Function at 0x51cf40
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Get process heap flags
Get process heap force flags
Parse pe header

Disassembly:
push 0xffffffffffffffff
push 0x5cb814
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x54c
mov eax, dword [0x63b4a0]
push edi
mov edi, ecx
mov dword [esp + 0x7c], eax
mov dword [esp + 0x558], 0
mov dword [esp + 0x74], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], eax
mov dword [esp + 8], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x78], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
lea ecx, [esp + 0x520]
mov byte [esp + 0x558], 0x1d
call fcn.0055b385
lea ecx, [esp + 0x500]
mov byte [esp + 0x558], 0x1e
call fcn.0055b385
lea ecx, [esp + 0x4e0]
mov byte [esp + 0x558], 0x1f
call fcn.0055b385
lea ecx, [esp + 0x4c0]
mov byte [esp + 0x558], 0x20
call fcn.0055b385
mov byte [esp + 0x558], 0x21
lea ecx, [esp + 0x4a0]
call fcn.0055b385
lea ecx, [esp + 0x480]
mov byte [esp + 0x558], 0x22
call fcn.0055b385
lea ecx, [esp + 0x460]
mov byte [esp + 0x558], 0x23
call fcn.0055b385
lea ecx, [esp + 0x440]
mov byte [esp + 0x558], 0x24
call fcn.0055b385
lea ecx, [esp + 0x420]
mov byte [esp + 0x558], 0x25
call fcn.0055b385
lea ecx, [esp + 0x400]
mov byte [esp + 0x558], 0x26
call fcn.0055b385
lea ecx, [esp + 0x3e0]
mov byte [esp + 0x558], 0x27
call fcn.0055b385
lea ecx, [esp + 0x3c0]
mov byte [esp + 0x558], 0x28
call fcn.0055b385
lea ecx, [esp + 0x3a0]
mov byte [esp + 0x558], 0x29
call fcn.0055b385
lea ecx, [esp + 0x380]
mov byte [esp + 0x558], 0x2a
call fcn.0055b385
lea ecx, [esp + 0x360]
mov byte [esp + 0x558], 0x2b
call fcn.0055b385
lea ecx, [esp + 0x340]
mov byte [esp + 0x558], 0x2c
call fcn.0055b385
lea ecx, [esp + 0x320]
mov byte [esp + 0x558], 0x2d
call fcn.0055b385
lea ecx, [esp + 0x300]
mov byte [esp + 0x558], 0x2e
call fcn.0055b385
lea ecx, [esp + 0x2e0]
mov byte [esp + 0x558], 0x2f
call fcn.0055b385
lea ecx, [esp + 0x2c0]
mov byte [esp + 0x558], 0x30
call fcn.0055b385
lea ecx, [esp + 0x2a0]
mov byte [esp + 0x558], 0x31
call fcn.0055b385
lea ecx, [esp + 0x280]
mov byte [esp + 0x558], 0x32
call fcn.0055b385
lea ecx, [esp + 0x260]
mov byte [esp + 0x558], 0x33
call fcn.0055b385
lea ecx, [esp + 0x240]
mov byte [esp + 0x558], 0x34
call fcn.0055b385
mov byte [esp + 0x558], 0x35
lea ecx, [esp + 0x220]
call fcn.0055b385
lea ecx, [esp + 0x200]
mov byte [esp + 0x558], 0x36
call fcn.0055b385
lea ecx, [esp + 0x1e0]
mov byte [esp + 0x558], 0x37
call fcn.0055b385
lea ecx, [esp + 0x1c0]
mov byte [esp + 0x558], 0x38
call fcn.0055b385
lea ecx, [esp + 0x1a0]
mov byte [esp + 0x558], 0x39
call fcn.0055b385
lea ecx, [esp + 0x370]
mov byte [esp + 0x558], 0x3a
call fcn.0055b385
lea ecx, [esp + 0x450]
mov byte [esp + 0x558], 0x3b
call fcn.0055b385
lea ecx, [esp + 0x350]
mov byte [esp + 0x558], 0x3c
call fcn.0055b385
lea ecx, [esp + 0x530]
mov byte [esp + 0x558], 0x3d
call fcn.0055b385
lea ecx, [esp + 0x330]
mov byte [esp + 0x558], 0x3e
call fcn.0055b385
lea ecx, [esp + 0x430]
mov byte [esp + 0x558], 0x3f
call fcn.0055b385
lea ecx, [esp + 0x310]
mov byte [esp + 0x558], 0x40
call fcn.0055b385
lea ecx, [esp + 0x4b0]
mov byte [esp + 0x558], 0x41
call fcn.0055b385
lea ecx, [esp + 0x2f0]
mov byte [esp + 0x558], 0x42
call fcn.0055b385
lea ecx, [esp + 0x410]
mov byte [esp + 0x558], 0x43
call fcn.0055b385
lea ecx, [esp + 0x2d0]
mov byte [esp + 0x558], 0x44
call fcn.0055b385
lea ecx, [esp + 0x4f0]
mov byte [esp + 0x558], 0x45
call fcn.0055b385
lea ecx, [esp + 0x2b0]
mov byte [esp + 0x558], 0x46
call fcn.0055b385
lea ecx, [esp + 0x3f0]
mov byte [esp + 0x558], 0x47
call fcn.0055b385
lea ecx, [esp + 0x290]
mov byte [esp + 0x558], 0x48
call fcn.0055b385
lea ecx, [esp + 0x490]
mov byte [esp + 0x558], 0x49
call fcn.0055b385
lea ecx, [esp + 0x190]
mov byte [esp + 0x558], 0x4a
call fcn.0055b385
lea ecx, [esp + 0x3d0]
mov byte [esp + 0x558], 0x4b
call fcn.0055b385
lea ecx, [esp + 0x250]
mov byte [esp + 0x558], 0x4c
call fcn.0055b385
lea ecx, [esp + 0x510]
mov byte [esp + 0x558], 0x4d
call fcn.0055b385
lea ecx, [esp + 0x230]
mov byte [esp + 0x558], 0x4e
call fcn.0055b385
lea ecx, [esp + 0x3b0]
mov byte [esp + 0x558], 0x4f
call fcn.0055b385
lea ecx, [esp + 0x210]
mov byte [esp + 0x558], 0x50
call fcn.0055b385
lea ecx, [esp + 0x470]
mov byte [esp + 0x558], 0x51
call fcn.0055b385
lea ecx, [esp + 0x1f0]
mov byte [esp + 0x558], 0x52
call fcn.0055b385
lea ecx, [esp + 0x390]
mov byte [esp + 0x558], 0x53
call fcn.0055b385
lea ecx, [esp + 0x1d0]
mov byte [esp + 0x558], 0x54
call fcn.0055b385
lea ecx, [esp + 0x4d0]
mov byte [esp + 0x558], 0x55
call fcn.0055b385
lea ecx, [esp + 0x1b0]
mov byte [esp + 0x558], 0x56
call fcn.0055b385
lea ecx, [esp + 0x540]
mov byte [esp + 0x558], 0x57
call fcn.0055b385
lea ecx, [esp + 0x270]
mov byte [esp + 0x558], 0x58
call fcn.0055b385
mov eax, dword [0x64a740]
lea ecx, [esp + 0x80]
push eax
mov byte [esp + 0x55c], 0x59
call fcn.00557aba
push 0x649cf8
mov byte [esp + 0x55c], 0x5a
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0
push str.select__from_YEWUFIELDNAME
push 0
lea ecx, [esp + 0x8c]
call fcn.00557dcf
mov eax, dword [esp + 0x148]
test eax, eax
jne 0x51f258
push ebx
push ebp
lea ecx, [esp + 0x84]
push esi
push ecx
push str.Info1Name
lea ecx, [esp + 0x94]
call fcn.0055891c
lea edx, [esp + 0x80]
lea ecx, [esp + 0x8c]
push edx
push str.Info2Name
call fcn.0055891c
lea eax, [esp + 0x78]
lea ecx, [esp + 0x8c]
push eax
push str.Info3Name
call fcn.0055891c
lea ecx, [esp + 0x70]
push ecx
push str.Info4Name
lea ecx, [esp + 0x94]
call fcn.0055891c
lea edx, [esp + 0x68]
lea ecx, [esp + 0x8c]
push edx
push str.Info5Name
call fcn.0055891c
lea eax, [esp + 0x60]
lea ecx, [esp + 0x8c]
push eax
push str.Info6Name
call fcn.0055891c
lea ecx, [esp + 0x58]
push ecx
push str.Info7Name
lea ecx, [esp + 0x94]
call fcn.0055891c
lea edx, [esp + 0x4c]
lea ecx, [esp + 0x8c]
push edx
push str.Info8Name
call fcn.0055891c
lea eax, [esp + 0x44]
lea ecx, [esp + 0x8c]
push eax
push str.Info9Name
call fcn.0055891c
lea ecx, [esp + 0x3c]
push ecx
push str.Info10Name
lea ecx, [esp + 0x94]
call fcn.0055891c
lea edx, [esp + 0x34]
lea ecx, [esp + 0x8c]
push edx
push str.Info11Name
call fcn.0055891c
lea eax, [esp + 0x2c]
lea ecx, [esp + 0x8c]
push eax
push str.Info12Name
call fcn.0055891c
lea ecx, [esp + 0x24]
push ecx
push str.Info13Name
lea ecx, [esp + 0x94]
call fcn.0055891c
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x8c]
push edx
push str.Info14Name
call fcn.0055891c
lea eax, [esp + 0x18]
lea ecx, [esp + 0x8c]
push eax
push str.Info15Name
call fcn.0055891c
lea ecx, [esp + 0x52c]
push 0
push ecx
push str.DisplayInfo1
lea ecx, [esp + 0x98]
call fcn.005587de
lea edx, [esp + 0x50c]
push 0
push edx
push str.DisplayInfo2
lea ecx, [esp + 0x98]
call fcn.005587de
lea eax, [esp + 0x4ec]
push 0
push eax
push str.DisplayInfo3
lea ecx, [esp + 0x98]
call fcn.005587de
lea ecx, [esp + 0x4cc]
push 0
push ecx
push str.DisplayInfo4
lea ecx, [esp + 0x98]
call fcn.005587de
lea edx, [esp + 0x4ac]
push 0
push edx
push str.DisplayInfo5
lea ecx, [esp + 0x98]
call fcn.005587de
lea eax, [esp + 0x48c]
push 0
push eax
push str.DisplayInfo6
lea ecx, [esp + 0x98]
call fcn.005587de
lea ecx, [esp + 0x46c]
push 0
push ecx
push str.DisplayInfo7
lea ecx, [esp + 0x98]
call fcn.005587de
lea edx, [esp + 0x44c]
push 0
push edx
push str.DisplayInfo8
lea ecx, [esp + 0x98]
call fcn.005587de
lea eax, [esp + 0x42c]
push 0
push eax
push str.DisplayInfo9
lea ecx, [esp + 0x98]
call fcn.005587de
lea ecx, [esp + 0x40c]
push 0
push ecx
push str.DisplayInfo10
lea ecx, [esp + 0x98]
call fcn.005587de
lea edx, [esp + 0x3ec]
push 0
push edx
push str.DisplayInfo11
lea ecx, [esp + 0x98]
call fcn.005587de
lea eax, [esp + 0x3cc]
push 0
push eax
push str.DisplayInfo12
lea ecx, [esp + 0x98]
call fcn.005587de
lea ecx, [esp + 0x3ac]
push 0
push ecx
push str.DisplayInfo13
lea ecx, [esp + 0x98]
call fcn.005587de
lea edx, [esp + 0x38c]
push 0
push edx
push str.DisplayInfo14
lea ecx, [esp + 0x98]
call fcn.005587de
lea eax, [esp + 0x36c]
push 0
push eax
push str.DisplayInfo15
lea ecx, [esp + 0x98]
call fcn.005587de
lea ecx, [esp + 0x45c]
push 0
push ecx
push str.IsList_Info1
lea ecx, [esp + 0x98]
call fcn.005587de
lea edx, [esp + 0x35c]
push 0
push edx
push str.IsList_Info2
lea ecx, [esp + 0x98]
call fcn.005587de
lea eax, [esp + 0x53c]
push 0
push eax
push str.IsList_Info3
lea ecx, [esp + 0x98]
call fcn.005587de
lea ecx, [esp + 0x33c]
push 0
push ecx
push str.IsList_Info4
lea ecx, [esp + 0x98]
call fcn.005587de
lea edx, [esp + 0x43c]
push 0
push edx
push str.IsList_Info5
lea ecx, [esp + 0x98]
call fcn.005587de
lea eax, [esp + 0x31c]
push 0
push eax
push str.IsList_Info6
lea ecx, [esp + 0x98]
call fcn.005587de
lea ecx, [esp + 0x4bc]
push 0
push ecx
push str.IsList_Info7
lea ecx, [esp + 0x98]
call fcn.005587de
lea edx, [esp + 0x2fc]
push 0
push edx
push str.IsList_Info8
lea ecx, [esp + 0x98]
call fcn.005587de
lea eax, [esp + 0x41c]
push 0
push eax
push str.IsList_Info9
lea ecx, [esp + 0x98]
call fcn.005587de
lea ecx, [esp + 0x2dc]
push 0
push ecx
push str.IsList_Info10
lea ecx, [esp + 0x98]
call fcn.005587de
lea edx, [esp + 0x4fc]
push 0
push edx
push str.IsList_Info11
lea ecx, [esp + 0x98]
call fcn.005587de
lea eax, [esp + 0x2bc]
push 0
push eax
push str.IsList_Info12
lea ecx, [esp + 0x98]
call fcn.005587de
lea ecx, [esp + 0x3fc]
push 0
push ecx
push str.IsList_Info13
lea ecx, [esp + 0x98]
call fcn.005587de
lea edx, [esp + 0x29c]
push 0
push edx
push str.IsList_Info14
lea ecx, [esp + 0x98]
call fcn.005587de
lea eax, [esp + 0x49c]
push 0
push eax
push str.IsList_Info15
lea ecx, [esp + 0x98]
call fcn.005587de
lea ecx, [esp + 0x14]
push ecx
push str.Info16Name
lea ecx, [esp + 0x94]
call fcn.0055891c
lea edx, [esp + 0x6c]
lea ecx, [esp + 0x8c]
push edx
push str.Info17Name
call fcn.0055891c
lea eax, [esp + 0x48]
lea ecx, [esp + 0x8c]
push eax
push str.Info18Name
call fcn.0055891c
lea ecx, [esp + 0x84]
push ecx
push str.Info19Name
lea ecx, [esp + 0x94]
call fcn.0055891c
lea edx, [esp + 0x40]
lea ecx, [esp + 0x8c]
push edx
push str.Info20Name
call fcn.0055891c
lea eax, [esp + 0x64]
lea ecx, [esp + 0x8c]
push eax
push str.Info21Name
call fcn.0055891c
lea ecx, [esp + 0x38]
push ecx
push str.Info22Name
lea ecx, [esp + 0x94]
call fcn.0055891c
lea edx, [esp + 0x74]
lea ecx, [esp + 0x8c]
push edx
push str.Info23Name
call fcn.0055891c
lea eax, [esp + 0x30]
lea ecx, [esp + 0x8c]
push eax
push str.Info24Name
call fcn.0055891c
lea ecx, [esp + 0x5c]
push ecx
push str.Info25Name
lea ecx, [esp + 0x94]
call fcn.0055891c
lea edx, [esp + 0x28]
lea ecx, [esp + 0x8c]
push edx
push str.Info26Name
call fcn.0055891c
lea eax, [esp + 0x7c]
lea ecx, [esp + 0x8c]
push eax
push str.Info27Name
call fcn.0055891c
lea ecx, [esp + 0x20]
push ecx
push str.Info28Name
lea ecx, [esp + 0x94]
call fcn.0055891c
lea edx, [esp + 0x50]
push edx
push str.Info29Name
lea ecx, [esp + 0x94]
call fcn.0055891c
lea eax, [esp + 0x54]
lea ecx, [esp + 0x8c]
push eax
push str.Info30Name
call fcn.0055891c
lea ecx, [esp + 0x34c]
push 0
push ecx
push str.DisplayInfo16
lea ecx, [esp + 0x98]
call fcn.005587de
lea edx, [esp + 0x32c]
push 0
push edx
push str.DisplayInfo17
lea ecx, [esp + 0x98]
call fcn.005587de
lea eax, [esp + 0x30c]
push 0
push eax
push str.DisplayInfo18
lea ecx, [esp + 0x98]
call fcn.005587de
lea ecx, [esp + 0x2ec]
push 0
push ecx
push str.DisplayInfo19
lea ecx, [esp + 0x98]
call fcn.005587de
lea edx, [esp + 0x2cc]
push 0
push edx
push str.DisplayInfo20
lea ecx, [esp + 0x98]
call fcn.005587de
lea eax, [esp + 0x2ac]
push 0
push eax
push str.DisplayInfo21
lea ecx, [esp + 0x98]
call fcn.005587de
lea ecx, [esp + 0x28c]
push 0
push ecx
push str.DisplayInfo22
lea ecx, [esp + 0x98]
call fcn.005587de
lea edx, [esp + 0x26c]
push 0
push edx
push str.DisplayInfo23
lea ecx, [esp + 0x98]
call fcn.005587de
lea eax, [esp + 0x24c]
push 0
push eax
push str.DisplayInfo24
lea ecx, [esp + 0x98]
call fcn.005587de
lea ecx, [esp + 0x22c]
push 0
push ecx
push str.DisplayInfo25
lea ecx, [esp + 0x98]
call fcn.005587de
lea edx, [esp + 0x20c]
push 0
push edx
push str.DisplayInfo26
lea ecx, [esp + 0x98]
call fcn.005587de
lea eax, [esp + 0x1ec]
push 0
push eax
push str.DisplayInfo27
lea ecx, [esp + 0x98]
call fcn.005587de
lea ecx, [esp + 0x1cc]
push 0
push ecx
push str.DisplayInfo28
lea ecx, [esp + 0x98]
call fcn.005587de
lea edx, [esp + 0x1ac]
push 0
push edx
push str.DisplayInfo29
lea ecx, [esp + 0x98]
call fcn.005587de
lea eax, [esp + 0x37c]
push 0
push eax
push str.DisplayInfo30
lea ecx, [esp + 0x98]
call fcn.005587de
lea ecx, [esp + 0x19c]
push 0
push ecx
push str.IsList_Info16
lea ecx, [esp + 0x98]
call fcn.005587de
lea edx, [esp + 0x3dc]
push 0
push edx
push str.IsList_Info17
lea ecx, [esp + 0x98]
call fcn.005587de
lea eax, [esp + 0x25c]
push 0
push eax
push str.IsList_Info18
lea ecx, [esp + 0x98]
call fcn.005587de
lea ecx, [esp + 0x51c]
push 0
push ecx
push str.IsList_Info19
lea ecx, [esp + 0x98]
call fcn.005587de
lea edx, [esp + 0x23c]
push 0
push edx
push str.IsList_Info20
lea ecx, [esp + 0x98]
call fcn.005587de
lea eax, [esp + 0x3bc]
push 0
push eax
push str.IsList_Info21
lea ecx, [esp + 0x98]
call fcn.005587de
lea ecx, [esp + 0x21c]
push 0
push ecx
push str.IsList_Info22
lea ecx, [esp + 0x98]
call fcn.005587de
lea edx, [esp + 0x47c]
push 0
push edx
push str.IsList_Info23
lea ecx, [esp + 0x98]
call fcn.005587de
lea eax, [esp + 0x1fc]
push 0
push eax
push str.IsList_Info24
lea ecx, [esp + 0x98]
call fcn.005587de
lea ecx, [esp + 0x39c]
push 0
push ecx
push str.IsList_Info25
lea ecx, [esp + 0x98]
call fcn.005587de
lea edx, [esp + 0x1dc]
push 0
push edx
push str.IsList_Info26
lea ecx, [esp + 0x98]
call fcn.005587de
lea eax, [esp + 0x4dc]
push 0
push eax
push str.IsList_Info27
lea ecx, [esp + 0x98]
call fcn.005587de
lea ecx, [esp + 0x1bc]
push 0
push ecx
push str.IsList_Info28
lea ecx, [esp + 0x98]
call fcn.005587de
lea edx, [esp + 0x54c]
push 0
push edx
push str.IsList_Info29
lea ecx, [esp + 0x98]
call fcn.005587de
lea eax, [esp + 0x27c]
push 0
push eax
push str.IsList_Info30
lea ecx, [esp + 0x98]
call fcn.005587de
lea ecx, [esp + 0x8c]
call fcn.00557ea3
push 0x649cf8
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [edi + 0x104]
mov ebp, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0x1009
push ecx
call ebp
mov edx, dword [edi + 0x104]
push 0
push 0
push 0x1004
push edx
call ebp
push 0
push 0
push 0
push 0
lea esi, [edi + 0xe8]
push 0x619fac
mov ebx, 1
push eax
push ebx
mov ecx, esi
call fcn.00589d9e
mov ecx, dword [esp + 0x88]
mov dword [esp + 0x10], eax
push ecx
push ebx
push eax
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x534], ebx
jne 0x51de6e
mov edx, dword [esp + 0x10]
push 0x6199a8
push 2
push edx
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x464], ebx
jne 0x51de8a
mov eax, dword [esp + 0x10]
push 0x6199a8
push 3
push eax
mov ecx, esi
call fcn.00589e99
mov ecx, dword [edi + 0x104]
push 0
push 0
push 0x1004
push ecx
call ebp
push 0
push 0
push 0
push 0
push str.2345678
push eax
push ebx
mov ecx, esi
call fcn.00589d9e
mov edx, dword [esp + 0x80]
mov ecx, esi
push edx
push ebx
push eax
mov dword [esp + 0x1c], eax
call fcn.00589e99
cmp dword [esp + 0x514], ebx
jne 0x51dee3
mov eax, dword [esp + 0x10]
push 0x6199a8
push 2
push eax
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x364], ebx
jne 0x51deff
mov ecx, dword [esp + 0x10]
push 0x6199a8
push 3
push ecx
mov ecx, esi
call fcn.00589e99
mov edx, dword [edi + 0x104]
push 0
push 0
push 0x1004
push edx
call ebp
push 0
push 0
push 0
push 0
push 0x627570
push eax
push ebx
mov ecx, esi
call fcn.00589d9e
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x10], eax
push ecx
push ebx
push eax
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x4f4], ebx
jne 0x51df55
mov edx, dword [esp + 0x10]
push 0x6199a8
push 2
push edx
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x544], ebx
jne 0x51df71
mov eax, dword [esp + 0x10]
push 0x6199a8
push 3
push eax
mov ecx, esi
call fcn.00589e99
mov ecx, dword [edi + 0x104]
push 0
push 0
push 0x1004
push ecx
call ebp
push 0
push 0
push 0
push 0
push 0x627574
push eax
push ebx
mov ecx, esi
call fcn.00589d9e
mov edx, dword [esp + 0x70]
mov ecx, esi
push edx
push ebx
push eax
mov dword [esp + 0x1c], eax
call fcn.00589e99
cmp dword [esp + 0x4d4], ebx
jne 0x51dfc7
mov eax, dword [esp + 0x10]
push 0x6199a8
push 2
push eax
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x344], ebx
jne 0x51dfe3
mov ecx, dword [esp + 0x10]
push 0x6199a8
push 3
push ecx
mov ecx, esi
call fcn.00589e99
mov edx, dword [edi + 0x104]
push 0
push 0
push 0x1004
push edx
call ebp
push 0
push 0
push 0
push 0
push 0x627578
push eax
push ebx
mov ecx, esi
call fcn.00589d9e
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x10], eax
push ecx
push ebx
push eax
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x4b4], ebx
jne 0x51e039
mov edx, dword [esp + 0x10]
push 0x6199a8
push 2
push edx
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x444], ebx
jne 0x51e055
mov eax, dword [esp + 0x10]
push 0x6199a8
push 3
push eax
mov ecx, esi
call fcn.00589e99
mov ecx, dword [edi + 0x104]
push 0
push 0
push 0x1004
push ecx
call ebp
push 0
push 0
push 0
push 0
push 0x62757c
push eax
push ebx
mov ecx, esi
call fcn.00589d9e
mov edx, dword [esp + 0x60]
mov ecx, esi
push edx
push ebx
push eax
mov dword [esp + 0x1c], eax
call fcn.00589e99
cmp dword [esp + 0x494], ebx
jne 0x51e0ab
mov eax, dword [esp + 0x10]
push 0x6199a8
push 2
push eax
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x324], ebx
jne 0x51e0c7
mov ecx, dword [esp + 0x10]
push 0x6199a8
push 3
push ecx
mov ecx, esi
call fcn.00589e99
mov edx, dword [edi + 0x104]
push 0
push 0
push 0x1004
push edx
call ebp
push 0
push 0
push 0
push 0
push 0x627580
push eax
push ebx
mov ecx, esi
call fcn.00589d9e
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x10], eax
push ecx
push ebx
push eax
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x474], ebx
jne 0x51e11d
mov edx, dword [esp + 0x10]
push 0x6199a8
push 2
push edx
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x4c4], ebx
jne 0x51e139
mov eax, dword [esp + 0x10]
push 0x6199a8
push 3
push eax
mov ecx, esi
call fcn.00589e99
mov ecx, dword [edi + 0x104]
push 0
push 0
push 0x1004
push ecx
call ebp
push 0
push 0
push 0
push 0
push 0x627584
push eax
push ebx
mov ecx, esi
call fcn.00589d9e
mov edx, dword [esp + 0x4c]
mov ecx, esi
push edx
push ebx
push eax
mov dword [esp + 0x1c], eax
call fcn.00589e99
cmp dword [esp + 0x454], ebx
jne 0x51e18f
mov eax, dword [esp + 0x10]
push 0x6199a8
push 2
push eax
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x304], ebx
jne 0x51e1ab
mov ecx, dword [esp + 0x10]
push 0x6199a8
push 3
push ecx
mov ecx, esi
call fcn.00589e99
mov edx, dword [edi + 0x104]
push 0
push 0
push 0x1004
push edx
call ebp
push 0
push 0
push 0
push 0
push 0x61b9a8
push eax
push ebx
mov ecx, esi
call fcn.00589d9e
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x10], eax
push ecx
push ebx
push eax
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x434], ebx
jne 0x51e201
mov edx, dword [esp + 0x10]
push 0x6199a8
push 2
push edx
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x424], ebx
jne 0x51e21d
mov eax, dword [esp + 0x10]
push 0x6199a8
push 3
push eax
mov ecx, esi
call fcn.00589e99
mov ecx, dword [edi + 0x104]
push 0
push 0
push 0x1004
push ecx
call ebp
push 0
push 0
push 0
push 0
push 0x6381ec
push eax
push ebx
mov ecx, esi
call fcn.00589d9e
mov edx, dword [esp + 0x3c]
mov ecx, esi
push edx
push ebx
push eax
mov dword [esp + 0x1c], eax
call fcn.00589e99
cmp dword [esp + 0x414], ebx
jne 0x51e273
mov eax, dword [esp + 0x10]
push 0x6199a8
push 2
push eax
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x2e4], ebx
jne 0x51e28f
mov ecx, dword [esp + 0x10]
push 0x6199a8
push 3
push ecx
mov ecx, esi
call fcn.00589e99
mov edx, dword [edi + 0x104]
push 0
push 0
push 0x1004
push edx
call ebp
push 0
push 0
push 0
push 0
push 0x6381e8
push eax
push ebx
mov ecx, esi
call fcn.00589d9e
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x10], eax
push ecx
push ebx
push eax
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x3f4], ebx
jne 0x51e2e5
mov edx, dword [esp + 0x10]
push 0x6199a8
push 2
push edx
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x504], ebx
jne 0x51e301
mov eax, dword [esp + 0x10]
push 0x6199a8
push 3
push eax
mov ecx, esi
call fcn.00589e99
mov ecx, dword [edi + 0x104]
push 0
push 0
push 0x1004
push ecx
call ebp
push 0
push 0
push 0
push 0
push 0x61cffc
push eax
push ebx
mov ecx, esi
call fcn.00589d9e
mov edx, dword [esp + 0x2c]
mov ecx, esi
push edx
push ebx
push eax
mov dword [esp + 0x1c], eax
call fcn.00589e99
cmp dword [esp + 0x3d4], ebx
jne 0x51e357
mov eax, dword [esp + 0x10]
push 0x6199a8
push 2
push eax
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x2c4], ebx
jne 0x51e373
mov ecx, dword [esp + 0x10]
push 0x6199a8
push 3
push ecx
mov ecx, esi
call fcn.00589e99
mov edx, dword [edi + 0x104]
push 0
push 0
push 0x1004
push edx
call ebp
push 0
push 0
push 0
push 0
push 0x619788
push eax
push ebx
mov ecx, esi
call fcn.00589d9e
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x10], eax
push ecx
push ebx
push eax
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x3b4], ebx
jne 0x51e3c9
mov edx, dword [esp + 0x10]
push 0x6199a8
push 2
push edx
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x404], ebx
jne 0x51e3e5
mov eax, dword [esp + 0x10]
push 0x6199a8
push 3
push eax
mov ecx, esi
call fcn.00589e99
mov ecx, dword [edi + 0x104]
push 0
push 0
push 0x1004
push ecx
call ebp
push 0
push 0
push 0
push 0
push 0x619784
push eax
push ebx
mov ecx, esi
call fcn.00589d9e
mov edx, dword [esp + 0x1c]
mov ecx, esi
push edx
push ebx
push eax
mov dword [esp + 0x1c], eax
call fcn.00589e99
cmp dword [esp + 0x394], ebx
jne 0x51e43b
mov eax, dword [esp + 0x10]
push 0x6199a8
push 2
push eax
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x2a4], ebx
jne 0x51e457
mov ecx, dword [esp + 0x10]
push 0x6199a8
push 3
push ecx
mov ecx, esi
call fcn.00589e99
mov edx, dword [edi + 0x104]
push 0
push 0
push 0x1004
push edx
call ebp
push 0
push 0
push 0
push 0
push 0x619780
push eax
push ebx
mov ecx, esi
call fcn.00589d9e
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x10], eax
push ecx
push ebx
push eax
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x374], ebx
jne 0x51e4ad
mov edx, dword [esp + 0x10]
push 0x6199a8
push 2
push edx
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x4a4], ebx
jne 0x51e4c9
mov eax, dword [esp + 0x10]
push 0x6199a8
push 3
push eax
mov ecx, esi
call fcn.00589e99
mov ecx, dword [edi + 0x104]
push 0
push 0
push 0x1004
push ecx
call ebp
push 0
push 0
push 0
push 0
push 0x6381e4
push eax
push ebx
mov ecx, esi
call fcn.00589d9e
mov edx, dword [esp + 0x14]
mov ecx, esi
push edx
push ebx
push eax
mov dword [esp + 0x1c], eax
call fcn.00589e99
cmp dword [esp + 0x354], ebx
jne 0x51e51f
mov eax, dword [esp + 0x10]
push 0x6199a8
push 2
push eax
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x1a4], ebx
jne 0x51e53b
mov ecx, dword [esp + 0x10]
push 0x6199a8
push 3
push ecx
mov ecx, esi
call fcn.00589e99
mov edx, dword [edi + 0x104]
push 0
push 0
push 0x1004
push edx
call ebp
push 0
push 0
push 0
push 0
push 0x6381e0
push eax
push ebx
mov ecx, esi
call fcn.00589d9e
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x10], eax
push ecx
push ebx
push eax
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x334], ebx
jne 0x51e591
mov edx, dword [esp + 0x10]
push 0x6199a8
push 2
push edx
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x3e4], ebx
jne 0x51e5ad
mov eax, dword [esp + 0x10]
push 0x6199a8
push 3
push eax
mov ecx, esi
call fcn.00589e99
mov ecx, dword [edi + 0x104]
push 0
push 0
push 0x1004
push ecx
call ebp
push 0
push 0
push 0
push 0
push 0x61977c
push eax
push ebx
mov ecx, esi
call fcn.00589d9e
mov edx, dword [esp + 0x48]
mov ecx, esi
push edx
push ebx
push eax
mov dword [esp + 0x1c], eax
call fcn.00589e99
cmp dword [esp + 0x314], ebx
jne 0x51e603
mov eax, dword [esp + 0x10]
push 0x6199a8
push 2
push eax
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x264], ebx
jne 0x51e61f
mov ecx, dword [esp + 0x10]
push 0x6199a8
push 3
push ecx
mov ecx, esi
call fcn.00589e99
mov edx, dword [edi + 0x104]
push 0
push 0
push 0x1004
push edx
call ebp
push 0
push 0
push 0
push 0
push 0x6381dc
push eax
push ebx
mov ecx, esi
call fcn.00589d9e
mov ecx, dword [esp + 0x84]
mov dword [esp + 0x10], eax
push ecx
push ebx
push eax
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x2f4], ebx
jne 0x51e678
mov edx, dword [esp + 0x10]
push 0x6199a8
push 2
push edx
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x524], ebx
jne 0x51e694
mov eax, dword [esp + 0x10]
push 0x6199a8
push 3
push eax
mov ecx, esi
call fcn.00589e99
mov ecx, dword [edi + 0x104]
push 0
push 0
push 0x1004
push ecx
call ebp
push 0
push 0
push 0
push 0
push 0x636de4
push eax
push ebx
mov ecx, esi
call fcn.00589d9e
mov edx, dword [esp + 0x40]
mov ecx, esi
push edx
push ebx
push eax
mov dword [esp + 0x1c], eax
call fcn.00589e99
cmp dword [esp + 0x2d4], ebx
jne 0x51e6ea
mov eax, dword [esp + 0x10]
push 0x6199a8
push 2
push eax
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x244], ebx
jne 0x51e706
mov ecx, dword [esp + 0x10]
push 0x6199a8
push 3
push ecx
mov ecx, esi
call fcn.00589e99
mov edx, dword [edi + 0x104]
push 0
push 0
push 0x1004
push edx
call ebp
push 0
push 0
push 0
push 0
push 0x6381d8
push eax
push ebx
mov ecx, esi
call fcn.00589d9e
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x10], eax
push ecx
push ebx
push eax
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x2b4], ebx
jne 0x51e75c
mov edx, dword [esp + 0x10]
push 0x6199a8
push 2
push edx
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x3c4], ebx
jne 0x51e778
mov eax, dword [esp + 0x10]
push 0x6199a8
push 3
push eax
mov ecx, esi
call fcn.00589e99
mov ecx, dword [edi + 0x104]
push 0
push 0
push 0x1004
push ecx
call ebp
push 0
push 0
push 0
push 0
push 0x6381d4
push eax
push ebx
mov ecx, esi
call fcn.00589d9e
mov edx, dword [esp + 0x38]
mov ecx, esi
push edx
push ebx
push eax
mov dword [esp + 0x1c], eax
call fcn.00589e99
cmp dword [esp + 0x294], ebx
jne 0x51e7ce
mov eax, dword [esp + 0x10]
push 0x6199a8
push 2
push eax
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x224], ebx
jne 0x51e7ea
mov ecx, dword [esp + 0x10]
push 0x6199a8
push 3
push ecx
mov ecx, esi
call fcn.00589e99
mov edx, dword [edi + 0x104]
push 0
push 0
push 0x1004
push edx
call ebp
push 0
push 0
push 0
push 0
push 0x6381d0
push eax
push ebx
mov ecx, esi
call fcn.00589d9e
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x10], eax
push ecx
push ebx
push eax
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x274], ebx
jne 0x51e840
mov edx, dword [esp + 0x10]
push 0x6199a8
push 2
push edx
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x484], ebx
jne 0x51e85c
mov eax, dword [esp + 0x10]
push 0x6199a8
push 3
push eax
mov ecx, esi
call fcn.00589e99
mov ecx, dword [edi + 0x104]
push 0
push 0
push 0x1004
push ecx
call ebp
push 0
push 0
push 0
push 0
push 0x6381cc
push eax
push ebx
mov ecx, esi
call fcn.00589d9e
mov edx, dword [esp + 0x30]
mov ecx, esi
push edx
push ebx
push eax
mov dword [esp + 0x1c], eax
call fcn.00589e99
cmp dword [esp + 0x254], ebx
jne 0x51e8b2
mov eax, dword [esp + 0x10]
push 0x6199a8
push 2
push eax
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x204], ebx
jne 0x51e8ce
mov ecx, dword [esp + 0x10]
push 0x6199a8
push 3
push ecx
mov ecx, esi
call fcn.00589e99
mov edx, dword [edi + 0x104]
push 0
push 0
push 0x1004
push edx
call ebp
push 0
push 0
push 0
push 0
push 0x6381c8
push eax
push ebx
mov ecx, esi
call fcn.00589d9e
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x10], eax
push ecx
push ebx
push eax
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x234], ebx
jne 0x51e924
mov edx, dword [esp + 0x10]
push 0x6199a8
push 2
push edx
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x3a4], ebx
jne 0x51e940
mov eax, dword [esp + 0x10]
push 0x6199a8
push 3
push eax
mov ecx, esi
call fcn.00589e99
mov ecx, dword [edi + 0x104]
push 0
push 0
push 0x1004
push ecx
call ebp
push 0
push 0
push 0
push 0
push 0x6381c4
push eax
push ebx
mov ecx, esi
call fcn.00589d9e
mov edx, dword [esp + 0x28]
mov ecx, esi
push edx
push ebx
push eax
mov dword [esp + 0x1c], eax
call fcn.00589e99
cmp dword [esp + 0x214], ebx
jne 0x51e996
mov eax, dword [esp + 0x10]
push 0x6199a8
push 2
push eax
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x1e4], ebx
jne 0x51e9b2
mov ecx, dword [esp + 0x10]
push 0x6199a8
push 3
push ecx
mov ecx, esi
call fcn.00589e99
mov edx, dword [edi + 0x104]
push 0
push 0
push 0x1004
push edx
call ebp
push 0
push 0
push 0
push 0
push 0x6381c0
push eax
push ebx
mov ecx, esi
call fcn.00589d9e
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x10], eax
push ecx
push ebx
push eax
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x1f4], ebx
jne 0x51ea08
mov edx, dword [esp + 0x10]
push 0x6199a8
push 2
push edx
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x4e4], ebx
jne 0x51ea24
mov eax, dword [esp + 0x10]
push 0x6199a8
push 3
push eax
mov ecx, esi
call fcn.00589e99
mov ecx, dword [edi + 0x104]
push 0
push 0
push 0x1004
push ecx
call ebp
push 0
push 0
push 0
push 0
push 0x6381bc
push eax
push ebx
mov ecx, esi
call fcn.00589d9e
mov edx, dword [esp + 0x20]
mov ecx, esi
push edx
push ebx
push eax
mov dword [esp + 0x1c], eax
call fcn.00589e99
cmp dword [esp + 0x1d4], ebx
jne 0x51ea7a
mov eax, dword [esp + 0x10]
push 0x6199a8
push 2
push eax
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x1c4], ebx
jne 0x51ea96
mov ecx, dword [esp + 0x10]
push 0x6199a8
push 3
push ecx
mov ecx, esi
call fcn.00589e99
mov edx, dword [edi + 0x104]
push 0
push 0
push 0x1004
push edx
call ebp
push 0
push 0
push 0
push 0
push 0x6381b8
push eax
push ebx
mov ecx, esi
call fcn.00589d9e
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x10], eax
push ecx
push ebx
push eax
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x1b4], ebx
jne 0x51eaec
mov edx, dword [esp + 0x10]
push 0x6199a8
push 2
push edx
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x554], ebx
jne 0x51eb08
mov eax, dword [esp + 0x10]
push 0x6199a8
push 3
push eax
mov ecx, esi
call fcn.00589e99
mov ecx, dword [edi + 0x104]
push 0
push 0
push 0x1004
push ecx
call ebp
push 0
push 0
push 0
push 0
push 0x62a2e4
push eax
push ebx
mov ecx, esi
call fcn.00589d9e
mov edx, dword [esp + 0x54]
mov edi, eax
push edx
push ebx
push edi
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x384], ebx
jne 0x51eb58
push 0x6199a8
push 2
push edi
mov ecx, esi
call fcn.00589e99
cmp dword [esp + 0x284], ebx
jne 0x51eb70
push 0x6199a8
push 3
push edi
mov ecx, esi
call fcn.00589e99
lea ecx, [esp + 0x8c]
mov byte [esp + 0x564], 0x59
call fcn.00557cc6
lea ecx, [esp + 0x27c]
mov byte [esp + 0x564], 0x58
call fcn.0055b3f5
lea ecx, [esp + 0x54c]
mov byte [esp + 0x564], 0x57
call fcn.0055b3f5
lea ecx, [esp + 0x1bc]
mov byte [esp + 0x564], 0x56
call fcn.0055b3f5
lea ecx, [esp + 0x4dc]
mov byte [esp + 0x564], 0x55
call fcn.0055b3f5
lea ecx, [esp + 0x1dc]
mov byte [esp + 0x564], 0x54
call fcn.0055b3f5
lea ecx, [esp + 0x39c]
mov byte [esp + 0x564], 0x53
call fcn.0055b3f5
lea ecx, [esp + 0x1fc]
mov byte [esp + 0x564], 0x52
call fcn.0055b3f5
lea ecx, [esp + 0x47c]
mov byte [esp + 0x564], 0x51
call fcn.0055b3f5
lea ecx, [esp + 0x21c]
mov byte [esp + 0x564], 0x50
call fcn.0055b3f5
lea ecx, [esp + 0x3bc]
mov byte [esp + 0x564], 0x4f
call fcn.0055b3f5
lea ecx, [esp + 0x23c]
mov byte [esp + 0x564], 0x4e
call fcn.0055b3f5
lea ecx, [esp + 0x51c]
mov byte [esp + 0x564], 0x4d
call fcn.0055b3f5
lea ecx, [esp + 0x25c]
mov byte [esp + 0x564], 0x4c
call fcn.0055b3f5
lea ecx, [esp + 0x3dc]
mov byte [esp + 0x564], 0x4b
call fcn.0055b3f5
lea ecx, [esp + 0x19c]
mov byte [esp + 0x564], 0x4a
call fcn.0055b3f5
lea ecx, [esp + 0x49c]
mov byte [esp + 0x564], 0x49
call fcn.0055b3f5
lea ecx, [esp + 0x29c]
mov byte [esp + 0x564], 0x48
call fcn.0055b3f5
lea ecx, [esp + 0x3fc]
mov byte [esp + 0x564], 0x47
call fcn.0055b3f5
lea ecx, [esp + 0x2bc]
mov byte [esp + 0x564], 0x46
call fcn.0055b3f5
lea ecx, [esp + 0x4fc]
mov byte [esp + 0x564], 0x45
call fcn.0055b3f5
lea ecx, [esp + 0x2dc]
mov byte [esp + 0x564], 0x44
call fcn.0055b3f5
lea ecx, [esp + 0x41c]
mov byte [esp + 0x564], 0x43
call fcn.0055b3f5
lea ecx, [esp + 0x2fc]
mov byte [esp + 0x564], 0x42
call fcn.0055b3f5
lea ecx, [esp + 0x4bc]
mov byte [esp + 0x564], 0x41
call fcn.0055b3f5
lea ecx, [esp + 0x31c]
mov byte [esp + 0x564], 0x40
call fcn.0055b3f5
lea ecx, [esp + 0x43c]
mov byte [esp + 0x564], 0x3f
call fcn.0055b3f5
lea ecx, [esp + 0x33c]
mov byte [esp + 0x564], 0x3e
call fcn.0055b3f5
lea ecx, [esp + 0x53c]
mov byte [esp + 0x564], 0x3d
call fcn.0055b3f5
lea ecx, [esp + 0x35c]
mov byte [esp + 0x564], 0x3c
call fcn.0055b3f5
lea ecx, [esp + 0x45c]
mov byte [esp + 0x564], 0x3b
call fcn.0055b3f5
lea ecx, [esp + 0x37c]
mov byte [esp + 0x564], 0x3a
call fcn.0055b3f5
lea ecx, [esp + 0x1ac]
mov byte [esp + 0x564], 0x39
call fcn.0055b3f5
lea ecx, [esp + 0x1cc]
mov byte [esp + 0x564], 0x38
call fcn.0055b3f5
lea ecx, [esp + 0x1ec]
mov byte [esp + 0x564], 0x37
call fcn.0055b3f5
lea ecx, [esp + 0x20c]
mov byte [esp + 0x564], 0x36
call fcn.0055b3f5
lea ecx, [esp + 0x22c]
mov byte [esp + 0x564], 0x35
call fcn.0055b3f5
lea ecx, [esp + 0x24c]
mov byte [esp + 0x564], 0x34
call fcn.0055b3f5
lea ecx, [esp + 0x26c]
mov byte [esp + 0x564], 0x33
call fcn.0055b3f5
lea ecx, [esp + 0x28c]
mov byte [esp + 0x564], 0x32
call fcn.0055b3f5
lea ecx, [esp + 0x2ac]
mov byte [esp + 0x564], 0x31
call fcn.0055b3f5
lea ecx, [esp + 0x2cc]
mov byte [esp + 0x564], 0x30
call fcn.0055b3f5
lea ecx, [esp + 0x2ec]
mov byte [esp + 0x564], 0x2f
call fcn.0055b3f5
lea ecx, [esp + 0x30c]
mov byte [esp + 0x564], 0x2e
call fcn.0055b3f5
lea ecx, [esp + 0x32c]
mov byte [esp + 0x564], 0x2d
call fcn.0055b3f5
lea ecx, [esp + 0x34c]
mov byte [esp + 0x564], 0x2c
call fcn.0055b3f5
lea ecx, [esp + 0x36c]
mov byte [esp + 0x564], 0x2b
call fcn.0055b3f5
lea ecx, [esp + 0x38c]
mov byte [esp + 0x564], 0x2a
call fcn.0055b3f5
lea ecx, [esp + 0x3ac]
mov byte [esp + 0x564], 0x29
call fcn.0055b3f5
lea ecx, [esp + 0x3cc]
mov byte [esp + 0x564], 0x28
call fcn.0055b3f5
lea ecx, [esp + 0x3ec]
mov byte [esp + 0x564], 0x27
call fcn.0055b3f5
lea ecx, [esp + 0x40c]
mov byte [esp + 0x564], 0x26
call fcn.0055b3f5
lea ecx, [esp + 0x42c]
mov byte [esp + 0x564], 0x25
call fcn.0055b3f5
lea ecx, [esp + 0x44c]
mov byte [esp + 0x564], 0x24
call fcn.0055b3f5
lea ecx, [esp + 0x46c]
mov byte [esp + 0x564], 0x23
call fcn.0055b3f5
lea ecx, [esp + 0x48c]
mov byte [esp + 0x564], 0x22
call fcn.0055b3f5
lea ecx, [esp + 0x4ac]
mov byte [esp + 0x564], 0x21
call fcn.0055b3f5
lea ecx, [esp + 0x4cc]
mov byte [esp + 0x564], 0x20
call fcn.0055b3f5
lea ecx, [esp + 0x4ec]
mov byte [esp + 0x564], 0x1f
call fcn.0055b3f5
lea ecx, [esp + 0x50c]
mov byte [esp + 0x564], 0x1e
call fcn.0055b3f5
lea ecx, [esp + 0x52c]
mov byte [esp + 0x564], 0x1d
call fcn.0055b3f5
lea ecx, [esp + 0x54]
mov byte [esp + 0x564], 0x1c
call fcn.0058df3f
lea ecx, [esp + 0x50]
mov byte [esp + 0x564], 0x1b
call fcn.0058df3f
lea ecx, [esp + 0x20]
mov byte [esp + 0x564], 0x1a
call fcn.0058df3f
lea ecx, [esp + 0x7c]
mov byte [esp + 0x564], 0x19
call fcn.0058df3f
lea ecx, [esp + 0x28]
mov byte [esp + 0x564], 0x18
call fcn.0058df3f
lea ecx, [esp + 0x5c]
mov byte [esp + 0x564], 0x17
call fcn.0058df3f
lea ecx, [esp + 0x30]
mov byte [esp + 0x564], 0x16
call fcn.0058df3f
lea ecx, [esp + 0x74]
mov byte [esp + 0x564], 0x15
call fcn.0058df3f
lea ecx, [esp + 0x38]
mov byte [esp + 0x564], 0x14
call fcn.0058df3f
lea ecx, [esp + 0x64]
mov byte [esp + 0x564], 0x13
call fcn.0058df3f
lea ecx, [esp + 0x40]
mov byte [esp + 0x564], 0x12
call fcn.0058df3f
lea ecx, [esp + 0x84]
mov byte [esp + 0x564], 0x11
call fcn.0058df3f
lea ecx, [esp + 0x48]
mov byte [esp + 0x564], 0x10
call fcn.0058df3f
lea ecx, [esp + 0x6c]
mov byte [esp + 0x564], 0xf
call fcn.0058df3f
lea ecx, [esp + 0x14]
mov byte [esp + 0x564], 0xe
call fcn.0058df3f
lea ecx, [esp + 0x18]
mov byte [esp + 0x564], 0xd
call fcn.0058df3f
lea ecx, [esp + 0x1c]
mov byte [esp + 0x564], 0xc
call fcn.0058df3f
lea ecx, [esp + 0x24]
mov byte [esp + 0x564], 0xb
call fcn.0058df3f
lea ecx, [esp + 0x2c]
mov byte [esp + 0x564], 0xa
call fcn.0058df3f
lea ecx, [esp + 0x34]
mov byte [esp + 0x564], 9
call fcn.0058df3f
lea ecx, [esp + 0x3c]
mov byte [esp + 0x564], 8
call fcn.0058df3f
lea ecx, [esp + 0x44]
mov byte [esp + 0x564], 7
call fcn.0058df3f
lea ecx, [esp + 0x4c]
mov byte [esp + 0x564], 6
call fcn.0058df3f
lea ecx, [esp + 0x58]
mov byte [esp + 0x564], 5
call fcn.0058df3f
lea ecx, [esp + 0x60]
mov byte [esp + 0x564], 4
call fcn.0058df3f
lea ecx, [esp + 0x68]
mov byte [esp + 0x564], 3
call fcn.0058df3f
lea ecx, [esp + 0x70]
mov byte [esp + 0x564], 2
call fcn.0058df3f
lea ecx, [esp + 0x78]
mov byte [esp + 0x564], bl
call fcn.0058df3f
lea ecx, [esp + 0x80]
mov byte [esp + 0x564], 0
call fcn.0058df3f
lea ecx, [esp + 0x88]
mov dword [esp + 0x564], 0xffffffff
call fcn.0058df3f
pop esi
mov al, bl
pop ebp
pop ebx
pop edi
mov ecx, dword [esp + 0x54c]
mov dword fs:[0], ecx
add esp, 0x558
ret
lea ecx, [esp + 0x80]
call fcn.00557ea3
push 0x649cf8
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea ecx, [esp + 0x80]
mov byte [esp + 0x558], 0x59
call fcn.00557cc6
lea ecx, [esp + 0x270]
mov byte [esp + 0x558], 0x58
call fcn.0055b3f5
lea ecx, [esp + 0x540]
mov byte [esp + 0x558], 0x57
call fcn.0055b3f5
lea ecx, [esp + 0x1b0]
mov byte [esp + 0x558], 0x56
call fcn.0055b3f5
lea ecx, [esp + 0x4d0]
mov byte [esp + 0x558], 0x55
call fcn.0055b3f5
lea ecx, [esp + 0x1d0]
mov byte [esp + 0x558], 0x54
call fcn.0055b3f5
lea ecx, [esp + 0x390]
mov byte [esp + 0x558], 0x53
call fcn.0055b3f5
lea ecx, [esp + 0x1f0]
mov byte [esp + 0x558], 0x52
call fcn.0055b3f5
lea ecx, [esp + 0x470]
mov byte [esp + 0x558], 0x51
call fcn.0055b3f5
lea ecx, [esp + 0x210]
mov byte [esp + 0x558], 0x50
call fcn.0055b3f5
lea ecx, [esp + 0x3b0]
mov byte [esp + 0x558], 0x4f
call fcn.0055b3f5
lea ecx, [esp + 0x230]
mov byte [esp + 0x558], 0x4e
call fcn.0055b3f5
lea ecx, [esp + 0x510]
mov byte [esp + 0x558], 0x4d
call fcn.0055b3f5
lea ecx, [esp + 0x250]
mov byte [esp + 0x558], 0x4c
call fcn.0055b3f5
lea ecx, [esp + 0x3d0]
mov byte [esp + 0x558], 0x4b
call fcn.0055b3f5
lea ecx, [esp + 0x190]
mov byte [esp + 0x558], 0x4a
call fcn.0055b3f5
lea ecx, [esp + 0x490]
mov byte [esp + 0x558], 0x49
call fcn.0055b3f5
lea ecx, [esp + 0x290]
mov byte [esp + 0x558], 0x48
call fcn.0055b3f5
lea ecx, [esp + 0x3f0]
mov byte [esp + 0x558], 0x47
call fcn.0055b3f5
lea ecx, [esp + 0x2b0]
mov byte [esp + 0x558], 0x46
call fcn.0055b3f5
lea ecx, [esp + 0x4f0]
mov byte [esp + 0x558], 0x45
call fcn.0055b3f5
lea ecx, [esp + 0x2d0]
mov byte [esp + 0x558], 0x44
call fcn.0055b3f5
lea ecx, [esp + 0x410]
mov byte [esp + 0x558], 0x43
call fcn.0055b3f5
lea ecx, [esp + 0x2f0]
mov byte [esp + 0x558], 0x42
call fcn.0055b3f5
lea ecx, [esp + 0x4b0]
mov byte [esp + 0x558], 0x41
call fcn.0055b3f5
mov byte [esp + 0x558], 0x40
lea ecx, [esp + 0x310]
call fcn.0055b3f5
lea ecx, [esp + 0x430]
mov byte [esp + 0x558], 0x3f
call fcn.0055b3f5
lea ecx, [esp + 0x330]
mov byte [esp + 0x558], 0x3e
call fcn.0055b3f5
lea ecx, [esp + 0x530]
mov byte [esp + 0x558], 0x3d
call fcn.0055b3f5
lea ecx, [esp + 0x350]
mov byte [esp + 0x558], 0x3c
call fcn.0055b3f5
lea ecx, [esp + 0x450]
mov byte [esp + 0x558], 0x3b
call fcn.0055b3f5
lea ecx, [esp + 0x370]
mov byte [esp + 0x558], 0x3a
call fcn.0055b3f5
lea ecx, [esp + 0x1a0]
mov byte [esp + 0x558], 0x39
call fcn.0055b3f5
lea ecx, [esp + 0x1c0]
mov byte [esp + 0x558], 0x38
call fcn.0055b3f5
lea ecx, [esp + 0x1e0]
mov byte [esp + 0x558], 0x37
call fcn.0055b3f5
lea ecx, [esp + 0x200]
mov byte [esp + 0x558], 0x36
call fcn.0055b3f5
lea ecx, [esp + 0x220]
mov byte [esp + 0x558], 0x35
call fcn.0055b3f5
lea ecx, [esp + 0x240]
mov byte [esp + 0x558], 0x34
call fcn.0055b3f5
lea ecx, [esp + 0x260]
mov byte [esp + 0x558], 0x33
call fcn.0055b3f5
lea ecx, [esp + 0x280]
mov byte [esp + 0x558], 0x32
call fcn.0055b3f5
lea ecx, [esp + 0x2a0]
mov byte [esp + 0x558], 0x31
call fcn.0055b3f5
lea ecx, [esp + 0x2c0]
mov byte [esp + 0x558], 0x30
call fcn.0055b3f5
lea ecx, [esp + 0x2e0]
mov byte [esp + 0x558], 0x2f
call fcn.0055b3f5
lea ecx, [esp + 0x300]
mov byte [esp + 0x558], 0x2e
call fcn.0055b3f5
lea ecx, [esp + 0x320]
mov byte [esp + 0x558], 0x2d
call fcn.0055b3f5
lea ecx, [esp + 0x340]
mov byte [esp + 0x558], 0x2c
call fcn.0055b3f5
lea ecx, [esp + 0x360]
mov byte [esp + 0x558], 0x2b
call fcn.0055b3f5
lea ecx, [esp + 0x380]
mov byte [esp + 0x558], 0x2a
call fcn.0055b3f5
lea ecx, [esp + 0x3a0]
mov byte [esp + 0x558], 0x29
call fcn.0055b3f5
lea ecx, [esp + 0x3c0]
mov byte [esp + 0x558], 0x28
call fcn.0055b3f5
lea ecx, [esp + 0x3e0]
mov byte [esp + 0x558], 0x27
call fcn.0055b3f5
lea ecx, [esp + 0x400]
mov byte [esp + 0x558], 0x26
call fcn.0055b3f5
mov byte [esp + 0x558], 0x25
lea ecx, [esp + 0x420]
call fcn.0055b3f5
lea ecx, [esp + 0x440]
mov byte [esp + 0x558], 0x24
call fcn.0055b3f5
lea ecx, [esp + 0x460]
mov byte [esp + 0x558], 0x23
call fcn.0055b3f5
lea ecx, [esp + 0x480]
mov byte [esp + 0x558], 0x22
call fcn.0055b3f5
lea ecx, [esp + 0x4a0]
mov byte [esp + 0x558], 0x21
call fcn.0055b3f5
lea ecx, [esp + 0x4c0]
mov byte [esp + 0x558], 0x20
call fcn.0055b3f5
lea ecx, [esp + 0x4e0]
mov byte [esp + 0x558], 0x1f
call fcn.0055b3f5
lea ecx, [esp + 0x500]
mov byte [esp + 0x558], 0x1e
call fcn.0055b3f5
lea ecx, [esp + 0x520]
mov byte [esp + 0x558], 0x1d
call fcn.0055b3f5
lea ecx, [esp + 0x48]
mov byte [esp + 0x558], 0x1c
call fcn.0058df3f
lea ecx, [esp + 0x44]
mov byte [esp + 0x558], 0x1b
call fcn.0058df3f
lea ecx, [esp + 0x14]
mov byte [esp + 0x558], 0x1a
call fcn.0058df3f
lea ecx, [esp + 0x70]
mov byte [esp + 0x558], 0x19
call fcn.0058df3f
lea ecx, [esp + 0x1c]
mov byte [esp + 0x558], 0x18
call fcn.0058df3f
lea ecx, [esp + 0x50]
mov byte [esp + 0x558], 0x17
call fcn.0058df3f
lea ecx, [esp + 0x24]
mov byte [esp + 0x558], 0x16
call fcn.0058df3f
lea ecx, [esp + 0x68]
mov byte [esp + 0x558], 0x15
call fcn.0058df3f
lea ecx, [esp + 0x2c]
mov byte [esp + 0x558], 0x14
call fcn.0058df3f
lea ecx, [esp + 0x58]
mov byte [esp + 0x558], 0x13
call fcn.0058df3f
lea ecx, [esp + 0x34]
mov byte [esp + 0x558], 0x12
call fcn.0058df3f
lea ecx, [esp + 0x78]
mov byte [esp + 0x558], 0x11
call fcn.0058df3f
lea ecx, [esp + 0x3c]
mov byte [esp + 0x558], 0x10
call fcn.0058df3f
lea ecx, [esp + 0x60]
mov byte [esp + 0x558], 0xf
call fcn.0058df3f
lea ecx, [esp + 8]
mov byte [esp + 0x558], 0xe
call fcn.0058df3f
lea ecx, [esp + 0xc]
mov byte [esp + 0x558], 0xd
call fcn.0058df3f
lea ecx, [esp + 0x10]
mov byte [esp + 0x558], 0xc
call fcn.0058df3f
lea ecx, [esp + 0x18]
mov byte [esp + 0x558], 0xb
call fcn.0058df3f
mov byte [esp + 0x558], 0xa
lea ecx, [esp + 0x20]
call fcn.0058df3f
lea ecx, [esp + 0x28]
mov byte [esp + 0x558], 9
call fcn.0058df3f
lea ecx, [esp + 0x30]
mov byte [esp + 0x558], 8
call fcn.0058df3f
lea ecx, [esp + 0x38]
mov byte [esp + 0x558], 7
call fcn.0058df3f
lea ecx, [esp + 0x40]
mov byte [esp + 0x558], 6
call fcn.0058df3f
lea ecx, [esp + 0x4c]
mov byte [esp + 0x558], 5
call fcn.0058df3f
lea ecx, [esp + 0x54]
mov byte [esp + 0x558], 4
call fcn.0058df3f
lea ecx, [esp + 0x5c]
mov byte [esp + 0x558], 3
call fcn.0058df3f
lea ecx, [esp + 0x64]
mov byte [esp + 0x558], 2
call fcn.0058df3f
lea ecx, [esp + 0x6c]
mov byte [esp + 0x558], 1
call fcn.0058df3f
lea ecx, [esp + 0x74]
mov byte [esp + 0x558], 0
call fcn.0058df3f
lea ecx, [esp + 0x7c]
mov dword [esp + 0x558], 0xffffffff
call fcn.0058df3f
mov ecx, dword [esp + 0x550]
xor al, al
pop edi
mov dword fs:[0], ecx
add esp, 0x558
ret