Function at 0x521600
Capabilities:
Access peb ldr_data
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5597aa
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x660038]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, 0x5f7740
mov dword [esp + 0x18], 0x70
call fcn.00494ae0
mov dword [esp + 0x34], 0
push 0x7c
lea eax, [esp + 0x20]
push eax
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 1
mov ebx, dword [ebp + 8]
lea ecx, [esp + 0x10]
add ebx, 4
push ecx
mov ecx, ebx
call fcn.0052d880
mov edx, dword [esi]
mov ecx, eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
mov dword [ecx + 4], edx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
or edi, 0xffffffff
mov dword [esp + 0x30], edi
lea eax, [esp + 0x18]
push eax
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
mov eax, 0x5f7740
mov dword [esp + 0x18], 0x71
call fcn.00494ae0
mov dword [esp + 0x34], 2
push 0x7d
lea ecx, [esp + 0x20]
push ecx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 3
lea edx, [esp + 0x10]
push edx
mov ecx, ebx
call fcn.0052d880
mov ecx, eax
mov eax, dword [esi]
mov dword [ecx + 4], eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea ecx, [esp + 0x18]
push ecx
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
mov dword [esp + 0x14], 0x72
push 0
or edi, 0xffffffff
mov eax, 0x5f7740
call fcn.00494ae0
mov dword [esp + 0x34], 4
push 0x7e
lea edx, [esp + 0x20]
push edx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 5
lea eax, [esp + 0x10]
push eax
mov ecx, ebx
call fcn.0052d880
mov edx, dword [esi]
mov ecx, eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
mov dword [ecx + 4], edx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea eax, [esp + 0x18]
push eax
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, 0x5f7740
mov dword [esp + 0x18], 0x73
call fcn.00494ae0
mov dword [esp + 0x34], 6
push 0x7f
lea ecx, [esp + 0x20]
push ecx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 7
lea edx, [esp + 0x10]
push edx
mov ecx, ebx
call fcn.0052d880
mov ecx, eax
mov eax, dword [esi]
mov dword [ecx + 4], eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea ecx, [esp + 0x18]
push ecx
call fcn.00434370
mov eax, dword [str.000]
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov dword [esp + 0x18], 0x4000020
call fcn.00494ae0
mov dword [esp + 0x34], 8
push 1
lea edx, [esp + 0x20]
push edx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 9
lea eax, [esp + 0x10]
push eax
mov ecx, ebx
call fcn.0052d880
mov edx, dword [esi]
mov ecx, eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
mov dword [ecx + 4], edx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea eax, [esp + 0x18]
push eax
call fcn.00434370
mov eax, dword [str.000]
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov dword [esp + 0x18], 0x4000032
call fcn.00494ae0
mov dword [esp + 0x34], 0xa
push 1
lea ecx, [esp + 0x20]
push ecx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0xb
lea edx, [esp + 0x10]
push edx
mov ecx, ebx
call fcn.0052d880
mov ecx, eax
mov eax, dword [esi]
mov dword [ecx + 4], eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea ecx, [esp + 0x18]
push ecx
call fcn.00434370
mov eax, dword [str.000]
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov dword [esp + 0x18], 0xc000032
call fcn.00494ae0
mov dword [esp + 0x34], 0xc
push 1
lea edx, [esp + 0x20]
push edx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0xd
lea eax, [esp + 0x10]
push eax
mov ecx, ebx
call fcn.0052d880
mov edx, dword [esi]
mov ecx, eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
mov dword [ecx + 4], edx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea eax, [esp + 0x18]
push eax
call fcn.00434370
mov eax, dword [str.000]
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov dword [esp + 0x18], 0x8c000040
call fcn.00494ae0
mov dword [esp + 0x34], 0xe
push 1
lea ecx, [esp + 0x20]
push ecx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0xf
lea edx, [esp + 0x10]
push edx
mov ecx, ebx
call fcn.0052d880
mov ecx, eax
mov eax, dword [esi]
mov dword [ecx + 4], eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea ecx, [esp + 0x18]
push ecx
call fcn.00434370
mov eax, dword [str.010]
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov dword [esp + 0x18], 8
call fcn.00494ae0
mov dword [esp + 0x34], 0x10
push 1
lea edx, [esp + 0x20]
push edx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x11
lea eax, [esp + 0x10]
push eax
mov ecx, ebx
call fcn.0052d880
mov edx, dword [esi]
mov ecx, eax
mov dword [esp + 0x10], ecx
mov dword [ecx + 4], edx
lea eax, [esi + 4]
lea edi, [ecx + 8]
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea eax, [esp + 0x18]
push eax
call fcn.00434370
mov eax, dword [str.010]
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov dword [esp + 0x18], 0x8000008
call fcn.00494ae0
mov dword [esp + 0x34], 0x12
push 1
lea ecx, [esp + 0x20]
push ecx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x13
lea edx, [esp + 0x10]
push edx
mov ecx, ebx
call fcn.0052d880
mov ecx, eax
mov eax, dword [esi]
mov dword [ecx + 4], eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea ecx, [esp + 0x18]
push ecx
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, str.177
mov dword [esp + 0x18], 0x4000008
call fcn.00494ae0
mov dword [esp + 0x34], 0x14
push 1
lea edx, [esp + 0x20]
push edx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x15
lea eax, [esp + 0x10]
push eax
mov ecx, ebx
call fcn.0052d880
mov edx, dword [esi]
mov ecx, eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
mov dword [ecx + 4], edx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea eax, [esp + 0x18]
push eax
call fcn.00434370
mov esi, dword [ebp + 8]
push 0x48
push esi
call fcn.0052d1f0
push 0x49
push esi
call fcn.0052d1f0
push 0x4a
push esi
call fcn.0052d1f0
push 0x39
push esi
call fcn.0052d1f0
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, str.034
mov dword [esp + 0x18], 0x40000dc
call fcn.00494ae0
mov dword [esp + 0x34], 0x16
push 1
lea ecx, [esp + 0x20]
push ecx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x17
lea edx, [esp + 0x10]
push edx
mov ecx, ebx
call fcn.0052d880
mov ecx, eax
mov eax, dword [esi]
mov dword [ecx + 4], eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea ecx, [esp + 0x18]
push ecx
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, str.034
mov dword [esp + 0x18], 0x8400005c
call fcn.00494ae0
mov dword [esp + 0x34], 0x18
push 1
lea edx, [esp + 0x20]
push edx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x19
lea eax, [esp + 0x10]
push eax
mov ecx, ebx
call fcn.0052d880
mov edx, dword [esi]
mov ecx, eax
mov dword [esp + 0x10], ecx
mov dword [ecx + 4], edx
lea eax, [esi + 4]
lea edi, [ecx + 8]
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea eax, [esp + 0x18]
push eax
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, str.036
mov dword [esp + 0x18], 0x4000036
call fcn.00494ae0
mov dword [esp + 0x34], 0x1a
push 1
lea ecx, [esp + 0x20]
push ecx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x1b
lea edx, [esp + 0x10]
push edx
mov ecx, ebx
call fcn.0052d880
mov ecx, eax
mov eax, dword [esi]
mov dword [ecx + 4], eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea ecx, [esp + 0x18]
push ecx
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, str.036
mov dword [esp + 0x18], 0xc000036
call fcn.00494ae0
mov dword [esp + 0x34], 0x1c
push 1
lea edx, [esp + 0x20]
push edx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x1d
lea eax, [esp + 0x10]
push eax
mov ecx, ebx
call fcn.0052d880
mov edx, dword [esi]
mov ecx, eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
mov dword [ecx + 4], edx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea eax, [esp + 0x18]
push eax
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, str.036
mov dword [esp + 0x18], 0x8c00005e
call fcn.00494ae0
mov dword [esp + 0x34], 0x1e
push 1
lea ecx, [esp + 0x20]
push ecx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x1f
lea edx, [esp + 0x10]
push edx
mov ecx, ebx
call fcn.0052d880
mov ecx, eax
mov eax, dword [esi]
mov dword [ecx + 4], eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea ecx, [esp + 0x18]
push ecx
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, 0x62196c
mov dword [esp + 0x18], 0x40000bf
call fcn.00494ae0
mov dword [esp + 0x34], 0x20
push 1
lea edx, [esp + 0x20]
push edx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x21
lea eax, [esp + 0x10]
push eax
mov ecx, ebx
call fcn.0052d880
mov edx, dword [esi]
mov ecx, eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
mov dword [ecx + 4], edx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea eax, [esp + 0x18]
push eax
call fcn.00434370
push ecx
mov dword [esp + 0x14], 0x8400002f
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, 0x62196c
call fcn.00494ae0
mov dword [esp + 0x34], 0x22
push 1
lea ecx, [esp + 0x20]
push ecx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x23
lea edx, [esp + 0x10]
push edx
mov ecx, ebx
call fcn.0052d880
mov ecx, eax
mov eax, dword [esi]
mov dword [ecx + 4], eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea ecx, [esp + 0x18]
push ecx
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, 0x62196c
mov dword [esp + 0x18], 0xc0000bf
call fcn.00494ae0
mov dword [esp + 0x34], 0x24
push 1
lea edx, [esp + 0x20]
push edx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x25
lea eax, [esp + 0x10]
push eax
mov ecx, ebx
call fcn.0052d880
mov edx, dword [esi]
mov ecx, eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
mov dword [ecx + 4], edx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea eax, [esp + 0x18]
push eax
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, 0x62196c
mov dword [esp + 0x18], 0x8c00003f
call fcn.00494ae0
mov dword [esp + 0x34], 0x26
push 1
lea ecx, [esp + 0x20]
push ecx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x27
lea edx, [esp + 0x10]
push edx
mov ecx, ebx
call fcn.0052d880
mov ecx, eax
mov eax, dword [esi]
mov dword [ecx + 4], eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea ecx, [esp + 0x18]
push ecx
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, 0x62196c
mov dword [esp + 0x18], 0xc0000bd
call fcn.00494ae0
mov dword [esp + 0x34], 0x28
push 1
lea edx, [esp + 0x20]
push edx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x29
lea eax, [esp + 0x10]
push eax
mov ecx, ebx
call fcn.0052d880
mov edx, dword [esi]
mov ecx, eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
mov dword [ecx + 4], edx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea eax, [esp + 0x18]
push eax
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, 0x62196c
mov dword [esp + 0x18], 0x8c00005f
call fcn.00494ae0
mov dword [esp + 0x34], 0x2a
push 1
lea ecx, [esp + 0x20]
push ecx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x2b
lea edx, [esp + 0x10]
push edx
mov ecx, ebx
call fcn.0052d880
mov ecx, eax
mov eax, dword [esi]
mov dword [ecx + 4], eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea ecx, [esp + 0x18]
push ecx
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, 0x5f7740
mov dword [esp + 0x18], 0x21
call fcn.00494ae0
mov dword [esp + 0x34], 0x2c
push 7
lea edx, [esp + 0x20]
push edx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x2d
lea eax, [esp + 0x10]
push eax
mov ecx, ebx
call fcn.0052d880
mov edx, dword [esi]
mov ecx, eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
mov dword [ecx + 4], edx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea eax, [esp + 0x18]
push eax
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, 0x5f7740
mov dword [esp + 0x18], 0x22
call fcn.00494ae0
mov dword [esp + 0x34], 0x2e
push 8
lea ecx, [esp + 0x20]
push ecx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x2f
lea edx, [esp + 0x10]
push edx
mov ecx, ebx
call fcn.0052d880
mov ecx, eax
mov eax, dword [esi]
mov dword [esp + 0x10], ecx
mov dword [ecx + 4], eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea ecx, [esp + 0x18]
push ecx
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, 0x5f7740
mov dword [esp + 0x18], 0x4000021
call fcn.00494ae0
mov dword [esp + 0x34], 0x30
push 5
lea edx, [esp + 0x20]
push edx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x31
lea eax, [esp + 0x10]
push eax
mov ecx, ebx
call fcn.0052d880
mov edx, dword [esi]
mov ecx, eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
mov dword [ecx + 4], edx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea eax, [esp + 0x18]
push eax
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, 0x5f7740
mov dword [esp + 0x18], 0x4000022
call fcn.00494ae0
mov dword [esp + 0x34], 0x32
push 6
lea ecx, [esp + 0x20]
push ecx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x33
lea edx, [esp + 0x10]
push edx
mov ecx, ebx
call fcn.0052d880
mov ecx, eax
mov eax, dword [esi]
mov dword [ecx + 4], eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea ecx, [esp + 0x18]
push ecx
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, 0x5f7740
mov dword [esp + 0x18], 0x23
call fcn.00494ae0
mov dword [esp + 0x34], 0x34
push 0xc
lea edx, [esp + 0x20]
push edx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x35
lea eax, [esp + 0x10]
push eax
mov ecx, ebx
call fcn.0052d880
mov edx, dword [esi]
mov ecx, eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
mov dword [ecx + 4], edx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea eax, [esp + 0x18]
push eax
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, 0x5f7740
mov dword [esp + 0x18], 0x2000021
call fcn.00494ae0
mov dword [esp + 0x34], 0x36
push 7
lea ecx, [esp + 0x20]
push ecx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x37
lea edx, [esp + 0x10]
push edx
mov ecx, ebx
call fcn.0052d880
mov ecx, eax
mov eax, dword [esi]
mov dword [ecx + 4], eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea ecx, [esp + 0x18]
push ecx
call fcn.00434370
mov dword [esp + 0x10], 0x2000022
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, 0x5f7740
call fcn.00494ae0
mov dword [esp + 0x34], 0x38
push 8
lea edx, [esp + 0x20]
push edx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x39
lea eax, [esp + 0x10]
push eax
mov ecx, ebx
call fcn.0052d880
mov edx, dword [esi]
mov ecx, eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
mov dword [ecx + 4], edx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea eax, [esp + 0x18]
push eax
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, 0x5f7740
mov dword [esp + 0x18], 0x6000021
call fcn.00494ae0
mov dword [esp + 0x34], 0x3a
push 5
lea ecx, [esp + 0x20]
push ecx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x3b
lea edx, [esp + 0x10]
push edx
mov ecx, ebx
call fcn.0052d880
mov ecx, eax
mov eax, dword [esi]
mov dword [ecx + 4], eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea ecx, [esp + 0x18]
push ecx
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, 0x5f7740
mov dword [esp + 0x18], 0x6000022
call fcn.00494ae0
mov dword [esp + 0x34], 0x3c
push 6
lea edx, [esp + 0x20]
push edx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x3d
lea eax, [esp + 0x10]
push eax
mov ecx, ebx
call fcn.0052d880
mov edx, dword [esi]
mov ecx, eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
mov dword [ecx + 4], edx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea eax, [esp + 0x18]
push eax
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, 0x5f7740
mov dword [esp + 0x18], 0x2000023
call fcn.00494ae0
mov dword [esp + 0x34], 0x3e
push 0xc
lea ecx, [esp + 0x20]
push ecx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x3f
lea edx, [esp + 0x10]
push edx
mov ecx, ebx
call fcn.0052d880
mov ecx, eax
mov eax, dword [esi]
mov dword [ecx + 4], eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea ecx, [esp + 0x18]
push ecx
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, str.177
mov dword [esp + 0x18], 0x2e
call fcn.00494ae0
mov dword [esp + 0x34], 0x40
push 1
lea edx, [esp + 0x20]
push edx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x41
lea eax, [esp + 0x10]
push eax
mov ecx, ebx
call fcn.0052d880
mov edx, dword [esi]
mov ecx, eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
mov dword [ecx + 4], edx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea eax, [esp + 0x18]
push eax
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, str.177
mov dword [esp + 0x18], 0x800002e
call fcn.00494ae0
mov dword [esp + 0x34], 0x42
push 1
lea ecx, [esp + 0x20]
push ecx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x43
lea edx, [esp + 0x10]
push edx
mov ecx, ebx
call fcn.0052d880
mov ecx, eax
mov eax, dword [esi]
mov dword [ecx + 4], eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea ecx, [esp + 0x18]
push ecx
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, str.177
mov dword [esp + 0x18], 0x200002e
call fcn.00494ae0
mov dword [esp + 0x34], 0x44
push 1
lea edx, [esp + 0x20]
push edx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x45
lea eax, [esp + 0x10]
push eax
mov ecx, ebx
call fcn.0052d880
mov ecx, eax
mov edx, dword [esi]
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
mov dword [ecx + 4], edx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea eax, [esp + 0x18]
push eax
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, str.177
mov dword [esp + 0x18], 0xa00002e
call fcn.00494ae0
mov dword [esp + 0x34], 0x46
push 1
lea ecx, [esp + 0x20]
push ecx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x47
lea edx, [esp + 0x10]
push edx
mov ecx, ebx
call fcn.0052d880
mov ecx, eax
mov eax, dword [esi]
mov dword [ecx + 4], eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea ecx, [esp + 0x18]
push ecx
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, 0x5f7740
mov dword [esp + 0x18], 0x26
call fcn.00494ae0
mov dword [esp + 0x34], 0x48
push 0x8e
lea edx, [esp + 0x20]
push edx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x49
lea eax, [esp + 0x10]
push eax
mov ecx, ebx
call fcn.0052d880
mov edx, dword [esi]
mov ecx, eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
mov dword [ecx + 4], edx
call fcn.00494c50
lea eax, [esi + 8]
mov edi, dword [esp + 0x10]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea eax, [esp + 0x18]
push eax
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, 0x5f7740
mov dword [esp + 0x18], 0x28
call fcn.00494ae0
mov dword [esp + 0x34], 0x4a
push 0x8f
lea ecx, [esp + 0x20]
push ecx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x4b
lea edx, [esp + 0x10]
push edx
mov ecx, ebx
call fcn.0052d880
mov ecx, eax
mov eax, dword [esi]
mov dword [ecx + 4], eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea ecx, [esp + 0x18]
push ecx
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, 0x5f7740
mov dword [esp + 0x18], 0x25
call fcn.00494ae0
mov dword [esp + 0x34], 0x4c
push 0x90
lea edx, [esp + 0x20]
push edx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x4d
lea eax, [esp + 0x10]
push eax
mov ecx, ebx
call fcn.0052d880
mov edx, dword [esi]
mov ecx, eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
mov dword [ecx + 4], edx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea eax, [esp + 0x18]
push eax
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, 0x5f7740
mov dword [esp + 0x18], 0x27
call fcn.00494ae0
mov dword [esp + 0x34], 0x4e
push 0x91
lea ecx, [esp + 0x20]
push ecx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x4f
lea edx, [esp + 0x10]
push edx
mov ecx, ebx
call fcn.0052d880
mov ecx, eax
mov eax, dword [esi]
mov dword [ecx + 4], eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea ecx, [esp + 0x18]
push ecx
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, 0x5f7740
mov dword [esp + 0x18], 0x2000026
call fcn.00494ae0
mov dword [esp + 0x34], 0x50
push 0x8e
lea edx, [esp + 0x20]
push edx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x51
lea eax, [esp + 0x10]
push eax
mov ecx, ebx
call fcn.0052d880
mov edx, dword [esi]
mov ecx, eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
mov dword [ecx + 4], edx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea eax, [esp + 0x18]
push eax
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
mov dword [esp + 0x14], 0x2000028
push 0
or edi, 0xffffffff
mov eax, 0x5f7740
call fcn.00494ae0
mov dword [esp + 0x34], 0x52
push 0x8f
lea ecx, [esp + 0x20]
push ecx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x53
lea edx, [esp + 0x10]
push edx
mov ecx, ebx
call fcn.0052d880
mov ecx, eax
mov eax, dword [esi]
mov dword [ecx + 4], eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea ecx, [esp + 0x18]
push ecx
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, 0x5f7740
mov dword [esp + 0x18], 0x2000025
call fcn.00494ae0
mov dword [esp + 0x34], 0x54
push 0x90
lea edx, [esp + 0x20]
push edx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x55
lea eax, [esp + 0x10]
push eax
mov ecx, ebx
call fcn.0052d880
mov edx, dword [esi]
mov ecx, eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
mov dword [ecx + 4], edx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea eax, [esp + 0x18]
push eax
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, 0x5f7740
mov dword [esp + 0x18], 0x2000027
call fcn.00494ae0
mov dword [esp + 0x34], 0x56
push 0x91
lea ecx, [esp + 0x20]
push ecx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x57
lea edx, [esp + 0x10]
push edx
mov ecx, ebx
call fcn.0052d880
mov ecx, eax
mov eax, dword [esi]
mov dword [ecx + 4], eax
lea eax, [esi + 4]
lea edi, [ecx + 8]
mov dword [esp + 0x10], ecx
call fcn.00494c50
mov edi, dword [esp + 0x10]
lea eax, [esi + 8]
add edi, 0xc
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea ecx, [esp + 0x18]
push ecx
call fcn.00434370
push ecx
mov esi, esp
mov dword [esp + 0x18], esp
push 0
or edi, 0xffffffff
mov eax, 0x5f7740
mov dword [esp + 0x18], 0x4000013
call fcn.00494ae0
mov dword [esp + 0x34], 0x58
push 0x72
lea edx, [esp + 0x20]
push edx
mov dword [esp + 0x3c], edi
call fcn.0052b480
mov esi, eax
mov dword [esp + 0x30], 0x59
lea eax, [esp + 0x10]
push eax
mov ecx, ebx
call fcn.0052d880
mov ecx, dword [esi]
mov ebx, eax
lea eax, [esi + 4]
lea edi, [ebx + 8]
mov dword [ebx + 4], ecx
call fcn.00494c50
lea eax, [esi + 8]
lea edi, [ebx + 0xc]
call fcn.00494c50
mov dword [esp + 0x30], 0xffffffff
lea edx, [esp + 0x18]
push edx
call fcn.00434370
mov esi, dword [ebp + 8]
push 0x4c
push esi
call fcn.0052d1f0
push 0x4c
push esi
call fcn.0052d1f0
push 0x4d
push esi
call fcn.0052d1f0
push 0x4e
push esi
call fcn.0052d1f0
push 0x4f
push esi
call fcn.0052d1f0
push 0x50
push esi
call fcn.0052d1f0
push 0x51
push esi
call fcn.0052d1f0
push 0x52
push esi
call fcn.0052d1f0
push 0x53
push esi
call fcn.0052d1f0
push 0x54
push esi
call fcn.0052d1f0
push 0x55
push esi
call fcn.0052d1f0
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4