ecx, esi
call fcn.00402e90
push eax
push 0x4e1674
push 0x4e0368
push 0x4e4008
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d535c
lea ecx, [ebp - 0x24f4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2040]
call fcn.00402df0
lea ecx, [ebp - 0x2040]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
jne 0x463203
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4e02e8
lea ecx, [ebp - 0x24f4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2040]
call fcn.00402df0
lea ecx, [ebp - 0x2040]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
je 0x463308
push 0
push 0x4e5b4c
push 0x4e02a0
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x463308
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2040]
call fcn.00402e90
push eax
mov ecx, esi
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e02a0
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x463308
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2040]
call fcn.00402e90
push eax
push 0
push 0x38
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3fd0
lea ecx, [ebp - 0x2040]
call fcn.00402e90
push eax
push 0x4e2300
mov ecx, esi
call fcn.00402e90
push eax
push 0x4e1674
push 0x4e02a0
push 0x4e4008
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d5378
lea ecx, [ebp - 0x24f4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2040]
call fcn.00402df0
lea ecx, [ebp - 0x2040]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
je 0x46343d
push 0
push 0x4e5b4c
push 0x4e03cc
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x46343d
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2040]
call fcn.00402e90
push eax
mov ecx, esi
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e03cc
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x46343d
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2040]
call fcn.00402e90
push eax
push 0
push 0x38
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3fd0
lea ecx, [ebp - 0x2040]
call fcn.00402e90
push eax
push 0x4e2300
mov ecx, esi
call fcn.00402e90
push eax
push 0x4e1674
push 0x4e03cc
push 0x4e4008
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5b78
lea ecx, [ebp - 0x24f4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2040]
call fcn.00402df0
lea ecx, [ebp - 0x2040]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
je 0x463572
push 0
push 0x4e5b4c
push 0x4e5b8c
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x463572
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2040]
call fcn.00402e90
push eax
mov ecx, esi
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e5b8c
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x463572
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2040]
call fcn.00402e90
push eax
push 0
push 0x38
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3fd0
lea ecx, [ebp - 0x2040]
call fcn.00402e90
push eax
push 0x4e2300
mov ecx, esi
call fcn.00402e90
push eax
push 0x4e1674
push 0x4e5b8c
push 0x4e4008
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
inc dword [ebp - 0x6f8c]
lea eax, [ebp - 0x24f4]
push eax
lea ecx, [ebp - 0x216c]
call fcn.00402e90
mov edx, dword [ebp - 0x6f8c]
mov ecx, eax
call fcn.00435190
test al, al
jne 0x462ef1
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [edi + 0x30]
jb 0x462e70
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004209d0
mov ecx, edi
call fcn.00472340
test al, al
jne 0x4635e7
push 1
push 0
push 0
lea ecx, [ebp - 0x21e0]
call fcn.004025c0
lea ecx, [ebp - 0x24f4]
call fcn.00402cd0
lea ecx, [ebp - 0x22c4]
call fcn.00407760
lea ecx, [ebp - 0x2430]
call fcn.00402cd0
lea ecx, [ebp - 0x23c4]
call fcn.00402cd0
lea ecx, [ebp - 0x6ea0]
call fcn.0046cb70
lea ecx, [ebp - 0x245c]
call fcn.00402cd0
lea ecx, [ebp - 0x2290]
call fcn.00402cd0
lea ecx, [ebp - 0x2868]
call fcn.0042dbd0
lea ecx, [ebp - 0x24e8]
call fcn.00402cd0
push fcn.00402cd0
push 2
push 0xc
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0xac
push eax
call fcn.00479158
lea ecx, [ebp - 0x28cc]
call fcn.00401df0
lea ecx, [ebp - 0x2340]
call fcn.00402cd0
lea ecx, [ebp - 0x229c]
call fcn.00402cd0
lea ecx, [ebp - 0x2394]
call fcn.00402cd0
lea ecx, [ebp - 0x2178]
call fcn.00402cd0
lea ecx, [ebp - 0x24b8]
call fcn.00402cd0
lea ecx, [ebp - 0x2040]
call fcn.00402cd0
lea ecx, [ebp - 0x216c]
mov byte [ebp - 4], 0x46
call fcn.00402cd0
mov ecx, edi
call fcn.00472340
test al, al
jne 0x4670ab
test dword [edi + 0x34], 0x1000
jne 0x4670ab
push 0
push 0x4e5bd0
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x4e5c1c
push dword [eax + 0x38]
call fcn.0041f260
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x32
push dword [eax + 0x34]
call fcn.004219b0
push 0xc
lea ecx, [ebp - 0x205c]
call fcn.00401960
lea ecx, [ebp - 0x205c]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x1fd4]
mov byte [ebp - 4], 0xbc
call fcn.00401960
lea ecx, [ebp - 0x1fd4]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2524]
mov byte [ebp - 4], 0xbd
call fcn.00401960
lea ecx, [ebp - 0x2524]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2010]
mov byte [ebp - 4], 0xbe
call fcn.00401960
lea ecx, [ebp - 0x2010]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2090]
mov byte [ebp - 4], 0xbf
call fcn.00401960
lea ecx, [ebp - 0x2090]
call fcn.00402b30
push 0x24
lea ecx, [ebp - 0x2610]
mov byte [ebp - 4], 0xc0
call fcn.0042ee40
lea ecx, [ebp - 0x2610]
call fcn.00410190
push 0x260
lea ecx, [ebp - 0x2e30]
mov byte [ebp - 4], 0xc1
call fcn.00409b80
lea ecx, [ebp - 0x2e30]
call fcn.004010f0
push 0x260
lea ecx, [ebp - 0x32f0]
mov byte [ebp - 4], 0xc2
call fcn.00409b80
lea ecx, [ebp - 0x32f0]
call fcn.004010f0
push 0xc
lea ecx, [ebp - 0x21f8]
mov byte [ebp - 4], 0xc3
call fcn.00407690
lea ecx, [ebp - 0x21f8]
call fcn.00478a00
push 0xc
lea ecx, [ebp - 0x235c]
mov byte [ebp - 4], 0xc4
call fcn.00407690
push 0xc
push 0
lea ecx, [ebp - 0x235c]
call fcn.00478c30
push 0xc
lea ecx, [ebp - 0x204c]
mov byte [ebp - 4], 0xc5
call fcn.00407690
push 0xc
push 0
lea ecx, [ebp - 0x204c]
call fcn.00478c30
push 0xc
lea ecx, [ebp - 0x2228]
mov byte [ebp - 4], 0xc6
call fcn.00407690
lea ecx, [ebp - 0x2228]
call fcn.00478a00
push 0xc
lea ecx, [ebp - 0x2254]
mov byte [ebp - 4], 0xc7
call fcn.00407690
push 0xc
push 0
lea ecx, [ebp - 0x2254]
call fcn.004783c0
xor esi, esi
mov byte [ebp - 4], 0xc8
push 0x20
lea ecx, [ebp - 0x2844]
mov dword [ebp - 0x6f9c], esi
call fcn.00401e10
lea ecx, [ebp - 0x2844]
call fcn.0040d830
mov byte [ebp - 4], 0xc9
mov ecx, dword [edi + 0x30]
mov dword [ebp - 0x6f8c], esi
test ecx, ecx
je 0x463f75
lea eax, [edi + 0x10c]
mov dword [ebp - 0x6fb4], eax
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4cbd90
lea ecx, [ebp - 0x2160]
call fcn.00402e90
push eax
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402df0
push 5
lea ecx, [ebp - 0x1fd4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2e30]
call fcn.00401270
test al, al
je 0x463f5d
mov edi, dword [ebp - 0x6f8c]
nop
push 1
push 1
lea ecx, [ebp - 0x2e30]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x2090]
call fcn.00402da0
push 0x4d6a28
lea ecx, [ebp - 0x2090]
call fcn.00402c40
test al, al
jne 0x463f3e
push str.Microsoft
lea ecx, [ebp - 0x2090]
call fcn.00402c40
test al, al
jne 0x463f3e
push 0x4e5c54
lea ecx, [ebp - 0x2090]
call fcn.00402c40
test al, al
jne 0x463f3e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5c68
push 1
lea ecx, [ebp - 0x2e30]
call fcn.004012c0
push eax
push 0x4cbcec
lea ecx, [ebp - 0x2160]
call fcn.00402e90
mov ecx, dword [ebp - 0x6fb4]
push eax
push edi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402df0
lea ecx, [ebp - 0x205c]
call fcn.00402e90
push eax
call dword [0x4ac490]
test al, al
jne 0x463d96
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5ca0
push 1
lea ecx, [ebp - 0x2e30]
call fcn.004012c0
push eax
push 0x4cbcec
lea ecx, [ebp - 0x2160]
call fcn.00402e90
mov ecx, dword [ebp - 0x6fb4]
push eax
push edi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402df0
lea ecx, [ebp - 0x205c]
call fcn.00402e90
push eax
call dword [0x4ac490]
test al, al
jne 0x463d96
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4cbd90
push 1
lea ecx, [ebp - 0x2e30]
call fcn.004012c0
push eax
push 0x4cbcec
lea ecx, [ebp - 0x2160]
call fcn.00402e90
mov ecx, dword [ebp - 0x6fb4]
push eax
push edi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402df0
push 5
lea ecx, [ebp - 0x1fd4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x32f0]
call fcn.00401270
test al, al
je 0x463f3e
push 2
lea ecx, [ebp - 0x1fd4]
call fcn.00403ed0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5c68
push 1
lea ecx, [ebp - 0x32f0]
call fcn.004012c0
push eax
push 0x4cbcec
lea ecx, [ebp - 0x1fd4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402df0
lea ecx, [ebp - 0x205c]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
jne 0x463ba2
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4e5ca0
push 1
lea ecx, [ebp - 0x32f0]
call fcn.004012c0
push eax
push 0x4cbcec
lea ecx, [ebp - 0x1fd4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402df0
lea ecx, [ebp - 0x205c]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
je 0x463d7e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5ce4
lea eax, [esi + 1]
push 1
lea ecx, [ebp - 0x32f0]
mov dword [ebp - 0x6f78], eax
call fcn.004012c0
push eax
push 0x4cbcec
lea ecx, [ebp - 0x1fd4]
call fcn.00402e90
push eax
push esi
push 2
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x21f8]
call fcn.00478a30
mov ecx, eax
call fcn.00478ba0
mov ecx, eax
call fcn.00402df0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x32f0]
call fcn.004012c0
push eax
push 0x4cbcec
push 1
lea ecx, [ebp - 0x2e30]
call fcn.004012c0
push eax
push esi
push 2
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x235c]
call fcn.00478a30
mov ecx, eax
call fcn.00478ba0
mov ecx, eax
call fcn.00402df0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x32f0]
call fcn.004012c0
push eax
push 0x4cc5dc
push 1
lea ecx, [ebp - 0x2e30]
call fcn.004012c0
push eax
push esi
push 2
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x204c]
call fcn.00478a30
mov ecx, eax
call fcn.00478ba0
mov ecx, eax
call fcn.00402df0
push esi
push 2
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2254]
call fcn.004782d0
mov ecx, eax
call fcn.004783a0
push 2
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2228]
mov dword [eax], edi
call fcn.00478a30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5cfc
push esi
lea ecx, [ebp - 0x21f8]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402df0
lea ecx, [ebp - 0x205c]
call fcn.00402e90
mov dl, 1
mov ecx, eax
call fcn.0040e890
push 0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2844]
call fcn.0040dad0
test eax, eax
je 0x463d78
push 0
push esi
lea ecx, [ebp - 0x2228]
call fcn.00478ba0
push eax
lea ecx, [ebp - 0x2844]
call fcn.0040de90
test eax, eax
je 0x463d78
push 3
push esi
lea ecx, [ebp - 0x2228]
call fcn.00478ba0
mov ecx, eax
call fcn.00404aa0
mov esi, dword [ebp - 0x6f78]
lea ecx, [ebp - 0x32f0]
call fcn.00401220
test al, al
jne 0x463af8
jmp 0x463f3e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5ce4
lea eax, [esi + 1]
push 1
lea ecx, [ebp - 0x2e30]
mov dword [ebp - 0x6f78], eax
call fcn.004012c0
push eax
push 0x4cbcec
lea ecx, [ebp - 0x2160]
call fcn.00402e90
mov ecx, dword [ebp - 0x6fb4]
push eax
push edi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
push esi
push 2
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x21f8]
call fcn.00478a30
mov ecx, eax
call fcn.00478ba0
mov ecx, eax
call fcn.00402df0
push 1
push 1
lea ecx, [ebp - 0x2e30]
call fcn.004012c0
push eax
push esi
push 2
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x235c]
call fcn.00478a30
mov ecx, eax
call fcn.00478ba0
mov ecx, eax
call fcn.00402da0
push 1
push 1
lea ecx, [ebp - 0x2e30]
call fcn.004012c0
push eax
push esi
push 2
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x204c]
call fcn.00478a30
mov ecx, eax
call fcn.00478ba0
mov ecx, eax
call fcn.00402da0
push esi
push 2
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2254]
call fcn.004782d0
mov ecx, eax
call fcn.004783a0
push 2
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2228]
mov dword [eax], edi
call fcn.00478a30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5cfc
push esi
lea ecx, [ebp - 0x21f8]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402df0
lea ecx, [ebp - 0x205c]
call fcn.00402e90
mov dl, 1
mov ecx, eax
call fcn.0040e890
push 0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2844]
call fcn.0040dad0
test eax, eax
je 0x463f38
push 0
push esi
lea ecx, [ebp - 0x2228]
call fcn.00478ba0
push eax
lea ecx, [ebp - 0x2844]
call fcn.0040de90
test eax, eax
je 0x463f38
push 3
push esi
lea ecx, [ebp - 0x2228]
call fcn.00478ba0
mov ecx, eax
call fcn.00404aa0
mov esi, dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2e30]
call fcn.00401220
test al, al
jne 0x463940
mov edi, dword [ebp - 0x6f7c]
mov dword [ebp - 0x6f9c], esi
mov eax, dword [ebp - 0x6f8c]
mov ecx, dword [edi + 0x30]
inc eax
mov dword [ebp - 0x6f8c], eax
cmp eax, ecx
jb 0x4638d0
mov dword [ebp - 0x6f78], 0
test ecx, ecx
je 0x46418f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5d18
lea ecx, [ebp - 0x226c]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
push ecx
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402df0
lea ecx, [ebp - 0x205c]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
jne 0x464041
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4e5d70
lea ecx, [ebp - 0x226c]
call fcn.00402e90
push eax
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402df0
lea ecx, [ebp - 0x205c]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
je 0x464179
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5dd8
lea ecx, [ebp - 0x226c]
inc esi
call fcn.00402e90
push eax
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
push dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x21f8]
push 2
push esi
call fcn.00478a30
mov ecx, eax
call fcn.00478ba0
mov ecx, eax
call fcn.00402df0
push 1
push 0x4e5df8
push dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x235c]
push 2
push esi
call fcn.00478a30
mov ecx, eax
call fcn.00478ba0
mov ecx, eax
call fcn.00402da0
push 1
push 0x4e5e30
push dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x204c]
push 2
push esi
call fcn.00478a30
mov ecx, eax
call fcn.00478ba0
mov ecx, eax
call fcn.00402da0
push dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x2254]
push 2
push esi
call fcn.004782d0
mov ecx, eax
call fcn.004783a0
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov dword [eax], ecx
lea ecx, [ebp - 0x2160]
push 0x4e5e4c
call fcn.00402e90
push eax
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
push dword [ebp - 0x6f9c]
push 2
push esi
lea ecx, [ebp - 0x2228]
call fcn.00478a30
mov ecx, eax
call fcn.00478ba0
mov ecx, eax
call fcn.00402df0
mov dword [ebp - 0x6f9c], esi
mov eax, dword [ebp - 0x6f78]
inc eax
mov dword [ebp - 0x6f78], eax
cmp eax, dword [edi + 0x30]
jb 0x463f87
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46700d
lea ecx, [ebp - 0x1fc8]
push 0
test esi, esi
jne 0x4641b9
push 0x4e5e88
call fcn.0040e530
jmp 0x46700d
push 0x4e5f08
call fcn.0040e530
mov dword [ebp - 0x6f78], 0
test esi, esi
je 0x4648ab
mov ecx, edi
call fcn.00472340
test al, al
jne 0x4648ab
push 0x4e5e30
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402c40
mov byte [ebp - 0x6f81], al
lea ecx, [ebp - 0x21f8]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
je 0x46422c
push 0x4e5f74
jmp 0x464231
push 0x4e5f80
push dword [ebp - 0x6f78]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402df0
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2254]
call fcn.004783a0
push 0x260
lea ecx, [ebp - 0x5690]
mov eax, dword [eax]
mov dword [ebp - 0x6fb4], eax
call fcn.00409b80
push 1
lea ecx, [ebp - 0x205c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x5690]
call fcn.00401120
push 3
lea ecx, [ebp - 0x205c]
mov byte [ebp - 4], 0xca
call fcn.00403ed0
lea ecx, [ebp - 0x5690]
call fcn.00401260
test al, al
je 0x464887
mov esi, dword [ebp - 0x6f78]
nop dword [eax + eax]
push 1
lea ecx, [ebp - 0x5690]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402c00
cmp byte [ebp - 0x6f81], 0
jne 0x464317
push 0x4e351c
lea ecx, [ebp - 0x1fd4]
call fcn.00402c70
test al, al
je 0x464317
push 0
push 1
push 1
push 0
push 0x4e352c
lea ecx, [ebp - 0x1fd4]
call fcn.00403fc0
cmp eax, 1
jne 0x46486e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3540
push 1
lea ecx, [ebp - 0x5690]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402df0
push 0x100
lea ecx, [ebp - 0x1fd4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2610]
call fcn.00410240
test al, al
je 0x46486e
lea eax, [ebp - 0x2010]
push eax
push 0x4cde84
push 0x4e3568
lea ecx, [ebp - 0x2610]
call fcn.00410b30
test eax, eax
je 0x4645b7
push 0
push 1
push 1
push 0
push 0x4e357c
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x4645b7
push eax
push 1
push 1
push eax
push 0x4e359c
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x4645b7
push eax
push 1
push 1
push eax
push 0x4e35ec
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x4645b7
push 0x4e35b8
lea ecx, [ebp - 0x2010]
call fcn.00402c40
test al, al
jne 0x4645b7
push 0
push 1
push 1
push 0
push 0x4e35d0
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x4645b7
push eax
push 0x4e5f90
lea ecx, [ebp - 0x2010]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x4645b7
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4cbd68
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
push 0x4e5fdc
lea ecx, [ebp - 0x25e0]
call fcn.00402df0
mov eax, dword [ebp - 0x6fb4]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 1
lea ecx, [ebp - 0x2010]
mov dword [ebp - 0x6f8c], eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x25e0]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x3e
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4645b7
push 0
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
push 0
push 0
push 0
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402e90
push eax
push 0x4e3568
push 0x3e
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0x4e3654
lea ecx, [ebp - 0x1fd4]
call fcn.00402e90
push eax
push 0x4e2d1c
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4e1658
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x2010]
call fcn.00402e90
push eax
push 0x4e3688
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
lea eax, [ebp - 0x2ab4]
mov dword [ebp - 0x6f3c], 0
push eax
push 0x4cde84
xorps xmm0, xmm0
lea ecx, [ebp - 0x2610]
push 0x4e36a8
movups xmmword [ebp - 0x6f4c], xmm0
call fcn.00410950
test al, al
je 0x46486e
lea eax, [ebp - 0x2ab4]
push eax
lea eax, [ebp - 0x6f4c]
push eax
lea ecx, [ebp - 0x2610]
call fcn.004110b0
test al, al
je 0x46486e
lea eax, [ebp - 0x2010]
push eax
lea eax, [ebp - 0x6f4c]
push eax
lea ecx, [ebp - 0x2610]
call fcn.00410ac0
test eax, eax
je 0x46484d
push 0
push 1
push 1
push 0
push 0x4e357c
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x46484d
push eax
push 1
push 1
push eax
push 0x4e359c
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x46484d
push eax
push 1
push 1
push eax
push 0x4e35ec
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x46484d
push 0x4e35b8
lea ecx, [ebp - 0x2010]
call fcn.00402c40
test al, al
jne 0x46484d
push 0
push 1
push 1
push 0
push 0x4e35d0
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x46484d
push eax
push 0x4e5f90
lea ecx, [ebp - 0x2010]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x46484d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4cbd68
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
push 0x4e5ff4
lea ecx, [ebp - 0x25e0]
call fcn.00402df0
mov eax, dword [ebp - 0x6fb4]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 1
lea ecx, [ebp - 0x2010]
mov dword [ebp - 0x6f8c], eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x25e0]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x3e
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x46484d
push 0
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
push 0
push 0
push 0
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402e90
push eax
push 0x4e36a8
push 0x3e
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0x4e3654
lea ecx, [ebp - 0x1fd4]
call fcn.00402e90
push eax
push 0x4e2d1c
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4e1658
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x2010]
call fcn.00402e90
push eax
push 0x4e6014
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
lea eax, [ebp - 0x2ab4]
push eax
lea eax, [ebp - 0x6f4c]
push eax
lea ecx, [ebp - 0x2610]
call fcn.004110b0
test al, al
jne 0x464610
lea ecx, [ebp - 0x5690]
call fcn.00401220
test al, al
jne 0x4642c0
mov esi, dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x5690]
mov byte [ebp - 4], 0xc9
call fcn.00401170
mov eax, dword [ebp - 0x6f78]
inc eax
mov dword [ebp - 0x6f78], eax
cmp eax, esi
jb 0x4641d5
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46700d
push 0
push 0x4e6040
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov dword [ebp - 0x6f78], 0
test esi, esi
je 0x464d08
nop
mov ecx, edi
call fcn.00472340
test al, al
jne 0x464d08
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2254]
call fcn.004783a0
push 0x4e5e30
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x204c]
mov eax, dword [eax]
mov dword [ebp - 0x6f80], eax
call fcn.00478ba0
mov ecx, eax
call fcn.00402c40
mov byte [ebp - 0x6f81], al
lea ecx, [ebp - 0x21f8]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
je 0x464950
push 0x4e5f74
jmp 0x464955
push 0x4e5f80
push dword [ebp - 0x6f78]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402df0
push 0x260
lea ecx, [ebp - 0x58f0]
call fcn.00409b80
push 1
lea ecx, [ebp - 0x205c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x58f0]
call fcn.00401120
push 3
lea ecx, [ebp - 0x205c]
mov byte [ebp - 4], 0xcb
call fcn.00403ed0
lea ecx, [ebp - 0x58f0]
call fcn.00401260
test al, al
je 0x464ce4
mov esi, dword [ebp - 0x6f78]
nop word [eax + eax]
push 1
lea ecx, [ebp - 0x58f0]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402c00
cmp byte [ebp - 0x6f81], 0
jne 0x464a27
push 0x4e351c
lea ecx, [ebp - 0x1fd4]
call fcn.00402c70
test al, al
je 0x464a27
push 0
push 1
push 1
push 0
push 0x4e352c
lea ecx, [ebp - 0x1fd4]
call fcn.00403fc0
cmp eax, 1
jne 0x464ccb
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3540
push 1
lea ecx, [ebp - 0x58f0]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402df0
push 0x100
lea ecx, [ebp - 0x1fd4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2610]
call fcn.00410240
test al, al
je 0x464ccb
lea eax, [ebp - 0x2010]
push eax
push 0x4cde84
push 0x4e3818
lea ecx, [ebp - 0x2610]
call fcn.00410b30
test eax, eax
je 0x464ccb
push 0
push 1
push 1
push 0
push 0x4e357c
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x464ccb
push eax
push 1
push 1
push eax
push 0x4e36d4
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x464ccb
push eax
push 1
push 1
push eax
push 0x4e359c
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x464ccb
push eax
push 1
push 1
push eax
push 0x4e35ec
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x464ccb
push eax
push 1
push 1
push eax
push 0x4e36f8
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x464ccb
push eax
push 0x4e60a0
lea ecx, [ebp - 0x2010]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x464ccb
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4cbd68
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
push 0x4e60f4
lea ecx, [ebp - 0x25e0]
call fcn.00402df0
mov eax, dword [ebp - 0x6f80]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 1
lea ecx, [ebp - 0x2010]
mov dword [ebp - 0x6f8c], eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x25e0]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x3f
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
je 0x464ccb
push 0
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
push 0
push 0
push 0
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402e90
push eax
push 0x4e38f8
push 0x3f
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0x4e3654
lea ecx, [ebp - 0x1fd4]
call fcn.00402e90
push eax
push 0x4e2d1c
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4e1658
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x2010]
call fcn.00402e90
push eax
push 0x4e6128
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
lea ecx, [ebp - 0x58f0]
call fcn.00401220
test al, al
jne 0x4649d0
mov esi, dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x58f0]
mov byte [ebp - 4], 0xc9
call fcn.00401170
mov eax, dword [ebp - 0x6f78]
inc eax
mov dword [ebp - 0x6f78], eax
cmp eax, esi
jb 0x4648e0
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46700d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6170
lea ecx, [edi + 0x33c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402df0
push 0
push 0x4e61a8
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov dword [ebp - 0x6f78], 0
test esi, esi
je 0x46536b
nop dword [eax + eax]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46536b
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2254]
call fcn.004783a0
push 0xc
lea ecx, [ebp - 0x2774]
mov eax, dword [eax]
mov dword [ebp - 0x6f80], eax
call fcn.00401960
lea ecx, [ebp - 0x2774]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2768]
mov byte [ebp - 4], 0xcc
call fcn.00401960
lea ecx, [ebp - 0x2768]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2670]
mov byte [ebp - 4], 0xcd
call fcn.00401960
lea ecx, [ebp - 0x2670]
call fcn.00402b30
push 0x4e5e30
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x204c]
mov byte [ebp - 4], 0xce
call fcn.00478ba0
mov ecx, eax
call fcn.00402c40
mov byte [ebp - 0x6f81], al
lea ecx, [ebp - 0x21f8]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
je 0x464e34
push 0x4e5f74
jmp 0x464e39
push 0x4e5f80
push dword [ebp - 0x6f78]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402df0
push 0x260
lea ecx, [ebp - 0x4390]
call fcn.00409b80
push 1
lea ecx, [ebp - 0x205c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x4390]
call fcn.00401120
push 3
lea ecx, [ebp - 0x205c]
mov byte [ebp - 4], 0xcf
call fcn.00403ed0
lea ecx, [ebp - 0x4390]
call fcn.00401260
test al, al
je 0x465326
nop dword [eax]
nop dword [eax + eax]
push 1
lea ecx, [ebp - 0x4390]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402c00
cmp byte [ebp - 0x6f81], 0
jne 0x464f07
push 0x4e351c
lea ecx, [ebp - 0x1fd4]
call fcn.00402c70
test al, al
je 0x464f07
push 0
push 1
push 1
push 0
push 0x4e352c
lea ecx, [ebp - 0x1fd4]
call fcn.00403fc0
cmp eax, 1
jne 0x46530d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3540
push 1
lea ecx, [ebp - 0x4390]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402df0
push 0x100
lea ecx, [ebp - 0x1fd4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2610]
call fcn.00410240
test al, al
je 0x46530d
lea eax, [ebp - 0x2aa0]
mov dword [ebp - 0x6f00], 0
push eax
push 0x4cde84
xorps xmm0, xmm0
lea ecx, [ebp - 0x2610]
push 0x4e3a20
movups xmmword [ebp - 0x6f10], xmm0
call fcn.00410950
test al, al
je 0x46530d
lea eax, [ebp - 0x2aa0]
push eax
lea eax, [ebp - 0x6f10]
push eax
lea ecx, [ebp - 0x2610]
call fcn.00410cf0
test al, al
je 0x46530d
lea eax, [ebp - 0x2774]
push eax
lea eax, [ebp - 0x6f10]
push eax
lea ecx, [ebp - 0x2610]
call fcn.00410a80
test al, al
je 0x4652ec
lea ecx, [ebp - 0x2774]
call fcn.00402e90
lea ecx, [ebp - 0x1f8c]
mov esi, eax
call fcn.00402e90
mov edx, esi
mov ecx, eax
call fcn.00409350
test al, al
jne 0x4652ec
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3a4c
lea ecx, [ebp - 0x2774]
call fcn.00402e90
push eax
push 0x4e3a70
lea ecx, [ebp - 0x2768]
call fcn.00402df0
lea eax, [ebp - 0x2090]
push eax
push 0x4cde84
lea ecx, [ebp - 0x2768]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2610]
call fcn.00410b30
test eax, eax
je 0x4652ec
lea ecx, [ebp - 0x2090]
call fcn.00402e90
lea ecx, [ebp - 0x1f8c]
mov esi, eax
call fcn.00402e90
mov edx, esi
mov ecx, eax
call fcn.00409350
test al, al
jne 0x4652ec
push 0
push 0x4e6200
lea ecx, [ebp - 0x2090]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x4652ec
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3aa0
lea ecx, [ebp - 0x2774]
call fcn.00402e90
push eax
push 0x4e3a70
lea ecx, [ebp - 0x2768]
call fcn.00402df0
lea eax, [ebp - 0x2670]
push eax
push 0x4cde84
lea ecx, [ebp - 0x2768]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2610]
call fcn.00410b30
test eax, eax
je 0x465160
push 0
push 1
push 1
push 5
push 0x4cc6c4
lea ecx, [ebp - 0x2670]
call fcn.00403fc0
test eax, eax
jne 0x465160
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4e3ab0
push 1
lea ecx, [ebp - 0x4390]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2670]
call fcn.00404550
lea ecx, [ebp - 0x2670]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
je 0x4652ec
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2774]
call fcn.00402e90
push eax
push 0x4e3a70
lea ecx, [ebp - 0x2768]
call fcn.00402df0
mov eax, dword [ebp - 0x6f80]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x2670]
call fcn.00402e90
push eax
mov ecx, esi
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2090]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x40
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
je 0x4652ec
push 0
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
push 0
push 0
lea ecx, [ebp - 0x2670]
call fcn.00402e90
push eax
push 0
mov ecx, esi
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2768]
call fcn.00402e90
push eax
push 0x40
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0x4e3654
lea ecx, [ebp - 0x2670]
call fcn.00402e90
push eax
push 0x4e2300
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
push 0x4e1658
mov ecx, esi
call fcn.00402e90
push eax
push 0x4e3acc
lea ecx, [ebp - 0x2774]
call fcn.00402e90
push eax
push 0x4d0110
lea ecx, [ebp - 0x2090]
call fcn.00402e90
push eax
push 0x4e6248
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
lea eax, [ebp - 0x2aa0]
push eax
lea eax, [ebp - 0x6f10]
push eax
lea ecx, [ebp - 0x2610]
call fcn.00410cf0
test al, al
jne 0x464fc0
lea ecx, [ebp - 0x4390]
call fcn.00401220
test al, al
jne 0x464eb0
mov esi, dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x4390]
call fcn.00401170
lea ecx, [ebp - 0x2670]
call fcn.00402cd0
lea ecx, [ebp - 0x2768]
call fcn.00402cd0
lea ecx, [ebp - 0x2774]
mov byte [ebp - 4], 0xc9
call fcn.00402cd0
mov eax, dword [ebp - 0x6f78]
inc eax
mov dword [ebp - 0x6f78], eax
cmp eax, esi
jb 0x464d70
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46700d
push 0
push 0x4e6278
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea ecx, [ebp - 0x6e38]
call fcn.0046cb40
mov byte [ebp - 4], 0xd0
lea ecx, [ebp - 0x6e30]
mov eax, dword [edi + 8]
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6e38], eax
mov dword [ebp - 0x6e34], 0x41
call fcn.00402ce0
lea eax, [ebp - 0x21e0]
mov dword [ebp - 0x6e20], eax
lea ecx, [ebp - 0x6e10]
lea eax, [edi + 0x164]
mov dword [ebp - 0x6e1c], eax
lea eax, [ebp - 0x1fc8]
mov dword [ebp - 0x6e18], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0x6e14], eax
call fcn.00402ce0
push 0xc
lea ecx, [ebp - 0x237c]
call fcn.00401960
lea ecx, [ebp - 0x237c]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2310]
mov byte [ebp - 4], 0xd1
call fcn.00401960
lea ecx, [ebp - 0x2310]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2388]
mov byte [ebp - 4], 0xd2
call fcn.00401960
lea ecx, [ebp - 0x2388]
call fcn.00402b30
mov ecx, edi
mov byte [ebp - 4], 0xd3
call fcn.00472340
test al, al
jne 0x466fe1
mov dword [ebp - 0x6f78], 0
test esi, esi
je 0x465700
nop dword [eax]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x465700
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2228]
call fcn.00478ba0
mov ecx, eax
call fcn.00402d50
cmp eax, 5
jl 0x4656e3
mov esi, dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2228]
push esi
call fcn.00478ba0
push eax
lea ecx, [ebp - 0x6e30]
call fcn.00402c10
push esi
lea ecx, [ebp - 0x2254]
call fcn.004783a0
mov ecx, dword [ebp - 0x6fa8]
mov eax, dword [eax]
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
call fcn.00402e90
push esi
lea ecx, [ebp - 0x204c]
mov dword [ebp - 0x6e24], eax
call fcn.00478ba0
push eax
lea ecx, [ebp - 0x6e10]
call fcn.00402c10
push esi
lea ecx, [ebp - 0x2254]
call fcn.004783a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x250c]
mov esi, eax
call fcn.00402e90
push eax
push dword [esi]
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x237c]
call fcn.00402df0
lea ecx, [ebp - 0x237c]
call fcn.00402e90
mov ecx, eax
call fcn.0040fb70
test al, al
je 0x4656dd
lea ecx, [ebp - 0x237c]
call fcn.00402e90
push eax
lea eax, [ebp - 0x6e38]
mov ecx, edi
push eax
call fcn.00451370
mov ecx, edi
call fcn.00472340
test al, al
jne 0x4656fa
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2254]
call fcn.004783a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25bc]
mov esi, eax
call fcn.00402e90
push eax
push dword [esi]
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x237c]
call fcn.00402df0
lea ecx, [ebp - 0x237c]
call fcn.00402e90
mov ecx, eax
call fcn.0040fb70
test al, al
je 0x4656dd
push 0
lea ecx, [ebp - 0x237c]
call fcn.00403100
lea ecx, [ebp - 0x237c]
call fcn.00402e90
push eax
lea eax, [ebp - 0x6e38]
mov ecx, edi
push eax
call fcn.00451370
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x6e30]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2388]
call fcn.00403fc0
test eax, eax
jne 0x4656dd
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4cbd7c
lea ecx, [ebp - 0x6e30]
call fcn.00402e90
push eax
push 0x4cbd7c
lea ecx, [ebp - 0x2388]
call fcn.00404260
lea ecx, [ebp - 0x264c]
mov dword [ebp - 0x6e24], 0x4dc450
call fcn.00402e90
push eax
lea eax, [ebp - 0x6e38]
mov ecx, edi
push eax
call fcn.00451370
mov ecx, edi
call fcn.00472340
test al, al
jne 0x4656fa
lea eax, [ebp - 0x2640]
push eax
lea ecx, [ebp - 0x237c]
call fcn.00402c10
push 0
lea ecx, [ebp - 0x237c]
call fcn.00403100
lea ecx, [ebp - 0x237c]
call fcn.00402e90
push eax
lea eax, [ebp - 0x6e38]
mov ecx, edi
push eax
call fcn.00451370
mov esi, dword [ebp - 0x6f9c]
mov eax, dword [ebp - 0x6f78]
inc eax
mov dword [ebp - 0x6f78], eax
cmp eax, esi
jb 0x465470
jmp 0x465700
mov esi, dword [ebp - 0x6f9c]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x466fe1
push 4
lea ecx, [ebp - 0x2130]
call fcn.00405950
lea ecx, [ebp - 0x2130]
call fcn.00406220
xor eax, eax
mov byte [ebp - 4], 0xd4
mov dword [ebp - 0x6fb4], eax
test esi, esi
je 0x465b40
nop dword [eax + eax]
xor esi, esi
mov dword [ebp - 0x6fa4], esi
nop dword [eax + eax]
push eax
lea ecx, [ebp - 0x2254]
call fcn.004783a0
mov eax, dword [eax]
mov dword [ebp - 0x6f78], eax
test esi, esi
jne 0x4657c0
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push 0x4e5a48
push eax
lea ecx, [edi + 0x104]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
push str.HKU_
lea ecx, [ebp - 0x1f8c]
call fcn.00402df0
mov eax, dword [ebp - 0x6f78]
mov ecx, dword [ebp - 0x6fa8]
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
call fcn.00402e90
mov dword [ebp - 0x6f8c], eax
jmp 0x46581f
cmp esi, 1
jne 0x4657e6
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5a48
push dword [ebp - 0x6fc4]
jmp 0x46580a
cmp esi, 2
jne 0x465815
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5a48
push dword [ebp - 0x6fe0]
lea ecx, [ebp - 0x1f8c]
call fcn.00402df0
mov dword [ebp - 0x6f8c], 0x4dc450
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2130]
call fcn.00407730
test al, al
je 0x465b17
lea eax, [ebp - 0x6cec]
mov dword [ebp - 0x6fcc], 0
push eax
push 0
lea ecx, [ebp - 0x2130]
call fcn.00407b10
test al, al
je 0x465b17
mov esi, dword [ebp - 0x6fb4]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5ad8
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f8c]
push 0x4cbcec
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402df0
push 0
push 0x20019
lea ecx, [ebp - 0x1fd4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x465ae9
lea eax, [ebp - 0x2310]
push eax
push 0x4cbcf4
lea ecx, [ebp - 0x1f74]
call fcn.004078e0
test al, al
je 0x465ae9
lea ecx, [ebp - 0x2310]
call fcn.00403170
test al, al
jne 0x465ae9
push dword [ebp - 0x6f78]
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2310]
call fcn.004032b0
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x2228]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2310]
call fcn.00403fc0
test eax, eax
je 0x465ae9
push esi
lea ecx, [ebp - 0x2228]
call fcn.00478ba0
mov ecx, eax
call fcn.00402d50
inc eax
lea ecx, [ebp - 0x2310]
push eax
call fcn.00403f10
push 0
push 0
push 0x4cbcf4
push 0x4cc5d8
push 3
lea ecx, [ebp - 0x2310]
call fcn.00404aa0
mov ecx, eax
call fcn.004047c0
lea ecx, [ebp - 0x2310]
call fcn.00403170
test al, al
jne 0x465ae9
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f8c]
push 0x4cbcec
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402df0
push 0
push 0x4e1538
lea ecx, [ebp - 0x2310]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x465ae9
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2310]
call fcn.00402e90
push eax
push dword [ebp - 0x6f8c]
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4ddac8
push 5
push 0x41
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x465ae9
push 0
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
push 0
push 0
push 0
push 0
push dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x1fd4]
push 0
call fcn.00402e90
push eax
push 0x41
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
push 0x4e1658
push dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x2310]
push 0x4e1674
call fcn.00402e90
push eax
push 0x4e3cc8
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
mov eax, dword [ebp - 0x6fcc]
lea ecx, [ebp - 0x6cec]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x2130]
mov dword [ebp - 0x6fcc], eax
call fcn.00407b10
test al, al
jne 0x465871
mov esi, dword [ebp - 0x6fa4]
mov eax, dword [ebp - 0x6fb4]
inc esi
mov dword [ebp - 0x6fa4], esi
cmp esi, 3
jb 0x465750
inc eax
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6f9c]
jb 0x465740
mov ecx, edi
call fcn.00472340
test al, al
jne 0x466fd6
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x465bba
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e62e4
push esi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402df0
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x465b70
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e630c
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402df0
cmp dword [ebp - 0x6fdc], 0
je 0x465c21
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e630c
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402df0
push 0
push 0x4e6338
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea ecx, [ebp - 0x2388]
call fcn.00402ce0
cmp dword [ebp - 0x6fac], 0
jbe 0x4663ff
mov ecx, dword [ebp - 0x6fa8]
mov eax, esi
mov edx, dword [ebp - 0x6fac]
sub eax, ecx
mov dword [ebp - 0x6f80], eax
mov eax, dword [ebp - 0x6f9c]
mov dword [ebp - 0x6f78], ecx
mov dword [ebp - 0x6f8c], edx
xor esi, esi
mov dword [ebp - 0x6fa4], esi
test eax, eax
je 0x4663e7
mov ecx, edi
call fcn.00472340
test al, al
jne 0x4663cf
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x235c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f80]
add ecx, dword [ebp - 0x6f78]
push eax
push 0x4cbcec
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2114]
call fcn.00402df0
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2114]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2388]
call fcn.00403fc0
test eax, eax
jne 0x4663be
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4cbd7c
lea ecx, [ebp - 0x2114]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2388]
call fcn.00404260
push 0
push 0x20019
lea ecx, [ebp - 0x2114]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x465f39
lea eax, [ebp - 0x2010]
push eax
push 0x4ddc7c
lea ecx, [ebp - 0x1f74]
call fcn.004078e0
test al, al
je 0x465f39
lea eax, [ebp - 0x217c]
mov dword [ebp - 0x217c], 0
push eax
push 0x4ddd1c
lea ecx, [ebp - 0x1f74]
call fcn.00407a20
test al, al
je 0x465d9e
cmp dword [ebp - 0x217c], 0
jne 0x465f39
push 0
push 1
push 1
push 0
push 0x4e357c
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x465f39
push eax
push 1
push 1
push eax
push 0x4e359c
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x465f39
push eax
push 1
push 1
push eax
push 0x4e35ec
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x465f39
push eax
push 1
push 1
push eax
push 0x4e35d0
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x465f39
push eax
push 0x4e6398
lea ecx, [ebp - 0x2010]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x465f39
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4ddc7c
push 5
push 0x43
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
je 0x465f39
push 0
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
push 0
push 0
push 0
push 0x4ddc7c
call fcn.00402e90
push eax
push 0
lea ecx, [ebp - 0x2114]
call fcn.00402e90
push eax
push 0x43
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x4e1658
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x2010]
call fcn.00402e90
push eax
push 0x4e63e8
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
lea eax, [ebp - 0x2010]
push eax
push 0x4dddbc
lea ecx, [ebp - 0x1f74]
call fcn.004078e0
test al, al
je 0x46618e
lea eax, [ebp - 0x217c]
mov dword [ebp - 0x217c], 0
push eax
push 0x4ddebc
lea ecx, [ebp - 0x1f74]
call fcn.00407a20
test al, al
je 0x465f8a
cmp dword [ebp - 0x217c], 0
je 0x46618e
push 0
push 1
push 1
push 0
push 0x4e357c
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x46618e
push eax
push 1
push 1
push eax
push 0x4e359c
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x46618e
push eax
push 1
push 1
push eax
push 0x4e35ec
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x46618e
push eax
push 1
push 1
push eax
push 0x4e35d0
lea ecx, [ebp - 0x2010]
call fcn.00403fc0
test eax, eax
jne 0x46618e
push eax
push 0x4e6398
lea ecx, [ebp - 0x2010]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x46618e
lea eax, [ebp - 0x2090]
push eax
push 0x4dde88
lea ecx, [ebp - 0x1f74]
call fcn.004078e0
test al, al
je 0x46618e
lea ecx, [ebp - 0x2090]
call fcn.00403170
test al, al
jne 0x46618e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3e78
lea ecx, [ebp - 0x2090]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2310]
call fcn.00402df0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2310]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x43
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
je 0x46618e
push 0
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
push 0
push 0
push 0
push 0x4dddbc
call fcn.00402e90
push eax
push 0
lea ecx, [ebp - 0x2114]
call fcn.00402e90
push eax
push 0x43
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x4e1658
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x2010]
call fcn.00402e90
push eax
push 0x4e6428
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
lea eax, [ebp - 0x217c]
mov dword [ebp - 0x217c], 0
push eax
push 0x4e3f00
lea ecx, [ebp - 0x1f74]
call fcn.00407a20
test al, al
je 0x4663be
cmp dword [ebp - 0x217c], 4
jne 0x4663be
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3f24
lea ecx, [ebp - 0x2114]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402df0
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2130]
call fcn.00407730
test al, al
je 0x4663be
lea eax, [ebp - 0x6cec]
mov dword [ebp - 0x6fcc], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.00407b90
test al, al
je 0x4663be
lea eax, [ebp - 0x2010]
push eax
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f74]
call fcn.004078e0
test al, al
je 0x466396
lea ecx, [ebp - 0x2010]
call fcn.00403170
test al, al
jne 0x466396
push 0
push 0x4e6398
lea ecx, [ebp - 0x2010]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x466396
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4de078
push 5
push 0x43
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6fb4], eax
cmp eax, 0xffffffff
je 0x466396
push 0
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
push 0
push 0
push 0
push dword [ebp - 0x6cec]
call fcn.00402e90
push eax
push 0
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
push 0x43
push dword [ebp - 0x6fb4]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x4e1658
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x2010]
call fcn.00402e90
push eax
push 0x4e6474
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
mov eax, dword [ebp - 0x6fcc]
lea ecx, [ebp - 0x6cec]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6fcc], eax
call fcn.00407b90
test al, al
jne 0x466240
mov eax, dword [ebp - 0x6f9c]
inc esi
cmp esi, eax
jb 0x465c83
jmp 0x4663d5
mov eax, dword [ebp - 0x6f9c]
mov ecx, dword [ebp - 0x6f78]
mov edx, dword [ebp - 0x6f8c]
mov dword [ebp - 0x6fa4], esi
add ecx, 0xc
sub edx, 1
mov dword [ebp - 0x6f78], ecx
mov dword [ebp - 0x6f8c], edx
jne 0x465c73
mov ecx, edi
call fcn.00472340
test al, al
jne 0x466fd6
push 0
push 0x4e64a8
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov esi, dword [ebp - 0x6f9c]
mov dword [ebp - 0x6f78], 0
test esi, esi
je 0x4669a7
mov ecx, edi
call fcn.00472340
test al, al
jne 0x4669a7
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2254]
call fcn.004783a0
push 0x4e5e30
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x204c]
mov eax, dword [eax]
mov dword [ebp - 0x6fcc], eax
call fcn.00478ba0
mov ecx, eax
call fcn.00402c40
mov byte [ebp - 0x6f81], al
lea ecx, [ebp - 0x21f8]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
je 0x4664a8
push 0x4e5f74
jmp 0x4664ad
push 0x4e5f80
push dword [ebp - 0x6f78]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402df0
push 0x260
lea ecx, [ebp - 0x3ed0]
call fcn.00409b80
push 1
lea ecx, [ebp - 0x205c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x3ed0]
call fcn.00401120
push 3
lea ecx, [ebp - 0x205c]
mov byte [ebp - 4], 0xd5
call fcn.00403ed0
lea ecx, [ebp - 0x3ed0]
call fcn.00401260
test al, al
je 0x466983
mov esi, dword [ebp - 0x6f78]
nop
push 1
lea ecx, [ebp - 0x3ed0]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402c00
cmp byte [ebp - 0x6f81], 0
jne 0x466577
push 0x4e351c
lea ecx, [ebp - 0x1fd4]
call fcn.00402c70
test al, al
je 0x466577
push 0
push 1
push 1
push 0
push 0x4e352c
lea ecx, [ebp - 0x1fd4]
call fcn.00403fc0
cmp eax, 1
jne 0x46696a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3540
push 1
lea ecx, [ebp - 0x3ed0]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402df0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6500
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
push 0x4e6528
lea ecx, [ebp - 0x2090]
call fcn.00402df0
lea ecx, [ebp - 0x1fd4]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
je 0x46678e
push 0
push 0x4e6538
lea ecx, [ebp - 0x2090]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x46678e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6500
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
push 0x4e6528
lea ecx, [ebp - 0x2090]
call fcn.00402df0
mov eax, dword [ebp - 0x6fcc]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x1fd4]
mov dword [ebp - 0x6f8c], eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2090]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x42
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x46696a
push 0
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
push 0
push 0
push 0
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402e90
push eax
push 0
push 0x42
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0x4e3fd0
lea ecx, [ebp - 0x1fd4]
call fcn.00402e90
push eax
push 0x4e2d1c
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4e1658
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x2090]
call fcn.00402e90
push eax
push 0x4e4008
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6584
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
push 0x4e6528
lea ecx, [ebp - 0x2090]
call fcn.00402df0
push 0
push 0x4e6538
lea ecx, [ebp - 0x2090]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x46696a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e402c
push 1
lea ecx, [ebp - 0x3ed0]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x205c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402df0
lea ecx, [ebp - 0x1fd4]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
je 0x46696a
mov eax, dword [ebp - 0x6fcc]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x1fd4]
mov dword [ebp - 0x6f8c], eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2090]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x42
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x46696a
push 0
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
push 0
push 0
push 0
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402e90
push eax
push 0
push 0x42
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0x4e3fd0
lea ecx, [ebp - 0x1fd4]
call fcn.00402e90
push eax
push 0x4e2d1c
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4e1658
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x2090]
call fcn.00402e90
push eax
push 0x4e4008
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
lea ecx, [ebp - 0x3ed0]
call fcn.00401220
test al, al
jne 0x466520
mov esi, dword [ebp - 0x6f9c]
lea ecx, [ebp - 0x3ed0]
mov byte [ebp - 4], 0xd4
call fcn.00401170
mov eax, dword [ebp - 0x6f78]
inc eax
mov dword [ebp - 0x6f78], eax
cmp eax, esi
jb 0x466438
mov ecx, edi
call fcn.00472340
test al, al
jne 0x466fd6
mov dword [ebp - 0x6f78], 0
test esi, esi
je 0x466cb9
mov ecx, edi
call fcn.00472340
test al, al
jne 0x466cb9
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x2228]
call fcn.00478ba0
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.00402c10
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x1fd4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2388]
call fcn.00403fc0
test eax, eax
jne 0x466ca4
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4cbd7c
lea ecx, [ebp - 0x1fd4]
call fcn.00402e90
push eax
push 0x4cbd7c
lea ecx, [ebp - 0x2388]
call fcn.00404260
push 1
lea ecx, [ebp - 0x1fd4]
call fcn.00403100
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4048
lea ecx, [ebp - 0x1fd4]
call fcn.00404260
lea ecx, [ebp - 0x1fd4]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
je 0x466ca4
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e65a0
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
push 0x4e6528
lea ecx, [ebp - 0x2090]
call fcn.00402df0
push 0
push 0x4e6538
lea ecx, [ebp - 0x2090]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x466ca4
push 0
lea ecx, [ebp - 0x1fd4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2610]
call fcn.00410240
test al, al
je 0x466ca4
lea eax, [ebp - 0x2a54]
push eax
push 0x4cde84
push 0x4e3568
lea ecx, [ebp - 0x2610]
call fcn.00410950
test al, al
jne 0x466ba1
lea eax, [ebp - 0x2a54]
push eax
push 0x4cde84
push 0x4e36a8
lea ecx, [ebp - 0x2610]
call fcn.00410950
test al, al
jne 0x466ba1
lea eax, [ebp - 0x2a54]
push eax
push 0x4cde84
push 0x4dd900
lea ecx, [ebp - 0x2610]
call fcn.00410950
test al, al
jne 0x466ba1
lea eax, [ebp - 0x2a54]
push eax
push 0x4cde84
push 0x4e3a20
lea ecx, [ebp - 0x2610]
call fcn.00410950
test al, al
je 0x466ca4
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fd4]
call fcn.00402e90
push eax
push 0x4dc450
lea ecx, [ebp - 0x2090]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x42
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x466ca4
push 0
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
push 0
push 0
push 0
push 0
push 0x4dc450
lea ecx, [ebp - 0x1fd4]
call fcn.00402e90
push eax
push 0
push 0x42
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0x4e3654
lea ecx, [ebp - 0x1fd4]
call fcn.00402e90
push eax
push 0x4e2d1c
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
push 0x4e1658
push 0x4e23a4
lea ecx, [ebp - 0x2090]
call fcn.00402e90
push eax
push 0x4e4008
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
mov eax, dword [ebp - 0x6f78]
inc eax
mov dword [ebp - 0x6f78], eax
cmp eax, esi
jb 0x4669c8
lea ecx, [ebp - 0x2388]
call fcn.00402ce0
mov esi, dword [ebp - 0x6fac]
test esi, esi
je 0x466fb2
mov ecx, dword [ebp - 0x6fa8]
mov edx, esi
mov eax, dword [ebp - 0x6fa0]
sub eax, ecx
mov dword [ebp - 0x6f78], ecx
mov dword [ebp - 0x6f80], eax
mov eax, dword [ebp - 0x6f9c]
mov dword [ebp - 0x6fcc], edx
nop word [eax + eax]
xor esi, esi
mov dword [ebp - 0x6fa4], esi
test eax, eax
je 0x466f9a
mov ecx, edi
call fcn.00472340
test al, al
jne 0x466f82
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2388]
call fcn.00403fc0
test eax, eax
jne 0x466f71
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4cbd7c
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
push 0x4cbd7c
lea ecx, [ebp - 0x2388]
call fcn.00404260
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x235c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f80]
add ecx, dword [ebp - 0x6f78]
push eax
push 0x4cbcec
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2114]
call fcn.00402df0
push 0
push 0x20019
lea ecx, [ebp - 0x2114]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x466f71
xor dl, dl
lea ecx, [ebp - 0x1f74]
call fcn.00408db0
test al, al
jne 0x466f71
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e65cc
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
push 0x4e6528
lea ecx, [ebp - 0x2090]
call fcn.00402df0
push 0
push 0x4e6538
lea ecx, [ebp - 0x2090]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x466f71
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2114]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2090]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x42
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f8c], eax
cmp eax, 0xffffffff
je 0x466f71
push 0
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
push 0
push 0
push 0
push 0
call fcn.00402e90
push eax
push 0
lea ecx, [ebp - 0x2114]
call fcn.00402e90
push eax
push 0x42
push dword [ebp - 0x6f8c]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0x4e3fd0
lea ecx, [ebp - 0x2114]
call fcn.00402e90
push eax
push 0x4e2d1c
push esi
lea ecx, [ebp - 0x204c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f78]
push eax
push 0x4e1658
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x2090]
call fcn.00402e90
push eax
push 0x4e4008
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
mov eax, dword [ebp - 0x6f9c]
inc esi
cmp esi, eax
jb 0x466d10
jmp 0x466f88
mov eax, dword [ebp - 0x6f9c]
mov ecx, dword [ebp - 0x6f78]
mov edx, dword [ebp - 0x6fcc]
mov dword [ebp - 0x6fa4], esi
add ecx, 0xc
sub edx, 1
mov dword [ebp - 0x6f78], ecx
mov dword [ebp - 0x6fcc], edx
jne 0x466d00
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004209d0
push 1
push 0
push 0
lea ecx, [ebp - 0x21e0]
call fcn.004025c0
lea ecx, [ebp - 0x2130]
call fcn.00407760
lea ecx, [ebp - 0x2388]
call fcn.00402cd0
lea ecx, [ebp - 0x2310]
call fcn.00402cd0
lea ecx, [ebp - 0x237c]
call fcn.00402cd0
lea ecx, [ebp - 0x6e38]
call fcn.0046cb70
lea ecx, [ebp - 0x2844]
call fcn.00401df0
lea ecx, [ebp - 0x2254]
call fcn.004782c0
lea ecx, [ebp - 0x2228]
call fcn.00478bc0
lea ecx, [ebp - 0x204c]
call fcn.00478bc0
lea ecx, [ebp - 0x235c]
call fcn.00478bc0
lea ecx, [ebp - 0x21f8]
call fcn.00478bc0
lea ecx, [ebp - 0x32f0]
call fcn.00401170
lea ecx, [ebp - 0x2e30]
call fcn.00401170
lea ecx, [ebp - 0x2610]
call fcn.0042dbd0
lea ecx, [ebp - 0x2090]
call fcn.00402cd0
lea ecx, [ebp - 0x2010]
call fcn.00402cd0
lea ecx, [ebp - 0x2524]
call fcn.00402cd0
lea ecx, [ebp - 0x1fd4]
call fcn.00402cd0
lea ecx, [ebp - 0x205c]
mov byte [ebp - 4], 0x46
call fcn.00402cd0
mov ecx, edi
call fcn.00472340
test al, al
jne 0x469c11
test dword [edi + 0x34], 0x1000
jne 0x469c11
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x4e65e0
push dword [eax + 0x38]
call fcn.0041f260
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x34
push dword [eax + 0x34]
call fcn.004219b0
push 0xc
lea ecx, [ebp - 0x2300]
call fcn.00407690
push 0xa
push 0
lea ecx, [ebp - 0x2300]
call fcn.00478c30
push 0xc
lea ecx, [ebp - 0x223c]
mov byte [ebp - 4], 0xd6
call fcn.00407690
push 0xa
push 0
lea ecx, [ebp - 0x223c]
call fcn.00478c30
push 0xc
lea ecx, [ebp - 0x2370]
mov byte [ebp - 4], 0xd7
call fcn.00407690
push 0xa
push 0
lea ecx, [ebp - 0x2370]
call fcn.00478c30
push 0xc
lea ecx, [ebp - 0x209c]
mov byte [ebp - 4], 0xd8
call fcn.00407690
lea ecx, [ebp - 0x209c]
call fcn.00478a00
push 0xc
lea ecx, [ebp - 0x22a8]
mov byte [ebp - 4], 0xd9
call fcn.00407690
push 0xa
push 0
lea ecx, [ebp - 0x22a8]
call fcn.004783c0
push 0x260
lea ecx, [ebp - 0x3090]
mov byte [ebp - 4], 0xda
call fcn.00409b80
lea ecx, [ebp - 0x3090]
call fcn.004010f0
push 0x260
lea ecx, [ebp - 0x3550]
mov byte [ebp - 4], 0xdb
call fcn.00409b80
lea ecx, [ebp - 0x3550]
call fcn.004010f0
push 0xc
lea ecx, [ebp - 0x2074]
mov byte [ebp - 4], 0xdc
call fcn.00401960
lea ecx, [ebp - 0x2074]
call fcn.00402b30
xor esi, esi
mov byte [ebp - 4], 0xdd
cmp dword [edi + 0x30], esi
jbe 0x4675c2
lea eax, [edi + 0x10c]
mov dword [ebp - 0x6f80], eax
nop dword [eax]
push 1
push 1
lea ecx, [ebp - 0x3090]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x2074]
call fcn.00402da0
push 0x4d6a28
lea ecx, [ebp - 0x2074]
call fcn.00402c40
test al, al
jne 0x4675b8
push str.Microsoft
lea ecx, [ebp - 0x2074]
call fcn.00402c40
test al, al
jne 0x4675b8
push 0x4e5c54
lea ecx, [ebp - 0x2074]
call fcn.00402c40
test al, al
jne 0x4675b8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4cbd90
lea ecx, [ebp - 0x226c]
call fcn.00402e90
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2154]
call fcn.00402df0
push 5
lea ecx, [ebp - 0x2154]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x3090]
call fcn.00401270
test al, al
je 0x467521
mov edi, dword [ebp - 0x6f80]
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6614
push 1
lea ecx, [ebp - 0x3090]
call fcn.004012c0
push eax
push 0x4cbcec
lea ecx, [ebp - 0x226c]
call fcn.00402e90
push eax
push esi
mov ecx, edi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2154]
call fcn.00402df0
lea ecx, [ebp - 0x2154]
call fcn.00402e90
push eax
call dword [0x4ac48c]
test eax, eax
je 0x467508
push 1
lea ecx, [ebp - 0x3090]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x2074]
call fcn.00402c00
push eax
lea eax, [ebp - 0x209c]
push eax
push esi
lea eax, [ebp - 0x22a8]
push eax
lea eax, [ebp - 0x2370]
push eax
lea eax, [ebp - 0x223c]
push eax
push 0
lea ecx, [ebp - 0x2154]
call fcn.00403100
lea edx, [ebp - 0x2300]
mov ecx, eax
call fcn.004358a0
test al, al
jne 0x467508
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4cbd90
lea ecx, [ebp - 0x2154]
call fcn.00404260
push 5
lea ecx, [ebp - 0x2154]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x3550]
call fcn.00401270
test al, al
je 0x467508
nop word [eax + eax]
push 0
push 1
lea ecx, [ebp - 0x3550]
call fcn.004012c0
mov edx, 0x4e6628
mov ecx, eax
call fcn.00405a40
test eax, eax
je 0x4674f5
push 0
push 0
push 0
push 0
push 0
push 0x4e6614
push 1
lea ecx, [ebp - 0x3550]
call fcn.004012c0
push eax
push 0x4cbcec
push 1
lea ecx, [ebp - 0x3090]
call fcn.004012c0
push eax
push 0x4cbcec
lea ecx, [ebp - 0x226c]
call fcn.00402e90
push eax
push esi
mov ecx, edi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2154]
call fcn.00402df0
lea ecx, [ebp - 0x2154]
call fcn.00402e90
push eax
call dword [0x4ac48c]
test eax, eax
je 0x4674f5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x3550]
call fcn.004012c0
push eax
push 0x4cc5dc
push 1
lea ecx, [ebp - 0x3090]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x2074]
call fcn.00402df0
lea eax, [ebp - 0x2074]
push eax
lea eax, [ebp - 0x209c]
push eax
push esi
lea eax, [ebp - 0x22a8]
push eax
lea eax, [ebp - 0x2370]
push eax
lea eax, [ebp - 0x223c]
push eax
push 0
lea ecx, [ebp - 0x2154]
call fcn.00403100
lea edx, [ebp - 0x2300]
mov ecx, eax
call fcn.004358a0
lea ecx, [ebp - 0x3550]
call fcn.00401220
test al, al
jne 0x4673e0
lea ecx, [ebp - 0x3090]
call fcn.00401220
test al, al
jne 0x4672d0
mov edi, dword [ebp - 0x6f7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6638
lea ecx, [ebp - 0x250c]
call fcn.00402e90
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2154]
call fcn.00402df0
lea ecx, [ebp - 0x2154]
call fcn.00402e90
push eax
call dword [0x4ac48c]
test eax, eax
je 0x4675b8
push 0x4e6694
lea ecx, [ebp - 0x2074]
call fcn.00402c00
push eax
lea eax, [ebp - 0x209c]
push eax
push esi
lea eax, [ebp - 0x22a8]
push eax
lea eax, [ebp - 0x2370]
push eax
lea eax, [ebp - 0x223c]
push eax
lea edx, [ebp - 0x2300]
lea ecx, [ebp - 0x2154]
call fcn.004358a0
inc esi
cmp esi, dword [edi + 0x30]
jb 0x467200
lea ecx, [ebp - 0x2300]
call fcn.00405540
mov esi, eax
mov ecx, edi
mov dword [ebp - 0x6f9c], esi
call fcn.00472340
test al, al
jne 0x469bb5
test esi, esi
jne 0x4675fe
push esi
push 0x4e66b0
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
jmp 0x469bb5
push 0xc
lea ecx, [ebp - 0x2204]
call fcn.00401960
lea ecx, [ebp - 0x2204]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2034]
mov byte [ebp - 4], 0xde
call fcn.00401960
lea ecx, [ebp - 0x2034]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x25a4]
mov byte [ebp - 4], 0xdf
call fcn.00401960
lea ecx, [ebp - 0x25a4]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x21ec]
mov byte [ebp - 4], 0xe0
call fcn.00401960
lea ecx, [ebp - 0x21ec]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2440]
mov byte [ebp - 4], 0xe1
call fcn.00401960
lea ecx, [ebp - 0x2440]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2334]
mov byte [ebp - 4], 0xe2
call fcn.00401960
lea ecx, [ebp - 0x2334]
call fcn.00402b30
push 0x20
lea ecx, [ebp - 0x29b0]
mov byte [ebp - 4], 0xe3
call fcn.00401e10
lea ecx, [ebp - 0x29b0]
call fcn.0040d830
mov byte [ebp - 4], 0xe4
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004209d0
push 0
push 0x4e6730
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
xor esi, esi
mov dword [ebp - 0x6f78], esi
cmp dword [ebp - 0x6f9c], esi
jbe 0x467aef
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x22a8]
call fcn.004783a0
push 0
push 0
push 0
mov eax, dword [eax]
lea ecx, [ebp - 0x2300]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4cbcec
push esi
mov dword [ebp - 0x6f80], eax
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2440]
call fcn.00402df0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d53b0
lea ecx, [ebp - 0x2440]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2334]
call fcn.00402df0
lea ecx, [ebp - 0x2334]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
je 0x467adc
lea eax, [ebp - 0x2204]
xor edx, edx
push eax
lea ecx, [ebp - 0x2334]
mov dword [ebp - 0x6f8c], edx
call fcn.00402e90
xor edx, edx
mov ecx, eax
call fcn.00435190
test al, al
je 0x467adc
lea ecx, [ebp - 0x2204]
call fcn.00402e90
mov ecx, eax
call fcn.0040fb70
test al, al
je 0x467aaf
push 0xc
lea ecx, [ebp - 0x2450]
call fcn.00401960
lea ecx, [ebp - 0x2450]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2628]
mov byte [ebp - 4], 0xe5
call fcn.00401960
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d5378
lea ecx, [ebp - 0x2204]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2628]
call fcn.00402bc0
lea eax, [ebp - 0x2450]
mov byte [ebp - 4], 0xe6
push eax
lea ecx, [ebp - 0x2628]
call fcn.00402e90
mov edx, 0x4dfd0c
mov ecx, eax
call fcn.00435370
test al, al
je 0x467a95
push 0
push 1
push 1
push 0
push 0x4e357c
lea ecx, [ebp - 0x2450]
call fcn.00403fc0
test eax, eax
jne 0x467a95
push eax
push 1
push 1
push eax
push 0x4e359c
lea ecx, [ebp - 0x2450]
call fcn.00403fc0
test eax, eax
jne 0x467a95
push eax
push 1
push 1
push eax
push 0x4e35ec
lea ecx, [ebp - 0x2450]
call fcn.00403fc0
test eax, eax
jne 0x467a95
push eax
push 1
push 1
push eax
push 0x4e35d0
lea ecx, [ebp - 0x2450]
call fcn.00403fc0
test eax, eax
jne 0x467a95
push eax
push 0x4e67a0
lea ecx, [ebp - 0x2450]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x467a95
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e67ec
push esi
lea ecx, [ebp - 0x209c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2074]
call fcn.00402df0
mov eax, dword [ebp - 0x6f80]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x2450]
call fcn.00402e90
push eax
mov ecx, esi
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2074]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x47
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
jne 0x4679af
lea ecx, [ebp - 0x2628]
call fcn.00402cd0
lea ecx, [ebp - 0x2450]
mov byte [ebp - 4], 0xe4
call fcn.00402cd0
mov esi, dword [ebp - 0x6f78]
jmp 0x467aaf
push 0
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x209c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2628]
call fcn.00402e90
push eax
push 0
push 0x47
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0x4e3654
lea ecx, [ebp - 0x2628]
call fcn.00402e90
push eax
push 0x4e2300
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x209c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
push 0x4e1658
mov ecx, esi
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x2450]
call fcn.00402e90
push eax
push 0x4e5600
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
lea ecx, [ebp - 0x2628]
call fcn.00402cd0
lea ecx, [ebp - 0x2450]
mov byte [ebp - 4], 0xe4
call fcn.00402cd0
mov esi, dword [ebp - 0x6f78]
jmp 0x467aaf
lea ecx, [ebp - 0x2628]
call fcn.00402cd0
lea ecx, [ebp - 0x2450]
mov byte [ebp - 4], 0xe4
call fcn.00402cd0
inc dword [ebp - 0x6f8c]
lea eax, [ebp - 0x2204]
push eax
lea ecx, [ebp - 0x2334]
call fcn.00402e90
mov edx, dword [ebp - 0x6f8c]
mov ecx, eax
call fcn.00435190
test al, al
jne 0x4677c1
inc esi
mov dword [ebp - 0x6f78], esi
cmp esi, dword [ebp - 0x6f9c]
jb 0x467700
mov ecx, edi
call fcn.00472340
test al, al
jne 0x469b68
push 0xc
lea ecx, [ebp - 0x25d4]
call fcn.00401960
push 1
push 0x4e56d8
lea ecx, [ebp - 0x25d4]
call fcn.00402b80
push 0
push 0x4e6810
lea ecx, [ebp - 0x1fc8]
mov byte [ebp - 4], 0xe7
call fcn.0040e530
xor esi, esi
mov dword [ebp - 0x6f78], esi
cmp dword [ebp - 0x6f9c], esi
jbe 0x467f26
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x22a8]
call fcn.004783a0
push 0
push 0
push 0
mov eax, dword [eax]
lea ecx, [ebp - 0x2300]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4cbcec
push esi
mov dword [ebp - 0x6f80], eax
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2440]
call fcn.00402df0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d53b0
lea ecx, [ebp - 0x2440]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2334]
call fcn.00402df0
lea ecx, [ebp - 0x2334]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
je 0x467f13
lea eax, [ebp - 0x2204]
xor edx, edx
push eax
lea ecx, [ebp - 0x2334]
mov dword [ebp - 0x6f8c], edx
call fcn.00402e90
xor edx, edx
mov ecx, eax
call fcn.00435190
test al, al
je 0x467f13
lea ecx, [ebp - 0x2204]
call fcn.00402e90
mov ecx, eax
call fcn.0040fb70
test al, al
je 0x467ee6
push 0xc
lea ecx, [ebp - 0x24a0]
call fcn.00401960
lea ecx, [ebp - 0x24a0]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2664]
mov byte [ebp - 4], 0xe8
call fcn.00401960
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d5378
lea ecx, [ebp - 0x2204]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2664]
call fcn.00402bc0
lea eax, [ebp - 0x24a0]
mov byte [ebp - 4], 0xe9
push eax
lea ecx, [ebp - 0x2664]
call fcn.00402e90
mov edx, 0x4dfe28
mov ecx, eax
call fcn.00435370
test al, al
je 0x467ecc
push 0x4d6a28
lea ecx, [ebp - 0x24a0]
call fcn.00402c40
test al, al
jne 0x467ecc
push 0x4d698c
lea ecx, [ebp - 0x24a0]
call fcn.00402c40
test al, al
jne 0x467ecc
push 0x4d6df4
lea ecx, [ebp - 0x24a0]
call fcn.00402c40
test al, al
jne 0x467ecc
push 0x4e57dc
lea ecx, [ebp - 0x24a0]
call fcn.00402c40
test al, al
jne 0x467ecc
push 0
push 0x4e6870
lea ecx, [ebp - 0x24a0]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x467ecc
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e68c0
push esi
lea ecx, [ebp - 0x209c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2074]
call fcn.00402df0
mov eax, dword [ebp - 0x6f80]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x24a0]
call fcn.00402e90
push eax
mov ecx, esi
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2074]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x48
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
jne 0x467de6
lea ecx, [ebp - 0x2664]
call fcn.00402cd0
lea ecx, [ebp - 0x24a0]
mov byte [ebp - 4], 0xe7
call fcn.00402cd0
mov esi, dword [ebp - 0x6f78]
jmp 0x467ee6
push 0
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x209c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2664]
call fcn.00402e90
push eax
push 0
push 0x48
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0x4e3654
lea ecx, [ebp - 0x2664]
call fcn.00402e90
push eax
push 0x4e2300
push dword [ebp - 0x6f78]
lea ecx, [ebp - 0x209c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
push 0x4e1658
mov ecx, esi
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x24a0]
call fcn.00402e90
push eax
push 0x4e5828
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
lea ecx, [ebp - 0x2664]
call fcn.00402cd0
lea ecx, [ebp - 0x24a0]
mov byte [ebp - 4], 0xe7
call fcn.00402cd0
mov esi, dword [ebp - 0x6f78]
jmp 0x467ee6
lea ecx, [ebp - 0x2664]
call fcn.00402cd0
lea ecx, [ebp - 0x24a0]
mov byte [ebp - 4], 0xe7
call fcn.00402cd0
inc dword [ebp - 0x6f8c]
lea eax, [ebp - 0x2204]
push eax
lea ecx, [ebp - 0x2334]
call fcn.00402e90
mov edx, dword [ebp - 0x6f8c]
mov ecx, eax
call fcn.00435190
test al, al
jne 0x467c11
inc esi
mov dword [ebp - 0x6f78], esi
cmp esi, dword [ebp - 0x6f9c]
jb 0x467b50
mov ecx, edi
call fcn.00472340
test al, al
jne 0x469b5d
push 0xc
lea ecx, [ebp - 0x2468]
call fcn.00401960
lea ecx, [ebp - 0x2468]
call fcn.00402b30
xor esi, esi
mov byte [ebp - 4], 0xea
mov dword [ebp - 0x6f8c], esi
cmp dword [ebp - 0x6f9c], esi
jbe 0x46833f
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x223c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2468]
call fcn.00403fc0
test eax, eax
jne 0x46832c
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4cbcd8
push esi
lea ecx, [ebp - 0x223c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2468]
call fcn.00404260
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5854
push esi
lea ecx, [ebp - 0x223c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2034]
call fcn.00402df0
push 0x260
lea ecx, [ebp - 0x4130]
call fcn.00409b80
push 1
lea ecx, [ebp - 0x2034]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x4130]
call fcn.00401120
push 1
lea ecx, [ebp - 0x2034]
mov byte [ebp - 4], 0xeb
call fcn.00402e90
push eax
lea ecx, [ebp - 0x4130]
call fcn.00401270
test al, al
je 0x46831d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4cbd7c
push 1
lea ecx, [ebp - 0x4130]
call fcn.004012c0
push eax
push 0x4cbd7c
lea ecx, [ebp - 0x21ec]
call fcn.00402df0
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x21ec]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x25d4]
call fcn.00403fc0
test eax, eax
jne 0x46830a
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 1
lea ecx, [ebp - 0x4130]
call fcn.004012c0
push eax
push 0x4cbcec
push esi
lea ecx, [ebp - 0x223c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2034]
call fcn.00402df0
lea ecx, [ebp - 0x21ec]
call fcn.00402ce0
push 0
push 0x80
lea ecx, [ebp - 0x2034]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x29b0]
call fcn.0040dad0
test eax, eax
je 0x468190
push 0
lea eax, [ebp - 0x21ec]
push eax
lea ecx, [ebp - 0x29b0]
call fcn.0040de90
test eax, eax
je 0x468190
push 0
push 1
push 1
push 0
push 0x4e5864
lea ecx, [ebp - 0x21ec]
call fcn.00403fc0
mov esi, eax
push 0
lea ecx, [esi + 0xa]
push ecx
push 1
push 0
push 0x4e587c
lea ecx, [ebp - 0x21ec]
call fcn.00403fc0
test esi, esi
je 0x46817f
test eax, eax
je 0x46817f
sub eax, esi
lea ecx, [ebp - 0x21ec]
sub eax, 0xb
push eax
lea eax, [esi + 0xb]
push eax
call fcn.00403f80
jmp 0x46818a
lea ecx, [ebp - 0x21ec]
call fcn.00402ce0
mov esi, dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x21ec]
call fcn.00403170
test al, al
je 0x4681c7
push 1
lea ecx, [ebp - 0x4130]
call fcn.004012c0
push eax
lea ecx, [ebp - 0x21ec]
call fcn.00402c00
push 0
lea ecx, [ebp - 0x21ec]
call fcn.00403080
jmp 0x4681d4
push 3
lea ecx, [ebp - 0x21ec]
call fcn.00404aa0
push 0x4e68f4
lea ecx, [ebp - 0x21ec]
call fcn.00402c40
test al, al
jne 0x46830a
push 0
push 0x4e6870
lea ecx, [ebp - 0x2034]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x46830a
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2034]
call fcn.00402e90
push eax
push 0x4dc450
lea ecx, [ebp - 0x21ec]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x48
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x46830a
push 0
push esi
lea ecx, [ebp - 0x209c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
push 0
push 0
push 0
push 0
push 0x4dc450
lea ecx, [ebp - 0x2034]
call fcn.00402e90
push eax
push 0
push 0x48
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0x4e3654
lea ecx, [ebp - 0x2034]
call fcn.00402e90
push eax
push 0x4e2300
push esi
lea ecx, [ebp - 0x209c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
push 0x4e1658
push 0x4dc450
push 0x4e1674
lea ecx, [ebp - 0x21ec]
call fcn.00402e90
push eax
push 0x4e5898
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
lea ecx, [ebp - 0x4130]
call fcn.00401220
test al, al
jne 0x468048
lea ecx, [ebp - 0x4130]
mov byte [ebp - 4], 0xea
call fcn.00401170
inc esi
mov dword [ebp - 0x6f8c], esi
cmp esi, dword [ebp - 0x6f9c]
jb 0x467f65
mov ecx, edi
call fcn.00472340
test al, al
jne 0x469b52
push 0x24
lea ecx, [ebp - 0x2924]
call fcn.0042ee40
lea ecx, [ebp - 0x2924]
call fcn.00410190
push 0xc
lea ecx, [ebp - 0x22b4]
mov byte [ebp - 4], 0xec
call fcn.00401960
lea ecx, [ebp - 0x22b4]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x24c4]
mov byte [ebp - 4], 0xed
call fcn.00401960
lea ecx, [ebp - 0x24c4]
call fcn.00402b30
push 0
push 0x4e6938
lea ecx, [ebp - 0x1fc8]
mov byte [ebp - 4], 0xee
call fcn.0040e530
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6988
lea ecx, [edi + 0x33c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402df0
xor esi, esi
mov dword [ebp - 0x6f8c], esi
cmp dword [ebp - 0x6f9c], esi
jbe 0x4688a2
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x22a8]
call fcn.004783a0
mov ecx, edi
mov eax, dword [eax]
mov dword [ebp - 0x6f80], eax
call fcn.00472340
test al, al
jne 0x4688a2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e69bc
push esi
lea ecx, [ebp - 0x2300]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2204]
call fcn.00402df0
lea eax, [ebp - 0x2034]
mov dword [ebp - 0x6fb4], 0
push eax
lea ecx, [ebp - 0x2204]
call fcn.00402e90
xor edx, edx
mov ecx, eax
call fcn.00435190
test al, al
je 0x46888f
mov esi, dword [ebp - 0x6fb4]
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e03a8
lea ecx, [ebp - 0x2034]
call fcn.00404260
push 0x100
lea ecx, [ebp - 0x2034]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2924]
call fcn.00410240
test al, al
je 0x46885f
push 0
lea eax, [ebp - 0x2a8c]
mov dword [ebp - 0x6ed8], 0
push eax
xorps xmm0, xmm0
lea ecx, [ebp - 0x2924]
push 0x4e0040
movups xmmword [ebp - 0x6ee8], xmm0
call fcn.00410890
test al, al
je 0x46885f
lea eax, [ebp - 0x2a8c]
push eax
lea eax, [ebp - 0x6ee8]
push eax
lea ecx, [ebp - 0x2924]
call fcn.004110b0
test al, al
je 0x46885f
lea eax, [ebp - 0x22b4]
push eax
push 0x4e0074
lea eax, [ebp - 0x6ee8]
push eax
lea ecx, [ebp - 0x2924]
call fcn.00410b80
test eax, eax
je 0x468838
push 0
push 1
push 1
push 0
push 0x4e5968
lea ecx, [ebp - 0x22b4]
call fcn.00403fc0
lea ecx, [ebp - 0x22b4]
mov esi, eax
call fcn.00402d50
sub eax, 0x12
cmp esi, eax
je 0x468838
push 0
push 1
push 1
push 0
push 0x4e5990
lea ecx, [ebp - 0x22b4]
call fcn.00403fc0
lea ecx, [ebp - 0x22b4]
mov esi, eax
call fcn.00402d50
sub eax, 0xb
cmp esi, eax
je 0x468838
push 0
push 1
push 1
push 0
push 0x4e59ac
lea ecx, [ebp - 0x22b4]
call fcn.00403fc0
lea ecx, [ebp - 0x22b4]
mov esi, eax
call fcn.00402d50
sub eax, 0xb
cmp esi, eax
je 0x468838
lea eax, [ebp - 0x6ee8]
push eax
lea eax, [ebp - 0x2bd0]
push eax
push 0x4e59c8
lea ecx, [ebp - 0x2924]
call fcn.00410890
test al, al
je 0x468838
lea eax, [ebp - 0x22b4]
push eax
push 0x4e59e4
lea eax, [ebp - 0x2bd0]
push eax
lea ecx, [ebp - 0x2924]
call fcn.00410b80
test eax, eax
je 0x468838
push 0x4e351c
lea ecx, [ebp - 0x22b4]
call fcn.00402c40
test al, al
jne 0x468838
push 0x4e69d8
lea ecx, [ebp - 0x22b4]
call fcn.00402c40
test al, al
jne 0x468838
lea eax, [ebp - 0x24c4]
push eax
push 0x4e0050
lea eax, [ebp - 0x6ee8]
push eax
lea ecx, [ebp - 0x2924]
call fcn.00410b80
test eax, eax
jne 0x4686aa
lea eax, [ebp - 0x24c4]
push eax
push 0x4e0068
lea eax, [ebp - 0x6ee8]
push eax
lea ecx, [ebp - 0x2924]
call fcn.00410b80
test eax, eax
je 0x468838
push str.null
lea ecx, [ebp - 0x24c4]
call fcn.00402c40
test al, al
jne 0x468838
lea ecx, [ebp - 0x22b4]
call fcn.00402e90
lea ecx, [ebp - 0x1f8c]
mov esi, eax
call fcn.00402e90
mov edx, esi
mov ecx, eax
call fcn.00409350
test al, al
jne 0x468838
push 0
push 0x4e6a08
lea ecx, [ebp - 0x22b4]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x468838
mov eax, dword [ebp - 0x6f80]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x24c4]
call fcn.00402e90
push eax
mov ecx, esi
call fcn.00402e90
push eax
lea ecx, [ebp - 0x22b4]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x49
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6fcc], eax
cmp eax, 0xffffffff
je 0x468838
lea ecx, [ebp - 0x2034]
call fcn.00402e90
push eax
push dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x209c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00402e90
push eax
lea ecx, [ebp - 0x24c4]
call fcn.00402e90
push eax
push 0
push 0x49
push dword [ebp - 0x6fcc]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0x4e3654
lea ecx, [ebp - 0x24c4]
call fcn.00402e90
push eax
push 0x4e2300
push dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x209c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
push 0x4e1658
mov ecx, esi
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x22b4]
call fcn.00402e90
push eax
push 0x4e2b20
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
lea eax, [ebp - 0x2a8c]
push eax
lea eax, [ebp - 0x6ee8]
push eax
lea ecx, [ebp - 0x2924]
call fcn.004110b0
test al, al
jne 0x468530
mov esi, dword [ebp - 0x6fb4]
lea eax, [ebp - 0x2034]
inc esi
push eax
lea ecx, [ebp - 0x2204]
mov dword [ebp - 0x6fb4], esi
call fcn.00402e90
mov edx, esi
mov ecx, eax
call fcn.00435190
test al, al
jne 0x468490
mov esi, dword [ebp - 0x6f8c]
inc esi
mov dword [ebp - 0x6f8c], esi
cmp esi, dword [ebp - 0x6f9c]
jb 0x468400
mov ecx, edi
call fcn.00472340
test al, al
jne 0x469b31
push 0
push 0x4e6a50
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea ecx, [ebp - 0x6ed4]
call fcn.0046cb40
mov byte [ebp - 4], 0xef
lea ecx, [ebp - 0x6ecc]
mov eax, dword [edi + 8]
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6ed4], eax
mov dword [ebp - 0x6ed0], 0x4b
call fcn.00402ce0
lea eax, [ebp - 0x21e0]
mov dword [ebp - 0x6ebc], eax
lea ecx, [ebp - 0x6eac]
lea eax, [edi + 0x164]
mov dword [ebp - 0x6eb8], eax
lea eax, [ebp - 0x1fc8]
mov dword [ebp - 0x6eb4], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0x6eb0], eax
call fcn.00402ce0
mov ecx, edi
call fcn.00472340
test al, al
jne 0x469b26
push 0xc
lea ecx, [ebp - 0x24ac]
call fcn.00401960
lea ecx, [ebp - 0x24ac]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2424]
mov byte [ebp - 4], 0xf0
call fcn.00401960
lea ecx, [ebp - 0x2424]
call fcn.00402b30
lea ecx, [ebp - 0x2468]
mov byte [ebp - 4], 0xf1
call fcn.00402ce0
xor esi, esi
cmp dword [ebp - 0x6f9c], esi
jbe 0x468c23
nop
mov ecx, edi
call fcn.00472340
test al, al
jne 0x468c23
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x223c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2468]
call fcn.00403fc0
test eax, eax
jne 0x468c16
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4cbcd8
push esi
lea ecx, [ebp - 0x223c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2468]
call fcn.00404260
push esi
lea ecx, [ebp - 0x22a8]
call fcn.004783a0
push 0
push 0
push 0
mov eax, dword [eax]
lea ecx, [ebp - 0x2370]
push 0
push 0
push 0
push 0
push 0
push 0
push esi
mov dword [ebp - 0x6f8c], eax
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
push 0x4cbcec
push esi
lea ecx, [ebp - 0x223c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x6ecc]
call fcn.00402df0
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x114]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push esi
lea ecx, [ebp - 0x209c]
mov dword [ebp - 0x6ec0], eax
call fcn.00478ba0
push eax
lea ecx, [ebp - 0x6eac]
call fcn.00402c10
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x250c]
call fcn.00402e90
push eax
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x24ac]
call fcn.00402df0
lea ecx, [ebp - 0x24ac]
call fcn.00402e90
mov ecx, eax
call fcn.0040fb70
test al, al
je 0x468c16
lea ecx, [ebp - 0x24ac]
call fcn.00402e90
push eax
lea eax, [ebp - 0x6ed4]
mov ecx, edi
push eax
call fcn.00451370
mov ecx, edi
call fcn.00472340
test al, al
jne 0x468c23
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25bc]
call fcn.00402e90
push eax
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x24ac]
call fcn.00402df0
lea ecx, [ebp - 0x24ac]
call fcn.00402e90
mov ecx, eax
call fcn.0040fb70
test al, al
je 0x468c16
push 0
lea ecx, [ebp - 0x24ac]
call fcn.00403100
lea ecx, [ebp - 0x24ac]
call fcn.00402e90
push eax
lea eax, [ebp - 0x6ed4]
mov ecx, edi
push eax
call fcn.00451370
lea ecx, [ebp - 0x264c]
mov dword [ebp - 0x6ec0], 0x4dc450
call fcn.00402e90
push eax
lea eax, [ebp - 0x6ed4]
mov ecx, edi
push eax
call fcn.00451370
mov ecx, edi
call fcn.00472340
test al, al
jne 0x468c23
push 0
push 1
lea ecx, [ebp - 0x2640]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x24ac]
call fcn.00402da0
mov ecx, eax
call fcn.00403100
lea ecx, [ebp - 0x24ac]
call fcn.00402e90
push eax
lea eax, [ebp - 0x6ed4]
mov ecx, edi
push eax
call fcn.00451370
mov ecx, edi
call fcn.00472340
test al, al
jne 0x468c23
inc esi
cmp esi, dword [ebp - 0x6f9c]
jb 0x468990
mov ecx, edi
call fcn.00472340
test al, al
jne 0x469b10
lea ecx, [ebp - 0x2468]
call fcn.00402ce0
push 4
lea ecx, [ebp - 0x222c]
call fcn.00405950
lea ecx, [ebp - 0x222c]
call fcn.00406220
xor eax, eax
mov byte [ebp - 4], 0xf2
mov dword [ebp - 0x6f8c], eax
cmp dword [ebp - 0x6f9c], eax
jbe 0x46909b
nop dword [eax]
xor esi, esi
mov dword [ebp - 0x6fa4], esi
nop dword [eax + eax]
push eax
lea ecx, [ebp - 0x22a8]
call fcn.004783a0
mov eax, dword [eax]
mov dword [ebp - 0x6fcc], eax
test esi, esi
jne 0x468cc1
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push 0x4e5a48
push eax
lea ecx, [edi + 0x104]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
push str.HKU_
jmp 0x468d0b
cmp esi, 1
jne 0x468ce7
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5a48
push dword [ebp - 0x6fc4]
jmp 0x468d0b
cmp esi, 2
jne 0x468d16
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5a48
push dword [ebp - 0x6fe0]
lea ecx, [ebp - 0x1f8c]
call fcn.00402df0
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x222c]
call fcn.00407730
test al, al
je 0x469072
lea eax, [ebp - 0x6cec]
mov dword [ebp - 0x6f78], 0
push eax
push 0
lea ecx, [ebp - 0x222c]
call fcn.00407b10
test al, al
je 0x469072
mov esi, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5ad8
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f8c]
push 0x4cbcec
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2034]
call fcn.00402df0
push 0
push 0x20019
lea ecx, [ebp - 0x2034]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x469044
lea eax, [ebp - 0x2424]
push eax
push 0x4cbcf4
lea ecx, [ebp - 0x1f74]
call fcn.004078e0
test al, al
je 0x469044
lea ecx, [ebp - 0x2424]
call fcn.00403170
test al, al
jne 0x469044
push dword [ebp - 0x6fcc]
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2424]
call fcn.004032b0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x2370]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
push 0x4cbcec
push esi
lea ecx, [ebp - 0x223c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2074]
call fcn.00402df0
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2074]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2424]
call fcn.00403fc0
test eax, eax
je 0x469044
lea ecx, [ebp - 0x2074]
call fcn.00402d50
inc eax
lea ecx, [ebp - 0x2424]
push eax
call fcn.00403f10
push 0
push 0
push 0x4cbcf4
push 0x4cc5d8
push 3
lea ecx, [ebp - 0x2424]
call fcn.00404aa0
mov ecx, eax
call fcn.004047c0
lea ecx, [ebp - 0x2424]
call fcn.00403170
test al, al
jne 0x469044
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f8c]
push 0x4cbcec
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2034]
call fcn.00402df0
push 0
push 0x4e1580
lea ecx, [ebp - 0x2424]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x469044
mov eax, dword [ebp - 0x6fcc]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 1
lea ecx, [ebp - 0x2424]
mov dword [ebp - 0x6fb4], eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6fb4]
push eax
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4ddac8
push 5
push 0x4b
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x469044
push 0
push esi
lea ecx, [ebp - 0x209c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6fb4]
push eax
push 0
push 0
push 0
push 0
call fcn.00402e90
push eax
push 0
lea ecx, [ebp - 0x2034]
call fcn.00402e90
push eax
push 0x4b
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
push esi
lea ecx, [ebp - 0x209c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6fb4]
push eax
push 0x4e1658
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x2424]
call fcn.00402e90
push eax
push 0x4e3cc8
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
mov eax, dword [ebp - 0x6f78]
lea ecx, [ebp - 0x6cec]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x222c]
mov dword [ebp - 0x6f78], eax
call fcn.00407b10
test al, al
jne 0x468d68
mov esi, dword [ebp - 0x6fa4]
mov eax, dword [ebp - 0x6f8c]
inc esi
mov dword [ebp - 0x6fa4], esi
cmp esi, 3
jb 0x468c80
inc eax
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [ebp - 0x6f9c]
jb 0x468c70
mov ecx, edi
call fcn.00472340
test al, al
jne 0x469b05
push 0
push 0x4e6aa0
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
push 0xc
lea ecx, [ebp - 0x2518]
call fcn.00401960
lea ecx, [ebp - 0x2518]
call fcn.00402b30
xor esi, esi
mov byte [ebp - 4], 0xf3
cmp dword [ebp - 0x6f9c], esi
jbe 0x469acf
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x22a8]
call fcn.004783a0
mov ecx, edi
mov eax, dword [eax]
mov dword [ebp - 0x6f78], eax
call fcn.00472340
test al, al
jne 0x469acf
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e69bc
push esi
lea ecx, [ebp - 0x2300]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2204]
call fcn.00402df0
lea eax, [ebp - 0x2518]
xor edx, edx
push eax
lea ecx, [ebp - 0x2204]
mov dword [ebp - 0x6fb4], edx
call fcn.00402e90
xor edx, edx
mov ecx, eax
call fcn.00435190
test al, al
je 0x469ac2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6af8
push esi
lea ecx, [ebp - 0x209c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
push 0x4e6528
lea ecx, [ebp - 0x2074]
call fcn.00402df0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d5328
lea ecx, [ebp - 0x2518]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2034]
call fcn.00402df0
lea ecx, [ebp - 0x2034]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
je 0x469331
push 0
push 0x4e6b08
lea ecx, [ebp - 0x2074]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x469331
mov eax, dword [ebp - 0x6f78]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2034]
mov dword [ebp - 0x6f8c], eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2074]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x469331
push 0
push esi
lea ecx, [ebp - 0x209c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
push 0
push 0
push 0
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2034]
call fcn.00402e90
push eax
push 0
push 0x4c
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3fd0
lea ecx, [ebp - 0x2034]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4e2300
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x2074]
call fcn.00402e90
push eax
push 0x4e4008
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6b54
push esi
lea ecx, [ebp - 0x209c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
push 0x4e6528
lea ecx, [ebp - 0x2074]
call fcn.00402df0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d5344
lea ecx, [ebp - 0x2518]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2034]
call fcn.00402df0
lea ecx, [ebp - 0x2034]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
jne 0x4693d8
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4e03a8
lea ecx, [ebp - 0x2518]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2034]
call fcn.00402df0
lea ecx, [ebp - 0x2034]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
je 0x469528
push 0
push 0x4e6b08
lea ecx, [ebp - 0x2074]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x469528
mov eax, dword [ebp - 0x6f78]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2034]
mov dword [ebp - 0x6f8c], eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2074]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x469528
push 0
push esi
lea ecx, [ebp - 0x209c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
push 0
push 0
push 0
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2034]
call fcn.00402e90
push eax
push 0
push 0x4c
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3fd0
lea ecx, [ebp - 0x2034]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4e2300
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x2074]
call fcn.00402e90
push eax
push 0x4e4008
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6b6c
push esi
lea ecx, [ebp - 0x209c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
push 0x4e6528
lea ecx, [ebp - 0x2074]
call fcn.00402df0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d535c
lea ecx, [ebp - 0x2518]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2034]
call fcn.00402df0
lea ecx, [ebp - 0x2034]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
jne 0x4695cf
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4e02e8
lea ecx, [ebp - 0x2518]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2034]
call fcn.00402df0
lea ecx, [ebp - 0x2034]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
je 0x46971f
push 0
push 0x4e6b08
lea ecx, [ebp - 0x2074]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x46971f
mov eax, dword [ebp - 0x6f78]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2034]
mov dword [ebp - 0x6f8c], eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2074]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x46971f
push 0
push esi
lea ecx, [ebp - 0x209c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
push 0
push 0
push 0
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2034]
call fcn.00402e90
push eax
push 0
push 0x4c
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3fd0
lea ecx, [ebp - 0x2034]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4e2300
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x2074]
call fcn.00402e90
push eax
push 0x4e4008
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6b9c
push esi
lea ecx, [ebp - 0x209c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
push 0x4e6528
lea ecx, [ebp - 0x2074]
call fcn.00402df0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d5378
lea ecx, [ebp - 0x2518]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2034]
call fcn.00402df0
lea ecx, [ebp - 0x2034]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
je 0x4698da
push 0
push 0x4e6b08
lea ecx, [ebp - 0x2074]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x4698da
mov eax, dword [ebp - 0x6f78]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2034]
mov dword [ebp - 0x6f8c], eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2074]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x4698da
push 0
push esi
lea ecx, [ebp - 0x209c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
push 0
push 0
push 0
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2034]
call fcn.00402e90
push eax
push 0
push 0x4c
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3fd0
lea ecx, [ebp - 0x2034]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4e2300
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x2074]
call fcn.00402e90
push eax
push 0x4e4008
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6bb0
push esi
lea ecx, [ebp - 0x209c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
push 0x4e6528
lea ecx, [ebp - 0x2074]
call fcn.00402df0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5b78
lea ecx, [ebp - 0x2518]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2034]
call fcn.00402df0
lea ecx, [ebp - 0x2034]
call fcn.00402e90
push eax
call dword [0x4ac490]
test eax, eax
je 0x469a95
push 0
push 0x4e6b08
lea ecx, [ebp - 0x2074]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.0046de60
test al, al
jne 0x469a95
mov eax, dword [ebp - 0x6f78]
mov ecx, dword [ebp - 0x6fa8]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2034]
mov dword [ebp - 0x6f8c], eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2074]
call fcn.00402e90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.004452b0
mov dword [ebp - 0x6f80], eax
cmp eax, 0xffffffff
je 0x469a95
push 0
push esi
lea ecx, [ebp - 0x209c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
push 0
push 0
push 0
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2034]
call fcn.00402e90
push eax
push 0
push 0x4c
push dword [ebp - 0x6f80]
lea eax, [ebp - 0x21e0]
mov ecx, edi
push eax
call fcn.00445370
push 0
push 0
push 0
push 0
push 0
push 0x4e3fd0
lea ecx, [ebp - 0x2034]
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4e2300
call fcn.00402e90
push eax
push 0x4e1674
lea ecx, [ebp - 0x2074]
call fcn.00402e90
push eax
push 0x4e4008
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
inc dword [ebp - 0x6fb4]
lea eax, [ebp - 0x2518]
push eax
lea ecx, [ebp - 0x2204]
call fcn.00402e90
mov edx, dword [ebp - 0x6fb4]
mov ecx, eax
call fcn.00435190
test al, al
jne 0x469176
inc esi
cmp esi, dword [ebp - 0x6f9c]
jb 0x4690f0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.004209d0
push 1
push 0
push 0
lea ecx, [ebp - 0x21e0]
call fcn.004025c0
mov ecx, edi
call fcn.00472340
lea ecx, [ebp - 0x2518]
call fcn.00402cd0
lea ecx, [ebp - 0x222c]
call fcn.00407760
lea ecx, [ebp - 0x2424]
call fcn.00402cd0
lea ecx, [ebp - 0x24ac]
call fcn.00402cd0
lea ecx, [ebp - 0x6ed4]
call fcn.0046cb70
lea ecx, [ebp - 0x24c4]
call fcn.00402cd0
lea ecx, [ebp - 0x22b4]
call fcn.00402cd0
lea ecx, [ebp - 0x2924]
call fcn.0042dbd0
lea ecx, [ebp - 0x2468]
call fcn.00402cd0
lea ecx, [ebp - 0x25d4]
call fcn.00402cd0
lea ecx, [ebp - 0x29b0]
call fcn.00401df0
lea ecx, [ebp - 0x2334]
call fcn.00402cd0
lea ecx, [ebp - 0x2440]
call fcn.00402cd0
lea ecx, [ebp - 0x21ec]
call fcn.00402cd0
lea ecx, [ebp - 0x25a4]
call fcn.00402cd0
lea ecx, [ebp - 0x2034]
call fcn.00402cd0
lea ecx, [ebp - 0x2204]
call fcn.00402cd0
lea ecx, [ebp - 0x2074]
call fcn.00402cd0
lea ecx, [ebp - 0x3550]
call fcn.00401170
lea ecx, [ebp - 0x3090]
call fcn.00401170
lea ecx, [ebp - 0x22a8]
call fcn.004782c0
lea ecx, [ebp - 0x209c]
call fcn.00478bc0
lea ecx, [ebp - 0x2370]
call fcn.00478bc0
lea ecx, [ebp - 0x223c]
call fcn.00478bc0
lea ecx, [ebp - 0x2300]
mov byte [ebp - 4], 0x46
call fcn.00478bc0
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46befb
test dword [edi + 0x34], 0x40
jne 0x46befb
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x4e6bd4
push dword [eax + 0x38]
call fcn.0041f260
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x37
push dword [eax + 0x34]
call fcn.004219b0
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x469cbb
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dc588
push esi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402df0
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x469c71
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dc5e0
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402df0
cmp dword [ebp - 0x6fdc], 0
je 0x469d22
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4dc5e0
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402df0
push 0xc
lea ecx, [ebp - 0x1fa4]
mov dword [ebp - 0x6ffc], 0x4dc638
mov dword [ebp - 0x6ff8], 0x4dc648
mov dword [ebp - 0x6ff4], 0x4e6c00
mov dword [ebp - 0x6ff0], 0x4e6c20
mov dword [ebp - 0x6fec], 0x4e6c38
mov dword [ebp - 0x6fe8], 0x4e6c4c
call fcn.00401960
lea ecx, [ebp - 0x1fa4]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x22f4]
mov byte [ebp - 4], 0xf4
call fcn.00401960
lea ecx, [ebp - 0x22f4]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2190]
mov byte [ebp - 4], 0xf5
call fcn.00401960
lea ecx, [ebp - 0x2190]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2328]
mov byte [ebp - 4], 0xf6
call fcn.00401960
lea ecx, [ebp - 0x2328]
call fcn.00402b30
cmp dword [ebp - 0x6fac], 0
mov byte [ebp - 4], 0xf7
mov dword [ebp - 0x6fcc], 0
jbe 0x469f8f
mov dword [ebp - 0x6f8c], esi
nop dword [eax + eax]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x469f8f
xor esi, esi
mov dword [ebp - 0x6fa4], esi
nop word [eax + eax]
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + esi*4 - 0x6ffc]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00402df0
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x469f5f
lea eax, [ebp - 0x6cec]
mov dword [ebp - 0x6f80], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.00407b90
test al, al
je 0x469f5f
mov esi, dword [ebp - 0x6f80]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x469f59
lea eax, [ebp - 0x1fa4]
push eax
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f74]
call fcn.004078e0
test al, al
je 0x469f3d
lea ecx, [ebp - 0x1fa4]
call fcn.00403170
test al, al
jne 0x469f3d
push 3
lea edx, [edi + 0x1a8]
lea ecx, [ebp - 0x1fa4]
call fcn.00409ba0
test al, al
je 0x469f3d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f8c]
push 0x4cfae0
call fcn.00402e90
push eax
lea ecx, [ebp - 0x213c]
call fcn.00402df0
push 0
lea ecx, [ebp - 0x213c]
call fcn.00402e90
push eax
lea eax, [ebp - 0x1fa4]
mov ecx, edi
push eax
call fcn.0046e590
lea eax, [ebp - 0x6cec]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.00407b90
test al, al
jne 0x469e94
mov esi, dword [ebp - 0x6fa4]
inc esi
mov dword [ebp - 0x6fa4], esi
cmp esi, 6
jb 0x469e10
mov esi, dword [ebp - 0x6fcc]
add dword [ebp - 0x6f8c], 0xc
inc esi
mov dword [ebp - 0x6fcc], esi
cmp esi, dword [ebp - 0x6fac]
jb 0x469df0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x39
push dword [eax + 0x34]
call fcn.004219b0
push 4
lea ecx, [ebp - 0x6cf0]
call fcn.00405950
lea ecx, [ebp - 0x6cf0]
call fcn.00406220
lea eax, [ebp - 0x6cf0]
mov byte [ebp - 4], 0xf8
push eax
push 0x4c6394
push 1
push 0
push 0x4c63a4
call dword [0x4ac7f0]
test eax, eax
js 0x46a296
lea ecx, [ebp - 0x70f0]
call fcn.004016d0
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x7060]
movups xmmword [ebp - 0x6fd8], xmm0
call fcn.004016d0
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x7070]
movups xmmword [ebp - 0x6f98], xmm0
call fcn.004016d0
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x7080]
movups xmmword [ebp - 0x6fc0], xmm0
call fcn.004016d0
mov edi, eax
mov byte [ebp - 4], 0xfc
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x6fd8]
mov ecx, dword [ebp - 0x6cf0]
mov edx, esp
sub esp, 0x10
mov eax, esp
sub esp, 0x10
mov esi, dword [ecx]
movups xmmword [edx], xmm0
movups xmm0, xmmword [ebp - 0x6f98]
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x6fc0]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [edi]
push ecx
movups xmmword [eax], xmm0
mov eax, dword [esi + 0x28]
call eax
shr eax, 0x1f
lea ecx, [ebp - 0x7080]
mov dword [ebp - 0x6f80], eax
call fcn.00401760
lea ecx, [ebp - 0x7070]
call fcn.00401760
lea ecx, [ebp - 0x7060]
call fcn.00401760
lea ecx, [ebp - 0x70f0]
mov byte [ebp - 4], 0xf8
call fcn.00401760
cmp byte [ebp - 0x6f80], 0
jne 0x46a290
push 4
lea ecx, [ebp - 0x6d18]
call fcn.00405950
lea ecx, [ebp - 0x6d18]
call fcn.00406220
push 0x4cbcec
lea ecx, [ebp - 0x7030]
mov byte [ebp - 4], 0xfd
call fcn.004015b0
mov byte [ebp - 4], 0xfe
mov ecx, dword [ebp - 0x6cf0]
mov esi, dword [ecx]
lea ecx, [ebp - 0x6d18]
push ecx
mov ecx, eax
call fcn.004016c0
push eax
push dword [ebp - 0x6cf0]
mov eax, dword [esi + 0x1c]
call eax
shr eax, 0x1f
lea ecx, [ebp - 0x7030]
mov dword [ebp - 0x6f80], eax
mov byte [ebp - 4], 0xfd
call fcn.00401660
cmp byte [ebp - 0x6f80], 0
jne 0x46a281
push 4
lea ecx, [ebp - 0x6d24]
call fcn.00405950
lea ecx, [ebp - 0x6d24]
call fcn.00406220
mov byte [ebp - 4], 0xff
lea edx, [ebp - 0x6d24]
mov eax, dword [ebp - 0x6d18]
push edx
push 0
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x28]
call eax
test eax, eax
js 0x46a276
mov eax, dword [ebp - 0x6d24]
lea edx, [ebp - 0x2594]
mov dword [ebp - 0x2594], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
mov eax, dword [ebp - 0x2594]
test eax, eax
je 0x46a276
mov esi, 1
mov dword [ebp - 0x6fcc], esi
cmp eax, esi
jl 0x46a276
mov edi, dword [ebp - 0x6f7c]
push 4
lea ecx, [ebp - 0x6d28]
call fcn.00405950
lea ecx, [ebp - 0x6d28]
call fcn.00406220
push 3
push esi
lea ecx, [ebp - 0x70b0]
mov dword [ebp - 4], 0x100
call fcn.004016e0
mov esi, eax
mov byte [ebp - 4], 1
lea edx, [ebp - 0x6d28]
mov ecx, dword [ebp - 0x6d24]
movups xmm0, xmmword [esi]
push edx
sub esp, 0x10
mov eax, dword [ecx]
mov edx, esp
push ecx
mov eax, dword [eax + 0x20]
movups xmmword [edx], xmm0
call eax
shr eax, 0x1f
lea ecx, [ebp - 0x70b0]
mov dword [ebp - 0x6f80], eax
mov byte [ebp - 4], 0
call fcn.00401760
cmp byte [ebp - 0x6f80], 0
jne 0x46a237
push dword [ebp - 0x6d28]
mov ecx, edi
call fcn.00470660
test al, al
je 0x46a264
lea ecx, [ebp - 0x6d28]
mov dword [ebp - 4], 0xff
call fcn.00478020
mov esi, dword [ebp - 0x6fcc]
inc esi
mov dword [ebp - 0x6fcc], esi
cmp esi, dword [ebp - 0x2594]
jle 0x46a1b2
jmp 0x46a276
lea ecx, [ebp - 0x6d28]
mov dword [ebp - 4], 0xff
call fcn.00478020
lea ecx, [ebp - 0x6d24]
call fcn.00478020
lea ecx, [ebp - 0x6d18]
mov byte [ebp - 4], 0xf8
call fcn.00478020
mov edi, dword [ebp - 0x6f7c]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46bec0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x3c
push dword [eax + 0x34]
call fcn.004219b0
push 0x18
lea ecx, [ebp - 0x24dc]
call fcn.00401e20
lea ecx, [ebp - 0x24dc]
call fcn.00405380
mov dword [ebp - 4], 0x102
xor esi, esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x46a33d
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6c78
push esi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402df0
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x46a2f3
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d2fa0
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402df0
cmp dword [ebp - 0x6fdc], 0
je 0x46a3a4
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4d2fa0
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402df0
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x7000], 0x4d118c
mov dword [ebp - 0x6ffc], 0x4d1178
mov dword [ebp - 0x6ff8], 0x4d03fc
mov dword [ebp - 0x6ff4], 0x4d3010
mov dword [ebp - 0x6ff0], 0x4d2f98
mov dword [ebp - 0x6fec], 0x4d11b4
mov dword [ebp - 0x6fe8], 0x4d97e0
mov dword [ebp - 0x6fcc], 0
jbe 0x46a5a8
mov dword [ebp - 0x6f8c], esi
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46a5a8
xor esi, esi
mov dword [ebp - 0x6fa4], esi
nop
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46a588
mov eax, dword [ebp + esi*4 - 0x7000]
lea ecx, [ebp - 0x1fa4]
push ecx
mov ecx, dword [ebp - 0x6f8c]
push eax
mov dword [ebp - 0x6fb4], eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407ab0
test al, al
je 0x46a588
push 0
push 0x4ccdd4
lea ecx, [ebp - 0x1fa4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x24dc]
call fcn.004055a0
lea ecx, [ebp - 0x24dc]
mov dword [ebp - 0x6f80], 0
call fcn.00405540
test eax, eax
je 0x46a578
mov esi, dword [ebp - 0x6f80]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46a572
push 3
push 1
push esi
lea ecx, [ebp - 0x24dc]
call fcn.00405530
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00402da0
mov ecx, eax
call fcn.00404aa0
mov ecx, eax
call fcn.00402d50
test eax, eax
je 0x46a55e
push 3
lea edx, [edi + 0x1a8]
lea ecx, [ebp - 0x1fa4]
call fcn.00409ba0
test al, al
je 0x46a55e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x24dc]
call fcn.00405530
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0x4cfae0
push dword [ebp - 0x6fb4]
push 0x4cfae0
call fcn.00402e90
push eax
lea ecx, [ebp - 0x213c]
call fcn.00402df0
push 0
lea ecx, [ebp - 0x213c]
call fcn.00402e90
push eax
lea eax, [ebp - 0x1fa4]
mov ecx, edi
push eax
call fcn.0046e590
lea ecx, [ebp - 0x24dc]
inc esi
call fcn.00405540
cmp esi, eax
jb 0x46a4a4
mov esi, dword [ebp - 0x6fa4]
inc esi
mov dword [ebp - 0x6fa4], esi
cmp esi, 7
jb 0x46a420
mov esi, dword [ebp - 0x6fcc]
add dword [ebp - 0x6f8c], 0xc
inc esi
mov dword [ebp - 0x6fcc], esi
cmp esi, dword [ebp - 0x6fac]
jb 0x46a407
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46beae
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x3e
push dword [eax + 0x34]
call fcn.004219b0
push 0xc
lea ecx, [ebp - 0x20f0]
call fcn.00401960
lea ecx, [ebp - 0x20f0]
call fcn.00402b30
mov esi, dword [ebp - 0x6fa4]
xor eax, eax
mov byte [ebp - 4], 3
mov dword [ebp - 0x6fcc], eax
test eax, eax
jne 0x46a5fc
push 0x4d4fd8
jmp 0x46a613
cmp esi, 1
jne 0x46a61e
cmp byte [edi + 0x1b4], 0
je 0x46a74c
push 0x4e6ce8
lea ecx, [ebp - 0x1f8c]
call fcn.00402c00
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x46a736
lea eax, [ebp - 0x6cec]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.00407b10
test al, al
je 0x46a736
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46a736
lea eax, [ebp - 0x1fa4]
push eax
lea eax, [ebp - 0x2190]
push eax
push 1
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x20f0]
call fcn.00402da0
push eax
mov ecx, edi
call fcn.0046cc60
test al, al
je 0x46a71a
push 0
lea ecx, [ebp - 0x20f0]
call fcn.00402e90
push eax
lea eax, [ebp - 0x1fa4]
mov ecx, edi
push eax
call fcn.0046e590
test al, al
je 0x46a71a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f8c]
push 0x4cbcec
call fcn.00402e90
push eax
lea ecx, [ebp - 0x213c]
call fcn.00402df0
push 0
lea ecx, [ebp - 0x213c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00402ce0
push eax
mov ecx, edi
call fcn.0046e590
lea eax, [ebp - 0x6cec]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.00407b10
test al, al
jne 0x46a661
mov eax, dword [ebp - 0x6fcc]
inc eax
mov dword [ebp - 0x6fcc], eax
cmp eax, 2
jb 0x46a5f1
mov ecx, edi
call fcn.0046e270
test al, al
je 0x46bea3
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x41
push dword [eax + 0x34]
call fcn.004219b0
push 4
lea ecx, [ebp - 0x1fa8]
call fcn.00405950
lea ecx, [ebp - 0x1fa8]
call fcn.00406220
push 4
lea ecx, [ebp - 0x2050]
mov byte [ebp - 4], 4
call fcn.00405950
lea ecx, [ebp - 0x2050]
call fcn.00406220
push 4
lea ecx, [ebp - 0x1ff8]
mov byte [ebp - 4], 5
call fcn.00405950
lea ecx, [ebp - 0x1ff8]
call fcn.00406220
mov byte [ebp - 4], 6
lea esi, [ebp - 0x7028]
mov dword [ebp - 0x7028], 0x4e6d94
mov dword [ebp - 0x7024], 0x4e6db0
mov dword [ebp - 0x7020], 0x4e6df8
mov dword [ebp - 0x701c], 0x4e6e38
mov dword [ebp - 0x7018], 0x4e6ea4
mov dword [ebp - 0x7014], 0x4e6ec8
mov dword [ebp - 0x7010], 0x4e6f18
mov dword [ebp - 0x700c], 0x4e6f48
mov dword [ebp - 0x7008], 0x4e6fa0
mov dword [ebp - 0x7004], 0x4e6fe0
mov dword [ebp - 0x6f8c], 0
mov dword [ebp - 0x6f78], esi
nop dword [eax]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46ab1a
push 0
push 0x20019
push dword [esi]
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x46aafb
mov ecx, edi
xor esi, esi
call fcn.00472340
test al, al
jne 0x46aaf5
nop dword [eax]
lea eax, [ebp - 0x6cec]
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.00407b10
test al, al
je 0x46aaf5
lea ecx, [ebp - 0x1fa4]
call fcn.00402ce0
lea ecx, [ebp - 0x213c]
call fcn.00402ce0
lea ecx, [ebp - 0x20f0]
call fcn.00402ce0
test dword [ebp - 0x6f8c], 1
jne 0x46a9a6
mov eax, dword [ebp - 0x6f78]
lea ecx, [ebp - 0x1f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.Command
push dword [ebp - 0x6cec]
push 0x4cbcec
push dword [eax]
call fcn.00402df0
lea eax, [ebp - 0x1fa4]
push eax
push 0x4cbcf4
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1fa8]
call fcn.00407ab0
test al, al
je 0x46a95b
lea ecx, [ebp - 0x1fa4]
call fcn.00402d50
test eax, eax
je 0x46a95b
push 3
lea edx, [edi + 0x1a8]
lea ecx, [ebp - 0x1fa4]
call fcn.00409ba0
test al, al
jne 0x46aa6c
lea ecx, [ebp - 0x1fa4]
jmp 0x46aa67
lea eax, [ebp - 0x20f0]
push eax
push str.DelegateExecute
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1fa8]
call fcn.00407ab0
test al, al
je 0x46a995
lea ecx, [ebp - 0x20f0]
call fcn.00402d50
test eax, eax
jne 0x46aa41
lea eax, [ebp - 0x20f0]
push eax
push 0x4e704c
jmp 0x46aa17
mov ecx, dword [ebp - 0x6cec]
call fcn.00408d60
test al, al
je 0x46a9db
lea eax, [ebp - 0x1fa4]
push eax
lea eax, [ebp - 0x2190]
push eax
push 1
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x20f0]
call fcn.00402da0
jmp 0x46aa55
mov eax, dword [ebp - 0x6f78]
lea ecx, [ebp - 0x1f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
push 0x4cbcec
push dword [eax]
call fcn.00402df0
lea eax, [ebp - 0x20f0]
push eax
push 0x4cbcf4
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1fa8]
call fcn.00407ab0
test al, al
je 0x46aa6c
lea ecx, [ebp - 0x20f0]
call fcn.00402d50
test eax, eax
je 0x46aa6c
lea eax, [ebp - 0x1fa4]
push eax
lea eax, [ebp - 0x2190]
push eax
lea eax, [ebp - 0x20f0]
push eax
mov ecx, edi
call fcn.0046cc60
test al, al
jne 0x46aa6c
lea ecx, [ebp - 0x20f0]
call fcn.00402ce0
push 0
lea ecx, [ebp - 0x20f0]
call fcn.00402e90
push eax
lea eax, [ebp - 0x1fa4]
mov ecx, edi
push eax
call fcn.0046e590
test al, al
je 0x46aae5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1f8c]
push 0x4cbcec
call fcn.00402e90
push eax
lea ecx, [ebp - 0x213c]
call fcn.00402df0
push 0
lea ecx, [ebp - 0x213c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00402ce0
push eax
mov ecx, edi
call fcn.0046e590
mov ecx, edi
inc esi
call fcn.00472340
test al, al
je 0x46a880
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6f8c]
add esi, 4
inc eax
mov dword [ebp - 0x6f78], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, 0xa
jb 0x46a840
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46be82
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x46
push dword [eax + 0x34]
call fcn.004219b0
xor esi, esi
mov dword [ebp - 0x7028], 0x4d3f98
mov dword [ebp - 0x7024], 0x4d4038
mov dword [ebp - 0x6f8c], esi
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46ac66
push 0
push 0x20019
push dword [ebp + esi*4 - 0x7028]
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x46ac56
mov ecx, edi
xor esi, esi
call fcn.00472340
test al, al
jne 0x46ac50
lea eax, [ebp - 0x6cec]
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.00407b10
test al, al
je 0x46ac50
mov eax, dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x213c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
push 0x4cbcec
push dword [ebp + eax*4 - 0x7028]
call fcn.00402df0
lea eax, [ebp - 0x1fa4]
push eax
push str.Debugger
lea ecx, [ebp - 0x213c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1fa8]
call fcn.00407ab0
test al, al
je 0x46ac40
push 3
lea edx, [edi + 0x1a8]
lea ecx, [ebp - 0x1fa4]
call fcn.00409ba0
test al, al
je 0x46ac40
push 0
lea ecx, [ebp - 0x213c]
call fcn.00402e90
push eax
lea eax, [ebp - 0x1fa4]
mov ecx, edi
push eax
call fcn.0046e590
mov ecx, edi
inc esi
call fcn.00472340
test al, al
je 0x46ab96
mov esi, dword [ebp - 0x6f8c]
inc esi
mov dword [ebp - 0x6f8c], esi
cmp esi, 2
jb 0x46ab55
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46be82
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x48
push dword [eax + 0x34]
call fcn.004219b0
push 0x4d3f08
lea ecx, [ebp - 0x2114]
mov dword [ebp - 0x7028], 0x4e7064
mov dword [ebp - 0x7024], 0x4e7088
mov dword [ebp - 0x7020], 0x4e70b8
mov dword [ebp - 0x701c], 0x4e70e4
call fcn.00402c00
push 0xc
lea ecx, [ebp - 0x240c]
call fcn.00401960
push 1
push 0x4cc6c0
lea ecx, [ebp - 0x240c]
call fcn.00402b80
push 0
push 0x20019
lea ecx, [ebp - 0x2114]
mov byte [ebp - 4], 7
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x46af2d
xor esi, esi
mov dword [ebp - 0x6f8c], esi
nop
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46af2d
cmp esi, 1
jne 0x46ad6a
push 0x4e7108
lea ecx, [ebp - 0x2114]
call fcn.00402c00
push 0
push 0x20019
lea ecx, [ebp - 0x2114]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x46af2d
push 0x4cbcd8
lea ecx, [ebp - 0x240c]
call fcn.00402c00
lea eax, [ebp - 0x1fa4]
push eax
push dword [ebp + esi*4 - 0x7028]
lea ecx, [ebp - 0x1f74]
call fcn.004078e0
test al, al
je 0x46af1d
lea ecx, [ebp - 0x1fa4]
call fcn.00403170
test al, al
jne 0x46af1d
push 0x4ccdbc
lea ecx, [ebp - 0x1fa4]
call fcn.00402c40
test al, al
jne 0x46af1d
push 1
lea ecx, [ebp - 0x240c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x24dc]
call fcn.004055a0
lea ecx, [ebp - 0x24dc]
xor esi, esi
call fcn.00405540
test eax, eax
je 0x46af17
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46af17
push 3
push 1
push esi
lea ecx, [ebp - 0x24dc]
call fcn.00405530
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00402da0
mov ecx, eax
call fcn.00404aa0
mov ecx, eax
call fcn.00403170
test al, al
jne 0x46af03
lea ecx, [ebp - 0x1fa4]
call fcn.00402d50
cmp eax, 5
jl 0x46ae5d
push 0
push 1
push 1
push 0
push 0x4cbcf0
lea ecx, [ebp - 0x1fa4]
call fcn.00403fc0
test eax, eax
jne 0x46ae83
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str..dll
lea ecx, [ebp - 0x1fa4]
call fcn.00404260
push 3
lea edx, [edi + 0x1a8]
lea ecx, [ebp - 0x1fa4]
call fcn.00409ba0
test al, al
je 0x46af03
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x24dc]
call fcn.00405530
push eax
mov eax, dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x2114]
push 0x4cfae0
push dword [ebp + eax*4 - 0x7028]
push 0x4cfae0
call fcn.00402e90
push eax
lea ecx, [ebp - 0x213c]
call fcn.00402df0
push 0
lea ecx, [ebp - 0x213c]
call fcn.00402e90
push eax
lea eax, [ebp - 0x1fa4]
mov ecx, edi
push eax
call fcn.0046e590
lea ecx, [ebp - 0x24dc]
inc esi
call fcn.00405540
cmp esi, eax
jb 0x46adf0
mov esi, dword [ebp - 0x6f8c]
inc esi
mov dword [ebp - 0x6f8c], esi
cmp esi, 4
jb 0x46ad10
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46be77
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x4b
push dword [eax + 0x34]
call fcn.004219b0
movsd xmm0, qword [0x4ecfe0]
mov eax, 0x4e71c8
comisd xmm0, xmmword [edi + 0x390]
mov ecx, 0x4e7160
cmovbe ecx, eax
mov eax, dword [edi + 0x30]
xor esi, esi
mov dword [ebp - 0x6fb4], ecx
test eax, eax
je 0x46afde
mov eax, dword [ebp - 0x6fa0]
lea edx, [edi + 0x104]
mov dword [ebp - 0x6f8c], eax
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push ecx
push esi
mov ecx, edx
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
mov ecx, dword [ebp - 0x6f8c]
push eax
push str.HKU_
call fcn.00402df0
add dword [ebp - 0x6f8c], 0xc
lea edx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
mov ecx, dword [ebp - 0x6fb4]
cmp esi, eax
jb 0x46af90
mov esi, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push ecx
push dword [ebp - 0x6fc4]
lea ecx, [esi + eax*4]
call fcn.00402df0
cmp dword [ebp - 0x6fdc], 0
je 0x46b042
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6fb4]
inc eax
push dword [ebp - 0x6fe0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00402df0
cmp dword [ebp - 0x6fac], 0
mov dword [ebp - 0x6fb4], 0
jbe 0x46b22b
mov dword [ebp - 0x6f8c], esi
nop
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46b22b
push 0
push 0x20019
mov ecx, esi
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407730
test al, al
je 0x46b209
lea eax, [ebp - 0x6cec]
mov dword [ebp - 0x6fcc], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.00407b90
test al, al
je 0x46b209
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46b203
push dword [ebp - 0x6cec]
lea ecx, [ebp - 0x1fa4]
call fcn.00402c00
lea ecx, [ebp - 0x1fa4]
call fcn.00402d50
mov esi, eax
cmp esi, 3
jl 0x46b1db
push 1
lea ecx, [ebp - 0x1fa4]
call fcn.00402cc0
cmp word [eax], 0x3a
jne 0x46b1db
push 2
lea ecx, [ebp - 0x1fa4]
call fcn.00402cc0
cmp word [eax], 0x5c
jne 0x46b1db
movsd xmm0, qword [edi + 0x390]
comisd xmm0, xmmword [0x4ecfe8]
jbe 0x46b18b
cmp esi, 0x14
jle 0x46b18b
push 0
push 1
push 0xffffffffffffffff
push 0
push 0x4e7260
lea ecx, [ebp - 0x1fa4]
call fcn.00403fc0
mov edx, eax
lea ecx, [esi - 0xf]
cmp edx, ecx
jge 0x46b175
push 0
push 1
push 0xffffffffffffffff
push 0
push 0x4e7284
lea ecx, [ebp - 0x1fa4]
call fcn.00403fc0
mov edx, eax
lea eax, [esi - 0x13]
cmp edx, eax
jle 0x46b18b
lea eax, [edx - 1]
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00403e90
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cec]
push 0x4cfae0
call fcn.00402e90
push eax
lea ecx, [ebp - 0x213c]
call fcn.00402df0
push 0
lea ecx, [ebp - 0x213c]
call fcn.00402e90
push eax
lea eax, [ebp - 0x1fa4]
mov ecx, edi
push eax
call fcn.0046e590
mov esi, dword [ebp - 0x6fcc]
lea eax, [ebp - 0x6cec]
inc esi
lea ecx, [ebp - 0x1f74]
push eax
push esi
mov dword [ebp - 0x6fcc], esi
call fcn.00407b90
test al, al
jne 0x46b0b7
mov esi, dword [ebp - 0x6f8c]
mov eax, dword [ebp - 0x6fb4]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f8c], esi
mov dword [ebp - 0x6fb4], eax
cmp eax, dword [ebp - 0x6fac]
jb 0x46b060
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46be77
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x50
push dword [eax + 0x34]
call fcn.004219b0
push 0xc
lea ecx, [ebp - 0x212c]
call fcn.00407690
push 0xbb8
push 0
lea ecx, [ebp - 0x212c]
call fcn.00478c30
mov byte [ebp - 4], 8
xor esi, esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x46b2d8
mov eax, dword [ebp - 0x6fa0]
lea ecx, [edi + 0x10c]
mov dword [ebp - 0x6f8c], eax
nop dword [eax]
push esi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x104]
push esi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
mov edx, 0x4d0d70
mov ecx, eax
call fcn.00425f00
add dword [ebp - 0x6f8c], 0xc
lea ecx, [edi + 0x10c]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x46b290
mov ecx, dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
push 0
push 0
push 0x16
lea ecx, [ecx + eax*4]
call fcn.00403330
mov eax, dword [ebp - 0x6fa0]
xor esi, esi
mov dword [ebp - 0x6f8c], eax
nop dword [eax]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46b338
mov ecx, dword [ebp - 0x6f8c]
lea eax, [ebp - 0x212c]
push 1
push eax
call fcn.00402e90
push eax
mov ecx, edi
call fcn.00470e00
test al, al
je 0x46b338
add dword [ebp - 0x6f8c], 0xc
inc esi
cmp esi, dword [edi + 0x30]
jbe 0x46b300
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46be6c
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x51
push dword [eax + 0x34]
call fcn.004219b0
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x46b3ee
lea eax, [edi + 0x10c]
push esi
mov ecx, eax
call fcn.004784e0
mov ecx, eax
call fcn.00403170
test al, al
jne 0x46b3de
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2978]
call fcn.00402e90
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00402df0
push 1
lea eax, [ebp - 0x212c]
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.00470e00
test al, al
je 0x46b3ee
inc esi
lea eax, [edi + 0x10c]
cmp esi, dword [edi + 0x30]
jb 0x46b368
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46be6c
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x52
push dword [eax + 0x34]
call fcn.004219b0
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x46b4a9
lea eax, [edi + 0x10c]
nop
push esi
mov ecx, eax
call fcn.004784e0
mov ecx, eax
call fcn.00403170
test al, al
jne 0x46b499
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e72ac
lea ecx, [ebp - 0x226c]
call fcn.00402e90
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00402df0
push 1
lea eax, [ebp - 0x212c]
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.00470e00
test al, al
je 0x46b4a9
inc esi
lea eax, [edi + 0x10c]
cmp esi, dword [edi + 0x30]
jb 0x46b420
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46be6c
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x53
push dword [eax + 0x34]
call fcn.004219b0
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x46b566
lea eax, [edi + 0x10c]
nop dword [eax]
push esi
mov ecx, eax
call fcn.004784e0
mov ecx, eax
call fcn.00403170
test al, al
jne 0x46b556
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x250c]
call fcn.00402e90
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00402df0
push 0
lea eax, [ebp - 0x212c]
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00402e90
push eax
mov ecx, edi
call fcn.00470e00
test al, al
je 0x46b566
inc esi
lea eax, [edi + 0x10c]
cmp esi, dword [edi + 0x30]
jb 0x46b4e0
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46be6c
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x46b5da
mov ecx, dword [ebp - 0x6fa0]
lea eax, [edi + 0x10c]
mov dword [ebp - 0x6f8c], ecx
push esi
mov ecx, eax
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
push eax
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x104]
push esi
call fcn.004784e0
mov ecx, eax
call fcn.00402e90
mov edx, str.374DE290_123F_4565_9164_39C4925E467B
mov ecx, eax
call fcn.00425f00
add dword [ebp - 0x6f8c], 0xc
lea eax, [edi + 0x10c]
inc esi
cmp esi, dword [edi + 0x30]
jb 0x46b592
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x54
push dword [eax + 0x34]
call fcn.004219b0
mov eax, dword [edi + 0x30]
mov ecx, dword [ebp - 0x6fa0]
push 0
push 0
lea eax, [eax + eax*2]
push 0x19
lea ecx, [ecx + eax*4]
call fcn.00403330
xor esi, esi
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46b63e
mov ecx, dword [ebp - 0x6fa0]
lea eax, [ebp - 0x212c]
push 0
push eax
call fcn.00402e90
push eax
mov ecx, edi
call fcn.00470e00
test al, al
je 0x46b63e
add dword [ebp - 0x6fa0], 0xc
inc esi
cmp esi, dword [edi + 0x30]
jbe 0x46b606
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46be6c
push 0xc
lea ecx, [ebp - 0x27d4]
call fcn.00401960
lea ecx, [ebp - 0x27d4]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2658]
mov byte [ebp - 4], 9
call fcn.00401960
lea ecx, [ebp - 0x2658]
call fcn.00402b30
push 0x4c
lea ecx, [ebp - 0x2b58]
mov byte [ebp - 4], 0xa
call fcn.00410090
lea ecx, [ebp - 0x2b58]
call fcn.00409880
lea ecx, [ebp - 0x212c]
mov byte [ebp - 4], 0xb
call fcn.00405540
xor esi, esi
mov dword [ebp - 0x6f80], eax
test eax, eax
je 0x46b841
nop dword [eax]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46b841
push 0x4d3074
push 1
push 1
push esi
lea ecx, [ebp - 0x212c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402f30
push eax
lea ecx, [ebp - 0x27d4]
call fcn.00402da0
mov ecx, eax
call fcn.00402c40
test al, al
je 0x46b807
push 0
push esi
lea ecx, [ebp - 0x212c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2b58]
call fcn.004098d0
test al, al
je 0x46b807
push esi
lea ecx, [ebp - 0x212c]
call fcn.00478ba0
push eax
lea ecx, [ebp - 0x2658]
call fcn.00402c10
push 1
push 0
lea ecx, [ebp - 0x2b58]
call fcn.00409970
push eax
push esi
lea ecx, [ebp - 0x212c]
call fcn.00478ba0
mov ecx, eax
call fcn.00402da0
mov ecx, eax
call fcn.00403170
test al, al
jne 0x46b834
lea ecx, [ebp - 0x2b58]
call fcn.004099c0
mov ecx, eax
call fcn.00405960
push 0
push 0
test eax, eax
je 0x46b7e8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2b58]
call fcn.004099c0
push eax
push 0x4cc5dc
push esi
lea ecx, [ebp - 0x212c]
call fcn.00478ba0
mov ecx, eax
call fcn.00404260
push 3
push esi
lea ecx, [ebp - 0x212c]
call fcn.00478ba0
lea edx, [edi + 0x1a8]
mov ecx, eax
call fcn.00409ba0
test al, al
je 0x46b834
jmp 0x46b812
push 0x4cbcf4
push 0x4cc5d8
push esi
lea ecx, [ebp - 0x212c]
call fcn.00478ba0
mov ecx, eax
call fcn.004047c0
jmp 0x46b812
lea ecx, [ebp - 0x2658]
call fcn.00402ce0
push 0
lea ecx, [ebp - 0x2658]
call fcn.00402e90
push eax
push esi
lea ecx, [ebp - 0x212c]
call fcn.00478ba0
push eax
mov ecx, edi
call fcn.0046e590
inc esi
cmp esi, dword [ebp - 0x6f80]
jb 0x46b6c0
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46be4b
mov ecx, edi
call fcn.0046e270
test al, al
je 0x46be4b
push 0
push 0
lea ecx, [ebp - 0x212c]
call fcn.00478a80
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x55
push dword [eax + 0x34]
call fcn.004219b0
push 0xc
lea ecx, [ebp - 0x6d60]
call fcn.00407690
lea ecx, [ebp - 0x6d60]
call fcn.004076d0
push 0xc
lea ecx, [ebp - 0x6d74]
mov byte [ebp - 4], 0xc
call fcn.00407690
lea ecx, [ebp - 0x6d74]
call fcn.004076d0
push 0
push 0x20019
push 0x4d58f8
lea ecx, [ebp - 0x1fa8]
mov byte [ebp - 4], 0xd
call fcn.00407730
test al, al
je 0x46bc5a
lea eax, [ebp - 0x6d60]
mov dword [ebp - 0x6fcc], 0
push eax
push 0
lea ecx, [ebp - 0x1fa8]
call fcn.00407b10
test al, al
je 0x46bc5a
nop dword [eax + eax]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46bc5a
push dword [ebp - 0x6d60]
lea ecx, [ebp - 0x2190]
call fcn.00402c00
push 0x4e72e0
lea ecx, [ebp - 0x2190]
call fcn.00402c70
test al, al
je 0x46b954
push 0xa
push 1
push 1
push 0
push 0x4e7304
lea ecx, [ebp - 0x2190]
call fcn.00403fc0
test eax, eax
je 0x46bc32
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e731c
push dword [ebp - 0x6d60]
lea ecx, [ebp - 0x1f8c]
push 0x4e7330
call fcn.00402df0
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2050]
call fcn.00407730
test al, al
je 0x46bc32
mov ecx, edi
xor esi, esi
call fcn.00472340
test al, al
jne 0x46bc32
lea eax, [ebp - 0x6d74]
push eax
push esi
lea ecx, [ebp - 0x2050]
call fcn.00407b10
test al, al
je 0x46bc32
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6d74]
lea ecx, [ebp - 0x1f8c]
push 0x4e734c
push dword [ebp - 0x6d60]
push 0x4e7330
call fcn.00402df0
push 0
push 0x20019
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1ff8]
call fcn.00407730
test al, al
je 0x46bc22
lea eax, [ebp - 0x28d0]
push eax
push 0x4d03f0
lea ecx, [ebp - 0x1ff8]
call fcn.00407a20
test al, al
je 0x46bc22
cmp dword [ebp - 0x28d0], 0xb
jne 0x46baa1
lea eax, [ebp - 0x1fa4]
push eax
push 0x4d0420
lea ecx, [ebp - 0x1ff8]
call fcn.004078e0
test al, al
je 0x46bc22
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00402e90
push eax
push 0x1000
lea ecx, [ebp - 0x1fa4]
call fcn.004033e0
lea edx, [edi + 0x1a8]
mov ecx, eax
call fcn.0040ade0
jmp 0x46bb5b
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d57b4
lea ecx, [ebp - 0x1f8c]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x22f4]
call fcn.00402df0
lea eax, [ebp - 0x1fa4]
push eax
push 0x4d5820
lea ecx, [ebp - 0x22f4]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00407ab0
test al, al
je 0x46bb07
lea ecx, [ebp - 0x1fa4]
call fcn.00403170
test al, al
je 0x46bb48
lea eax, [ebp - 0x1fa4]
push eax
push 0x4d5820
lea ecx, [ebp - 0x1ff8]
call fcn.004078e0
test al, al
je 0x46bb31
lea ecx, [ebp - 0x1fa4]
call fcn.00403170
test al, al
je 0x46bb48
lea eax, [ebp - 0x1fa4]
push eax
push 0x4d0420
lea ecx, [ebp - 0x1ff8]
call fcn.004078e0
push 3
lea edx, [edi + 0x1a8]
lea ecx, [ebp - 0x1fa4]
call fcn.00409ba0
test al, al
je 0x46bc22
lea ecx, [ebp - 0x1fa4]
call fcn.00402e90
push eax
push 0
call dword [0x4ac80c]
test eax, eax
je 0x46bb97
push 1
push 0
lea ecx, [ebp - 0x7050]
call fcn.00402b80
mov byte [ebp - 4], 0xe
or dword [ebp - 0x6fe4], 1
jmp 0x46bbb7
lea eax, [ebp - 0x1f8c]
push eax
lea ecx, [ebp - 0x7044]
call fcn.00402b50
mov dword [ebp - 4], 0x10f
or dword [ebp - 0x6fe4], 2
push eax
lea ecx, [ebp - 0x213c]
call fcn.00402c10
mov eax, dword [ebp - 0x6fe4]
test al, 2
je 0x46bbe7
and eax, 0xfffffffd
lea ecx, [ebp - 0x7044]
mov dword [ebp - 0x6fe4], eax
call fcn.00402cd0
mov eax, dword [ebp - 0x6fe4]
mov dword [ebp - 4], 0x10d
test al, 1
je 0x46bc06
and eax, 0xfffffffe
lea ecx, [ebp - 0x7050]
mov dword [ebp - 0x6fe4], eax
call fcn.00402cd0
push 0
lea ecx, [ebp - 0x213c]
call fcn.00402e90
push eax
lea eax, [ebp - 0x1fa4]
mov ecx, edi
push eax
call fcn.0046e590
mov ecx, edi
inc esi
call fcn.00472340
test al, al
je 0x46b9b8
mov eax, dword [ebp - 0x6fcc]
lea ecx, [ebp - 0x6d60]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1fa8]
mov dword [ebp - 0x6fcc], eax
call fcn.00407b10
test al, al
jne 0x46b900
mov ecx, edi
call fcn.0046e270
test al, al
je 0x46be35
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x58
push dword [eax + 0x34]
call fcn.004219b0
push 4
lea ecx, [ebp - 0x6d20]
call fcn.00405950
lea ecx, [ebp - 0x6d20]
call fcn.00401030
lea eax, [ebp - 0x2598]
mov byte [ebp - 4], 0x10
push eax
push 0x1f40
lea eax, [ebp - 0x1f70]
mov dword [ebp - 0x6ce0], 0x428
push eax
mov dword [ebp - 0x2598], 0
call dword [0x4ac2b0]
test eax, eax
je 0x46bd8c
xor esi, esi
test dword [ebp - 0x2598], 0xfffffffc
jbe 0x46bd8c
nop dword [eax]
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46bd8c
push dword [ebp + esi*4 - 0x1f70]
push 0x18
call dword [0x4ac2c0]
push eax
lea ecx, [ebp - 0x6d20]
call fcn.00401060
lea ecx, [ebp - 0x6d20]
call fcn.00401090
test al, al
jne 0x46bd7a
lea eax, [ebp - 0x6ce0]
push eax
push dword [ebp - 0x6d20]
call dword [0x4ac310]
test eax, eax
je 0x46bd6f
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46bd6f
lea eax, [ebp - 0x6ac0]
mov ecx, edi
push eax
lea eax, [ebp - 0x212c]
push eax
call fcn.00471140
test al, al
je 0x46bd6f
lea eax, [ebp - 0x6ce0]
push eax
push dword [ebp - 0x6d20]
call dword [0x4ac30c]
test eax, eax
jne 0x46bd34
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46bd8c
mov eax, dword [ebp - 0x2598]
inc esi
shr eax, 2
cmp esi, eax
jb 0x46bce0
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46be2a
lea ecx, [ebp - 0x212c]
call fcn.00405540
mov ecx, dword [edi + 8]
push 0x5a
mov dword [ebp - 0x6fb4], eax
push dword [ecx + 0x34]
mov ecx, dword [edi + 4]
call fcn.004219b0
xor esi, esi
cmp dword [ebp - 0x6fb4], esi
jbe 0x46be23
mov dword [ebp - 0x6f8c], esi
mov ecx, edi
call fcn.00472340
test al, al
jne 0x46be23
mov eax, dword [ebp - 0x6f8c]
xor edx, edx
div dword [ebp - 0x6fb4]
mov ecx, dword [edi + 4]
add eax, 0x5a
push eax
mov eax, dword [edi + 8]
push dword [eax + 0x34]
call fcn.004219b0
push 0
push 0
push esi
lea ecx, [ebp - 0x212c]
call fcn.00478ba0
push eax
mov ecx, edi
call fcn.0046e590
add dword [ebp - 0x6f8c], 0xa
inc esi
cmp esi, dword [ebp - 0x6fb4]
jb 0x46bdd0
mov ecx, edi
call fcn.0046e270
lea ecx, [ebp - 0x6d20]
call fcn.00401040
lea ecx, [ebp - 0x6d74]
call fcn.00402cd0
lea ecx, [ebp - 0x6d60]
call fcn.00402cd0
lea ecx, [ebp - 0x2b58]
call fcn.00409a60
lea ecx, [ebp - 0x2658]
call fcn.00402cd0
lea ecx, [ebp - 0x27d4]
call fcn.00402cd0
lea ecx, [ebp - 0x212c]
call fcn.00478bc0
lea ecx, [ebp - 0x240c]
call fcn.00402cd0
lea ecx, [ebp - 0x1ff8]
call fcn.00407760
lea ecx, [ebp - 0x2050]
call fcn.00407760
lea ecx, [ebp - 0x1fa8]
call fcn.00407760
lea ecx, [ebp - 0x20f0]
call fcn.00402cd0
lea ecx, [ebp - 0x24dc]
mov dword [ebp - 4], 0xf8
call fcn.004054c0
lea ecx, [ebp - 0x6cf0]
call fcn.00478020
lea ecx, [ebp - 0x2328]
call fcn.00402cd0
lea ecx, [ebp - 0x2190]
call fcn.00402cd0
lea ecx, [ebp - 0x22f4]
call fcn.00402cd0
lea ecx, [ebp - 0x1fa4]
mov byte [ebp - 4], 0x46
call fcn.00402cd0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0
push 0x1004
push dword [eax + 0xb8]
call fcn.0041da40
push 0xc
lea ecx, [ebp - 0x2800]
mov dword [ebp - 0x6f8c], eax
call fcn.00401960
lea ecx, [ebp - 0x2800]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x27f4]
mov dword [ebp - 4], 0x111
call fcn.00401960
lea ecx, [ebp - 0x27f4]
call fcn.00402b30
push 0xc
lea ecx, [ebp - 0x2990]
mov byte [ebp - 4], 0x12
call fcn.00401960
lea ecx, [ebp - 0x2990]
call fcn.00402b30
push 0
push 0x4e7368
lea ecx, [ebp - 0x1fc8]
mov byte [ebp - 4], 0x13
call fcn.0040e530
xor esi, esi
cmp dword [ebp - 0x6f8c], esi
jbe 0x46c0a6
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push esi
push dword [eax + 0xb8]
call fcn.00420c10
cmp eax, 0x51
jne 0x46c099
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push esi
push dword [eax + 0xb8]
call fcn.00420d10
push eax
lea ecx, [ebp - 0x2154]
call fcn.00402e50
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push esi
push dword [eax + 0xb8]
call fcn.00420d10
push eax
lea ecx, [ebp - 0x2800]
call fcn.00402e50
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 2
push esi
push dword [eax + 0xb8]
call fcn.00420d10
push eax
lea ecx, [ebp - 0x27f4]
call fcn.00402e50
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 3
push esi
push dword [eax + 0xb8]
call fcn.00420d10
push eax
lea ecx, [ebp - 0x2990]
call fcn.00402e50
push 0
push 0
push 0
push 0x4e3654
lea ecx, [ebp - 0x2990]
call fcn.00402e90
push eax
push 0x4e73d4
lea ecx, [ebp - 0x27f4]
call fcn.00402e90
push eax
push 0x4e73f8
lea ecx, [ebp - 0x2800]
call fcn.00402e90
push eax
push 0x4e7420
lea ecx, [ebp - 0x2154]
call fcn.00402e90
push eax
push 0x4e2300
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
inc esi
cmp esi, dword [ebp - 0x6f8c]
jb 0x46bf92
push 0
push 0x4e7448
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
push 0x18
lea ecx, [ebp - 0x29c8]
call fcn.00401e20
lea ecx, [ebp - 0x29c8]
call fcn.00405380
xor esi, esi
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x6f8c], esi
jbe 0x46c290
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push esi
push dword [eax + 0xb8]
call fcn.00420c10
cmp eax, 0x52
jne 0x46c283
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push esi
push dword [eax + 0xb8]
call fcn.00420d10
push eax
lea ecx, [ebp - 0x2154]
call fcn.00402e50
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push esi
push dword [eax + 0xb8]
call fcn.00420d10
push eax
lea ecx, [ebp - 0x2800]
call fcn.00402e50
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 2
push esi
push dword [eax + 0xb8]
call fcn.00420d10
push eax
lea ecx, [ebp - 0x27f4]
call fcn.00402e50
push 1
push 0x4cfae0
lea ecx, [ebp - 0x2154]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x29c8]
call fcn.004055a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x29c8]
call fcn.00405530
push eax
push 0x4e7484
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea ecx, [ebp - 0x29c8]
call fcn.00405540
cmp eax, 1
jbe 0x46c1ef
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x29c8]
call fcn.00405530
push eax
push 0x4e7498
lea ecx, [ebp - 0x1f80]
call fcn.00404260
lea ecx, [ebp - 0x29c8]
call fcn.00405540
cmp eax, 2
jbe 0x46c231
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 2
lea ecx, [ebp - 0x29c8]
call fcn.00405530
push eax
push 0x4e74b0
lea ecx, [ebp - 0x1f80]
call fcn.00404260
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3654
lea ecx, [ebp - 0x27f4]
call fcn.00402e90
push eax
push 0x4e73f8
lea ecx, [ebp - 0x2800]
call fcn.00402e90
push eax
push 0x4e7420
lea ecx, [ebp - 0x1f80]
call fcn.00404260
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
inc esi
cmp esi, dword [ebp - 0x6f8c]
jb 0x46c0e2
push 0
push 0x4e74c8
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e0f08
call fcn.00420630
push 0
push 0x4e7518
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e0f38
call fcn.00420630
push 0
push 0x4e75a0
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
movsd xmm0, qword [edi + 0x390]
comisd xmm0, xmmword [0x4ecfe8]
jbe 0x46c338
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e0f58
call fcn.00420630
push 0
push 0x4e7618
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e0f8c
call fcn.00420630
push 0
push 0x4e76a8
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e0fbc
call fcn.00420630
push 0
push 0x4e7730
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e0fe8
call fcn.00420630
push 0
push 0x4e77b8
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e1020
call fcn.00420630
push 0
push 0x4e7848
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e1068
call fcn.00420630
push 0
push 0x4e78e8
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [edi + 8]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
mov ecx, dword [edi + 4]
push 0x4e10b0
call fcn.00420630
push 0
push 0x4e7988
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e10f8
call fcn.00420630
push 0
push 0x4e7a28
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e1130
call fcn.00420630
push 0
push 0x4e7ab8
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e1178
call fcn.00420630
push 0
push 0x4e7b58
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e11d8
call fcn.00420630
push 0
push 0x4e7be0
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e121c
call fcn.00420630
push 0
push 0x4e7c80
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [edi + 8]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
mov ecx, dword [edi + 4]
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e1258
call fcn.00420630
push 0
push 0x4e7d18
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e7db0
call fcn.00420630
push 0
push 0x4e7e00
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e1298
call fcn.00420630
push 0
push 0x4e7ea8
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
movsd xmm0, qword [edi + 0x390]
lea ecx, [ebp - 0x1fc8]
xor eax, eax
comisd xmm0, xmmword [0x4ecfe8]
seta al
add eax, 8
add dword [edi + 0x24], eax
call fcn.0040d9f0
test eax, eax
je 0x46c7b3
lea ecx, [ebp - 0x29d0]
call fcn.00413310
lea ecx, [ebp - 0x29d0]
call fcn.00413300
mov edi, eax
lea ecx, [ebp - 0x29d0]
sub edi, dword [ebp - 0x7038]
mov esi, edx
lea edx, [ebp - 0x1f80]
sbb esi, dword [ebp - 0x702c]
call fcn.004132c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dc838
lea ecx, [ebp - 0x1f80]
call fcn.00402e90
push eax
push 0x4e7f38
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
push esi
push edi
xor edx, edx
lea ecx, [ebp - 0x1f80]
call fcn.004136b0
mov ecx, dword [ebp - 0x6f7c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dc304
call fcn.00472340
test al, al
mov edx, 0x4e7fd8
mov ecx, 0x4e7f90
cmove ecx, edx
push ecx
push 0x4e8018
lea ecx, [ebp - 0x1f80]
call fcn.00402e90
push eax
push 0x4e8028
lea ecx, [ebp - 0x1f80]
call fcn.00402df0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
push 0
push 0x4e8050
lea ecx, [ebp - 0x1fc8]
call fcn.0040e530
lea ecx, [ebp - 0x1fc8]
call fcn.0040d980
mov edi, eax
lea ecx, [ebp - 0x1f80]
add edi, 0x26
mov esi, edx
adc esi, 0
push esi
push edi
call fcn.00403790
lea ecx, [ebp - 0x1f80]
call fcn.00402d50
add eax, eax
add edi, eax
adc esi, 0
push esi
push edi
lea ecx, [ebp - 0x1f80]
call fcn.00403790
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e808c
lea ecx, [ebp - 0x1f80]
call fcn.00404260
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fc8]
call fcn.0040e500
mov edi, dword [ebp - 0x6f7c]
jmp 0x46c7be
lea ecx, [edi + 0x11c]
call fcn.00402ce0
lea ecx, [ebp - 0x1f74]
call fcn.00408810
lea ecx, [ebp - 0x2570]
call fcn.00408810
push 5
lea ecx, [edi + 0x33c]
call fcn.00403f10
lea ecx, [edi + 0x33c]
call fcn.00402e90
push eax
push 0x80000002
call dword [0x4ac0e0]
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x64
push dword [eax + 0x34]
call fcn.004219b0
push 0
mov ecx, edi
call fcn.00472340
test al, al
mov edx, 0x4e80d0
mov eax, dword [edi + 8]
mov ecx, 0x4e80b4
cmove ecx, edx
push ecx
mov ecx, dword [edi + 4]
push dword [eax + 0x38]
call fcn.0041f260
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e80f0
lea ecx, [edi + 0x134]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2154]
call fcn.00402df0
lea ecx, [ebp - 0x2154]
call fcn.00402e90
mov esi, 2
mov ecx, eax
mov edx, esi
call fcn.0040d1a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e8100
lea ecx, [edi + 0x134]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2154]
call fcn.00402df0
lea ecx, [ebp - 0x2154]
call fcn.00402e90
mov edx, esi
mov ecx, eax
call fcn.0040d1a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e8110
lea ecx, [edi + 0x134]
call fcn.00402e90
push eax
lea ecx, [ebp - 0x2154]
call fcn.00402df0
lea ecx, [ebp - 0x2154]
call fcn.00402e90
mov edx, esi
mov ecx, eax
call fcn.0040d1a0
lea ecx, [edi + 0x248]
call fcn.0042e380
lea ecx, [ebp - 0x29c8]
xor esi, esi
call fcn.004054c0
lea ecx, [ebp - 0x2990]
call fcn.00402cd0
lea ecx, [ebp - 0x27f4]
call fcn.00402cd0
lea ecx, [ebp - 0x2800]
call fcn.00402cd0
lea ecx, [ebp - 0x213c]
call fcn.00402cd0
lea ecx, [ebp - 0x6e04]
call fcn.00478500
lea ecx, [ebp - 0x21e0]
call fcn.00401ad0
lea ecx, [ebp - 0x2574]
call fcn.0042ce10
lea ecx, [ebp - 0x2984]
call fcn.00402cd0
lea ecx, [ebp - 0x6dfc]
call fcn.00478500
lea ecx, [ebp - 0x6d4c]
call fcn.00401360
lea ecx, [ebp - 0x1fc8]
call fcn.00401df0
lea ecx, [ebp - 0x25e0]
call fcn.00402cd0
lea ecx, [ebp - 0x1f80]
call fcn.00402cd0
lea ecx, [ebp - 0x2960]
call fcn.00402cd0
lea ecx, [ebp - 0x2780]
call fcn.00402cd0
lea ecx, [ebp - 0x2a64]
call fcn.00402cd0
lea ecx, [ebp - 0x2a18]
call fcn.00402cd0
lea ecx, [ebp - 0x6cec]
call fcn.00402cd0
lea ecx, [ebp - 0x2570]
call fcn.00407760
lea ecx, [ebp - 0x1f74]
call fcn.00407760
lea ecx, [ebp - 0x25ec]
call fcn.00402cd0
lea ecx, [ebp - 0x296c]
call fcn.00402cd0
lea ecx, [ebp - 0x264c]
call fcn.00402cd0
lea ecx, [ebp - 0x2640]
call fcn.00402cd0
lea ecx, [ebp - 0x2954]
call fcn.00402cd0
lea ecx, [ebp - 0x2948]
call fcn.00402cd0
lea ecx, [ebp - 0x280c]
call fcn.00402cd0
lea ecx, [ebp - 0x26f0]
call fcn.00402cd0
lea ecx, [ebp - 0x26fc]
call fcn.00402cd0
lea ecx, [ebp - 0x2708]
call fcn.00402cd0
lea ecx, [ebp - 0x293c]
call fcn.00402cd0
lea ecx, [ebp - 0x2818]
call fcn.00402cd0
lea ecx, [ebp - 0x25b0]
call fcn.00402cd0
lea ecx, [ebp - 0x2930]
call fcn.00402cd0
lea ecx, [ebp - 0x2900]
call fcn.00402cd0
lea ecx, [ebp - 0x2720]
call fcn.00402cd0
lea ecx, [ebp - 0x250c]
call fcn.00402cd0
lea ecx, [ebp - 0x2978]
call fcn.00402cd0
lea ecx, [ebp - 0x25bc]
call fcn.00402cd0
lea ecx, [ebp - 0x2a00]
call fcn.00402cd0
lea ecx, [ebp - 0x2160]
call fcn.00402cd0
lea ecx, [ebp - 0x226c]
call fcn.00402cd0
lea ecx, [ebp - 0x2874]
call fcn.00402cd0
lea ecx, [ebp - 0x2114]
call fcn.00402cd0
lea ecx, [ebp - 0x2154]
call fcn.00402cd0
lea ecx, [ebp - 0x1f8c]
call fcn.00402cd0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00478dff
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret