Function at 0x44f1e0
Capabilities:
Contain obfuscated stackstrings
Encode data using base64
Parse pe header

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a7fb4
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x70a8
call fcn.004a0fe0
mov eax, dword [0x4f8008]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, ecx
mov dword [ebp - 0x6f44], eax
mov dword [ebp - 0x6fa8], 0
lea ecx, [ebp - 0x27a4]
mov byte [eax + 0x170], 0
call fcn.00411ff0
mov edi, dword [ebp - 0x6f44]
lea ecx, [edi + 0x11c]
call fcn.00401ae0
xor ecx, ecx
call fcn.00407d60
test eax, eax
je 0x44f26e
push eax
call fcn.004769a6
add esp, 4
push 0
mov ecx, edi
call fcn.00442a80
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0x34]
call fcn.0041ff10
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x4e0b5c
push dword [eax + 0x38]
call fcn.0041d990
push 0xc
lea ecx, [ebp - 0x1f98]
call fcn.00404370
lea ecx, [ebp - 0x1f98]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2178]
mov dword [ebp - 4], 0
call fcn.00404370
lea ecx, [ebp - 0x2178]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2120]
mov byte [ebp - 4], 1
call fcn.00404370
lea ecx, [ebp - 0x2120]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2880]
mov byte [ebp - 4], 2
call fcn.00404370
lea ecx, [ebp - 0x2880]
call fcn.00401930
mov byte [ebp - 4], 3
mov esi, 0xa0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0
push 0x1009
push dword [esi + eax]
call fcn.0041c1a0
add esi, 4
cmp esi, 0xb8
jb 0x44f314
push 0
push 0
push 0x80
lea ecx, [ebp - 0x2120]
call fcn.00402200
push eax
push 0
push 0
push 0x104
lea ecx, [ebp - 0x2178]
call fcn.00402200
push 0
push 0
push 0x80
lea ecx, [ebp - 0x2880]
mov esi, eax
call fcn.00402200
mov edx, esi
mov ecx, eax
call fcn.00423ce0
mov dword [edi + 0x38], eax
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 4
mov byte [ebp - 0x6f45], 1
push dword [eax + 0x28]
call fcn.0041e410
test eax, eax
setne byte [ebp - 0x6f51]
test eax, eax
mov eax, dword [ebp - 0x6f44]
lea ecx, [eax + 0x10c]
lea esi, [eax + 0x104]
mov dword [ebp - 0x6fa4], ecx
mov dword [ebp - 0x6f5c], esi
je 0x44f3ed
lea edx, [eax + 0x114]
push 1
mov dword [ebp - 0x6f40], edx
push edx
mov edx, ecx
mov ecx, esi
call fcn.004237a0
mov edi, dword [ebp - 0x6f44]
test eax, eax
setne cl
mov dword [edi + 0x30], eax
mov eax, edi
jmp 0x44f3ff
lea ecx, [eax + 0x114]
mov dword [ebp - 0x6f40], ecx
mov cl, byte [ebp - 0x6f45]
cmp byte [ebp - 0x6f51], 0
lea edi, [eax + 0x10c]
je 0x44f418
lea edi, [eax + 0x10c]
test cl, cl
jne 0x44f472
cmp dword [eax + 0x38], 0
je 0x44f6f9
mov dword [eax + 0x30], 1
mov ecx, esi
lea eax, [ebp - 0x2120]
push eax
push 1
call fcn.004762b0
mov ecx, eax
call fcn.00401a10
lea eax, [ebp - 0x2178]
mov ecx, edi
push eax
push 1
call fcn.004762b0
mov ecx, eax
call fcn.00401a10
mov ecx, dword [ebp - 0x6f40]
lea eax, [ebp - 0x2880]
push eax
push 1
call fcn.004762b0
mov ecx, eax
call fcn.00401a10
push 8
lea ecx, [ebp - 0x2888]
call fcn.00416660
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2888]
call fcn.00476420
push 8
lea ecx, [ebp - 0x2890]
mov byte [ebp - 4], 4
call fcn.00416660
push dword [ebp - 0x6fa4]
lea ecx, [ebp - 0x2890]
call fcn.00476420
push 8
lea ecx, [ebp - 0x2898]
mov byte [ebp - 4], 5
call fcn.00416660
push esi
lea ecx, [ebp - 0x2898]
call fcn.00476420
mov edi, dword [ebp - 0x6f44]
mov ecx, esi
mov byte [ebp - 4], 6
mov eax, dword [edi + 0x30]
add eax, 2
push eax
call fcn.004762b0
mov eax, dword [edi + 0x30]
lea ecx, [edi + 0x10c]
add eax, 2
push eax
call fcn.004762b0
mov eax, dword [edi + 0x30]
lea ecx, [edi + 0x114]
add eax, 2
push eax
call fcn.004762b0
mov eax, edi
xor esi, esi
mov eax, dword [eax + 0x30]
test eax, eax
je 0x44f59f
mov edi, dword [ebp - 0x6f5c]
push esi
lea ecx, [ebp - 0x2898]
call fcn.00476390
mov ecx, eax
call fcn.00401b10
push eax
push esi
mov ecx, edi
call fcn.00476390
mov ecx, eax
call fcn.00401c50
push esi
lea ecx, [ebp - 0x2890]
call fcn.00476390
mov ecx, eax
call fcn.00401b10
mov ecx, dword [ebp - 0x6fa4]
push eax
push esi
call fcn.00476390
mov ecx, eax
call fcn.00401c50
push esi
lea ecx, [ebp - 0x2888]
call fcn.00476390
mov ecx, eax
call fcn.00401b10
mov ecx, dword [ebp - 0x6f40]
push eax
push esi
call fcn.00476390
mov ecx, eax
call fcn.00401c50
mov eax, dword [ebp - 0x6f44]
inc esi
mov eax, dword [eax + 0x30]
cmp esi, eax
jb 0x44f520
mov ecx, dword [ebp - 0x6f40]
push 0
push 0x4e0b88
push 0x104
push eax
call fcn.00476390
mov ecx, eax
call fcn.00402200
mov ecx, eax
call fcn.00424770
mov edi, dword [ebp - 0x6f44]
push 0x4e0b88
push dword [edi + 0x30]
lea ecx, [edi + 0x104]
call fcn.00476390
mov ecx, eax
call fcn.00401a00
mov eax, dword [edi + 0x30]
lea ecx, [edi + 0x104]
inc eax
push 0x4e0b9c
push eax
mov dword [edi + 0x30], eax
call fcn.00476390
mov ecx, eax
call fcn.00401a00
push 0x4e0b9c
push dword [edi + 0x30]
lea ecx, [edi + 0x114]
call fcn.00476390
mov ecx, eax
call fcn.00401a00
lea eax, [ebp - 0x6db4]
mov dword [ebp - 0x6db4], 0x400
push eax
push 0
push 0
push 0x400
push dword [edi + 0x30]
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00402200
push eax
call dword [0x4a962c]
mov edx, 0x4e0b9c
mov ecx, 0x80000003
call fcn.00407990
test al, al
jne 0x44f711
push 0xc
lea ecx, [ebp - 0x29d4]
call fcn.00404370
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.NTUSER.DAT
push dword [edi + 0x30]
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x29d4]
call fcn.004019c0
lea ecx, [ebp - 0x29d4]
mov byte [ebp - 4], 7
call fcn.00401c90
push eax
push dword [edi + 0x30]
lea ecx, [edi + 0x104]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
push 0x80000003
call dword [0x4a9008]
test eax, eax
jne 0x44f6ec
mov eax, edi
inc dword [eax + 0x30]
lea ecx, [ebp - 0x29d4]
call fcn.00401ad0
jmp 0x44f716
test cl, cl
jne 0x44f472
push 1
mov ecx, eax
call fcn.00442a80
mov esi, eax
jmp 0x46a283
mov eax, edi
inc dword [eax + 0x30]
lea ecx, [ebp - 0x2898]
call fcn.004763b0
lea ecx, [ebp - 0x2890]
call fcn.004763b0
lea ecx, [ebp - 0x2888]
mov byte [ebp - 4], 3
call fcn.004763b0
lea esi, [edi + 0x140]
lea ecx, [ebp - 0x27a4]
mov dword [ebp - 0x6f4c], esi
call fcn.00411fe0
push edx
push eax
mov ecx, esi
call fcn.004026b0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [edi + 0x134]
push 0x4ce7f4
call fcn.00401c90
push eax
mov ecx, esi
call fcn.004031d0
mov ecx, esi
call fcn.00401c90
or edx, 0xffffffff
mov ecx, eax
call fcn.0040e830
test al, al
jne 0x44f7ac
push 1
mov ecx, edi
call fcn.00442a80
mov esi, eax
jmp 0x46a283
mov ecx, esi
call fcn.00401c90
push eax
call dword [0x4a93a4]
or eax, 2
mov ecx, esi
push eax
call fcn.00401c90
push eax
call dword [0x4a93a0]
push 0
call dword [0x4a97f8]
push 0xc
lea ecx, [ebp - 0x2240]
call fcn.00404370
lea ecx, [ebp - 0x2240]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2154]
mov byte [ebp - 4], 8
call fcn.00404370
lea ecx, [ebp - 0x2154]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x29b0]
mov byte [ebp - 4], 9
call fcn.00404370
lea ecx, [ebp - 0x29b0]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x25a8]
mov byte [ebp - 4], 0xa
call fcn.00404370
lea ecx, [ebp - 0x25a8]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x294c]
mov byte [ebp - 4], 0xb
call fcn.00404370
lea ecx, [ebp - 0x294c]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x24ec]
mov byte [ebp - 4], 0xc
call fcn.00404370
lea ecx, [ebp - 0x24ec]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x273c]
mov byte [ebp - 4], 0xd
call fcn.00404370
lea ecx, [ebp - 0x273c]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2874]
mov byte [ebp - 4], 0xe
call fcn.00404370
lea ecx, [ebp - 0x2874]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x291c]
mov byte [ebp - 4], 0xf
call fcn.00404370
lea ecx, [ebp - 0x291c]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2578]
mov byte [ebp - 4], 0x10
call fcn.00404370
lea ecx, [ebp - 0x2578]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x27ec]
mov byte [ebp - 4], 0x11
call fcn.00404370
lea ecx, [ebp - 0x27ec]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x283c]
mov byte [ebp - 4], 0x12
call fcn.00404370
lea ecx, [ebp - 0x283c]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2748]
mov byte [ebp - 4], 0x13
call fcn.00404370
lea ecx, [ebp - 0x2748]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x26b0]
mov byte [ebp - 4], 0x14
call fcn.00404370
lea ecx, [ebp - 0x26b0]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x26bc]
mov byte [ebp - 4], 0x15
call fcn.00404370
lea ecx, [ebp - 0x26bc]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x27c8]
mov byte [ebp - 4], 0x16
call fcn.00404370
lea ecx, [ebp - 0x27c8]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2958]
mov byte [ebp - 4], 0x17
call fcn.00404370
lea ecx, [ebp - 0x2958]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2910]
mov byte [ebp - 4], 0x18
call fcn.00404370
lea ecx, [ebp - 0x2910]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x265c]
mov byte [ebp - 4], 0x19
call fcn.00404370
lea ecx, [ebp - 0x265c]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2650]
mov byte [ebp - 4], 0x1a
call fcn.00404370
lea ecx, [ebp - 0x2650]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2934]
mov byte [ebp - 4], 0x1b
call fcn.00404370
lea ecx, [ebp - 0x2934]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x25c0]
mov byte [ebp - 4], 0x1c
call fcn.00404370
lea ecx, [ebp - 0x25c0]
call fcn.00401930
mov byte [ebp - 4], 0x1d
call dword [0x4a93c4]
mov ecx, eax
call fcn.0040e4f0
test eax, eax
mov dword [ebp - 0x6f70], eax
mov edx, str.HKLM
mov eax, str.HKLM64
setne cl
test cl, cl
mov byte [ebp - 0x6f45], cl
push 1
push dword [edi + 0x38]
cmove eax, edx
lea ecx, [ebp - 0x2240]
mov dword [ebp - 0x6f9c], eax
mov edx, 0x4c975c
mov eax, str.HKLM32
cmove eax, edx
push 0x1a
mov dword [ebp - 0x6fa0], eax
call fcn.00402150
push 1
push dword [edi + 0x38]
lea ecx, [ebp - 0x2154]
push 0x1c
call fcn.00402150
push 1
push dword [edi + 0x38]
lea ecx, [ebp - 0x25a8]
push 2
call fcn.00402150
push 1
push dword [edi + 0x38]
lea ecx, [ebp - 0x24ec]
push 0x10
call fcn.00402150
push 1
push dword [edi + 0x38]
lea ecx, [ebp - 0x26bc]
push 0x23
call fcn.00402150
push 1
push dword [edi + 0x38]
lea ecx, [ebp - 0x2874]
push 7
call fcn.00402150
push 1
push dword [edi + 0x38]
lea ecx, [ebp - 0x291c]
push 5
call fcn.00402150
push 0x400
push 0
push 0
push 0x400
lea ecx, [ebp - 0x273c]
call fcn.00402200
push eax
push 0x4db698
push dword [edi + 0x38]
call dword [0x4a9620]
push 0x400
lea ecx, [ebp - 0x273c]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x273c]
call fcn.00401c90
push eax
call dword [0x4a9264]
push 0x104
push 0
push 0
push 0x104
lea ecx, [ebp - 0x2578]
call fcn.00402200
push eax
call dword [0x4a93b0]
cmp dword [ebp - 0x6f70], 0
je 0x44fbbf
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4ce74c
lea ecx, [ebp - 0x2578]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x27ec]
call fcn.00401bf0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4db6a8
jmp 0x44fc01
push 0x104
push 0
push 0
push 0x104
lea ecx, [ebp - 0x27ec]
call fcn.00402200
push eax
call dword [0x4a93b4]
cmp byte [ebp - 0x6f45], 0
je 0x44fc1a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4db6bc
lea ecx, [ebp - 0x2578]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x283c]
call fcn.00401bf0
jmp 0x44fc2c
lea eax, [ebp - 0x27ec]
push eax
lea ecx, [ebp - 0x283c]
call fcn.00401a10
mov al, byte [ebp - 0x6f70]
lea edx, [ebp - 0x26b0]
push eax
lea ecx, [ebp - 0x2748]
mov dword [ebp - 0x6f5c], eax
call fcn.0040ebd0
push 0
push 0
push 0x2b
lea ecx, [ebp - 0x27c8]
call fcn.00402150
push 0
push 0
push 0x17
lea ecx, [ebp - 0x265c]
call fcn.00402150
push 0
push 0
push 0x19
lea ecx, [ebp - 0x2650]
call fcn.00402150
push 0
push 0
push 0x18
lea ecx, [ebp - 0x2958]
call fcn.00402150
push 1
push 0
push 0x28
lea ecx, [ebp - 0x25c0]
call fcn.00402150
lea ecx, [ebp - 0x25c0]
call fcn.00401b50
push eax
lea ecx, [ebp - 0x2240]
call fcn.00402bd0
lea ecx, [ebp - 0x25c0]
call fcn.00401b50
push eax
lea ecx, [ebp - 0x2154]
call fcn.00402bd0
push 1
push 0x4db6d0
lea ecx, [ebp - 0x29b0]
call fcn.00401ba0
lea ecx, [ebp - 0x25c0]
call fcn.00401b50
push eax
lea ecx, [ebp - 0x25a8]
call fcn.00402bd0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d2480
lea ecx, [ebp - 0x2240]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x294c]
call fcn.00401bf0
lea ecx, [ebp - 0x25c0]
call fcn.00401b50
push eax
lea ecx, [ebp - 0x24ec]
call fcn.00402bd0
lea ecx, [ebp - 0x25c0]
call fcn.00401b50
push eax
lea ecx, [ebp - 0x273c]
call fcn.00402bd0
lea ecx, [ebp - 0x25c0]
call fcn.00401b50
push eax
lea ecx, [ebp - 0x2874]
call fcn.00402bd0
lea ecx, [ebp - 0x25c0]
call fcn.00401b50
push eax
lea ecx, [ebp - 0x291c]
call fcn.00402bd0
push 2
push 1
lea ecx, [ebp - 0x2578]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2934]
call fcn.00403ab0
push 1
lea ecx, [ebp - 0x27c8]
call fcn.00401ea0
lea eax, [ebp - 0x27c8]
push eax
lea ecx, [ebp - 0x2910]
call fcn.00401a10
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4c9754
lea ecx, [ebp - 0x2748]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x27c8]
call fcn.004031d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4c9754
lea ecx, [ebp - 0x26b0]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2910]
call fcn.004031d0
mov eax, dword [ebp - 0x6f44]
cmp byte [eax + 0x40], 0
je 0x44fe2f
xor esi, esi
jmp 0x46a191
mov eax, dword [eax + 8]
mov edi, dword [ebp - 0x6f44]
push 3
push dword [eax + 0x34]
mov ecx, dword [edi + 4]
call fcn.0041ff10
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x4e0bb4
push dword [eax + 0x38]
call fcn.0041d990
mov eax, edi
mov ecx, dword [eax + 0x10]
test ecx, ecx
jne 0x44fe6f
mov ecx, eax
call fcn.0046cd50
mov eax, edi
mov ecx, dword [eax + 0x10]
cmp ecx, 1
jne 0x44fe9d
mov esi, dword [0x4a9344]
nop word [eax + eax]
mov ecx, eax
call fcn.0046f9d0
test al, al
jne 0x44ff19
push 0x64
call esi
mov eax, edi
cmp dword [eax + 0x10], 1
je 0x44fe80
jmp 0x44fe9f
mov eax, edi
mov eax, dword [eax + 8]
mov ecx, dword [edi + 4]
push 6
push dword [eax + 0x34]
call fcn.0041ff10
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x4e0be4
push dword [eax + 0x38]
call fcn.0041d990
lea esi, [edi + 0x314]
lea ecx, [ebp - 0x27a4]
mov dword [ebp - 0x6f8c], esi
call fcn.00411fe0
push edx
push eax
mov ecx, esi
call fcn.004026b0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e0c14
mov ecx, esi
call fcn.004031d0
mov ecx, esi
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046d240
test eax, eax
jne 0x44ff23
mov esi, 3
jmp 0x46a191
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.HKLM_
mov ecx, esi
call fcn.004031d0
push 4
lea ecx, [ebp - 0x1f74]
call fcn.00404590
lea ecx, [ebp - 0x1f74]
call fcn.00404ea0
push 4
lea ecx, [ebp - 0x2568]
mov byte [ebp - 4], 0x1e
call fcn.00404590
push 0
push 0x20019
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2568]
call fcn.004063c0
push 0xc
lea ecx, [ebp - 0x6cb4]
mov byte [ebp - 4], 0x1f
call fcn.00406340
lea ecx, [ebp - 0x6cb4]
call fcn.00406380
push 0xc
lea ecx, [ebp - 0x29e0]
mov byte [ebp - 4], 0x20
call fcn.00406340
lea ecx, [ebp - 0x29e0]
call fcn.00406380
push 0x10
lea ecx, [ebp - 0x2a2c]
mov byte [ebp - 4], 0x21
call fcn.004067a0
lea ecx, [ebp - 0x2a2c]
call fcn.00406360
push 0xc
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0x22
call fcn.00404370
lea ecx, [ebp - 0x1f8c]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2940]
mov byte [ebp - 4], 0x23
call fcn.00404370
lea ecx, [ebp - 0x2940]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x1f80]
mov byte [ebp - 4], 0x24
call fcn.00404370
lea ecx, [ebp - 0x1f80]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x25b4]
mov byte [ebp - 4], 0x25
call fcn.00404370
lea ecx, [ebp - 0x25b4]
call fcn.00401930
lea ecx, [ebp - 0x27a4]
mov byte [ebp - 4], 0x26
call fcn.00411fe0
mov ecx, edx
mov dword [ebp - 0x6ffc], eax
push ecx
mov dword [ebp - 0x6ff8], ecx
lea ecx, [ebp - 0x2940]
push eax
call fcn.004026b0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4db6f4
lea ecx, [ebp - 0x2940]
call fcn.00401c90
push eax
push 0x4e0c24
lea ecx, [edi + 0x134]
call fcn.00401c90
push eax
lea ecx, [edi + 0x11c]
call fcn.00401bf0
push 0x20
lea ecx, [ebp - 0x1fd4]
call fcn.0040ed60
lea ecx, [ebp - 0x1fd4]
call fcn.0040c450
push 0
push 0x22
lea ecx, [edi + 0x11c]
mov byte [ebp - 4], 0x27
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040c700
test eax, eax
je 0x450314
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e0c38
push 0
push 1
push 1
push 0
push 0x4e0c68
lea ecx, [edi + 0x32c]
call fcn.00402c80
test eax, eax
mov edx, 0x4e0c80
mov ecx, 0x4e0c78
cmove ecx, edx
push ecx
lea ecx, [edi + 0x32c]
call fcn.00401c90
push eax
push 0x4db754
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
cmp dword [ebp - 0x6f70], 0
jne 0x450174
cmp byte [ebp - 0x6f45], 0
mov eax, 0x4c9c20
jne 0x450179
mov eax, 0x4c9c28
push 0
push 0
push 0
push 0
push 0
push 0x4db768
push eax
push 0x4cdb98
push 0x4db77c
push 0x4db790
lea ecx, [edi + 0x32c]
call fcn.00401c90
push eax
push 0x4cb5e4
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
push 0
push dword [edi + 0xc]
lea ecx, [ebp - 0x25b4]
call fcn.004026b0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dbcd8
lea ecx, [ebp - 0x25b4]
call fcn.00401c90
push eax
push 0x4e0c98
lea ecx, [edi + 0x32c]
call fcn.00401c90
push eax
push 0x4cb5e4
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
push dword [ebp - 0x6f5c]
lea eax, [ebp - 0x1f80]
mov ecx, edi
push eax
call fcn.0046b120
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
cmp byte [ebp - 0x6f51], 0
mov ecx, 0x4e0cd8
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dbcd8
mov eax, 0x4ce4f8
cmove eax, ecx
lea ecx, [ebp - 0x2880]
push eax
push 0x4e0cec
push 0x4dbcd8
call fcn.00401c90
push eax
push 0x4e0d24
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
lea edx, [ebp - 0x1f80]
lea ecx, [ebp - 0x27a4]
call fcn.00411fa0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4db7a8
lea ecx, [ebp - 0x1f80]
call fcn.00401c90
push eax
push 0x4e0d58
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
push 0
push 0x4e0d80
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
lea ecx, [ebp - 0x2934]
call fcn.00401c90
lea ecx, [ebp - 0x2578]
mov dword [ebp - 0x6f68], eax
call fcn.00401c90
lea ecx, [ebp - 0x27ec]
mov dword [ebp - 0x6f64], eax
call fcn.00401c90
mov dword [ebp - 0x6f60], eax
mov al, byte [ebp - 0x6f45]
mov byte [ebp - 0x6f5c], al
mov eax, dword [ebp - 0x6f44]
movups xmm0, xmmword [ebp - 0x6f68]
lea ecx, [eax + 0x17c]
mov dword [ebp - 0x6f80], ecx
movups xmmword [ecx], xmm0
lea ecx, [eax + 0x2d0]
call fcn.004738a0
mov edi, dword [ebp - 0x6f44]
lea ecx, [edi + 0x220]
call fcn.0042c350
lea ecx, [edi + 0x208]
push 0
call fcn.0042bfa0
push 0x4d82a8
lea ecx, [edi + 0x220]
call fcn.0042c2d0
push 1
lea ecx, [edi + 0x220]
call fcn.0042d050
movzx ecx, byte [ebp - 0x6f45]
mov eax, dword [edi + 0x30]
inc ecx
add eax, ecx
lea ecx, [ebp - 0x6d10]
push 4
mov dword [ebp - 0x6f7c], eax
call fcn.00404590
push 8
push 0x4e1034
lea ecx, [ebp - 0x6d10]
call fcn.004014d0
push 8
lea ecx, [ebp - 0x6dc0]
mov byte [ebp - 4], 0x28
call fcn.00416660
mov eax, dword [edi + 0x30]
lea ecx, [ebp - 0x6dc0]
add eax, 2
push eax
call fcn.00476450
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x2904]
mov edi, dword [ebp - 0x6dc0]
push 0xc
mov dword [ebp - 0x6f78], edi
call fcn.00404370
push 1
push 0x4c97ec
lea ecx, [ebp - 0x2904]
call fcn.00401980
mov eax, dword [ebp - 0x6f44]
xor esi, esi
mov byte [ebp - 4], 0x2a
mov eax, dword [eax + 0x30]
test eax, eax
je 0x450482
nop dword [eax]
mov ecx, dword [ebp - 0x6f40]
push esi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00401a00
mov eax, dword [ebp - 0x6f44]
inc esi
add edi, 0xc
mov eax, dword [eax + 0x30]
cmp esi, eax
jb 0x450450
mov edi, dword [ebp - 0x6f78]
lea eax, [eax + eax*2]
push 0x4db8f0
lea ecx, [edi + eax*4]
call fcn.00401a00
cmp byte [ebp - 0x6f45], 0
mov edi, dword [ebp - 0x6f44]
je 0x4504bb
mov eax, dword [edi + 0x30]
mov ecx, dword [ebp - 0x6f78]
inc eax
push 0x4db8f0
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
call fcn.00401a00
push 4
lea ecx, [ebp - 0x2564]
call fcn.00404590
lea ecx, [ebp - 0x2564]
call fcn.00404ea0
mov ecx, edi
mov byte [ebp - 4], 0x2b
call fcn.0046f9d0
test al, al
jne 0x452f2e
mov eax, dword [ebp - 0x6f44]
test dword [eax + 0x34], 0x400
jne 0x452f2c
push 0
push 0x4e1074
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov edi, dword [ebp - 0x6f44]
push 0
push 0x4e10a4
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push dword [eax + 0x38]
call fcn.0041d990
push 8
lea ecx, [ebp - 0x6d1c]
call fcn.00416660
push dword [ebp - 0x6f7c]
lea ecx, [ebp - 0x6d1c]
call fcn.00476450
mov eax, edi
mov byte [ebp - 4], 0x2c
mov edx, dword [ebp - 0x6d1c]
xor esi, esi
mov dword [ebp - 0x6f70], edx
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x4505c0
add eax, 0x104
mov edi, edx
mov dword [ebp - 0x6f5c], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e10d0
push esi
mov ecx, eax
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
push str.HKU_
mov ecx, edi
call fcn.00401bf0
mov eax, dword [ebp - 0x6f44]
inc esi
add edi, 0xc
mov ecx, dword [eax + 0x30]
mov eax, dword [ebp - 0x6f5c]
cmp esi, ecx
jb 0x450570
mov edx, dword [ebp - 0x6f70]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d4de8
push dword [ebp - 0x6f9c]
lea eax, [ecx + ecx*2]
lea ecx, [edx + eax*4]
call fcn.00401bf0
cmp byte [ebp - 0x6f45], 0
mov edi, dword [ebp - 0x6f44]
je 0x45062d
mov eax, dword [edi + 0x30]
mov ecx, dword [ebp - 0x6f70]
inc eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d4de8
push dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
call fcn.00401bf0
push 4
lea ecx, [ebp - 0x2210]
call fcn.00404590
lea ecx, [ebp - 0x2210]
call fcn.00404ea0
push 4
lea ecx, [ebp - 0x1ff4]
mov byte [ebp - 4], 0x2d
call fcn.00404590
lea ecx, [ebp - 0x1ff4]
call fcn.00404ea0
push 0xc
lea ecx, [ebp - 0x23d4]
mov byte [ebp - 4], 0x2e
call fcn.00404370
lea ecx, [ebp - 0x23d4]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x212c]
mov byte [ebp - 4], 0x2f
call fcn.00404370
lea ecx, [ebp - 0x212c]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x1fa4]
mov byte [ebp - 4], 0x30
call fcn.00404370
lea ecx, [ebp - 0x1fa4]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2074]
mov byte [ebp - 4], 0x31
call fcn.00404370
lea ecx, [ebp - 0x2074]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x23bc]
mov byte [ebp - 4], 0x32
call fcn.00404370
lea ecx, [ebp - 0x23bc]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x22d8]
mov byte [ebp - 4], 0x33
call fcn.00404370
lea ecx, [ebp - 0x22d8]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2160]
mov byte [ebp - 4], 0x34
call fcn.00404370
lea ecx, [ebp - 0x2160]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2114]
mov byte [ebp - 4], 0x35
call fcn.00404370
lea ecx, [ebp - 0x2114]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x22f0]
mov byte [ebp - 4], 0x36
call fcn.00404370
lea ecx, [ebp - 0x22f0]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2854]
mov byte [ebp - 4], 0x37
call fcn.00404370
lea ecx, [ebp - 0x2854]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2784]
mov byte [ebp - 4], 0x38
call fcn.00404370
lea ecx, [ebp - 0x2784]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2848]
mov byte [ebp - 4], 0x39
call fcn.00404370
lea ecx, [ebp - 0x2848]
call fcn.00401930
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov byte [ebp - 4], 0x3a
lea ecx, [edi + 0x140]
push 0x4db87c
mov dword [ebp - 0x2358], 0
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00401bf0
mov eax, dword [ebp - 0x2380]
xor esi, esi
mov dword [ebp - 0x6f88], esi
mov dword [ebp - 0x6f50], eax
cmp dword [ebp - 0x6f7c], esi
jbe 0x451914
nop
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x451914
movd xmm1, esi
mov eax, esi
cvtdq2pd xmm1, xmm1
shr eax, 0x1f
mov ecx, dword [edi + 4]
addsd xmm1, qword [eax*8 + 0x4eac10]
mov eax, dword [ebp - 0x6f7c]
mulsd xmm1, qword [0x4eaa58]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4eac10]
divsd xmm1, xmm0
addsd xmm1, qword [0x4eaa28]
cvttsd2si eax, xmm1
push eax
mov eax, dword [edi + 8]
push dword [eax + 0x34]
call fcn.0041ff10
lea eax, [esi + esi*2]
shl eax, 2
mov dword [ebp - 0x6f40], eax
add eax, dword [ebp - 0x6f70]
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f6c], eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2210]
call fcn.004063e0
test al, al
je 0x451901
mov ecx, edi
mov dword [ebp - 0x6f50], 0
call fcn.0046f9d0
test al, al
jne 0x451901
nop dword [eax]
lea eax, [ebp - 0x6cb4]
push eax
push dword [ebp - 0x6f50]
lea ecx, [ebp - 0x2210]
call fcn.004067b0
test al, al
je 0x451901
mov ecx, dword [ebp - 0x6f6c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
push 0x4c9754
call fcn.00401c90
push eax
lea ecx, [ebp - 0x23d4]
call fcn.00401bf0
push 0
push 0x20019
lea ecx, [ebp - 0x23d4]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1ff4]
call fcn.004063e0
test al, al
je 0x4518ec
lea eax, [ebp - 0x212c]
push eax
push 0x4cdebc
lea ecx, [ebp - 0x1ff4]
call fcn.00406580
test al, al
je 0x4518ec
lea eax, [ebp - 0x6cc8]
push eax
push 0x4e113c
lea ecx, [ebp - 0x1ff4]
call fcn.004066c0
test al, al
je 0x450991
cmp dword [ebp - 0x6cc8], 1
je 0x4518ec
lea eax, [ebp - 0x23bc]
push eax
push 0x4e115c
lea ecx, [ebp - 0x1ff4]
call fcn.00406580
test al, al
je 0x4509bf
lea ecx, [ebp - 0x23bc]
call fcn.00401b50
test eax, eax
jne 0x4518ec
lea eax, [ebp - 0x23bc]
push eax
push 0x4e1178
lea ecx, [ebp - 0x1ff4]
call fcn.00406580
test al, al
je 0x450a3a
push 0x4e1190
lea ecx, [ebp - 0x23bc]
call fcn.00401a40
test al, al
jne 0x4518ec
push 0x4e11a0
lea ecx, [ebp - 0x23bc]
call fcn.00401a40
test al, al
jne 0x4518ec
push 0x4e11b0
lea ecx, [ebp - 0x23bc]
call fcn.00401a40
test al, al
jne 0x4518ec
push 0x4e11c4
lea ecx, [ebp - 0x23bc]
call fcn.00401a40
test al, al
jne 0x4518ec
lea eax, [ebp - 0x1fa4]
push eax
push 0x4e11e4
lea ecx, [ebp - 0x1ff4]
call fcn.00406580
lea eax, [ebp - 0x22d8]
push eax
push 0x4d4e54
lea ecx, [ebp - 0x1ff4]
call fcn.00406580
test al, al
jne 0x450a7f
lea ecx, [ebp - 0x1fa4]
call fcn.00401b50
test eax, eax
je 0x4518ec
lea eax, [ebp - 0x2160]
push eax
push 0x4e1204
lea ecx, [ebp - 0x1ff4]
call fcn.00406580
test al, al
je 0x450aa9
lea ecx, [ebp - 0x2160]
call fcn.00401b50
test eax, eax
jne 0x450ab9
push 0x4db8dc
lea ecx, [ebp - 0x2160]
call fcn.00401a00
lea eax, [ebp - 0x212c]
push eax
lea ecx, [ebp - 0x2114]
call fcn.00401a10
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4c97ac
lea ecx, [ebp - 0x2114]
call fcn.00401c90
push eax
push 0x4e1218
lea ecx, [edi + 0x314]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00401bf0
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
xor edx, edx
mov ecx, eax
call fcn.00408000
mov byte [ebp - 0x6f51], al
test al, al
jne 0x450c1a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2114]
call fcn.00401c90
push eax
push 0x4e1218
lea ecx, [edi + 0x314]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00401bf0
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
xor edx, edx
mov ecx, eax
call fcn.00408000
mov byte [ebp - 0x6f51], al
test al, al
jne 0x450c1a
push 0
push 1
push 0xffffffffffffffff
push 1
push 0x4ca04c
lea ecx, [ebp - 0x2114]
call fcn.00402c80
cmp eax, 4
jl 0x450d1a
dec eax
lea ecx, [ebp - 0x2114]
push eax
call fcn.00402b50
cmp byte [eax + 8], 0
je 0x450d1a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2114]
call fcn.00401c90
push eax
push 0x4e1218
lea ecx, [edi + 0x314]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00401bf0
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
xor edx, edx
mov ecx, eax
call fcn.00408000
mov byte [ebp - 0x6f51], al
test al, al
je 0x450b86
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4c97ec
lea ecx, [ebp - 0x2114]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2904]
call fcn.00402f30
cmp byte [ebp - 0x6f51], 0
jne 0x450ca7
lea eax, [ebp - 0x2358]
push eax
lea eax, [ebp - 0x2784]
push eax
lea ecx, [ebp - 0x23d4]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046d8b0
test al, al
je 0x4518ec
push 0
lea ecx, [ebp - 0x23d4]
call fcn.00401c90
push eax
lea eax, [ebp - 0x2784]
mov ecx, edi
push eax
call fcn.0046bd60
test al, al
je 0x4518ec
mov byte [ebp - 0x6f51], 2
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push str.Programs
lea ecx, [ebp - 0x212c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x4518ec
lea ecx, [ebp - 0x1fa4]
call fcn.00401c90
mov ecx, eax
call fcn.0040e810
test al, al
je 0x450dc9
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.004020d0
push 0
push 0
push 0x4c975c
push 0x4ca048
lea ecx, [ebp - 0x1fa4]
call fcn.00403410
jmp 0x45139a
cmp byte [ebp - 0x6f51], 0
jne 0x450c1a
lea ecx, [ebp - 0x2114]
call fcn.00401ae0
lea ecx, [ebp - 0x212c]
call fcn.00401b50
push 0
push 1
push 1
push 0
push 0x4e122c
lea ecx, [ebp - 0x212c]
call fcn.00402c80
test eax, eax
jne 0x450dab
push eax
push 1
push 1
push eax
push 0x4e1240
lea ecx, [ebp - 0x212c]
call fcn.00402c80
test eax, eax
jne 0x450dab
push eax
push 1
push 1
push eax
push 0x4e1264
lea ecx, [ebp - 0x212c]
call fcn.00402c80
test eax, eax
jne 0x450dab
push eax
push 1
push 1
push eax
push 0x4e1284
lea ecx, [ebp - 0x212c]
call fcn.00402c80
test eax, eax
je 0x450c53
lea eax, [ebp - 0x212c]
mov byte [ebp - 0x6f51], 2
push eax
lea ecx, [ebp - 0x2114]
call fcn.00401a10
jmp 0x450ca7
cmp dword [ebp - 0x2358], 0
je 0x450e8b
lea eax, [ebp - 0x6cc8]
mov dword [ebp - 0x6cc8], 0x400
push eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00402200
push eax
push 0x4e11e4
push dword [ebp - 0x6cb4]
call dword [0x4a97ec]
push 0
push 1
push 1
push 0
push 0x4ca134
lea ecx, [ebp - 0x1fa4]
call fcn.00402c80
test eax, eax
jne 0x450e8b
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4e12ac
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x23bc]
push 0x4e12d8
push dword [ebp - 0x6f9c]
call fcn.00401bf0
push 0
push 0x20019
lea ecx, [ebp - 0x23bc]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x450e8b
lea eax, [ebp - 0x1fa4]
push eax
push 0x4e11e4
lea ecx, [ebp - 0x1f74]
call fcn.00406580
lea ecx, [ebp - 0x1fa4]
call fcn.00401b50
cmp eax, 0xa
jle 0x450ea8
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.004020d0
lea ecx, [ebp - 0x1fa4]
call fcn.00401c90
push eax
call dword [0x4a94a8]
test eax, eax
jne 0x45139a
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push str.__0
lea ecx, [ebp - 0x212c]
call fcn.00401c90
push eax
push 0x4c9754
lea ecx, [ebp - 0x2748]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00401bf0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00401c90
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00402200
mov edx, 0x400
mov ecx, eax
call fcn.0040e6d0
test al, al
jne 0x45139a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x212c]
call fcn.00401c90
push eax
push 0x4c9754
lea ecx, [ebp - 0x26b0]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00401bf0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00401c90
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00402200
mov edx, 0x400
mov ecx, eax
call fcn.0040e6d0
test al, al
jne 0x45139a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x212c]
call fcn.00401c90
push eax
push 0x4c9754
lea ecx, [ebp - 0x26bc]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00401bf0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00401c90
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00402200
mov edx, 0x400
mov ecx, eax
call fcn.0040e6d0
test al, al
jne 0x45139a
lea ecx, [ebp - 0x2160]
call fcn.00401b50
cmp eax, 4
jle 0x4510b4
push 0
push 1
push 1
push 0
push 0x4e137c
lea ecx, [ebp - 0x2160]
call fcn.00402c80
cmp eax, 1
je 0x4510b4
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x212c]
call fcn.00401c90
push eax
push 0x4c9754
lea ecx, [ebp - 0x2160]
call fcn.00401c90
push eax
push 0x4c9754
lea ecx, [ebp - 0x26bc]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00401bf0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00401c90
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00402200
mov edx, 0x400
mov ecx, eax
call fcn.0040e6d0
test al, al
jne 0x45139a
mov eax, dword [ebp - 0x6f44]
cmp esi, dword [eax + 0x30]
jae 0x45130c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x212c]
call fcn.00401c90
push eax
push 0x4c9754
lea ecx, [ebp - 0x2240]
call fcn.00401c90
mov edi, dword [ebp - 0x6fa4]
mov ecx, edi
push eax
push esi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00401bf0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00401c90
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00402200
mov edx, 0x400
mov ecx, eax
call fcn.0040e6d0
test al, al
jne 0x451394
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x212c]
call fcn.00401c90
push eax
push 0x4c9754
lea ecx, [ebp - 0x2154]
call fcn.00401c90
push eax
push esi
mov ecx, edi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00401bf0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00401c90
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00402200
mov edx, 0x400
mov ecx, eax
call fcn.0040e6d0
test al, al
jne 0x451394
lea ecx, [ebp - 0x2160]
call fcn.00401b50
cmp eax, 4
jle 0x45130c
push 0
push 1
push 1
push 0
push 0x4e137c
lea ecx, [ebp - 0x2160]
call fcn.00402c80
cmp eax, 1
je 0x45130c
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x212c]
call fcn.00401c90
push eax
push 0x4c9754
lea ecx, [ebp - 0x2160]
call fcn.00401c90
push eax
push 0x4c9754
lea ecx, [ebp - 0x2240]
call fcn.00401c90
push eax
push esi
mov ecx, edi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00401bf0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00401c90
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00402200
mov edx, 0x400
mov ecx, eax
call fcn.0040e6d0
test al, al
jne 0x451394
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x212c]
call fcn.00401c90
push eax
push 0x4c9754
lea ecx, [ebp - 0x2160]
call fcn.00401c90
push eax
push 0x4c9754
lea ecx, [ebp - 0x2154]
call fcn.00401c90
push eax
push esi
mov ecx, edi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00401bf0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00401c90
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00402200
mov edx, 0x400
mov ecx, eax
call fcn.0040e6d0
test al, al
jne 0x451394
lea ecx, [ebp - 0x22d8]
call fcn.00401b50
lea ecx, [ebp - 0x1fa4]
cmp eax, 0xa
jle 0x45138f
lea eax, [ebp - 0x22d8]
push eax
call fcn.00401a10
push 0
push 0
push 0x4c975c
push 0x4ca048
lea ecx, [ebp - 0x1fa4]
call fcn.00403410
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.004020d0
push 0
push 1
push 0xffffffffffffffff
push 1
push 0x4ca134
lea ecx, [ebp - 0x1fa4]
call fcn.00402c80
cmp eax, 2
jle 0x451380
add eax, 0xfffffffe
lea ecx, [ebp - 0x1fa4]
push eax
call fcn.00402bd0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00401f20
jmp 0x451394
call fcn.00401ae0
mov edi, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x1fa4]
call fcn.00401c90
mov ecx, eax
call fcn.00409d90
test al, al
je 0x4513bb
lea ecx, [ebp - 0x1fa4]
call fcn.00401ae0
lea eax, [ebp - 0x2074]
mov dword [ebp - 0x6f5c], 0
push eax
push 0x4d4b7c
lea ecx, [ebp - 0x1ff4]
call fcn.00406580
test al, al
je 0x451418
push 0
lea ecx, [ebp - 0x2074]
call fcn.00401c90
push eax
push 0x104
lea ecx, [ebp - 0x2074]
call fcn.00402200
lea ecx, [ebp - 0x2074]
call fcn.00401c90
push eax
call dword [0x4a9494]
mov dword [ebp - 0x6f5c], eax
jmp 0x45146e
cmp dword [ebp - 0x2358], 0
je 0x45147b
lea eax, [ebp - 0x6d2c]
mov dword [ebp - 0x6d2c], 0x400
push eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0x2074]
call fcn.00402200
push eax
push 0x4e1394
push dword [ebp - 0x6cb4]
call dword [0x4a97ec]
push dword [ebp - 0x6d2c]
lea ecx, [ebp - 0x2074]
call fcn.00401ac0
xor ecx, ecx
mov word [eax], cx
cmp dword [ebp - 0x2358], 0
jne 0x4515c5
lea ecx, [ebp - 0x2074]
call fcn.00401b50
test eax, eax
jne 0x4515c5
push eax
lea ecx, [ebp - 0x22d8]
call fcn.00401c90
push eax
push 0x800
lea ecx, [ebp - 0x2074]
call fcn.00402200
push 0x800
lea ecx, [ebp - 0x2074]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x22d8]
call fcn.00401c90
push eax
call dword [0x4a93dc]
lea ecx, [ebp - 0x2074]
call fcn.00401b50
test eax, eax
je 0x4515c5
push 0
push 1
push 0xffffffffffffffff
push 0
push str..exe
lea ecx, [ebp - 0x2074]
call fcn.00402c80
test eax, eax
je 0x45150c
add eax, 3
lea ecx, [ebp - 0x2074]
push eax
call fcn.00402b50
lea ecx, [ebp - 0x2074]
call fcn.00401c90
mov esi, dword [0x4a948c]
push eax
call esi
test eax, eax
jne 0x4515c5
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x4ca134
lea ecx, [ebp - 0x2074]
call fcn.00402c80
cmp eax, 2
jle 0x451553
add eax, 0xfffffffe
lea ecx, [ebp - 0x2074]
push eax
call fcn.00402bd0
lea ecx, [ebp - 0x2074]
call fcn.00401c90
push eax
call esi
test eax, eax
jne 0x4515c5
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x4ca048
lea ecx, [ebp - 0x2074]
call fcn.00402c80
test eax, eax
je 0x45158c
push eax
lea ecx, [ebp - 0x2074]
call fcn.00402bd0
lea ecx, [ebp - 0x2074]
call fcn.00401c90
push eax
call esi
test eax, eax
jne 0x4515c5
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x4ca04c
lea ecx, [ebp - 0x2074]
call fcn.00402c80
test eax, eax
je 0x4515c5
push eax
lea ecx, [ebp - 0x2074]
call fcn.00402bd0
push 0x5c
lea ecx, [ebp - 0x1fa4]
call fcn.00403820
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x212c]
push 0
push dword [eax + 0xa0]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
call fcn.00401c90
mov ecx, dword [edi + 4]
push eax
call fcn.0041ec90
mov esi, eax
cmp esi, 0xffffffff
je 0x4518e6
push 1
lea ecx, [ebp - 0x2160]
call fcn.00401c90
push eax
mov eax, dword [ebp - 0x6f44]
push esi
mov ecx, dword [eax + 8]
push dword [ecx + 0xa0]
mov ecx, dword [eax + 4]
call fcn.0041fe20
lea ecx, [ebp - 0x2074]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
je 0x451670
push 0
push 0x10
push dword [ebp - 0x6f5c]
lea ecx, [ebp - 0x2074]
call fcn.00401c90
mov edi, dword [ebp - 0x6f44]
push eax
push esi
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push dword [eax + 0xa0]
call fcn.0041f630
jmp 0x451676
mov edi, dword [ebp - 0x6f44]
mov ecx, dword [ebp - 0x6f78]
add ecx, dword [ebp - 0x6f40]
push 2
call fcn.00401c90
mov ecx, dword [edi + 4]
push eax
mov eax, dword [edi + 8]
push esi
push dword [eax + 0xa0]
call fcn.0041fe20
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push esi
push esi
push dword [eax + 0xa0]
call fcn.0041f460
lea ecx, [ebp - 0x2114]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push esi
push dword [eax + 0xa0]
call fcn.0046aee0
test eax, eax
jne 0x4516ec
cmp byte [ebp - 0x6f51], 1
mov ecx, 2
movzx eax, byte [ebp - 0x6f51]
cmove eax, ecx
mov byte [ebp - 0x6f51], al
push esi
lea ecx, [ebp - 0x22f0]
call fcn.00402760
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x23d4]
call fcn.00401c90
push eax
push 0x4dac7c
lea ecx, [ebp - 0x22f0]
call fcn.00401c90
mov edi, dword [0x4a93d4]
push eax
call edi
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00401c90
push eax
push 0x4ce4b0
lea ecx, [ebp - 0x22f0]
call fcn.00401c90
push eax
call edi
lea ecx, [ebp - 0x2114]
call fcn.00401b50
test eax, eax
je 0x4517b2
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2114]
call fcn.00401c90
push eax
push 0x4db8b4
lea ecx, [ebp - 0x22f0]
call fcn.00401c90
push eax
call edi
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
push 0x4cb078
lea ecx, [ebp - 0x2114]
call fcn.00401c90
push eax
push 0x4e13ac
call edi
lea ecx, [ebp - 0x22d8]
call fcn.00401b50
test eax, eax
je 0x4517ec
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x22d8]
call fcn.00401c90
push eax
push 0x4db890
lea ecx, [ebp - 0x22f0]
call fcn.00401c90
push eax
call edi
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
mov esi, dword [ebp - 0x6f78]
add esi, dword [ebp - 0x6f40]
push eax
mov ecx, esi
call fcn.00401c90
push eax
push 0x4dac98
lea ecx, [ebp - 0x22f0]
call fcn.00401c90
push eax
call edi
cmp dword [ebp - 0x2358], 0
je 0x45184d
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x22f0]
push 0x4db8c4
call fcn.00401c90
push eax
call edi
mov eax, dword [ebp - 0x6f44]
mov ecx, 0x4e13ec
mov edi, dword [ebp - 0x6f44]
push 0
push 0
inc dword [eax + 0x24]
xor eax, eax
cmp byte [ebp - 0x6f51], 1
sete al
add dword [edi + 0x28], eax
mov eax, 0x4e13d8
cmp byte [ebp - 0x6f51], 1
cmovne eax, ecx
mov ecx, esi
push eax
push 0x4e0ab4
call fcn.00401c90
push eax
push 0x4e1404
lea ecx, [ebp - 0x1fa4]
call fcn.00401c90
push eax
push 0x4e1428
lea ecx, [ebp - 0x23d4]
call fcn.00401c90
push eax
push 0x4e144c
lea ecx, [ebp - 0x212c]
call fcn.00401c90
push eax
push 0x4e1474
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
mov esi, dword [ebp - 0x6f88]
inc dword [ebp - 0x6f50]
mov ecx, edi
call fcn.0046f9d0
test al, al
je 0x4508d0
inc esi
mov dword [ebp - 0x6f88], esi
cmp esi, dword [ebp - 0x6f7c]
jb 0x450810
mov ecx, edi
call fcn.0046f9d0
test al, al
je 0x4519d1
lea ecx, [ebp - 0x2848]
call fcn.00401ad0
lea ecx, [ebp - 0x2784]
call fcn.00401ad0
lea ecx, [ebp - 0x2854]
call fcn.00401ad0
lea ecx, [ebp - 0x22f0]
call fcn.00401ad0
lea ecx, [ebp - 0x2114]
call fcn.00401ad0
lea ecx, [ebp - 0x2160]
call fcn.00401ad0
lea ecx, [ebp - 0x22d8]
call fcn.00401ad0
lea ecx, [ebp - 0x23bc]
call fcn.00401ad0
lea ecx, [ebp - 0x2074]
call fcn.00401ad0
lea ecx, [ebp - 0x1fa4]
call fcn.00401ad0
lea ecx, [ebp - 0x212c]
call fcn.00401ad0
lea ecx, [ebp - 0x23d4]
call fcn.00401ad0
lea ecx, [ebp - 0x1ff4]
call fcn.00406410
lea ecx, [ebp - 0x2210]
call fcn.00406410
lea ecx, [ebp - 0x6d1c]
mov byte [ebp - 4], 0x2b
call fcn.004763b0
jmp 0x452f3a
cmp dword [edi + 0x208], 0
lea eax, [edi + 0x208]
je 0x4519ee
push 0
push eax
lea ecx, [edi + 0x220]
call fcn.0042d150
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x451923
push 0xc
lea ecx, [ebp - 0x29a4]
call fcn.00404370
lea ecx, [ebp - 0x29a4]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2718]
mov byte [ebp - 4], 0x3b
call fcn.00404370
lea ecx, [ebp - 0x2718]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2724]
mov byte [ebp - 4], 0x3c
call fcn.00404370
lea ecx, [ebp - 0x2724]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x27b0]
mov byte [ebp - 4], 0x3d
call fcn.00404370
lea ecx, [ebp - 0x27b0]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2790]
mov byte [ebp - 4], 0x3e
call fcn.00404370
lea ecx, [ebp - 0x2790]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x279c]
mov byte [ebp - 4], 0x3f
call fcn.00404370
lea ecx, [ebp - 0x279c]
call fcn.00401930
mov eax, dword [ebp - 0x6f44]
mov esi, 1
mov byte [ebp - 4], 0x40
lea edi, [eax + 0x30c]
mov dword [ebp - 0x6f5c], esi
mov dword [ebp - 0x6f70], edi
cmp dword [edi], esi
jbe 0x452825
nop word [eax + eax]
mov ecx, eax
call fcn.0046f9d0
test al, al
jne 0x45281f
lea eax, [esi + esi*4]
xor edx, edx
add eax, eax
div dword [edi]
mov edi, dword [ebp - 0x6f44]
add eax, 0x10
mov ecx, dword [edi + 4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x4eac10]
cvttsd2si eax, xmm0
push eax
mov eax, dword [edi + 8]
push dword [eax + 0x34]
call fcn.0041ff10
push esi
mov ecx, edi
call fcn.0046c210
test al, al
je 0x452804
push esi
lea ecx, [edi + 0x2e8]
call fcn.004766b0
push eax
lea ecx, [ebp - 0x23d4]
call fcn.00401a10
push 0
push 0x20019
lea ecx, [ebp - 0x23d4]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1ff4]
call fcn.004063e0
test al, al
je 0x452804
lea eax, [ebp - 0x212c]
push eax
push 0x4cdebc
lea ecx, [ebp - 0x1ff4]
call fcn.00406580
test al, al
je 0x452804
lea eax, [ebp - 0x1fa4]
push eax
push 0x4e11e4
lea ecx, [ebp - 0x1ff4]
call fcn.00406580
lea eax, [ebp - 0x22d8]
push eax
push 0x4d4e54
lea ecx, [ebp - 0x1ff4]
call fcn.00406580
test al, al
jne 0x451bca
lea ecx, [ebp - 0x1fa4]
call fcn.00401b50
test eax, eax
je 0x452804
lea eax, [ebp - 0x2160]
push eax
push 0x4e1204
lea ecx, [ebp - 0x1ff4]
call fcn.00406580
test al, al
je 0x451bf4
lea ecx, [ebp - 0x2160]
call fcn.00401b50
test eax, eax
jne 0x451c04
push 0x4db8dc
lea ecx, [ebp - 0x2160]
call fcn.00401a00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4ce818
lea ecx, [ebp - 0x212c]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2790]
call fcn.00402f30
push 0
push 1
push 1
push 0
push str.msiexec
lea ecx, [ebp - 0x22d8]
call fcn.00402c80
test eax, eax
setne byte [ebp - 0x6f40]
test eax, eax
jne 0x451c92
lea eax, [ebp - 0x6cc8]
push eax
push 0x4e14a0
lea ecx, [ebp - 0x1ff4]
call fcn.004066c0
test al, al
je 0x451c92
mov eax, dword [ebp - 0x6f40]
mov ecx, 1
cmp dword [ebp - 0x6cc8], 1
movzx eax, al
cmove eax, ecx
mov dword [ebp - 0x6f40], eax
lea eax, [ebp - 0x212c]
push eax
lea ecx, [ebp - 0x2114]
call fcn.00401a10
lea ecx, [ebp - 0x1fa4]
call fcn.00401c90
mov ecx, eax
call fcn.0040e810
test al, al
je 0x451ce5
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.004020d0
push 0
push 0
push 0x4c975c
push 0x4ca048
lea ecx, [ebp - 0x1fa4]
call fcn.00403410
jmp 0x452309
cmp byte [ebp - 0x6f40], 0
je 0x451da7
lea eax, [ebp - 0x6cc8]
mov dword [ebp - 0x6cc8], 0x400
push eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00402200
push eax
push 0x4e11e4
push dword [ebp - 0x6cb4]
call dword [0x4a97ec]
push 0
push 1
push 1
push 0
push 0x4ca134
lea ecx, [ebp - 0x1fa4]
call fcn.00402c80
test eax, eax
jne 0x451da7
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4e12ac
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x23bc]
push 0x4e12d8
push dword [ebp - 0x6f9c]
call fcn.00401bf0
push 0
push 0x20019
lea ecx, [ebp - 0x23bc]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x451da7
lea eax, [ebp - 0x1fa4]
push eax
push 0x4e11e4
lea ecx, [ebp - 0x1f74]
call fcn.00406580
lea ecx, [ebp - 0x1fa4]
call fcn.00401b50
cmp eax, 0xa
jle 0x451dc4
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.004020d0
push 0
push 1
push 1
push 0
push 0x4ca134
lea ecx, [ebp - 0x1fa4]
call fcn.00402c80
test eax, eax
jne 0x452309
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push str.__0
lea ecx, [ebp - 0x2114]
call fcn.00401c90
push eax
push 0x4c9754
lea ecx, [ebp - 0x2748]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00401bf0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00401c90
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00402200
mov edx, 0x400
mov ecx, eax
call fcn.0040e6d0
test al, al
jne 0x452309
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2114]
call fcn.00401c90
push eax
push 0x4c9754
lea ecx, [ebp - 0x26b0]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00401bf0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00401c90
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00402200
mov edx, 0x400
mov ecx, eax
call fcn.0040e6d0
test al, al
jne 0x452309
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2114]
call fcn.00401c90
push eax
push 0x4c9754
lea ecx, [ebp - 0x26bc]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00401bf0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00401c90
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00402200
mov edx, 0x400
mov ecx, eax
call fcn.0040e6d0
test al, al
jne 0x452309
lea ecx, [ebp - 0x2160]
call fcn.00401b50
cmp eax, 4
jle 0x451fd6
push 0
push 1
push 1
push 0
push 0x4e137c
lea ecx, [ebp - 0x2160]
call fcn.00402c80
cmp eax, 1
je 0x451fd6
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2114]
call fcn.00401c90
push eax
push 0x4c9754
lea ecx, [ebp - 0x2160]
call fcn.00401c90
push eax
push 0x4c9754
lea ecx, [ebp - 0x26bc]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00401bf0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00401c90
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00402200
mov edx, 0x400
mov ecx, eax
call fcn.0040e6d0
test al, al
jne 0x452309
push 1
push 0x4cb5d0
push dword [ebp - 0x6d10]
lea ecx, [ebp - 0x23d4]
push 1
call fcn.00401c90
push eax
lea ecx, [ebp - 0x27b0]
call fcn.00401ba0
mov ecx, eax
call fcn.00403e90
test eax, eax
je 0x452278
lea ecx, [ebp - 0x27b0]
call fcn.00401c90
lea edx, [ebp - 0x2718]
mov ecx, eax
call fcn.00424840
test al, al
je 0x452278
lea ecx, [ebp - 0x27b0]
call fcn.00401c90
lea edx, [ebp - 0x2724]
mov ecx, eax
call fcn.00424140
test al, al
je 0x452278
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2114]
call fcn.00401c90
push eax
push 0x4c9754
lea ecx, [ebp - 0x2240]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2724]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00401bf0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00401c90
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00402200
mov edx, 0x400
mov ecx, eax
call fcn.0040e6d0
test al, al
jne 0x452288
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2114]
call fcn.00401c90
push eax
push 0x4c9754
lea ecx, [ebp - 0x2154]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2724]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00401bf0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00401c90
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00402200
mov edx, 0x400
mov ecx, eax
call fcn.0040e6d0
test al, al
jne 0x452288
lea ecx, [ebp - 0x2160]
call fcn.00401b50
cmp eax, 4
jle 0x452288
push 0
push 1
push 1
push 0
push 0x4e137c
lea ecx, [ebp - 0x2160]
call fcn.00402c80
cmp eax, 1
je 0x452288
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2114]
call fcn.00401c90
push eax
push 0x4c9754
lea ecx, [ebp - 0x2160]
call fcn.00401c90
push eax
push 0x4c9754
lea ecx, [ebp - 0x2240]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2724]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00401bf0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00401c90
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00402200
mov edx, 0x400
mov ecx, eax
call fcn.0040e6d0
test al, al
jne 0x452288
push 0
push 0
push 0
push 0
push 0
push str.__0
lea ecx, [ebp - 0x2114]
call fcn.00401c90
push eax
push 0x4c9754
lea ecx, [ebp - 0x2160]
call fcn.00401c90
push eax
push 0x4c9754
lea ecx, [ebp - 0x2154]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2724]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00401bf0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00401c90
push eax
push 0x400
lea ecx, [ebp - 0x1fa4]
call fcn.00402200
mov edx, 0x400
mov ecx, eax
call fcn.0040e6d0
jmp 0x452288
push 0x4db8f0
lea ecx, [ebp - 0x2718]
call fcn.00401a00
lea ecx, [ebp - 0x22d8]
call fcn.00401b50
cmp eax, 0xa
jle 0x452309
lea eax, [ebp - 0x22d8]
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00401a10
push 0
push 0
push 0x4c975c
push 0x4ca048
lea ecx, [ebp - 0x1fa4]
call fcn.00403410
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.004020d0
push 0
push 1
push 0xffffffffffffffff
push 1
push 0x4ca134
lea ecx, [ebp - 0x1fa4]
call fcn.00402c80
cmp eax, 2
jle 0x4522fc
add eax, 0xfffffffe
lea ecx, [ebp - 0x1fa4]
push eax
call fcn.00402bd0
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.00401f20
lea ecx, [ebp - 0x1fa4]
call fcn.00401c90
mov ecx, eax
call fcn.00409d90
test al, al
je 0x45232a
lea ecx, [ebp - 0x1fa4]
call fcn.00401ae0
lea eax, [ebp - 0x2074]
xor esi, esi
push eax
push 0x4d4b7c
lea ecx, [ebp - 0x1ff4]
call fcn.00406580
test al, al
je 0x45237a
push esi
lea ecx, [ebp - 0x2074]
call fcn.00401c90
push eax
push 0x104
lea ecx, [ebp - 0x2074]
call fcn.00402200
lea ecx, [ebp - 0x2074]
call fcn.00401c90
push eax
call dword [0x4a9494]
mov esi, eax
jmp 0x4523d0
cmp byte [ebp - 0x6f40], 0
je 0x4523dd
lea eax, [ebp - 0x6d30]
mov dword [ebp - 0x6d30], 0x400
push eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0x2074]
call fcn.00402200
push eax
push 0x4e1394
push dword [ebp - 0x6cb4]
call dword [0x4a97ec]
push dword [ebp - 0x6d30]
lea ecx, [ebp - 0x2074]
call fcn.00401ac0
xor ecx, ecx
mov word [eax], cx
cmp byte [ebp - 0x6f40], 0
jne 0x45252d
lea ecx, [ebp - 0x2074]
call fcn.00401b50
test eax, eax
jne 0x45252d
push eax
lea ecx, [ebp - 0x22d8]
call fcn.00401c90
push eax
push 0x800
lea ecx, [ebp - 0x2074]
call fcn.00402200
push 0x800
lea ecx, [ebp - 0x2074]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x22d8]
call fcn.00401c90
push eax
call dword [0x4a93dc]
lea ecx, [ebp - 0x2074]
call fcn.00401b50
test eax, eax
je 0x45252d
push 0
push 1
push 0xffffffffffffffff
push 0
push str..exe
lea ecx, [ebp - 0x2074]
call fcn.00402c80
test eax, eax
je 0x45246e
add eax, 3
lea ecx, [ebp - 0x2074]
push eax
call fcn.00402b50
lea ecx, [ebp - 0x2074]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
jne 0x45252d
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x4ca134
lea ecx, [ebp - 0x2074]
call fcn.00402c80
cmp eax, 2
jle 0x4524b3
add eax, 0xfffffffe
lea ecx, [ebp - 0x2074]
push eax
call fcn.00402bd0
lea ecx, [ebp - 0x2074]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
jne 0x45252d
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x4ca048
lea ecx, [ebp - 0x2074]
call fcn.00402c80
test eax, eax
je 0x4524f0
push eax
lea ecx, [ebp - 0x2074]
call fcn.00402bd0
lea ecx, [ebp - 0x2074]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
jne 0x45252d
push eax
push 1
push 0xffffffffffffffff
push 1
push 0x4ca04c
lea ecx, [ebp - 0x2074]
call fcn.00402c80
test eax, eax
je 0x45252d
push eax
lea ecx, [ebp - 0x2074]
call fcn.00402bd0
push 0x5c
lea ecx, [ebp - 0x1fa4]
call fcn.00403820
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2114]
mov byte [ebp - 0x6f6c], 1
call fcn.00401c90
push eax
push 0x4e1218
lea ecx, [edi + 0x314]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00401bf0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
lea eax, [ebp - 0x6cc8]
push eax
push 0x4e14c4
lea ecx, [ebp - 0x1f74]
call fcn.004066c0
test al, al
je 0x4525d2
mov eax, dword [ebp - 0x6f6c]
mov ecx, 2
cmp dword [ebp - 0x6cc8], 0
movzx eax, al
cmove eax, ecx
mov dword [ebp - 0x6f6c], eax
push esi
lea ecx, [ebp - 0x2074]
call fcn.00401c90
push eax
xor eax, eax
lea ecx, [ebp - 0x2718]
cmp byte [ebp - 0x6f6c], 1
push 0
sete al
push eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2160]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x212c]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0xffffffffffffffff
push 0xffffffffffffffff
push dword [eax + 0xa0]
call fcn.004426b0
push eax
lea ecx, [ebp - 0x22f0]
call fcn.00402760
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x23d4]
call fcn.00401c90
push eax
push 0x4dac7c
lea ecx, [ebp - 0x22f0]
call fcn.00401c90
mov esi, dword [0x4a93d4]
push eax
call esi
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fa4]
call fcn.00401c90
push eax
push 0x4ce4b0
lea ecx, [ebp - 0x22f0]
call fcn.00401c90
push eax
call esi
lea ecx, [ebp - 0x2114]
call fcn.00401b50
test eax, eax
je 0x4526ec
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2114]
call fcn.00401c90
push eax
push 0x4db8b4
lea ecx, [ebp - 0x22f0]
call fcn.00401c90
push eax
call esi
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
push 0x4cb078
lea ecx, [ebp - 0x2114]
call fcn.00401c90
push eax
push 0x4e13ac
call esi
lea ecx, [ebp - 0x22d8]
call fcn.00401b50
test eax, eax
je 0x452726
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x22d8]
call fcn.00401c90
push eax
push 0x4db890
lea ecx, [ebp - 0x22f0]
call fcn.00401c90
push eax
call esi
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2718]
call fcn.00401c90
push eax
push 0x4dac98
lea ecx, [ebp - 0x22f0]
call fcn.00401c90
push eax
call esi
cmp byte [ebp - 0x6f40], 0
je 0x45277f
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x22f0]
push 0x4db8c4
call fcn.00401c90
push eax
call esi
cmp byte [ebp - 0x6f6c], 1
mov ecx, 0x4e13ec
push 0
push 0
mov eax, 0x4e13d8
cmovne eax, ecx
lea ecx, [ebp - 0x2718]
push eax
push 0x4e0ab4
call fcn.00401c90
push eax
push 0x4e1404
lea ecx, [ebp - 0x1fa4]
call fcn.00401c90
push eax
push 0x4e1428
lea ecx, [ebp - 0x23d4]
call fcn.00401c90
push eax
push 0x4e144c
lea ecx, [ebp - 0x212c]
call fcn.00401c90
push eax
push 0x4e1474
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
mov esi, dword [ebp - 0x6f5c]
mov edi, dword [ebp - 0x6f70]
inc esi
mov eax, dword [ebp - 0x6f44]
mov dword [ebp - 0x6f5c], esi
cmp esi, dword [edi]
jb 0x451ad0
mov eax, dword [ebp - 0x6f44]
mov ecx, eax
call fcn.0046f9d0
test al, al
je 0x45292a
lea ecx, [ebp - 0x279c]
call fcn.00401ad0
lea ecx, [ebp - 0x2790]
call fcn.00401ad0
lea ecx, [ebp - 0x27b0]
call fcn.00401ad0
lea ecx, [ebp - 0x2724]
call fcn.00401ad0
lea ecx, [ebp - 0x2718]
call fcn.00401ad0
lea ecx, [ebp - 0x29a4]
call fcn.00401ad0
lea ecx, [ebp - 0x2848]
call fcn.00401ad0
lea ecx, [ebp - 0x2784]
call fcn.00401ad0
lea ecx, [ebp - 0x2854]
call fcn.00401ad0
lea ecx, [ebp - 0x22f0]
call fcn.00401ad0
lea ecx, [ebp - 0x2114]
call fcn.00401ad0
lea ecx, [ebp - 0x2160]
call fcn.00401ad0
lea ecx, [ebp - 0x22d8]
call fcn.00401ad0
lea ecx, [ebp - 0x23bc]
call fcn.00401ad0
lea ecx, [ebp - 0x2074]
call fcn.00401ad0
lea ecx, [ebp - 0x1fa4]
call fcn.00401ad0
lea ecx, [ebp - 0x212c]
call fcn.00401ad0
lea ecx, [ebp - 0x23d4]
call fcn.00401ad0
lea ecx, [ebp - 0x1ff4]
call fcn.00406410
lea ecx, [ebp - 0x2210]
call fcn.00406410
lea ecx, [ebp - 0x6d1c]
mov byte [ebp - 4], 0x2b
call fcn.004763b0
mov edi, dword [ebp - 0x6f44]
jmp 0x452f3a
lea ecx, [ebp - 0x2790]
call fcn.00401b50
cmp eax, 6
jle 0x4529e7
push 0x2000
lea eax, [ebp - 0x6db8]
mov dword [ebp - 0x6db8], 0x1000
push eax
push 0
push 0
push 0x1000
lea ecx, [ebp - 0x279c]
call fcn.00402200
push eax
lea ecx, [ebp - 0x2790]
call fcn.00401c90
push eax
call dword [0x4a949c]
test eax, eax
je 0x452991
lea eax, [ebp - 0x2790]
push eax
lea ecx, [ebp - 0x279c]
call fcn.00401a10
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e14e0
lea ecx, [ebp - 0x279c]
call fcn.004031d0
push 0
push 0
push 0x4cdb5c
push 0x4cb4e0
push 6
lea ecx, [ebp - 0x279c]
call fcn.00401c90
xor edx, edx
mov ecx, eax
call fcn.00429ed0
push eax
lea ecx, [ebp - 0x2564]
call fcn.0042af20
mov edi, dword [ebp - 0x6f44]
push 0x1e
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push dword [eax + 0x34]
call fcn.0041ff10
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x4e1560
push dword [eax + 0x38]
call fcn.0041d990
push 0xc
lea ecx, [ebp - 0x232c]
call fcn.00404370
lea ecx, [ebp - 0x232c]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x24bc]
mov byte [ebp - 4], 0x41
call fcn.00404370
lea ecx, [ebp - 0x24bc]
call fcn.00401930
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e1594
lea ecx, [edi + 0x314]
mov byte [ebp - 4], 0x42
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00401bf0
push 4
lea ecx, [ebp - 0x2380]
call fcn.00404590
lea ecx, [ebp - 0x2380]
call fcn.00404ea0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
mov byte [ebp - 4], 0x43
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x452ec4
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f5c], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.004067b0
test al, al
je 0x452ec4
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x452ec4
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4c97ec
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x24bc]
push 0x4c97ec
call fcn.00401bf0
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x24bc]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2904]
call fcn.00402c80
test eax, eax
jne 0x452e9c
push eax
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push str.Programs
push dword [ebp - 0x6cb4]
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x452e9c
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x24bc]
xor esi, esi
call fcn.00401a00
push 0x4e15a4
lea ecx, [ebp - 0x24bc]
call fcn.00401a70
test al, al
je 0x452bae
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push str.__0
lea ecx, [ebp - 0x24bc]
call fcn.00402f30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24bc]
call fcn.00401c90
push eax
push 0x4c9754
lea ecx, [ebp - 0x2748]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x232c]
call fcn.00401bf0
lea ecx, [ebp - 0x232c]
call fcn.0040e5d0
test al, al
je 0x452c21
push dword [ebp - 0x6f50]
lea eax, [ebp - 0x1fd4]
push 0
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x232c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046abd0
mov esi, eax
cmp byte [ebp - 0x6f45], 0
je 0x452c9d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24bc]
call fcn.00401c90
push eax
push 0x4c9754
lea ecx, [ebp - 0x26b0]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x232c]
call fcn.00401bf0
lea ecx, [ebp - 0x232c]
call fcn.0040e5d0
test al, al
je 0x452c9d
push dword [ebp - 0x6f50]
lea eax, [ebp - 0x1fd4]
push 0
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x232c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046abd0
add esi, eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24bc]
call fcn.00401c90
push eax
push 0x4c9754
lea ecx, [ebp - 0x26bc]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x232c]
call fcn.00401bf0
lea ecx, [ebp - 0x232c]
call fcn.0040e5d0
test al, al
je 0x452d10
push dword [ebp - 0x6f50]
lea eax, [ebp - 0x1fd4]
push 0
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x232c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046abd0
add esi, eax
mov eax, dword [ebp - 0x6f44]
mov dword [ebp - 0x6f50], 0
cmp dword [eax + 0x30], 0
jbe 0x452e70
lea edi, [eax + 0x10c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24bc]
call fcn.00401c90
push eax
push 0x4c9754
lea ecx, [ebp - 0x2240]
call fcn.00401c90
push eax
push dword [ebp - 0x6f50]
mov ecx, edi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x232c]
call fcn.00401bf0
lea ecx, [ebp - 0x232c]
call fcn.0040e5d0
test al, al
je 0x452dbe
push dword [ebp - 0x6f50]
lea eax, [ebp - 0x1fd4]
push 0
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x232c]
call fcn.00401c90
mov edi, dword [ebp - 0x6f44]
mov ecx, edi
push eax
call fcn.0046abd0
add esi, eax
jmp 0x452dc4
mov edi, dword [ebp - 0x6f44]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24bc]
call fcn.00401c90
push eax
push 0x4c9754
lea ecx, [ebp - 0x2154]
call fcn.00401c90
push eax
push dword [ebp - 0x6f50]
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x232c]
call fcn.00401bf0
lea ecx, [ebp - 0x232c]
call fcn.0040e5d0
test al, al
je 0x452e4e
push dword [ebp - 0x6f50]
lea eax, [ebp - 0x1fd4]
push 0
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x232c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046abd0
add esi, eax
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [ebp - 0x6f50]
inc ecx
mov dword [ebp - 0x6f50], ecx
lea edi, [eax + 0x10c]
cmp ecx, dword [eax + 0x30]
jb 0x452d30
test esi, esi
jle 0x452e96
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
push 0x4cb078
push dword [ebp - 0x6cb4]
push 0x4e13ac
call dword [0x4a93d4]
mov edi, dword [ebp - 0x6f44]
mov eax, dword [ebp - 0x6f5c]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f5c], eax
call fcn.004067b0
test al, al
jne 0x452ae2
lea ecx, [ebp - 0x2380]
call fcn.00406410
lea ecx, [ebp - 0x24bc]
call fcn.00401ad0
lea ecx, [ebp - 0x232c]
call fcn.00401ad0
lea ecx, [ebp - 0x279c]
call fcn.00401ad0
lea ecx, [ebp - 0x2790]
call fcn.00401ad0
lea ecx, [ebp - 0x27b0]
call fcn.00401ad0
lea ecx, [ebp - 0x2724]
call fcn.00401ad0
lea ecx, [ebp - 0x2718]
call fcn.00401ad0
lea ecx, [ebp - 0x29a4]
call fcn.00401ad0
jmp 0x451923
mov edi, eax
mov eax, dword [ebp - 0x2380]
mov dword [ebp - 0x6f50], eax
push 8
lea ecx, [ebp - 0x6dac]
call fcn.00416660
mov eax, dword [edi + 0x30]
lea ecx, [ebp - 0x6dac]
add eax, 2
push eax
call fcn.00476450
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x2148]
mov eax, dword [ebp - 0x6dac]
push 0xc
mov dword [ebp - 0x6f6c], eax
call fcn.00404370
lea ecx, [ebp - 0x2148]
call fcn.00401930
mov ecx, edi
mov byte [ebp - 4], 0x45
call fcn.0046f9d0
test al, al
jne 0x45577d
mov eax, dword [ebp - 0x6f44]
test dword [eax + 0x34], 0x400
jne 0x45577d
push 0
push 0x4e15b8
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov edi, dword [ebp - 0x6f44]
push 0
push 0x4e15e8
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push dword [eax + 0x38]
call fcn.0041d990
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x23
push dword [eax + 0x34]
call fcn.0041ff10
mov eax, edi
xor esi, esi
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x45304a
mov edi, dword [ebp - 0x6f6c]
add eax, 0x104
mov dword [ebp - 0x6f5c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e1618
push esi
mov ecx, eax
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
push str.HKU_
mov ecx, edi
call fcn.00401bf0
mov eax, dword [ebp - 0x6f44]
inc esi
add edi, 0xc
mov ecx, dword [eax + 0x30]
mov eax, dword [ebp - 0x6f5c]
cmp esi, ecx
jb 0x453000
mov esi, dword [ebp - 0x6f6c]
lea eax, [ecx + ecx*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e1678
push dword [ebp - 0x6f9c]
lea ecx, [esi + eax*4]
call fcn.00401bf0
cmp byte [ebp - 0x6f45], 0
mov edi, dword [ebp - 0x6f44]
je 0x4530b7
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e1678
push dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00401bf0
push 0xc
lea ecx, [ebp - 0x2090]
call fcn.00404370
lea ecx, [ebp - 0x2090]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x23f8]
mov byte [ebp - 4], 0x46
call fcn.00404370
lea ecx, [ebp - 0x23f8]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x27bc]
mov byte [ebp - 4], 0x47
call fcn.00404370
lea ecx, [ebp - 0x27bc]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x21a8]
mov byte [ebp - 4], 0x48
call fcn.00404370
lea ecx, [ebp - 0x21a8]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2320]
mov byte [ebp - 4], 0x49
call fcn.00404370
lea ecx, [ebp - 0x2320]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x254c]
mov byte [ebp - 4], 0x4a
call fcn.00404370
lea ecx, [ebp - 0x254c]
call fcn.00401930
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e16d8
push 0x4c9754
lea ecx, [edi + 0x140]
mov byte [ebp - 4], 0x4b
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00401bf0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa4]
call fcn.0041f020
push 0
push 0x4e16f0
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
xor esi, esi
mov dword [ebp - 0x6f70], esi
cmp dword [ebp - 0x6f7c], esi
jbe 0x453539
mov edx, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6f6c]
sub eax, edx
mov dword [ebp - 0x6f40], edx
mov dword [ebp - 0x6f88], eax
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x453539
mov eax, dword [ebp - 0x6f44]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
cmp esi, dword [eax + 0x30]
jae 0x45322f
lea ecx, [ebp - 0x273c]
call fcn.00401c90
mov ecx, dword [ebp - 0x6fa4]
push eax
push esi
call fcn.00476390
mov ecx, eax
jmp 0x45323a
push str._temp
lea ecx, [ebp - 0x2578]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x23f8]
call fcn.00401bf0
mov eax, dword [ebp - 0x6f88]
mov edi, dword [ebp - 0x6f40]
add eax, edi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f5c], eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x453517
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f50], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.00406830
test al, al
je 0x453517
nop word [eax + eax]
mov ecx, dword [ebp - 0x6f44]
call fcn.0046f9d0
test al, al
jne 0x453511
mov eax, dword [ebp - 0x6cb4]
cmp word [eax], 0
je 0x4534e9
mov ecx, dword [ebp - 0x6f44]
push 0
lea ecx, [ecx + 0x14c]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f44]
push eax
push 0x4d8b7c
push dword [ebp - 0x6cb4]
call fcn.0046b610
test al, al
jne 0x4534e9
lea eax, [ebp - 0x2090]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f74]
call fcn.00406580
test al, al
je 0x4534e9
mov edx, dword [ebp - 0x6f80]
lea ecx, [ebp - 0x2090]
push 3
xor esi, esi
call fcn.00408840
test al, al
je 0x4533bb
push esi
push 1
push 1
push esi
lea ecx, [ebp - 0x23f8]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2090]
call fcn.00402c80
mov ecx, dword [ebp - 0x6f5c]
mov esi, eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
push 0x4cd568
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2148]
call fcn.00401bf0
push 0
lea ecx, [ebp - 0x2148]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f44]
push eax
lea eax, [ebp - 0x2090]
push eax
call fcn.0046bd60
test al, al
mov eax, 1
cmovne esi, eax
push 0
lea ecx, [ebp - 0x2090]
call fcn.00401c90
push eax
push 0
push esi
lea ecx, [ebp - 0x2090]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00401c90
mov ecx, dword [ebp - 0x6f44]
push eax
push dword [ebp - 0x6cb4]
mov eax, dword [ebp - 0x6f44]
push 0xffffffffffffffff
push 0xb
mov eax, dword [eax + 8]
push dword [eax + 0xa4]
call fcn.004426b0
mov edi, eax
cmp edi, 0xffffffff
je 0x4534e3
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2090]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
call fcn.00401c90
push eax
push 0xb
push edi
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00442770
lea eax, [ebp - 0x2090]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f74]
call fcn.00406580
push 0
push 0
push 0
test esi, esi
mov ecx, 0x4e0a9c
push 0x4ca980
mov eax, 0x4ce4f8
cmove eax, ecx
lea ecx, [ebp - 0x2090]
push eax
push 0x4e0ab4
call fcn.00401c90
mov edi, dword [ebp - 0x6f40]
mov ecx, edi
push eax
push 0x4e1734
call fcn.00401c90
push eax
push 0x4e0b14
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f80]
push 0x4e1750
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
jmp 0x4534e9
mov edi, dword [ebp - 0x6f40]
mov eax, dword [ebp - 0x6f50]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f50], eax
call fcn.00406830
test al, al
jne 0x4532b0
mov esi, dword [ebp - 0x6f70]
add edi, 0xc
inc esi
mov dword [ebp - 0x6f40], edi
mov edi, dword [ebp - 0x6f44]
mov dword [ebp - 0x6f70], esi
cmp esi, dword [ebp - 0x6f7c]
jb 0x4531e5
mov ecx, dword [ebp - 0x6f44]
call fcn.0046f9d0
test al, al
jne 0x455737
mov eax, dword [ebp - 0x6f44]
xor esi, esi
mov eax, dword [eax + 0x30]
test eax, eax
je 0x4535ad
mov edi, dword [ebp - 0x6f6c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2874]
call fcn.00401c90
mov ecx, dword [ebp - 0x6fa4]
push eax
push esi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00401bf0
mov eax, dword [ebp - 0x6f44]
inc esi
add edi, 0xc
mov eax, dword [eax + 0x30]
cmp esi, eax
jb 0x453561
mov edi, dword [ebp - 0x6f6c]
lea ecx, [ebp - 0x2958]
lea eax, [eax + eax*2]
push ecx
lea ecx, [edi + eax*4]
call fcn.00401a10
push 0
push 0x4e1768
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
push 0x4c
lea ecx, [ebp - 0x2b20]
call fcn.0040ed70
lea ecx, [ebp - 0x2b20]
call fcn.00408530
mov esi, dword [ebp - 0x6f78]
sub edi, esi
mov eax, dword [ebp - 0x6f44]
mov byte [ebp - 4], 0x4c
mov dword [ebp - 0x6f40], 0
mov dword [ebp - 0x6f88], esi
mov dword [ebp - 0x6f70], edi
mov ecx, eax
call fcn.0046f9d0
test al, al
jne 0x453aca
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
add edi, esi
push 0
push 0x4d062c
mov ecx, edi
mov dword [ebp - 0x6f5c], edi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2090]
call fcn.00401bf0
push 0x260
lea ecx, [ebp - 0x3778]
call fcn.00408820
push 3
lea ecx, [ebp - 0x2090]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x3778]
call fcn.004012e0
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov byte [ebp - 4], 0x4d
push 0
push 0
cmp ecx, dword [eax + 0x30]
jae 0x4536cd
lea ecx, [ebp - 0x273c]
call fcn.00401c90
mov ecx, dword [ebp - 0x6fa4]
push eax
push dword [ebp - 0x6f40]
call fcn.00476390
mov ecx, eax
jmp 0x4536d8
push str._temp
lea ecx, [ebp - 0x2578]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x23f8]
call fcn.00401bf0
lea ecx, [ebp - 0x3778]
call fcn.00401420
test al, al
je 0x453a8e
nop dword [eax]
mov ecx, dword [ebp - 0x6f44]
call fcn.0046f9d0
test al, al
jne 0x453a8e
push 1
lea ecx, [ebp - 0x3778]
call fcn.00401480
push eax
lea ecx, [ebp - 0x21a8]
call fcn.00401a00
push 0x4d2968
lea ecx, [ebp - 0x21a8]
call fcn.00401a40
test al, al
jne 0x453a7b
mov ecx, dword [ebp - 0x6f44]
push 0
lea ecx, [ecx + 0x14c]
call fcn.00401c90
push eax
push 0x4d8bb4
lea ecx, [ebp - 0x21a8]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.0046b610
test al, al
jne 0x453a7b
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x3778]
call fcn.00401480
push eax
push 0x4c9754
mov ecx, edi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x254c]
call fcn.00401bf0
lea eax, [ebp - 0x254c]
push eax
lea ecx, [ebp - 0x2320]
call fcn.00401a10
push 0
push 0
lea ecx, [ebp - 0x3778]
call fcn.00401490
mov edx, 0x4e0a80
mov ecx, eax
call fcn.00404680
test eax, eax
jne 0x4538af
push eax
lea ecx, [ebp - 0x254c]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2b20]
call fcn.00408580
test al, al
je 0x4538af
push 0
lea ecx, [ebp - 0x2b20]
call fcn.00408620
push eax
lea ecx, [ebp - 0x2320]
call fcn.00401a00
lea ecx, [ebp - 0x2b20]
call fcn.00408670
mov ecx, eax
call fcn.004045a0
test eax, eax
je 0x453868
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2b20]
call fcn.00408670
push eax
push 0x4ca04c
lea ecx, [ebp - 0x2320]
call fcn.00402f30
push 3
push 1
lea ecx, [ebp - 0x2320]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2090]
call fcn.00401ba0
mov edx, dword [ebp - 0x6f80]
mov ecx, eax
call fcn.00408840
test al, al
jne 0x4538c1
push 0
lea ecx, [ebp - 0x2b20]
call fcn.00408620
push eax
lea ecx, [ebp - 0x2090]
call fcn.00401a00
jmp 0x4538c1
lea eax, [ebp - 0x254c]
push eax
lea ecx, [ebp - 0x2090]
call fcn.00401a10
push 0
push 0
push 0x4c975c
push 0x4ca048
lea ecx, [ebp - 0x2090]
call fcn.00403410
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x23f8]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2090]
call fcn.00402c80
push 0
lea ecx, [ebp - 0x254c]
mov esi, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f44]
push eax
lea eax, [ebp - 0x2090]
push eax
call fcn.0046bd60
test al, al
lea ecx, [ebp - 0x2090]
mov eax, 1
push 0
cmovne esi, eax
call fcn.00401c90
push eax
push 0
push esi
lea ecx, [ebp - 0x2090]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f88]
push eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x21a8]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f44]
push eax
mov eax, dword [ebp - 0x6f44]
push 0xffffffffffffffff
push 0xc
mov eax, dword [eax + 8]
push dword [eax + 0xa4]
call fcn.004426b0
mov edi, eax
cmp edi, 0xffffffff
je 0x453a6f
push 0
push 0
push 0
test esi, esi
mov eax, 0x4e0a9c
push 0x4ca980
mov ecx, 0x4ce4f8
cmove ecx, eax
push ecx
push 0x4e0ab4
lea ecx, [ebp - 0x2090]
call fcn.00401c90
mov esi, dword [ebp - 0x6f88]
mov ecx, esi
push eax
push 0x4e17a0
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x21a8]
call fcn.00401c90
push eax
push 0x4e1750
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x3778]
call fcn.00401480
mov ecx, dword [ebp - 0x6f5c]
push eax
push 0x4c9754
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2090]
call fcn.00401bf0
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2090]
call fcn.00401c90
push eax
push 0
push 0xc
push edi
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00442770
jmp 0x453a75
mov esi, dword [ebp - 0x6f88]
mov edi, dword [ebp - 0x6f5c]
lea ecx, [ebp - 0x3778]
call fcn.004013e0
test al, al
jne 0x453700
lea ecx, [ebp - 0x3778]
mov byte [ebp - 4], 0x4c
call fcn.00401330
mov edi, dword [ebp - 0x6f40]
add esi, 0xc
mov eax, dword [ebp - 0x6f44]
inc edi
mov dword [ebp - 0x6f40], edi
mov dword [ebp - 0x6f88], esi
cmp edi, dword [eax + 0x30]
mov edi, dword [ebp - 0x6f70]
jbe 0x453617
jmp 0x453ad0
mov eax, dword [ebp - 0x6f44]
mov ecx, eax
call fcn.0046f9d0
test al, al
jne 0x45572c
push 0
push 0x4e17b8
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
push 0xc
lea ecx, [ebp - 0x241c]
call fcn.00404370
lea ecx, [ebp - 0x241c]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x219c]
mov byte [ebp - 4], 0x4e
call fcn.00404370
lea ecx, [ebp - 0x219c]
call fcn.00401930
push 4
lea ecx, [ebp - 0x6cd4]
mov byte [ebp - 4], 0x4f
call fcn.00404590
lea ecx, [ebp - 0x6cd4]
call fcn.00404ea0
push 4
lea ecx, [ebp - 0x6cd8]
mov byte [ebp - 4], 0x50
call fcn.00404590
lea ecx, [ebp - 0x6cd8]
call fcn.00404ea0
lea eax, [ebp - 0x6cd8]
mov byte [ebp - 4], 0x51
mov esi, dword [0x4a9800]
push eax
push 0x4c3bb4
push 1
push 0
push 0x4c3dc4
call esi
test eax, eax
js 0x454399
lea ecx, [ebp - 0x7078]
call fcn.00401150
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x7088]
movups xmmword [ebp - 0x6f68], xmm0
call fcn.00401150
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x7098]
movups xmmword [ebp - 0x6fe0], xmm0
call fcn.00401150
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x70a8]
movups xmmword [ebp - 0x6fb8], xmm0
call fcn.00401150
mov edi, eax
mov byte [ebp - 4], 0x55
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x6f68]
mov ecx, dword [ebp - 0x6cd8]
mov edx, esp
sub esp, 0x10
mov eax, esp
sub esp, 0x10
mov esi, dword [ecx]
movups xmmword [edx], xmm0
movups xmm0, xmmword [ebp - 0x6fe0]
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x6fb8]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [edi]
push ecx
movups xmmword [eax], xmm0
mov eax, dword [esi + 0x28]
call eax
lea ecx, [ebp - 0x70a8]
mov esi, eax
call fcn.004011e0
lea ecx, [ebp - 0x7098]
call fcn.004011e0
lea ecx, [ebp - 0x7088]
call fcn.004011e0
lea ecx, [ebp - 0x7078]
mov byte [ebp - 4], 0x51
call fcn.004011e0
test esi, esi
js 0x454891
push 4
lea ecx, [ebp - 0x6ce8]
call fcn.00404590
lea ecx, [ebp - 0x6ce8]
call fcn.00404ea0
push 0x4c9754
lea ecx, [ebp - 0x6ff4]
mov byte [ebp - 4], 0x56
call fcn.00401030
mov byte [ebp - 4], 0x57
mov ecx, dword [ebp - 0x6cd8]
mov esi, dword [ecx]
lea ecx, [ebp - 0x6ce8]
push ecx
mov ecx, eax
call fcn.00401140
push eax
push dword [ebp - 0x6cd8]
mov eax, dword [esi + 0x1c]
call eax
lea ecx, [ebp - 0x6ff4]
mov byte [ebp - 4], 0x56
mov esi, eax
call fcn.004010e0
test esi, esi
jns 0x453cd1
lea ecx, [ebp - 0x6ce8]
mov byte [ebp - 4], 0x51
call fcn.00475a30
jmp 0x454891
push 4
lea ecx, [ebp - 0x6cf4]
call fcn.00404590
lea ecx, [ebp - 0x6cf4]
call fcn.00404ea0
mov byte [ebp - 4], 0x58
lea edx, [ebp - 0x6cf4]
mov eax, dword [ebp - 0x6ce8]
push edx
push 1
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x38]
call eax
test eax, eax
jns 0x453d27
lea ecx, [ebp - 0x6cf4]
call fcn.00475a30
lea ecx, [ebp - 0x6ce8]
mov byte [ebp - 4], 0x51
call fcn.00475a30
jmp 0x454891
mov eax, dword [ebp - 0x6cf4]
lea edx, [ebp - 0x256c]
mov dword [ebp - 0x256c], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
mov eax, dword [ebp - 0x256c]
test eax, eax
je 0x453f15
mov esi, 1
mov dword [ebp - 0x6f5c], esi
cmp eax, esi
jl 0x453f15
mov edi, dword [0x4a942c]
nop dword [eax]
mov ecx, dword [ebp - 0x6f44]
call fcn.0046f9d0
test al, al
jne 0x453f15
push 4
lea ecx, [ebp - 0x6cbc]
call fcn.00404590
lea ecx, [ebp - 0x6cbc]
call fcn.00404ea0
push 3
push esi
lea ecx, [ebp - 0x7068]
mov byte [ebp - 4], 0x59
call fcn.00401160
mov esi, eax
mov byte [ebp - 4], 0x5a
lea edx, [ebp - 0x6cbc]
mov ecx, dword [ebp - 0x6cf4]
movups xmm0, xmmword [esi]
push edx
sub esp, 0x10
mov eax, dword [ecx]
mov edx, esp
push ecx
mov eax, dword [eax + 0x20]
movups xmmword [edx], xmm0
call eax
lea ecx, [ebp - 0x7068]
mov byte [ebp - 4], 0x59
mov esi, eax
call fcn.004011e0
test esi, esi
js 0x453eed
mov eax, dword [ebp - 0x6cbc]
lea edx, [ebp - 0x6d14]
mov dword [ebp - 0x6d14], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
test eax, eax
js 0x453eed
mov eax, dword [ebp - 0x6d14]
test eax, eax
je 0x453eed
push eax
lea ecx, [ebp - 0x21a8]
call fcn.00401a00
push dword [ebp - 0x6d14]
call edi
mov ecx, dword [ebp - 0x6f44]
push 0
lea ecx, [ecx + 0x14c]
call fcn.00401c90
push eax
push 0x4e1814
lea ecx, [ebp - 0x21a8]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.0046b610
test al, al
jne 0x453eed
push 4
lea ecx, [ebp - 0x6cd0]
call fcn.00404590
lea ecx, [ebp - 0x6cd0]
call fcn.00404ea0
mov byte [ebp - 4], 0x5b
lea edx, [ebp - 0x6cd0]
mov eax, dword [ebp - 0x6cbc]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x4c]
call eax
test eax, eax
js 0x453ee2
push 4
lea ecx, [ebp - 0x6ccc]
call fcn.00404590
lea ecx, [ebp - 0x6ccc]
call fcn.00404ea0
mov byte [ebp - 4], 0x5c
lea edx, [ebp - 0x6ccc]
mov eax, dword [ebp - 0x6cd0]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x44]
call eax
test eax, eax
jns 0x453f34
lea ecx, [ebp - 0x6ccc]
call fcn.00475a30
lea ecx, [ebp - 0x6cd0]
call fcn.00475a30
lea ecx, [ebp - 0x6cbc]
mov byte [ebp - 4], 0x58
call fcn.00475a30
mov esi, dword [ebp - 0x6f5c]
inc esi
mov dword [ebp - 0x6f5c], esi
cmp esi, dword [ebp - 0x256c]
jle 0x453d70
lea ecx, [ebp - 0x6cf4]
call fcn.00475a30
lea ecx, [ebp - 0x6ce8]
mov byte [ebp - 4], 0x51
call fcn.00475a30
jmp 0x454891
mov eax, dword [ebp - 0x6ccc]
lea edx, [ebp - 0x243c]
mov dword [ebp - 0x243c], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
cmp dword [ebp - 0x243c], 0
je 0x453ed7
lea ecx, [ebp - 0x219c]
call fcn.00401ae0
mov esi, 1
cmp dword [ebp - 0x243c], esi
jl 0x454144
nop dword [eax]
push 4
lea ecx, [ebp - 0x6cc4]
call fcn.00404590
lea ecx, [ebp - 0x6cc4]
call fcn.00404ea0
mov byte [ebp - 4], 0x5d
lea edx, [ebp - 0x6cc4]
mov eax, dword [ebp - 0x6ccc]
push edx
push esi
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x20]
call eax
test eax, eax
js 0x454128
mov eax, dword [ebp - 0x6cc4]
lea edx, [ebp - 0x28d4]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x24]
call eax
test eax, eax
js 0x454128
cmp dword [ebp - 0x28d4], 0
jne 0x454128
push 4
lea ecx, [ebp - 0x6cec]
call fcn.00404590
lea ecx, [ebp - 0x6cec]
call fcn.00404ea0
mov byte [ebp - 4], 0x5e
lea edx, [ebp - 0x6cec]
mov eax, dword [ebp - 0x6cc4]
push edx
push str.MbLk
push eax
mov ecx, dword [eax]
mov eax, dword [ecx]
call eax
test eax, eax
js 0x45411d
mov eax, dword [ebp - 0x6cec]
lea edx, [ebp - 0x6d00]
mov dword [ebp - 0x6d00], 0
mov dword [ebp - 0x6d0c], 0
push edx
mov ecx, dword [eax]
push eax
mov eax, dword [ecx + 0x28]
call eax
mov eax, dword [ebp - 0x6d00]
test eax, eax
je 0x45411d
push eax
lea ecx, [ebp - 0x2320]
call fcn.00401a00
mov eax, dword [ebp - 0x6cec]
lea edx, [ebp - 0x6d0c]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x30]
call eax
mov ecx, dword [ebp - 0x6d0c]
call fcn.004045a0
test eax, eax
je 0x4540de
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6d0c]
lea ecx, [ebp - 0x2320]
push 0x4ca04c
call fcn.00402f30
push 3
push 1
lea ecx, [ebp - 0x2320]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x219c]
call fcn.00401ba0
mov edx, dword [ebp - 0x6f80]
mov ecx, eax
call fcn.00408840
test al, al
jne 0x4540ef
push dword [ebp - 0x6d00]
lea ecx, [ebp - 0x219c]
call fcn.00401a00
push 0
push 1
push 0x4c975c
push 0x4ca048
lea ecx, [ebp - 0x219c]
call fcn.00403410
push dword [ebp - 0x6d00]
call edi
mov eax, dword [ebp - 0x6d0c]
test eax, eax
je 0x45411d
push eax
call edi
lea ecx, [ebp - 0x6cec]
call fcn.00475a30
lea ecx, [ebp - 0x6cc4]
mov byte [ebp - 4], 0x5c
call fcn.00475a30
inc esi
cmp esi, dword [ebp - 0x243c]
jle 0x453f80
lea ecx, [ebp - 0x219c]
call fcn.00401f90
test al, al
jne 0x453ed7
mov eax, dword [ebp - 0x6ce8]
lea edx, [ebp - 0x6db0]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x20]
call eax
test eax, eax
js 0x4541f8
mov eax, dword [ebp - 0x6f44]
movsd xmm0, qword [eax + 0x368]
comisd xmm0, xmmword [0x4eaa20]
jbe 0x454194
mov eax, dword [eax + 0x184]
jmp 0x45419a
mov eax, dword [eax + 0x180]
push eax
lea ecx, [ebp - 0x241c]
call fcn.00401a00
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x21a8]
call fcn.00401c90
push eax
push 0x4c9754
push dword [ebp - 0x6db0]
lea ecx, [ebp - 0x241c]
push 0x4cdf4c
call fcn.00402f30
push 1
push 0
push 0x4c9754
push 0x4c977c
lea ecx, [ebp - 0x241c]
call fcn.00403410
jmp 0x454203
lea ecx, [ebp - 0x241c]
call fcn.00401ae0
push 0
push 1
push 1
push 0
push 0x4e1834
lea ecx, [ebp - 0x219c]
call fcn.00402c80
push 0
lea ecx, [ebp - 0x241c]
mov esi, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f44]
push eax
lea eax, [ebp - 0x219c]
push eax
call fcn.0046bd60
test al, al
lea ecx, [ebp - 0x219c]
mov eax, 1
push 0
cmovne esi, eax
call fcn.00401c90
push eax
push 0
push esi
lea ecx, [ebp - 0x219c]
call fcn.00401c90
push eax
push 0x4db8f0
lea ecx, [ebp - 0x21a8]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f44]
push eax
mov eax, dword [ebp - 0x6f44]
push 0xffffffffffffffff
push 0xd
mov eax, dword [eax + 8]
push dword [eax + 0xa4]
call fcn.004426b0
mov edi, eax
cmp edi, 0xffffffff
jne 0x4542ca
lea ecx, [ebp - 0x6ccc]
call fcn.00475a30
lea ecx, [ebp - 0x6cd0]
call fcn.00475a30
lea ecx, [ebp - 0x6cbc]
mov byte [ebp - 4], 0x58
call fcn.00475a30
mov edi, dword [0x4a942c]
jmp 0x453efc
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4db8f0
lea ecx, [ebp - 0x219c]
call fcn.00401c90
push eax
push 0
push 0xd
push edi
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00442770
push 0
push 0
push 0
push 0
test esi, esi
mov ecx, 0x4e0a9c
push 0x4ca980
mov eax, 0x4ce4f8
cmove eax, ecx
lea ecx, [ebp - 0x2320]
push eax
push 0x4e0ab4
call fcn.00401c90
push eax
push 0x4e1734
push 0x4e1844
lea ecx, [ebp - 0x21a8]
call fcn.00401c90
push eax
push 0x4e187c
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
lea ecx, [ebp - 0x6ccc]
call fcn.00475a30
lea ecx, [ebp - 0x6cd0]
call fcn.00475a30
lea ecx, [ebp - 0x6cbc]
mov byte [ebp - 4], 0x58
call fcn.00475a30
mov edi, dword [0x4a942c]
jmp 0x453efc
lea eax, [ebp - 0x6cd4]
push eax
push 0x4c3b64
push 1
push 0
push 0x4c3b84
call esi
test eax, eax
js 0x454891
push 4
lea ecx, [ebp - 0x6cfc]
call fcn.00404590
lea ecx, [ebp - 0x6cfc]
call fcn.00404ea0
mov byte [ebp - 4], 0x5f
lea edx, [ebp - 0x6cfc]
mov eax, dword [ebp - 0x6cd4]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x14]
call eax
test eax, eax
js 0x454882
mov eax, dword [ebp - 0x6cfc]
lea edx, [ebp - 0x2458]
push edx
mov dword [ebp - 0x2458], 0
lea edx, [ebp - 0x6d04]
push edx
mov ecx, dword [eax]
push 5
push eax
mov eax, dword [ecx + 0xc]
call eax
test eax, eax
js 0x454882
mov esi, dword [0x4a9804]
nop word [eax + eax]
mov eax, dword [ebp - 0x2458]
test eax, eax
je 0x454882
xor edi, edi
test eax, eax
je 0x454854
nop dword [eax + eax]
mov ecx, dword [ebp - 0x6f44]
call fcn.0046f9d0
test al, al
jne 0x454854
mov eax, dword [ebp - 0x6d04]
lea ecx, [ebp - 0x21a8]
push dword [eax + edi*4]
call fcn.00401a00
mov eax, dword [ebp - 0x6d04]
push dword [eax + edi*4]
call esi
mov ecx, dword [ebp - 0x6f44]
push 0
lea ecx, [ecx + 0x14c]
call fcn.00401c90
push eax
push 0x4e1814
lea ecx, [ebp - 0x21a8]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.0046b610
test al, al
jne 0x454847
push 4
lea ecx, [ebp - 0x6cc0]
call fcn.00404590
lea ecx, [ebp - 0x6cc0]
call fcn.00404ea0
mov byte [ebp - 4], 0x60
lea ecx, [ebp - 0x21a8]
mov eax, dword [ebp - 0x6cd4]
mov esi, dword [eax]
lea eax, [ebp - 0x6cc0]
push eax
push 0x4c3b54
call fcn.00401c90
push eax
push dword [ebp - 0x6cd4]
mov eax, dword [esi + 0x18]
call eax
test eax, eax
js 0x454832
mov eax, dword [ebp - 0x6cc0]
lea edx, [ebp - 0x6cf0]
mov dword [ebp - 0x6cf0], 0
mov dword [ebp - 0x6d08], 0
push edx
mov ecx, dword [eax]
push eax
mov eax, dword [ecx + 0x84]
call eax
cmp dword [ebp - 0x6cf0], 0
je 0x454832
mov eax, dword [ebp - 0x6cc0]
lea edx, [ebp - 0x6d08]
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x8c]
call eax
push dword [ebp - 0x6cf0]
lea ecx, [ebp - 0x2320]
call fcn.00401a00
mov ecx, dword [ebp - 0x6d08]
call fcn.004045a0
test eax, eax
je 0x4545d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6d08]
lea ecx, [ebp - 0x2320]
push 0x4ca04c
call fcn.00402f30
push 3
push 1
lea ecx, [ebp - 0x2320]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x219c]
call fcn.00401ba0
mov edx, dword [ebp - 0x6f80]
mov ecx, eax
call fcn.00408840
test al, al
jne 0x4545e1
push dword [ebp - 0x6cf0]
lea ecx, [ebp - 0x219c]
call fcn.00401a00
push 0
push 1
push 0x4c975c
push 0x4ca048
lea ecx, [ebp - 0x219c]
call fcn.00403410
push dword [ebp - 0x6cf0]
mov esi, dword [0x4a9804]
call esi
mov eax, dword [ebp - 0x6d08]
test eax, eax
je 0x454615
push eax
call esi
lea ecx, [ebp - 0x219c]
call fcn.00401f90
test al, al
je 0x454638
lea ecx, [ebp - 0x6cc0]
mov byte [ebp - 4], 0x5f
call fcn.00475a30
jmp 0x454847
push 0
push 1
push 1
push 0
push 0x4e1834
lea ecx, [ebp - 0x219c]
call fcn.00402c80
xor ecx, ecx
test eax, eax
lea eax, [ebp - 0x21a8]
setg cl
mov dword [ebp - 0x6f5c], ecx
lea ecx, [ebp - 0x241c]
push eax
call fcn.00401a10
push 0
push 1
push 0xffffffffffffffff
push 0
push 0x4cdf5c
lea ecx, [ebp - 0x241c]
call fcn.00402c80
test eax, eax
jne 0x4546a6
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4cdf5c
lea ecx, [ebp - 0x241c]
call fcn.00402f30
mov eax, dword [ebp - 0x6f44]
lea ecx, [ebp - 0x241c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e189c
push dword [eax + 0x180]
call fcn.004031d0
push 0
lea ecx, [ebp - 0x241c]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f44]
push eax
lea eax, [ebp - 0x219c]
push eax
call fcn.0046bd60
test al, al
je 0x454701
mov esi, 1
jmp 0x454733
lea ecx, [ebp - 0x219c]
call fcn.00401c90
push eax
push 0
call dword [0x4a981c]
test eax, eax
je 0x45472d
lea ecx, [ebp - 0x6cc0]
mov byte [ebp - 4], 0x5f
call fcn.00475a30
jmp 0x454847
mov esi, dword [ebp - 0x6f5c]
push 0
lea ecx, [ebp - 0x219c]
call fcn.00401c90
push eax
push 0
push esi
lea ecx, [ebp - 0x219c]
call fcn.00401c90
push eax
push 0x4db8f0
lea ecx, [ebp - 0x21a8]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f44]
push eax
mov eax, dword [ebp - 0x6f44]
push 0xffffffffffffffff
push 0xd
mov eax, dword [eax + 8]
push dword [eax + 0xa4]
call fcn.004426b0
mov dword [ebp - 0x6f5c], eax
cmp eax, 0xffffffff
je 0x454832
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4db8f0
lea ecx, [ebp - 0x219c]
call fcn.00401c90
push eax
push 0
push 0xd
push dword [ebp - 0x6f5c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00442770
push 0
push 0
push 0
push 0
test esi, esi
mov ecx, 0x4e0a9c
push 0x4ca980
mov eax, 0x4ce4f8
cmove eax, ecx
lea ecx, [ebp - 0x2320]
push eax
push 0x4e0ab4
call fcn.00401c90
push eax
push 0x4e1734
push 0x4e1844
lea ecx, [ebp - 0x21a8]
call fcn.00401c90
push eax
push 0x4e187c
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
lea ecx, [ebp - 0x6cc0]
mov byte [ebp - 4], 0x5f
call fcn.00475a30
mov esi, dword [0x4a9804]
inc edi
cmp edi, dword [ebp - 0x2458]
jb 0x454450
push dword [ebp - 0x6d04]
call esi
mov eax, dword [ebp - 0x6cfc]
lea edx, [ebp - 0x2458]
push edx
lea edx, [ebp - 0x6d04]
push edx
mov ecx, dword [eax]
push 5
push eax
mov eax, dword [ecx + 0xc]
call eax
test eax, eax
jns 0x454430
lea ecx, [ebp - 0x6cfc]
mov byte [ebp - 4], 0x51
call fcn.00475a30
mov ecx, dword [ebp - 0x6f44]
call fcn.0046f9d0
test al, al
jne 0x455700
push 0x18
lea ecx, [ebp - 0x28d0]
call fcn.00404e90
lea ecx, [ebp - 0x28d0]
call fcn.00403ff0
push 0
push 0x4e18ac
lea ecx, [ebp - 0x1fd4]
mov byte [ebp - 4], 0x61
call fcn.0040d1b0
mov eax, dword [ebp - 0x6f44]
xor esi, esi
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x45493c
mov edi, dword [ebp - 0x6f6c]
add eax, 0x104
mov dword [ebp - 0x6f5c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d4cc0
push esi
mov ecx, eax
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
push str.HKU_
mov ecx, edi
call fcn.00401bf0
mov eax, dword [ebp - 0x6f44]
inc esi
add edi, 0xc
mov ecx, dword [eax + 0x30]
mov eax, dword [ebp - 0x6f5c]
cmp esi, ecx
jb 0x4548f2
mov esi, dword [ebp - 0x6f6c]
lea eax, [ecx + ecx*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e18e0
push dword [ebp - 0x6f9c]
lea ecx, [esi + eax*4]
call fcn.00401bf0
cmp byte [ebp - 0x6f45], 0
je 0x4549a9
mov eax, dword [ebp - 0x6f44]
push 0
push 0
push 0
mov eax, dword [eax + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e18e0
push dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00401bf0
xor esi, esi
mov dword [ebp - 0x6f88], esi
cmp dword [ebp - 0x6f7c], esi
jbe 0x454d8b
mov edi, dword [ebp - 0x6f78]
mov ecx, dword [ebp - 0x6f44]
call fcn.0046f9d0
test al, al
jne 0x454d8b
mov ecx, dword [ebp - 0x6f70]
push 0
add ecx, edi
push 0x20019
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x454d75
lea eax, [ebp - 0x23f8]
push eax
push 0x4d8c28
lea ecx, [ebp - 0x1f74]
call fcn.00406580
test al, al
je 0x454d75
lea ecx, [ebp - 0x23f8]
call fcn.00401b50
cmp eax, 2
jl 0x454d75
push 0x18
lea ecx, [ebp - 0x29c8]
call fcn.00404e90
push 0
push 0x4ca9d0
lea ecx, [ebp - 0x23f8]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x29c8]
call fcn.00404060
lea ecx, [ebp - 0x29c8]
mov byte [ebp - 4], 0x62
mov dword [ebp - 0x6f50], 0
call fcn.00404160
test eax, eax
je 0x454d66
mov esi, dword [ebp - 0x6f44]
add esi, 0x14c
mov dword [ebp - 0x6f5c], esi
nop
push dword [ebp - 0x6f50]
lea ecx, [ebp - 0x29c8]
call fcn.00404150
push eax
lea ecx, [ebp - 0x21a8]
call fcn.00401a00
push 0
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e194c
lea ecx, [ebp - 0x21a8]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.0046b610
test al, al
jne 0x454d43
push dword [ebp - 0x6f50]
lea ecx, [ebp - 0x29c8]
call fcn.00404150
push eax
lea ecx, [ebp - 0x2090]
call fcn.00401a00
lea ecx, [ebp - 0x2090]
call fcn.00401f90
test al, al
jne 0x454d43
push 0
push 1
push 0xffffffffffffffff
push 0
push str..dll
lea ecx, [ebp - 0x2090]
call fcn.00402c80
lea ecx, [ebp - 0x2090]
mov esi, eax
call fcn.00401b50
sub eax, 3
cmp esi, eax
je 0x454b5d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str..dll
lea ecx, [ebp - 0x2090]
call fcn.00402f30
mov edx, dword [ebp - 0x6f80]
lea ecx, [ebp - 0x2090]
push 3
call fcn.00408840
lea ecx, [ebp - 0x2090]
call fcn.00401c90
push eax
push 0
call dword [0x4a981c]
test eax, eax
jne 0x454d3d
push eax
push 1
push 1
push eax
push 0x4e1834
lea ecx, [ebp - 0x2090]
call fcn.00402c80
push 0
push 0
push 0
push 0
push 0
push 0
xor ecx, ecx
test eax, eax
push 0
push 0
setg cl
push 0
push dword [ebp - 0x6f50]
mov dword [ebp - 0x6f40], ecx
lea ecx, [ebp - 0x29c8]
call fcn.00404150
mov ecx, dword [ebp - 0x6f70]
push eax
push 0x4e1968
lea ecx, [edi + ecx]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2148]
call fcn.00401bf0
push 0
lea ecx, [ebp - 0x2148]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f44]
push eax
lea eax, [ebp - 0x2090]
push eax
call fcn.0046bd60
mov esi, dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2090]
test al, al
mov eax, 1
push 0
cmovne esi, eax
call fcn.00401c90
push eax
push 0
push esi
lea ecx, [ebp - 0x2090]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x21a8]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f44]
push eax
mov eax, dword [ebp - 0x6f44]
push 0xffffffffffffffff
push 0xe
mov eax, dword [eax + 8]
push dword [eax + 0xa4]
call fcn.004426b0
mov dword [ebp - 0x6f40], eax
cmp eax, 0xffffffff
je 0x454d3d
push 0
push 0
push 0
push 0
push 0
push 0x4d8c28
mov ecx, edi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2090]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f70]
push eax
lea ecx, [edi + ecx]
call fcn.00401c90
push eax
push 0xe
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00442770
push 0
push 0
push 0
test esi, esi
mov ecx, 0x4e0a9c
push 0x4ca980
mov eax, 0x4ce4f8
cmove eax, ecx
lea ecx, [ebp - 0x2090]
push eax
push 0x4e0ab4
call fcn.00401c90
push eax
push 0x4e17a0
mov ecx, edi
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x21a8]
call fcn.00401c90
push eax
push 0x4e1750
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
mov esi, dword [ebp - 0x6f5c]
inc dword [ebp - 0x6f50]
lea ecx, [ebp - 0x29c8]
call fcn.00404160
cmp dword [ebp - 0x6f50], eax
jb 0x454a90
mov esi, dword [ebp - 0x6f88]
lea ecx, [ebp - 0x29c8]
mov byte [ebp - 4], 0x61
call fcn.004040e0
inc esi
add edi, 0xc
mov dword [ebp - 0x6f88], esi
cmp esi, dword [ebp - 0x6f7c]
jb 0x4549c3
mov ecx, dword [ebp - 0x6f44]
call fcn.0046f9d0
test al, al
jne 0x4556f5
push 0
push 0x4e1990
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
push 4
lea ecx, [ebp - 0x22cc]
mov dword [ebp - 0x6f84], 0x4e19c8
mov dword [ebp - 0x6f80], 0x4e1a50
call fcn.00404590
lea ecx, [ebp - 0x22cc]
call fcn.00404ea0
push 4
lea ecx, [ebp - 0x245c]
mov byte [ebp - 4], 0x63
call fcn.00404590
lea ecx, [ebp - 0x245c]
call fcn.00404ea0
push 0xc
lea ecx, [ebp - 0x20cc]
mov byte [ebp - 4], 0x64
call fcn.00404370
lea ecx, [ebp - 0x20cc]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2704]
mov byte [ebp - 4], 0x65
call fcn.00404370
lea ecx, [ebp - 0x2704]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2754]
mov byte [ebp - 4], 0x66
call fcn.00404370
lea ecx, [ebp - 0x2754]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x6dcc]
mov byte [ebp - 4], 0x67
call fcn.00406340
lea ecx, [ebp - 0x6dcc]
call fcn.00406380
lea eax, [ebp - 0x6f84]
mov byte [ebp - 4], 0x68
mov dword [ebp - 0x6f88], eax
mov dword [ebp - 0x6f40], 2
mov esi, dword [eax]
lea ecx, [ebp - 0x1f74]
push 0
push 0x20019
push esi
mov dword [ebp - 0x6f5c], esi
call fcn.004063e0
test al, al
je 0x455678
lea eax, [ebp - 0x6cb4]
xor edi, edi
push eax
push edi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f50], edi
call fcn.004067b0
test al, al
je 0x455678
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x2120]
push 0x4c9754
push esi
call fcn.00401bf0
push 0
push 0x20019
lea ecx, [ebp - 0x2120]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x22cc]
call fcn.004063e0
test al, al
je 0x455650
lea eax, [ebp - 0x6dcc]
mov dword [ebp - 0x6f70], 0
push eax
push 0
lea ecx, [ebp - 0x22cc]
call fcn.004067b0
test al, al
je 0x45530a
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6dcc]
lea ecx, [ebp - 0x2754]
push 0x4c9754
push dword [ebp - 0x6cb4]
push 0x4c9754
push esi
call fcn.00401bf0
push 0
push 0x20019
lea ecx, [ebp - 0x2754]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x245c]
call fcn.004063e0
test al, al
je 0x4552dc
lea eax, [ebp - 0x20cc]
push eax
push 0x4e1ad8
lea ecx, [ebp - 0x245c]
call fcn.00406580
test al, al
je 0x4552dc
lea ecx, [ebp - 0x20cc]
call fcn.00401f90
test al, al
jne 0x4552dc
mov ecx, dword [ebp - 0x6f44]
push 0
lea ecx, [ecx + 0x14c]
call fcn.00401c90
push eax
push 0x4d8c44
lea ecx, [ebp - 0x20cc]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.0046b610
test al, al
jne 0x4552dc
push 0
push 1
push 1
push 0
push 0x4e1af0
lea ecx, [ebp - 0x20cc]
call fcn.00402c80
test eax, eax
je 0x45503c
push 0
push 1
push 1
push 0
push 0x4e1b00
lea ecx, [ebp - 0x20cc]
call fcn.00402c80
test eax, eax
jne 0x4552dc
push 0
push 1
push 1
push 0
push 0x4e1b10
lea ecx, [ebp - 0x20cc]
call fcn.00402c80
test eax, eax
je 0x455078
push 0
push 1
push 1
push 0
push 0x4e1b3c
lea ecx, [ebp - 0x20cc]
call fcn.00402c80
test eax, eax
jne 0x4552dc
push 0
push 1
push 1
push 0
push 0x4e1b68
lea ecx, [ebp - 0x20cc]
call fcn.00402c80
test eax, eax
je 0x4550b4
push 0
push 1
push 1
push 0
push 0x4e1ba0
lea ecx, [ebp - 0x20cc]
call fcn.00402c80
test eax, eax
jne 0x4552dc
push 0
push 1
push 1
push 0
push 0x4e1bd8
lea ecx, [ebp - 0x20cc]
call fcn.00402c80
test eax, eax
je 0x4550f0
push 0
push 1
push 1
push 0
push 0x4e1c04
lea ecx, [ebp - 0x20cc]
call fcn.00402c80
test eax, eax
jne 0x4552dc
push 0
push 1
push 1
push 0
push 0x4e1c2c
lea ecx, [ebp - 0x20cc]
call fcn.00402c80
test eax, eax
je 0x45512c
push 0
push 1
push 1
push 0
push 0x4e1c64
lea ecx, [ebp - 0x20cc]
call fcn.00402c80
test eax, eax
jne 0x4552dc
xor edi, edi
lea ecx, [ebp - 0x20cc]
push edi
push 0x4e1c98
call fcn.00401c90
push eax
lea ecx, [ebp - 0x28d0]
call fcn.004041c0
lea ecx, [ebp - 0x28d0]
xor esi, esi
call fcn.00404160
test eax, eax
je 0x4551e4
push 1
push esi
lea ecx, [ebp - 0x28d0]
call fcn.00404150
push eax
lea ecx, [ebp - 0x2704]
call fcn.00401ba0
mov ecx, eax
call fcn.00401f90
test al, al
jne 0x4551cd
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e1218
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2704]
call fcn.004031d0
lea ecx, [ebp - 0x2704]
call fcn.00401c90
xor edx, edx
mov ecx, eax
call fcn.00408000
test al, al
jne 0x4551df
lea ecx, [ebp - 0x28d0]
inc esi
call fcn.00404160
cmp esi, eax
jb 0x455160
jmp 0x4551e4
mov edi, 1
push 0
push 0
push 0
push edi
lea ecx, [ebp - 0x2754]
call fcn.00401c90
push eax
push 0x4db8f0
lea ecx, [ebp - 0x20cc]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f44]
push eax
mov eax, dword [ebp - 0x6f44]
push 0xffffffffffffffff
push 0xf
mov eax, dword [eax + 8]
push dword [eax + 0xa4]
call fcn.004426b0
mov esi, eax
cmp esi, 0xffffffff
je 0x4552d6
push 0
push 0
push 0
push 0
push 0
push 0x4e1ad8
push 0x4db8f0
push 0
lea ecx, [ebp - 0x2754]
call fcn.00401c90
push eax
push 0xf
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00442770
push 0
push 0
push 0
push 0x4ca980
test edi, edi
mov ecx, 0x4e0a9c
mov eax, 0x4ce4f8
cmove eax, ecx
lea ecx, [ebp - 0x2754]
push eax
push 0x4e0ab4
push 0x4e1ca0
call fcn.00401c90
push eax
push 0x4e1cd8
push 0x4e1844
lea ecx, [ebp - 0x20cc]
call fcn.00401c90
push eax
push 0x4e1750
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
mov esi, dword [ebp - 0x6f5c]
mov eax, dword [ebp - 0x6f70]
lea ecx, [ebp - 0x6dcc]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x22cc]
mov dword [ebp - 0x6f70], eax
call fcn.004067b0
test al, al
jne 0x454f40
mov edi, dword [ebp - 0x6f50]
lea eax, [ebp - 0x20cc]
push eax
push 0x4e1ad8
lea ecx, [ebp - 0x22cc]
call fcn.00406580
test al, al
je 0x455650
lea ecx, [ebp - 0x20cc]
call fcn.00401f90
test al, al
jne 0x455650
mov ecx, dword [ebp - 0x6f44]
push 0
lea ecx, [ecx + 0x14c]
call fcn.00401c90
push eax
push 0x4d8c44
lea ecx, [ebp - 0x20cc]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.0046b610
test al, al
jne 0x455650
push 0
push 1
push 1
push 0
push 0x4e1af0
lea ecx, [ebp - 0x20cc]
call fcn.00402c80
test eax, eax
je 0x4553b0
push 0
push 1
push 1
push 0
push 0x4e1b00
lea ecx, [ebp - 0x20cc]
call fcn.00402c80
test eax, eax
jne 0x455650
push 0
push 1
push 1
push 0
push 0x4e1b10
lea ecx, [ebp - 0x20cc]
call fcn.00402c80
test eax, eax
je 0x4553ec
push 0
push 1
push 1
push 0
push 0x4e1b3c
lea ecx, [ebp - 0x20cc]
call fcn.00402c80
test eax, eax
jne 0x455650
push 0
push 1
push 1
push 0
push 0x4e1b68
lea ecx, [ebp - 0x20cc]
call fcn.00402c80
test eax, eax
je 0x455428
push 0
push 1
push 1
push 0
push 0x4e1ba0
lea ecx, [ebp - 0x20cc]
call fcn.00402c80
test eax, eax
jne 0x455650
push 0
push 1
push 1
push 0
push 0x4e1bd8
lea ecx, [ebp - 0x20cc]
call fcn.00402c80
test eax, eax
je 0x455464
push 0
push 1
push 1
push 0
push 0x4e1c04
lea ecx, [ebp - 0x20cc]
call fcn.00402c80
test eax, eax
jne 0x455650
push 0
push 1
push 1
push 0
push 0x4e1c2c
lea ecx, [ebp - 0x20cc]
call fcn.00402c80
test eax, eax
je 0x4554a0
push 0
push 1
push 1
push 0
push 0x4e1c64
lea ecx, [ebp - 0x20cc]
call fcn.00402c80
test eax, eax
jne 0x455650
xor edi, edi
lea ecx, [ebp - 0x20cc]
push edi
push 0x4e1c98
call fcn.00401c90
push eax
lea ecx, [ebp - 0x28d0]
call fcn.004041c0
lea ecx, [ebp - 0x28d0]
xor esi, esi
call fcn.00404160
test eax, eax
je 0x455558
push 1
push esi
lea ecx, [ebp - 0x28d0]
call fcn.00404150
push eax
lea ecx, [ebp - 0x2704]
call fcn.00401ba0
mov ecx, eax
call fcn.00401f90
test al, al
jne 0x455541
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e1218
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2704]
call fcn.004031d0
lea ecx, [ebp - 0x2704]
call fcn.00401c90
xor edx, edx
mov ecx, eax
call fcn.00408000
test al, al
jne 0x455553
lea ecx, [ebp - 0x28d0]
inc esi
call fcn.00404160
cmp esi, eax
jb 0x4554d4
jmp 0x455558
mov edi, 1
push 0
push 0
push 0
push edi
lea ecx, [ebp - 0x2120]
call fcn.00401c90
push eax
push 0x4db8f0
lea ecx, [ebp - 0x20cc]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f44]
push eax
mov eax, dword [ebp - 0x6f44]
push 0xffffffffffffffff
push 0xf
mov eax, dword [eax + 8]
push dword [eax + 0xa4]
call fcn.004426b0
mov esi, eax
cmp esi, 0xffffffff
je 0x45564a
push 0
push 0
push 0
push 0
push 0
push 0x4e1ad8
push 0x4db8f0
push 0
lea ecx, [ebp - 0x2120]
call fcn.00401c90
push eax
push 0xf
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f44]
push eax
call fcn.00442770
push 0
push 0
push 0
push 0x4ca980
test edi, edi
mov ecx, 0x4e0a9c
mov eax, 0x4ce4f8
cmove eax, ecx
lea ecx, [ebp - 0x2120]
push eax
push 0x4e0ab4
push 0x4e1ca0
call fcn.00401c90
push eax
push 0x4e1cd8
push 0x4e1844
lea ecx, [ebp - 0x20cc]
call fcn.00401c90
push eax
push 0x4e1750
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
mov edi, dword [ebp - 0x6f50]
lea eax, [ebp - 0x6cb4]
inc edi
push eax
push edi
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f50], edi
call fcn.004067b0
mov esi, dword [ebp - 0x6f5c]
test al, al
jne 0x454ec8
mov eax, dword [ebp - 0x6f88]
add eax, 4
sub dword [ebp - 0x6f40], 1
mov dword [ebp - 0x6f88], eax
jne 0x454e82
mov eax, dword [ebp - 0x6f44]
push 1
mov eax, dword [eax + 8]
push dword [eax + 0xa4]
mov eax, dword [ebp - 0x6f44]
mov ecx, dword [eax + 4]
call fcn.0041f020
lea ecx, [ebp - 0x6dcc]
call fcn.00401ad0
lea ecx, [ebp - 0x2754]
call fcn.00401ad0
lea ecx, [ebp - 0x2704]
call fcn.00401ad0
lea ecx, [ebp - 0x20cc]
call fcn.00401ad0
lea ecx, [ebp - 0x245c]
call fcn.00406410
lea ecx, [ebp - 0x22cc]
call fcn.00406410
lea ecx, [ebp - 0x28d0]
call fcn.004040e0
lea ecx, [ebp - 0x6cd8]
call fcn.00475a30
lea ecx, [ebp - 0x6cd4]
call fcn.00475a30
lea ecx, [ebp - 0x219c]
call fcn.00401ad0
lea ecx, [ebp - 0x241c]
call fcn.00401ad0
lea ecx, [ebp - 0x2b20]
call fcn.00408710
lea ecx, [ebp - 0x254c]
call fcn.00401ad0
lea ecx, [ebp - 0x2320]
call fcn.00401ad0
lea ecx, [ebp - 0x21a8]
call fcn.00401ad0
lea ecx, [ebp - 0x27bc]
call fcn.00401ad0
lea ecx, [ebp - 0x23f8]
call fcn.00401ad0
lea ecx, [ebp - 0x2090]
mov byte [ebp - 4], 0x45
call fcn.00401ad0
mov ecx, dword [ebp - 0x6f4c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dc1a8
push 0x4c9754
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f8c]
call fcn.00401bf0
mov ecx, dword [ebp - 0x6f44]
call fcn.0046f9d0
mov edi, dword [ebp - 0x6f44]
test al, al
jne 0x45652d
test dword [edi + 0x34], 0x1000
jne 0x45652d
movsd xmm0, qword [edi + 0x368]
ucomisd xmm0, qword [0x4eaa58]
lahf
test ah, 0x44
jp 0x45652d
push 0
push 0x4e1d00
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x4e1d48
push dword [eax + 0x38]
call fcn.0041d990
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x26
push dword [eax + 0x34]
call fcn.0041ff10
push 0xc
lea ecx, [ebp - 0x21d8]
call fcn.00404370
lea ecx, [ebp - 0x21d8]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2864]
mov byte [ebp - 4], 0x69
call fcn.00404370
lea ecx, [ebp - 0x2864]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2558]
mov byte [ebp - 4], 0x6a
call fcn.00404370
lea ecx, [ebp - 0x2558]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2680]
mov byte [ebp - 4], 0x6b
call fcn.00404370
lea ecx, [ebp - 0x2680]
call fcn.00401930
push 0
push 0x4e1d80
lea ecx, [ebp - 0x1fd4]
mov byte [ebp - 4], 0x6c
call fcn.0040d1b0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.0041f020
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x455b1f
lea eax, [edi + 0x104]
nop dword [eax]
push esi
mov ecx, eax
call fcn.00476390
mov ecx, eax
call fcn.00401f90
test al, al
jne 0x455b0f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e1dc0
push 0x4e1e68
push esi
lea ecx, [edi + 0x104]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
push str.HKU_
lea ecx, [ebp - 0x21d8]
call fcn.00401bf0
push 0
push 0x20019
lea ecx, [ebp - 0x21d8]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x455b0f
xor eax, eax
mov dword [ebp - 0x6f50], eax
lea ecx, [ebp - 0x6cb4]
push ecx
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004067b0
test al, al
je 0x455b0f
push 8
push 0
push 0x4cb5d0
push 0x4e1f00
push 1
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x2680]
call fcn.00401ba0
mov ecx, eax
call fcn.00403e40
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e1f1c
lea ecx, [ebp - 0x2680]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x455af9
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x21d8]
push 0x4c9754
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2558]
call fcn.00401bf0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2558]
call fcn.00401c90
push eax
push esi
lea ecx, [edi + 0x114]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2680]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 4
push 0x18
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x455af9
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [edi + 0x114]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
push 0
lea ecx, [ebp - 0x2558]
call fcn.00401c90
push eax
push 0x18
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e1f50
push dword [ebp - 0x6cb4]
lea ecx, [edi + 0x114]
push 0x4e1f8c
push esi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x2680]
call fcn.00401c90
push eax
push 0x4e1fc0
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
mov eax, dword [ebp - 0x6f50]
inc eax
mov dword [ebp - 0x6f50], eax
cmp eax, 2
jb 0x455953
inc esi
lea eax, [edi + 0x104]
cmp esi, dword [edi + 0x30]
jb 0x4558d0
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x4564fd
push 0
push 0x4e1ff0
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x455e6d
nop dword [eax + eax]
lea eax, [edi + 0x104]
push esi
mov ecx, eax
call fcn.00476390
mov ecx, eax
call fcn.00401f90
test al, al
jne 0x455e63
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e1dc0
push 0x4e1e68
push esi
lea ecx, [edi + 0x104]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
push str.HKU_
lea ecx, [ebp - 0x21d8]
call fcn.00401bf0
push 0
push 0x20019
lea ecx, [ebp - 0x21d8]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
lea eax, [ebp - 0x6cb4]
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.004067b0
test al, al
je 0x455cf7
lea ecx, [edi + 0x14c]
push 0
call fcn.00401c90
push eax
push 0x4e2180
push 0x4dc44c
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x455e63
push 0
push 0
push 0
push 0
push 0x4e2048
push esi
lea ecx, [edi + 0x114]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dc44c
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x455e63
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [edi + 0x114]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
push 0
lea ecx, [ebp - 0x21d8]
call fcn.00401c90
push eax
push 0x1a
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e1f50
push 0x4e2048
push 0x4e21bc
push esi
lea ecx, [edi + 0x114]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
push 0x4e0b14
push 0x4dc44c
push 0x4e21d4
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2200
push 0x4e1e68
push esi
lea ecx, [edi + 0x104]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
push str.HKU_
lea ecx, [ebp - 0x21d8]
call fcn.00401bf0
lea ecx, [ebp - 0x21d8]
call fcn.00401c90
xor edx, edx
mov ecx, eax
call fcn.00408000
test al, al
je 0x455e63
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e2180
push 0x4dc5f8
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x455e63
push 0
push 0
push 0
push 0
push 0x4e20f0
push esi
lea ecx, [edi + 0x114]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dc5f8
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x455e63
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [edi + 0x114]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
push 0
lea ecx, [ebp - 0x21d8]
call fcn.00401c90
push eax
push 0x1a
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e1f50
push 0x4e20f0
push 0x4e21bc
push esi
lea ecx, [edi + 0x114]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
push 0x4e0b14
push 0x4dc5f8
push 0x4e21d4
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
inc esi
cmp esi, dword [edi + 0x30]
jb 0x455b50
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x4564fd
xor esi, esi
mov dword [ebp - 0x6f60], 0x4d5bc8
mov dword [ebp - 0x6f5c], 0x4d5bf0
mov dword [ebp - 0x6f74], 0x4dc714
mov dword [ebp - 0x6f70], 0x4dc828
mov dword [ebp - 0x6f90], 0x4e22a0
mov dword [ebp - 0x6f8c], 0x4e2328
mov dword [ebp - 0x6f40], esi
cmp dword [edi + 0x30], esi
jbe 0x4560c8
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e23b8
push 0x4e2460
push 0x4e24f8
push esi
lea ecx, [edi + 0x104]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
push str.HKU_
lea ecx, [ebp - 0x21d8]
call fcn.00401bf0
lea ecx, [ebp - 0x21d8]
call fcn.00401c90
xor edx, edx
mov ecx, eax
call fcn.00408000
test al, al
je 0x4560b8
xor esi, esi
mov dword [ebp - 0x6f50], esi
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x4560b2
lea ecx, [ebp - 0x21d8]
call fcn.00401c90
mov edx, dword [ebp + esi*4 - 0x6f60]
mov ecx, eax
call fcn.00408000
test al, al
je 0x4560a2
mov esi, dword [ebp + esi*4 - 0x6f74]
lea ecx, [edi + 0x14c]
push 0
call fcn.00401c90
push eax
push 0x4e2180
push esi
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x45609c
mov eax, dword [ebp - 0x6f50]
lea ecx, [edi + 0x114]
push 0
push 0
push 0
push 0
push dword [ebp + eax*4 - 0x6f90]
push dword [ebp - 0x6f40]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push esi
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x45609c
mov eax, dword [ebp - 0x6f50]
lea ecx, [edi + 0x114]
push 0
push 0
push 0
push 0
push 0
push dword [ebp + eax*4 - 0x6f60]
push dword [ebp - 0x6f40]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
push 0
lea ecx, [ebp - 0x21d8]
call fcn.00401c90
push eax
push 0x1a
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
mov eax, dword [ebp - 0x6f50]
lea ecx, [edi + 0x114]
push 0
push 0
push 0
push 0
push 0
push 0x4e1f50
push dword [ebp + eax*4 - 0x6f90]
push 0x4e21bc
push dword [ebp - 0x6f40]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
push 0x4e0b14
push esi
push 0x4e21d4
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
mov esi, dword [ebp - 0x6f50]
inc esi
mov dword [ebp - 0x6f50], esi
cmp esi, 2
jb 0x455f35
mov esi, dword [ebp - 0x6f40]
inc esi
mov dword [ebp - 0x6f40], esi
cmp esi, dword [edi + 0x30]
jb 0x455ed0
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x4564fd
xor ecx, ecx
mov dword [ebp - 0x6f60], 0x4d5d30
mov dword [ebp - 0x6f5c], 0x4d5d4c
lea eax, [edi + 0x14c]
mov dword [ebp - 0x6f74], 0x4dc954
mov dword [ebp - 0x6f70], 0x4dc980
mov dword [ebp - 0x6f90], 0x4e2598
mov dword [ebp - 0x6f8c], 0x4e2620
mov dword [ebp - 0x6f50], ecx
mov esi, dword [ebp + ecx*4 - 0x6f74]
mov ecx, eax
push 0
call fcn.00401c90
push eax
push 0x4e2180
push esi
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x45625f
mov eax, dword [ebp - 0x6f50]
lea ecx, [ebp - 0x2578]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + eax*4 - 0x6f60]
push 0x4d5cc8
call fcn.00401c90
push eax
lea ecx, [ebp - 0x21d8]
call fcn.00401bf0
lea ecx, [ebp - 0x21d8]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
je 0x45625f
mov eax, dword [ebp - 0x6f50]
mov ecx, edi
push 0
push 0
push 0
push 0
push dword [ebp + eax*4 - 0x6f90]
mov eax, dword [edi + 8]
push 0x4db8f0
push esi
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x45625f
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4db8f0
lea ecx, [ebp - 0x21d8]
call fcn.00401c90
push eax
push 0
push 0x1a
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
mov eax, dword [ebp - 0x6f50]
lea ecx, [ebp - 0x1f80]
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e1f50
push dword [ebp + eax*4 - 0x6f90]
push 0x4e21bc
push 0x4e1844
push esi
push 0x4e21d4
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
mov ecx, dword [ebp - 0x6f50]
lea eax, [edi + 0x14c]
inc ecx
mov dword [ebp - 0x6f50], ecx
cmp ecx, 2
jb 0x456121
push 4
lea ecx, [ebp - 0x2354]
call fcn.00404590
lea ecx, [ebp - 0x2354]
call fcn.00404ea0
push 4
lea ecx, [ebp - 0x2438]
mov byte [ebp - 4], 0x6d
call fcn.00404590
lea ecx, [ebp - 0x2438]
call fcn.00404ea0
xor esi, esi
mov byte [ebp - 4], 0x6e
cmp dword [edi + 0x30], esi
jbe 0x4564d4
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2738
push 0x4e27c0
push 0x4e2838
push esi
lea ecx, [edi + 0x104]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
push str.HKU_
lea ecx, [ebp - 0x21d8]
call fcn.00401bf0
push 0
push 0x20019
lea ecx, [ebp - 0x21d8]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2354]
call fcn.004063e0
test al, al
je 0x4564ca
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f50], 0
push eax
push 0
lea ecx, [ebp - 0x2354]
call fcn.004067b0
test al, al
je 0x4564ca
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e285c
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x21d8]
push 0x4c9754
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2558]
call fcn.00401bf0
push 0
push 0x20019
lea ecx, [ebp - 0x2558]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2438]
call fcn.004063e0
test al, al
je 0x4563fe
lea ecx, [ebp - 0x2438]
call fcn.004068d0
cmp eax, 2
jb 0x4563fe
push 0
push 0
push 0
push 0
push 0x4e26b0
push esi
lea ecx, [edi + 0x114]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dcb90
push 4
push 0x1a
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
jne 0x45642b
mov eax, dword [ebp - 0x6f50]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x2354]
mov dword [ebp - 0x6f50], eax
call fcn.004067b0
test al, al
jne 0x456350
jmp 0x4564ca
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [edi + 0x114]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
push 0
lea ecx, [ebp - 0x2558]
call fcn.00401c90
push eax
push 0x1a
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e1f50
push 0x4e26b0
push 0x4e21bc
push esi
lea ecx, [edi + 0x114]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
push 0x4e0b14
push 0x4e2898
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
inc esi
cmp esi, dword [edi + 0x30]
jb 0x4562c0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.0041f020
lea ecx, [ebp - 0x2438]
call fcn.00406410
lea ecx, [ebp - 0x2354]
call fcn.00406410
lea ecx, [ebp - 0x2680]
call fcn.00401ad0
lea ecx, [ebp - 0x2558]
call fcn.00401ad0
lea ecx, [ebp - 0x2864]
call fcn.00401ad0
lea ecx, [ebp - 0x21d8]
mov byte [ebp - 4], 0x45
call fcn.00401ad0
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x458de6
test dword [edi + 0x34], 0x1000
jne 0x458de6
push 0
push 0x4e28f0
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x4e1d48
push dword [eax + 0x38]
call fcn.0041d990
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x26
push dword [eax + 0x34]
call fcn.0041ff10
push 0xc
lea ecx, [ebp - 0x20d8]
call fcn.00404370
lea ecx, [ebp - 0x20d8]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2034]
mov byte [ebp - 4], 0x6f
call fcn.00404370
lea ecx, [ebp - 0x2034]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x23b0]
mov byte [ebp - 4], 0x70
call fcn.00404370
lea ecx, [ebp - 0x23b0]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2000]
mov byte [ebp - 4], 0x71
call fcn.00404370
lea ecx, [ebp - 0x2000]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x22a0]
mov byte [ebp - 4], 0x72
call fcn.00404370
lea ecx, [ebp - 0x22a0]
call fcn.00401930
push 0x24
lea ecx, [ebp - 0x251c]
mov byte [ebp - 4], 0x73
call fcn.0042cde0
lea ecx, [ebp - 0x251c]
call fcn.0040ee70
mov byte [ebp - 4], 0x74
xor esi, esi
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
mov dword [ebp - 0x6f5c], esi
push dword [eax + 0xa8]
call fcn.0041f020
push esi
push 0x4e2930
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov dword [ebp - 0x6f70], esi
cmp dword [edi + 0x30], esi
jbe 0x456c9a
mov esi, dword [ebp - 0x6f78]
lea eax, [edi + 0x10c]
mov dword [ebp - 0x6f40], esi
nop word [eax + eax]
lea ecx, [ebp - 0x22a0]
mov dword [ebp - 0x6f88], eax
call fcn.00401f90
test al, al
je 0x4566de
lea eax, [ebp - 0x22a0]
push eax
push 1
lea ecx, [ebp - 0x2154]
call fcn.00401c90
push dword [ebp - 0x6f70]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.00476390
mov ecx, eax
call fcn.00401c90
mov edx, esi
mov ecx, eax
call fcn.004326e0
mov esi, dword [ebp - 0x6f40]
lea eax, [edi + 0x10c]
mov dword [ebp - 0x6f88], eax
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x456c94
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2980
lea ecx, [ebp - 0x2154]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f88]
push eax
push dword [ebp - 0x6f70]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x20d8]
call fcn.00401bf0
push 0x260
lea ecx, [ebp - 0x58b8]
call fcn.00408820
push 1
lea ecx, [ebp - 0x20d8]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x58b8]
call fcn.004012e0
push 3
lea ecx, [ebp - 0x20d8]
mov byte [ebp - 4], 0x75
call fcn.00402b90
lea ecx, [ebp - 0x58b8]
call fcn.00401420
test al, al
je 0x456c60
push 1
lea ecx, [ebp - 0x58b8]
call fcn.00401480
push eax
lea ecx, [ebp - 0x2034]
call fcn.00401a00
push 0x4e29bc
lea ecx, [ebp - 0x2034]
call fcn.00401a70
test al, al
je 0x4567cf
push 0
push 1
push 1
push 0
push 0x4e29cc
lea ecx, [ebp - 0x2034]
call fcn.00402c80
cmp eax, 1
jne 0x456c41
inc dword [ebp - 0x6f5c]
lea ecx, [ebp - 0x58b8]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e29e0
push 1
call fcn.00401480
push eax
lea ecx, [ebp - 0x20d8]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2034]
call fcn.00401bf0
push 0x100
lea ecx, [ebp - 0x2034]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x251c]
call fcn.0040ef20
test al, al
je 0x456c41
lea eax, [ebp - 0x2000]
push eax
push 0x4cb90c
push 0x4e2a08
lea ecx, [ebp - 0x251c]
call fcn.0040f7c0
test eax, eax
je 0x4569f9
push 0
push 1
push 1
push 0
push 0x4e2a1c
lea ecx, [ebp - 0x2000]
call fcn.00402c80
test eax, eax
jne 0x4569f9
push eax
push 1
push 1
push eax
push 0x4e2a3c
lea ecx, [ebp - 0x2000]
call fcn.00402c80
test eax, eax
jne 0x4569f9
push 0x4e2a58
lea ecx, [ebp - 0x2000]
call fcn.00401a40
test al, al
jne 0x4569f9
push 0
push 1
push 1
push 0
push 0x4e2a70
lea ecx, [ebp - 0x2000]
call fcn.00402c80
test eax, eax
jne 0x4569f9
push eax
push 1
push 1
push eax
push 0x4e2a8c
lea ecx, [ebp - 0x2000]
call fcn.00402c80
test eax, eax
jne 0x4569f9
push eax
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e2aa4
lea ecx, [ebp - 0x2000]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x4569f9
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2000]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e2ae0
push 0
push 0x6f
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x4569f9
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2034]
call fcn.00401c90
push eax
push 0x4e2a08
push 0x6f
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
lea ecx, [ebp - 0x2034]
call fcn.00401c90
push eax
push 0x4e21bc
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x2000]
call fcn.00401c90
push eax
push 0x4e2b28
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
lea eax, [ebp - 0x2a54]
mov dword [ebp - 0x6f2c], 0
push eax
push 0x4cb90c
xorps xmm0, xmm0
lea ecx, [ebp - 0x251c]
push 0x4e2b48
movups xmmword [ebp - 0x6f3c], xmm0
call fcn.0040f5e0
test al, al
je 0x456c41
lea eax, [ebp - 0x2a54]
push eax
lea eax, [ebp - 0x6f3c]
push eax
lea ecx, [ebp - 0x251c]
call fcn.0040fd40
test al, al
je 0x456c41
lea eax, [ebp - 0x2000]
push eax
lea eax, [ebp - 0x6f3c]
push eax
lea ecx, [ebp - 0x251c]
call fcn.0040f750
test eax, eax
je 0x456c20
push 0
push 1
push 1
push 0
push 0x4e2a1c
lea ecx, [ebp - 0x2000]
call fcn.00402c80
test eax, eax
jne 0x456c41
push eax
push 1
push 1
push eax
push 0x4e2b74
lea ecx, [ebp - 0x2000]
call fcn.00402c80
test eax, eax
jne 0x456c41
push eax
push 1
push 1
push eax
push 0x4e2a3c
lea ecx, [ebp - 0x2000]
call fcn.00402c80
test eax, eax
jne 0x456c41
push eax
push 1
push 1
push eax
push 0x4e2b98
lea ecx, [ebp - 0x2000]
call fcn.00402c80
test eax, eax
jne 0x456c41
push eax
push 1
push 1
push eax
push 0x4e2a8c
lea ecx, [ebp - 0x2000]
call fcn.00402c80
test eax, eax
jne 0x456c41
push eax
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e2bb4
lea ecx, [ebp - 0x2000]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x456c20
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2000]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e2be0
push 0
push 0x6f
push dword [eax + 0xa8]
call fcn.004426b0
mov esi, eax
cmp esi, 0xffffffff
je 0x456c1a
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2034]
call fcn.00401c90
push eax
push 0x4e2b48
push 0x6f
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
lea ecx, [ebp - 0x2034]
call fcn.00401c90
mov esi, dword [ebp - 0x6f40]
mov ecx, esi
push eax
push 0x4e21bc
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x2000]
call fcn.00401c90
push eax
push 0x4e2bfc
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
jmp 0x456c20
mov esi, dword [ebp - 0x6f40]
lea eax, [ebp - 0x2a54]
push eax
lea eax, [ebp - 0x6f3c]
push eax
lea ecx, [ebp - 0x251c]
call fcn.0040fd40
test al, al
jne 0x456a52
lea ecx, [ebp - 0x58b8]
call fcn.004013e0
test al, al
jne 0x456781
lea eax, [edi + 0x10c]
mov dword [ebp - 0x6f88], eax
lea ecx, [ebp - 0x58b8]
mov byte [ebp - 4], 0x74
call fcn.00401330
mov eax, dword [ebp - 0x6f70]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
cmp eax, dword [edi + 0x30]
mov dword [ebp - 0x6f70], eax
mov eax, dword [ebp - 0x6f88]
jb 0x456680
mov esi, dword [ebp - 0x6f5c]
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x458da0
test esi, esi
jne 0x456cd2
lea ecx, [ebp - 0x22a0]
call fcn.00401f90
test al, al
je 0x456cd2
push esi
push 0x4e2c28
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
jmp 0x458da0
push 0
push 0x4e2c78
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f5c], 0
jbe 0x457070
mov esi, dword [ebp - 0x6f78]
mov dword [ebp - 0x6f70], esi
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x457070
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2980
lea ecx, [ebp - 0x2154]
call fcn.00401c90
push eax
push dword [ebp - 0x6f5c]
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x20d8]
call fcn.00401bf0
push 0x260
lea ecx, [ebp - 0x5658]
call fcn.00408820
push 1
lea ecx, [ebp - 0x20d8]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x5658]
call fcn.004012e0
push 3
lea ecx, [ebp - 0x20d8]
mov byte [ebp - 4], 0x76
call fcn.00402b90
lea ecx, [ebp - 0x5658]
call fcn.00401420
test al, al
je 0x457042
nop word [eax + eax]
push 1
lea ecx, [ebp - 0x5658]
call fcn.00401480
push eax
lea ecx, [ebp - 0x2034]
call fcn.00401a00
push 0x4e29bc
lea ecx, [ebp - 0x2034]
call fcn.00401a70
test al, al
je 0x456dfe
push 0
push 1
push 1
push 0
push 0x4e29cc
lea ecx, [ebp - 0x2034]
call fcn.00402c80
cmp eax, 1
jne 0x45702f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e29e0
push 1
lea ecx, [ebp - 0x5658]
call fcn.00401480
push eax
lea ecx, [ebp - 0x20d8]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2034]
call fcn.00401bf0
push 0x100
lea ecx, [ebp - 0x2034]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x251c]
call fcn.0040ef20
test al, al
je 0x45702f
lea eax, [ebp - 0x2000]
push eax
push 0x4cb90c
push 0x4e2cb8
lea ecx, [ebp - 0x251c]
call fcn.0040f7c0
test eax, eax
je 0x45702f
push 0
push 1
push 1
push 0
push 0x4e2a1c
lea ecx, [ebp - 0x2000]
call fcn.00402c80
test eax, eax
jne 0x45702f
push eax
push 1
push 1
push eax
push 0x4e2b74
lea ecx, [ebp - 0x2000]
call fcn.00402c80
test eax, eax
jne 0x45702f
push eax
push 1
push 1
push eax
push 0x4e2a3c
lea ecx, [ebp - 0x2000]
call fcn.00402c80
test eax, eax
jne 0x45702f
push eax
push 1
push 1
push eax
push 0x4e2b98
lea ecx, [ebp - 0x2000]
call fcn.00402c80
test eax, eax
jne 0x45702f
push eax
push 1
push 1
push eax
push 0x4e2a8c
lea ecx, [ebp - 0x2000]
call fcn.00402c80
test eax, eax
jne 0x45702f
push eax
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e2d28
lea ecx, [ebp - 0x2000]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x45702f
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2000]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e2d68
push 0
push 0x70
push dword [eax + 0xa8]
call fcn.004426b0
mov esi, eax
cmp esi, 0xffffffff
je 0x457029
mov ecx, dword [ebp - 0x6f70]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2034]
call fcn.00401c90
push eax
push 0x4e2d98
push 0x70
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
lea ecx, [ebp - 0x2034]
call fcn.00401c90
mov esi, dword [ebp - 0x6f70]
mov ecx, esi
push eax
push 0x4e21bc
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x2000]
call fcn.00401c90
push eax
push 0x4e2df8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
jmp 0x45702f
mov esi, dword [ebp - 0x6f70]
lea ecx, [ebp - 0x5658]
call fcn.004013e0
test al, al
jne 0x456db0
lea ecx, [ebp - 0x5658]
mov byte [ebp - 4], 0x74
call fcn.00401330
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f70], esi
mov dword [ebp - 0x6f5c], eax
cmp eax, dword [edi + 0x30]
jb 0x456d04
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x458da0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2e40
lea ecx, [edi + 0x314]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00401bf0
push 0
push 0x4e2e8c
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f5c], 0
jbe 0x4576a1
mov esi, dword [ebp - 0x6f78]
mov dword [ebp - 0x6f80], esi
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x4576a1
push 0xc
lea ecx, [ebp - 0x26ec]
call fcn.00404370
lea ecx, [ebp - 0x26ec]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2760]
mov byte [ebp - 4], 0x77
call fcn.00404370
lea ecx, [ebp - 0x2760]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x26f8]
mov byte [ebp - 4], 0x78
call fcn.00404370
lea ecx, [ebp - 0x26f8]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x268c]
mov byte [ebp - 4], 0x79
call fcn.00404370
lea ecx, [ebp - 0x268c]
call fcn.00401930
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2980
lea ecx, [ebp - 0x2154]
mov byte [ebp - 4], 0x7a
call fcn.00401c90
push eax
push dword [ebp - 0x6f5c]
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x20d8]
call fcn.00401bf0
push 0x260
lea ecx, [ebp - 0x4a78]
call fcn.00408820
push 1
lea ecx, [ebp - 0x20d8]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x4a78]
call fcn.004012e0
push 3
lea ecx, [ebp - 0x20d8]
mov byte [ebp - 4], 0x7b
call fcn.00402b90
lea ecx, [ebp - 0x4a78]
call fcn.00401420
test al, al
je 0x457647
nop dword [eax]
nop dword [eax + eax]
push 1
lea ecx, [ebp - 0x4a78]
call fcn.00401480
push eax
lea ecx, [ebp - 0x2034]
call fcn.00401a00
push 0x4e29bc
lea ecx, [ebp - 0x2034]
call fcn.00401a70
test al, al
je 0x45724e
push 0
push 1
push 1
push 0
push 0x4e29cc
lea ecx, [ebp - 0x2034]
call fcn.00402c80
cmp eax, 1
jne 0x457634
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e29e0
push 1
lea ecx, [ebp - 0x4a78]
call fcn.00401480
push eax
lea ecx, [ebp - 0x20d8]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2034]
call fcn.00401bf0
push 0x100
lea ecx, [ebp - 0x2034]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x251c]
call fcn.0040ef20
test al, al
je 0x457634
lea eax, [ebp - 0x2a40]
mov dword [ebp - 0x6f18], 0
push eax
push 0x4cb90c
xorps xmm0, xmm0
lea ecx, [ebp - 0x251c]
push 0x4e2ec0
movups xmmword [ebp - 0x6f28], xmm0
call fcn.0040f5e0
test al, al
je 0x457634
lea eax, [ebp - 0x2a40]
push eax
lea eax, [ebp - 0x6f28]
push eax
lea ecx, [ebp - 0x251c]
call fcn.0040f980
test al, al
je 0x457634
nop word [eax + eax]
lea eax, [ebp - 0x26ec]
push eax
lea eax, [ebp - 0x6f28]
push eax
lea ecx, [ebp - 0x251c]
call fcn.0040f710
test al, al
je 0x457613
lea ecx, [ebp - 0x26ec]
call fcn.00401c90
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.00401c90
mov edx, esi
mov ecx, eax
call fcn.00408000
test al, al
jne 0x45760d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2eec
lea ecx, [ebp - 0x26ec]
call fcn.00401c90
push eax
push 0x4e2f10
lea ecx, [ebp - 0x26f8]
call fcn.00401bf0
lea eax, [ebp - 0x2760]
push eax
push 0x4cb90c
lea ecx, [ebp - 0x26f8]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x251c]
call fcn.0040f7c0
test eax, eax
je 0x45760d
lea ecx, [ebp - 0x2760]
call fcn.00401c90
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.00401c90
mov edx, esi
mov ecx, eax
call fcn.00408000
test al, al
jne 0x45760d
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e1f1c
lea ecx, [ebp - 0x2760]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x45760d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2f40
lea ecx, [ebp - 0x26ec]
call fcn.00401c90
push eax
push 0x4e2f10
lea ecx, [ebp - 0x26f8]
call fcn.00401bf0
lea eax, [ebp - 0x268c]
push eax
push 0x4cb90c
lea ecx, [ebp - 0x26f8]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x251c]
call fcn.0040f7c0
test eax, eax
je 0x4574b8
push 0
push 1
push 1
push 5
push 0x4ca134
lea ecx, [ebp - 0x268c]
call fcn.00402c80
test eax, eax
jne 0x4574b8
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4e2f50
push 1
lea ecx, [ebp - 0x4a78]
call fcn.00401480
push eax
lea ecx, [ebp - 0x20d8]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x268c]
call fcn.004031d0
lea ecx, [ebp - 0x268c]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
je 0x45760d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x26ec]
call fcn.00401c90
push eax
push 0x4e2f10
lea ecx, [ebp - 0x26f8]
call fcn.00401bf0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x268c]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f80]
push eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2760]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0
push 0x71
push dword [eax + 0xa8]
call fcn.004426b0
mov esi, eax
cmp esi, 0xffffffff
je 0x45760d
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x268c]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f80]
push eax
push 0
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2034]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x26f8]
call fcn.00401c90
push eax
push 0x71
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0x4e2af4
lea ecx, [ebp - 0x268c]
call fcn.00401c90
mov esi, dword [ebp - 0x6f80]
mov ecx, esi
push eax
push 0x4e17a0
call fcn.00401c90
push eax
push 0x4e2f6c
lea ecx, [ebp - 0x26ec]
call fcn.00401c90
push eax
push 0x4cdb98
lea ecx, [ebp - 0x2760]
call fcn.00401c90
push eax
push 0x4e2f90
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
jmp 0x457613
mov esi, dword [ebp - 0x6f80]
lea eax, [ebp - 0x2a40]
push eax
lea eax, [ebp - 0x6f28]
push eax
lea ecx, [ebp - 0x251c]
call fcn.0040f980
test al, al
jne 0x457310
lea ecx, [ebp - 0x4a78]
call fcn.004013e0
test al, al
jne 0x457200
lea ecx, [ebp - 0x4a78]
call fcn.00401330
lea ecx, [ebp - 0x268c]
call fcn.00401ad0
lea ecx, [ebp - 0x26f8]
call fcn.00401ad0
lea ecx, [ebp - 0x2760]
call fcn.00401ad0
lea ecx, [ebp - 0x26ec]
mov byte [ebp - 4], 0x74
call fcn.00401ad0
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f80], esi
mov dword [ebp - 0x6f5c], eax
cmp eax, dword [edi + 0x30]
jb 0x4570e1
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x458da0
push 0
push 0x4e2fc0
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x6d9c]
push 1
push 0
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6da4], eax
mov dword [ebp - 0x6da0], 0x72
call fcn.00401980
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0x7c
call fcn.00401c90
lea ecx, [edi + 0x14c]
mov dword [ebp - 0x6d90], eax
mov dword [ebp - 0x6d8c], 0
call fcn.00401c90
mov dword [ebp - 0x6d88], eax
lea ecx, [ebp - 0x6d7c]
lea eax, [ebp - 0x1fd4]
push 1
mov dword [ebp - 0x6d84], eax
mov eax, dword [edi + 4]
push 0x4e3010
mov dword [ebp - 0x6d80], eax
call fcn.00401980
push 0xc
lea ecx, [ebp - 0x224c]
mov byte [ebp - 4], 0x7d
call fcn.00404370
lea ecx, [ebp - 0x224c]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x220c]
mov byte [ebp - 4], 0x7e
call fcn.00404370
lea ecx, [ebp - 0x220c]
call fcn.00401930
mov ecx, edi
mov byte [ebp - 4], 0x7f
call fcn.0046f9d0
test al, al
jne 0x458d7f
xor esi, esi
mov dword [ebp - 0x6f70], esi
cmp dword [edi + 0x30], esi
jbe 0x457937
nop dword [eax]
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x457937
push esi
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401b50
cmp eax, 3
jl 0x457927
lea eax, [ebp - 0x6d9c]
push eax
push 1
lea ecx, [ebp - 0x2154]
call fcn.00401c90
push dword [ebp - 0x6f70]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.00476390
mov ecx, eax
call fcn.00401c90
mov edx, esi
mov ecx, eax
call fcn.004326e0
mov esi, dword [ebp - 0x6f70]
test al, al
je 0x457927
push esi
lea ecx, [edi + 0x114]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24ec]
mov dword [ebp - 0x6d8c], eax
call fcn.00401c90
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x224c]
call fcn.00401bf0
lea ecx, [ebp - 0x224c]
call fcn.00401c90
mov ecx, eax
call fcn.0040e810
test al, al
je 0x457927
lea ecx, [ebp - 0x224c]
call fcn.00401c90
push eax
lea eax, [ebp - 0x6da4]
mov ecx, edi
push eax
call fcn.0044e820
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x457937
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25a8]
call fcn.00401c90
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x224c]
call fcn.00401bf0
lea ecx, [ebp - 0x224c]
call fcn.00401c90
mov ecx, eax
call fcn.0040e810
test al, al
je 0x457927
push 0
lea ecx, [ebp - 0x224c]
call fcn.00401f20
lea ecx, [ebp - 0x224c]
call fcn.00401c90
push eax
lea eax, [ebp - 0x6da4]
mov ecx, edi
push eax
call fcn.0044e820
inc esi
mov dword [ebp - 0x6f70], esi
cmp esi, dword [edi + 0x30]
jb 0x4577a0
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x458d7f
lea ecx, [ebp - 0x2650]
mov dword [ebp - 0x6d8c], 0x4db8f0
call fcn.00401c90
push eax
lea eax, [ebp - 0x6da4]
mov ecx, edi
push eax
call fcn.0044e820
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x458d7f
lea eax, [ebp - 0x265c]
push eax
lea ecx, [ebp - 0x224c]
call fcn.00401a10
push 0
lea ecx, [ebp - 0x224c]
call fcn.00401f20
lea ecx, [ebp - 0x224c]
call fcn.00401c90
push eax
lea eax, [ebp - 0x6da4]
mov ecx, edi
push eax
call fcn.0044e820
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x458d7f
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x457a2a
mov eax, dword [ebp - 0x6f6c]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f5c], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3030
push esi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push str.HKU_
call fcn.00401bf0
add dword [ebp - 0x6f5c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x4579e0
mov esi, dword [ebp - 0x6f6c]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e30c0
push dword [ebp - 0x6f9c]
lea ecx, [esi + eax*4]
call fcn.00401bf0
cmp byte [ebp - 0x6f45], 0
je 0x457a91
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e30c0
push dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00401bf0
cmp dword [ebp - 0x6f7c], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x457c9c
mov eax, dword [ebp - 0x6f6c]
mov esi, dword [ebp - 0x6f78]
sub eax, esi
mov dword [ebp - 0x6f5c], eax
nop dword [eax]
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x457c7a
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x457c9c
lea eax, [ebp - 0x220c]
push eax
push 0x4c975c
lea ecx, [ebp - 0x1f74]
call fcn.00406580
test al, al
je 0x457c7a
push 0
push 1
push 1
push 0
push 0x4e314c
lea ecx, [ebp - 0x220c]
call fcn.00402c80
lea ecx, [ebp - 0x220c]
mov dword [ebp - 0x6f4c], eax
call fcn.00401b50
mov edx, dword [ebp - 0x6f4c]
lea ecx, [edx + 0xa]
cmp eax, ecx
jle 0x457c7a
lea eax, [edx + 0xb]
push eax
lea ecx, [ebp - 0x220c]
call fcn.00402bd0
push 3
lea ecx, [ebp - 0x220c]
call fcn.00403700
lea ecx, [ebp - 0x220c]
call fcn.00401f90
test al, al
jne 0x457c7a
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e09a4
lea ecx, [ebp - 0x220c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x457c7a
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x220c]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dcf68
push 0
push 0x72
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x457c7a
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push 0
lea ecx, [esi + ecx]
call fcn.00401c90
push eax
push 0x72
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x220c]
call fcn.00401c90
push eax
push 0x4e3168
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
cmp eax, dword [ebp - 0x6f7c]
mov dword [ebp - 0x6f8c], eax
mov eax, dword [ebp - 0x6f5c]
jb 0x457ac0
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x458d7f
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x457d10
mov eax, dword [ebp - 0x6f6c]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f5c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e31c0
push esi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push str.HKU_
call fcn.00401bf0
add dword [ebp - 0x6f5c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x457cc6
mov esi, dword [ebp - 0x6f6c]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3208
push dword [ebp - 0x6f9c]
lea ecx, [esi + eax*4]
call fcn.00401bf0
cmp byte [ebp - 0x6f45], 0
je 0x457d77
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e3208
push dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00401bf0
push 0
push 0x4e324c
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov esi, dword [ebp - 0x6f7c]
mov dword [ebp - 0x6f5c], 0
test esi, esi
je 0x457fd3
mov eax, dword [ebp - 0x6f6c]
mov esi, dword [ebp - 0x6f78]
sub eax, esi
mov dword [ebp - 0x6f8c], eax
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x457fcd
mov ecx, dword [ebp - 0x6f8c]
push 0
add ecx, esi
push 0x20019
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
lea eax, [ebp - 0x2000]
push eax
push 0x4dd11c
lea ecx, [ebp - 0x1f74]
call fcn.00406580
test al, al
je 0x457fb1
lea eax, [ebp - 0x218c]
mov dword [ebp - 0x218c], 0
push eax
push 0x4dd1bc
lea ecx, [ebp - 0x1f74]
call fcn.004066c0
test al, al
je 0x457e35
cmp dword [ebp - 0x218c], 0
jne 0x457fb1
push 0
push 1
push 1
push 0
push 0x4e2a1c
lea ecx, [ebp - 0x2000]
call fcn.00402c80
test eax, eax
jne 0x457fb1
push eax
push 1
push 1
push eax
push 0x4e2a3c
lea ecx, [ebp - 0x2000]
call fcn.00402c80
test eax, eax
jne 0x457fb1
push eax
push 1
push 1
push eax
push 0x4e2a8c
lea ecx, [ebp - 0x2000]
call fcn.00402c80
test eax, eax
jne 0x457fb1
push eax
push 1
push 1
push eax
push 0x4e2a70
lea ecx, [ebp - 0x2000]
call fcn.00402c80
test eax, eax
jne 0x457fb1
push eax
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e328c
lea ecx, [ebp - 0x2000]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x457fb1
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2000]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dd11c
push 0
push 0x74
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x457fb1
push 0
push 0
push 0
push 0
push 0
push 0x4dd11c
mov ecx, esi
call fcn.00401c90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
lea ecx, [esi + ecx]
call fcn.00401c90
push eax
push 0x74
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x2000]
call fcn.00401c90
push eax
push 0x4e32c8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f5c], eax
cmp eax, dword [ebp - 0x6f7c]
jb 0x457db5
mov esi, dword [ebp - 0x6f7c]
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x458d7f
push 0xc
lea ecx, [ebp - 0x2698]
call fcn.00404370
lea ecx, [ebp - 0x2698]
call fcn.00401930
mov byte [ebp - 4], 0x80
mov dword [ebp - 0x6f5c], 0
test esi, esi
je 0x4582ab
mov eax, dword [ebp - 0x6f6c]
mov esi, dword [ebp - 0x6f78]
sub eax, esi
mov dword [ebp - 0x6f8c], eax
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x4582a5
mov ecx, dword [ebp - 0x6f8c]
push 0
add ecx, esi
push 0x20019
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
lea eax, [ebp - 0x2000]
push eax
push 0x4dd25c
lea ecx, [ebp - 0x1f74]
call fcn.00406580
test al, al
je 0x458289
lea eax, [ebp - 0x218c]
mov dword [ebp - 0x218c], 0
push eax
push 0x4dd35c
lea ecx, [ebp - 0x1f74]
call fcn.004066c0
test al, al
je 0x4580a4
cmp dword [ebp - 0x218c], 0
je 0x458289
push 0
push 1
push 1
push 0
push 0x4e2a1c
lea ecx, [ebp - 0x2000]
call fcn.00402c80
test eax, eax
jne 0x458289
push eax
push 1
push 1
push eax
push 0x4e2a3c
lea ecx, [ebp - 0x2000]
call fcn.00402c80
test eax, eax
jne 0x458289
push eax
push 1
push 1
push eax
push 0x4e2a8c
lea ecx, [ebp - 0x2000]
call fcn.00402c80
test eax, eax
jne 0x458289
push eax
push 1
push 1
push eax
push 0x4e2a70
lea ecx, [ebp - 0x2000]
call fcn.00402c80
test eax, eax
jne 0x458289
push eax
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e328c
lea ecx, [ebp - 0x2000]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x458289
lea eax, [ebp - 0x2698]
push eax
push 0x4dd328
lea ecx, [ebp - 0x1f74]
call fcn.00406580
test al, al
je 0x458289
lea ecx, [ebp - 0x2698]
call fcn.00401f90
test al, al
jne 0x458289
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3318
lea ecx, [ebp - 0x2698]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x220c]
call fcn.00401bf0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2000]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x220c]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0
push 0x74
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x458289
push 0
push 0
push 0
push 0
push 0
push 0x4dd25c
mov ecx, esi
call fcn.00401c90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
lea ecx, [esi + ecx]
call fcn.00401c90
push eax
push 0x74
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x2000]
call fcn.00401c90
push eax
push 0x4e3340
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f5c], eax
cmp eax, dword [ebp - 0x6f7c]
jb 0x458024
mov esi, dword [ebp - 0x6f7c]
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x458d74
mov dword [ebp - 0x6f8c], 0
test esi, esi
je 0x45851d
mov eax, dword [ebp - 0x6f6c]
mov esi, dword [ebp - 0x6f78]
sub eax, esi
mov dword [ebp - 0x6f5c], eax
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45851d
mov ecx, dword [ebp - 0x6f5c]
push 0
add ecx, esi
push 0x20019
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x458501
lea eax, [ebp - 0x218c]
mov dword [ebp - 0x218c], 0
push eax
push 0x4e33a0
lea ecx, [ebp - 0x1f74]
call fcn.004066c0
test al, al
je 0x458501
cmp dword [ebp - 0x218c], 4
jne 0x458501
mov ecx, dword [ebp - 0x6f5c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e33c4
lea ecx, [esi + ecx]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00401bf0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x458501
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f50], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.00406830
test al, al
je 0x458501
nop dword [eax]
lea eax, [ebp - 0x2000]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f74]
call fcn.00406580
test al, al
je 0x4584d9
lea ecx, [ebp - 0x2000]
call fcn.00401f90
test al, al
jne 0x4584d9
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2000]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dd518
push 0
push 0x74
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x4584d9
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
mov ecx, esi
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push 0
lea ecx, [esi + ecx]
call fcn.00401c90
push eax
push 0x74
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x2000]
call fcn.00401c90
push eax
push 0x4e33f0
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
mov eax, dword [ebp - 0x6f50]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f50], eax
call fcn.00406830
test al, al
jne 0x4583d0
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [ebp - 0x6f7c]
jb 0x4582e0
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x458d74
push 0
push 0x4e3438
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f5c], 0
jbe 0x45892d
mov esi, dword [ebp - 0x6f78]
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45892d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2980
lea ecx, [ebp - 0x2154]
call fcn.00401c90
push eax
push dword [ebp - 0x6f5c]
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x20d8]
call fcn.00401bf0
push 0x260
lea ecx, [ebp - 0x4818]
call fcn.00408820
push 1
lea ecx, [ebp - 0x20d8]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x4818]
call fcn.004012e0
push 3
lea ecx, [ebp - 0x20d8]
mov byte [ebp - 4], 0x81
call fcn.00402b90
lea ecx, [ebp - 0x4818]
call fcn.00401420
test al, al
je 0x458905
nop dword [eax + eax]
push 1
lea ecx, [ebp - 0x4818]
call fcn.00401480
push eax
lea ecx, [ebp - 0x2034]
call fcn.00401a00
push 0x4e29bc
lea ecx, [ebp - 0x2034]
call fcn.00401a70
test al, al
je 0x45864e
push 0
push 1
push 1
push 0
push 0x4e29cc
lea ecx, [ebp - 0x2034]
call fcn.00402c80
cmp eax, 1
jne 0x4588f2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e29e0
push 1
lea ecx, [ebp - 0x4818]
call fcn.00401480
push eax
lea ecx, [ebp - 0x20d8]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2034]
call fcn.00401bf0
lea ecx, [ebp - 0x2034]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
je 0x4587a0
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e2180
push 0x4dd61c
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x4587a0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2034]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dd61c
push 0
push 0x73
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x4588f2
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2034]
call fcn.00401c90
push eax
push 0
push 0x73
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e3470
lea ecx, [ebp - 0x2034]
call fcn.00401c90
push eax
push 0x4e21bc
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
push 0x4dd61c
push 0x4e34a8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e2180
push 0x4dd718
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x4588f2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e34cc
push 1
lea ecx, [ebp - 0x4818]
call fcn.00401480
push eax
lea ecx, [ebp - 0x20d8]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2034]
call fcn.00401bf0
lea ecx, [ebp - 0x2034]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
je 0x4588f2
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2034]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dd718
push 0
push 0x73
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x4588f2
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2034]
call fcn.00401c90
push eax
push 0
push 0x73
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e3470
lea ecx, [ebp - 0x2034]
call fcn.00401c90
push eax
push 0x4e21bc
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
push 0x4dd718
push 0x4e34a8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
lea ecx, [ebp - 0x4818]
call fcn.004013e0
test al, al
jne 0x458600
lea ecx, [ebp - 0x4818]
mov byte [ebp - 4], 0x80
call fcn.00401330
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f5c], eax
cmp eax, dword [edi + 0x30]
jb 0x458558
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x458d74
lea eax, [ebp - 0x22a0]
push eax
lea ecx, [ebp - 0x2034]
call fcn.00401a10
push 1
lea ecx, [ebp - 0x2034]
call fcn.00401f20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e34e8
lea ecx, [ebp - 0x2034]
call fcn.00402f30
lea ecx, [ebp - 0x2034]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
je 0x458b24
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e2180
push 0x4dd7e8
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x458b24
push 0
lea ecx, [ebp - 0x2034]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x251c]
call fcn.0040ef20
test al, al
je 0x458b24
lea eax, [ebp - 0x2a08]
push eax
push 0x4cb90c
push 0x4e2a08
lea ecx, [ebp - 0x251c]
call fcn.0040f5e0
test al, al
jne 0x458a67
lea eax, [ebp - 0x2a08]
push eax
push 0x4cb90c
push 0x4e2b48
lea ecx, [ebp - 0x251c]
call fcn.0040f5e0
test al, al
jne 0x458a67
lea eax, [ebp - 0x2a08]
push eax
push 0x4cb90c
push 0x4dcda0
lea ecx, [ebp - 0x251c]
call fcn.0040f5e0
test al, al
jne 0x458a67
lea eax, [ebp - 0x2a08]
push eax
push 0x4cb90c
push 0x4e2ec0
lea ecx, [ebp - 0x251c]
call fcn.0040f5e0
test al, al
je 0x458b24
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2034]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4db8f0
push 0x4dd7e8
push 0
push 0x73
push dword [eax + 0xa8]
call fcn.004426b0
mov esi, eax
cmp esi, 0xffffffff
je 0x458b24
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4db8f0
lea ecx, [ebp - 0x2034]
call fcn.00401c90
push eax
push 0
push 0x73
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
lea ecx, [ebp - 0x2034]
call fcn.00401c90
push eax
push 0x4e21bc
push 0x4e1844
push 0x4e3510
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e2180
push 0x4dd8e8
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x458d74
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x458bb0
mov eax, dword [ebp - 0x6f6c]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f5c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e31c0
push esi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push str.HKU_
call fcn.00401bf0
add dword [ebp - 0x6f5c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x458b66
mov esi, dword [ebp - 0x6f6c]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e31c0
push dword [ebp - 0x6f9c]
lea ecx, [esi + eax*4]
call fcn.00401bf0
cmp byte [ebp - 0x6f45], 0
je 0x458c17
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e31c0
push dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00401bf0
cmp dword [ebp - 0x6f7c], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x458d61
mov eax, dword [ebp - 0x6f78]
sub eax, esi
mov dword [ebp - 0x6f5c], eax
nop dword [eax]
mov ecx, esi
call fcn.00401c90
xor edx, edx
mov ecx, eax
call fcn.00408000
test al, al
je 0x458d45
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x458d61
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
lea ecx, [ecx + esi]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dd8e8
push 0
push 0x73
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x458d45
mov ecx, dword [ebp - 0x6f5c]
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ecx + esi]
call fcn.00401c90
push eax
push 0
mov ecx, esi
call fcn.00401c90
push eax
push 0x73
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e3470
mov ecx, esi
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push 0x4e21bc
lea ecx, [ecx + esi]
call fcn.00401c90
push eax
push 0x4e0b14
push 0x4dd8e8
push 0x4e34a8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [ebp - 0x6f7c]
jb 0x458c40
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.0041f020
lea ecx, [ebp - 0x2698]
call fcn.00401ad0
lea ecx, [ebp - 0x220c]
call fcn.00401ad0
lea ecx, [ebp - 0x224c]
call fcn.00401ad0
lea ecx, [ebp - 0x6da4]
call fcn.0046a2d0
lea ecx, [ebp - 0x251c]
call fcn.0042bbe0
lea ecx, [ebp - 0x22a0]
call fcn.00401ad0
lea ecx, [ebp - 0x2000]
call fcn.00401ad0
lea ecx, [ebp - 0x23b0]
call fcn.00401ad0
lea ecx, [ebp - 0x2034]
call fcn.00401ad0
lea ecx, [ebp - 0x20d8]
mov byte [ebp - 4], 0x45
call fcn.00401ad0
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45c1bd
test dword [edi + 0x34], 0x1000
jne 0x45c1bd
push 0
push 0x4e3568
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x4e35a8
push dword [eax + 0x38]
call fcn.0041d990
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x28
push dword [eax + 0x34]
call fcn.0041ff10
mov eax, dword [edi + 0x30]
xor esi, esi
mov dword [ebp - 0x6ff0], 0x4e35e4
mov dword [ebp - 0x6fec], 0x4e35f4
mov dword [ebp - 0x6fe8], 0x4e3604
mov dword [ebp - 0x6fe4], 0x4e361c
mov dword [ebp - 0x6fe0], 0x4e3630
mov dword [ebp - 0x6fdc], 0x4d3ad8
mov dword [ebp - 0x6fd8], 0x4e2a58
mov dword [ebp - 0x6fd4], 0x4e2a8c
mov dword [ebp - 0x6fc0], 0x4dd9b4
mov dword [ebp - 0x6fbc], 0x4dd9f0
mov dword [ebp - 0x6fb8], 0x4dd9d8
mov dword [ebp - 0x6fb4], 0x4d3ac0
mov dword [ebp - 0x6fb0], 0x4dda74
mov dword [ebp - 0x6fac], 0x4ddaf4
test eax, eax
je 0x458f2a
mov eax, dword [ebp - 0x6f6c]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f5c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d3a68
push esi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push str.HKU_
call fcn.00401bf0
add dword [ebp - 0x6f5c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x458ee0
mov esi, dword [ebp - 0x6f6c]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3648
push dword [ebp - 0x6f9c]
lea ecx, [esi + eax*4]
call fcn.00401bf0
cmp byte [ebp - 0x6f45], 0
je 0x458f91
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e3648
push dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00401bf0
push 0xc
lea ecx, [ebp - 0x201c]
call fcn.00404370
lea ecx, [ebp - 0x201c]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2398]
mov byte [ebp - 4], 0x82
call fcn.00404370
lea ecx, [ebp - 0x2398]
call fcn.00401930
mov byte [ebp - 4], 0x83
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.0041f020
push 0
push 0x4e36a0
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov esi, dword [ebp - 0x6f7c]
mov dword [ebp - 0x6f8c], 0
test esi, esi
je 0x459231
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6f6c]
sub eax, esi
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f4c], eax
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45922b
mov eax, dword [ebp - 0x6f4c]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f5c], eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x459209
xor eax, eax
mov dword [ebp - 0x6f50], eax
nop word [eax + eax]
lea ecx, [ebp - 0x201c]
push ecx
push dword [ebp + eax*4 - 0x6fc0]
lea ecx, [ebp - 0x1f74]
call fcn.00406580
test al, al
je 0x4591ed
lea ecx, [ebp - 0x201c]
call fcn.00401f90
test al, al
jne 0x4591ed
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e36fc
lea ecx, [ebp - 0x201c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x4591ed
xor esi, esi
push 0
push 1
push 1
push 0
push dword [ebp + esi*4 - 0x6ff0]
lea ecx, [ebp - 0x201c]
call fcn.00402c80
dec eax
cmp eax, 0x10
jbe 0x4591ed
inc esi
cmp esi, 8
jb 0x4590d4
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x201c]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.00401c90
push eax
mov eax, dword [ebp - 0x6f50]
mov ecx, edi
mov esi, dword [ebp + eax*4 - 0x6fc0]
mov eax, dword [edi + 8]
push esi
push 1
push 0x1f
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f70], eax
cmp eax, 0xffffffff
je 0x4591ed
push 0
push 0
push 0
lea ecx, [ebp - 0x201c]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
push esi
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push 0
call fcn.00401c90
push eax
push 0x1f
push dword [ebp - 0x6f70]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
lea ecx, [ebp - 0x201c]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x4e3720
call fcn.00401c90
push eax
push 0x4e0b14
push esi
push 0x4e1750
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
mov eax, dword [ebp - 0x6f50]
inc eax
mov dword [ebp - 0x6f50], eax
cmp eax, 6
jb 0x459070
mov esi, dword [ebp - 0x6f40]
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [ebp - 0x6f7c]
jb 0x459020
mov esi, dword [ebp - 0x6f7c]
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45c1a3
push 0x18
lea ecx, [ebp - 0x2674]
call fcn.00404e90
lea ecx, [ebp - 0x2674]
call fcn.00403ff0
mov byte [ebp - 4], 0x84
mov dword [ebp - 0x6f8c], 0
test esi, esi
je 0x459512
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6f6c]
sub eax, esi
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f4c], eax
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x459512
mov eax, dword [ebp - 0x6f4c]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f5c], eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
lea ecx, [ebp - 0x1f74]
call fcn.00404160
test eax, eax
je 0x4594f0
lea eax, [ebp - 0x201c]
push eax
push 0x4d3b84
lea ecx, [ebp - 0x1f74]
call fcn.00406580
test al, al
je 0x4594f0
push 1
push 0x4ca9d0
lea ecx, [ebp - 0x201c]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2674]
call fcn.004041c0
lea ecx, [ebp - 0x2674]
mov dword [ebp - 0x6f50], 0
call fcn.00404160
test eax, eax
je 0x4594f0
nop dword [eax]
push dword [ebp - 0x6f50]
lea ecx, [ebp - 0x2674]
call fcn.00404150
push eax
lea ecx, [ebp - 0x201c]
call fcn.00401a00
lea ecx, [ebp - 0x201c]
call fcn.00401f90
test al, al
jne 0x4594d3
mov byte [ebp - 0x6f51], 1
xor esi, esi
nop dword [eax]
push 0
push 1
push 1
push 0
push dword [ebp + esi*4 - 0x6ff0]
lea ecx, [ebp - 0x201c]
call fcn.00402c80
dec eax
mov ecx, 0x10
cmp ecx, eax
lea ecx, [edi + 0x14c]
push 0
sbb al, al
and byte [ebp - 0x6f51], al
call fcn.00401c90
push eax
push 0x4e36fc
lea ecx, [ebp - 0x201c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x4594cd
cmp byte [ebp - 0x6f51], al
je 0x4594cd
inc esi
cmp esi, 7
jb 0x459370
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x201c]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4d3b84
push 1
push 0x1f
push dword [eax + 0xa8]
call fcn.004426b0
mov esi, eax
cmp esi, 0xffffffff
je 0x4594cd
push 0
push 0
lea ecx, [ebp - 0x201c]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x201c]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
push 0x4d3b84
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push 0
call fcn.00401c90
push eax
push 0x1f
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
lea ecx, [ebp - 0x201c]
call fcn.00401c90
mov esi, dword [ebp - 0x6f40]
mov ecx, esi
push eax
push 0x4e3720
call fcn.00401c90
push eax
push 0x4e0b14
push 0x4d3b84
push 0x4e1750
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
jmp 0x4594d3
mov esi, dword [ebp - 0x6f40]
inc dword [ebp - 0x6f50]
lea ecx, [ebp - 0x2674]
call fcn.00404160
cmp dword [ebp - 0x6f50], eax
jb 0x459330
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [ebp - 0x6f7c]
jb 0x459288
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45c198
push 4
lea ecx, [ebp - 0x1fe4]
call fcn.00404590
lea ecx, [ebp - 0x1fe4]
call fcn.00404ea0
push 4
lea ecx, [ebp - 0x2084]
mov byte [ebp - 4], 0x85
call fcn.00404590
lea ecx, [ebp - 0x2084]
call fcn.00404ea0
mov byte [ebp - 4], 0x86
xor esi, esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x4595be
mov eax, dword [ebp - 0x6f6c]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f5c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d3f10
push esi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push str.HKU_
call fcn.00401bf0
add dword [ebp - 0x6f5c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x459574
mov esi, dword [ebp - 0x6f6c]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3738
push dword [ebp - 0x6f9c]
lea ecx, [esi + eax*4]
call fcn.00401bf0
cmp byte [ebp - 0x6f45], 0
je 0x459625
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e3738
push dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00401bf0
push 0xc
lea ecx, [ebp - 0x2108]
call fcn.00404370
lea ecx, [ebp - 0x2108]
call fcn.00401930
push 0
push 0x4e37a0
lea ecx, [ebp - 0x1fd4]
mov byte [ebp - 4], 0x87
call fcn.0040d1b0
cmp dword [ebp - 0x6f7c], 0
mov dword [ebp - 0x6f5c], 0
jbe 0x459982
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6f6c]
sub eax, esi
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f8c], eax
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x459982
mov ecx, dword [ebp - 0x6f8c]
push 0
add ecx, esi
push 0x20019
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x459960
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f50], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.004067b0
test al, al
je 0x459960
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [esi + ecx]
push 0x4c9754
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00401bf0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fe4]
call fcn.004063e0
test al, al
je 0x459938
lea eax, [ebp - 0x2108]
push eax
push 0x4cdebc
lea ecx, [ebp - 0x1fe4]
call fcn.00406580
push 0
lea ecx, [ebp - 0x2108]
call fcn.00401ac0
cmp word [eax], 0x40
jne 0x4597ab
push 0
lea ecx, [ebp - 0x2108]
call fcn.00401c90
push eax
push 0x80
lea ecx, [ebp - 0x2108]
call fcn.00402200
push 0
push 0x80
lea ecx, [ebp - 0x2108]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2108]
call fcn.00401c90
push eax
call dword [0x4a94a0]
lea eax, [ebp - 0x201c]
push eax
push 0x4d5e38
lea ecx, [ebp - 0x1fe4]
call fcn.00406580
lea ecx, [ebp - 0x2108]
call fcn.00401f90
test al, al
je 0x4597e4
lea ecx, [ebp - 0x201c]
call fcn.00401f90
test al, al
jne 0x459938
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e37f4
lea ecx, [ebp - 0x201c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x459938
xor esi, esi
push 0
push 1
push 1
push 0
push dword [ebp + esi*4 - 0x6ff0]
lea ecx, [ebp - 0x201c]
call fcn.00402c80
dec eax
cmp eax, 0x10
jbe 0x459932
inc esi
cmp esi, 7
jb 0x459814
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x201c]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2108]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x20
push dword [eax + 0xa8]
call fcn.004426b0
mov esi, eax
cmp esi, 0xffffffff
je 0x459932
push 0
push 0
push 0
lea ecx, [ebp - 0x201c]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
push 0
call fcn.00401c90
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
push 0x20
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
lea ecx, [ebp - 0x201c]
call fcn.00401c90
mov esi, dword [ebp - 0x6f40]
mov ecx, esi
push eax
push 0x4e3720
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x2108]
call fcn.00401c90
push eax
push 0x4e1750
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
jmp 0x459938
mov esi, dword [ebp - 0x6f40]
mov eax, dword [ebp - 0x6f50]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f50], eax
call fcn.004067b0
test al, al
jne 0x4596e1
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f5c], eax
cmp eax, dword [ebp - 0x6f7c]
jb 0x459684
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45c177
push 0
push 0x4e381c
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
push 0xc
lea ecx, [ebp - 0x20b4]
call fcn.00404370
lea ecx, [ebp - 0x20b4]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2344]
mov byte [ebp - 4], 0x88
call fcn.00404370
lea ecx, [ebp - 0x2344]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x20f0]
mov byte [ebp - 4], 0x89
call fcn.00404370
lea ecx, [ebp - 0x20f0]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x21e4]
mov byte [ebp - 4], 0x8a
call fcn.00404370
lea ecx, [ebp - 0x21e4]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2338]
mov byte [ebp - 4], 0x8b
call fcn.00404370
lea ecx, [ebp - 0x2338]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x20c0]
mov byte [ebp - 4], 0x8c
call fcn.00404370
lea ecx, [ebp - 0x20c0]
call fcn.00401930
push 0xfc8
lea ecx, [ebp - 0x6880]
mov byte [ebp - 4], 0x8d
call fcn.0040a150
lea ecx, [ebp - 0x6880]
call fcn.00408290
mov byte [ebp - 4], 0x8e
xor esi, esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x459acf
mov eax, dword [ebp - 0x6f6c]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f5c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4ddf00
push esi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push str.HKU_
call fcn.00401bf0
add dword [ebp - 0x6f5c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x459a85
mov esi, dword [ebp - 0x6f6c]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4de1d0
push dword [ebp - 0x6f9c]
lea ecx, [esi + eax*4]
call fcn.00401bf0
cmp byte [ebp - 0x6f45], 0
je 0x459b36
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4de1d0
push dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00401bf0
cmp dword [ebp - 0x6f7c], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x45a047
mov eax, dword [ebp - 0x6f6c]
mov esi, dword [ebp - 0x6f78]
sub eax, esi
mov dword [ebp - 0x6f4c], eax
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45a047
mov ecx, dword [ebp - 0x6f4c]
push 1
lea ecx, [esi + ecx]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00401ba0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x45a02b
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f50], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.00406830
test al, al
je 0x45a02b
nop dword [eax + eax]
mov ecx, dword [ebp - 0x6cb4]
call fcn.00407a10
test al, al
je 0x45a003
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [edi + 0x314]
push 0x4e385c
call fcn.00401c90
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00401bf0
lea ecx, [ebp - 0x20c0]
call fcn.00401c90
xor edx, edx
mov ecx, eax
call fcn.00408000
test al, al
jne 0x45a003
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00401bf0
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x20c0]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2344]
call fcn.00402c80
test eax, eax
jne 0x45a003
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2344]
call fcn.00402f30
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x2338]
call fcn.00401a00
lea eax, [ebp - 0x20b4]
mov ecx, edi
push eax
lea eax, [ebp - 0x20f0]
push eax
lea eax, [ebp - 0x2338]
push eax
call fcn.0046a3c0
lea ecx, [ebp - 0x20f0]
call fcn.00401f90
test al, al
je 0x459d06
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x20f0]
call fcn.00401a00
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e3874
lea ecx, [ebp - 0x20f0]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x45a003
push 0
push 1
push 1
push 0
push 0x4e3888
lea ecx, [ebp - 0x20f0]
call fcn.00402c80
cmp eax, 1
je 0x45a003
push 0
push 1
push 1
push 0
push 0x4e38a4
lea ecx, [ebp - 0x20f0]
call fcn.00402c80
cmp eax, 1
je 0x45a003
push 0
push 1
push 1
push 0
push 0x4c975c
lea ecx, [ebp - 0x20f0]
call fcn.00402c80
cmp eax, 1
je 0x45a003
lea ecx, [ebp - 0x20b4]
call fcn.00401f90
lea ecx, [ebp - 0x20b4]
test al, al
je 0x459db8
push 0x4e38c8
call fcn.00401a00
jmp 0x459dd8
push 0
push 0
push 0x4c975c
push 0x4ca048
call fcn.00403410
push 0
lea ecx, [ebp - 0x20b4]
call fcn.004020d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x4cd568
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2148]
call fcn.00401bf0
push 0
lea ecx, [ebp - 0x2148]
call fcn.00401c90
push eax
lea eax, [ebp - 0x20b4]
mov ecx, edi
push eax
call fcn.0046bd60
lea ecx, [ebp - 0x20b4]
call fcn.00401c90
push eax
push 0
call dword [0x4a981c]
test eax, eax
jne 0x45a003
lea ecx, [ebp - 0x20b4]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x6880]
call fcn.00408430
test al, al
je 0x459f08
push 0x4c975c
push str.CompanyName
lea ecx, [ebp - 0x6880]
call fcn.00408340
push eax
lea ecx, [ebp - 0x21e4]
call fcn.00401a00
push 0
push 1
push 1
push 0
push str.Microsoft
lea ecx, [ebp - 0x21e4]
call fcn.00402c80
cmp eax, 1
je 0x45a003
push 0
push 1
push 1
push 0
push 0x4e3924
lea ecx, [ebp - 0x21e4]
call fcn.00402c80
cmp eax, 1
je 0x45a003
push 0
push 1
push 1
push 0
push 0x4e3940
lea ecx, [ebp - 0x21e4]
call fcn.00402c80
cmp eax, 1
je 0x45a003
push 0
push 1
push 1
push 0
push 0x4d5eb0
lea ecx, [ebp - 0x21e4]
call fcn.00402c80
cmp eax, 1
je 0x45a003
push 0
lea ecx, [ebp - 0x20b4]
call fcn.00401c90
push eax
push 0
push 1
lea ecx, [ebp - 0x20b4]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x20f0]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x21
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f5c], eax
cmp eax, 0xffffffff
je 0x45a003
push 0
push dword [ebp - 0x6cb4]
mov ecx, esi
push 0
push 0
push 0
push 0
call fcn.00401c90
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
push 0x21
push dword [ebp - 0x6f5c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
lea ecx, [ebp - 0x20b4]
call fcn.00401c90
push eax
push 0x4e3968
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x20f0]
call fcn.00401c90
push eax
push 0x4e1750
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
mov eax, dword [ebp - 0x6f50]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f50], eax
call fcn.00406830
test al, al
jne 0x459be0
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [ebp - 0x6f7c]
jb 0x459b61
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45c12a
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x45a0bb
mov eax, dword [ebp - 0x6f6c]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f5c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dba28
push esi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push str.HKU_
call fcn.00401bf0
add dword [ebp - 0x6f5c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x45a071
mov esi, dword [ebp - 0x6f6c]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dba80
push dword [ebp - 0x6f9c]
lea ecx, [esi + eax*4]
call fcn.00401bf0
cmp byte [ebp - 0x6f45], 0
je 0x45a122
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4dba80
push dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00401bf0
cmp dword [ebp - 0x6f7c], 0
mov dword [ebp - 0x6fbc], 0x4e3980
mov dword [ebp - 0x6fb8], 0x4e39c0
mov dword [ebp - 0x6fb4], 0x4e39e0
mov dword [ebp - 0x6fb0], 0x4e39fc
mov dword [ebp - 0x6fac], 0x4e3a18
mov dword [ebp - 0x6f5c], 0
jbe 0x45a74f
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6f6c]
sub eax, esi
mov dword [ebp - 0x6f70], esi
mov dword [ebp - 0x6f4c], eax
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45a74f
mov dword [ebp - 0x6f50], 0
nop
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45a72d
mov eax, dword [ebp - 0x6f50]
mov ecx, dword [ebp - 0x6f4c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + eax*4 - 0x6fbc]
lea ecx, [esi + ecx]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00401bf0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x45a717
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f8c], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.004067b0
test al, al
je 0x45a717
nop word [eax + eax]
mov ecx, dword [ebp - 0x6cb4]
call fcn.00407a10
test al, al
je 0x45a6ef
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [edi + 0x314]
push 0x4e385c
call fcn.00401c90
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00401bf0
lea ecx, [ebp - 0x20c0]
call fcn.00401c90
xor edx, edx
mov ecx, eax
call fcn.00408000
test al, al
jne 0x45a6ef
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00401bf0
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x20c0]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2344]
call fcn.00402c80
test eax, eax
jne 0x45a6ef
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2344]
call fcn.00402f30
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x2338]
call fcn.00401a00
lea eax, [ebp - 0x20b4]
mov ecx, edi
push eax
lea eax, [ebp - 0x20f0]
push eax
lea eax, [ebp - 0x2338]
push eax
call fcn.0046a3c0
lea ecx, [ebp - 0x20f0]
call fcn.00401f90
lea ecx, [ebp - 0x20f0]
test al, al
je 0x45a36b
push dword [ebp - 0x6cb4]
call fcn.00401a00
jmp 0x45a42b
push 0
push 1
push 1
push 0
push 0x4e3888
call fcn.00402c80
cmp eax, 1
je 0x45a6ef
push 0
push 1
push 1
push 0
push 0x4e38a4
lea ecx, [ebp - 0x20f0]
call fcn.00402c80
cmp eax, 1
je 0x45a6ef
push 0
push 1
push 1
push 0
push 0x4e3a2c
lea ecx, [ebp - 0x20f0]
call fcn.00402c80
cmp eax, 1
je 0x45a6ef
push 0
push 1
push 1
push 0
push 0x4e3a48
lea ecx, [ebp - 0x20f0]
call fcn.00402c80
cmp eax, 1
je 0x45a6ef
push 0
push 1
push 1
push 0
push 0x4e3a70
lea ecx, [ebp - 0x20f0]
call fcn.00402c80
cmp eax, 1
je 0x45a6ef
push 0
push 1
push 1
push 0
push 0x4e3a90
lea ecx, [ebp - 0x20f0]
call fcn.00402c80
cmp eax, 1
je 0x45a6ef
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e3874
lea ecx, [ebp - 0x20f0]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x45a6ef
lea ecx, [ebp - 0x20b4]
call fcn.00401f90
lea ecx, [ebp - 0x20b4]
test al, al
je 0x45a47a
push 0x4e38c8
call fcn.00401a00
jmp 0x45a49a
push 0
push 0
push 0x4c975c
push 0x4ca048
call fcn.00403410
push 0
lea ecx, [ebp - 0x20b4]
call fcn.004020d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x4c9754
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2148]
call fcn.00401bf0
push 0
lea ecx, [ebp - 0x2148]
call fcn.00401c90
push eax
lea eax, [ebp - 0x20b4]
mov ecx, edi
push eax
call fcn.0046bd60
lea ecx, [ebp - 0x20b4]
call fcn.00401c90
push eax
push 0
call dword [0x4a981c]
test eax, eax
jne 0x45a6ef
lea ecx, [ebp - 0x20b4]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x6880]
call fcn.00408430
test al, al
je 0x45a5eb
push 0x4c975c
push str.CompanyName
lea ecx, [ebp - 0x6880]
call fcn.00408340
push eax
lea ecx, [ebp - 0x21e4]
call fcn.00401a00
push 0
push 1
push 1
push 0
push str.Microsoft
lea ecx, [ebp - 0x21e4]
call fcn.00402c80
cmp eax, 1
je 0x45a6ef
push 0
push 1
push 1
push 0
push 0x4e3924
lea ecx, [ebp - 0x21e4]
call fcn.00402c80
cmp eax, 1
je 0x45a6ef
push 0
push 1
push 1
push 0
push 0x4e3940
lea ecx, [ebp - 0x21e4]
call fcn.00402c80
cmp eax, 1
je 0x45a6ef
push 0
push 1
push 1
push 0
push 0x4e3ac0
lea ecx, [ebp - 0x21e4]
call fcn.00402c80
cmp eax, 1
je 0x45a6ef
push 0
push 1
push 1
push 0
push 0x4d5eb0
lea ecx, [ebp - 0x21e4]
call fcn.00402c80
cmp eax, 1
je 0x45a6ef
push 0
lea ecx, [ebp - 0x20b4]
call fcn.00401c90
push eax
push 0
push 1
lea ecx, [ebp - 0x20b4]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x20f0]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x21
push dword [eax + 0xa8]
call fcn.004426b0
mov esi, eax
cmp esi, 0xffffffff
je 0x45a6e9
mov ecx, dword [ebp - 0x6f70]
push 0
push dword [ebp - 0x6cb4]
push 0
push 0
push 0
push 0
call fcn.00401c90
push eax
lea ecx, [ebp - 0x20b4]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00401c90
push eax
push 0x21
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
lea ecx, [ebp - 0x20b4]
call fcn.00401c90
mov esi, dword [ebp - 0x6f70]
mov ecx, esi
push eax
push 0x4e3968
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x20f0]
call fcn.00401c90
push eax
push 0x4e1750
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
jmp 0x45a6ef
mov esi, dword [ebp - 0x6f70]
mov eax, dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f8c], eax
call fcn.004067b0
test al, al
jne 0x45a240
mov eax, dword [ebp - 0x6f50]
inc eax
mov dword [ebp - 0x6f50], eax
cmp eax, 5
jb 0x45a1a0
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f70], esi
mov dword [ebp - 0x6f5c], eax
cmp eax, dword [ebp - 0x6f7c]
jb 0x45a185
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45c12a
push 0
push 0x4e3ae0
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x6df8]
push 1
push 0x4d294c
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6e00], eax
mov dword [ebp - 0x6dfc], 0x23
call fcn.00401980
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0x8f
call fcn.00401c90
lea ecx, [edi + 0x14c]
mov dword [ebp - 0x6dec], eax
mov dword [ebp - 0x6de8], 0
call fcn.00401c90
mov dword [ebp - 0x6de4], eax
lea ecx, [ebp - 0x6dd8]
lea eax, [ebp - 0x1fd4]
push 1
mov dword [ebp - 0x6de0], eax
mov eax, dword [edi + 4]
push 0x4d2980
mov dword [ebp - 0x6ddc], eax
call fcn.00401980
push 0xc
lea ecx, [ebp - 0x2294]
mov byte [ebp - 4], 0x90
call fcn.00404370
lea ecx, [ebp - 0x2294]
call fcn.00401930
xor esi, esi
mov byte [ebp - 4], 0x91
cmp dword [edi + 0x30], esi
jbe 0x45a96c
nop dword [eax]
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45a96c
push esi
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401b50
cmp eax, 3
jl 0x45a962
push esi
lea ecx, [edi + 0x114]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24ec]
mov dword [ebp - 0x6de8], eax
call fcn.00401c90
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2294]
call fcn.00401bf0
lea ecx, [ebp - 0x2294]
call fcn.00401c90
mov ecx, eax
call fcn.0040e810
test al, al
je 0x45a962
lea ecx, [ebp - 0x2294]
call fcn.00401c90
push eax
lea eax, [ebp - 0x6e00]
mov ecx, edi
push eax
call fcn.0044e820
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45a96c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25a8]
call fcn.00401c90
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2294]
call fcn.00401bf0
lea ecx, [ebp - 0x2294]
call fcn.00401c90
mov ecx, eax
call fcn.0040e810
test al, al
je 0x45a962
push 0
lea ecx, [ebp - 0x2294]
call fcn.00401f20
lea ecx, [ebp - 0x2294]
call fcn.00401c90
push eax
lea eax, [ebp - 0x6e00]
mov ecx, edi
push eax
call fcn.0044e820
inc esi
cmp esi, dword [edi + 0x30]
jb 0x45a820
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45c114
lea ecx, [ebp - 0x2650]
mov dword [ebp - 0x6de8], 0x4db8f0
call fcn.00401c90
push eax
lea eax, [ebp - 0x6e00]
mov ecx, edi
push eax
call fcn.0044e820
mov ecx, edi
call fcn.0046f9d0
lea ecx, [ebp - 0x2294]
test al, al
jne 0x45c11a
lea eax, [ebp - 0x265c]
push eax
call fcn.00401a10
push 0
lea ecx, [ebp - 0x2294]
call fcn.00401f20
lea ecx, [ebp - 0x2294]
call fcn.00401c90
push eax
lea eax, [ebp - 0x6e00]
mov ecx, edi
push eax
call fcn.0044e820
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45c114
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x45aa5b
mov eax, dword [ebp - 0x6f6c]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f5c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3b28
push esi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push str.HKU_
call fcn.00401bf0
add dword [ebp - 0x6f5c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x45aa11
mov esi, dword [ebp - 0x6f6c]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3bb0
push dword [ebp - 0x6f9c]
lea ecx, [esi + eax*4]
call fcn.00401bf0
cmp byte [ebp - 0x6f45], 0
je 0x45aac2
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e3bb0
push dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00401bf0
mov edx, dword [ebp - 0x6f7c]
test edx, edx
je 0x45acb1
mov eax, dword [ebp - 0x6f6c]
mov esi, dword [ebp - 0x6f78]
sub eax, esi
mov dword [ebp - 0x6f5c], eax
mov dword [ebp - 0x6f8c], edx
nop word [eax + eax]
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x45ac9b
lea eax, [ebp - 0x20c0]
push eax
push 0x4c975c
lea ecx, [ebp - 0x1f74]
call fcn.00406580
test al, al
je 0x45ac9b
push 0
push 1
push 1
push 0
push 0x4e3c38
lea ecx, [ebp - 0x20c0]
call fcn.00402c80
lea ecx, [ebp - 0x20c0]
mov dword [ebp - 0x6f4c], eax
call fcn.00401b50
mov edx, dword [ebp - 0x6f4c]
lea ecx, [edx + 0xc]
cmp eax, ecx
jle 0x45ac9b
lea eax, [edx + 0xd]
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00402bd0
push 3
lea ecx, [ebp - 0x20c0]
call fcn.00403700
lea ecx, [ebp - 0x20c0]
call fcn.00401f90
test al, al
jne 0x45ac9b
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e0a64
lea ecx, [ebp - 0x20c0]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x45ac9b
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x20c0]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dcf68
push 1
push 0x23
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x45ac9b
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push 0
lea ecx, [esi + ecx]
call fcn.00401c90
push eax
push 0x23
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x20c0]
call fcn.00401c90
push eax
push 0x4e3168
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
sub dword [ebp - 0x6f8c], 1
jne 0x45aaf0
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45c114
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x45ad2a
mov eax, dword [ebp - 0x6f6c]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f5c], eax
nop dword [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3c58
push esi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push str.HKU_
call fcn.00401bf0
add dword [ebp - 0x6f5c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x45ace0
mov esi, dword [ebp - 0x6f6c]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3cb8
push dword [ebp - 0x6f9c]
lea ecx, [esi + eax*4]
call fcn.00401bf0
cmp byte [ebp - 0x6f45], 0
je 0x45ad91
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e3cb8
push dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00401bf0
push 0
push 0x4e3d18
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov esi, dword [ebp - 0x6f7c]
mov dword [ebp - 0x6f5c], 0
test esi, esi
je 0x45b293
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6f6c]
sub eax, esi
mov dword [ebp - 0x6f80], esi
mov dword [ebp - 0x6f8c], eax
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45b28d
mov eax, dword [edi + 0x30]
cmp eax, 2
jbe 0x45adfb
add eax, 0xfffffffe
cmp dword [ebp - 0x6f5c], eax
je 0x45b26b
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
add ecx, esi
push 0x4e3d6c
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00401bf0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x45b26b
lea eax, [ebp - 0x270c]
mov dword [ebp - 0x270c], 0
push eax
push 0x4d3a54
lea ecx, [ebp - 0x1f74]
call fcn.004066c0
test al, al
je 0x45b26b
cmp dword [ebp - 0x270c], 0
je 0x45b26b
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3d88
lea ecx, [esi + ecx]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00401bf0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x45b26b
lea eax, [ebp - 0x201c]
push eax
push 0x4d3ac0
lea ecx, [ebp - 0x1f74]
call fcn.00406580
test al, al
je 0x45b05b
lea ecx, [ebp - 0x201c]
call fcn.00401f90
test al, al
jne 0x45b05b
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e3d94
lea ecx, [ebp - 0x201c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x45b05b
xor esi, esi
push 0
push 1
push 1
push 0
push dword [ebp + esi*4 - 0x6ff0]
lea ecx, [ebp - 0x201c]
call fcn.00402c80
dec eax
cmp eax, 0x10
jbe 0x45b055
inc esi
cmp esi, 7
jb 0x45af44
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x201c]
call fcn.00401c90
mov esi, dword [ebp - 0x6f80]
mov ecx, esi
push eax
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4d3ac0
push 1
push 0x25
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x45b05b
push 0
push 0
push 0
lea ecx, [ebp - 0x201c]
call fcn.00401c90
push eax
push 0
push 0x4d3ac0
mov ecx, esi
call fcn.00401c90
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
push 0x25
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
lea ecx, [ebp - 0x201c]
call fcn.00401c90
push eax
push 0x4e3720
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
push 0x4e3db8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
jmp 0x45b05b
mov esi, dword [ebp - 0x6f80]
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45b28d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d3b58
lea ecx, [ebp - 0x1f98]
call fcn.00402f30
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x45b26b
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f50], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.00406830
test al, al
je 0x45b26b
nop dword [eax]
mov eax, dword [ebp - 0x6cb4]
cmp word [eax], 0
je 0x45b243
push eax
lea ecx, [ebp - 0x201c]
call fcn.00401a00
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e3d94
lea ecx, [ebp - 0x201c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x45b26b
xor esi, esi
nop dword [eax]
push 0
push 1
push 1
push 0
push dword [ebp + esi*4 - 0x6ff0]
lea ecx, [ebp - 0x201c]
call fcn.00402c80
dec eax
cmp eax, 0x10
jbe 0x45b23d
inc esi
cmp esi, 7
jb 0x45b130
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x201c]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f80]
push eax
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4de488
push 1
push 0x25
push dword [eax + 0xa8]
call fcn.004426b0
mov esi, eax
cmp esi, 0xffffffff
je 0x45b23d
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x201c]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f80]
push eax
call fcn.00401c90
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
push 0x25
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
lea ecx, [ebp - 0x201c]
call fcn.00401c90
mov esi, dword [ebp - 0x6f80]
mov ecx, esi
push eax
push 0x4e3720
call fcn.00401c90
push eax
push 0x4e0b14
push 0x4e3de4
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
jmp 0x45b243
mov esi, dword [ebp - 0x6f80]
mov eax, dword [ebp - 0x6f50]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f50], eax
call fcn.00406830
test al, al
jne 0x45b0e0
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f80], esi
mov dword [ebp - 0x6f5c], eax
cmp eax, dword [ebp - 0x6f7c]
jb 0x45add5
mov esi, dword [ebp - 0x6f7c]
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45c114
mov dword [ebp - 0x6f70], 0
test esi, esi
je 0x45b6d4
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6f6c]
sub eax, esi
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f5c], eax
nop
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45b6d4
mov eax, dword [edi + 0x30]
cmp eax, 2
jbe 0x45b2f6
add eax, 0xfffffffe
cmp dword [ebp - 0x6f70], eax
je 0x45b6b2
mov ecx, dword [ebp - 0x6f5c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
add ecx, esi
push 0x4e3e20
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00401bf0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x45b6b2
lea eax, [ebp - 0x2708]
mov dword [ebp - 0x2708], 0
push eax
push 0x4d3ed0
lea ecx, [ebp - 0x1f74]
call fcn.004066c0
test al, al
je 0x45b6b2
cmp dword [ebp - 0x2708], 0
je 0x45b6b2
mov ecx, dword [ebp - 0x6f5c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3e54
lea ecx, [esi + ecx]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00401bf0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x45b6b2
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f50], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.004067b0
test al, al
je 0x45b6b2
mov ecx, dword [ebp - 0x6f5c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [esi + ecx]
push 0x4e3e70
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00401bf0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fe4]
call fcn.004063e0
test al, al
je 0x45b68a
lea eax, [ebp - 0x2108]
push eax
push 0x4cdebc
lea ecx, [ebp - 0x1fe4]
call fcn.00406580
push 0
lea ecx, [ebp - 0x2108]
call fcn.00401ac0
cmp word [eax], 0x40
jne 0x45b4cd
push 0
lea ecx, [ebp - 0x2108]
call fcn.00401c90
push eax
push 0x80
lea ecx, [ebp - 0x2108]
call fcn.00402200
push 0
push 0x80
lea ecx, [ebp - 0x2108]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2108]
call fcn.00401c90
push eax
call dword [0x4a94a0]
lea eax, [ebp - 0x201c]
push eax
push 0x4d5e38
lea ecx, [ebp - 0x1fe4]
call fcn.00406580
lea ecx, [ebp - 0x2108]
call fcn.00401f90
test al, al
je 0x45b506
lea ecx, [ebp - 0x201c]
call fcn.00401f90
test al, al
jne 0x45b68a
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e3d94
lea ecx, [ebp - 0x201c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x45b6b2
xor esi, esi
push 0
push 1
push 1
push 0
push dword [ebp + esi*4 - 0x6ff0]
lea ecx, [ebp - 0x201c]
call fcn.00402c80
dec eax
cmp eax, 0x10
jbe 0x45b684
inc esi
cmp esi, 7
jb 0x45b536
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3318
lea ecx, [ebp - 0x2108]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00401bf0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x201c]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x20c0]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 1
push 0x25
push dword [eax + 0xa8]
call fcn.004426b0
mov esi, eax
cmp esi, 0xffffffff
je 0x45b684
push 0
push 0
push 0
lea ecx, [ebp - 0x201c]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
push 0
call fcn.00401c90
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
push 0x25
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
lea ecx, [ebp - 0x201c]
call fcn.00401c90
mov esi, dword [ebp - 0x6f40]
mov ecx, esi
push eax
push 0x4e3720
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x2108]
call fcn.00401c90
push eax
push 0x4e3e8c
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
jmp 0x45b68a
mov esi, dword [ebp - 0x6f40]
mov eax, dword [ebp - 0x6f50]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f50], eax
call fcn.004067b0
test al, al
jne 0x45b403
mov eax, dword [ebp - 0x6f70]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f70], eax
cmp eax, dword [ebp - 0x6f7c]
jb 0x45b2d0
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x45b73a
mov eax, dword [ebp - 0x6f6c]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f5c], eax
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3ec4
push esi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push str.HKU_
call fcn.00401bf0
add dword [ebp - 0x6f5c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x45b6f0
mov esi, dword [ebp - 0x6f6c]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3ef0
push dword [ebp - 0x6f9c]
lea ecx, [esi + eax*4]
call fcn.00401bf0
cmp byte [ebp - 0x6f45], 0
je 0x45b7a1
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e3ef0
push dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00401bf0
push 0xc
lea ecx, [ebp - 0x26a4]
call fcn.00404370
lea ecx, [ebp - 0x26a4]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x25e4]
mov byte [ebp - 4], 0x92
call fcn.00404370
lea ecx, [ebp - 0x25e4]
call fcn.00401930
push 0
push 0x4e4030
lea ecx, [ebp - 0x1fd4]
mov byte [ebp - 4], 0x93
call fcn.0040d1b0
cmp dword [ebp - 0x6f7c], 0
mov dword [ebp - 0x6f5c], 0
jbe 0x45bbc4
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6f6c]
sub eax, esi
mov dword [ebp - 0x6f70], esi
mov dword [ebp - 0x6f8c], eax
nop dword [eax]
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45bbc4
mov eax, dword [edi + 0x30]
cmp eax, 2
jbe 0x45b846
add eax, 0xfffffffe
cmp dword [ebp - 0x6f5c], eax
je 0x45bba2
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
add ecx, esi
push 0x4e4090
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00401bf0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x45b9da
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e40e4
push 0x4de528
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x45b9da
lea eax, [ebp - 0x26a4]
push eax
push 0x4de540
lea ecx, [ebp - 0x1f74]
call fcn.00406580
lea eax, [ebp - 0x2858]
push eax
push 0x4de558
lea ecx, [ebp - 0x1f74]
call fcn.004066c0
lea ecx, [ebp - 0x26a4]
call fcn.00401f90
test al, al
jne 0x45b9da
cmp dword [ebp - 0x2858], 0
je 0x45b9da
push 0
push 0
push 0
push 0
push 0x4e3f20
mov ecx, esi
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4de528
push 1
push 0x24
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x45b9da
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00401c90
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
push 0x24
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e1f50
push 0x4e3f20
push 0x4e21bc
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
push 0x4de528
push 0x4e34a8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e40e4
push 0x4de618
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x45bba2
mov ecx, dword [ebp - 0x6f8c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4108
lea ecx, [esi + ecx]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00401bf0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x45bba2
lea eax, [ebp - 0x25e4]
push eax
push 0x4d05f4
lea ecx, [ebp - 0x1f74]
call fcn.00406580
test al, al
je 0x45bba2
lea ecx, [ebp - 0x26a4]
call fcn.00401f90
test al, al
jne 0x45bba2
push 0
push 0
push 0x4c975c
push 0x4ca130
lea ecx, [ebp - 0x25e4]
call fcn.00403410
push 0
push 1
push 1
push 0
push 0x4d0600
lea ecx, [ebp - 0x25e4]
call fcn.00402c80
lea ecx, [ebp - 0x25e4]
mov esi, eax
call fcn.00401b50
sub eax, 0xb
cmp esi, eax
mov esi, dword [ebp - 0x6f70]
je 0x45bba2
push 0
push 0
push 0
push 0
push 0x4e3fa0
mov ecx, esi
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4de618
push 1
push 0x24
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x45bba2
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00401c90
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
push 0x24
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e1f50
push 0x4e3fa0
push 0x4e21bc
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
push 0x4de618
push 0x4e34a8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f70], esi
mov dword [ebp - 0x6f5c], eax
cmp eax, dword [ebp - 0x6f7c]
jb 0x45b820
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45c0fe
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e40e4
push 0x4de6b8
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x45c0fe
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x45bc5f
mov eax, dword [ebp - 0x6f6c]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f5c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d3e38
push esi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push str.HKU_
call fcn.00401bf0
add dword [ebp - 0x6f5c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x45bc15
mov esi, dword [ebp - 0x6f6c]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d3e38
push dword [ebp - 0x6f9c]
lea ecx, [esi + eax*4]
call fcn.00401bf0
cmp byte [ebp - 0x6f45], 0
je 0x45bcc6
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4d3e38
push dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00401bf0
cmp dword [ebp - 0x6f7c], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x45be99
mov eax, dword [ebp - 0x6f78]
sub eax, esi
mov dword [ebp - 0x6f5c], eax
nop dword [eax + eax]
mov ecx, esi
call fcn.00401c90
xor edx, edx
mov ecx, eax
call fcn.00408000
test al, al
je 0x45be7d
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45be99
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4de418
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2120]
call fcn.00401bf0
lea ecx, [ebp - 0x2120]
call fcn.00401c90
mov edx, 0x4d3a54
mov ecx, eax
call fcn.00408000
test al, al
jne 0x45bda6
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d5c1c
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2120]
call fcn.00401bf0
lea ecx, [ebp - 0x2120]
call fcn.00401c90
xor edx, edx
mov ecx, eax
call fcn.00408000
test al, al
je 0x45be7d
mov ecx, dword [ebp - 0x6f5c]
push 0
push 0
push 0
push 0
add ecx, esi
push 0x4e4150
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4de6b8
push 1
push 0x24
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x45be7d
mov ecx, dword [ebp - 0x6f5c]
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [esi + ecx]
call fcn.00401c90
push eax
push 0
mov ecx, esi
call fcn.00401c90
push eax
push 0x24
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
mov ecx, dword [ebp - 0x6f5c]
push 0
push 0
push 0
push 0
push 0
push 0x4e1f50
push 0x4e4150
push 0x4e21bc
lea ecx, [esi + ecx]
call fcn.00401c90
push eax
push 0x4e0b14
push 0x4de6b8
push 0x4e34a8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [ebp - 0x6f7c]
jb 0x45bcf0
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45c0fe
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e40e4
push 0x4de77c
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x45c0fe
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x45bf3a
mov eax, dword [ebp - 0x6f6c]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f5c], eax
nop word [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e41f8
push esi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push str.HKU_
call fcn.00401bf0
add dword [ebp - 0x6f5c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x45bef0
mov esi, dword [ebp - 0x6f6c]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e41f8
push dword [ebp - 0x6f9c]
lea ecx, [esi + eax*4]
call fcn.00401bf0
cmp byte [ebp - 0x6f45], 0
je 0x45bfa1
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e41f8
push dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00401bf0
mov edx, dword [ebp - 0x6f7c]
test edx, edx
je 0x45c0e4
mov eax, dword [ebp - 0x6f6c]
mov esi, dword [ebp - 0x6f78]
sub eax, esi
mov dword [ebp - 0x6f5c], eax
mov dword [ebp - 0x6f8c], edx
nop dword [eax]
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fe4]
call fcn.004063e0
test al, al
je 0x45c0ce
lea ecx, [ebp - 0x1fe4]
call fcn.004068d0
cmp eax, 1
jbe 0x45c0ce
push 0
push 0
push 0
push 0
push 0x4e4260
mov ecx, esi
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4de77c
push 1
push 0x24
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x45c0ce
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push 0
lea ecx, [esi + ecx]
call fcn.00401c90
push eax
push 0x24
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e1f50
push 0x4e4260
push 0x4e21bc
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
push 0x4e42d0
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
sub dword [ebp - 0x6f8c], 1
jne 0x45bfd0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.0041f020
mov ecx, edi
call fcn.0046ba40
lea ecx, [ebp - 0x25e4]
call fcn.00401ad0
lea ecx, [ebp - 0x26a4]
call fcn.00401ad0
lea ecx, [ebp - 0x2294]
call fcn.00401ad0
lea ecx, [ebp - 0x6e00]
call fcn.0046a2d0
lea ecx, [ebp - 0x6880]
call fcn.0040a120
lea ecx, [ebp - 0x20c0]
call fcn.00401ad0
lea ecx, [ebp - 0x2338]
call fcn.00401ad0
lea ecx, [ebp - 0x21e4]
call fcn.00401ad0
lea ecx, [ebp - 0x20f0]
call fcn.00401ad0
lea ecx, [ebp - 0x2344]
call fcn.00401ad0
lea ecx, [ebp - 0x20b4]
call fcn.00401ad0
lea ecx, [ebp - 0x2108]
call fcn.00401ad0
lea ecx, [ebp - 0x2084]
call fcn.00406410
lea ecx, [ebp - 0x1fe4]
call fcn.00406410
lea ecx, [ebp - 0x2674]
call fcn.004040e0
lea ecx, [ebp - 0x2398]
call fcn.00401ad0
lea ecx, [ebp - 0x201c]
mov byte [ebp - 4], 0x45
call fcn.00401ad0
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45eaf6
test dword [edi + 0x34], 0x1000
jne 0x45eaf6
push 0
push 0x4e4324
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x4e435c
push dword [eax + 0x38]
call fcn.0041d990
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x2d
push dword [eax + 0x34]
call fcn.0041ff10
push 0xc
lea ecx, [ebp - 0x20e4]
call fcn.00404370
lea ecx, [ebp - 0x20e4]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2028]
mov byte [ebp - 4], 0x94
call fcn.00404370
lea ecx, [ebp - 0x2028]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x23c8]
mov byte [ebp - 4], 0x95
call fcn.00404370
lea ecx, [ebp - 0x23c8]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x1ff0]
mov byte [ebp - 4], 0x96
call fcn.00404370
lea ecx, [ebp - 0x1ff0]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x22ac]
mov byte [ebp - 4], 0x97
call fcn.00404370
lea ecx, [ebp - 0x22ac]
call fcn.00401930
mov byte [ebp - 4], 0x98
lea ecx, [ebp - 0x2540]
xor esi, esi
push 0x24
mov dword [ebp - 0x6f5c], esi
call fcn.0042cde0
lea ecx, [ebp - 0x2540]
call fcn.0040ee70
mov byte [ebp - 4], 0x99
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.0041f020
push esi
push 0x4e4390
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov dword [ebp - 0x6f70], esi
cmp dword [edi + 0x30], esi
jbe 0x45c986
mov esi, dword [ebp - 0x6f78]
lea eax, [edi + 0x10c]
mov dword [ebp - 0x6f80], esi
nop word [eax + eax]
lea ecx, [ebp - 0x22ac]
mov dword [ebp - 0x6f88], eax
call fcn.00401f90
test al, al
je 0x45c36e
lea eax, [ebp - 0x22ac]
push eax
push 0
lea ecx, [ebp - 0x2154]
call fcn.00401c90
push dword [ebp - 0x6f70]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.00476390
mov ecx, eax
call fcn.00401c90
mov edx, esi
mov ecx, eax
call fcn.004326e0
mov esi, dword [ebp - 0x6f80]
lea eax, [edi + 0x10c]
mov dword [ebp - 0x6f88], eax
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45c980
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e43dc
lea ecx, [ebp - 0x2154]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f88]
push eax
push dword [ebp - 0x6f70]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00401bf0
push 0x260
lea ecx, [ebp - 0x53f8]
call fcn.00408820
push 1
lea ecx, [ebp - 0x20e4]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x53f8]
call fcn.004012e0
push 3
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x9a
call fcn.00402b90
lea ecx, [ebp - 0x53f8]
call fcn.00401420
test al, al
je 0x45c94c
push 1
lea ecx, [ebp - 0x53f8]
call fcn.00401480
push eax
lea ecx, [ebp - 0x2028]
call fcn.00401a00
push 0x4e29bc
lea ecx, [ebp - 0x2028]
call fcn.00401a70
test al, al
je 0x45c45f
push 0
push 1
push 1
push 0
push 0x4e29cc
lea ecx, [ebp - 0x2028]
call fcn.00402c80
cmp eax, 1
jne 0x45c92d
inc dword [ebp - 0x6f5c]
lea ecx, [ebp - 0x53f8]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e29e0
push 1
call fcn.00401480
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2028]
call fcn.00401bf0
push 0x100
lea ecx, [ebp - 0x2028]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2540]
call fcn.0040ef20
test al, al
je 0x45c92d
lea eax, [ebp - 0x1ff0]
push eax
push 0x4cb90c
push 0x4e2a08
lea ecx, [ebp - 0x2540]
call fcn.0040f7c0
test eax, eax
je 0x45c6b7
push 0
push 1
push 1
push 0
push 0x4e2a1c
lea ecx, [ebp - 0x1ff0]
call fcn.00402c80
test eax, eax
jne 0x45c6b7
push eax
push 1
push 1
push eax
push 0x4e2a3c
lea ecx, [ebp - 0x1ff0]
call fcn.00402c80
test eax, eax
jne 0x45c6b7
push eax
push 1
push 1
push eax
push 0x4e2a8c
lea ecx, [ebp - 0x1ff0]
call fcn.00402c80
test eax, eax
jne 0x45c6b7
push 0x4e2a58
lea ecx, [ebp - 0x1ff0]
call fcn.00401a40
test al, al
jne 0x45c6b7
push 0
push 1
push 1
push 0
push 0x4e2a70
lea ecx, [ebp - 0x1ff0]
call fcn.00402c80
test eax, eax
jne 0x45c6b7
lea ecx, [edi + 0x14c]
push eax
call fcn.00401c90
push eax
push 0x4e4418
lea ecx, [ebp - 0x1ff0]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x45c6b7
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e4444
lea ecx, [ebp - 0x1ff0]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x45c6b7
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff0]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e2ae0
push 2
push 0x2a
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x45c6b7
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2028]
call fcn.00401c90
push eax
push 0x4e2a08
push 0x2a
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
lea ecx, [ebp - 0x2028]
call fcn.00401c90
push eax
push 0x4e21bc
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x1ff0]
call fcn.00401c90
push eax
push 0x4e2b28
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
lea eax, [ebp - 0x2acc]
mov dword [ebp - 0x6f04], 0
push eax
push 0x4cb90c
xorps xmm0, xmm0
lea ecx, [ebp - 0x2540]
push 0x4e2b48
movups xmmword [ebp - 0x6f14], xmm0
call fcn.0040f5e0
test al, al
je 0x45c92d
lea eax, [ebp - 0x2acc]
push eax
lea eax, [ebp - 0x6f14]
push eax
lea ecx, [ebp - 0x2540]
call fcn.0040fd40
test al, al
je 0x45c92d
lea eax, [ebp - 0x1ff0]
push eax
lea eax, [ebp - 0x6f14]
push eax
lea ecx, [ebp - 0x2540]
call fcn.0040f750
test eax, eax
je 0x45c90c
push 0
push 1
push 1
push 0
push 0x4e2a1c
lea ecx, [ebp - 0x1ff0]
call fcn.00402c80
test eax, eax
jne 0x45c90c
push eax
push 1
push 1
push eax
push 0x4e2a3c
lea ecx, [ebp - 0x1ff0]
call fcn.00402c80
test eax, eax
jne 0x45c90c
push eax
push 1
push 1
push eax
push 0x4e2a8c
lea ecx, [ebp - 0x1ff0]
call fcn.00402c80
test eax, eax
jne 0x45c90c
push 0x4e2a58
lea ecx, [ebp - 0x1ff0]
call fcn.00401a40
test al, al
jne 0x45c90c
push 0
push 1
push 1
push 0
push 0x4e2a70
lea ecx, [ebp - 0x1ff0]
call fcn.00402c80
test eax, eax
jne 0x45c90c
push eax
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e4418
lea ecx, [ebp - 0x1ff0]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x45c906
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e4444
lea ecx, [ebp - 0x1ff0]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x45c906
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff0]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f80]
push eax
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e2be0
push 2
push 0x2a
push dword [eax + 0xa8]
call fcn.004426b0
mov esi, eax
cmp esi, 0xffffffff
je 0x45c906
mov ecx, dword [ebp - 0x6f80]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2028]
call fcn.00401c90
push eax
push 0x4e2b48
push 0x2a
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
lea ecx, [ebp - 0x2028]
call fcn.00401c90
mov esi, dword [ebp - 0x6f80]
mov ecx, esi
push eax
push 0x4e21bc
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x1ff0]
call fcn.00401c90
push eax
push 0x4e2bfc
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
jmp 0x45c90c
mov esi, dword [ebp - 0x6f80]
lea eax, [ebp - 0x2acc]
push eax
lea eax, [ebp - 0x6f14]
push eax
lea ecx, [ebp - 0x2540]
call fcn.0040fd40
test al, al
jne 0x45c710
lea ecx, [ebp - 0x53f8]
call fcn.004013e0
test al, al
jne 0x45c411
lea eax, [edi + 0x10c]
mov dword [ebp - 0x6f88], eax
lea ecx, [ebp - 0x53f8]
mov byte [ebp - 4], 0x99
call fcn.00401330
mov eax, dword [ebp - 0x6f70]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f80], esi
cmp eax, dword [edi + 0x30]
mov dword [ebp - 0x6f70], eax
mov eax, dword [ebp - 0x6f88]
jb 0x45c310
mov esi, dword [ebp - 0x6f5c]
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45eab0
test esi, esi
jne 0x45c9be
lea ecx, [ebp - 0x22ac]
call fcn.00401f90
test al, al
je 0x45c9be
push esi
push 0x4e4470
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
jmp 0x45eab0
push 0
push 0x4e44c8
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f5c], 0
jbe 0x45cd85
mov esi, dword [ebp - 0x6f78]
mov dword [ebp - 0x6f40], esi
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45cd85
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e43dc
lea ecx, [ebp - 0x2154]
call fcn.00401c90
push eax
push dword [ebp - 0x6f5c]
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00401bf0
push 0x260
lea ecx, [ebp - 0x5198]
call fcn.00408820
push 1
lea ecx, [ebp - 0x20e4]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x5198]
call fcn.004012e0
push 3
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x9b
call fcn.00402b90
lea ecx, [ebp - 0x5198]
call fcn.00401420
test al, al
je 0x45cd57
push 1
lea ecx, [ebp - 0x5198]
call fcn.00401480
push eax
lea ecx, [ebp - 0x2028]
call fcn.00401a00
push 0x4e29bc
lea ecx, [ebp - 0x2028]
call fcn.00401a70
test al, al
je 0x45cae1
push 0
push 1
push 1
push 0
push 0x4e29cc
lea ecx, [ebp - 0x2028]
call fcn.00402c80
cmp eax, 1
jne 0x45cd44
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e29e0
push 1
lea ecx, [ebp - 0x5198]
call fcn.00401480
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2028]
call fcn.00401bf0
push 0x100
lea ecx, [ebp - 0x2028]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2540]
call fcn.0040ef20
test al, al
je 0x45cd44
lea eax, [ebp - 0x1ff0]
push eax
push 0x4cb90c
push 0x4e2cb8
lea ecx, [ebp - 0x2540]
call fcn.0040f7c0
test eax, eax
je 0x45cd44
push 0
push 1
push 1
push 0
push 0x4e2a1c
lea ecx, [ebp - 0x1ff0]
call fcn.00402c80
test eax, eax
jne 0x45cd44
push eax
push 1
push 1
push eax
push 0x4e2b74
lea ecx, [ebp - 0x1ff0]
call fcn.00402c80
test eax, eax
jne 0x45cd44
push eax
push 1
push 1
push eax
push 0x4e2a3c
lea ecx, [ebp - 0x1ff0]
call fcn.00402c80
test eax, eax
jne 0x45cd44
push eax
push 1
push 1
push eax
push 0x4e2a8c
lea ecx, [ebp - 0x1ff0]
call fcn.00402c80
test eax, eax
jne 0x45cd44
push eax
push 1
push 1
push eax
push 0x4e2b98
lea ecx, [ebp - 0x1ff0]
call fcn.00402c80
test eax, eax
jne 0x45cd44
push eax
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e4508
lea ecx, [ebp - 0x1ff0]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x45cd3e
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e4538
lea ecx, [ebp - 0x1ff0]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x45cd3e
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff0]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e2d68
push 2
push 0x2b
push dword [eax + 0xa8]
call fcn.004426b0
mov esi, eax
cmp esi, 0xffffffff
je 0x45cd3e
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2028]
call fcn.00401c90
push eax
push 0x4e2d98
push 0x2b
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
lea ecx, [ebp - 0x2028]
call fcn.00401c90
mov esi, dword [ebp - 0x6f40]
mov ecx, esi
push eax
push 0x4e21bc
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x1ff0]
call fcn.00401c90
push eax
push 0x4e2df8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
jmp 0x45cd44
mov esi, dword [ebp - 0x6f40]
lea ecx, [ebp - 0x5198]
call fcn.004013e0
test al, al
jne 0x45ca93
lea ecx, [ebp - 0x5198]
mov byte [ebp - 4], 0x99
call fcn.00401330
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f5c], eax
cmp eax, dword [edi + 0x30]
jb 0x45c9f0
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45eab0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4568
lea ecx, [edi + 0x314]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00401bf0
push 0
push 0x4e45a4
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f5c], 0
jbe 0x45d3b1
mov esi, dword [ebp - 0x6f78]
mov dword [ebp - 0x6f80], esi
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45d3b1
push 0xc
lea ecx, [ebp - 0x2730]
call fcn.00404370
lea ecx, [ebp - 0x2730]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x276c]
mov byte [ebp - 4], 0x9c
call fcn.00404370
lea ecx, [ebp - 0x276c]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x26e0]
mov byte [ebp - 4], 0x9d
call fcn.00404370
lea ecx, [ebp - 0x26e0]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x25f0]
mov byte [ebp - 4], 0x9e
call fcn.00404370
lea ecx, [ebp - 0x25f0]
call fcn.00401930
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e43dc
lea ecx, [ebp - 0x2154]
mov byte [ebp - 4], 0x9f
call fcn.00401c90
push eax
push dword [ebp - 0x6f5c]
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00401bf0
push 0x260
lea ecx, [ebp - 0x45b8]
call fcn.00408820
push 1
lea ecx, [ebp - 0x20e4]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x45b8]
call fcn.004012e0
push 3
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0xa0
call fcn.00402b90
lea ecx, [ebp - 0x45b8]
call fcn.00401420
test al, al
je 0x45d357
nop dword [eax]
push 1
lea ecx, [ebp - 0x45b8]
call fcn.00401480
push eax
lea ecx, [ebp - 0x2028]
call fcn.00401a00
push 0x4e29bc
lea ecx, [ebp - 0x2028]
call fcn.00401a70
test al, al
je 0x45cf5e
push 0
push 1
push 1
push 0
push 0x4e29cc
lea ecx, [ebp - 0x2028]
call fcn.00402c80
cmp eax, 1
jne 0x45d344
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e29e0
push 1
lea ecx, [ebp - 0x45b8]
call fcn.00401480
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2028]
call fcn.00401bf0
push 0x100
lea ecx, [ebp - 0x2028]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2540]
call fcn.0040ef20
test al, al
je 0x45d344
lea eax, [ebp - 0x2a68]
mov dword [ebp - 0x6ef0], 0
push eax
push 0x4cb90c
xorps xmm0, xmm0
lea ecx, [ebp - 0x2540]
push 0x4e2ec0
movups xmmword [ebp - 0x6f00], xmm0
call fcn.0040f5e0
test al, al
je 0x45d344
lea eax, [ebp - 0x2a68]
push eax
lea eax, [ebp - 0x6f00]
push eax
lea ecx, [ebp - 0x2540]
call fcn.0040f980
test al, al
je 0x45d344
nop word [eax + eax]
lea eax, [ebp - 0x2730]
push eax
lea eax, [ebp - 0x6f00]
push eax
lea ecx, [ebp - 0x2540]
call fcn.0040f710
test al, al
je 0x45d323
lea ecx, [ebp - 0x2730]
call fcn.00401c90
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.00401c90
mov edx, esi
mov ecx, eax
call fcn.00408000
test al, al
jne 0x45d31d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2eec
lea ecx, [ebp - 0x2730]
call fcn.00401c90
push eax
push 0x4e2f10
lea ecx, [ebp - 0x26e0]
call fcn.00401bf0
lea eax, [ebp - 0x276c]
push eax
push 0x4cb90c
lea ecx, [ebp - 0x26e0]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2540]
call fcn.0040f7c0
test eax, eax
je 0x45d31d
lea ecx, [ebp - 0x276c]
call fcn.00401c90
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.00401c90
mov edx, esi
mov ecx, eax
call fcn.00408000
test al, al
jne 0x45d31d
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e45d4
lea ecx, [ebp - 0x276c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x45d31d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2f40
lea ecx, [ebp - 0x2730]
call fcn.00401c90
push eax
push 0x4e2f10
lea ecx, [ebp - 0x26e0]
call fcn.00401bf0
lea eax, [ebp - 0x25f0]
push eax
push 0x4cb90c
lea ecx, [ebp - 0x26e0]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2540]
call fcn.0040f7c0
test eax, eax
je 0x45d1c8
push 0
push 1
push 1
push 5
push 0x4ca134
lea ecx, [ebp - 0x25f0]
call fcn.00402c80
test eax, eax
jne 0x45d1c8
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4e2f50
push 1
lea ecx, [ebp - 0x45b8]
call fcn.00401480
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x25f0]
call fcn.004031d0
lea ecx, [ebp - 0x25f0]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
je 0x45d31d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2730]
call fcn.00401c90
push eax
push 0x4e2f10
lea ecx, [ebp - 0x26e0]
call fcn.00401bf0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x25f0]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f80]
push eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x276c]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 2
push 0x2c
push dword [eax + 0xa8]
call fcn.004426b0
mov esi, eax
cmp esi, 0xffffffff
je 0x45d31d
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25f0]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f80]
push eax
push 0
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2028]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x26e0]
call fcn.00401c90
push eax
push 0x2c
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0x4e2af4
lea ecx, [ebp - 0x25f0]
call fcn.00401c90
mov esi, dword [ebp - 0x6f80]
mov ecx, esi
push eax
push 0x4e17a0
call fcn.00401c90
push eax
push 0x4e2f6c
lea ecx, [ebp - 0x2730]
call fcn.00401c90
push eax
push 0x4cdb98
lea ecx, [ebp - 0x276c]
call fcn.00401c90
push eax
push 0x4e2f90
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
jmp 0x45d323
mov esi, dword [ebp - 0x6f80]
lea eax, [ebp - 0x2a68]
push eax
lea eax, [ebp - 0x6f00]
push eax
lea ecx, [ebp - 0x2540]
call fcn.0040f980
test al, al
jne 0x45d020
lea ecx, [ebp - 0x45b8]
call fcn.004013e0
test al, al
jne 0x45cf10
lea ecx, [ebp - 0x45b8]
call fcn.00401330
lea ecx, [ebp - 0x25f0]
call fcn.00401ad0
lea ecx, [ebp - 0x26e0]
call fcn.00401ad0
lea ecx, [ebp - 0x276c]
call fcn.00401ad0
lea ecx, [ebp - 0x2730]
mov byte [ebp - 4], 0x99
call fcn.00401ad0
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f80], esi
mov dword [ebp - 0x6f5c], eax
cmp eax, dword [edi + 0x30]
jb 0x45cdf6
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45eab0
push 0
push 0x4e45f8
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x6d68]
push 1
push 0
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6d70], eax
mov dword [ebp - 0x6d6c], 0x2d
call fcn.00401980
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0xa1
call fcn.00401c90
lea ecx, [edi + 0x14c]
mov dword [ebp - 0x6d5c], eax
mov dword [ebp - 0x6d58], 0
call fcn.00401c90
mov dword [ebp - 0x6d54], eax
lea ecx, [ebp - 0x6d48]
lea eax, [ebp - 0x1fd4]
push 1
mov dword [ebp - 0x6d50], eax
mov eax, dword [edi + 4]
push 0x4d0584
mov dword [ebp - 0x6d4c], eax
call fcn.00401980
push 0xc
lea ecx, [ebp - 0x2258]
mov byte [ebp - 4], 0xa2
call fcn.00404370
lea ecx, [ebp - 0x2258]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x221c]
mov byte [ebp - 4], 0xa3
call fcn.00404370
lea ecx, [ebp - 0x221c]
call fcn.00401930
mov ecx, edi
mov byte [ebp - 4], 0xa4
call fcn.0046f9d0
test al, al
jne 0x45ea8f
xor esi, esi
mov dword [ebp - 0x6f70], esi
cmp dword [edi + 0x30], esi
jbe 0x45d647
nop dword [eax]
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45d647
push esi
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401b50
cmp eax, 3
jl 0x45d637
lea eax, [ebp - 0x6d68]
push eax
push 0
lea ecx, [ebp - 0x2154]
call fcn.00401c90
push dword [ebp - 0x6f70]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.00476390
mov ecx, eax
call fcn.00401c90
mov edx, esi
mov ecx, eax
call fcn.004326e0
mov esi, dword [ebp - 0x6f70]
test al, al
je 0x45d637
push esi
lea ecx, [edi + 0x114]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24ec]
mov dword [ebp - 0x6d58], eax
call fcn.00401c90
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2258]
call fcn.00401bf0
lea ecx, [ebp - 0x2258]
call fcn.00401c90
mov ecx, eax
call fcn.0040e810
test al, al
je 0x45d637
lea ecx, [ebp - 0x2258]
call fcn.00401c90
push eax
lea eax, [ebp - 0x6d70]
mov ecx, edi
push eax
call fcn.0044e820
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45d647
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25a8]
call fcn.00401c90
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2258]
call fcn.00401bf0
lea ecx, [ebp - 0x2258]
call fcn.00401c90
mov ecx, eax
call fcn.0040e810
test al, al
je 0x45d637
push 0
lea ecx, [ebp - 0x2258]
call fcn.00401f20
lea ecx, [ebp - 0x2258]
call fcn.00401c90
push eax
lea eax, [ebp - 0x6d70]
mov ecx, edi
push eax
call fcn.0044e820
inc esi
mov dword [ebp - 0x6f70], esi
cmp esi, dword [edi + 0x30]
jb 0x45d4b0
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45ea8f
lea ecx, [ebp - 0x2650]
mov dword [ebp - 0x6d58], 0x4db8f0
call fcn.00401c90
push eax
lea eax, [ebp - 0x6d70]
mov ecx, edi
push eax
call fcn.0044e820
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45ea8f
lea eax, [ebp - 0x265c]
push eax
lea ecx, [ebp - 0x2258]
call fcn.00401a10
push 0
lea ecx, [ebp - 0x2258]
call fcn.00401f20
lea ecx, [ebp - 0x2258]
call fcn.00401c90
push eax
lea eax, [ebp - 0x6d70]
mov ecx, edi
push eax
call fcn.0044e820
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45ea8f
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x45d73a
mov eax, dword [ebp - 0x6f6c]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f5c], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4648
push esi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push str.HKU_
call fcn.00401bf0
add dword [ebp - 0x6f5c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x45d6f0
mov esi, dword [ebp - 0x6f6c]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e46d8
push dword [ebp - 0x6f9c]
lea ecx, [esi + eax*4]
call fcn.00401bf0
cmp byte [ebp - 0x6f45], 0
je 0x45d7a1
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e46d8
push dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00401bf0
cmp dword [ebp - 0x6f7c], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x45d9ac
mov eax, dword [ebp - 0x6f6c]
mov esi, dword [ebp - 0x6f78]
sub eax, esi
mov dword [ebp - 0x6f5c], eax
nop dword [eax]
push 0
lea ecx, [esi + eax]
push 0x20019
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x45d98a
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45d9ac
lea eax, [ebp - 0x221c]
push eax
push 0x4c975c
lea ecx, [ebp - 0x1f74]
call fcn.00406580
test al, al
je 0x45d98a
push 0
push 1
push 1
push 0
push 0x4e4764
lea ecx, [ebp - 0x221c]
call fcn.00402c80
lea ecx, [ebp - 0x221c]
mov dword [ebp - 0x6f4c], eax
call fcn.00401b50
mov edx, dword [ebp - 0x6f4c]
lea ecx, [edx + 0xa]
cmp eax, ecx
jle 0x45d98a
lea eax, [edx + 0xb]
push eax
lea ecx, [ebp - 0x221c]
call fcn.00402bd0
push 3
lea ecx, [ebp - 0x221c]
call fcn.00403700
lea ecx, [ebp - 0x221c]
call fcn.00401f90
test al, al
jne 0x45d98a
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e095c
lea ecx, [ebp - 0x221c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x45d98a
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x221c]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dcf68
push 2
push 0x2d
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x45d98a
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push 0
lea ecx, [esi + ecx]
call fcn.00401c90
push eax
push 0x2d
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x221c]
call fcn.00401c90
push eax
push 0x4e3168
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
cmp eax, dword [ebp - 0x6f7c]
mov dword [ebp - 0x6f8c], eax
mov eax, dword [ebp - 0x6f5c]
jb 0x45d7d0
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45ea8f
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x45da20
mov eax, dword [ebp - 0x6f6c]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f5c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4780
push esi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push str.HKU_
call fcn.00401bf0
add dword [ebp - 0x6f5c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x45d9d6
mov esi, dword [ebp - 0x6f6c]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e47c8
push dword [ebp - 0x6f9c]
lea ecx, [esi + eax*4]
call fcn.00401bf0
cmp byte [ebp - 0x6f45], 0
je 0x45da87
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e47c8
push dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00401bf0
push 0
push 0x4e480c
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov esi, dword [ebp - 0x6f7c]
mov dword [ebp - 0x6f5c], 0
test esi, esi
je 0x45dce3
mov eax, dword [ebp - 0x6f6c]
mov esi, dword [ebp - 0x6f78]
sub eax, esi
mov dword [ebp - 0x6f8c], eax
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45dcdd
mov ecx, dword [ebp - 0x6f8c]
push 0
add ecx, esi
push 0x20019
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
lea eax, [ebp - 0x1ff0]
push eax
push 0x4dd11c
lea ecx, [ebp - 0x1f74]
call fcn.00406580
test al, al
je 0x45dcc1
lea eax, [ebp - 0x2190]
mov dword [ebp - 0x2190], 0
push eax
push 0x4dd1bc
lea ecx, [ebp - 0x1f74]
call fcn.004066c0
test al, al
je 0x45db45
cmp dword [ebp - 0x2190], 0
jne 0x45dcc1
push 0
push 1
push 1
push 0
push 0x4e2a1c
lea ecx, [ebp - 0x1ff0]
call fcn.00402c80
test eax, eax
jne 0x45dcc1
push eax
push 1
push 1
push eax
push 0x4e2a3c
lea ecx, [ebp - 0x1ff0]
call fcn.00402c80
test eax, eax
jne 0x45dcc1
push eax
push 1
push 1
push eax
push 0x4e2a8c
lea ecx, [ebp - 0x1ff0]
call fcn.00402c80
test eax, eax
jne 0x45dcc1
push eax
push 1
push 1
push eax
push 0x4e2a70
lea ecx, [ebp - 0x1ff0]
call fcn.00402c80
test eax, eax
jne 0x45dcc1
push eax
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e4848
lea ecx, [ebp - 0x1ff0]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x45dcc1
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff0]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dd11c
push 2
push 0x2f
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x45dcc1
push 0
push 0
push 0
push 0
push 0
push 0x4dd11c
mov ecx, esi
call fcn.00401c90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
lea ecx, [esi + ecx]
call fcn.00401c90
push eax
push 0x2f
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x1ff0]
call fcn.00401c90
push eax
push 0x4e4878
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f5c], eax
cmp eax, dword [ebp - 0x6f7c]
jb 0x45dac5
mov esi, dword [ebp - 0x6f7c]
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45ea8f
push 0xc
lea ecx, [ebp - 0x25fc]
call fcn.00404370
lea ecx, [ebp - 0x25fc]
call fcn.00401930
mov byte [ebp - 4], 0xa5
mov dword [ebp - 0x6f5c], 0
test esi, esi
je 0x45dfbb
mov eax, dword [ebp - 0x6f6c]
mov esi, dword [ebp - 0x6f78]
sub eax, esi
mov dword [ebp - 0x6f8c], eax
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45dfb5
mov ecx, dword [ebp - 0x6f8c]
push 0
add ecx, esi
push 0x20019
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
lea eax, [ebp - 0x1ff0]
push eax
push 0x4dd25c
lea ecx, [ebp - 0x1f74]
call fcn.00406580
test al, al
je 0x45df99
lea eax, [ebp - 0x2190]
mov dword [ebp - 0x2190], 0
push eax
push 0x4dd35c
lea ecx, [ebp - 0x1f74]
call fcn.004066c0
test al, al
je 0x45ddb4
cmp dword [ebp - 0x2190], 0
je 0x45df99
push 0
push 1
push 1
push 0
push 0x4e2a1c
lea ecx, [ebp - 0x1ff0]
call fcn.00402c80
test eax, eax
jne 0x45df99
push eax
push 1
push 1
push eax
push 0x4e2a3c
lea ecx, [ebp - 0x1ff0]
call fcn.00402c80
test eax, eax
jne 0x45df99
push eax
push 1
push 1
push eax
push 0x4e2a8c
lea ecx, [ebp - 0x1ff0]
call fcn.00402c80
test eax, eax
jne 0x45df99
push eax
push 1
push 1
push eax
push 0x4e2a70
lea ecx, [ebp - 0x1ff0]
call fcn.00402c80
test eax, eax
jne 0x45df99
push eax
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e4848
lea ecx, [ebp - 0x1ff0]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x45df99
lea eax, [ebp - 0x25fc]
push eax
push 0x4dd328
lea ecx, [ebp - 0x1f74]
call fcn.00406580
test al, al
je 0x45df99
lea ecx, [ebp - 0x25fc]
call fcn.00401f90
test al, al
jne 0x45df99
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3318
lea ecx, [ebp - 0x25fc]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x221c]
call fcn.00401bf0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff0]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x221c]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 2
push 0x2f
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x45df99
push 0
push 0
push 0
push 0
push 0
push 0x4dd25c
mov ecx, esi
call fcn.00401c90
mov ecx, dword [ebp - 0x6f8c]
push eax
push 0
lea ecx, [esi + ecx]
call fcn.00401c90
push eax
push 0x2f
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x1ff0]
call fcn.00401c90
push eax
push 0x4e48c8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f5c], eax
cmp eax, dword [ebp - 0x6f7c]
jb 0x45dd34
mov esi, dword [ebp - 0x6f7c]
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45ea84
mov dword [ebp - 0x6f8c], 0
test esi, esi
je 0x45e22d
mov eax, dword [ebp - 0x6f6c]
mov esi, dword [ebp - 0x6f78]
sub eax, esi
mov dword [ebp - 0x6f5c], eax
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45e22d
mov ecx, dword [ebp - 0x6f5c]
push 0
add ecx, esi
push 0x20019
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x45e211
lea eax, [ebp - 0x2190]
mov dword [ebp - 0x2190], 0
push eax
push 0x4e33a0
lea ecx, [ebp - 0x1f74]
call fcn.004066c0
test al, al
je 0x45e211
cmp dword [ebp - 0x2190], 4
jne 0x45e211
mov ecx, dword [ebp - 0x6f5c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e33c4
lea ecx, [esi + ecx]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00401bf0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x45e211
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f50], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.00406830
test al, al
je 0x45e211
nop dword [eax]
lea eax, [ebp - 0x1ff0]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f74]
call fcn.00406580
test al, al
je 0x45e1e9
lea ecx, [ebp - 0x1ff0]
call fcn.00401f90
test al, al
jne 0x45e1e9
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1ff0]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dd518
push 2
push 0x2f
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x45e1e9
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
mov ecx, esi
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push 0
lea ecx, [esi + ecx]
call fcn.00401c90
push eax
push 0x2f
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x1ff0]
call fcn.00401c90
push eax
push 0x4e4928
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
mov eax, dword [ebp - 0x6f50]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f50], eax
call fcn.00406830
test al, al
jne 0x45e0e0
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [ebp - 0x6f7c]
jb 0x45dff0
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45ea84
push 0
push 0x4e4970
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f5c], 0
jbe 0x45e63d
mov esi, dword [ebp - 0x6f78]
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45e63d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e43dc
lea ecx, [ebp - 0x2154]
call fcn.00401c90
push eax
push dword [ebp - 0x6f5c]
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00401bf0
push 0x260
lea ecx, [ebp - 0x4358]
call fcn.00408820
push 1
lea ecx, [ebp - 0x20e4]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x4358]
call fcn.004012e0
push 3
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0xa6
call fcn.00402b90
lea ecx, [ebp - 0x4358]
call fcn.00401420
test al, al
je 0x45e615
nop dword [eax + eax]
push 1
lea ecx, [ebp - 0x4358]
call fcn.00401480
push eax
lea ecx, [ebp - 0x2028]
call fcn.00401a00
push 0x4e29bc
lea ecx, [ebp - 0x2028]
call fcn.00401a70
test al, al
je 0x45e35e
push 0
push 1
push 1
push 0
push 0x4e29cc
lea ecx, [ebp - 0x2028]
call fcn.00402c80
cmp eax, 1
jne 0x45e602
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e29e0
push 1
lea ecx, [ebp - 0x4358]
call fcn.00401480
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2028]
call fcn.00401bf0
lea ecx, [ebp - 0x2028]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
je 0x45e4b0
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e49a8
push 0x4dd61c
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x45e4b0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2028]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dd61c
push 2
push 0x2e
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x45e602
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2028]
call fcn.00401c90
push eax
push 0
push 0x2e
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e3470
lea ecx, [ebp - 0x2028]
call fcn.00401c90
push eax
push 0x4e21bc
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
push 0x4dd61c
push 0x4e34a8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e49a8
push 0x4dd718
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x45e602
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e34cc
push 1
lea ecx, [ebp - 0x4358]
call fcn.00401480
push eax
lea ecx, [ebp - 0x20e4]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2028]
call fcn.00401bf0
lea ecx, [ebp - 0x2028]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
je 0x45e602
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2028]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dd718
push 2
push 0x2e
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x45e602
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2028]
call fcn.00401c90
push eax
push 0
push 0x2e
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e3470
lea ecx, [ebp - 0x2028]
call fcn.00401c90
push eax
push 0x4e21bc
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
push 0x4dd718
push 0x4e34a8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
lea ecx, [ebp - 0x4358]
call fcn.004013e0
test al, al
jne 0x45e310
lea ecx, [ebp - 0x4358]
mov byte [ebp - 4], 0xa5
call fcn.00401330
mov eax, dword [ebp - 0x6f5c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f5c], eax
cmp eax, dword [edi + 0x30]
jb 0x45e268
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45ea84
lea eax, [ebp - 0x22ac]
push eax
lea ecx, [ebp - 0x2028]
call fcn.00401a10
push 1
lea ecx, [ebp - 0x2028]
call fcn.00401f20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e34e8
lea ecx, [ebp - 0x2028]
call fcn.00402f30
lea ecx, [ebp - 0x2028]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
je 0x45e834
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e49a8
push 0x4dd7e8
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x45e834
push 0
lea ecx, [ebp - 0x2028]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2540]
call fcn.0040ef20
test al, al
je 0x45e834
lea eax, [ebp - 0x2a1c]
push eax
push 0x4cb90c
push 0x4e2a08
lea ecx, [ebp - 0x2540]
call fcn.0040f5e0
test al, al
jne 0x45e777
lea eax, [ebp - 0x2a1c]
push eax
push 0x4cb90c
push 0x4e2b48
lea ecx, [ebp - 0x2540]
call fcn.0040f5e0
test al, al
jne 0x45e777
lea eax, [ebp - 0x2a1c]
push eax
push 0x4cb90c
push 0x4dcda0
lea ecx, [ebp - 0x2540]
call fcn.0040f5e0
test al, al
jne 0x45e777
lea eax, [ebp - 0x2a1c]
push eax
push 0x4cb90c
push 0x4e2ec0
lea ecx, [ebp - 0x2540]
call fcn.0040f5e0
test al, al
je 0x45e834
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2028]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4db8f0
push 0x4dd7e8
push 2
push 0x2e
push dword [eax + 0xa8]
call fcn.004426b0
mov esi, eax
cmp esi, 0xffffffff
je 0x45e834
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4db8f0
lea ecx, [ebp - 0x2028]
call fcn.00401c90
push eax
push 0
push 0x2e
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
lea ecx, [ebp - 0x2028]
call fcn.00401c90
push eax
push 0x4e21bc
push 0x4e1844
push 0x4e3510
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e49a8
push 0x4df0c0
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x45ea84
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x45e8c0
mov eax, dword [ebp - 0x6f6c]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f5c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4780
push esi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push str.HKU_
call fcn.00401bf0
add dword [ebp - 0x6f5c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x45e876
mov esi, dword [ebp - 0x6f6c]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4780
push dword [ebp - 0x6f9c]
lea ecx, [esi + eax*4]
call fcn.00401bf0
cmp byte [ebp - 0x6f45], 0
je 0x45e927
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e4780
push dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00401bf0
cmp dword [ebp - 0x6f7c], 0
mov dword [ebp - 0x6f8c], 0
jbe 0x45ea71
mov eax, dword [ebp - 0x6f78]
sub eax, esi
mov dword [ebp - 0x6f5c], eax
nop dword [eax]
mov ecx, esi
call fcn.00401c90
xor edx, edx
mov ecx, eax
call fcn.00408000
test al, al
je 0x45ea55
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45ea71
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
lea ecx, [esi + ecx]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4df0c0
push 2
push 0x2e
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x45ea55
mov ecx, dword [ebp - 0x6f5c]
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [esi + ecx]
call fcn.00401c90
push eax
push 0
mov ecx, esi
call fcn.00401c90
push eax
push 0x2e
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e3470
mov ecx, esi
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push 0x4e21bc
lea ecx, [esi + ecx]
call fcn.00401c90
push eax
push 0x4e0b14
push 0x4df0c0
push 0x4e34a8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [ebp - 0x6f7c]
jb 0x45e950
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.0041f020
lea ecx, [ebp - 0x25fc]
call fcn.00401ad0
lea ecx, [ebp - 0x221c]
call fcn.00401ad0
lea ecx, [ebp - 0x2258]
call fcn.00401ad0
lea ecx, [ebp - 0x6d70]
call fcn.0046a2d0
lea ecx, [ebp - 0x2540]
call fcn.0042bbe0
lea ecx, [ebp - 0x22ac]
call fcn.00401ad0
lea ecx, [ebp - 0x1ff0]
call fcn.00401ad0
lea ecx, [ebp - 0x23c8]
call fcn.00401ad0
lea ecx, [ebp - 0x2028]
call fcn.00401ad0
lea ecx, [ebp - 0x20e4]
mov byte [ebp - 4], 0x45
call fcn.00401ad0
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x460d9c
test dword [edi + 0x34], 0x1000
jne 0x460d9c
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x4e49d4
push dword [eax + 0x38]
call fcn.0041d990
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x2f
push dword [eax + 0x34]
call fcn.0041ff10
push 0xc
lea ecx, [ebp - 0x2184]
call fcn.00404370
lea ecx, [ebp - 0x2184]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x204c]
mov byte [ebp - 4], 0xa7
call fcn.00404370
lea ecx, [ebp - 0x204c]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x24b0]
mov byte [ebp - 4], 0xa8
call fcn.00404370
lea ecx, [ebp - 0x24b0]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x216c]
mov byte [ebp - 4], 0xa9
call fcn.00404370
lea ecx, [ebp - 0x216c]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2350]
mov byte [ebp - 4], 0xaa
call fcn.00404370
lea ecx, [ebp - 0x2350]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2288]
mov byte [ebp - 4], 0xab
call fcn.00404370
lea ecx, [ebp - 0x2288]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x22fc]
mov byte [ebp - 4], 0xac
call fcn.00404370
lea ecx, [ebp - 0x22fc]
call fcn.00401930
xor esi, esi
mov byte [ebp - 4], 0xad
push 0x20
lea ecx, [ebp - 0x28b8]
mov dword [ebp - 0x6f88], esi
call fcn.0040ed60
lea ecx, [ebp - 0x28b8]
call fcn.0040c450
mov byte [ebp - 4], 0xae
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.0041f020
push esi
push 0x4e4a00
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov dword [ebp - 0x6f70], esi
cmp dword [edi + 0x30], esi
jbe 0x45f043
mov eax, dword [ebp - 0x6f78]
mov dword [ebp - 0x6f40], eax
nop
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45f03d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d47f4
lea ecx, [ebp - 0x2240]
call fcn.00401c90
push eax
push dword [ebp - 0x6f70]
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2350]
call fcn.00401bf0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d4818
lea ecx, [ebp - 0x2350]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2288]
call fcn.00401bf0
lea ecx, [ebp - 0x2288]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
je 0x45f020
lea ecx, [ebp - 0x22fc]
call fcn.00401f90
test al, al
je 0x45ed44
lea eax, [ebp - 0x22fc]
push eax
lea ecx, [ebp - 0x2240]
call fcn.00401c90
push dword [ebp - 0x6f70]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.00476390
mov ecx, eax
call fcn.00401c90
mov edx, esi
mov ecx, eax
call fcn.004328c0
lea eax, [ebp - 0x2184]
xor esi, esi
push eax
lea ecx, [ebp - 0x2288]
mov dword [ebp - 0x6f5c], esi
call fcn.00401c90
xor edx, edx
mov ecx, eax
call fcn.00432ac0
test al, al
je 0x45f020
nop
lea ecx, [ebp - 0x2184]
call fcn.00401c90
mov ecx, eax
call fcn.0040e810
test al, al
je 0x45eff6
inc dword [ebp - 0x6f88]
lea ecx, [ebp - 0x2410]
push 0xc
call fcn.00404370
lea ecx, [ebp - 0x2410]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2608]
mov byte [ebp - 4], 0xaf
call fcn.00404370
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d47e0
lea ecx, [ebp - 0x2184]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2608]
call fcn.004019c0
lea eax, [ebp - 0x2410]
mov byte [ebp - 4], 0xb0
push eax
lea ecx, [ebp - 0x2608]
call fcn.00401c90
mov edx, 0x4df1ac
mov ecx, eax
call fcn.00432ca0
test al, al
je 0x45efdc
push 0
push 1
push 1
push 0
push 0x4e2a1c
lea ecx, [ebp - 0x2410]
call fcn.00402c80
test eax, eax
jne 0x45efdc
push eax
push 1
push 1
push eax
push 0x4e2a3c
lea ecx, [ebp - 0x2410]
call fcn.00402c80
test eax, eax
jne 0x45efdc
push eax
push 1
push 1
push eax
push 0x4e2a8c
lea ecx, [ebp - 0x2410]
call fcn.00402c80
test eax, eax
jne 0x45efdc
push eax
push 1
push 1
push eax
push 0x4e2a70
lea ecx, [ebp - 0x2410]
call fcn.00402c80
test eax, eax
jne 0x45efdc
push eax
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e4a74
lea ecx, [ebp - 0x2410]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x45efdc
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2410]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4df188
push 3
push 0x33
push dword [eax + 0xa8]
call fcn.004426b0
mov esi, eax
cmp esi, 0xffffffff
jne 0x45ef1f
lea ecx, [ebp - 0x2608]
call fcn.00401ad0
lea ecx, [ebp - 0x2410]
mov byte [ebp - 4], 0xae
call fcn.00401ad0
mov esi, dword [ebp - 0x6f5c]
jmp 0x45eff6
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2608]
call fcn.00401c90
push eax
push 0
push 0x33
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
lea ecx, [ebp - 0x2608]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x4e17a0
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x2410]
call fcn.00401c90
push eax
push 0x4e4aa0
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
lea ecx, [ebp - 0x2608]
call fcn.00401ad0
lea ecx, [ebp - 0x2410]
mov byte [ebp - 4], 0xae
call fcn.00401ad0
mov esi, dword [ebp - 0x6f5c]
jmp 0x45eff6
lea ecx, [ebp - 0x2608]
call fcn.00401ad0
lea ecx, [ebp - 0x2410]
mov byte [ebp - 4], 0xae
call fcn.00401ad0
lea eax, [ebp - 0x2184]
inc esi
push eax
lea ecx, [ebp - 0x2288]
mov dword [ebp - 0x6f5c], esi
call fcn.00401c90
mov edx, esi
mov ecx, eax
call fcn.00432ac0
test al, al
jne 0x45ed70
mov eax, dword [ebp - 0x6f70]
add dword [ebp - 0x6f40], 0xc
inc eax
mov dword [ebp - 0x6f70], eax
cmp eax, dword [edi + 0x30]
jb 0x45ec60
mov esi, dword [ebp - 0x6f88]
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x460d40
test esi, esi
jne 0x45f07b
lea ecx, [ebp - 0x22fc]
call fcn.00401f90
test al, al
je 0x45f07b
push esi
push 0x4e4ad0
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
jmp 0x460d40
push fcn.00401ad0
push fcn.00401930
push 2
push 0xc
lea eax, [ebp - 0x2c]
push eax
call fcn.00476c88
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4b28
lea ecx, [ebp - 0x2748]
mov byte [ebp - 4], 0xb1
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2c]
call fcn.00401bf0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4b28
lea ecx, [ebp - 0x26b0]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x20]
call fcn.00401bf0
push 0xc
lea ecx, [ebp - 0x24c8]
call fcn.00404370
push 1
push 0x4e4b78
lea ecx, [ebp - 0x24c8]
call fcn.00401980
push 0
push 0x4e4c40
lea ecx, [ebp - 0x1fd4]
mov byte [ebp - 4], 0xb2
call fcn.0040d1b0
xor esi, esi
mov dword [ebp - 0x6f70], esi
cmp dword [edi + 0x30], esi
jbe 0x45f4be
mov eax, dword [ebp - 0x6f78]
mov dword [ebp - 0x6f40], eax
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45f4be
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d47f4
lea ecx, [ebp - 0x2240]
call fcn.00401c90
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2350]
call fcn.00401bf0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d4818
lea ecx, [ebp - 0x2350]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2288]
call fcn.00401bf0
lea ecx, [ebp - 0x2288]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
je 0x45f4a7
lea eax, [ebp - 0x2184]
xor esi, esi
push eax
lea ecx, [ebp - 0x2288]
mov dword [ebp - 0x6f5c], esi
call fcn.00401c90
xor edx, edx
mov ecx, eax
call fcn.00432ac0
test al, al
je 0x45f4a1
nop dword [eax + eax]
lea ecx, [ebp - 0x2184]
call fcn.00401c90
mov ecx, eax
call fcn.0040e810
test al, al
je 0x45f477
push 0xc
lea ecx, [ebp - 0x2428]
call fcn.00404370
lea ecx, [ebp - 0x2428]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2614]
mov byte [ebp - 4], 0xb3
call fcn.00404370
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d47e0
lea ecx, [ebp - 0x2184]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2614]
call fcn.004019c0
lea eax, [ebp - 0x2428]
mov byte [ebp - 4], 0xb4
push eax
lea ecx, [ebp - 0x2614]
call fcn.00401c90
mov edx, 0x4df2c8
mov ecx, eax
call fcn.00432ca0
test al, al
je 0x45f45d
push 0x4d5eb0
lea ecx, [ebp - 0x2428]
call fcn.00401a40
test al, al
jne 0x45f45d
push 0x4d5e14
lea ecx, [ebp - 0x2428]
call fcn.00401a40
test al, al
jne 0x45f45d
push 0x4d627c
lea ecx, [ebp - 0x2428]
call fcn.00401a40
test al, al
jne 0x45f45d
push 0x4e4c7c
lea ecx, [ebp - 0x2428]
call fcn.00401a40
test al, al
jne 0x45f45d
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e4c94
lea ecx, [ebp - 0x2428]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x45f45d
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2428]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4df288
push 3
push 0x34
push dword [eax + 0xa8]
call fcn.004426b0
mov esi, eax
cmp esi, 0xffffffff
jne 0x45f3a0
lea ecx, [ebp - 0x2614]
call fcn.00401ad0
lea ecx, [ebp - 0x2428]
mov byte [ebp - 4], 0xb2
call fcn.00401ad0
mov esi, dword [ebp - 0x6f5c]
jmp 0x45f477
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2614]
call fcn.00401c90
push eax
push 0
push 0x34
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
lea ecx, [ebp - 0x2614]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x4e17a0
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x2428]
call fcn.00401c90
push eax
push 0x4e4cc8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
lea ecx, [ebp - 0x2614]
call fcn.00401ad0
lea ecx, [ebp - 0x2428]
mov byte [ebp - 4], 0xb2
call fcn.00401ad0
mov esi, dword [ebp - 0x6f5c]
jmp 0x45f477
lea ecx, [ebp - 0x2614]
call fcn.00401ad0
lea ecx, [ebp - 0x2428]
mov byte [ebp - 4], 0xb2
call fcn.00401ad0
lea eax, [ebp - 0x2184]
inc esi
push eax
lea ecx, [ebp - 0x2288]
mov dword [ebp - 0x6f5c], esi
call fcn.00401c90
mov edx, esi
mov ecx, eax
call fcn.00432ac0
test al, al
jne 0x45f210
mov esi, dword [ebp - 0x6f70]
add dword [ebp - 0x6f40], 0xc
inc esi
mov dword [ebp - 0x6f70], esi
cmp esi, dword [edi + 0x30]
jb 0x45f142
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x460d1f
lea esi, [ebp - 0x2c]
mov dword [ebp - 0x6f8c], 0
mov dword [ebp - 0x6f5c], esi
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45f828
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4cf4
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x204c]
call fcn.00401bf0
push 0x260
lea ecx, [ebp - 0x40f8]
call fcn.00408820
push 1
lea ecx, [ebp - 0x204c]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x40f8]
call fcn.004012e0
push 1
lea ecx, [ebp - 0x204c]
mov byte [ebp - 4], 0xb5
call fcn.00401c90
push eax
lea ecx, [ebp - 0x40f8]
call fcn.00401430
test al, al
je 0x45f7fa
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4c97ec
push 1
lea ecx, [ebp - 0x40f8]
call fcn.00401480
push eax
push 0x4c97ec
lea ecx, [ebp - 0x216c]
call fcn.00401bf0
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x216c]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x24c8]
call fcn.00402c80
test eax, eax
jne 0x45f7e1
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 1
lea ecx, [ebp - 0x40f8]
call fcn.00401480
push eax
push 0x4c9754
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x204c]
call fcn.00401bf0
lea ecx, [ebp - 0x216c]
call fcn.00401ae0
push 0
push 0x80
lea ecx, [ebp - 0x204c]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x28b8]
call fcn.0040c700
test eax, eax
je 0x45f69e
push 0
lea eax, [ebp - 0x216c]
push eax
lea ecx, [ebp - 0x28b8]
call fcn.0040cac0
test eax, eax
je 0x45f69e
push 0
push 1
push 1
push 0
push 0x4e4d04
lea ecx, [ebp - 0x216c]
call fcn.00402c80
mov esi, eax
push 0
lea ecx, [esi + 0xa]
push ecx
push 1
push 0
push 0x4e4d1c
lea ecx, [ebp - 0x216c]
call fcn.00402c80
test esi, esi
je 0x45f693
test eax, eax
je 0x45f693
sub eax, esi
lea ecx, [ebp - 0x216c]
sub eax, 0xb
push eax
lea eax, [esi + 0xb]
push eax
call fcn.00402c40
jmp 0x45f69e
lea ecx, [ebp - 0x216c]
call fcn.00401ae0
lea ecx, [ebp - 0x216c]
call fcn.00401f90
test al, al
je 0x45f6d5
push 1
lea ecx, [ebp - 0x40f8]
call fcn.00401480
push eax
lea ecx, [ebp - 0x216c]
call fcn.00401a00
push 0
lea ecx, [ebp - 0x216c]
call fcn.00401ea0
jmp 0x45f6e2
push 3
lea ecx, [ebp - 0x216c]
call fcn.00403700
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e4c94
lea ecx, [ebp - 0x204c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x45f7e1
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x204c]
call fcn.00401c90
push eax
push 0x4db8f0
lea ecx, [ebp - 0x216c]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 3
push 0x34
push dword [eax + 0xa8]
call fcn.004426b0
mov esi, eax
cmp esi, 0xffffffff
je 0x45f7e1
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4db8f0
lea ecx, [ebp - 0x204c]
call fcn.00401c90
push eax
push 0
push 0x34
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
lea ecx, [ebp - 0x204c]
call fcn.00401c90
push eax
push 0x4e17a0
push 0x4db8f0
push 0x4e0b14
lea ecx, [ebp - 0x216c]
call fcn.00401c90
push eax
push 0x4e4d38
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
lea ecx, [ebp - 0x40f8]
call fcn.004013e0
mov esi, dword [ebp - 0x6f5c]
test al, al
jne 0x45f570
lea ecx, [ebp - 0x40f8]
mov byte [ebp - 4], 0xb2
call fcn.00401330
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f5c], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, 2
jb 0x45f4e0
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x460d1f
push 0x24
lea ecx, [ebp - 0x2830]
call fcn.0042cde0
lea ecx, [ebp - 0x2830]
call fcn.0040ee70
push 0xc
lea ecx, [ebp - 0x2264]
mov byte [ebp - 4], 0xb6
call fcn.00404370
lea ecx, [ebp - 0x2264]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2454]
mov byte [ebp - 4], 0xb7
call fcn.00404370
lea ecx, [ebp - 0x2454]
call fcn.00401930
push 0
push 0x4e4d5c
lea ecx, [ebp - 0x1fd4]
mov byte [ebp - 4], 0xb8
call fcn.0040d1b0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4d90
lea ecx, [edi + 0x314]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00401bf0
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f70], 0
jbe 0x45fd31
mov esi, dword [ebp - 0x6f78]
mov dword [ebp - 0x6f80], esi
nop dword [eax]
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45fd31
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4dcc
lea ecx, [ebp - 0x2240]
call fcn.00401c90
push eax
push dword [ebp - 0x6f70]
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2184]
call fcn.00401bf0
lea eax, [ebp - 0x204c]
xor edx, edx
push eax
lea ecx, [ebp - 0x2184]
mov dword [ebp - 0x6f5c], edx
call fcn.00401c90
xor edx, edx
mov ecx, eax
call fcn.00432ac0
test al, al
je 0x45fd12
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4df848
lea ecx, [ebp - 0x204c]
call fcn.00402f30
push 0x100
lea ecx, [ebp - 0x204c]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2830]
call fcn.0040ef20
test al, al
je 0x45fce5
push 0
lea eax, [ebp - 0x2ab8]
mov dword [ebp - 0x6eb4], 0
push eax
xorps xmm0, xmm0
lea ecx, [ebp - 0x2830]
push 0x4df4e0
movups xmmword [ebp - 0x6ec4], xmm0
call fcn.0040f520
test al, al
je 0x45fce5
lea eax, [ebp - 0x2ab8]
push eax
lea eax, [ebp - 0x6ec4]
push eax
lea ecx, [ebp - 0x2830]
call fcn.0040fd40
test al, al
je 0x45fce5
lea eax, [ebp - 0x2264]
push eax
push 0x4df514
lea eax, [ebp - 0x6ec4]
push eax
lea ecx, [ebp - 0x2830]
call fcn.0040f810
test eax, eax
je 0x45fcc4
push 0
push 1
push 1
push 0
push 0x4e4e08
lea ecx, [ebp - 0x2264]
call fcn.00402c80
lea ecx, [ebp - 0x2264]
mov esi, eax
call fcn.00401b50
sub eax, 0x12
cmp esi, eax
je 0x45fcbe
push 0
push 1
push 1
push 0
push 0x4e4e30
lea ecx, [ebp - 0x2264]
call fcn.00402c80
lea ecx, [ebp - 0x2264]
mov esi, eax
call fcn.00401b50
sub eax, 0xb
cmp esi, eax
je 0x45fcbe
push 0
push 1
push 1
push 0
push 0x4e4e4c
lea ecx, [ebp - 0x2264]
call fcn.00402c80
lea ecx, [ebp - 0x2264]
mov esi, eax
call fcn.00401b50
sub eax, 0xb
cmp esi, eax
je 0x45fcbe
lea eax, [ebp - 0x6ec4]
push eax
lea eax, [ebp - 0x2b84]
push eax
push 0x4e4e68
lea ecx, [ebp - 0x2830]
call fcn.0040f520
test al, al
je 0x45fcbe
lea eax, [ebp - 0x2264]
push eax
push 0x4e4e84
lea eax, [ebp - 0x2b84]
push eax
lea ecx, [ebp - 0x2830]
call fcn.0040f810
test eax, eax
je 0x45fcbe
push 0x4e29bc
lea ecx, [ebp - 0x2264]
call fcn.00401a40
test al, al
jne 0x45fcbe
lea eax, [ebp - 0x2454]
push eax
push 0x4df4f0
lea eax, [ebp - 0x6ec4]
push eax
lea ecx, [ebp - 0x2830]
call fcn.0040f810
test eax, eax
jne 0x45fb73
lea eax, [ebp - 0x2454]
push eax
push 0x4df508
lea eax, [ebp - 0x6ec4]
push eax
lea ecx, [ebp - 0x2830]
call fcn.0040f810
test eax, eax
je 0x45fcbe
lea ecx, [ebp - 0x2264]
call fcn.00401c90
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.00401c90
mov edx, esi
mov ecx, eax
call fcn.00408000
test al, al
jne 0x45fcbe
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e4e90
lea ecx, [ebp - 0x2264]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x45fcbe
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2454]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f80]
push eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2264]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 3
push 0x35
push dword [eax + 0xa8]
call fcn.004426b0
mov esi, eax
cmp esi, 0xffffffff
je 0x45fcbe
lea ecx, [ebp - 0x204c]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f80]
push eax
push 0
push 0
push 0
push 0
push 0
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2454]
call fcn.00401c90
push eax
push 0
push 0x35
push esi
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
lea ecx, [ebp - 0x2454]
call fcn.00401c90
mov esi, dword [ebp - 0x6f80]
mov ecx, esi
push eax
push 0x4e17a0
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x2264]
call fcn.00401c90
push eax
push 0x4e1fc0
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
jmp 0x45fcc4
mov esi, dword [ebp - 0x6f80]
lea eax, [ebp - 0x2ab8]
push eax
lea eax, [ebp - 0x6ec4]
push eax
lea ecx, [ebp - 0x2830]
call fcn.0040fd40
test al, al
jne 0x45fa11
inc dword [ebp - 0x6f5c]
lea eax, [ebp - 0x204c]
push eax
lea ecx, [ebp - 0x2184]
call fcn.00401c90
mov edx, dword [ebp - 0x6f5c]
mov ecx, eax
call fcn.00432ac0
test al, al
jne 0x45f971
mov eax, dword [ebp - 0x6f70]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f80], esi
mov dword [ebp - 0x6f70], eax
cmp eax, dword [edi + 0x30]
jb 0x45f8f0
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x460cfe
push 0
push 0x4e4eb8
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x6e60]
push 1
push 0
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6e68], eax
mov dword [ebp - 0x6e64], 0x37
call fcn.00401980
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0xb9
call fcn.00401c90
lea ecx, [edi + 0x14c]
mov dword [ebp - 0x6e54], eax
mov dword [ebp - 0x6e50], 0
call fcn.00401c90
mov dword [ebp - 0x6e4c], eax
lea ecx, [ebp - 0x6e40]
lea eax, [ebp - 0x1fd4]
push 1
mov dword [ebp - 0x6e48], eax
mov eax, dword [edi + 4]
push 0x4d05c0
mov dword [ebp - 0x6e44], eax
call fcn.00401980
mov ecx, edi
mov byte [ebp - 4], 0xba
call fcn.0046f9d0
test al, al
jne 0x460cf3
push 0xc
lea ecx, [ebp - 0x23a4]
call fcn.00404370
lea ecx, [ebp - 0x23a4]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x23e0]
mov byte [ebp - 4], 0xbb
call fcn.00404370
lea ecx, [ebp - 0x23e0]
call fcn.00401930
xor esi, esi
mov byte [ebp - 4], 0xbc
mov dword [ebp - 0x6f70], esi
cmp dword [edi + 0x30], esi
jbe 0x45ffc5
nop dword [eax]
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45ffc5
push esi
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401b50
cmp eax, 3
jl 0x45ffb5
lea eax, [ebp - 0x6e60]
push eax
lea ecx, [ebp - 0x2240]
call fcn.00401c90
push dword [ebp - 0x6f70]
lea ecx, [edi + 0x10c]
mov esi, eax
call fcn.00476390
mov ecx, eax
call fcn.00401c90
mov edx, esi
mov ecx, eax
call fcn.004328c0
mov esi, dword [ebp - 0x6f70]
test al, al
je 0x45ffb5
push esi
lea ecx, [edi + 0x114]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24ec]
mov dword [ebp - 0x6e50], eax
call fcn.00401c90
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x23a4]
call fcn.00401bf0
lea ecx, [ebp - 0x23a4]
call fcn.00401c90
mov ecx, eax
call fcn.0040e810
test al, al
je 0x45ffb5
lea ecx, [ebp - 0x23a4]
call fcn.00401c90
push eax
lea eax, [ebp - 0x6e68]
mov ecx, edi
push eax
call fcn.0044e820
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x45ffc5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25a8]
call fcn.00401c90
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x23a4]
call fcn.00401bf0
lea ecx, [ebp - 0x23a4]
call fcn.00401c90
mov ecx, eax
call fcn.0040e810
test al, al
je 0x45ffb5
push 0
lea ecx, [ebp - 0x23a4]
call fcn.00401f20
lea ecx, [ebp - 0x23a4]
call fcn.00401c90
push eax
lea eax, [ebp - 0x6e68]
mov ecx, edi
push eax
call fcn.0044e820
inc esi
mov dword [ebp - 0x6f70], esi
cmp esi, dword [edi + 0x30]
jb 0x45fe30
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x460cdd
lea ecx, [ebp - 0x2650]
mov dword [ebp - 0x6e50], 0x4db8f0
call fcn.00401c90
push eax
lea eax, [ebp - 0x6e68]
mov ecx, edi
push eax
call fcn.0044e820
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x460cdd
push 0
push 1
lea ecx, [ebp - 0x265c]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x23a4]
call fcn.00401ba0
mov ecx, eax
call fcn.00401f20
lea ecx, [ebp - 0x23a4]
call fcn.00401c90
push eax
lea eax, [ebp - 0x6e68]
mov ecx, edi
push eax
call fcn.0044e820
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x460cdd
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x4600ba
mov eax, dword [ebp - 0x6f6c]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f5c], eax
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4ee8
push esi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push str.HKU_
call fcn.00401bf0
add dword [ebp - 0x6f5c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x460070
mov esi, dword [ebp - 0x6f6c]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4f30
push dword [ebp - 0x6f9c]
lea ecx, [esi + eax*4]
call fcn.00401bf0
cmp byte [ebp - 0x6f45], 0
je 0x460121
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e4f30
push dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00401bf0
push 4
lea ecx, [ebp - 0x22c8]
call fcn.00404590
lea ecx, [ebp - 0x22c8]
call fcn.00404ea0
cmp dword [ebp - 0x6f7c], 0
mov byte [ebp - 4], 0xbd
mov dword [ebp - 0x6f8c], 0
jbe 0x4604b5
mov esi, dword [ebp - 0x6f78]
mov eax, dword [ebp - 0x6f6c]
sub eax, esi
mov dword [ebp - 0x6f70], 0
mov dword [ebp - 0x6f88], esi
mov dword [ebp - 0x6f80], eax
nop dword [eax + eax]
add eax, esi
push 0
push 0x20019
mov ecx, eax
mov dword [ebp - 0x6f5c], eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x22c8]
call fcn.004063e0
test al, al
je 0x460486
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x4604b5
mov ecx, edi
mov dword [ebp - 0x6f50], 0
call fcn.0046f9d0
test al, al
jne 0x460486
mov esi, dword [ebp - 0x6f6c]
add esi, dword [ebp - 0x6f70]
nop
lea eax, [ebp - 0x6cb4]
push eax
push dword [ebp - 0x6f50]
lea ecx, [ebp - 0x22c8]
call fcn.004067b0
test al, al
je 0x460480
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4f78
push dword [ebp - 0x6cb4]
mov ecx, esi
push 0x4c9754
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00401bf0
push 0
mov ecx, esi
mov dword [ebp - 0x6f40], esi
call fcn.00401b50
push eax
push 1
push 0
push 0x4e4fa0
lea ecx, [ebp - 0x1f98]
call fcn.00402c80
test eax, eax
je 0x460463
lea eax, [ebp - 0x23e0]
mov dword [ebp - 0x6f40], esi
push eax
push 0x4c975c
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00406750
test al, al
je 0x460463
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x22fc]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x23e0]
call fcn.00402c80
mov dword [ebp - 0x6f4c], eax
mov ecx, esi
test eax, eax
je 0x460469
lea ecx, [ebp - 0x22fc]
call fcn.00401b50
add eax, dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x23e0]
push eax
call fcn.00402bd0
push 3
push 0
push 0
push 0x4c975c
push 0x4ca048
lea ecx, [ebp - 0x23e0]
call fcn.00403410
mov ecx, eax
call fcn.00403700
lea ecx, [ebp - 0x23e0]
mov dword [ebp - 0x6f40], esi
call fcn.00401b50
cmp eax, 3
jl 0x460463
push 0
lea ecx, [edi + 0x14c]
mov dword [ebp - 0x6f40], esi
call fcn.00401c90
push eax
push 0x4e0980
lea ecx, [ebp - 0x23e0]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x460463
mov ecx, dword [ebp - 0x6f5c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
push 0x4c9754
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00401bf0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x23e0]
call fcn.00401c90
mov esi, dword [ebp - 0x6f88]
mov ecx, esi
push eax
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dcf68
push 3
push 0x37
push dword [eax + 0xa8]
call fcn.004426b0
mov ecx, dword [ebp - 0x6f5c]
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x460469
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00401c90
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
push 0x37
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x23e0]
call fcn.00401c90
push eax
push 0x4e3168
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
mov ecx, dword [ebp - 0x6f5c]
jmp 0x460469
mov ecx, dword [ebp - 0x6f40]
inc dword [ebp - 0x6f50]
mov esi, ecx
mov ecx, edi
call fcn.0046f9d0
test al, al
je 0x4601e0
mov esi, dword [ebp - 0x6f88]
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
add dword [ebp - 0x6f70], 0xc
inc eax
cmp eax, dword [ebp - 0x6f7c]
mov dword [ebp - 0x6f8c], eax
mov eax, dword [ebp - 0x6f80]
mov dword [ebp - 0x6f88], esi
jb 0x460180
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x460cd2
push 0
push 0x4e4fb4
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
push 0xc
lea ecx, [ebp - 0x24f8]
call fcn.00404370
lea ecx, [ebp - 0x24f8]
call fcn.00401930
mov byte [ebp - 4], 0xbe
cmp dword [edi + 0x30], 0
mov dword [ebp - 0x6f70], 0
jbe 0x460cad
mov esi, dword [ebp - 0x6f78]
nop dword [eax]
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x460cad
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4dcc
lea ecx, [ebp - 0x2240]
call fcn.00401c90
push eax
push dword [ebp - 0x6f70]
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2184]
call fcn.00401bf0
lea eax, [ebp - 0x24f8]
xor edx, edx
push eax
lea ecx, [ebp - 0x2184]
mov dword [ebp - 0x6f5c], edx
call fcn.00401c90
xor edx, edx
mov ecx, eax
call fcn.00432ac0
test al, al
je 0x460c94
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d4790
lea ecx, [ebp - 0x24f8]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x204c]
call fcn.00401bf0
lea ecx, [ebp - 0x204c]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
je 0x4606d7
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e4fec
push 0x4df7a8
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x4606d7
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x204c]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4df7a8
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x4606d7
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x204c]
call fcn.00401c90
push eax
push 0
push 0x38
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e3470
lea ecx, [ebp - 0x204c]
call fcn.00401c90
push eax
push 0x4e17a0
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
push 0x4df7a8
push 0x4e34a8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d47ac
lea ecx, [ebp - 0x24f8]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x204c]
call fcn.00401bf0
lea ecx, [ebp - 0x204c]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
jne 0x460743
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4df848
lea ecx, [ebp - 0x24f8]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x204c]
call fcn.00401bf0
lea ecx, [ebp - 0x204c]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
je 0x460859
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e4fec
push 0x4df808
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x460859
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x204c]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4df808
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x460859
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x204c]
call fcn.00401c90
push eax
push 0
push 0x38
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e3470
lea ecx, [ebp - 0x204c]
call fcn.00401c90
push eax
push 0x4e17a0
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
push 0x4df808
push 0x4e34a8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d47c4
lea ecx, [ebp - 0x24f8]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x204c]
call fcn.00401bf0
lea ecx, [ebp - 0x204c]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
jne 0x4608c5
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4df788
lea ecx, [ebp - 0x24f8]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x204c]
call fcn.00401bf0
lea ecx, [ebp - 0x204c]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
je 0x4609db
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e4fec
push 0x4df740
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x4609db
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x204c]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4df740
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x4609db
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x204c]
call fcn.00401c90
push eax
push 0
push 0x38
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e3470
lea ecx, [ebp - 0x204c]
call fcn.00401c90
push eax
push 0x4e17a0
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
push 0x4df740
push 0x4e34a8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d47e0
lea ecx, [ebp - 0x24f8]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x204c]
call fcn.00401bf0
lea ecx, [ebp - 0x204c]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
je 0x460b21
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e4fec
push 0x4df86c
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x460b21
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x204c]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4df86c
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x460b21
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x204c]
call fcn.00401c90
push eax
push 0
push 0x38
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e3470
lea ecx, [ebp - 0x204c]
call fcn.00401c90
push eax
push 0x4e17a0
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
push 0x4df86c
push 0x4e34a8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5018
lea ecx, [ebp - 0x24f8]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x204c]
call fcn.00401bf0
lea ecx, [ebp - 0x204c]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
je 0x460c67
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e4fec
push 0x4e502c
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x460c67
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x204c]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4e502c
push 3
push 0x38
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x460c67
push 0
push 0
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x204c]
call fcn.00401c90
push eax
push 0
push 0x38
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e3470
lea ecx, [ebp - 0x204c]
call fcn.00401c90
push eax
push 0x4e17a0
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
push 0x4e502c
push 0x4e34a8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
inc dword [ebp - 0x6f5c]
lea eax, [ebp - 0x24f8]
push eax
lea ecx, [ebp - 0x2184]
call fcn.00401c90
mov edx, dword [ebp - 0x6f5c]
mov ecx, eax
call fcn.00432ac0
test al, al
jne 0x460591
mov eax, dword [ebp - 0x6f70]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f70], eax
cmp eax, dword [edi + 0x30]
jb 0x460510
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.0041f020
mov ecx, edi
call fcn.0046f9d0
lea ecx, [ebp - 0x24f8]
call fcn.00401ad0
lea ecx, [ebp - 0x22c8]
call fcn.00406410
lea ecx, [ebp - 0x23e0]
call fcn.00401ad0
lea ecx, [ebp - 0x23a4]
call fcn.00401ad0
lea ecx, [ebp - 0x6e68]
call fcn.0046a2d0
lea ecx, [ebp - 0x2454]
call fcn.00401ad0
lea ecx, [ebp - 0x2264]
call fcn.00401ad0
lea ecx, [ebp - 0x2830]
call fcn.0042bbe0
lea ecx, [ebp - 0x24c8]
call fcn.00401ad0
push fcn.00401ad0
push 2
push 0xc
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0xae
push eax
call fcn.00476cfc
lea ecx, [ebp - 0x28b8]
call fcn.0040ed40
lea ecx, [ebp - 0x22fc]
call fcn.00401ad0
lea ecx, [ebp - 0x2288]
call fcn.00401ad0
lea ecx, [ebp - 0x2350]
call fcn.00401ad0
lea ecx, [ebp - 0x216c]
call fcn.00401ad0
lea ecx, [ebp - 0x24b0]
call fcn.00401ad0
lea ecx, [ebp - 0x204c]
call fcn.00401ad0
lea ecx, [ebp - 0x2184]
mov byte [ebp - 4], 0x45
call fcn.00401ad0
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x4647f3
test dword [edi + 0x34], 0x1000
jne 0x4647f3
push 0
push 0x4e5070
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x4e50bc
push dword [eax + 0x38]
call fcn.0041d990
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x32
push dword [eax + 0x34]
call fcn.0041ff10
push 0xc
lea ecx, [ebp - 0x2068]
call fcn.00404370
lea ecx, [ebp - 0x2068]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x1fe0]
mov byte [ebp - 4], 0xbf
call fcn.00404370
lea ecx, [ebp - 0x1fe0]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x24d4]
mov byte [ebp - 4], 0xc0
call fcn.00404370
lea ecx, [ebp - 0x24d4]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2010]
mov byte [ebp - 4], 0xc1
call fcn.00404370
lea ecx, [ebp - 0x2010]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x209c]
mov byte [ebp - 4], 0xc2
call fcn.00404370
lea ecx, [ebp - 0x209c]
call fcn.00401930
push 0x24
lea ecx, [ebp - 0x259c]
mov byte [ebp - 4], 0xc3
call fcn.0042cde0
lea ecx, [ebp - 0x259c]
call fcn.0040ee70
push 0x260
lea ecx, [ebp - 0x2df8]
mov byte [ebp - 4], 0xc4
call fcn.00408820
lea ecx, [ebp - 0x2df8]
call fcn.004012b0
push 0x260
lea ecx, [ebp - 0x32b8]
mov byte [ebp - 4], 0xc5
call fcn.00408820
lea ecx, [ebp - 0x32b8]
call fcn.004012b0
push 0xc
lea ecx, [ebp - 0x21c0]
mov byte [ebp - 4], 0xc6
call fcn.00406340
lea ecx, [ebp - 0x21c0]
call fcn.00476290
push 0xc
lea ecx, [ebp - 0x237c]
mov byte [ebp - 4], 0xc7
call fcn.00406340
push 0xc
push 0
lea ecx, [ebp - 0x237c]
call fcn.00476740
push 0xc
lea ecx, [ebp - 0x2058]
mov byte [ebp - 4], 0xc8
call fcn.00406340
push 0xc
push 0
lea ecx, [ebp - 0x2058]
call fcn.00476740
push 0xc
lea ecx, [ebp - 0x21f0]
mov byte [ebp - 4], 0xc9
call fcn.00406340
lea ecx, [ebp - 0x21f0]
call fcn.00476290
push 0xc
lea ecx, [ebp - 0x2228]
mov byte [ebp - 4], 0xca
call fcn.00406340
push 0xc
push 0
lea ecx, [ebp - 0x2228]
call fcn.00475dd0
mov byte [ebp - 4], 0xcb
lea ecx, [ebp - 0x280c]
xor esi, esi
push 0x20
mov dword [ebp - 0x6f80], esi
call fcn.0040ed60
lea ecx, [ebp - 0x280c]
call fcn.0040c450
mov byte [ebp - 4], 0xcc
mov eax, dword [edi + 0x30]
mov dword [ebp - 0x6f5c], esi
test eax, eax
je 0x461630
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4c9800
lea ecx, [ebp - 0x2154]
call fcn.00401c90
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00401bf0
push 5
lea ecx, [ebp - 0x1fe0]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2df8]
call fcn.00401430
test al, al
je 0x461618
mov edi, dword [ebp - 0x6f80]
nop dword [eax + eax]
push 1
push 1
lea ecx, [ebp - 0x2df8]
call fcn.00401480
push eax
lea ecx, [ebp - 0x209c]
call fcn.00401ba0
push 0x4d5eb0
lea ecx, [ebp - 0x209c]
call fcn.00401a40
test al, al
jne 0x4615f9
push str.Microsoft
lea ecx, [ebp - 0x209c]
call fcn.00401a40
test al, al
jne 0x4615f9
push 0x4e50f4
lea ecx, [ebp - 0x209c]
call fcn.00401a40
test al, al
jne 0x4615f9
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5108
push 1
lea ecx, [ebp - 0x2df8]
call fcn.00401480
push eax
push 0x4c9754
lea ecx, [ebp - 0x2154]
call fcn.00401c90
mov ecx, dword [ebp - 0x6fa4]
push eax
push esi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2068]
call fcn.00401bf0
lea ecx, [ebp - 0x2068]
call fcn.00401c90
push eax
call dword [0x4a948c]
test al, al
jne 0x461451
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5140
push 1
lea ecx, [ebp - 0x2df8]
call fcn.00401480
push eax
push 0x4c9754
lea ecx, [ebp - 0x2154]
call fcn.00401c90
mov ecx, dword [ebp - 0x6fa4]
push eax
push esi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2068]
call fcn.00401bf0
lea ecx, [ebp - 0x2068]
call fcn.00401c90
push eax
call dword [0x4a948c]
test al, al
jne 0x461451
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4c9800
push 1
lea ecx, [ebp - 0x2df8]
call fcn.00401480
push eax
push 0x4c9754
lea ecx, [ebp - 0x2154]
call fcn.00401c90
mov ecx, dword [ebp - 0x6fa4]
push eax
push esi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00401bf0
push 5
lea ecx, [ebp - 0x1fe0]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x32b8]
call fcn.00401430
test al, al
je 0x4615f9
push 2
lea ecx, [ebp - 0x1fe0]
call fcn.00402b90
mov esi, dword [0x4a948c]
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5108
push 1
lea ecx, [ebp - 0x32b8]
call fcn.00401480
push eax
push 0x4c9754
lea ecx, [ebp - 0x1fe0]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2068]
call fcn.00401bf0
lea ecx, [ebp - 0x2068]
call fcn.00401c90
push eax
call esi
test eax, eax
jne 0x46126e
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4e5140
push 1
lea ecx, [ebp - 0x32b8]
call fcn.00401480
push eax
push 0x4c9754
lea ecx, [ebp - 0x1fe0]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2068]
call fcn.00401bf0
lea ecx, [ebp - 0x2068]
call fcn.00401c90
push eax
call esi
test eax, eax
je 0x461433
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5184
push 1
lea ecx, [ebp - 0x32b8]
lea esi, [edi + 1]
call fcn.00401480
push eax
push 0x4c9754
lea ecx, [ebp - 0x1fe0]
call fcn.00401c90
push eax
push edi
push 2
push esi
lea ecx, [ebp - 0x21c0]
call fcn.00476530
mov ecx, eax
call fcn.004766b0
mov ecx, eax
call fcn.00401bf0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x32b8]
call fcn.00401480
push eax
push 0x4c9754
push 1
lea ecx, [ebp - 0x2df8]
call fcn.00401480
push eax
push edi
push 2
push esi
lea ecx, [ebp - 0x237c]
call fcn.00476530
mov ecx, eax
call fcn.004766b0
mov ecx, eax
call fcn.00401bf0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x32b8]
call fcn.00401480
push eax
push 0x4ca04c
push 1
lea ecx, [ebp - 0x2df8]
call fcn.00401480
push eax
push edi
push 2
push esi
lea ecx, [ebp - 0x2058]
call fcn.00476530
mov ecx, eax
call fcn.004766b0
mov ecx, eax
call fcn.00401bf0
push edi
push 2
push esi
lea ecx, [ebp - 0x2228]
call fcn.00475ce0
mov ecx, eax
call fcn.00475db0
mov ecx, dword [ebp - 0x6f5c]
push 2
push esi
mov dword [eax], ecx
lea ecx, [ebp - 0x21f0]
call fcn.00476530
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e519c
push edi
lea ecx, [ebp - 0x21c0]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2068]
call fcn.00401bf0
lea ecx, [ebp - 0x2068]
call fcn.00401c90
mov dl, 1
mov ecx, eax
call fcn.0040d510
push 0
push eax
lea ecx, [ebp - 0x2068]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x280c]
call fcn.0040c700
test eax, eax
je 0x46142b
push 0
push edi
lea ecx, [ebp - 0x21f0]
call fcn.004766b0
push eax
lea ecx, [ebp - 0x280c]
call fcn.0040cac0
test eax, eax
je 0x46142b
push 3
push edi
lea ecx, [ebp - 0x21f0]
call fcn.004766b0
mov ecx, eax
call fcn.00403700
mov edi, esi
mov esi, dword [0x4a948c]
lea ecx, [ebp - 0x32b8]
call fcn.004013e0
test al, al
jne 0x4611d0
mov esi, dword [ebp - 0x6f5c]
jmp 0x4615f9
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5184
lea eax, [edi + 1]
push 1
lea ecx, [ebp - 0x2df8]
mov dword [ebp - 0x6f40], eax
call fcn.00401480
push eax
push 0x4c9754
lea ecx, [ebp - 0x2154]
call fcn.00401c90
mov ecx, dword [ebp - 0x6fa4]
push eax
push esi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
push edi
push 2
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x21c0]
call fcn.00476530
mov ecx, eax
call fcn.004766b0
mov ecx, eax
call fcn.00401bf0
push 1
push 1
lea ecx, [ebp - 0x2df8]
call fcn.00401480
push eax
push edi
push 2
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x237c]
call fcn.00476530
mov ecx, eax
call fcn.004766b0
mov ecx, eax
call fcn.00401ba0
push 1
push 1
lea ecx, [ebp - 0x2df8]
call fcn.00401480
push eax
push edi
push 2
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2058]
call fcn.00476530
mov ecx, eax
call fcn.004766b0
mov ecx, eax
call fcn.00401ba0
push edi
push 2
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2228]
call fcn.00475ce0
mov ecx, eax
call fcn.00475db0
push 2
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x21f0]
mov dword [eax], esi
call fcn.00476530
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e519c
push edi
lea ecx, [ebp - 0x21c0]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2068]
call fcn.00401bf0
lea ecx, [ebp - 0x2068]
call fcn.00401c90
mov dl, 1
mov ecx, eax
call fcn.0040d510
push 0
push eax
lea ecx, [ebp - 0x2068]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x280c]
call fcn.0040c700
test eax, eax
je 0x4615f3
push 0
push edi
lea ecx, [ebp - 0x21f0]
call fcn.004766b0
push eax
lea ecx, [ebp - 0x280c]
call fcn.0040cac0
test eax, eax
je 0x4615f3
push 3
push edi
lea ecx, [ebp - 0x21f0]
call fcn.004766b0
mov ecx, eax
call fcn.00403700
mov edi, dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2df8]
call fcn.004013e0
test al, al
jne 0x461010
mov dword [ebp - 0x6f80], edi
mov edi, dword [ebp - 0x6f44]
mov eax, dword [edi + 0x30]
inc esi
mov dword [ebp - 0x6f5c], esi
cmp esi, eax
jb 0x460fa2
mov esi, dword [ebp - 0x6f80]
mov dword [ebp - 0x6f40], 0
test eax, eax
je 0x461846
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e51b8
lea ecx, [ebp - 0x2240]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f40]
push eax
push ecx
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2068]
call fcn.00401bf0
lea ecx, [ebp - 0x2068]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
jne 0x4616f8
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4e5210
lea ecx, [ebp - 0x2240]
call fcn.00401c90
push eax
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2068]
call fcn.00401bf0
lea ecx, [ebp - 0x2068]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
je 0x461830
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5278
lea ecx, [ebp - 0x2240]
inc esi
call fcn.00401c90
push eax
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x21c0]
push 2
push esi
call fcn.00476530
mov ecx, eax
call fcn.004766b0
mov ecx, eax
call fcn.00401bf0
push 1
push 0x4e5298
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x237c]
push 2
push esi
call fcn.00476530
mov ecx, eax
call fcn.004766b0
mov ecx, eax
call fcn.00401ba0
push 1
push 0x4e52d0
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x2058]
push 2
push esi
call fcn.00476530
mov ecx, eax
call fcn.004766b0
mov ecx, eax
call fcn.00401ba0
push dword [ebp - 0x6f80]
lea ecx, [ebp - 0x2228]
push 2
push esi
call fcn.00475ce0
mov ecx, eax
call fcn.00475db0
mov ecx, dword [ebp - 0x6f40]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov dword [eax], ecx
lea ecx, [ebp - 0x2154]
push 0x4e52ec
call fcn.00401c90
push eax
push dword [ebp - 0x6f40]
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
push dword [ebp - 0x6f80]
push 2
push esi
lea ecx, [ebp - 0x21f0]
call fcn.00476530
mov ecx, eax
call fcn.004766b0
mov ecx, eax
call fcn.00401bf0
mov dword [ebp - 0x6f80], esi
mov eax, dword [ebp - 0x6f40]
inc eax
mov dword [ebp - 0x6f40], eax
cmp eax, dword [edi + 0x30]
jb 0x461642
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x464755
lea ecx, [ebp - 0x1fd4]
push 0
test esi, esi
jne 0x461870
push 0x4e5328
call fcn.0040d1b0
jmp 0x464755
push 0x4e53a8
call fcn.0040d1b0
xor esi, esi
mov dword [ebp - 0x6f40], esi
cmp dword [ebp - 0x6f80], esi
jbe 0x461f64
nop
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x461f64
push 0x4e52d0
push esi
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401a40
mov byte [ebp - 0x6f51], al
lea ecx, [ebp - 0x21c0]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
je 0x4618e2
push 0x4e5414
jmp 0x4618e7
push 0x4e5420
push esi
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2068]
call fcn.00401bf0
push esi
lea ecx, [ebp - 0x2228]
call fcn.00475db0
push 0x260
lea ecx, [ebp - 0x4f38]
mov eax, dword [eax]
mov dword [ebp - 0x6f8c], eax
call fcn.00408820
push 1
lea ecx, [ebp - 0x2068]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x4f38]
call fcn.004012e0
push 3
lea ecx, [ebp - 0x2068]
mov byte [ebp - 4], 0xcd
call fcn.00402b90
lea ecx, [ebp - 0x4f38]
call fcn.00401420
test al, al
je 0x461f42
push 1
lea ecx, [ebp - 0x4f38]
call fcn.00401480
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00401a00
cmp byte [ebp - 0x6f51], 0
jne 0x4619b8
push 0x4e29bc
lea ecx, [ebp - 0x1fe0]
call fcn.00401a70
test al, al
je 0x4619b8
push 0
push 1
push 1
push 0
push 0x4e29cc
lea ecx, [ebp - 0x1fe0]
call fcn.00402c80
cmp eax, 1
jne 0x461f2f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e29e0
push 1
lea ecx, [ebp - 0x4f38]
call fcn.00401480
push eax
lea ecx, [ebp - 0x2068]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00401bf0
push 0x100
lea ecx, [ebp - 0x1fe0]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x259c]
call fcn.0040ef20
test al, al
je 0x461f2f
lea eax, [ebp - 0x2010]
push eax
push 0x4cb90c
push 0x4e2a08
lea ecx, [ebp - 0x259c]
call fcn.0040f7c0
test eax, eax
je 0x461c69
push 0
push 1
push 1
push 0
push 0x4e2a1c
lea ecx, [ebp - 0x2010]
call fcn.00402c80
test eax, eax
jne 0x461c69
push eax
push 1
push 1
push eax
push 0x4e2a3c
lea ecx, [ebp - 0x2010]
call fcn.00402c80
test eax, eax
jne 0x461c69
push eax
push 1
push 1
push eax
push 0x4e2a8c
lea ecx, [ebp - 0x2010]
call fcn.00402c80
test eax, eax
jne 0x461c69
push 0x4e2a58
lea ecx, [ebp - 0x2010]
call fcn.00401a40
test al, al
jne 0x461c69
push 0
push 1
push 1
push 0
push 0x4e2a70
lea ecx, [ebp - 0x2010]
call fcn.00402c80
test eax, eax
jne 0x461c69
push eax
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e5430
lea ecx, [ebp - 0x2010]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x461c69
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4c97d0
push esi
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0x4e547c
lea ecx, [ebp - 0x25b4]
call fcn.00401bf0
mov eax, dword [ebp - 0x6f8c]
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 1
lea ecx, [ebp - 0x2010]
mov dword [ebp - 0x6f5c], eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x25b4]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x3e
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x461c69
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push 0
push 0
push 0
push 0
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00401c90
push eax
push 0x4e2a08
push 0x3e
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0x4e2af4
lea ecx, [ebp - 0x1fe0]
call fcn.00401c90
push eax
push 0x4e21bc
push esi
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push 0x4e0af8
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x2010]
call fcn.00401c90
push eax
push 0x4e2b28
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
lea eax, [ebp - 0x2a7c]
mov dword [ebp - 0x6edc], 0
push eax
push 0x4cb90c
xorps xmm0, xmm0
lea ecx, [ebp - 0x259c]
push 0x4e2b48
movups xmmword [ebp - 0x6eec], xmm0
call fcn.0040f5e0
test al, al
je 0x461f2f
lea eax, [ebp - 0x2a7c]
push eax
lea eax, [ebp - 0x6eec]
push eax
lea ecx, [ebp - 0x259c]
call fcn.0040fd40
test al, al
je 0x461f2f
lea eax, [ebp - 0x2010]
push eax
lea eax, [ebp - 0x6eec]
push eax
lea ecx, [ebp - 0x259c]
call fcn.0040f750
test eax, eax
je 0x461f0e
push 0
push 1
push 1
push 0
push 0x4e2a1c
lea ecx, [ebp - 0x2010]
call fcn.00402c80
test eax, eax
jne 0x461f0e
push eax
push 1
push 1
push eax
push 0x4e2a3c
lea ecx, [ebp - 0x2010]
call fcn.00402c80
test eax, eax
jne 0x461f0e
push eax
push 1
push 1
push eax
push 0x4e2a8c
lea ecx, [ebp - 0x2010]
call fcn.00402c80
test eax, eax
jne 0x461f0e
push 0x4e2a58
lea ecx, [ebp - 0x2010]
call fcn.00401a40
test al, al
jne 0x461f0e
push 0
push 1
push 1
push 0
push 0x4e2a70
lea ecx, [ebp - 0x2010]
call fcn.00402c80
test eax, eax
jne 0x461f0e
push eax
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e5430
lea ecx, [ebp - 0x2010]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x461f0e
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4c97d0
push esi
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0x4e5494
lea ecx, [ebp - 0x25b4]
call fcn.00401bf0
mov eax, dword [ebp - 0x6f8c]
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x2010]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x25b4]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x3e
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x461f08
push 0
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00401c90
push eax
push 0x4e2b48
push 0x3e
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0x4e2af4
lea ecx, [ebp - 0x1fe0]
call fcn.00401c90
push eax
push 0x4e21bc
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0x4e0af8
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x2010]
call fcn.00401c90
push eax
push 0x4e54b4
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
mov esi, dword [ebp - 0x6f40]
lea eax, [ebp - 0x2a7c]
push eax
lea eax, [ebp - 0x6eec]
push eax
lea ecx, [ebp - 0x259c]
call fcn.0040fd40
test al, al
jne 0x461cc2
lea ecx, [ebp - 0x4f38]
call fcn.004013e0
test al, al
jne 0x461961
lea ecx, [ebp - 0x4f38]
mov byte [ebp - 4], 0xcc
call fcn.00401330
inc esi
mov dword [ebp - 0x6f40], esi
cmp esi, dword [ebp - 0x6f80]
jb 0x461890
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x464755
push 0
push 0x4e54e0
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov esi, dword [ebp - 0x6f80]
mov dword [ebp - 0x6f40], 0
test esi, esi
je 0x4623d9
nop dword [eax]
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x4623d9
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2228]
call fcn.00475db0
push 0x4e52d0
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2058]
mov eax, dword [eax]
mov dword [ebp - 0x6f4c], eax
call fcn.004766b0
mov ecx, eax
call fcn.00401a40
mov byte [ebp - 0x6f51], al
lea ecx, [ebp - 0x21c0]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
je 0x462010
push 0x4e5414
jmp 0x462015
push 0x4e5420
push dword [ebp - 0x6f40]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2068]
call fcn.00401bf0
push 0x260
lea ecx, [ebp - 0x4cd8]
call fcn.00408820
push 1
lea ecx, [ebp - 0x2068]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x4cd8]
call fcn.004012e0
push 3
lea ecx, [ebp - 0x2068]
mov byte [ebp - 4], 0xce
call fcn.00402b90
lea ecx, [ebp - 0x4cd8]
call fcn.00401420
test al, al
je 0x4623b5
mov esi, dword [ebp - 0x6f40]
nop word [eax + eax]
push 1
lea ecx, [ebp - 0x4cd8]
call fcn.00401480
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00401a00
cmp byte [ebp - 0x6f51], 0
jne 0x4620e7
push 0x4e29bc
lea ecx, [ebp - 0x1fe0]
call fcn.00401a70
test al, al
je 0x4620e7
push 0
push 1
push 1
push 0
push 0x4e29cc
lea ecx, [ebp - 0x1fe0]
call fcn.00402c80
cmp eax, 1
jne 0x46239c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e29e0
push 1
lea ecx, [ebp - 0x4cd8]
call fcn.00401480
push eax
lea ecx, [ebp - 0x2068]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00401bf0
push 0x100
lea ecx, [ebp - 0x1fe0]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x259c]
call fcn.0040ef20
test al, al
je 0x46239c
lea eax, [ebp - 0x2010]
push eax
push 0x4cb90c
push 0x4e2cb8
lea ecx, [ebp - 0x259c]
call fcn.0040f7c0
test eax, eax
je 0x46239c
push 0
push 1
push 1
push 0
push 0x4e2a1c
lea ecx, [ebp - 0x2010]
call fcn.00402c80
test eax, eax
jne 0x46239c
push eax
push 1
push 1
push eax
push 0x4e2b74
lea ecx, [ebp - 0x2010]
call fcn.00402c80
test eax, eax
jne 0x46239c
push eax
push 1
push 1
push eax
push 0x4e2a3c
lea ecx, [ebp - 0x2010]
call fcn.00402c80
test eax, eax
jne 0x46239c
push eax
push 1
push 1
push eax
push 0x4e2a8c
lea ecx, [ebp - 0x2010]
call fcn.00402c80
test eax, eax
jne 0x46239c
push eax
push 1
push 1
push eax
push 0x4e2b98
lea ecx, [ebp - 0x2010]
call fcn.00402c80
test eax, eax
jne 0x46239c
push eax
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e5540
lea ecx, [ebp - 0x2010]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x46239c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4c97d0
push esi
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0x4e5594
lea ecx, [ebp - 0x25b4]
call fcn.00401bf0
mov eax, dword [ebp - 0x6f4c]
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 1
lea ecx, [ebp - 0x2010]
mov dword [ebp - 0x6f5c], eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x25b4]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x3f
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f8c], eax
cmp eax, 0xffffffff
je 0x46239c
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push 0
push 0
push 0
push 0
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00401c90
push eax
push 0x4e2d98
push 0x3f
push dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0x4e2af4
lea ecx, [ebp - 0x1fe0]
call fcn.00401c90
push eax
push 0x4e21bc
push esi
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push 0x4e0af8
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x2010]
call fcn.00401c90
push eax
push 0x4e55c8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
lea ecx, [ebp - 0x4cd8]
call fcn.004013e0
test al, al
jne 0x462090
mov esi, dword [ebp - 0x6f80]
lea ecx, [ebp - 0x4cd8]
mov byte [ebp - 4], 0xcc
call fcn.00401330
mov eax, dword [ebp - 0x6f40]
inc eax
mov dword [ebp - 0x6f40], eax
cmp eax, esi
jb 0x461fa0
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x464755
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5610
lea ecx, [edi + 0x314]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00401bf0
push 0
push 0x4e5648
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov dword [ebp - 0x6f40], 0
test esi, esi
je 0x462a48
nop dword [eax]
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x462a48
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2228]
call fcn.00475db0
push 0xc
lea ecx, [ebp - 0x26c8]
mov eax, dword [eax]
mov dword [ebp - 0x6f4c], eax
call fcn.00404370
lea ecx, [ebp - 0x26c8]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x26d4]
mov byte [ebp - 4], 0xcf
call fcn.00404370
lea ecx, [ebp - 0x26d4]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2620]
mov byte [ebp - 4], 0xd0
call fcn.00404370
lea ecx, [ebp - 0x2620]
call fcn.00401930
push 0x4e52d0
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2058]
mov byte [ebp - 4], 0xd1
call fcn.004766b0
mov ecx, eax
call fcn.00401a40
mov byte [ebp - 0x6f51], al
lea ecx, [ebp - 0x21c0]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
je 0x462504
push 0x4e5414
jmp 0x462509
push 0x4e5420
push dword [ebp - 0x6f40]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2068]
call fcn.00401bf0
push 0x260
lea ecx, [ebp - 0x3e98]
call fcn.00408820
push 1
lea ecx, [ebp - 0x2068]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x3e98]
call fcn.004012e0
push 3
lea ecx, [ebp - 0x2068]
mov byte [ebp - 4], 0xd2
call fcn.00402b90
lea ecx, [ebp - 0x3e98]
call fcn.00401420
test al, al
je 0x462a03
nop dword [eax]
nop dword [eax + eax]
push 1
lea ecx, [ebp - 0x3e98]
call fcn.00401480
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00401a00
cmp byte [ebp - 0x6f51], 0
jne 0x4625d7
push 0x4e29bc
lea ecx, [ebp - 0x1fe0]
call fcn.00401a70
test al, al
je 0x4625d7
push 0
push 1
push 1
push 0
push 0x4e29cc
lea ecx, [ebp - 0x1fe0]
call fcn.00402c80
cmp eax, 1
jne 0x4629ea
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e29e0
push 1
lea ecx, [ebp - 0x3e98]
call fcn.00401480
push eax
lea ecx, [ebp - 0x2068]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00401bf0
push 0x100
lea ecx, [ebp - 0x1fe0]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x259c]
call fcn.0040ef20
test al, al
je 0x4629ea
lea eax, [ebp - 0x2a90]
mov dword [ebp - 0x6ec8], 0
push eax
push 0x4cb90c
xorps xmm0, xmm0
lea ecx, [ebp - 0x259c]
push 0x4e2ec0
movups xmmword [ebp - 0x6ed8], xmm0
call fcn.0040f5e0
test al, al
je 0x4629ea
lea eax, [ebp - 0x2a90]
push eax
lea eax, [ebp - 0x6ed8]
push eax
lea ecx, [ebp - 0x259c]
call fcn.0040f980
test al, al
je 0x4629ea
lea eax, [ebp - 0x26c8]
push eax
lea eax, [ebp - 0x6ed8]
push eax
lea ecx, [ebp - 0x259c]
call fcn.0040f710
test al, al
je 0x4629c9
lea ecx, [ebp - 0x26c8]
call fcn.00401c90
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.00401c90
mov edx, esi
mov ecx, eax
call fcn.00408000
test al, al
jne 0x4629c9
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2eec
lea ecx, [ebp - 0x26c8]
call fcn.00401c90
push eax
push 0x4e2f10
lea ecx, [ebp - 0x26d4]
call fcn.00401bf0
lea eax, [ebp - 0x209c]
push eax
push 0x4cb90c
lea ecx, [ebp - 0x26d4]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x259c]
call fcn.0040f7c0
test eax, eax
je 0x4629c9
lea ecx, [ebp - 0x209c]
call fcn.00401c90
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.00401c90
mov edx, esi
mov ecx, eax
call fcn.00408000
test al, al
jne 0x4629c9
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e56a0
lea ecx, [ebp - 0x209c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x4629c9
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2f40
lea ecx, [ebp - 0x26c8]
call fcn.00401c90
push eax
push 0x4e2f10
lea ecx, [ebp - 0x26d4]
call fcn.00401bf0
lea eax, [ebp - 0x2620]
push eax
push 0x4cb90c
lea ecx, [ebp - 0x26d4]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x259c]
call fcn.0040f7c0
test eax, eax
je 0x462838
push 0
push 1
push 1
push 5
push 0x4ca134
lea ecx, [ebp - 0x2620]
call fcn.00402c80
test eax, eax
jne 0x462838
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4e2f50
push 1
lea ecx, [ebp - 0x3e98]
call fcn.00401480
push eax
lea ecx, [ebp - 0x2068]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2620]
call fcn.004031d0
lea ecx, [ebp - 0x2620]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
je 0x4629c9
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x26c8]
call fcn.00401c90
push eax
push 0x4e2f10
lea ecx, [ebp - 0x26d4]
call fcn.00401bf0
mov eax, dword [ebp - 0x6f4c]
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x2620]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x209c]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x40
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f8c], eax
cmp eax, 0xffffffff
je 0x4629c9
push 0
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0
push 0
lea ecx, [ebp - 0x2620]
call fcn.00401c90
push eax
push 0
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x26d4]
call fcn.00401c90
push eax
push 0x40
push dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0x4e2af4
lea ecx, [ebp - 0x2620]
call fcn.00401c90
push eax
push 0x4e17a0
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0x4e0af8
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e2f6c
lea ecx, [ebp - 0x26c8]
call fcn.00401c90
push eax
push 0x4cdb98
lea ecx, [ebp - 0x209c]
call fcn.00401c90
push eax
push 0x4e56e8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
lea eax, [ebp - 0x2a90]
push eax
lea eax, [ebp - 0x6ed8]
push eax
lea ecx, [ebp - 0x259c]
call fcn.0040f980
test al, al
jne 0x462690
lea ecx, [ebp - 0x3e98]
call fcn.004013e0
test al, al
jne 0x462580
mov esi, dword [ebp - 0x6f80]
lea ecx, [ebp - 0x3e98]
call fcn.00401330
lea ecx, [ebp - 0x2620]
call fcn.00401ad0
lea ecx, [ebp - 0x26d4]
call fcn.00401ad0
lea ecx, [ebp - 0x26c8]
mov byte [ebp - 4], 0xcc
call fcn.00401ad0
mov eax, dword [ebp - 0x6f40]
inc eax
mov dword [ebp - 0x6f40], eax
cmp eax, esi
jb 0x462440
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x464755
push 0
push 0x4e5718
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x6e2c]
push 1
push 0
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6e34], eax
mov dword [ebp - 0x6e30], 0x41
call fcn.00401980
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0xd3
call fcn.00401c90
lea ecx, [edi + 0x14c]
mov dword [ebp - 0x6e20], eax
mov dword [ebp - 0x6e1c], 0
call fcn.00401c90
mov dword [ebp - 0x6e18], eax
lea ecx, [ebp - 0x6e0c]
lea eax, [ebp - 0x1fd4]
mov dword [ebp - 0x6e14], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0x6e10], eax
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2370]
mov byte [ebp - 4], 0xd4
call fcn.00404370
lea ecx, [ebp - 0x2370]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x22e4]
mov byte [ebp - 4], 0xd5
call fcn.00404370
lea ecx, [ebp - 0x22e4]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2364]
mov byte [ebp - 4], 0xd6
call fcn.00404370
lea ecx, [ebp - 0x2364]
call fcn.00401930
mov ecx, edi
mov byte [ebp - 4], 0xd7
call fcn.0046f9d0
test al, al
jne 0x464729
xor eax, eax
mov dword [ebp - 0x6f40], eax
test esi, esi
je 0x462dd8
xor esi, esi
nop word [eax + eax]
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x462dd8
push esi
lea ecx, [ebp - 0x21f0]
call fcn.004766b0
mov ecx, eax
call fcn.00401b50
cmp eax, 5
jl 0x462dc5
push esi
lea ecx, [ebp - 0x21f0]
call fcn.004766b0
push eax
lea ecx, [ebp - 0x6e2c]
call fcn.00401a10
push esi
lea ecx, [ebp - 0x2228]
call fcn.00475db0
mov ecx, dword [ebp - 0x6f78]
mov eax, dword [eax]
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
call fcn.00401c90
push esi
lea ecx, [ebp - 0x2058]
mov dword [ebp - 0x6e1c], eax
call fcn.004766b0
push eax
lea ecx, [ebp - 0x6e0c]
call fcn.00401a10
push esi
lea ecx, [ebp - 0x2228]
call fcn.00475db0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24ec]
mov esi, eax
call fcn.00401c90
push eax
push dword [esi]
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2370]
call fcn.00401bf0
lea ecx, [ebp - 0x2370]
call fcn.00401c90
mov ecx, eax
call fcn.0040e810
test al, al
je 0x462dbf
lea ecx, [ebp - 0x2370]
call fcn.00401c90
push eax
lea eax, [ebp - 0x6e34]
mov ecx, edi
push eax
call fcn.0044e820
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x462dd8
mov eax, dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2228]
push eax
call fcn.00475db0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25a8]
mov esi, eax
call fcn.00401c90
push eax
push dword [esi]
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2370]
call fcn.00401bf0
lea ecx, [ebp - 0x2370]
call fcn.00401c90
mov ecx, eax
call fcn.0040e810
test al, al
je 0x462dbf
push 0
lea ecx, [ebp - 0x2370]
call fcn.00401f20
lea ecx, [ebp - 0x2370]
call fcn.00401c90
push eax
lea eax, [ebp - 0x6e34]
mov ecx, edi
push eax
call fcn.0044e820
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x6e2c]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2364]
call fcn.00402c80
test eax, eax
jne 0x462dbf
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4c97ec
lea ecx, [ebp - 0x6e2c]
call fcn.00401c90
push eax
push 0x4c97ec
lea ecx, [ebp - 0x2364]
call fcn.00402f30
lea ecx, [ebp - 0x2650]
mov dword [ebp - 0x6e1c], 0x4db8f0
call fcn.00401c90
push eax
lea eax, [ebp - 0x6e34]
mov ecx, edi
push eax
call fcn.0044e820
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x462dd8
lea eax, [ebp - 0x265c]
push eax
lea ecx, [ebp - 0x2370]
call fcn.00401a10
push 0
lea ecx, [ebp - 0x2370]
call fcn.00401f20
lea ecx, [ebp - 0x2370]
call fcn.00401c90
push eax
lea eax, [ebp - 0x6e34]
mov ecx, edi
push eax
call fcn.0044e820
mov esi, dword [ebp - 0x6f40]
inc esi
mov dword [ebp - 0x6f40], esi
cmp esi, dword [ebp - 0x6f80]
jb 0x462b60
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x464729
push 4
lea ecx, [ebp - 0x2130]
call fcn.00404590
lea ecx, [ebp - 0x2130]
call fcn.00404ea0
xor esi, esi
mov byte [ebp - 4], 0xd8
cmp dword [ebp - 0x6f80], esi
jbe 0x463214
mov dword [ebp - 0x6f50], 0
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x2228]
call fcn.00475db0
mov ecx, dword [ebp - 0x6f50]
mov eax, dword [eax]
mov dword [ebp - 0x6f8c], eax
test ecx, ecx
jne 0x462e8f
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push 0x4e4ee8
push eax
lea ecx, [edi + 0x104]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
push str.HKU_
lea ecx, [ebp - 0x1f98]
call fcn.00401bf0
mov eax, dword [ebp - 0x6f8c]
mov ecx, dword [ebp - 0x6f78]
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
call fcn.00401c90
mov dword [ebp - 0x6f70], eax
jmp 0x462eee
cmp ecx, 1
jne 0x462eb5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4ee8
push dword [ebp - 0x6f9c]
jmp 0x462ed9
cmp ecx, 2
jne 0x462ee4
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4ee8
push dword [ebp - 0x6fa0]
lea ecx, [ebp - 0x1f98]
call fcn.00401bf0
mov dword [ebp - 0x6f70], 0x4db8f0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2130]
call fcn.004063e0
test al, al
je 0x4631f1
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f5c], 0
push eax
push 0
lea ecx, [ebp - 0x2130]
call fcn.004067b0
test al, al
je 0x4631f1
nop word [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4f78
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x4c9754
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00401bf0
push 0
push 0x20019
lea ecx, [ebp - 0x1fe0]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x4631c9
lea eax, [ebp - 0x22e4]
push eax
push 0x4c975c
lea ecx, [ebp - 0x1f74]
call fcn.00406580
test al, al
je 0x4631c9
lea ecx, [ebp - 0x22e4]
call fcn.00401f90
test al, al
jne 0x4631c9
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x22e4]
call fcn.004020d0
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x21f0]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x22e4]
call fcn.00402c80
test eax, eax
je 0x4631c9
push esi
lea ecx, [ebp - 0x21f0]
call fcn.004766b0
mov ecx, eax
call fcn.00401b50
inc eax
lea ecx, [ebp - 0x22e4]
push eax
call fcn.00402bd0
push 0
push 0
push 0x4c975c
push 0x4ca048
push 3
lea ecx, [ebp - 0x22e4]
call fcn.00403700
mov ecx, eax
call fcn.00403410
lea ecx, [ebp - 0x22e4]
call fcn.00401f90
test al, al
jne 0x4631c9
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x4c9754
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00401bf0
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e09d8
lea ecx, [ebp - 0x22e4]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x4631c9
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x22e4]
call fcn.00401c90
push eax
push dword [ebp - 0x6f70]
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dcf68
push 5
push 0x41
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x4631c9
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0
push 0
push 0
push 0
push dword [ebp - 0x6f70]
lea ecx, [ebp - 0x1fe0]
push 0
call fcn.00401c90
push eax
push 0x41
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
push esi
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0x4e0af8
push dword [ebp - 0x6f70]
lea ecx, [ebp - 0x22e4]
push 0x4e0b14
call fcn.00401c90
push eax
push 0x4e3168
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
mov eax, dword [ebp - 0x6f5c]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x2130]
mov dword [ebp - 0x6f5c], eax
call fcn.004067b0
test al, al
jne 0x462f40
mov eax, dword [ebp - 0x6f50]
inc eax
mov dword [ebp - 0x6f50], eax
cmp eax, 3
jb 0x462e20
inc esi
cmp esi, dword [ebp - 0x6f80]
jb 0x462e11
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x46471e
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x46328a
mov eax, dword [ebp - 0x6f6c]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f5c], eax
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5784
push esi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push str.HKU_
call fcn.00401bf0
add dword [ebp - 0x6f5c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x463240
mov esi, dword [ebp - 0x6f6c]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e57ac
push dword [ebp - 0x6f9c]
lea ecx, [esi + eax*4]
call fcn.00401bf0
cmp byte [ebp - 0x6f45], 0
je 0x4632f1
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4e57ac
push dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00401bf0
push 0
push 0x4e57d8
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
lea ecx, [ebp - 0x2364]
call fcn.00401ae0
mov edx, dword [ebp - 0x6f7c]
test edx, edx
je 0x463af8
mov eax, dword [ebp - 0x6f6c]
mov ecx, edx
mov esi, dword [ebp - 0x6f78]
sub eax, esi
mov dword [ebp - 0x6f4c], eax
mov eax, dword [ebp - 0x6f80]
mov dword [ebp - 0x6f5c], ecx
nop
mov dword [ebp - 0x6f50], 0
test eax, eax
je 0x463ae6
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x463ada
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6f50]
lea ecx, [ebp - 0x237c]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f4c]
push eax
push 0x4c9754
lea ecx, [esi + ecx]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2120]
call fcn.00401bf0
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2120]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2364]
call fcn.00402c80
test eax, eax
jne 0x463abd
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4c97ec
lea ecx, [ebp - 0x2120]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2364]
call fcn.00402f30
push 0
push 0x20019
lea ecx, [ebp - 0x2120]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x463619
lea eax, [ebp - 0x2010]
push eax
push 0x4dd11c
lea ecx, [ebp - 0x1f74]
call fcn.00406580
test al, al
je 0x463619
lea eax, [ebp - 0x2188]
mov dword [ebp - 0x2188], 0
push eax
push 0x4dd1bc
lea ecx, [ebp - 0x1f74]
call fcn.004066c0
test al, al
je 0x46346f
cmp dword [ebp - 0x2188], 0
jne 0x463619
push 0
push 1
push 1
push 0
push 0x4e2a1c
lea ecx, [ebp - 0x2010]
call fcn.00402c80
test eax, eax
jne 0x463619
push eax
push 1
push 1
push eax
push 0x4e2a3c
lea ecx, [ebp - 0x2010]
call fcn.00402c80
test eax, eax
jne 0x463619
push eax
push 1
push 1
push eax
push 0x4e2a8c
lea ecx, [ebp - 0x2010]
call fcn.00402c80
test eax, eax
jne 0x463619
push eax
push 1
push 1
push eax
push 0x4e2a70
lea ecx, [ebp - 0x2010]
call fcn.00402c80
test eax, eax
jne 0x463619
push eax
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e5838
lea ecx, [ebp - 0x2010]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x463619
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dd11c
push 5
push 0x43
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f8c], eax
cmp eax, 0xffffffff
je 0x463619
push 0
push dword [ebp - 0x6f50]
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0
push 0
push 0
push 0x4dd11c
mov ecx, esi
call fcn.00401c90
push eax
push 0
lea ecx, [ebp - 0x2120]
call fcn.00401c90
push eax
push 0x43
push dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
push dword [ebp - 0x6f50]
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0x4e0af8
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x2010]
call fcn.00401c90
push eax
push 0x4e5888
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
lea eax, [ebp - 0x2010]
push eax
push 0x4dd25c
lea ecx, [ebp - 0x1f74]
call fcn.00406580
test al, al
je 0x46387d
lea eax, [ebp - 0x2188]
mov dword [ebp - 0x2188], 0
push eax
push 0x4dd35c
lea ecx, [ebp - 0x1f74]
call fcn.004066c0
test al, al
je 0x46366a
cmp dword [ebp - 0x2188], 0
je 0x46387d
push 0
push 1
push 1
push 0
push 0x4e2a1c
lea ecx, [ebp - 0x2010]
call fcn.00402c80
test eax, eax
jne 0x46387d
push eax
push 1
push 1
push eax
push 0x4e2a3c
lea ecx, [ebp - 0x2010]
call fcn.00402c80
test eax, eax
jne 0x46387d
push eax
push 1
push 1
push eax
push 0x4e2a8c
lea ecx, [ebp - 0x2010]
call fcn.00402c80
test eax, eax
jne 0x46387d
push eax
push 1
push 1
push eax
push 0x4e2a70
lea ecx, [ebp - 0x2010]
call fcn.00402c80
test eax, eax
jne 0x46387d
push eax
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e5838
lea ecx, [ebp - 0x2010]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x46387d
lea eax, [ebp - 0x209c]
push eax
push 0x4dd328
lea ecx, [ebp - 0x1f74]
call fcn.00406580
test al, al
je 0x46387d
lea ecx, [ebp - 0x209c]
call fcn.00401f90
test al, al
jne 0x46387d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e3318
lea ecx, [ebp - 0x209c]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x22e4]
call fcn.00401bf0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x22e4]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x43
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f8c], eax
cmp eax, 0xffffffff
je 0x46387d
push 0
push dword [ebp - 0x6f50]
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0
push 0
push 0
push 0x4dd25c
mov ecx, esi
call fcn.00401c90
push eax
push 0
lea ecx, [ebp - 0x2120]
call fcn.00401c90
push eax
push 0x43
push dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
push dword [ebp - 0x6f50]
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0x4e0af8
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x2010]
call fcn.00401c90
push eax
push 0x4e58c8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
lea eax, [ebp - 0x2188]
mov dword [ebp - 0x2188], 0
push eax
push 0x4e33a0
lea ecx, [ebp - 0x1f74]
call fcn.004066c0
test al, al
je 0x463abd
cmp dword [ebp - 0x2188], 4
jne 0x463abd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e33c4
lea ecx, [ebp - 0x2120]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00401bf0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2130]
call fcn.004063e0
test al, al
je 0x463abd
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f8c], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.00406830
test al, al
je 0x463abd
nop
lea eax, [ebp - 0x2010]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f74]
call fcn.00406580
test al, al
je 0x463a95
lea ecx, [ebp - 0x2010]
call fcn.00401f90
test al, al
jne 0x463a95
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e5838
lea ecx, [ebp - 0x2010]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x463a95
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2010]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dd518
push 5
push 0x43
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f70], eax
cmp eax, 0xffffffff
je 0x463a95
push 0
push dword [ebp - 0x6f50]
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
mov ecx, esi
call fcn.00401c90
push eax
push 0
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
push 0x43
push dword [ebp - 0x6f70]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
push dword [ebp - 0x6f50]
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0x4e0af8
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x2010]
call fcn.00401c90
push eax
push 0x4e5914
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
mov eax, dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1f74]
mov dword [ebp - 0x6f8c], eax
call fcn.00406830
test al, al
jne 0x463930
mov edx, dword [ebp - 0x6f50]
mov eax, dword [ebp - 0x6f80]
inc edx
mov dword [ebp - 0x6f50], edx
cmp edx, eax
jb 0x463352
jmp 0x463ae0
mov eax, dword [ebp - 0x6f80]
mov ecx, dword [ebp - 0x6f5c]
add esi, 0xc
sub ecx, 1
mov dword [ebp - 0x6f5c], ecx
jne 0x463340
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x46471e
push 0
push 0x4e5948
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov esi, dword [ebp - 0x6f80]
mov dword [ebp - 0x6f40], 0
test esi, esi
je 0x4640c9
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x4640c9
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2228]
call fcn.00475db0
push 0x4e52d0
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2058]
mov eax, dword [eax]
mov dword [ebp - 0x6f8c], eax
call fcn.004766b0
mov ecx, eax
call fcn.00401a40
mov byte [ebp - 0x6f51], al
lea ecx, [ebp - 0x21c0]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
test al, al
je 0x463ba1
push 0x4e5414
jmp 0x463ba6
push 0x4e5420
push dword [ebp - 0x6f40]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2068]
call fcn.00401bf0
push 0x260
lea ecx, [ebp - 0x3c38]
call fcn.00408820
push 1
lea ecx, [ebp - 0x2068]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x3c38]
call fcn.004012e0
push 3
lea ecx, [ebp - 0x2068]
mov byte [ebp - 4], 0xd9
call fcn.00402b90
lea ecx, [ebp - 0x3c38]
call fcn.00401420
test al, al
je 0x4640a5
mov esi, dword [ebp - 0x6f40]
nop word [eax + eax]
push 1
lea ecx, [ebp - 0x3c38]
call fcn.00401480
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00401a00
cmp byte [ebp - 0x6f51], 0
jne 0x463c77
push 0x4e29bc
lea ecx, [ebp - 0x1fe0]
call fcn.00401a70
test al, al
je 0x463c77
push 0
push 1
push 1
push 0
push 0x4e29cc
lea ecx, [ebp - 0x1fe0]
call fcn.00402c80
cmp eax, 1
jne 0x46408c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e29e0
push 1
lea ecx, [ebp - 0x3c38]
call fcn.00401480
push eax
lea ecx, [ebp - 0x2068]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00401bf0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e59a0
push esi
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0x4e59c8
lea ecx, [ebp - 0x209c]
call fcn.00401bf0
lea ecx, [ebp - 0x1fe0]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
je 0x463e9f
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e59d8
lea ecx, [ebp - 0x209c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x463e9f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e59a0
push esi
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0x4e59c8
lea ecx, [ebp - 0x209c]
call fcn.00401bf0
mov eax, dword [ebp - 0x6f8c]
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x1fe0]
mov dword [ebp - 0x6f5c], eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x209c]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x42
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x46408c
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push 0
push 0
push 0
push 0
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00401c90
push eax
push 0
push 0x42
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0x4e3470
lea ecx, [ebp - 0x1fe0]
call fcn.00401c90
push eax
push 0x4e21bc
push esi
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push 0x4e0af8
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x209c]
call fcn.00401c90
push eax
push 0x4e34a8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5a24
push esi
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0x4e59c8
lea ecx, [ebp - 0x209c]
call fcn.00401bf0
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e59d8
lea ecx, [ebp - 0x209c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x46408c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e34cc
push 1
lea ecx, [ebp - 0x3c38]
call fcn.00401480
push eax
lea ecx, [ebp - 0x2068]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00401bf0
lea ecx, [ebp - 0x1fe0]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
je 0x46408c
mov eax, dword [ebp - 0x6f8c]
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x1fe0]
mov dword [ebp - 0x6f5c], eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x209c]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x42
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x46408c
push 0
push esi
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push 0
push 0
push 0
push 0
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00401c90
push eax
push 0
push 0x42
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0x4e3470
lea ecx, [ebp - 0x1fe0]
call fcn.00401c90
push eax
push 0x4e21bc
push esi
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push 0x4e0af8
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x209c]
call fcn.00401c90
push eax
push 0x4e34a8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
lea ecx, [ebp - 0x3c38]
call fcn.004013e0
test al, al
jne 0x463c20
mov esi, dword [ebp - 0x6f80]
lea ecx, [ebp - 0x3c38]
mov byte [ebp - 4], 0xd8
call fcn.00401330
mov eax, dword [ebp - 0x6f40]
inc eax
mov dword [ebp - 0x6f40], eax
cmp eax, esi
jb 0x463b31
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x46471e
mov dword [ebp - 0x6f40], 0
test esi, esi
je 0x4643ea
nop word [eax + eax]
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x4643ea
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x21f0]
call fcn.004766b0
push eax
lea ecx, [ebp - 0x1fe0]
call fcn.00401a10
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x1fe0]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2364]
call fcn.00402c80
test eax, eax
jne 0x4643d5
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4c97ec
lea ecx, [ebp - 0x1fe0]
call fcn.00401c90
push eax
push 0x4c97ec
lea ecx, [ebp - 0x2364]
call fcn.00402f30
push 1
lea ecx, [ebp - 0x1fe0]
call fcn.00401f20
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e34e8
lea ecx, [ebp - 0x1fe0]
call fcn.00402f30
lea ecx, [ebp - 0x1fe0]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
je 0x4643d5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5a40
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0x4e59c8
lea ecx, [ebp - 0x209c]
call fcn.00401bf0
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e59d8
lea ecx, [ebp - 0x209c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x4643d5
push 0
lea ecx, [ebp - 0x1fe0]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x259c]
call fcn.0040ef20
test al, al
je 0x4643d5
lea eax, [ebp - 0x29f4]
push eax
push 0x4cb90c
push 0x4e2a08
lea ecx, [ebp - 0x259c]
call fcn.0040f5e0
test al, al
jne 0x4642cd
lea eax, [ebp - 0x29f4]
push eax
push 0x4cb90c
push 0x4e2b48
lea ecx, [ebp - 0x259c]
call fcn.0040f5e0
test al, al
jne 0x4642cd
lea eax, [ebp - 0x29f4]
push eax
push 0x4cb90c
push 0x4dcda0
lea ecx, [ebp - 0x259c]
call fcn.0040f5e0
test al, al
jne 0x4642cd
lea eax, [ebp - 0x29f4]
push eax
push 0x4cb90c
push 0x4e2ec0
lea ecx, [ebp - 0x259c]
call fcn.0040f5e0
test al, al
je 0x4643d5
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x1fe0]
call fcn.00401c90
push eax
push 0x4db8f0
lea ecx, [ebp - 0x209c]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x42
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x4643d5
push 0
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0
push 0
push 0
push 0
push 0x4db8f0
lea ecx, [ebp - 0x1fe0]
call fcn.00401c90
push eax
push 0
push 0x42
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0x4e2af4
lea ecx, [ebp - 0x1fe0]
call fcn.00401c90
push eax
push 0x4e21bc
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0x4e0af8
push 0x4e1844
lea ecx, [ebp - 0x209c]
call fcn.00401c90
push eax
push 0x4e34a8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
mov eax, dword [ebp - 0x6f40]
inc eax
mov dword [ebp - 0x6f40], eax
cmp eax, esi
jb 0x4640f0
lea ecx, [ebp - 0x2364]
call fcn.00401ae0
cmp dword [ebp - 0x6f7c], 0
jbe 0x46470b
mov edx, dword [ebp - 0x6f78]
mov eax, edx
mov ecx, dword [ebp - 0x6f6c]
sub ecx, edx
mov dword [ebp - 0x6f40], eax
mov dword [ebp - 0x6f4c], ecx
mov ecx, dword [ebp - 0x6f7c]
mov dword [ebp - 0x6f8c], ecx
nop word [eax + eax]
mov dword [ebp - 0x6f50], 0
test esi, esi
je 0x4646f3
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x4646e7
push 0
push 1
push 1
push 0
push dword [ebp - 0x6f50]
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2364]
call fcn.00402c80
test eax, eax
jne 0x4646d2
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4c97ec
push dword [ebp - 0x6f50]
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0x4c97ec
lea ecx, [ebp - 0x2364]
call fcn.00402f30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6f50]
lea ecx, [ebp - 0x237c]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f4c]
add ecx, dword [ebp - 0x6f40]
push eax
push 0x4c9754
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2120]
call fcn.00401bf0
push 0
push 0x20019
lea ecx, [ebp - 0x2120]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x4646d2
xor dl, dl
lea ecx, [ebp - 0x1f74]
call fcn.00407a60
test al, al
jne 0x4646d2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5a6c
push dword [ebp - 0x6f50]
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0x4e59c8
lea ecx, [ebp - 0x209c]
call fcn.00401bf0
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e59d8
lea ecx, [ebp - 0x209c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x4646d2
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2120]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f40]
push eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x209c]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x42
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f5c], eax
cmp eax, 0xffffffff
je 0x4646d2
push 0
push dword [ebp - 0x6f50]
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f40]
push eax
push 0
push 0
push 0
push 0
call fcn.00401c90
push eax
push 0
lea ecx, [ebp - 0x2120]
call fcn.00401c90
push eax
push 0x42
push dword [ebp - 0x6f5c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0x4e3470
lea ecx, [ebp - 0x2120]
call fcn.00401c90
push eax
push 0x4e21bc
push dword [ebp - 0x6f50]
lea ecx, [ebp - 0x2058]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f40]
push eax
push 0x4e0af8
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x209c]
call fcn.00401c90
push eax
push 0x4e34a8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
mov edx, dword [ebp - 0x6f50]
inc edx
mov dword [ebp - 0x6f50], edx
cmp edx, esi
jb 0x464442
mov eax, dword [ebp - 0x6f40]
mov ecx, dword [ebp - 0x6f8c]
add eax, 0xc
sub ecx, 1
mov dword [ebp - 0x6f40], eax
mov dword [ebp - 0x6f8c], ecx
jne 0x464430
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.0041f020
lea ecx, [ebp - 0x2130]
call fcn.00406410
lea ecx, [ebp - 0x2364]
call fcn.00401ad0
lea ecx, [ebp - 0x22e4]
call fcn.00401ad0
lea ecx, [ebp - 0x2370]
call fcn.00401ad0
lea ecx, [ebp - 0x6e34]
call fcn.0046a2d0
lea ecx, [ebp - 0x280c]
call fcn.0040ed40
lea ecx, [ebp - 0x2228]
call fcn.00475cd0
lea ecx, [ebp - 0x21f0]
call fcn.004766d0
lea ecx, [ebp - 0x2058]
call fcn.004766d0
lea ecx, [ebp - 0x237c]
call fcn.004766d0
lea ecx, [ebp - 0x21c0]
call fcn.004766d0
lea ecx, [ebp - 0x32b8]
call fcn.00401330
lea ecx, [ebp - 0x2df8]
call fcn.00401330
lea ecx, [ebp - 0x259c]
call fcn.0042bbe0
lea ecx, [ebp - 0x209c]
call fcn.00401ad0
lea ecx, [ebp - 0x2010]
call fcn.00401ad0
lea ecx, [ebp - 0x24d4]
call fcn.00401ad0
lea ecx, [ebp - 0x1fe0]
call fcn.00401ad0
lea ecx, [ebp - 0x2068]
mov byte [ebp - 4], 0x45
call fcn.00401ad0
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x4673d5
test dword [edi + 0x34], 0x1000
jne 0x4673d5
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x4e5a80
push dword [eax + 0x38]
call fcn.0041d990
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x34
push dword [eax + 0x34]
call fcn.0041ff10
push 0xc
lea ecx, [ebp - 0x22b8]
call fcn.00406340
push 0xa
push 0
lea ecx, [ebp - 0x22b8]
call fcn.00476740
push 0xc
lea ecx, [ebp - 0x2234]
mov byte [ebp - 4], 0xda
call fcn.00406340
push 0xa
push 0
lea ecx, [ebp - 0x2234]
call fcn.00476740
push 0xc
lea ecx, [ebp - 0x238c]
mov byte [ebp - 4], 0xdb
call fcn.00406340
push 0xa
push 0
lea ecx, [ebp - 0x238c]
call fcn.00476740
push 0xc
lea ecx, [ebp - 0x20a8]
mov byte [ebp - 4], 0xdc
call fcn.00406340
lea ecx, [ebp - 0x20a8]
call fcn.00476290
push 0xc
lea ecx, [ebp - 0x2270]
mov byte [ebp - 4], 0xdd
call fcn.00406340
push 0xa
push 0
lea ecx, [ebp - 0x2270]
call fcn.00475dd0
push 0x260
lea ecx, [ebp - 0x3058]
mov byte [ebp - 4], 0xde
call fcn.00408820
lea ecx, [ebp - 0x3058]
call fcn.004012b0
push 0x260
lea ecx, [ebp - 0x3518]
mov byte [ebp - 4], 0xdf
call fcn.00408820
lea ecx, [ebp - 0x3518]
call fcn.004012b0
push 0xc
lea ecx, [ebp - 0x2080]
mov byte [ebp - 4], 0xe0
call fcn.00404370
lea ecx, [ebp - 0x2080]
call fcn.00401930
xor esi, esi
mov byte [ebp - 4], 0xe1
cmp dword [edi + 0x30], esi
jbe 0x464cf2
push 1
push 1
lea ecx, [ebp - 0x3058]
call fcn.00401480
push eax
lea ecx, [ebp - 0x2080]
call fcn.00401ba0
push 0x4d5eb0
lea ecx, [ebp - 0x2080]
call fcn.00401a40
test al, al
jne 0x464ce8
push str.Microsoft
lea ecx, [ebp - 0x2080]
call fcn.00401a40
test al, al
jne 0x464ce8
push 0x4e50f4
lea ecx, [ebp - 0x2080]
call fcn.00401a40
test al, al
jne 0x464ce8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4c9800
lea ecx, [ebp - 0x2240]
call fcn.00401c90
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2178]
call fcn.00401bf0
push 5
lea ecx, [ebp - 0x2178]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x3058]
call fcn.00401430
test al, al
je 0x464c51
mov edi, dword [ebp - 0x6fa4]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5ab4
push 1
lea ecx, [ebp - 0x3058]
call fcn.00401480
push eax
push 0x4c9754
lea ecx, [ebp - 0x2240]
call fcn.00401c90
push eax
push esi
mov ecx, edi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2178]
call fcn.00401bf0
lea ecx, [ebp - 0x2178]
call fcn.00401c90
push eax
call dword [0x4a94a8]
test eax, eax
je 0x464c38
push 1
lea ecx, [ebp - 0x3058]
call fcn.00401480
push eax
lea ecx, [ebp - 0x2080]
call fcn.00401a00
push eax
lea eax, [ebp - 0x20a8]
push eax
push esi
lea eax, [ebp - 0x2270]
push eax
lea eax, [ebp - 0x238c]
push eax
lea eax, [ebp - 0x2234]
push eax
push 0
lea ecx, [ebp - 0x2178]
call fcn.00401f20
lea edx, [ebp - 0x22b8]
mov ecx, eax
call fcn.004331d0
test al, al
jne 0x464c38
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4c9800
lea ecx, [ebp - 0x2178]
call fcn.00402f30
push 5
lea ecx, [ebp - 0x2178]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x3518]
call fcn.00401430
test al, al
je 0x464c38
nop dword [eax + eax]
push 0
push 1
lea ecx, [ebp - 0x3518]
call fcn.00401480
mov edx, 0x4e5ac8
mov ecx, eax
call fcn.00404680
test eax, eax
je 0x464c25
push 0
push 0
push 0
push 0
push 0
push 0x4e5ab4
push 1
lea ecx, [ebp - 0x3518]
call fcn.00401480
push eax
push 0x4c9754
push 1
lea ecx, [ebp - 0x3058]
call fcn.00401480
push eax
push 0x4c9754
lea ecx, [ebp - 0x2240]
call fcn.00401c90
push eax
push esi
mov ecx, edi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2178]
call fcn.00401bf0
lea ecx, [ebp - 0x2178]
call fcn.00401c90
push eax
call dword [0x4a94a8]
test eax, eax
je 0x464c25
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x3518]
call fcn.00401480
push eax
push 0x4ca04c
push 1
lea ecx, [ebp - 0x3058]
call fcn.00401480
push eax
lea ecx, [ebp - 0x2080]
call fcn.00401bf0
lea eax, [ebp - 0x2080]
push eax
lea eax, [ebp - 0x20a8]
push eax
push esi
lea eax, [ebp - 0x2270]
push eax
lea eax, [ebp - 0x238c]
push eax
lea eax, [ebp - 0x2234]
push eax
push 0
lea ecx, [ebp - 0x2178]
call fcn.00401f20
lea edx, [ebp - 0x22b8]
mov ecx, eax
call fcn.004331d0
lea ecx, [ebp - 0x3518]
call fcn.004013e0
test al, al
jne 0x464b10
lea ecx, [ebp - 0x3058]
call fcn.004013e0
test al, al
jne 0x464a01
mov edi, dword [ebp - 0x6f44]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5ad8
lea ecx, [ebp - 0x24ec]
call fcn.00401c90
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2178]
call fcn.00401bf0
lea ecx, [ebp - 0x2178]
call fcn.00401c90
push eax
call dword [0x4a94a8]
test eax, eax
je 0x464ce8
push 0x4e5b34
lea ecx, [ebp - 0x2080]
call fcn.00401a00
push eax
lea eax, [ebp - 0x20a8]
push eax
push esi
lea eax, [ebp - 0x2270]
push eax
lea eax, [ebp - 0x238c]
push eax
lea eax, [ebp - 0x2234]
push eax
lea edx, [ebp - 0x22b8]
lea ecx, [ebp - 0x2178]
call fcn.004331d0
inc esi
cmp esi, dword [edi + 0x30]
jb 0x464935
lea ecx, [ebp - 0x22b8]
call fcn.00404160
mov esi, eax
mov ecx, edi
mov dword [ebp - 0x6f80], esi
call fcn.0046f9d0
test al, al
jne 0x467379
test esi, esi
jne 0x464d2e
push esi
push 0x4e5b50
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
jmp 0x467379
push 0xc
lea ecx, [ebp - 0x21fc]
call fcn.00404370
lea ecx, [ebp - 0x21fc]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2040]
mov byte [ebp - 4], 0xe2
call fcn.00404370
lea ecx, [ebp - 0x2040]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x25cc]
mov byte [ebp - 4], 0xe3
call fcn.00404370
lea ecx, [ebp - 0x25cc]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x21cc]
mov byte [ebp - 4], 0xe4
call fcn.00404370
lea ecx, [ebp - 0x21cc]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2468]
mov byte [ebp - 4], 0xe5
call fcn.00404370
lea ecx, [ebp - 0x2468]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2308]
mov byte [ebp - 4], 0xe6
call fcn.00404370
lea ecx, [ebp - 0x2308]
call fcn.00401930
push 0x20
lea ecx, [ebp - 0x2978]
mov byte [ebp - 4], 0xe7
call fcn.0040ed60
lea ecx, [ebp - 0x2978]
call fcn.0040c450
mov byte [ebp - 4], 0xe8
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.0041f020
push 0
push 0x4e5bd0
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
xor esi, esi
mov dword [ebp - 0x6f40], esi
cmp dword [ebp - 0x6f80], esi
jbe 0x465230
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x2270]
call fcn.00475db0
push 0
push 0
push 0
mov eax, dword [eax]
lea ecx, [ebp - 0x22b8]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4c9754
push esi
mov dword [ebp - 0x6f4c], eax
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2468]
call fcn.00401bf0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d4818
lea ecx, [ebp - 0x2468]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2308]
call fcn.00401bf0
lea ecx, [ebp - 0x2308]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
je 0x46521d
lea eax, [ebp - 0x21fc]
xor edx, edx
push eax
lea ecx, [ebp - 0x2308]
mov dword [ebp - 0x6f5c], edx
call fcn.00401c90
xor edx, edx
mov ecx, eax
call fcn.00432ac0
test al, al
je 0x46521d
lea ecx, [ebp - 0x21fc]
call fcn.00401c90
mov ecx, eax
call fcn.0040e810
test al, al
je 0x4651f0
push 0xc
lea ecx, [ebp - 0x2448]
call fcn.00404370
lea ecx, [ebp - 0x2448]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x262c]
mov byte [ebp - 4], 0xe9
call fcn.00404370
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d47e0
lea ecx, [ebp - 0x21fc]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x262c]
call fcn.004019c0
lea eax, [ebp - 0x2448]
mov byte [ebp - 4], 0xea
push eax
lea ecx, [ebp - 0x262c]
call fcn.00401c90
mov edx, 0x4df1ac
mov ecx, eax
call fcn.00432ca0
test al, al
je 0x4651d6
push 0
push 1
push 1
push 0
push 0x4e2a1c
lea ecx, [ebp - 0x2448]
call fcn.00402c80
test eax, eax
jne 0x4651d6
push eax
push 1
push 1
push eax
push 0x4e2a3c
lea ecx, [ebp - 0x2448]
call fcn.00402c80
test eax, eax
jne 0x4651d6
push eax
push 1
push 1
push eax
push 0x4e2a8c
lea ecx, [ebp - 0x2448]
call fcn.00402c80
test eax, eax
jne 0x4651d6
push eax
push 1
push 1
push eax
push 0x4e2a70
lea ecx, [ebp - 0x2448]
call fcn.00402c80
test eax, eax
jne 0x4651d6
push eax
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e5c40
lea ecx, [ebp - 0x2448]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x4651d6
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5c8c
push esi
lea ecx, [ebp - 0x20a8]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2080]
call fcn.00401bf0
mov eax, dword [ebp - 0x6f4c]
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x2448]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2080]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x47
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f8c], eax
cmp eax, 0xffffffff
jne 0x4650eb
lea ecx, [ebp - 0x262c]
call fcn.00401ad0
lea ecx, [ebp - 0x2448]
mov byte [ebp - 4], 0xe8
call fcn.00401ad0
mov esi, dword [ebp - 0x6f40]
jmp 0x4651f0
push 0
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x20a8]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x262c]
call fcn.00401c90
push eax
push 0
push 0x47
push dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0x4e2af4
lea ecx, [ebp - 0x262c]
call fcn.00401c90
push eax
push 0x4e17a0
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x20a8]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0x4e0af8
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x2448]
call fcn.00401c90
push eax
push 0x4e4aa0
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
lea ecx, [ebp - 0x262c]
call fcn.00401ad0
lea ecx, [ebp - 0x2448]
mov byte [ebp - 4], 0xe8
call fcn.00401ad0
mov esi, dword [ebp - 0x6f40]
jmp 0x4651f0
lea ecx, [ebp - 0x262c]
call fcn.00401ad0
lea ecx, [ebp - 0x2448]
mov byte [ebp - 4], 0xe8
call fcn.00401ad0
inc dword [ebp - 0x6f5c]
lea eax, [ebp - 0x21fc]
push eax
lea ecx, [ebp - 0x2308]
call fcn.00401c90
mov edx, dword [ebp - 0x6f5c]
mov ecx, eax
call fcn.00432ac0
test al, al
jne 0x464ef1
inc esi
mov dword [ebp - 0x6f40], esi
cmp esi, dword [ebp - 0x6f80]
jb 0x464e30
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x46732c
push 0xc
lea ecx, [ebp - 0x25d8]
call fcn.00404370
push 1
push 0x4e4b78
lea ecx, [ebp - 0x25d8]
call fcn.00401980
push 0
push 0x4e5cb0
lea ecx, [ebp - 0x1fd4]
mov byte [ebp - 4], 0xeb
call fcn.0040d1b0
xor esi, esi
mov dword [ebp - 0x6f40], esi
cmp dword [ebp - 0x6f80], esi
jbe 0x465677
nop dword [eax + eax]
push esi
lea ecx, [ebp - 0x2270]
call fcn.00475db0
push 0
push 0
push 0
mov eax, dword [eax]
lea ecx, [ebp - 0x22b8]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4c9754
push esi
mov dword [ebp - 0x6f4c], eax
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2468]
call fcn.00401bf0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d4818
lea ecx, [ebp - 0x2468]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2308]
call fcn.00401bf0
lea ecx, [ebp - 0x2308]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
je 0x465664
lea eax, [ebp - 0x21fc]
xor edx, edx
push eax
lea ecx, [ebp - 0x2308]
mov dword [ebp - 0x6f5c], edx
call fcn.00401c90
xor edx, edx
mov ecx, eax
call fcn.00432ac0
test al, al
je 0x465664
lea ecx, [ebp - 0x21fc]
call fcn.00401c90
mov ecx, eax
call fcn.0040e810
test al, al
je 0x465637
push 0xc
lea ecx, [ebp - 0x2434]
call fcn.00404370
lea ecx, [ebp - 0x2434]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2638]
mov byte [ebp - 4], 0xec
call fcn.00404370
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d47e0
lea ecx, [ebp - 0x21fc]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2638]
call fcn.004019c0
lea eax, [ebp - 0x2434]
mov byte [ebp - 4], 0xed
push eax
lea ecx, [ebp - 0x2638]
call fcn.00401c90
mov edx, 0x4df2c8
mov ecx, eax
call fcn.00432ca0
test al, al
je 0x46561d
push 0x4d5eb0
lea ecx, [ebp - 0x2434]
call fcn.00401a40
test al, al
jne 0x46561d
push 0x4d5e14
lea ecx, [ebp - 0x2434]
call fcn.00401a40
test al, al
jne 0x46561d
push 0x4d627c
lea ecx, [ebp - 0x2434]
call fcn.00401a40
test al, al
jne 0x46561d
push 0x4e4c7c
lea ecx, [ebp - 0x2434]
call fcn.00401a40
test al, al
jne 0x46561d
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e5d10
lea ecx, [ebp - 0x2434]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x46561d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5d60
push esi
lea ecx, [ebp - 0x20a8]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2080]
call fcn.00401bf0
mov eax, dword [ebp - 0x6f4c]
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x2434]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2080]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x48
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f8c], eax
cmp eax, 0xffffffff
jne 0x465532
lea ecx, [ebp - 0x2638]
call fcn.00401ad0
lea ecx, [ebp - 0x2434]
mov byte [ebp - 4], 0xeb
call fcn.00401ad0
mov esi, dword [ebp - 0x6f40]
jmp 0x465637
push 0
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x20a8]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2638]
call fcn.00401c90
push eax
push 0
push 0x48
push dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0x4e2af4
lea ecx, [ebp - 0x2638]
call fcn.00401c90
push eax
push 0x4e17a0
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x20a8]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0x4e0af8
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x2434]
call fcn.00401c90
push eax
push 0x4e4cc8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
lea ecx, [ebp - 0x2638]
call fcn.00401ad0
lea ecx, [ebp - 0x2434]
mov byte [ebp - 4], 0xeb
call fcn.00401ad0
mov esi, dword [ebp - 0x6f40]
jmp 0x465637
lea ecx, [ebp - 0x2638]
call fcn.00401ad0
lea ecx, [ebp - 0x2434]
mov byte [ebp - 4], 0xeb
call fcn.00401ad0
inc dword [ebp - 0x6f5c]
lea eax, [ebp - 0x21fc]
push eax
lea ecx, [ebp - 0x2308]
call fcn.00401c90
mov edx, dword [ebp - 0x6f5c]
mov ecx, eax
call fcn.00432ac0
test al, al
jne 0x465351
inc esi
mov dword [ebp - 0x6f40], esi
cmp esi, dword [ebp - 0x6f80]
jb 0x465290
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x467321
push 0xc
lea ecx, [ebp - 0x2474]
call fcn.00404370
lea ecx, [ebp - 0x2474]
call fcn.00401930
xor esi, esi
mov byte [ebp - 4], 0xee
mov dword [ebp - 0x6f5c], esi
cmp dword [ebp - 0x6f80], esi
jbe 0x465aa8
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x2234]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2474]
call fcn.00402c80
test eax, eax
jne 0x465a95
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4ca9d0
push esi
lea ecx, [ebp - 0x2234]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2474]
call fcn.00402f30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4cf4
push esi
lea ecx, [ebp - 0x2234]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2040]
call fcn.00401bf0
push 0x260
lea ecx, [ebp - 0x39d8]
call fcn.00408820
push 1
lea ecx, [ebp - 0x2040]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x39d8]
call fcn.004012e0
push 1
lea ecx, [ebp - 0x2040]
mov byte [ebp - 4], 0xef
call fcn.00401c90
push eax
lea ecx, [ebp - 0x39d8]
call fcn.00401430
test al, al
je 0x465a86
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4c97ec
push 1
lea ecx, [ebp - 0x39d8]
call fcn.00401480
push eax
push 0x4c97ec
lea ecx, [ebp - 0x21cc]
call fcn.00401bf0
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x21cc]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x25d8]
call fcn.00402c80
test eax, eax
jne 0x465a73
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 1
lea ecx, [ebp - 0x39d8]
call fcn.00401480
push eax
push 0x4c9754
push esi
lea ecx, [ebp - 0x2234]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2040]
call fcn.00401bf0
lea ecx, [ebp - 0x21cc]
call fcn.00401ae0
push 0
push 0x80
lea ecx, [ebp - 0x2040]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2978]
call fcn.0040c700
test eax, eax
je 0x4658e8
push 0
lea eax, [ebp - 0x21cc]
push eax
lea ecx, [ebp - 0x2978]
call fcn.0040cac0
test eax, eax
je 0x4658e8
push 0
push 1
push 1
push 0
push 0x4e4d04
lea ecx, [ebp - 0x21cc]
call fcn.00402c80
mov esi, eax
push 0
lea ecx, [esi + 0xa]
push ecx
push 1
push 0
push 0x4e4d1c
lea ecx, [ebp - 0x21cc]
call fcn.00402c80
test esi, esi
je 0x4658d7
test eax, eax
je 0x4658d7
sub eax, esi
lea ecx, [ebp - 0x21cc]
sub eax, 0xb
push eax
lea eax, [esi + 0xb]
push eax
call fcn.00402c40
jmp 0x4658e2
lea ecx, [ebp - 0x21cc]
call fcn.00401ae0
mov esi, dword [ebp - 0x6f5c]
lea ecx, [ebp - 0x21cc]
call fcn.00401f90
test al, al
je 0x46591f
push 1
lea ecx, [ebp - 0x39d8]
call fcn.00401480
push eax
lea ecx, [ebp - 0x21cc]
call fcn.00401a00
push 0
lea ecx, [ebp - 0x21cc]
call fcn.00401ea0
jmp 0x46592c
push 3
lea ecx, [ebp - 0x21cc]
call fcn.00403700
push 0x4e5d94
lea ecx, [ebp - 0x21cc]
call fcn.00401a40
test al, al
jne 0x465a73
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e5d10
lea ecx, [ebp - 0x2040]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x465a73
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2040]
call fcn.00401c90
push eax
push 0x4db8f0
lea ecx, [ebp - 0x21cc]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x48
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x465a73
push 0
push esi
lea ecx, [ebp - 0x20a8]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0
push 0
push 0
push 0
push 0x4db8f0
lea ecx, [ebp - 0x2040]
call fcn.00401c90
push eax
push 0
push 0x48
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0x4e2af4
lea ecx, [ebp - 0x2040]
call fcn.00401c90
push eax
push 0x4e17a0
push esi
lea ecx, [ebp - 0x20a8]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0x4e0af8
push 0x4db8f0
push 0x4e0b14
lea ecx, [ebp - 0x21cc]
call fcn.00401c90
push eax
push 0x4e4d38
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
lea ecx, [ebp - 0x39d8]
call fcn.004013e0
test al, al
jne 0x4657a0
lea ecx, [ebp - 0x39d8]
mov byte [ebp - 4], 0xee
call fcn.00401330
inc esi
mov dword [ebp - 0x6f5c], esi
cmp esi, dword [ebp - 0x6f80]
jb 0x4656b6
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x467316
push 0x24
lea ecx, [ebp - 0x28f8]
call fcn.0042cde0
lea ecx, [ebp - 0x28f8]
call fcn.0040ee70
push 0xc
lea ecx, [ebp - 0x227c]
mov byte [ebp - 4], 0xf0
call fcn.00404370
lea ecx, [ebp - 0x227c]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x24a4]
mov byte [ebp - 4], 0xf1
call fcn.00404370
lea ecx, [ebp - 0x24a4]
call fcn.00401930
push 0
push 0x4e5dd8
lea ecx, [ebp - 0x1fd4]
mov byte [ebp - 4], 0xf2
call fcn.0040d1b0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5e28
lea ecx, [edi + 0x314]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00401bf0
xor esi, esi
mov dword [ebp - 0x6f70], esi
cmp dword [ebp - 0x6f80], esi
jbe 0x466013
push esi
lea ecx, [ebp - 0x2270]
call fcn.00475db0
mov ecx, edi
mov eax, dword [eax]
mov dword [ebp - 0x6f4c], eax
call fcn.0046f9d0
test al, al
jne 0x466013
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5e5c
push esi
lea ecx, [ebp - 0x22b8]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x21fc]
call fcn.00401bf0
lea eax, [ebp - 0x2040]
mov dword [ebp - 0x6f5c], 0
push eax
lea ecx, [ebp - 0x21fc]
call fcn.00401c90
xor edx, edx
mov ecx, eax
call fcn.00432ac0
test al, al
je 0x466000
mov esi, dword [ebp - 0x6f5c]
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4df848
lea ecx, [ebp - 0x2040]
call fcn.00402f30
push 0x100
lea ecx, [ebp - 0x2040]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x28f8]
call fcn.0040ef20
test al, al
je 0x465fd0
push 0
lea eax, [ebp - 0x2aa4]
mov dword [ebp - 0x6ea0], 0
push eax
xorps xmm0, xmm0
lea ecx, [ebp - 0x28f8]
push 0x4df4e0
movups xmmword [ebp - 0x6eb0], xmm0
call fcn.0040f520
test al, al
je 0x465fd0
lea eax, [ebp - 0x2aa4]
push eax
lea eax, [ebp - 0x6eb0]
push eax
lea ecx, [ebp - 0x28f8]
call fcn.0040fd40
test al, al
je 0x465fd0
lea eax, [ebp - 0x227c]
push eax
push 0x4df514
lea eax, [ebp - 0x6eb0]
push eax
lea ecx, [ebp - 0x28f8]
call fcn.0040f810
test eax, eax
je 0x465fa9
push 0
push 1
push 1
push 0
push 0x4e4e08
lea ecx, [ebp - 0x227c]
call fcn.00402c80
lea ecx, [ebp - 0x227c]
mov esi, eax
call fcn.00401b50
sub eax, 0x12
cmp esi, eax
je 0x465fa9
push 0
push 1
push 1
push 0
push 0x4e4e30
lea ecx, [ebp - 0x227c]
call fcn.00402c80
lea ecx, [ebp - 0x227c]
mov esi, eax
call fcn.00401b50
sub eax, 0xb
cmp esi, eax
je 0x465fa9
push 0
push 1
push 1
push 0
push 0x4e4e4c
lea ecx, [ebp - 0x227c]
call fcn.00402c80
lea ecx, [ebp - 0x227c]
mov esi, eax
call fcn.00401b50
sub eax, 0xb
cmp esi, eax
je 0x465fa9
lea eax, [ebp - 0x6eb0]
push eax
lea eax, [ebp - 0x2b98]
push eax
push 0x4e4e68
lea ecx, [ebp - 0x28f8]
call fcn.0040f520
test al, al
je 0x465fa9
lea eax, [ebp - 0x227c]
push eax
push 0x4e4e84
lea eax, [ebp - 0x2b98]
push eax
lea ecx, [ebp - 0x28f8]
call fcn.0040f810
test eax, eax
je 0x465fa9
push 0x4e29bc
lea ecx, [ebp - 0x227c]
call fcn.00401a40
test al, al
jne 0x465fa9
push 0x4e5e78
lea ecx, [ebp - 0x227c]
call fcn.00401a40
test al, al
jne 0x465fa9
lea eax, [ebp - 0x24a4]
push eax
push 0x4df4f0
lea eax, [ebp - 0x6eb0]
push eax
lea ecx, [ebp - 0x28f8]
call fcn.0040f810
test eax, eax
jne 0x465e0a
lea eax, [ebp - 0x24a4]
push eax
push 0x4df508
lea eax, [ebp - 0x6eb0]
push eax
lea ecx, [ebp - 0x28f8]
call fcn.0040f810
test eax, eax
je 0x465fa9
push str.null
lea ecx, [ebp - 0x24a4]
call fcn.00401a40
test al, al
jne 0x465fa9
lea ecx, [ebp - 0x227c]
call fcn.00401c90
lea ecx, [ebp - 0x1f98]
mov esi, eax
call fcn.00401c90
mov edx, esi
mov ecx, eax
call fcn.00408000
test al, al
jne 0x465fa9
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e5ea8
lea ecx, [ebp - 0x227c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x465fa9
mov eax, dword [ebp - 0x6f4c]
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x24a4]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x227c]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x49
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f8c], eax
cmp eax, 0xffffffff
je 0x465fa9
lea ecx, [ebp - 0x2040]
call fcn.00401c90
push eax
push dword [ebp - 0x6f70]
lea ecx, [ebp - 0x20a8]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x24a4]
call fcn.00401c90
push eax
push 0
push 0x49
push dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0x4e2af4
lea ecx, [ebp - 0x24a4]
call fcn.00401c90
push eax
push 0x4e17a0
push dword [ebp - 0x6f70]
lea ecx, [ebp - 0x20a8]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0x4e0af8
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x227c]
call fcn.00401c90
push eax
push 0x4e1fc0
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
lea eax, [ebp - 0x2aa4]
push eax
lea eax, [ebp - 0x6eb0]
push eax
lea ecx, [ebp - 0x28f8]
call fcn.0040fd40
test al, al
jne 0x465c90
mov esi, dword [ebp - 0x6f5c]
lea eax, [ebp - 0x2040]
inc esi
push eax
lea ecx, [ebp - 0x21fc]
mov dword [ebp - 0x6f5c], esi
call fcn.00401c90
mov edx, esi
mov ecx, eax
call fcn.00432ac0
test al, al
jne 0x465bf0
mov esi, dword [ebp - 0x6f70]
inc esi
mov dword [ebp - 0x6f70], esi
cmp esi, dword [ebp - 0x6f80]
jb 0x465b61
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x4672f5
push 0
push 0x4e5ef0
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x6e94]
push 1
push 0
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x6e9c], eax
mov dword [ebp - 0x6e98], 0x4b
call fcn.00401980
lea ecx, [ebp - 0x1f8c]
mov byte [ebp - 4], 0xf3
call fcn.00401c90
lea ecx, [edi + 0x14c]
mov dword [ebp - 0x6e88], eax
mov dword [ebp - 0x6e84], 0
call fcn.00401c90
mov dword [ebp - 0x6e80], eax
lea ecx, [ebp - 0x6e74]
lea eax, [ebp - 0x1fd4]
mov dword [ebp - 0x6e7c], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0x6e78], eax
call fcn.00401930
mov ecx, edi
mov byte [ebp - 4], 0xf4
call fcn.0046f9d0
test al, al
jne 0x4672ea
push 0xc
lea ecx, [ebp - 0x2480]
call fcn.00404370
lea ecx, [ebp - 0x2480]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x23ec]
mov byte [ebp - 4], 0xf5
call fcn.00404370
lea ecx, [ebp - 0x23ec]
call fcn.00401930
lea ecx, [ebp - 0x2474]
mov byte [ebp - 4], 0xf6
call fcn.00401ae0
xor esi, esi
cmp dword [ebp - 0x6f80], esi
jbe 0x4663a3
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x4663a3
push 0
push 1
push 1
push 0
push esi
lea ecx, [ebp - 0x2234]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2474]
call fcn.00402c80
test eax, eax
jne 0x466396
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4ca9d0
push esi
lea ecx, [ebp - 0x2234]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2474]
call fcn.00402f30
push esi
lea ecx, [ebp - 0x2270]
call fcn.00475db0
push 0
push 0
push 0
mov eax, dword [eax]
lea ecx, [ebp - 0x238c]
push 0
push 0
push 0
push 0
push 0
push 0
push esi
mov dword [ebp - 0x6f5c], eax
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0x4c9754
push esi
lea ecx, [ebp - 0x2234]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x6e94]
call fcn.00401bf0
push dword [ebp - 0x6f5c]
lea ecx, [edi + 0x114]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push esi
lea ecx, [ebp - 0x20a8]
mov dword [ebp - 0x6e84], eax
call fcn.004766b0
push eax
lea ecx, [ebp - 0x6e74]
call fcn.00401a10
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24ec]
call fcn.00401c90
push eax
push dword [ebp - 0x6f5c]
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2480]
call fcn.00401bf0
lea ecx, [ebp - 0x2480]
call fcn.00401c90
mov ecx, eax
call fcn.0040e810
test al, al
je 0x466396
lea ecx, [ebp - 0x2480]
call fcn.00401c90
push eax
lea eax, [ebp - 0x6e9c]
mov ecx, edi
push eax
call fcn.0044e820
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x4663a3
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x25a8]
call fcn.00401c90
push eax
push dword [ebp - 0x6f5c]
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2480]
call fcn.00401bf0
lea ecx, [ebp - 0x2480]
call fcn.00401c90
mov ecx, eax
call fcn.0040e810
test al, al
je 0x466396
push 0
lea ecx, [ebp - 0x2480]
call fcn.00401f20
lea ecx, [ebp - 0x2480]
call fcn.00401c90
push eax
lea eax, [ebp - 0x6e9c]
mov ecx, edi
push eax
call fcn.0044e820
lea ecx, [ebp - 0x2650]
mov dword [ebp - 0x6e84], 0x4db8f0
call fcn.00401c90
push eax
lea eax, [ebp - 0x6e9c]
mov ecx, edi
push eax
call fcn.0044e820
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x4663a3
push 0
push 1
lea ecx, [ebp - 0x265c]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2480]
call fcn.00401ba0
mov ecx, eax
call fcn.00401f20
lea ecx, [ebp - 0x2480]
call fcn.00401c90
push eax
lea eax, [ebp - 0x6e9c]
mov ecx, edi
push eax
call fcn.0044e820
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x4663a3
inc esi
cmp esi, dword [ebp - 0x6f80]
jb 0x466110
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x4672d4
lea ecx, [ebp - 0x2474]
call fcn.00401ae0
push 4
lea ecx, [ebp - 0x2200]
call fcn.00404590
lea ecx, [ebp - 0x2200]
call fcn.00404ea0
xor esi, esi
mov byte [ebp - 4], 0xf7
mov dword [ebp - 0x6f40], esi
cmp dword [ebp - 0x6f80], esi
jbe 0x466824
nop dword [eax]
mov dword [ebp - 0x6f50], 0
nop word [eax + eax]
push esi
lea ecx, [ebp - 0x2270]
call fcn.00475db0
mov ecx, dword [ebp - 0x6f50]
mov eax, dword [eax]
mov dword [ebp - 0x6f8c], eax
test ecx, ecx
jne 0x466447
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push 0x4e4ee8
push eax
lea ecx, [edi + 0x104]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
push str.HKU_
jmp 0x466491
cmp ecx, 1
jne 0x46646d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4ee8
push dword [ebp - 0x6f9c]
jmp 0x466491
cmp ecx, 2
jne 0x46649c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4ee8
push dword [ebp - 0x6fa0]
lea ecx, [ebp - 0x1f98]
call fcn.00401bf0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2200]
call fcn.004063e0
test al, al
je 0x4667fb
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f5c], 0
push eax
push 0
lea ecx, [ebp - 0x2200]
call fcn.004067b0
test al, al
je 0x4667fb
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e4f78
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x4c9754
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2040]
call fcn.00401bf0
push 0
push 0x20019
lea ecx, [ebp - 0x2040]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x4667d3
lea eax, [ebp - 0x23ec]
push eax
push 0x4c975c
lea ecx, [ebp - 0x1f74]
call fcn.00406580
test al, al
je 0x4667d3
lea ecx, [ebp - 0x23ec]
call fcn.00401f90
test al, al
jne 0x4667d3
push dword [ebp - 0x6f8c]
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x23ec]
call fcn.004020d0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x238c]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0x4c9754
push esi
lea ecx, [ebp - 0x2234]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2080]
call fcn.00401bf0
push 0
push 1
push 1
push 0
lea ecx, [ebp - 0x2080]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x23ec]
call fcn.00402c80
test eax, eax
je 0x4667d3
lea ecx, [ebp - 0x2080]
call fcn.00401b50
inc eax
lea ecx, [ebp - 0x23ec]
push eax
call fcn.00402bd0
push 0
push 0
push 0x4c975c
push 0x4ca048
push 3
lea ecx, [ebp - 0x23ec]
call fcn.00403700
mov ecx, eax
call fcn.00403410
lea ecx, [ebp - 0x23ec]
call fcn.00401f90
test al, al
jne 0x4667d3
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x4c9754
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2040]
call fcn.00401bf0
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e0a20
lea ecx, [ebp - 0x23ec]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x4667d3
mov eax, dword [ebp - 0x6f8c]
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
lea eax, [eax + eax*2]
push 0
lea esi, [ecx + eax*4]
push 1
lea ecx, [ebp - 0x23ec]
call fcn.00401c90
push eax
mov ecx, esi
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 0x4dcf68
push 5
push 0x4b
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x4667cd
push 0
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x20a8]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0
push 0
push 0
push 0
mov ecx, esi
call fcn.00401c90
push eax
push 0
lea ecx, [ebp - 0x2040]
call fcn.00401c90
push eax
push 0x4b
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
push dword [ebp - 0x6f40]
lea ecx, [ebp - 0x20a8]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0x4e0af8
mov ecx, esi
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x23ec]
call fcn.00401c90
push eax
push 0x4e3168
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
mov esi, dword [ebp - 0x6f40]
mov eax, dword [ebp - 0x6f5c]
lea ecx, [ebp - 0x6cb4]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x2200]
mov dword [ebp - 0x6f5c], eax
call fcn.004067b0
test al, al
jne 0x4664e8
mov eax, dword [ebp - 0x6f50]
inc eax
mov dword [ebp - 0x6f50], eax
cmp eax, 3
jb 0x466400
inc esi
mov dword [ebp - 0x6f40], esi
cmp esi, dword [ebp - 0x6f80]
jb 0x4663f0
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x4672c9
push 0
push 0x4e5f40
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
push 0xc
lea ecx, [ebp - 0x24e0]
call fcn.00404370
lea ecx, [ebp - 0x24e0]
call fcn.00401930
xor esi, esi
mov byte [ebp - 4], 0xf8
cmp dword [ebp - 0x6f80], esi
jbe 0x4672a4
nop
push esi
lea ecx, [ebp - 0x2270]
call fcn.00475db0
mov ecx, edi
mov eax, dword [eax]
mov dword [ebp - 0x6f40], eax
call fcn.0046f9d0
test al, al
jne 0x4672a4
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5e5c
push esi
lea ecx, [ebp - 0x22b8]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x21fc]
call fcn.00401bf0
lea eax, [ebp - 0x24e0]
xor edx, edx
push eax
lea ecx, [ebp - 0x21fc]
mov dword [ebp - 0x6f70], edx
call fcn.00401c90
xor edx, edx
mov ecx, eax
call fcn.00432ac0
test al, al
je 0x467297
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5f98
push esi
lea ecx, [ebp - 0x20a8]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0x4e59c8
lea ecx, [ebp - 0x2080]
call fcn.00401bf0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d4790
lea ecx, [ebp - 0x24e0]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2040]
call fcn.00401bf0
lea ecx, [ebp - 0x2040]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
je 0x466ac2
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e5fa8
lea ecx, [ebp - 0x2080]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x466ac2
mov eax, dword [ebp - 0x6f40]
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2040]
mov dword [ebp - 0x6f5c], eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2080]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x466ac2
push 0
push esi
lea ecx, [ebp - 0x20a8]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push 0
push 0
push 0
push 0
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2040]
call fcn.00401c90
push eax
push 0
push 0x4c
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e3470
lea ecx, [ebp - 0x2040]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push 0x4e17a0
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x2080]
call fcn.00401c90
push eax
push 0x4e34a8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5ff4
push esi
lea ecx, [ebp - 0x20a8]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0x4e59c8
lea ecx, [ebp - 0x2080]
call fcn.00401bf0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d47ac
lea ecx, [ebp - 0x24e0]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2040]
call fcn.00401bf0
lea ecx, [ebp - 0x2040]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
jne 0x466b69
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4df848
lea ecx, [ebp - 0x24e0]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2040]
call fcn.00401bf0
lea ecx, [ebp - 0x2040]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
je 0x466cca
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e5fa8
lea ecx, [ebp - 0x2080]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x466cca
mov eax, dword [ebp - 0x6f40]
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2040]
mov dword [ebp - 0x6f5c], eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2080]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x466cca
push 0
push esi
lea ecx, [ebp - 0x20a8]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push 0
push 0
push 0
push 0
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2040]
call fcn.00401c90
push eax
push 0
push 0x4c
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e3470
lea ecx, [ebp - 0x2040]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push 0x4e17a0
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x2080]
call fcn.00401c90
push eax
push 0x4e34a8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e600c
push esi
lea ecx, [ebp - 0x20a8]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0x4e59c8
lea ecx, [ebp - 0x2080]
call fcn.00401bf0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d47c4
lea ecx, [ebp - 0x24e0]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2040]
call fcn.00401bf0
lea ecx, [ebp - 0x2040]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
jne 0x466d71
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0x4df788
lea ecx, [ebp - 0x24e0]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2040]
call fcn.00401bf0
lea ecx, [ebp - 0x2040]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
je 0x466ed2
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e5fa8
lea ecx, [ebp - 0x2080]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x466ed2
mov eax, dword [ebp - 0x6f40]
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2040]
mov dword [ebp - 0x6f5c], eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2080]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x466ed2
push 0
push esi
lea ecx, [ebp - 0x20a8]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push 0
push 0
push 0
push 0
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2040]
call fcn.00401c90
push eax
push 0
push 0x4c
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e3470
lea ecx, [ebp - 0x2040]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push 0x4e17a0
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x2080]
call fcn.00401c90
push eax
push 0x4e34a8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e603c
push esi
lea ecx, [ebp - 0x20a8]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0x4e59c8
lea ecx, [ebp - 0x2080]
call fcn.00401bf0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d47e0
lea ecx, [ebp - 0x24e0]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2040]
call fcn.00401bf0
lea ecx, [ebp - 0x2040]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
je 0x46709e
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e5fa8
lea ecx, [ebp - 0x2080]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x46709e
mov eax, dword [ebp - 0x6f40]
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2040]
mov dword [ebp - 0x6f5c], eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2080]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x46709e
push 0
push esi
lea ecx, [ebp - 0x20a8]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push 0
push 0
push 0
push 0
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2040]
call fcn.00401c90
push eax
push 0
push 0x4c
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e3470
lea ecx, [ebp - 0x2040]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push 0x4e17a0
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x2080]
call fcn.00401c90
push eax
push 0x4e34a8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6050
push esi
lea ecx, [ebp - 0x20a8]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
push 0x4e59c8
lea ecx, [ebp - 0x2080]
call fcn.00401bf0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e5018
lea ecx, [ebp - 0x24e0]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2040]
call fcn.00401bf0
lea ecx, [ebp - 0x2040]
call fcn.00401c90
push eax
call dword [0x4a948c]
test eax, eax
je 0x46726a
push 0
lea ecx, [edi + 0x14c]
call fcn.00401c90
push eax
push 0x4e5fa8
lea ecx, [ebp - 0x2080]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046b610
test al, al
jne 0x46726a
mov eax, dword [ebp - 0x6f40]
mov ecx, dword [ebp - 0x6f78]
push 0
push 0
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
push 0
push 0
lea ecx, [ebp - 0x2040]
mov dword [ebp - 0x6f5c], eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2080]
call fcn.00401c90
push eax
mov eax, dword [edi + 8]
mov ecx, edi
push 5
push 0x4c
push dword [eax + 0xa8]
call fcn.004426b0
mov dword [ebp - 0x6f4c], eax
cmp eax, 0xffffffff
je 0x46726a
push 0
push esi
lea ecx, [ebp - 0x20a8]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push 0
push 0
push 0
push 0
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2040]
call fcn.00401c90
push eax
push 0
push 0x4c
push dword [ebp - 0x6f4c]
lea ecx, [ebp - 0x1f8c]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.00442770
push 0
push 0
push 0
push 0
push 0
push 0x4e3470
lea ecx, [ebp - 0x2040]
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push 0x4e17a0
call fcn.00401c90
push eax
push 0x4e0b14
lea ecx, [ebp - 0x2080]
call fcn.00401c90
push eax
push 0x4e34a8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
inc dword [ebp - 0x6f70]
lea eax, [ebp - 0x24e0]
push eax
lea ecx, [ebp - 0x21fc]
call fcn.00401c90
mov edx, dword [ebp - 0x6f70]
mov ecx, eax
call fcn.00432ac0
test al, al
jne 0x4668f6
inc esi
cmp esi, dword [ebp - 0x6f80]
jb 0x466870
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push dword [eax + 0xa8]
call fcn.0041f020
mov ecx, edi
call fcn.0046f9d0
lea ecx, [ebp - 0x24e0]
call fcn.00401ad0
lea ecx, [ebp - 0x2200]
call fcn.00406410
lea ecx, [ebp - 0x23ec]
call fcn.00401ad0
lea ecx, [ebp - 0x2480]
call fcn.00401ad0
lea ecx, [ebp - 0x6e9c]
call fcn.0046a2d0
lea ecx, [ebp - 0x24a4]
call fcn.00401ad0
lea ecx, [ebp - 0x227c]
call fcn.00401ad0
lea ecx, [ebp - 0x28f8]
call fcn.0042bbe0
lea ecx, [ebp - 0x2474]
call fcn.00401ad0
lea ecx, [ebp - 0x25d8]
call fcn.00401ad0
lea ecx, [ebp - 0x2978]
call fcn.0040ed40
lea ecx, [ebp - 0x2308]
call fcn.00401ad0
lea ecx, [ebp - 0x2468]
call fcn.00401ad0
lea ecx, [ebp - 0x21cc]
call fcn.00401ad0
lea ecx, [ebp - 0x25cc]
call fcn.00401ad0
lea ecx, [ebp - 0x2040]
call fcn.00401ad0
lea ecx, [ebp - 0x21fc]
call fcn.00401ad0
lea ecx, [ebp - 0x2080]
call fcn.00401ad0
lea ecx, [ebp - 0x3518]
call fcn.00401330
lea ecx, [ebp - 0x3058]
call fcn.00401330
lea ecx, [ebp - 0x2270]
call fcn.00475cd0
lea ecx, [ebp - 0x20a8]
call fcn.004766d0
lea ecx, [ebp - 0x238c]
call fcn.004766d0
lea ecx, [ebp - 0x2234]
call fcn.004766d0
lea ecx, [ebp - 0x22b8]
mov byte [ebp - 4], 0x45
call fcn.004766d0
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x46969f
test dword [edi + 0x34], 0x40
jne 0x46969f
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0x4e6074
push dword [eax + 0x38]
call fcn.0041d990
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x37
push dword [eax + 0x34]
call fcn.0041ff10
mov eax, dword [edi + 0x30]
xor esi, esi
test eax, eax
je 0x46747f
mov eax, dword [ebp - 0x6f6c]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f5c], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dba28
push esi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push str.HKU_
call fcn.00401bf0
add dword [ebp - 0x6f5c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x467435
mov esi, dword [ebp - 0x6f6c]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dba80
push dword [ebp - 0x6f9c]
lea ecx, [esi + eax*4]
call fcn.00401bf0
cmp byte [ebp - 0x6f45], 0
je 0x4674e6
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4dba80
push dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00401bf0
push 0xc
lea ecx, [ebp - 0x1fb0]
mov dword [ebp - 0x6fc0], 0x4dbad8
mov dword [ebp - 0x6fbc], 0x4dbae8
mov dword [ebp - 0x6fb8], 0x4e60a0
mov dword [ebp - 0x6fb4], 0x4e60c0
mov dword [ebp - 0x6fb0], 0x4e60d8
mov dword [ebp - 0x6fac], 0x4e60ec
call fcn.00404370
lea ecx, [ebp - 0x1fb0]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x22c4]
mov byte [ebp - 4], 0xf9
call fcn.00404370
lea ecx, [ebp - 0x22c4]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x21b4]
mov byte [ebp - 4], 0xfa
call fcn.00404370
lea ecx, [ebp - 0x21b4]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2314]
mov byte [ebp - 4], 0xfb
call fcn.00404370
lea ecx, [ebp - 0x2314]
call fcn.00401930
cmp dword [ebp - 0x6f7c], 0
mov byte [ebp - 4], 0xfc
mov dword [ebp - 0x6f8c], 0
jbe 0x46773f
mov dword [ebp - 0x6f5c], esi
nop
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x46773f
xor eax, eax
mov dword [ebp - 0x6f50], eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + eax*4 - 0x6fc0]
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f98]
call fcn.00401bf0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x467707
lea eax, [ebp - 0x6cb4]
xor esi, esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.00406830
test al, al
je 0x467701
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x467701
lea eax, [ebp - 0x1fb0]
push eax
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f74]
call fcn.00406580
test al, al
je 0x4676e5
lea ecx, [ebp - 0x1fb0]
call fcn.00401f90
test al, al
jne 0x4676e5
push 3
lea edx, [edi + 0x17c]
lea ecx, [ebp - 0x1fb0]
call fcn.00408840
test al, al
je 0x4676e5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x4cd568
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2148]
call fcn.00401bf0
push 0
lea ecx, [ebp - 0x2148]
call fcn.00401c90
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.0046bd60
lea eax, [ebp - 0x6cb4]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.00406830
test al, al
jne 0x467638
mov esi, dword [ebp - 0x6f5c]
mov eax, dword [ebp - 0x6f50]
inc eax
mov dword [ebp - 0x6f50], eax
cmp eax, 6
jb 0x4675c7
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f5c], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [ebp - 0x6f7c]
jb 0x4675b0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x39
push dword [eax + 0x34]
call fcn.0041ff10
push 4
lea ecx, [ebp - 0x6cb8]
call fcn.00404590
lea ecx, [ebp - 0x6cb8]
call fcn.00404ea0
lea eax, [ebp - 0x6cb8]
mov byte [ebp - 4], 0xfd
push eax
push 0x4c3bb4
push 1
push 0
push 0x4c3dc4
call dword [0x4a9800]
test eax, eax
js 0x467a2e
lea ecx, [ebp - 0x7028]
call fcn.00401150
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x7048]
movups xmmword [ebp - 0x6fb8], xmm0
call fcn.00401150
movups xmm0, xmmword [eax]
lea ecx, [ebp - 0x7058]
movups xmmword [ebp - 0x6fe0], xmm0
call fcn.00401150
mov dword [ebp - 4], 0x100
lea ecx, [ebp - 0x70b8]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x6f98], xmm0
call fcn.00401150
mov edi, eax
mov byte [ebp - 4], 1
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x6fb8]
mov ecx, dword [ebp - 0x6cb8]
mov edx, esp
sub esp, 0x10
mov eax, esp
sub esp, 0x10
mov esi, dword [ecx]
movups xmmword [edx], xmm0
movups xmm0, xmmword [ebp - 0x6fe0]
movups xmmword [eax], xmm0
mov eax, esp
sub esp, 0x10
movups xmm0, xmmword [ebp - 0x6f98]
movups xmmword [eax], xmm0
mov eax, esp
movups xmm0, xmmword [edi]
push ecx
movups xmmword [eax], xmm0
mov eax, dword [esi + 0x28]
call eax
lea ecx, [ebp - 0x70b8]
mov esi, eax
call fcn.004011e0
lea ecx, [ebp - 0x7058]
mov dword [ebp - 4], 0xff
call fcn.004011e0
lea ecx, [ebp - 0x7048]
call fcn.004011e0
lea ecx, [ebp - 0x7028]
mov byte [ebp - 4], 0xfd
call fcn.004011e0
test esi, esi
js 0x467a28
push 4
lea ecx, [ebp - 0x6ce4]
call fcn.00404590
lea ecx, [ebp - 0x6ce4]
call fcn.00404ea0
push 0x4c9754
lea ecx, [ebp - 0x7000]
mov dword [ebp - 4], 0x102
call fcn.00401030
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x6cb8]
mov esi, dword [ecx]
lea ecx, [ebp - 0x6ce4]
push ecx
mov ecx, eax
call fcn.00401140
push eax
push dword [ebp - 0x6cb8]
mov eax, dword [esi + 0x1c]
call eax
lea ecx, [ebp - 0x7000]
mov byte [ebp - 4], 2
mov esi, eax
call fcn.004010e0
test esi, esi
js 0x467a16
push 4
lea ecx, [ebp - 0x6ce0]
call fcn.00404590
lea ecx, [ebp - 0x6ce0]
call fcn.00404ea0
mov byte [ebp - 4], 4
lea edx, [ebp - 0x6ce0]
mov eax, dword [ebp - 0x6ce4]
push edx
push 0
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x28]
call eax
test eax, eax
js 0x467a0b
mov eax, dword [ebp - 0x6ce0]
lea edx, [ebp - 0x255c]
mov dword [ebp - 0x255c], 0
push edx
push eax
mov ecx, dword [eax]
mov eax, dword [ecx + 0x1c]
call eax
mov eax, dword [ebp - 0x255c]
test eax, eax
je 0x467a0b
mov esi, 1
mov dword [ebp - 0x6f8c], esi
cmp eax, esi
jl 0x467a0b
mov edi, dword [ebp - 0x6f44]
nop dword [eax + eax]
push 4
lea ecx, [ebp - 0x6cf8]
call fcn.00404590
lea ecx, [ebp - 0x6cf8]
call fcn.00404ea0
push 3
push esi
lea ecx, [ebp - 0x7038]
mov byte [ebp - 4], 5
call fcn.00401160
mov esi, eax
mov byte [ebp - 4], 6
lea edx, [ebp - 0x6cf8]
mov ecx, dword [ebp - 0x6ce0]
movups xmm0, xmmword [esi]
push edx
sub esp, 0x10
mov eax, dword [ecx]
mov edx, esp
push ecx
mov eax, dword [eax + 0x20]
movups xmmword [edx], xmm0
call eax
lea ecx, [ebp - 0x7038]
mov byte [ebp - 4], 5
mov esi, eax
call fcn.004011e0
test esi, esi
js 0x4679d6
push dword [ebp - 0x6cf8]
mov ecx, edi
call fcn.0046de50
test al, al
je 0x467a00
lea ecx, [ebp - 0x6cf8]
mov byte [ebp - 4], 4
call fcn.00475a30
mov esi, dword [ebp - 0x6f8c]
inc esi
mov dword [ebp - 0x6f8c], esi
cmp esi, dword [ebp - 0x255c]
jle 0x467960
jmp 0x467a0b
lea ecx, [ebp - 0x6cf8]
call fcn.00475a30
lea ecx, [ebp - 0x6ce0]
call fcn.00475a30
lea ecx, [ebp - 0x6ce4]
mov dword [ebp - 4], 0xfd
call fcn.00475a30
mov edi, dword [ebp - 0x6f44]
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x469664
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x3c
push dword [eax + 0x34]
call fcn.0041ff10
push 0x18
lea ecx, [ebp - 0x2498]
call fcn.00404e90
lea ecx, [ebp - 0x2498]
call fcn.00403ff0
mov dword [ebp - 4], 0x107
xor esi, esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x467ada
mov eax, dword [ebp - 0x6f6c]
lea ecx, [edi + 0x104]
mov dword [ebp - 0x6f5c], eax
nop dword [eax + eax]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e6118
push esi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push str.HKU_
call fcn.00401bf0
add dword [ebp - 0x6f5c], 0xc
lea ecx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
cmp esi, eax
jb 0x467a90
mov esi, dword [ebp - 0x6f6c]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d2400
push dword [ebp - 0x6f9c]
lea ecx, [esi + eax*4]
call fcn.00401bf0
cmp byte [ebp - 0x6f45], 0
je 0x467b41
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
inc eax
push 0
push 0x4d2400
push dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00401bf0
cmp dword [ebp - 0x6f7c], 0
mov dword [ebp - 0x6fc4], 0x4d05f4
mov dword [ebp - 0x6fc0], 0x4d05e0
mov dword [ebp - 0x6fbc], 0x4cde84
mov dword [ebp - 0x6fb8], 0x4d2470
mov dword [ebp - 0x6fb4], 0x4d23f8
mov dword [ebp - 0x6fb0], 0x4d061c
mov dword [ebp - 0x6fac], 0x4d8c28
mov dword [ebp - 0x6f8c], 0
jbe 0x467d44
mov dword [ebp - 0x6f5c], esi
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x467d44
mov dword [ebp - 0x6f50], 0
nop dword [eax]
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x467d22
lea eax, [ebp - 0x1fb0]
mov ecx, esi
push eax
mov eax, dword [ebp - 0x6f50]
push dword [ebp + eax*4 - 0x6fc4]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00406750
test al, al
je 0x467d22
push 0
push 0x4ca844
lea ecx, [ebp - 0x1fb0]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2498]
call fcn.004041c0
lea ecx, [ebp - 0x2498]
xor esi, esi
call fcn.00404160
test eax, eax
je 0x467d06
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x467d06
push 3
push 1
push esi
lea ecx, [ebp - 0x2498]
call fcn.00404150
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00401ba0
mov ecx, eax
call fcn.00403700
mov ecx, eax
call fcn.00401b50
test eax, eax
je 0x467cf2
push 3
lea edx, [edi + 0x17c]
lea ecx, [ebp - 0x1fb0]
call fcn.00408840
test al, al
je 0x467cf2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x2498]
call fcn.00404150
mov ecx, dword [ebp - 0x6f5c]
push eax
mov eax, dword [ebp - 0x6f50]
push 0x4cd568
push dword [ebp + eax*4 - 0x6fc4]
push 0x4cd568
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2148]
call fcn.00401bf0
push 0
lea ecx, [ebp - 0x2148]
call fcn.00401c90
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.0046bd60
lea ecx, [ebp - 0x2498]
inc esi
call fcn.00404160
cmp esi, eax
jb 0x467c31
mov eax, dword [ebp - 0x6f50]
mov esi, dword [ebp - 0x6f5c]
inc eax
mov dword [ebp - 0x6f50], eax
cmp eax, 7
jb 0x467bc0
mov eax, dword [ebp - 0x6f8c]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f5c], esi
mov dword [ebp - 0x6f8c], eax
cmp eax, dword [ebp - 0x6f7c]
jb 0x467ba4
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x469652
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x3e
push dword [eax + 0x34]
call fcn.0041ff10
push 0xc
lea ecx, [ebp - 0x20fc]
call fcn.00404370
lea ecx, [ebp - 0x20fc]
call fcn.00401930
xor esi, esi
mov byte [ebp - 4], 8
mov dword [ebp - 0x6f8c], esi
test esi, esi
jne 0x467d92
push 0x4d4440
jmp 0x467dad
cmp dword [ebp - 0x6f50], 1
jne 0x467db8
cmp byte [edi + 0x188], 0
je 0x467f01
push 0x4e6188
lea ecx, [ebp - 0x1f98]
call fcn.00401a00
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x467ef1
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f50], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.004067b0
test al, al
je 0x467ef1
mov esi, dword [ebp - 0x6f50]
nop word [eax + eax]
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x467ee5
lea eax, [ebp - 0x1fb0]
push eax
lea eax, [ebp - 0x21b4]
push eax
push 1
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x20fc]
call fcn.00401ba0
push eax
mov ecx, edi
call fcn.0046a3c0
test al, al
je 0x467ec9
push 0
lea ecx, [ebp - 0x20fc]
call fcn.00401c90
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.0046bd60
test al, al
je 0x467ec9
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x4c9754
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2148]
call fcn.00401bf0
push 0
lea ecx, [ebp - 0x2148]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00401ae0
push eax
mov ecx, edi
call fcn.0046bd60
lea eax, [ebp - 0x6cb4]
inc esi
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.004067b0
test al, al
jne 0x467e10
mov dword [ebp - 0x6f50], esi
mov esi, dword [ebp - 0x6f8c]
inc esi
mov dword [ebp - 0x6f8c], esi
cmp esi, 2
jb 0x467d87
mov ecx, edi
call fcn.0046ba40
test al, al
je 0x469647
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x41
push dword [eax + 0x34]
call fcn.0041ff10
push 4
lea ecx, [ebp - 0x1fb4]
call fcn.00404590
lea ecx, [ebp - 0x1fb4]
call fcn.00404ea0
push 4
lea ecx, [ebp - 0x205c]
mov byte [ebp - 4], 9
call fcn.00404590
lea ecx, [ebp - 0x205c]
call fcn.00404ea0
push 4
lea ecx, [ebp - 0x2004]
mov byte [ebp - 4], 0xa
call fcn.00404590
lea ecx, [ebp - 0x2004]
call fcn.00404ea0
mov byte [ebp - 4], 0xb
lea esi, [ebp - 0x6fd0]
mov dword [ebp - 0x6fd0], 0x4e6234
mov dword [ebp - 0x6fcc], 0x4e6250
mov dword [ebp - 0x6fc8], 0x4e6298
mov dword [ebp - 0x6fc4], 0x4e62d8
mov dword [ebp - 0x6fc0], 0x4e6344
mov dword [ebp - 0x6fbc], 0x4e6368
mov dword [ebp - 0x6fb8], 0x4e63b8
mov dword [ebp - 0x6fb4], 0x4e63e8
mov dword [ebp - 0x6fb0], 0x4e6440
mov dword [ebp - 0x6fac], 0x4e6480
mov dword [ebp - 0x6f5c], 0
mov dword [ebp - 0x6f40], esi
nop
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x4682ca
push 0
push 0x20019
push dword [esi]
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x4682ab
mov ecx, edi
xor esi, esi
call fcn.0046f9d0
test al, al
jne 0x4682a5
nop dword [eax]
lea eax, [ebp - 0x6cb4]
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.004067b0
test al, al
je 0x4682a5
lea ecx, [ebp - 0x1fb0]
call fcn.00401ae0
lea ecx, [ebp - 0x2148]
call fcn.00401ae0
lea ecx, [ebp - 0x20fc]
call fcn.00401ae0
test dword [ebp - 0x6f5c], 1
jne 0x468156
mov eax, dword [ebp - 0x6f40]
lea ecx, [ebp - 0x1f98]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str.Command
push dword [ebp - 0x6cb4]
push 0x4c9754
push dword [eax]
call fcn.00401bf0
lea eax, [ebp - 0x1fb0]
push eax
push 0x4c975c
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fb4]
call fcn.00406750
test al, al
je 0x46810b
lea ecx, [ebp - 0x1fb0]
call fcn.00401b50
test eax, eax
je 0x46810b
push 3
lea edx, [edi + 0x17c]
lea ecx, [ebp - 0x1fb0]
call fcn.00408840
test al, al
jne 0x46821c
lea ecx, [ebp - 0x1fb0]
jmp 0x468217
lea eax, [ebp - 0x20fc]
push eax
push str.DelegateExecute
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fb4]
call fcn.00406750
test al, al
je 0x468145
lea ecx, [ebp - 0x20fc]
call fcn.00401b50
test eax, eax
jne 0x4681f1
lea eax, [ebp - 0x20fc]
push eax
push 0x4e64ec
jmp 0x4681c7
mov ecx, dword [ebp - 0x6cb4]
call fcn.00407a10
test al, al
je 0x46818b
lea eax, [ebp - 0x1fb0]
push eax
lea eax, [ebp - 0x21b4]
push eax
push 1
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x20fc]
call fcn.00401ba0
jmp 0x468205
mov eax, dword [ebp - 0x6f40]
lea ecx, [ebp - 0x1f98]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
push 0x4c9754
push dword [eax]
call fcn.00401bf0
lea eax, [ebp - 0x20fc]
push eax
push 0x4c975c
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fb4]
call fcn.00406750
test al, al
je 0x46821c
lea ecx, [ebp - 0x20fc]
call fcn.00401b50
test eax, eax
je 0x46821c
lea eax, [ebp - 0x1fb0]
push eax
lea eax, [ebp - 0x21b4]
push eax
lea eax, [ebp - 0x20fc]
push eax
mov ecx, edi
call fcn.0046a3c0
test al, al
jne 0x46821c
lea ecx, [ebp - 0x20fc]
call fcn.00401ae0
push 0
lea ecx, [ebp - 0x20fc]
call fcn.00401c90
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.0046bd60
test al, al
je 0x468295
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1f98]
push 0x4c9754
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2148]
call fcn.00401bf0
push 0
lea ecx, [ebp - 0x2148]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00401ae0
push eax
mov ecx, edi
call fcn.0046bd60
mov ecx, edi
inc esi
call fcn.0046f9d0
test al, al
je 0x468030
mov esi, dword [ebp - 0x6f40]
mov eax, dword [ebp - 0x6f5c]
add esi, 4
inc eax
mov dword [ebp - 0x6f40], esi
mov dword [ebp - 0x6f5c], eax
cmp eax, 0xa
jb 0x467ff0
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x469626
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x46
push dword [eax + 0x34]
call fcn.0041ff10
xor esi, esi
mov dword [ebp - 0x6fd0], 0x4d3400
mov dword [ebp - 0x6fcc], 0x4d34a0
mov dword [ebp - 0x6f70], esi
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x468416
push 0
push 0x20019
push dword [ebp + esi*4 - 0x6fd0]
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x468406
mov ecx, edi
xor esi, esi
call fcn.0046f9d0
test al, al
jne 0x468400
lea eax, [ebp - 0x6cb4]
push eax
push esi
lea ecx, [ebp - 0x1f74]
call fcn.004067b0
test al, al
je 0x468400
mov eax, dword [ebp - 0x6f70]
lea ecx, [ebp - 0x2148]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
push 0x4c9754
push dword [ebp + eax*4 - 0x6fd0]
call fcn.00401bf0
lea eax, [ebp - 0x1fb0]
push eax
push str.Debugger
lea ecx, [ebp - 0x2148]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fb4]
call fcn.00406750
test al, al
je 0x4683f0
push 3
lea edx, [edi + 0x17c]
lea ecx, [ebp - 0x1fb0]
call fcn.00408840
test al, al
je 0x4683f0
push 0
lea ecx, [ebp - 0x2148]
call fcn.00401c90
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.0046bd60
mov ecx, edi
inc esi
call fcn.0046f9d0
test al, al
je 0x468346
mov esi, dword [ebp - 0x6f70]
inc esi
mov dword [ebp - 0x6f70], esi
cmp esi, 2
jb 0x468305
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x469626
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x48
push dword [eax + 0x34]
call fcn.0041ff10
push 0x4d3370
lea ecx, [ebp - 0x2120]
mov dword [ebp - 0x6fd0], 0x4e6504
mov dword [ebp - 0x6fcc], 0x4e6528
mov dword [ebp - 0x6fc8], 0x4e6558
mov dword [ebp - 0x6fc4], 0x4e6584
call fcn.00401a00
push 0xc
lea ecx, [ebp - 0x2404]
call fcn.00404370
push 1
push 0x4ca130
lea ecx, [ebp - 0x2404]
call fcn.00401980
push 0
push 0x20019
lea ecx, [ebp - 0x2120]
mov byte [ebp - 4], 0xc
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x4686dd
xor esi, esi
mov dword [ebp - 0x6f70], esi
nop
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x4686dd
cmp esi, 1
jne 0x46851a
push 0x4e65a8
lea ecx, [ebp - 0x2120]
call fcn.00401a00
push 0
push 0x20019
lea ecx, [ebp - 0x2120]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x4686dd
push 0x4ca9d0
lea ecx, [ebp - 0x2404]
call fcn.00401a00
lea eax, [ebp - 0x1fb0]
push eax
push dword [ebp + esi*4 - 0x6fd0]
lea ecx, [ebp - 0x1f74]
call fcn.00406580
test al, al
je 0x4686cd
lea ecx, [ebp - 0x1fb0]
call fcn.00401f90
test al, al
jne 0x4686cd
push 0x4ca82c
lea ecx, [ebp - 0x1fb0]
call fcn.00401a40
test al, al
jne 0x4686cd
push 1
lea ecx, [ebp - 0x2404]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2498]
call fcn.004041c0
lea ecx, [ebp - 0x2498]
xor esi, esi
call fcn.00404160
test eax, eax
je 0x4686c7
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x4686c7
push 3
push 1
push esi
lea ecx, [ebp - 0x2498]
call fcn.00404150
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00401ba0
mov ecx, eax
call fcn.00403700
mov ecx, eax
call fcn.00401f90
test al, al
jne 0x4686b3
lea ecx, [ebp - 0x1fb0]
call fcn.00401b50
cmp eax, 5
jl 0x46860d
push 0
push 1
push 1
push 0
push 0x4c9758
lea ecx, [ebp - 0x1fb0]
call fcn.00402c80
test eax, eax
jne 0x468633
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str..dll
lea ecx, [ebp - 0x1fb0]
call fcn.00402f30
push 3
lea edx, [edi + 0x17c]
lea ecx, [ebp - 0x1fb0]
call fcn.00408840
test al, al
je 0x4686b3
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push esi
lea ecx, [ebp - 0x2498]
call fcn.00404150
push eax
mov eax, dword [ebp - 0x6f70]
lea ecx, [ebp - 0x2120]
push 0x4cd568
push dword [ebp + eax*4 - 0x6fd0]
push 0x4cd568
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2148]
call fcn.00401bf0
push 0
lea ecx, [ebp - 0x2148]
call fcn.00401c90
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.0046bd60
lea ecx, [ebp - 0x2498]
inc esi
call fcn.00404160
cmp esi, eax
jb 0x4685a0
mov esi, dword [ebp - 0x6f70]
inc esi
mov dword [ebp - 0x6f70], esi
cmp esi, 4
jb 0x4684c0
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x46961b
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x4b
push dword [eax + 0x34]
call fcn.0041ff10
movsd xmm0, qword [0x4eaa28]
mov eax, 0x4e6668
comisd xmm0, xmmword [edi + 0x368]
mov ecx, 0x4e6600
cmovbe ecx, eax
mov eax, dword [edi + 0x30]
xor esi, esi
mov dword [ebp - 0x6f70], ecx
test eax, eax
je 0x46878e
mov eax, dword [ebp - 0x6f6c]
lea edx, [edi + 0x104]
mov dword [ebp - 0x6f5c], eax
nop
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push ecx
push esi
mov ecx, edx
call fcn.00476390
mov ecx, eax
call fcn.00401c90
mov ecx, dword [ebp - 0x6f5c]
push eax
push str.HKU_
call fcn.00401bf0
add dword [ebp - 0x6f5c], 0xc
lea edx, [edi + 0x104]
mov eax, dword [edi + 0x30]
inc esi
mov ecx, dword [ebp - 0x6f70]
cmp esi, eax
jb 0x468740
mov esi, dword [ebp - 0x6f6c]
lea eax, [eax + eax*2]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push ecx
push dword [ebp - 0x6f9c]
lea ecx, [esi + eax*4]
call fcn.00401bf0
cmp byte [ebp - 0x6f45], 0
je 0x4687f2
mov eax, dword [edi + 0x30]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6f70]
inc eax
push dword [ebp - 0x6fa0]
lea eax, [eax + eax*2]
lea ecx, [esi + eax*4]
call fcn.00401bf0
cmp dword [ebp - 0x6f7c], 0
mov dword [ebp - 0x6f70], 0
jbe 0x4689d7
mov dword [ebp - 0x6f5c], esi
nop
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x4689d7
push 0
push 0x20019
mov ecx, esi
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.004063e0
test al, al
je 0x4689b5
lea eax, [ebp - 0x6cb4]
mov dword [ebp - 0x6f8c], 0
push eax
push 0
lea ecx, [ebp - 0x1f74]
call fcn.00406830
test al, al
je 0x4689b5
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x4689af
push dword [ebp - 0x6cb4]
lea ecx, [ebp - 0x1fb0]
call fcn.00401a00
lea ecx, [ebp - 0x1fb0]
call fcn.00401b50
mov esi, eax
cmp esi, 3
jl 0x468987
push 1
lea ecx, [ebp - 0x1fb0]
call fcn.00401ac0
cmp word [eax], 0x3a
jne 0x468987
push 2
lea ecx, [ebp - 0x1fb0]
call fcn.00401ac0
cmp word [eax], 0x5c
jne 0x468987
movsd xmm0, qword [edi + 0x368]
comisd xmm0, xmmword [0x4eaa30]
jbe 0x468937
cmp esi, 0x14
jle 0x468937
push 0
push 1
push 0xffffffffffffffff
push 0
push 0x4e6700
lea ecx, [ebp - 0x1fb0]
call fcn.00402c80
mov edx, eax
lea ecx, [esi - 0xf]
cmp edx, ecx
jge 0x468921
push 0
push 1
push 0xffffffffffffffff
push 0
push 0x4e6724
lea ecx, [ebp - 0x1fb0]
call fcn.00402c80
mov edx, eax
lea eax, [esi - 0x13]
cmp edx, eax
jle 0x468937
lea eax, [edx - 1]
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00402b50
mov ecx, dword [ebp - 0x6f5c]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6cb4]
push 0x4cd568
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2148]
call fcn.00401bf0
push 0
lea ecx, [ebp - 0x2148]
call fcn.00401c90
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.0046bd60
mov esi, dword [ebp - 0x6f8c]
lea eax, [ebp - 0x6cb4]
inc esi
lea ecx, [ebp - 0x1f74]
push eax
push esi
mov dword [ebp - 0x6f8c], esi
call fcn.00406830
test al, al
jne 0x468867
mov esi, dword [ebp - 0x6f5c]
mov eax, dword [ebp - 0x6f70]
add esi, 0xc
inc eax
mov dword [ebp - 0x6f5c], esi
mov dword [ebp - 0x6f70], eax
cmp eax, dword [ebp - 0x6f7c]
jb 0x468810
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x46961b
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x50
push dword [eax + 0x34]
call fcn.0041ff10
push 0xc
lea ecx, [ebp - 0x213c]
call fcn.00406340
push 0xbb8
push 0
lea ecx, [ebp - 0x213c]
call fcn.00476740
mov byte [ebp - 4], 0xd
xor esi, esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x468a7a
mov eax, dword [ebp - 0x6f6c]
mov dword [ebp - 0x6f5c], eax
push esi
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
push dword [ebp - 0x6f5c]
lea ecx, [edi + 0x104]
push esi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
mov edx, 0x4ce800
mov ecx, eax
call fcn.00424230
add dword [ebp - 0x6f5c], 0xc
inc esi
mov eax, dword [edi + 0x30]
cmp esi, eax
jb 0x468a32
mov ecx, dword [ebp - 0x6f6c]
lea eax, [eax + eax*2]
push 0
push 0
push 0x16
lea ecx, [ecx + eax*4]
call fcn.00402150
mov eax, dword [ebp - 0x6f6c]
xor esi, esi
mov dword [ebp - 0x6f5c], eax
nop
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x468ad8
mov ecx, dword [ebp - 0x6f5c]
lea eax, [ebp - 0x213c]
push 1
push eax
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046e5e0
test al, al
je 0x468ad8
add dword [ebp - 0x6f5c], 0xc
inc esi
cmp esi, dword [edi + 0x30]
jbe 0x468aa0
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x469610
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x51
push dword [eax + 0x34]
call fcn.0041ff10
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x468b82
push esi
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401f90
test al, al
jne 0x468b7c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x294c]
call fcn.00401c90
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00401bf0
push 1
lea eax, [ebp - 0x213c]
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046e5e0
test al, al
je 0x468b82
inc esi
cmp esi, dword [edi + 0x30]
jb 0x468b02
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x469610
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x52
push dword [eax + 0x34]
call fcn.0041ff10
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x468c37
nop dword [eax]
push esi
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401f90
test al, al
jne 0x468c2d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e674c
lea ecx, [ebp - 0x2240]
call fcn.00401c90
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00401bf0
push 1
lea eax, [ebp - 0x213c]
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046e5e0
test al, al
je 0x468c37
inc esi
cmp esi, dword [edi + 0x30]
jb 0x468bb0
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x469610
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x53
push dword [eax + 0x34]
call fcn.0041ff10
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x468ce1
push esi
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401f90
test al, al
jne 0x468cdb
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x24ec]
call fcn.00401c90
push eax
push esi
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00401bf0
push 0
lea eax, [ebp - 0x213c]
push eax
lea ecx, [ebp - 0x1fb0]
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046e5e0
test al, al
je 0x468ce1
inc esi
cmp esi, dword [edi + 0x30]
jb 0x468c61
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x469610
xor esi, esi
cmp dword [edi + 0x30], esi
jbe 0x468d56
mov eax, dword [ebp - 0x6f6c]
mov dword [ebp - 0x6f5c], eax
nop word [eax + eax]
push esi
lea ecx, [edi + 0x10c]
call fcn.00476390
mov ecx, eax
call fcn.00401c90
push eax
push dword [ebp - 0x6f5c]
lea ecx, [edi + 0x104]
push esi
call fcn.00476390
mov ecx, eax
call fcn.00401c90
mov edx, str.374DE290_123F_4565_9164_39C4925E467B
mov ecx, eax
call fcn.00424230
add dword [ebp - 0x6f5c], 0xc
inc esi
cmp esi, dword [edi + 0x30]
jb 0x468d10
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x54
push dword [eax + 0x34]
call fcn.0041ff10
mov eax, dword [edi + 0x30]
mov ecx, dword [ebp - 0x6f6c]
push 0
push 0
lea eax, [eax + eax*2]
push 0x19
lea ecx, [ecx + eax*4]
call fcn.00402150
xor esi, esi
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x468dba
mov ecx, dword [ebp - 0x6f6c]
lea eax, [ebp - 0x213c]
push 0
push eax
call fcn.00401c90
push eax
mov ecx, edi
call fcn.0046e5e0
test al, al
je 0x468dba
add dword [ebp - 0x6f6c], 0xc
inc esi
cmp esi, dword [edi + 0x30]
jbe 0x468d82
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x469610
push 0xc
lea ecx, [ebp - 0x2778]
call fcn.00404370
lea ecx, [ebp - 0x2778]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2644]
mov byte [ebp - 4], 0xe
call fcn.00404370
lea ecx, [ebp - 0x2644]
call fcn.00401930
push 0x4c
lea ecx, [ebp - 0x2b70]
mov byte [ebp - 4], 0xf
call fcn.0040ed70
lea ecx, [ebp - 0x2b70]
call fcn.00408530
lea ecx, [ebp - 0x213c]
mov byte [ebp - 4], 0x10
call fcn.00404160
xor esi, esi
mov dword [ebp - 0x6f4c], eax
test eax, eax
je 0x468fc1
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x468fc1
push 0x4d24d4
push 1
push 1
push esi
lea ecx, [ebp - 0x213c]
call fcn.004766b0
mov ecx, eax
call fcn.00401d30
push eax
lea ecx, [ebp - 0x2778]
call fcn.00401ba0
mov ecx, eax
call fcn.00401a40
test al, al
je 0x468f87
push 0
push esi
lea ecx, [ebp - 0x213c]
call fcn.004766b0
mov ecx, eax
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2b70]
call fcn.00408580
test al, al
je 0x468f87
push esi
lea ecx, [ebp - 0x213c]
call fcn.004766b0
push eax
lea ecx, [ebp - 0x2644]
call fcn.00401a10
push 1
push 0
lea ecx, [ebp - 0x2b70]
call fcn.00408620
push eax
push esi
lea ecx, [ebp - 0x213c]
call fcn.004766b0
mov ecx, eax
call fcn.00401ba0
mov ecx, eax
call fcn.00401f90
test al, al
jne 0x468fb4
lea ecx, [ebp - 0x2b70]
call fcn.00408670
mov ecx, eax
call fcn.004045a0
push 0
push 0
test eax, eax
je 0x468f68
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2b70]
call fcn.00408670
push eax
push 0x4ca04c
push esi
lea ecx, [ebp - 0x213c]
call fcn.004766b0
mov ecx, eax
call fcn.00402f30
push 3
push esi
lea ecx, [ebp - 0x213c]
call fcn.004766b0
lea edx, [edi + 0x17c]
mov ecx, eax
call fcn.00408840
test al, al
je 0x468fb4
jmp 0x468f92
push 0x4c975c
push 0x4ca048
push esi
lea ecx, [ebp - 0x213c]
call fcn.004766b0
mov ecx, eax
call fcn.00403410
jmp 0x468f92
lea ecx, [ebp - 0x2644]
call fcn.00401ae0
push 0
lea ecx, [ebp - 0x2644]
call fcn.00401c90
push eax
push esi
lea ecx, [ebp - 0x213c]
call fcn.004766b0
push eax
mov ecx, edi
call fcn.0046bd60
inc esi
cmp esi, dword [ebp - 0x6f4c]
jb 0x468e38
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x4695ef
mov ecx, edi
call fcn.0046ba40
test al, al
je 0x4695ef
push 0
push 0
lea ecx, [ebp - 0x213c]
call fcn.00476580
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x55
push dword [eax + 0x34]
call fcn.0041ff10
push 0xc
lea ecx, [ebp - 0x6d28]
call fcn.00406340
lea ecx, [ebp - 0x6d28]
call fcn.00406380
push 0xc
lea ecx, [ebp - 0x6d3c]
mov byte [ebp - 4], 0x11
call fcn.00406340
lea ecx, [ebp - 0x6d3c]
call fcn.00406380
push 0
push 0x20019
push 0x4d4d80
lea ecx, [ebp - 0x1fb4]
mov byte [ebp - 4], 0x12
call fcn.004063e0
test al, al
je 0x4693de
lea eax, [ebp - 0x6d28]
mov dword [ebp - 0x6f8c], 0
push eax
push 0
lea ecx, [ebp - 0x1fb4]
call fcn.004067b0
test al, al
je 0x4693de
nop dword [eax + eax]
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x4693de
push dword [ebp - 0x6d28]
lea ecx, [ebp - 0x21b4]
call fcn.00401a00
push 0x4e6780
lea ecx, [ebp - 0x21b4]
call fcn.00401a70
test al, al
je 0x4690d4
push 0xa
push 1
push 1
push 0
push 0x4e67a4
lea ecx, [ebp - 0x21b4]
call fcn.00402c80
test eax, eax
je 0x4693b6
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e67bc
push dword [ebp - 0x6d28]
lea ecx, [ebp - 0x1f98]
push 0x4e67d0
call fcn.00401bf0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x205c]
call fcn.004063e0
test al, al
je 0x4693b6
mov ecx, edi
xor esi, esi
call fcn.0046f9d0
test al, al
jne 0x4693b6
lea eax, [ebp - 0x6d3c]
push eax
push esi
lea ecx, [ebp - 0x205c]
call fcn.004067b0
test al, al
je 0x4693b6
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x6d3c]
lea ecx, [ebp - 0x1f98]
push 0x4e67ec
push dword [ebp - 0x6d28]
push 0x4e67d0
call fcn.00401bf0
push 0
push 0x20019
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2004]
call fcn.004063e0
test al, al
je 0x4693a6
lea eax, [ebp - 0x2868]
push eax
push 0x4cde78
lea ecx, [ebp - 0x2004]
call fcn.004066c0
test al, al
je 0x4693a6
cmp dword [ebp - 0x2868], 0xb
jne 0x469225
lea eax, [ebp - 0x1fb0]
push eax
push 0x4cdea8
lea ecx, [ebp - 0x2004]
call fcn.00406580
test al, al
je 0x4693a6
push 0
lea ecx, [ebp - 0x1fb0]
call fcn.00401c90
push eax
push 0x1000
lea ecx, [ebp - 0x1fb0]
call fcn.00402200
lea edx, [edi + 0x17c]
mov ecx, eax
call fcn.00409aa0
jmp 0x4692df
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4d4c40
lea ecx, [ebp - 0x1f98]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x22c4]
call fcn.00401bf0
lea eax, [ebp - 0x1fb0]
push eax
push 0x4d4ca8
lea ecx, [ebp - 0x22c4]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x1f74]
call fcn.00406750
test al, al
je 0x46928b
lea ecx, [ebp - 0x1fb0]
call fcn.00401f90
test al, al
je 0x4692cc
lea eax, [ebp - 0x1fb0]
push eax
push 0x4d4ca8
lea ecx, [ebp - 0x2004]
call fcn.00406580
test al, al
je 0x4692b5
lea ecx, [ebp - 0x1fb0]
call fcn.00401f90
test al, al
je 0x4692cc
lea eax, [ebp - 0x1fb0]
push eax
push 0x4cdea8
lea ecx, [ebp - 0x2004]
call fcn.00406580
push 3
lea edx, [edi + 0x17c]
lea ecx, [ebp - 0x1fb0]
call fcn.00408840
test al, al
je 0x4693a6
lea ecx, [ebp - 0x1fb0]
call fcn.00401c90
push eax
push 0
call dword [0x4a981c]
test eax, eax
je 0x46931b
push 1
push 0
lea ecx, [ebp - 0x700c]
call fcn.00401980
mov byte [ebp - 4], 0x13
or dword [ebp - 0x6fa8], 1
jmp 0x46933b
lea eax, [ebp - 0x1f98]
push eax
lea ecx, [ebp - 0x7018]
call fcn.00401950
mov dword [ebp - 4], 0x114
or dword [ebp - 0x6fa8], 2
push eax
lea ecx, [ebp - 0x2148]
call fcn.00401a10
mov eax, dword [ebp - 0x6fa8]
test al, 2
je 0x46936b
and eax, 0xfffffffd
lea ecx, [ebp - 0x7018]
mov dword [ebp - 0x6fa8], eax
call fcn.00401ad0
mov eax, dword [ebp - 0x6fa8]
mov dword [ebp - 4], 0x112
test al, 1
je 0x46938a
and eax, 0xfffffffe
lea ecx, [ebp - 0x700c]
mov dword [ebp - 0x6fa8], eax
call fcn.00401ad0
push 0
lea ecx, [ebp - 0x2148]
call fcn.00401c90
push eax
lea eax, [ebp - 0x1fb0]
mov ecx, edi
push eax
call fcn.0046bd60
mov ecx, edi
inc esi
call fcn.0046f9d0
test al, al
je 0x469138
mov eax, dword [ebp - 0x6f8c]
lea ecx, [ebp - 0x6d28]
inc eax
push ecx
push eax
lea ecx, [ebp - 0x1fb4]
mov dword [ebp - 0x6f8c], eax
call fcn.004067b0
test al, al
jne 0x469080
mov ecx, edi
call fcn.0046ba40
test al, al
je 0x4695d9
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x58
push dword [eax + 0x34]
call fcn.0041ff10
push 4
lea ecx, [ebp - 0x6cdc]
call fcn.00404590
lea ecx, [ebp - 0x6cdc]
call fcn.004011f0
lea eax, [ebp - 0x2560]
mov byte [ebp - 4], 0x15
push eax
push 0x1f40
lea eax, [ebp - 0x1f70]
mov dword [ebp - 0x6ca8], 0x428
push eax
mov dword [ebp - 0x2560], 0
call dword [0x4a943c]
test eax, eax
je 0x469530
test dword [ebp - 0x2560], 0xfffffffc
mov dword [ebp - 0x6f5c], 0
jbe 0x469530
mov esi, dword [0x4a9254]
nop
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x469530
mov eax, dword [ebp - 0x6f5c]
push dword [ebp + eax*4 - 0x1f70]
push 0x18
call dword [0x4a92c4]
push eax
lea ecx, [ebp - 0x6cdc]
call fcn.00401220
lea ecx, [ebp - 0x6cdc]
call fcn.00401250
test al, al
jne 0x469512
lea eax, [ebp - 0x6ca8]
push eax
push dword [ebp - 0x6cdc]
call dword [0x4a9258]
test eax, eax
je 0x469507
nop word [eax + eax]
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x469507
lea eax, [ebp - 0x6a88]
mov ecx, edi
push eax
lea eax, [ebp - 0x213c]
push eax
call fcn.0046e8b0
test al, al
je 0x469507
lea eax, [ebp - 0x6ca8]
push eax
push dword [ebp - 0x6cdc]
call esi
test eax, eax
jne 0x4694d0
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x469530
mov ecx, dword [ebp - 0x6f5c]
mov eax, dword [ebp - 0x2560]
inc ecx
shr eax, 2
mov dword [ebp - 0x6f5c], ecx
cmp ecx, eax
jb 0x469470
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x4695ce
lea ecx, [ebp - 0x213c]
call fcn.00404160
mov ecx, dword [edi + 8]
push 0x5a
mov dword [ebp - 0x6f70], eax
push dword [ecx + 0x34]
mov ecx, dword [edi + 4]
call fcn.0041ff10
xor esi, esi
cmp dword [ebp - 0x6f70], esi
jbe 0x4695c7
mov dword [ebp - 0x6f5c], esi
mov ecx, edi
call fcn.0046f9d0
test al, al
jne 0x4695c7
mov eax, dword [ebp - 0x6f5c]
xor edx, edx
div dword [ebp - 0x6f70]
mov ecx, dword [edi + 4]
add eax, 0x5a
push eax
mov eax, dword [edi + 8]
push dword [eax + 0x34]
call fcn.0041ff10
push 0
push 0
push esi
lea ecx, [ebp - 0x213c]
call fcn.004766b0
push eax
mov ecx, edi
call fcn.0046bd60
add dword [ebp - 0x6f5c], 0xa
inc esi
cmp esi, dword [ebp - 0x6f70]
jb 0x469574
mov ecx, edi
call fcn.0046ba40
lea ecx, [ebp - 0x6cdc]
call fcn.00401200
lea ecx, [ebp - 0x6d3c]
call fcn.00401ad0
lea ecx, [ebp - 0x6d28]
call fcn.00401ad0
lea ecx, [ebp - 0x2b70]
call fcn.00408710
lea ecx, [ebp - 0x2644]
call fcn.00401ad0
lea ecx, [ebp - 0x2778]
call fcn.00401ad0
lea ecx, [ebp - 0x213c]
call fcn.004766d0
lea ecx, [ebp - 0x2404]
call fcn.00401ad0
lea ecx, [ebp - 0x2004]
call fcn.00406410
lea ecx, [ebp - 0x205c]
call fcn.00406410
lea ecx, [ebp - 0x1fb4]
call fcn.00406410
lea ecx, [ebp - 0x20fc]
call fcn.00401ad0
lea ecx, [ebp - 0x2498]
mov dword [ebp - 4], 0xfd
call fcn.004040e0
lea ecx, [ebp - 0x6cb8]
call fcn.00475a30
lea ecx, [ebp - 0x2314]
call fcn.00401ad0
lea ecx, [ebp - 0x21b4]
call fcn.00401ad0
lea ecx, [ebp - 0x22c4]
call fcn.00401ad0
lea ecx, [ebp - 0x1fb0]
mov byte [ebp - 4], 0x45
call fcn.00401ad0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push 0
push 0x1004
push dword [eax + 0xb8]
call fcn.0041c1a0
push 0xc
lea ecx, [ebp - 0x27e0]
mov dword [ebp - 0x6f70], eax
call fcn.00404370
lea ecx, [ebp - 0x27e0]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x27d4]
mov dword [ebp - 4], 0x116
call fcn.00404370
lea ecx, [ebp - 0x27d4]
call fcn.00401930
push 0xc
lea ecx, [ebp - 0x2928]
mov byte [ebp - 4], 0x17
call fcn.00404370
lea ecx, [ebp - 0x2928]
call fcn.00401930
push 0
push 0x4e6808
lea ecx, [ebp - 0x1fd4]
mov byte [ebp - 4], 0x18
call fcn.0040d1b0
xor esi, esi
cmp dword [ebp - 0x6f70], esi
jbe 0x46984a
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push esi
push dword [eax + 0xb8]
call fcn.0041f270
cmp eax, 0x51
jne 0x46983d
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push esi
push dword [eax + 0xb8]
call fcn.0041f360
push eax
lea ecx, [ebp - 0x2178]
call fcn.00401c50
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push esi
push dword [eax + 0xb8]
call fcn.0041f360
push eax
lea ecx, [ebp - 0x27e0]
call fcn.00401c50
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 2
push esi
push dword [eax + 0xb8]
call fcn.0041f360
push eax
lea ecx, [ebp - 0x27d4]
call fcn.00401c50
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 3
push esi
push dword [eax + 0xb8]
call fcn.0041f360
push eax
lea ecx, [ebp - 0x2928]
call fcn.00401c50
push 0
push 0
push 0
push 0x4e2af4
lea ecx, [ebp - 0x2928]
call fcn.00401c90
push eax
push 0x4e6874
lea ecx, [ebp - 0x27d4]
call fcn.00401c90
push eax
push 0x4e6898
lea ecx, [ebp - 0x27e0]
call fcn.00401c90
push eax
push 0x4e68c0
lea ecx, [ebp - 0x2178]
call fcn.00401c90
push eax
push 0x4e17a0
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
inc esi
cmp esi, dword [ebp - 0x6f70]
jb 0x469736
push 0
push 0x4e68e8
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
push 0x18
lea ecx, [ebp - 0x2998]
call fcn.00404e90
lea ecx, [ebp - 0x2998]
call fcn.00403ff0
xor esi, esi
mov byte [ebp - 4], 0x19
cmp dword [ebp - 0x6f70], esi
jbe 0x469a34
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push esi
push dword [eax + 0xb8]
call fcn.0041f270
cmp eax, 0x52
jne 0x469a27
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push esi
push dword [eax + 0xb8]
call fcn.0041f360
push eax
lea ecx, [ebp - 0x2178]
call fcn.00401c50
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 1
push esi
push dword [eax + 0xb8]
call fcn.0041f360
push eax
lea ecx, [ebp - 0x27e0]
call fcn.00401c50
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 2
push esi
push dword [eax + 0xb8]
call fcn.0041f360
push eax
lea ecx, [ebp - 0x27d4]
call fcn.00401c50
push 1
push 0x4cd568
lea ecx, [ebp - 0x2178]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2998]
call fcn.004041c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x2998]
call fcn.00404150
push eax
push 0x4e6924
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea ecx, [ebp - 0x2998]
call fcn.00404160
cmp eax, 1
jbe 0x469993
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 1
lea ecx, [ebp - 0x2998]
call fcn.00404150
push eax
push 0x4e6938
lea ecx, [ebp - 0x1f80]
call fcn.00402f30
lea ecx, [ebp - 0x2998]
call fcn.00404160
cmp eax, 2
jbe 0x4699d5
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 2
lea ecx, [ebp - 0x2998]
call fcn.00404150
push eax
push 0x4e6950
lea ecx, [ebp - 0x1f80]
call fcn.00402f30
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e2af4
lea ecx, [ebp - 0x27d4]
call fcn.00401c90
push eax
push 0x4e6898
lea ecx, [ebp - 0x27e0]
call fcn.00401c90
push eax
push 0x4e68c0
lea ecx, [ebp - 0x1f80]
call fcn.00402f30
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
inc esi
cmp esi, dword [ebp - 0x6f70]
jb 0x469886
push 0
push 0x4e6968
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e03a8
call fcn.0041ec90
push 0
push 0x4e69b8
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e03d8
call fcn.0041ec90
push 0
push 0x4e6a40
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
movsd xmm0, qword [edi + 0x368]
comisd xmm0, xmmword [0x4eaa30]
jbe 0x469adc
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e03f8
call fcn.0041ec90
push 0
push 0x4e6ab8
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e042c
call fcn.0041ec90
push 0
push 0x4e6b48
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e045c
call fcn.0041ec90
push 0
push 0x4e6bd0
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e0488
call fcn.0041ec90
push 0
push 0x4e6c58
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e04c0
call fcn.0041ec90
push 0
push 0x4e6ce8
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e0508
call fcn.0041ec90
push 0
push 0x4e6d88
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov eax, dword [edi + 8]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
mov ecx, dword [edi + 4]
push 0x4e0550
call fcn.0041ec90
push 0
push 0x4e6e28
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e0598
call fcn.0041ec90
push 0
push 0x4e6ec8
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e05d0
call fcn.0041ec90
push 0
push 0x4e6f58
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e0618
call fcn.0041ec90
push 0
push 0x4e6ff8
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e0678
call fcn.0041ec90
push 0
push 0x4e7080
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e06bc
call fcn.0041ec90
push 0
push 0x4e7120
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov eax, dword [edi + 8]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
mov ecx, dword [edi + 4]
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e06f8
call fcn.0041ec90
push 0
push 0x4e71b8
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e7250
call fcn.0041ec90
push 0
push 0x4e72a0
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0
push dword [eax + 0xb8]
push 0xffffffffffffffff
push 0x53
push 0xffffffffffffffff
push 0
push 0x4e0738
call fcn.0041ec90
push 0
push 0x4e7348
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
movsd xmm0, qword [edi + 0x368]
lea ecx, [ebp - 0x1fd4]
xor eax, eax
comisd xmm0, xmmword [0x4eaa30]
seta al
add eax, 8
add dword [edi + 0x24], eax
call fcn.0040c610
test eax, eax
je 0x469f57
lea ecx, [ebp - 0x2980]
call fcn.00411ff0
lea ecx, [ebp - 0x2980]
call fcn.00411fe0
mov edi, eax
lea ecx, [ebp - 0x2980]
sub edi, dword [ebp - 0x6ffc]
mov esi, edx
lea edx, [ebp - 0x1f80]
sbb esi, dword [ebp - 0x6ff8]
call fcn.00411fa0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4dbcd8
lea ecx, [ebp - 0x1f80]
call fcn.00401c90
push eax
push 0x4e73d8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
push esi
push edi
xor edx, edx
lea ecx, [ebp - 0x1f80]
call fcn.00412390
mov ecx, dword [ebp - 0x6f44]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4db7a8
call fcn.0046f9d0
test al, al
mov edx, 0x4e7478
mov ecx, 0x4e7430
cmove ecx, edx
push ecx
push 0x4e74b8
lea ecx, [ebp - 0x1f80]
call fcn.00401c90
push eax
push 0x4e74c8
lea ecx, [ebp - 0x1f80]
call fcn.00401bf0
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
push 0
push 0x4e74f0
lea ecx, [ebp - 0x1fd4]
call fcn.0040d1b0
lea ecx, [ebp - 0x1fd4]
call fcn.0040c5a0
mov edi, eax
lea ecx, [ebp - 0x1f80]
add edi, 0x26
mov esi, edx
adc esi, 0
push esi
push edi
call fcn.004025c0
lea ecx, [ebp - 0x1f80]
call fcn.00401b50
add eax, eax
add edi, eax
adc esi, 0
push esi
push edi
lea ecx, [ebp - 0x1f80]
call fcn.004025c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e752c
lea ecx, [ebp - 0x1f80]
call fcn.00402f30
lea eax, [ebp - 0x1f80]
push eax
lea ecx, [ebp - 0x1fd4]
call fcn.0040d180
mov edi, dword [ebp - 0x6f44]
jmp 0x469f62
lea ecx, [edi + 0x11c]
call fcn.00401ae0
lea ecx, [ebp - 0x1f74]
call fcn.004074c0
lea ecx, [ebp - 0x2568]
call fcn.004074c0
push 5
lea ecx, [edi + 0x314]
call fcn.00402bd0
lea ecx, [edi + 0x314]
call fcn.00401c90
push eax
push 0x80000002
call dword [0x4a90e4]
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 0x64
push dword [eax + 0x34]
call fcn.0041ff10
push 0
mov ecx, edi
call fcn.0046f9d0
test al, al
mov edx, 0x4e7570
mov eax, dword [edi + 8]
mov ecx, 0x4e7554
cmove ecx, edx
push ecx
mov ecx, dword [edi + 4]
push dword [eax + 0x38]
call fcn.0041d990
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e7590
lea ecx, [edi + 0x134]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2178]
call fcn.00401bf0
lea ecx, [ebp - 0x2178]
call fcn.00401c90
mov edx, 2
mov ecx, eax
call fcn.0040bdc0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e75a0
lea ecx, [edi + 0x134]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2178]
call fcn.00401bf0
lea ecx, [ebp - 0x2178]
call fcn.00401c90
mov edx, 2
mov ecx, eax
call fcn.0040bdc0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4e75b0
lea ecx, [edi + 0x134]
call fcn.00401c90
push eax
lea ecx, [ebp - 0x2178]
call fcn.00401bf0
lea ecx, [ebp - 0x2178]
call fcn.00401c90
mov edx, 2
mov ecx, eax
call fcn.0040bdc0
lea ecx, [edi + 0x220]
call fcn.0042c350
lea ecx, [ebp - 0x2998]
xor esi, esi
call fcn.004040e0
lea ecx, [ebp - 0x2928]
call fcn.00401ad0
lea ecx, [ebp - 0x27d4]
call fcn.00401ad0
lea ecx, [ebp - 0x27e0]
call fcn.00401ad0
lea ecx, [ebp - 0x2148]
call fcn.00401ad0
lea ecx, [ebp - 0x6dac]
call fcn.004763b0
lea ecx, [ebp - 0x2564]
call fcn.0042af00
lea ecx, [ebp - 0x2904]
call fcn.00401ad0
lea ecx, [ebp - 0x6dc0]
call fcn.004763b0
lea ecx, [ebp - 0x6d10]
call fcn.00401520
lea ecx, [ebp - 0x1fd4]
call fcn.0040ed40
lea ecx, [ebp - 0x25b4]
call fcn.00401ad0
lea ecx, [ebp - 0x1f80]
call fcn.00401ad0
lea ecx, [ebp - 0x2940]
call fcn.00401ad0
lea ecx, [ebp - 0x1f8c]
call fcn.00401ad0
lea ecx, [ebp - 0x2a2c]
call fcn.00401ad0
lea ecx, [ebp - 0x29e0]
call fcn.00401ad0
lea ecx, [ebp - 0x6cb4]
call fcn.00401ad0
lea ecx, [ebp - 0x2568]
call fcn.00406410
lea ecx, [ebp - 0x1f74]
call fcn.00406410
lea ecx, [ebp - 0x25c0]
call fcn.00401ad0
lea ecx, [ebp - 0x2934]
call fcn.00401ad0
lea ecx, [ebp - 0x2650]
call fcn.00401ad0
lea ecx, [ebp - 0x265c]
call fcn.00401ad0
lea ecx, [ebp - 0x2910]
call fcn.00401ad0
lea ecx, [ebp - 0x2958]
call fcn.00401ad0
lea ecx, [ebp - 0x27c8]
call fcn.00401ad0
lea ecx, [ebp - 0x26bc]
call fcn.00401ad0
lea ecx, [ebp - 0x26b0]
call fcn.00401ad0
lea ecx, [ebp - 0x2748]
call fcn.00401ad0
lea ecx, [ebp - 0x283c]
call fcn.00401ad0
lea ecx, [ebp - 0x27ec]
call fcn.00401ad0
lea ecx, [ebp - 0x2578]
call fcn.00401ad0
lea ecx, [ebp - 0x291c]
call fcn.00401ad0
lea ecx, [ebp - 0x2874]
call fcn.00401ad0
lea ecx, [ebp - 0x273c]
call fcn.00401ad0
lea ecx, [ebp - 0x24ec]
call fcn.00401ad0
lea ecx, [ebp - 0x294c]
call fcn.00401ad0
lea ecx, [ebp - 0x25a8]
call fcn.00401ad0
lea ecx, [ebp - 0x29b0]
call fcn.00401ad0
lea ecx, [ebp - 0x2154]
call fcn.00401ad0
lea ecx, [ebp - 0x2240]
call fcn.00401ad0
lea ecx, [ebp - 0x2880]
call fcn.00401ad0
lea ecx, [ebp - 0x2120]
call fcn.00401ad0
lea ecx, [ebp - 0x2178]
call fcn.00401ad0
lea ecx, [ebp - 0x1f98]
call fcn.00401ad0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00476957
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret