Function at 0x49d590
Capabilities:
Check os version
Contain obfuscated stackstrings
Encode data using base64
Enumerate pe sections
Get graphical window text
Get process heap flags
Get process heap force flags
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x5baeca
push eax
mov dword fs:[0], esp
mov eax, dword [esp + 0x10]
sub esp, 0x314
push ebx
push ebp
push esi
push edi
xor edi, edi
mov esi, ecx
cmp eax, edi
jne 0x49d612
mov eax, dword [0x63b4a0]
mov dword [esp + 0x40], eax
lea ecx, [esp + 0x40]
mov dword [esp + 0x32c], edi
push ecx
lea ecx, [esi + 0xe6c]
call fcn.0058f654
mov edx, dword [esp + 0x40]
push edx
call fcn.00568b8c
add esp, 4
cmp eax, edi
mov dword [esp + 0x334], eax
jne 0x49d5fe
mov dword [esp + 0x334], 1
lea ecx, [esp + 0x40]
mov dword [esp + 0x32c], 0xffffffff
call fcn.0058df3f
mov eax, dword [esi + 0x1608]
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
push edi
push 9
push 0x110a
push eax
call ebx
lea ecx, [esi + 0x15ec]
push eax
call fcn.0058a28a
mov ebp, eax
mov eax, dword [0x63b4a0]
mov dword [esp + 0x100], eax
mov dword [esp + 0x32c], 1
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0xf8], eax
mov dword [esp + 0xf0], eax
mov dword [esp + 0xe8], eax
mov dword [esp + 0xe0], eax
mov dword [esp + 0xd8], eax
mov dword [esp + 0xd0], eax
mov dword [esp + 0xc8], eax
mov dword [esp + 0xc0], eax
mov dword [esp + 0xb8], eax
mov dword [esp + 0xb0], eax
mov dword [esp + 0x90], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0x12c], eax
mov dword [esp + 0xec], eax
mov dword [esp + 0x10c], eax
mov dword [esp + 0xe4], eax
mov dword [esp + 0x11c], eax
mov dword [esp + 0x150], eax
mov dword [esp + 0x134], eax
mov dword [esp + 0xdc], eax
lea ecx, [esp + 0x2f4]
mov byte [esp + 0x32c], 0x19
call fcn.0055b385
lea ecx, [esp + 0x2d4]
mov byte [esp + 0x32c], 0x1a
call fcn.0055b385
lea ecx, [esp + 0x2b4]
mov byte [esp + 0x32c], 0x1b
call fcn.0055b385
lea ecx, [esp + 0x2e4]
mov byte [esp + 0x32c], 0x1c
call fcn.0055b385
mov byte [esp + 0x32c], 0x1d
lea ecx, [esp + 0x2a4]
call fcn.0055b385
lea ecx, [esp + 0x2c4]
mov byte [esp + 0x32c], 0x1e
call fcn.0055b385
lea ecx, [esp + 0x314]
mov byte [esp + 0x32c], 0x1f
call fcn.0055b385
lea ecx, [esp + 0x304]
mov byte [esp + 0x32c], 0x20
call fcn.0055b385
lea ecx, [esp + 0x184]
mov byte [esp + 0x32c], 0x21
call fcn.0055b385
lea ecx, [esp + 0x174]
mov byte [esp + 0x32c], 0x22
call fcn.0055b385
mov ecx, dword [esi + 0x12d4]
push edi
push edi
push 0x1009
push ecx
mov byte [esp + 0x33c], 0x23
call ebx
mov edx, dword [0x64a740]
lea ecx, [esp + 0x194]
push edx
mov dword [esp + 0xd8], edi
call fcn.00557aba
mov eax, dword [0x63b4a0]
mov dword [esp + 0x20], eax
mov dword [esp + 0x7c], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x80], eax
mov dword [esp + 0x88], eax
mov dword [esp + 0x70], eax
lea ecx, [esp + 0x164]
mov byte [esp + 0x32c], 0x2a
call fcn.0055b385
lea eax, [esp + 0x138]
mov byte [esp + 0x32c], 0x2b
push eax
call fcn.0058766b
mov ecx, dword [eax]
mov eax, dword [0x63b4a0]
mov dword [esp + 0x38], ecx
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov dword [esp + 0x84], eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xac], eax
lea edx, [esp + 0x20]
lea ecx, [esi + 0x1574]
push edx
mov byte [esp + 0x330], 0x3a
mov dword [esp + 0x13c], ecx
call fcn.0058f654
lea ecx, [esp + 0x20]
call fcn.005887be
lea ecx, [esp + 0x20]
call fcn.005886c7
push 0x618528
push 0x618524
lea ecx, [esp + 0x28]
call fcn.00587da8
mov eax, dword [esp + 0x20]
push 0x645010
push eax
call fcn.00568a52
add esp, 8
test eax, eax
jne 0x49e69c
push str._11_
lea ecx, [esp + 0x18]
call fcn.0058e0c8
cmp dword [0x651cb4], 0xf
jne 0x49e969
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.BIRTHDAYWARNING
call fcn.0058dfad
push ecx
mov byte [esp + 0x334], 0x3b
mov ecx, esp
mov dword [esp + 0x20], esp
push str.SoftwarePhoneAssist
call fcn.0058dfad
push reloc.WSOCK32.dll_accept
mov byte [esp + 0x338], 0x3a
call fcn.0048a630
add esp, 0xc
cmp eax, edi
jl 0x49e969
lea ecx, [esp + 0x10]
push ecx
call fcn.0058766b
mov edx, dword [eax]
push ecx
mov eax, esp
mov dword [esp + 0x108], edx
mov dword [esp + 0x14], esp
lea ecx, [esp + 0x108]
mov dword [eax], 0x15180
lea eax, [esp + 0x14]
push eax
call fcn.004690a0
mov ecx, dword [eax]
lea edx, [esp + 0x10]
push ecx
mov dword [esp + 0x11c], ecx
mov eax, esp
mov dword [esp + 0x14], esp
push edx
lea ecx, [esp + 0x120]
mov dword [eax], 0x15180
call fcn.004690a0
mov eax, dword [eax]
push ecx
mov dword [esp + 0x124], eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], esp
mov eax, esp
push ecx
lea ecx, [esp + 0x128]
mov dword [eax], 0x15180
call fcn.004690a0
mov edx, dword [eax]
push ecx
mov eax, esp
mov dword [esp + 0x12c], edx
mov dword [esp + 0x14], esp
lea ecx, [esp + 0x12c]
mov dword [eax], 0x15180
lea eax, [esp + 0x14]
push eax
call fcn.004690a0
mov ecx, dword [eax]
lea edx, [esp + 0x10]
push ecx
mov dword [esp + 0x134], ecx
mov eax, esp
mov dword [esp + 0x14], esp
push edx
lea ecx, [esp + 0x138]
mov dword [eax], 0x15180
call fcn.004690a0
mov eax, dword [eax]
push ecx
mov dword [esp + 0xb8], eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], esp
mov eax, esp
push ecx
lea ecx, [esp + 0xbc]
mov dword [eax], 0x15180
call fcn.004690a0
mov edx, dword [eax]
push ecx
mov eax, esp
mov dword [esp + 0x10c], edx
mov dword [esp + 0x14], esp
lea ecx, [esp + 0x10c]
mov dword [eax], 0x15180
lea eax, [esp + 0x14]
push eax
call fcn.004690a0
mov ecx, dword [eax]
lea edx, [esp + 0x10]
push ecx
mov dword [esp + 0xf8], ecx
mov eax, esp
mov dword [esp + 0x14], esp
push edx
mov dword [eax], 0x15180
lea ecx, [esp + 0xfc]
call fcn.004690a0
mov eax, dword [eax]
push ecx
mov dword [esp + 0xc0], eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], esp
mov eax, esp
push ecx
lea ecx, [esp + 0xc4]
mov dword [eax], 0x15180
call fcn.004690a0
mov edx, dword [eax]
push ecx
mov eax, esp
mov dword [esp + 0x118], edx
mov dword [esp + 0x14], esp
lea ecx, [esp + 0x118]
mov dword [eax], 0x15180
lea eax, [esp + 0x14]
push eax
call fcn.004690a0
mov ecx, dword [eax]
lea edx, [esp + 0x10]
push ecx
mov dword [esp + 0xc8], ecx
mov eax, esp
mov dword [esp + 0x14], esp
push edx
lea ecx, [esp + 0xcc]
mov dword [eax], 0x15180
call fcn.004690a0
mov eax, dword [eax]
push ecx
mov dword [esp + 0x100], eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], esp
mov eax, esp
push ecx
lea ecx, [esp + 0x104]
mov dword [eax], 0x15180
call fcn.004690a0
mov edx, dword [eax]
push ecx
mov eax, esp
mov dword [esp + 0xd0], edx
mov dword [esp + 0x14], esp
lea ecx, [esp + 0xd0]
mov dword [eax], 0x15180
lea eax, [esp + 0x14]
push eax
call fcn.004690a0
mov ecx, dword [eax]
lea edx, [esp + 0x10]
push ecx
mov dword [esp + 0x128], ecx
mov eax, esp
mov dword [esp + 0x14], esp
push edx
lea ecx, [esp + 0x12c]
mov dword [eax], 0x15180
call fcn.004690a0
mov eax, dword [eax]
push 0
lea ecx, [esp + 0x108]
mov dword [esp + 0x140], eax
call fcn.005876aa
mov edi, dword [eax + 0xc]
push 0
lea ecx, [esp + 0x108]
call fcn.005876aa
mov eax, dword [eax + 0x10]
push edi
inc eax
lea ecx, [esp + 0x48]
push eax
push str.birthday_02d__02d
push ecx
call fcn.00588507
add esp, 0x10
push 0
lea ecx, [esp + 0x11c]
call fcn.005876aa
mov edi, dword [eax + 0xc]
push 0
lea ecx, [esp + 0x11c]
call fcn.005876aa
mov eax, dword [eax + 0x10]
push edi
inc eax
lea edx, [esp + 0x4c]
push eax
push str.birthday_02d__02d
push edx
call fcn.00588507
add esp, 0x10
lea ecx, [esp + 0x120]
push 0
call fcn.005876aa
mov edi, dword [eax + 0xc]
push 0
lea ecx, [esp + 0x124]
call fcn.005876aa
mov eax, dword [eax + 0x10]
push edi
inc eax
push eax
lea eax, [esp + 0x58]
push str.birthday_02d__02d
push eax
call fcn.00588507
add esp, 0x10
lea ecx, [esp + 0x128]
push 0
call fcn.005876aa
mov edi, dword [eax + 0xc]
push 0
lea ecx, [esp + 0x12c]
call fcn.005876aa
mov eax, dword [eax + 0x10]
push edi
inc eax
lea ecx, [esp + 0x58]
push eax
push str.birthday_02d__02d
push ecx
call fcn.00588507
add esp, 0x10
lea ecx, [esp + 0x130]
push 0
call fcn.005876aa
mov edi, dword [eax + 0xc]
push 0
lea ecx, [esp + 0x134]
call fcn.005876aa
mov eax, dword [eax + 0x10]
push edi
inc eax
lea edx, [esp + 0x5c]
push eax
push str.birthday_02d__02d
push edx
call fcn.00588507
add esp, 0x10
lea ecx, [esp + 0xb4]
push 0
call fcn.005876aa
mov edi, dword [eax + 0xc]
push 0
lea ecx, [esp + 0xb8]
call fcn.005876aa
mov eax, dword [eax + 0x10]
push edi
inc eax
push eax
lea eax, [esp + 0x64]
push str.birthday_02d__02d
push eax
call fcn.00588507
add esp, 0x10
lea ecx, [esp + 0x108]
push 0
call fcn.005876aa
mov edi, dword [eax + 0xc]
push 0
lea ecx, [esp + 0x10c]
call fcn.005876aa
mov eax, dword [eax + 0x10]
push edi
inc eax
lea ecx, [esp + 0x64]
push eax
push str.birthday_02d__02d
push ecx
call fcn.00588507
add esp, 0x10
lea ecx, [esp + 0xf4]
push 0
call fcn.005876aa
mov edi, dword [eax + 0xc]
push 0
lea ecx, [esp + 0xf8]
call fcn.005876aa
mov eax, dword [eax + 0x10]
push edi
inc eax
lea edx, [esp + 0x6c]
push eax
push str.birthday_02d__02d
push edx
call fcn.00588507
add esp, 0x10
lea ecx, [esp + 0xbc]
push 0
call fcn.005876aa
mov edi, dword [eax + 0xc]
push 0
lea ecx, [esp + 0xc0]
call fcn.005876aa
mov eax, dword [eax + 0x10]
push edi
inc eax
push eax
lea eax, [esp + 0x74]
push str.birthday_02d__02d
push eax
call fcn.00588507
add esp, 0x10
lea ecx, [esp + 0x114]
push 0
call fcn.005876aa
mov edi, dword [eax + 0xc]
push 0
lea ecx, [esp + 0x118]
call fcn.005876aa
mov eax, dword [eax + 0x10]
push edi
inc eax
lea ecx, [esp + 0x78]
push eax
push str.birthday_02d__02d
push ecx
call fcn.00588507
add esp, 0x10
lea ecx, [esp + 0xc4]
push 0
call fcn.005876aa
mov edi, dword [eax + 0xc]
push 0
lea ecx, [esp + 0xc8]
call fcn.005876aa
mov eax, dword [eax + 0x10]
push edi
inc eax
lea edx, [esp + 0x7c]
push eax
push str.birthday_02d__02d
push edx
call fcn.00588507
add esp, 0x10
lea ecx, [esp + 0xfc]
push 0
call fcn.005876aa
mov edi, dword [eax + 0xc]
push 0
lea ecx, [esp + 0x100]
call fcn.005876aa
mov eax, dword [eax + 0x10]
push edi
inc eax
push eax
lea eax, [esp + 0x8c]
push str.birthday_02d__02d
push eax
call fcn.00588507
add esp, 0x10
lea ecx, [esp + 0xcc]
push 0
call fcn.005876aa
mov edi, dword [eax + 0xc]
push 0
lea ecx, [esp + 0xd0]
call fcn.005876aa
mov eax, dword [eax + 0x10]
push edi
inc eax
lea ecx, [esp + 0x90]
push eax
push str.birthday_02d__02d
push ecx
call fcn.00588507
add esp, 0x10
lea ecx, [esp + 0x124]
push 0
call fcn.005876aa
mov edi, dword [eax + 0xc]
push 0
lea ecx, [esp + 0x128]
call fcn.005876aa
mov eax, dword [eax + 0x10]
push edi
inc eax
lea edx, [esp + 0xa4]
push eax
push str.birthday_02d__02d
push edx
call fcn.00588507
add esp, 0x10
lea ecx, [esp + 0x13c]
push 0
call fcn.005876aa
mov edi, dword [eax + 0xc]
push 0
lea ecx, [esp + 0x140]
call fcn.005876aa
mov eax, dword [eax + 0x10]
push edi
inc eax
push eax
lea eax, [esp + 0xb4]
push str.birthday_02d__02d
push eax
call fcn.00588507
add esp, 0xc
mov ecx, esp
mov dword [esp + 0x14], esp
push str.BIRTHDAYWARNING
call fcn.0058dfad
push ecx
mov byte [esp + 0x334], 0x3c
mov ecx, esp
mov dword [esp + 0x20], esp
push str.SoftwarePhoneAssist
call fcn.0058dfad
push reloc.WSOCK32.dll_accept
mov byte [esp + 0x338], 0x3a
call fcn.0048a630
add esp, 0xc
test eax, eax
jne 0x49df27
mov ecx, dword [esp + 0x44]
push ecx
push 0x6303ec
lea edx, [esp + 0x1c]
push edx
call fcn.00588507
add esp, 0xc
jmp 0x49e969
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.BIRTHDAYWARNING
call fcn.0058dfad
push ecx
mov byte [esp + 0x334], 0x3d
mov ecx, esp
mov dword [esp + 0x20], esp
push str.SoftwarePhoneAssist
call fcn.0058dfad
push reloc.WSOCK32.dll_accept
mov byte [esp + 0x338], 0x3a
call fcn.0048a630
add esp, 0xc
cmp eax, 1
jne 0x49df8c
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
push eax
push ecx
lea edx, [esp + 0x1c]
push str.__s_or__s_
push edx
call fcn.00588507
add esp, 0x10
jmp 0x49e969
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.BIRTHDAYWARNING
call fcn.0058dfad
push ecx
mov byte [esp + 0x334], 0x3e
mov ecx, esp
mov dword [esp + 0x20], esp
push str.SoftwarePhoneAssist
call fcn.0058dfad
push reloc.WSOCK32.dll_accept
mov byte [esp + 0x338], 0x3a
call fcn.0048a630
add esp, 0xc
cmp eax, 2
jne 0x49dff6
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x44]
push eax
push ecx
push edx
lea eax, [esp + 0x20]
push str.__s_or__s_or__s_
push eax
call fcn.00588507
add esp, 0x14
jmp 0x49e969
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.BIRTHDAYWARNING
call fcn.0058dfad
push ecx
mov byte [esp + 0x334], 0x3f
mov ecx, esp
mov dword [esp + 0x20], esp
push str.SoftwarePhoneAssist
call fcn.0058dfad
push reloc.WSOCK32.dll_accept
mov byte [esp + 0x338], 0x3a
call fcn.0048a630
add esp, 0xc
cmp eax, 3
jne 0x49e065
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x50]
mov eax, dword [esp + 0x48]
push ecx
mov ecx, dword [esp + 0x48]
push edx
push eax
push ecx
lea edx, [esp + 0x24]
push str.__s_or__s_or__s_or__s_
push edx
call fcn.00588507
add esp, 0x18
jmp 0x49e969
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.BIRTHDAYWARNING
call fcn.0058dfad
push ecx
mov byte [esp + 0x334], 0x40
mov ecx, esp
mov dword [esp + 0x20], esp
push str.SoftwarePhoneAssist
call fcn.0058dfad
push reloc.WSOCK32.dll_accept
mov byte [esp + 0x338], 0x3a
call fcn.0048a630
add esp, 0xc
cmp eax, 4
jne 0x49e0d9
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x50]
push eax
mov eax, dword [esp + 0x4c]
push ecx
mov ecx, dword [esp + 0x4c]
push edx
push eax
push ecx
lea edx, [esp + 0x28]
push str.__s_or__s_or__s_or__s_or__s_
push edx
call fcn.00588507
add esp, 0x1c
jmp 0x49e969
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.BIRTHDAYWARNING
call fcn.0058dfad
push ecx
mov byte [esp + 0x334], 0x41
mov ecx, esp
mov dword [esp + 0x20], esp
push str.SoftwarePhoneAssist
call fcn.0058dfad
push reloc.WSOCK32.dll_accept
mov byte [esp + 0x338], 0x3a
call fcn.0048a630
add esp, 0xc
cmp eax, 5
jne 0x49e152
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x54]
push eax
mov eax, dword [esp + 0x54]
push ecx
mov ecx, dword [esp + 0x50]
push edx
mov edx, dword [esp + 0x50]
push eax
push ecx
push edx
push str.__s_or__s_or__s_or__s_or__s_or__s_
lea eax, [esp + 0x30]
push eax
call fcn.00588507
add esp, 0x20
jmp 0x49e969
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.BIRTHDAYWARNING
call fcn.0058dfad
push ecx
mov byte [esp + 0x334], 0x42
mov ecx, esp
mov dword [esp + 0x20], esp
push str.SoftwarePhoneAssist
call fcn.0058dfad
push reloc.WSOCK32.dll_accept
mov byte [esp + 0x338], 0x3a
call fcn.0048a630
add esp, 0xc
cmp eax, 6
jne 0x49e1d0
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x5c]
mov eax, dword [esp + 0x58]
push ecx
mov ecx, dword [esp + 0x58]
push edx
mov edx, dword [esp + 0x58]
push eax
mov eax, dword [esp + 0x54]
push ecx
mov ecx, dword [esp + 0x54]
push edx
push eax
push ecx
lea edx, [esp + 0x30]
push str.__s_or__s_or__s_or__s_or__s_or__s_or__s_
push edx
call fcn.00588507
add esp, 0x24
jmp 0x49e969
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.BIRTHDAYWARNING
call fcn.0058dfad
push ecx
mov byte [esp + 0x334], 0x43
mov ecx, esp
mov dword [esp + 0x20], esp
push str.SoftwarePhoneAssist
call fcn.0058dfad
push reloc.WSOCK32.dll_accept
mov byte [esp + 0x338], 0x3a
call fcn.0048a630
add esp, 0xc
cmp eax, 7
jne 0x49e253
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x5c]
push eax
mov eax, dword [esp + 0x5c]
push ecx
mov ecx, dword [esp + 0x5c]
push edx
mov edx, dword [esp + 0x5c]
push eax
mov eax, dword [esp + 0x58]
push ecx
mov ecx, dword [esp + 0x58]
push edx
push eax
push ecx
lea edx, [esp + 0x34]
push str.__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_
push edx
call fcn.00588507
add esp, 0x28
jmp 0x49e969
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.BIRTHDAYWARNING
call fcn.0058dfad
push ecx
mov byte [esp + 0x334], 0x44
mov ecx, esp
mov dword [esp + 0x20], esp
push str.SoftwarePhoneAssist
call fcn.0058dfad
push reloc.WSOCK32.dll_accept
mov byte [esp + 0x338], 0x3a
call fcn.0048a630
add esp, 0xc
cmp eax, 8
jne 0x49e2db
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x60]
push eax
mov eax, dword [esp + 0x60]
push ecx
mov ecx, dword [esp + 0x60]
push edx
mov edx, dword [esp + 0x60]
push eax
mov eax, dword [esp + 0x60]
push ecx
mov ecx, dword [esp + 0x5c]
push edx
mov edx, dword [esp + 0x5c]
push eax
push ecx
push edx
lea eax, [esp + 0x38]
push str.__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_
push eax
call fcn.00588507
add esp, 0x2c
jmp 0x49e969
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.BIRTHDAYWARNING
call fcn.0058dfad
push ecx
mov byte [esp + 0x334], 0x45
mov ecx, esp
mov dword [esp + 0x20], esp
push str.SoftwarePhoneAssist
call fcn.0058dfad
push reloc.WSOCK32.dll_accept
mov byte [esp + 0x338], 0x3a
call fcn.0048a630
add esp, 0xc
cmp eax, 9
jne 0x49e368
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x6c]
mov eax, dword [esp + 0x68]
push ecx
mov ecx, dword [esp + 0x64]
push edx
mov edx, dword [esp + 0x64]
push eax
mov eax, dword [esp + 0x64]
push ecx
mov ecx, dword [esp + 0x64]
push edx
mov edx, dword [esp + 0x64]
push eax
mov eax, dword [esp + 0x60]
push ecx
mov ecx, dword [esp + 0x60]
push edx
push eax
push ecx
lea edx, [esp + 0x3c]
push str.__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_
push edx
call fcn.00588507
add esp, 0x30
jmp 0x49e969
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.BIRTHDAYWARNING
call fcn.0058dfad
push ecx
mov byte [esp + 0x334], 0x46
mov ecx, esp
mov dword [esp + 0x20], esp
push str.SoftwarePhoneAssist
call fcn.0058dfad
push reloc.WSOCK32.dll_accept
mov byte [esp + 0x338], 0x3a
call fcn.0048a630
add esp, 0xc
cmp eax, 0xa
jne 0x49e3fa
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x6c]
push eax
mov eax, dword [esp + 0x6c]
push ecx
mov ecx, dword [esp + 0x68]
push edx
mov edx, dword [esp + 0x68]
push eax
mov eax, dword [esp + 0x68]
push ecx
mov ecx, dword [esp + 0x68]
push edx
mov edx, dword [esp + 0x68]
push eax
mov eax, dword [esp + 0x64]
push ecx
mov ecx, dword [esp + 0x64]
push edx
push eax
push ecx
lea edx, [esp + 0x40]
push str.__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s
push edx
call fcn.00588507
add esp, 0x34
jmp 0x49e969
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.BIRTHDAYWARNING
call fcn.0058dfad
push ecx
mov byte [esp + 0x334], 0x47
mov ecx, esp
mov dword [esp + 0x20], esp
push str.SoftwarePhoneAssist
call fcn.0058dfad
push reloc.WSOCK32.dll_accept
mov byte [esp + 0x338], 0x3a
call fcn.0048a630
add esp, 0xc
cmp eax, 0xb
jne 0x49e494
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
push eax
mov eax, dword [esp + 0x70]
push ecx
mov ecx, dword [esp + 0x70]
push edx
mov edx, dword [esp + 0x6c]
push eax
mov eax, dword [esp + 0x6c]
push ecx
mov ecx, dword [esp + 0x6c]
push edx
mov edx, dword [esp + 0x6c]
push eax
mov eax, dword [esp + 0x6c]
push ecx
mov ecx, dword [esp + 0x68]
push edx
mov edx, dword [esp + 0x68]
push eax
push ecx
push edx
lea eax, [esp + 0x44]
push str._where__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_
push eax
call fcn.00588507
add esp, 0x38
jmp 0x49e969
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.BIRTHDAYWARNING
call fcn.0058dfad
push ecx
mov byte [esp + 0x334], 0x48
mov ecx, esp
mov dword [esp + 0x20], esp
push str.SoftwarePhoneAssist
call fcn.0058dfad
push reloc.WSOCK32.dll_accept
mov byte [esp + 0x338], 0x3a
call fcn.0048a630
add esp, 0xc
cmp eax, 0xc
jne 0x49e536
mov ecx, dword [esp + 0x8c]
mov edx, dword [esp + 0x84]
mov eax, dword [esp + 0x78]
push ecx
mov ecx, dword [esp + 0x78]
push edx
mov edx, dword [esp + 0x74]
push eax
mov eax, dword [esp + 0x74]
push ecx
mov ecx, dword [esp + 0x70]
push edx
mov edx, dword [esp + 0x70]
push eax
mov eax, dword [esp + 0x70]
push ecx
mov ecx, dword [esp + 0x70]
push edx
mov edx, dword [esp + 0x70]
push eax
mov eax, dword [esp + 0x6c]
push ecx
mov ecx, dword [esp + 0x6c]
push edx
push eax
push ecx
lea edx, [esp + 0x48]
push str.__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_
push edx
call fcn.00588507
add esp, 0x3c
jmp 0x49e969
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.BIRTHDAYWARNING
call fcn.0058dfad
push ecx
mov byte [esp + 0x334], 0x49
mov ecx, esp
mov dword [esp + 0x20], esp
push str.SoftwarePhoneAssist
call fcn.0058dfad
push reloc.WSOCK32.dll_accept
mov byte [esp + 0x338], 0x3a
call fcn.0048a630
add esp, 0xc
cmp eax, 0xd
jne 0x49e5e0
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0x8c]
mov edx, dword [esp + 0x84]
push eax
mov eax, dword [esp + 0x7c]
push ecx
mov ecx, dword [esp + 0x7c]
push edx
mov edx, dword [esp + 0x78]
push eax
mov eax, dword [esp + 0x78]
push ecx
mov ecx, dword [esp + 0x74]
push edx
mov edx, dword [esp + 0x74]
push eax
mov eax, dword [esp + 0x74]
push ecx
mov ecx, dword [esp + 0x74]
push edx
mov edx, dword [esp + 0x74]
push eax
mov eax, dword [esp + 0x70]
push ecx
mov ecx, dword [esp + 0x70]
push edx
push eax
push ecx
lea edx, [esp + 0x4c]
push str.__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_
push edx
call fcn.00588507
add esp, 0x40
jmp 0x49e969
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.BIRTHDAYWARNING
call fcn.0058dfad
push ecx
mov byte [esp + 0x334], 0x4a
mov ecx, esp
mov dword [esp + 0x20], esp
push str.SoftwarePhoneAssist
call fcn.0058dfad
push reloc.WSOCK32.dll_accept
mov byte [esp + 0x338], 0x3a
call fcn.0048a630
add esp, 0xc
cmp eax, 0xe
jne 0x49e969
mov eax, dword [esp + 0xac]
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0x8c]
push eax
mov eax, dword [esp + 0x88]
push ecx
mov ecx, dword [esp + 0x80]
push edx
mov edx, dword [esp + 0x80]
push eax
mov eax, dword [esp + 0x7c]
push ecx
mov ecx, dword [esp + 0x7c]
push edx
mov edx, dword [esp + 0x78]
push eax
mov eax, dword [esp + 0x78]
push ecx
mov ecx, dword [esp + 0x78]
push edx
mov edx, dword [esp + 0x78]
push eax
mov eax, dword [esp + 0x78]
push ecx
mov ecx, dword [esp + 0x74]
push edx
mov edx, dword [esp + 0x74]
push eax
push ecx
push edx
lea eax, [esp + 0x50]
push str.__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_or__s_
push eax
call fcn.00588507
add esp, 0x44
jmp 0x49e969
mov al, byte [0x651ca3]
test al, al
jne 0x49e76c
cmp dword [0x645390], 2
jne 0x49e710
test dword [0x64a188], 0x40000
je 0x49e710
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0x14]
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push str.__tFirstChar_like____s___or_tName_like____s___or_tCompany_like____s___or_tBumen_like____s___or_tZhiwu_like____s___or_tShengshi_like____s___or_tShixian_like____s___or_tJiedao_like____s___or_Youbian_like____s___or_tBeizhu_like____s___or_birthday_like____s___or_tInfo1_like____s___or_tInfo2_like____s___or_tInfo3_like____s___or_tInfo4_like____s___or_tInfo5_like____s___or_tInfo6_like____s___or_tInfo7_like____s___or_tInfo8_like____s___or_tInfo9_like____s___or_tInfo10_like____s___or_Info11_like____s___or_Info12_like____s___or_Info13_like____s___or_Info14_like____s___or_Info15_like____s___or_Info16_like____s___or_Info17_like____s___or_Info18_like____s___or_Info19_like____s___or_Info20_like____s___or_Info21_like____s___or_Info22_like____s___or_Info23_like____s___or_Info24_like____s___or_Info25_like____s___or_Info26_like____s___or_Info27_like____s___or_Info28_like____s___or_Info29_like____s___or_Info30_like____s___or_Info31_like____s___or_Info32_like____s___or_Info33_like____s___or_Info34_like____s___or_Info35_like____s___or_Info36_like____s___or_Info37_like____s___or_Info38_like____s___or_Info39_like____s___or_Info40_like____s___or_Info41_like____s___
push ecx
call fcn.00588507
add esp, 0xd8
jmp 0x49e969
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x14]
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push str.__tFirstChar_like____s___or_tName_like____s___or_tCompany_like____s___or_tBumen_like____s___or_tZhiwu_like____s___or_tShangwu_like____s___or_tShouJi_like____s___or_Jiating_like____s___or_tFax_like____s___or_tOther1_like____s___or_Other2_like____s___or_QQ_like____s___or_Email_like____s___or_tMSN_like____s___or_tWeb_like____s___or_tShengshi_like____s___or_tShixian_like____s___or_tJiedao_like____s___or_Youbian_like____s___or_tBeizhu_like____s___or_birthday_like____s___or_tInfo1_like____s___or_tInfo2_like____s___or_tInfo3_like____s___or_tInfo4_like____s___or_tInfo5_like____s___or_tInfo6_like____s___or_tInfo7_like____s___or_tInfo8_like____s___or_tInfo9_like____s___or_tInfo10_like____s___or_Info11_like____s___or_Info12_like____s___or_Info13_like____s___or_Info14_like____s___or_Info15_like____s___or_Info16_like____s___or_Info17_like____s___or_Info18_like____s___or_Info19_like____s___or_Info20_like____s___or_Info21_like____s___or_Info22_like____s___or_Info23_like____s___or_Info24_like____s___or_Info25_like____s___or_Info26_like____s___or_Info27_like____s___or_Info28_like____s___or_Info29_like____s___or_Info30_like____s___or_Info31_like____s___or_Info32_like____s___or_Info33_like____s___or_Info34_like____s___or_Info35_like____s___or_Info36_like____s___or_Info37_like____s___or_Info38_like____s___or_Info39_like____s___or_Info40_like____s___or_Info41_like____s___
push edx
call fcn.00588507
add esp, 0x100
jmp 0x49e969
mov eax, dword [0x651cb4]
cmp eax, 1
jne 0x49e793
mov eax, dword [esp + 0x20]
push eax
push eax
lea eax, [esp + 0x1c]
push str._FirstChar_like____s___or_Name_like____s___
push eax
call fcn.00588507
add esp, 0x10
jmp 0x49e969
cmp eax, 2
jne 0x49e7a7
mov ecx, dword [esp + 0x20]
push ecx
push str._Company_like____s___
jmp 0x49df15
cmp eax, 3
jne 0x49e7c8
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0x14]
push eax
push str._Bumen_like____s___
push ecx
call fcn.00588507
add esp, 0xc
jmp 0x49e969
cmp eax, 4
jne 0x49e7e9
mov edx, dword [esp + 0x20]
lea eax, [esp + 0x14]
push edx
push str._Zhiwu_like____s___
push eax
call fcn.00588507
add esp, 0xc
jmp 0x49e969
cmp eax, 5
jne 0x49e7fd
mov ecx, dword [esp + 0x20]
push ecx
push str._Youbian_like____s___
jmp 0x49df15
cmp eax, 6
jne 0x49e81e
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0x14]
push eax
push str._Shengshi_like____s___
push ecx
call fcn.00588507
add esp, 0xc
jmp 0x49e969
cmp eax, 7
jne 0x49e83f
mov edx, dword [esp + 0x20]
lea eax, [esp + 0x14]
push edx
push str._Shixian_like____s___
push eax
call fcn.00588507
add esp, 0xc
jmp 0x49e969
cmp eax, 8
jne 0x49e853
mov ecx, dword [esp + 0x20]
push ecx
push str._Jiedao_like____s___
jmp 0x49df15
cmp eax, 9
jne 0x49e86c
mov eax, dword [esp + 0x20]
push eax
push eax
push eax
push eax
push eax
push eax
push str._Shangwu_like____s___or_ShouJi_like____s___or_Jiating_like____s___or_Fax_like____s___or_Other1_like____s___or_Other2_like____s___
jmp 0x49e140
cmp eax, 0xa
jne 0x49e880
mov ecx, dword [esp + 0x20]
push ecx
push str._MSN_like____s___
jmp 0x49df15
cmp eax, 0xb
jne 0x49e8a1
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0x14]
push eax
push str._QQ_like____s___
push ecx
call fcn.00588507
add esp, 0xc
jmp 0x49e969
cmp eax, 0xc
jne 0x49e8c2
mov edx, dword [esp + 0x20]
lea eax, [esp + 0x14]
push edx
push str._Email_like____s___
push eax
call fcn.00588507
add esp, 0xc
jmp 0x49e969
cmp eax, 0xd
jne 0x49e8d6
mov ecx, dword [esp + 0x20]
push ecx
push str._Web_like____s___
jmp 0x49df15
cmp eax, 0xe
jne 0x49e8f4
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0x14]
push eax
push str._Beizhu_like____s___
push ecx
call fcn.00588507
add esp, 0xc
jmp 0x49e969
cmp eax, 0xf
jne 0x49e912
mov edx, dword [esp + 0x20]
lea eax, [esp + 0x14]
push edx
push str._birthday_like____s___
push eax
call fcn.00588507
add esp, 0xc
jmp 0x49e969
cmp eax, 0x10
jne 0x49e95b
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0x14]
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push str.__tInfo1_like____s___or_tInfo2_like____s___or_tInfo3_like____s___or_tInfo4_like____s___or_tInfo5_like____s___or_tInfo6_like____s___or_tInfo7_like____s___or_tInfo8_like____s___or_tInfo9_like____s___or_tInfo10_like____s___or_Info11_like____s___or_Info12_like____s___or_Info13_like____s___or_Info14_like____s___or_Info15_like____s___or_Info16_like____s___or_Info17_like____s___or_Info18_like____s___or_Info19_like____s___or_Info20_like____s___or_Info21_like____s___or_Info22_like____s___or_Info23_like____s___or_Info24_like____s___or_Info25_like____s___or_Info26_like____s___or_Info27_like____s___or_Info28_like____s___or_Info29_like____s___or_Info30_like____s___or_Info31_like____s___or_Info32_like____s___or_Info33_like____s___or_Info34_like____s___or_Info35_like____s___or_Info36_like____s___or_Info37_like____s___or_Info38_like____s___or_Info39_like____s___or_Info40_like____s___or_Info41_like____s___
push ecx
call fcn.00588507
add esp, 0xac
jmp 0x49e969
push str._11_
lea ecx, [esp + 0x18]
call fcn.0058e0c8
push 0x6197c0
push ebp
call fcn.00574e80
add esp, 8
test eax, eax
jne 0x49e9c9
mov edx, dword [esi + 0x1608]
push eax
push eax
push 0x110a
push edx
call ebx
mov edi, eax
mov eax, dword [esi + 0x1608]
push 0
push 9
push 0x110a
push eax
call ebx
cmp edi, eax
jne 0x49e9b6
push str._11_
lea ecx, [esp + 0x80]
call fcn.0058e0c8
jmp 0x49e9e0
push str._Leibie0_
lea ecx, [esp + 0x80]
call fcn.0058e0c8
jmp 0x49e9e0
push ebp
push ebp
lea ecx, [esp + 0x84]
push str._Leibie_like__s___or_Leibie2_like__s___
push ecx
call fcn.00588507
add esp, 0x10
mov edx, dword [esi + 0x780]
push 0
push 0
push 0x147
push edx
call ebx
cmp eax, 1
jl 0x49ebdf
mov eax, dword [esi + 0x780]
push 0
push 0
push 0x147
push eax
call ebx
cmp eax, 6
jg 0x49ebdf
mov ecx, dword [esi + 0x780]
push 0
push 0
push 0x147
push ecx
call ebx
cmp eax, 1
push 0
push 0
jne 0x49ea62
push 0
push 7
lea ecx, [esp + 0x20]
call fcn.004a09e0
mov edx, dword [eax]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
lea eax, [esp + 0x38]
mov dword [ecx], edx
push eax
lea ecx, [esp + 0x40]
call fcn.00403b10
mov ecx, dword [eax]
mov dword [esp + 0x1c], ecx
jmp 0x49eb88
mov edx, dword [esi + 0x780]
push 0x147
push edx
call ebx
cmp eax, 2
push 0
push 0
jne 0x49ea9a
push 0
push 0xf
lea ecx, [esp + 0x20]
call fcn.004a09e0
mov eax, dword [eax]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
mov dword [ecx], eax
lea ecx, [esp + 0x38]
jmp 0x49eb78
mov eax, dword [esi + 0x780]
push 0x147
push eax
call ebx
cmp eax, 3
push 0
push 0
jne 0x49ead2
push 0
push 0x1e
lea ecx, [esp + 0x20]
call fcn.004a09e0
mov edx, dword [eax]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
lea eax, [esp + 0x38]
mov dword [ecx], edx
jmp 0x49ea4d
mov edx, dword [esi + 0x780]
push 0x147
push edx
call ebx
cmp eax, 4
push 0
push 0
jne 0x49eb07
push 0
push 0x5a
lea ecx, [esp + 0x20]
call fcn.004a09e0
mov eax, dword [eax]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
mov dword [ecx], eax
lea ecx, [esp + 0x38]
jmp 0x49eb78
mov eax, dword [esi + 0x780]
push 0x147
push eax
call ebx
cmp eax, 5
push 0
push 0
jne 0x49eb42
push 0
push 0xb4
lea ecx, [esp + 0x20]
call fcn.004a09e0
mov edx, dword [eax]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
lea eax, [esp + 0x38]
mov dword [ecx], edx
jmp 0x49ea4d
mov edx, dword [esi + 0x780]
push 0x147
push edx
call ebx
cmp eax, 6
jne 0x49eb88
push 0
push 0
push 0
push 0x16d
lea ecx, [esp + 0x20]
call fcn.004a09e0
mov eax, dword [eax]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
mov dword [ecx], eax
lea ecx, [esp + 0x38]
push ecx
lea ecx, [esp + 0x40]
call fcn.00403b10
mov edx, dword [eax]
mov dword [esp + 0x1c], edx
push 0
lea ecx, [esp + 0x20]
call fcn.005876aa
mov ebp, dword [eax + 0xc]
push 0
lea ecx, [esp + 0x20]
call fcn.005876aa
mov edi, dword [eax + 0x10]
push 0
lea ecx, [esp + 0x20]
inc edi
call fcn.005876aa
mov eax, dword [eax + 0x14]
push 0x61857c
add eax, 0x76c
push ebp
push edi
push eax
push 0x61857c
lea eax, [esp + 0x94]
push str._LastCallDT__s_d__02d__02d_00:00:00_s_
push eax
call fcn.00588507
add esp, 0x1c
jmp 0x49ee0c
mov ecx, dword [esi + 0x780]
push 0
push 0
push 0x147
push ecx
call ebx
cmp eax, 7
jl 0x49edfb
mov edx, dword [esi + 0x780]
push 0
push 0
push 0x147
push edx
call ebx
cmp eax, 0xd
jg 0x49edfb
mov eax, dword [esi + 0x780]
push 0
push 0
push 0x147
push eax
call ebx
cmp eax, 7
jne 0x49ec35
mov ecx, dword [esp + 0x38]
jmp 0x49eda3
mov edx, dword [esi + 0x780]
push 0
push 0
push 0x147
push edx
call ebx
cmp eax, 8
push 0
push 0
jne 0x49ec81
push 0
push 7
lea ecx, [esp + 0x20]
call fcn.004a09e0
mov eax, dword [eax]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
mov dword [ecx], eax
lea ecx, [esp + 0x38]
push ecx
lea ecx, [esp + 0x40]
call fcn.00403b10
mov edx, dword [eax]
mov dword [esp + 0x1c], edx
jmp 0x49eda7
mov eax, dword [esi + 0x780]
push 0x147
push eax
call ebx
cmp eax, 9
push 0
push 0
jne 0x49ecb9
push 0
push 0xf
lea ecx, [esp + 0x20]
call fcn.004a09e0
mov edx, dword [eax]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
lea eax, [esp + 0x38]
mov dword [ecx], edx
jmp 0x49ed97
mov edx, dword [esi + 0x780]
push 0x147
push edx
call ebx
cmp eax, 0xa
push 0
push 0
jne 0x49ecf1
push 0
push 0x1e
lea ecx, [esp + 0x20]
call fcn.004a09e0
mov eax, dword [eax]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
mov dword [ecx], eax
lea ecx, [esp + 0x38]
jmp 0x49ec6c
mov eax, dword [esi + 0x780]
push 0x147
push eax
call ebx
cmp eax, 0xb
push 0
push 0
jne 0x49ed26
push 0
push 0x5a
lea ecx, [esp + 0x20]
call fcn.004a09e0
mov edx, dword [eax]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
lea eax, [esp + 0x38]
mov dword [ecx], edx
jmp 0x49ed97
mov edx, dword [esi + 0x780]
push 0x147
push edx
call ebx
cmp eax, 0xc
push 0
push 0
jne 0x49ed61
push 0
push 0xb4
lea ecx, [esp + 0x20]
call fcn.004a09e0
mov eax, dword [eax]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
mov dword [ecx], eax
lea ecx, [esp + 0x38]
jmp 0x49ec6c
mov eax, dword [esi + 0x780]
push 0x147
push eax
call ebx
cmp eax, 0xd
jne 0x49eda7
push 0
push 0
push 0
push 0x16d
lea ecx, [esp + 0x20]
call fcn.004a09e0
mov edx, dword [eax]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
lea eax, [esp + 0x38]
mov dword [ecx], edx
push eax
lea ecx, [esp + 0x40]
call fcn.00403b10
mov ecx, dword [eax]
mov dword [esp + 0x1c], ecx
push 0
lea ecx, [esp + 0x20]
call fcn.005876aa
mov ebp, dword [eax + 0xc]
push 0
lea ecx, [esp + 0x20]
call fcn.005876aa
mov edi, dword [eax + 0x10]
push 0
lea ecx, [esp + 0x20]
inc edi
call fcn.005876aa
mov eax, dword [eax + 0x14]
push 0x61857c
add eax, 0x76c
push ebp
push edi
push eax
push 0x61857c
lea edx, [esp + 0x94]
push 0x62f024
push edx
call fcn.00588507
add esp, 0x1c
jmp 0x49ee0c
push str._11_
lea ecx, [esp + 0x84]
call fcn.0058e0c8
mov eax, dword [esi + 0x744]
push 0
push 0
push 0x147
push eax
call ebx
cmp eax, 1
jl 0x49f027
mov ecx, dword [esi + 0x744]
push 0
push 0
push 0x147
push ecx
call ebx
cmp eax, 7
jg 0x49f027
mov edx, dword [esi + 0x744]
push 0
push 0
push 0x147
push edx
call ebx
cmp eax, 1
jne 0x49ee61
mov eax, dword [esp + 0x38]
mov dword [esp + 0x1c], eax
mov ecx, dword [esi + 0x744]
push 0
push 0
push 0x147
push ecx
call ebx
cmp eax, 2
push 0
push 0
jne 0x49eead
push 0
push 7
lea ecx, [esp + 0x20]
call fcn.004a09e0
mov edx, dword [eax]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
lea eax, [esp + 0x38]
mov dword [ecx], edx
push eax
lea ecx, [esp + 0x40]
call fcn.00403b10
mov ecx, dword [eax]
mov dword [esp + 0x1c], ecx
jmp 0x49efd3
mov edx, dword [esi + 0x744]
push 0x147
push edx
call ebx
cmp eax, 3
push 0
push 0
jne 0x49eee5
push 0
push 0xf
lea ecx, [esp + 0x20]
call fcn.004a09e0
mov eax, dword [eax]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
mov dword [ecx], eax
lea ecx, [esp + 0x38]
jmp 0x49efc3
mov eax, dword [esi + 0x744]
push 0x147
push eax
call ebx
cmp eax, 4
push 0
push 0
jne 0x49ef1d
push 0
push 0x1e
lea ecx, [esp + 0x20]
call fcn.004a09e0
mov edx, dword [eax]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
lea eax, [esp + 0x38]
mov dword [ecx], edx
jmp 0x49ee98
mov edx, dword [esi + 0x744]
push 0x147
push edx
call ebx
cmp eax, 5
push 0
push 0
jne 0x49ef52
push 0
push 0x5a
lea ecx, [esp + 0x20]
call fcn.004a09e0
mov eax, dword [eax]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
mov dword [ecx], eax
lea ecx, [esp + 0x38]
jmp 0x49efc3
mov eax, dword [esi + 0x744]
push 0x147
push eax
call ebx
cmp eax, 6
push 0
push 0
jne 0x49ef8d
push 0
push 0xb4
lea ecx, [esp + 0x20]
call fcn.004a09e0
mov edx, dword [eax]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
lea eax, [esp + 0x38]
mov dword [ecx], edx
jmp 0x49ee98
mov edx, dword [esi + 0x744]
push 0x147
push edx
call ebx
cmp eax, 7
jne 0x49efd3
push 0
push 0
push 0
push 0x16d
lea ecx, [esp + 0x20]
call fcn.004a09e0
mov eax, dword [eax]
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
mov dword [ecx], eax
lea ecx, [esp + 0x38]
push ecx
lea ecx, [esp + 0x40]
call fcn.00403b10
mov edx, dword [eax]
mov dword [esp + 0x1c], edx
push 0
lea ecx, [esp + 0x20]
call fcn.005876aa
mov ebp, dword [eax + 0xc]
push 0
lea ecx, [esp + 0x20]
call fcn.005876aa
mov edi, dword [eax + 0x10]
push 0
lea ecx, [esp + 0x20]
inc edi
call fcn.005876aa
mov eax, dword [eax + 0x14]
push 0x61857c
add eax, 0x76c
push ebp
push edi
push eax
push 0x61857c
lea eax, [esp + 0x9c]
push str._LastDT__s_d__02d__02d_00:00:00_s_
push eax
call fcn.00588507
add esp, 0x1c
jmp 0x49f038
push str._11_
lea ecx, [esp + 0x8c]
call fcn.0058e0c8
push 0x645010
lea ecx, [esp + 0x74]
call fcn.0058e0c8
mov ecx, dword [esi + 0x654]
push 0
push 0
push 0x147
push ecx
call ebx
cmp eax, 1
jne 0x49f096
mov edi, eax
cmp edi, eax
jne 0x49f076
mov edx, dword [esp + 0x70]
push 1
push edx
lea eax, [esp + 0x78]
push str._sShareToChannel_d0
push eax
jmp 0x49f086
mov ecx, dword [esp + 0x70]
push edi
push ecx
lea edx, [esp + 0x78]
push str._sShareToChannel_d0_and
push edx
call fcn.00588507
add esp, 0x10
inc edi
cmp edi, 1
jle 0x49f061
jmp 0x49f0fa
mov eax, dword [esi + 0x654]
push 0
push 0
push 0x147
push eax
call ebx
cmp eax, 2
jl 0x49f0ec
mov ecx, dword [esi + 0x654]
push 0
push 0
push 0x147
push ecx
call ebx
cmp eax, 2
jg 0x49f0ec
mov edx, dword [esi + 0x654]
push 0
push 0
push 0x147
push edx
call ebx
dec eax
push eax
lea eax, [esp + 0x74]
push str._ShareToChannel_d1_
push eax
call fcn.00588507
add esp, 0xc
jmp 0x49f0fa
push str._11_
lea ecx, [esp + 0x74]
call fcn.0058e0c8
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0x80]
mov eax, dword [esp + 0x14]
push ecx
mov ecx, dword [esp + 0x80]
push edx
push eax
push ecx
lea edx, [esp + 0x110]
push str.select_count___as_val_count_from_Contact_where__s_and__s_and__s_and__s
push edx
call fcn.00588507
mov eax, dword [0x650774]
push 0x645010
push eax
call fcn.00568a52
add esp, 0x20
test eax, eax
jne 0x49f191
mov eax, dword [0x650778]
mov ecx, dword [0x65077c]
mov edx, dword [esp + 0x88]
mov ebp, dword [esp + 0x334]
push eax
mov eax, dword [esp + 0x84]
push ecx
push edx
push eax
mov eax, dword [0x628344]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x8c]
imul eax, ebp
push ecx
push edx
push eax
lea ecx, [esp + 0xc0]
push str.select_top__d__from_Contact_where__s_and__s_and__s_and__s_order_by__s__s
push ecx
call fcn.00588507
add esp, 0x24
jmp 0x49f1ef
mov edx, dword [0x650770]
mov eax, dword [0x650774]
mov ecx, dword [0x650778]
mov ebp, dword [esp + 0x334]
push edx
mov edx, dword [0x65077c]
push eax
mov eax, dword [esp + 0x90]
push ecx
mov ecx, dword [esp + 0x8c]
push edx
push eax
push ecx
mov ecx, dword [0x628344]
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x94]
imul ecx, ebp
push edx
push eax
push ecx
lea edx, [esp + 0xc8]
push str.select_top__d__from_Contact_where__s_and__s_and__s_and__s_order_by__s__s__s__s
push edx
call fcn.00588507
add esp, 0x2c
push 0x649cf8
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [esp + 0x100]
push 0
push eax
push 0
lea ecx, [esp + 0x1a0]
call fcn.00557dcf
lea ecx, [esp + 0x164]
push 0
push ecx
push str.val_count
lea ecx, [esp + 0x1a0]
call fcn.005587de
mov edi, dword [esp + 0x16c]
lea ecx, [esp + 0x194]
mov dword [esp + 0x10], edi
call fcn.00557ea3
mov ecx, dword [0x628344]
mov eax, edi
cdq
idiv ecx
imul ecx, eax
cmp ecx, edi
mov dword [esp + 0x40], eax
je 0x49f25f
inc eax
mov dword [esp + 0x40], eax
cmp ebp, eax
jle 0x49f26c
mov ebp, eax
mov dword [esp + 0x334], ebp
test ebp, ebp
je 0x49fc0b
mov edx, dword [esp + 0xa4]
push 0
push edx
push 0
lea ecx, [esp + 0x1a0]
call fcn.00557dcf
dec ebp
push 6
imul ebp, dword [0x628344]
push ebp
lea ecx, [esp + 0x19c]
call fcn.00558292
mov eax, dword [esp + 0x25c]
test eax, eax
jne 0x49fbff
lea ebp, [esi + 0x12b8]
lea eax, [esp + 0xf8]
lea ecx, [esp + 0x194]
push eax
push str.Name
call fcn.0055891c
lea ecx, [esp + 0xa8]
push ecx
push str.Leibie
lea ecx, [esp + 0x19c]
call fcn.0055891c
lea edx, [esp + 0xf0]
lea ecx, [esp + 0x194]
push edx
push str.Company
call fcn.0055891c
lea eax, [esp + 0xe8]
lea ecx, [esp + 0x194]
push eax
push str.Bumen
call fcn.0055891c
lea ecx, [esp + 0xe0]
push ecx
push str.Zhiwu
lea ecx, [esp + 0x19c]
call fcn.0055891c
lea edx, [esp + 0xd8]
lea ecx, [esp + 0x194]
push edx
push str.Shangwu
call fcn.0055891c
lea eax, [esp + 0xc0]
lea ecx, [esp + 0x194]
push eax
push str.Shouji
call fcn.0055891c
lea ecx, [esp + 0xc8]
push ecx
push 0x6187c8
lea ecx, [esp + 0x19c]
call fcn.0055891c
lea edx, [esp + 0xd0]
lea ecx, [esp + 0x194]
push edx
push str.Jiating
call fcn.0055891c
lea eax, [esp + 0xb8]
lea ecx, [esp + 0x194]
push eax
push str.Other1
call fcn.0055891c
lea ecx, [esp + 0xb0]
push ecx
push str.Other2
lea ecx, [esp + 0x19c]
call fcn.0055891c
lea edx, [esp + 0x94]
lea ecx, [esp + 0x194]
push edx
push str.Email
call fcn.0055891c
lea eax, [esp + 0x98]
lea ecx, [esp + 0x194]
push eax
push 0x619d38
call fcn.0055891c
lea ecx, [esp + 0x90]
push ecx
push 0x619d34
lea ecx, [esp + 0x19c]
call fcn.0055891c
lea edx, [esp + 0x9c]
lea ecx, [esp + 0x194]
push edx
push 0x619d30
call fcn.0055891c
lea eax, [esp + 0x12c]
lea ecx, [esp + 0x194]
push eax
push str.Youbian
call fcn.0055891c
lea ecx, [esp + 0xec]
push ecx
push str.Shengshi
lea ecx, [esp + 0x19c]
call fcn.0055891c
lea edx, [esp + 0x10c]
lea ecx, [esp + 0x194]
push edx
push str.Shixian
call fcn.0055891c
lea eax, [esp + 0xe4]
lea ecx, [esp + 0x194]
push eax
push str.Jiedao
call fcn.0055891c
lea ecx, [esp + 0x11c]
push ecx
push str.Beizhu
lea ecx, [esp + 0x19c]
call fcn.0055891c
lea edx, [esp + 0x184]
push 0
push edx
push str.LastDT
lea ecx, [esp + 0x1a0]
call fcn.005587de
lea eax, [esp + 0x134]
lea ecx, [esp + 0x194]
push eax
push str.LastUser
call fcn.0055891c
lea ecx, [esp + 0x174]
push 0
push ecx
push str.LastCallDT
lea ecx, [esp + 0x1a0]
call fcn.005587de
mov edx, dword [esi + 0x12d4]
push 0
push 0
push 0x1004
push edx
call ebx
push 0
push 0
push 0
push 0
push 0x645010
push eax
push 1
mov ecx, ebp
call fcn.00589d9e
mov edi, eax
mov eax, dword [esp + 0xf8]
push eax
push 1
push edi
mov ecx, ebp
call fcn.00589e99
push ecx
lea edx, [esp + 0xac]
mov ecx, esp
mov dword [esp + 0x68], esp
push edx
call fcn.0058dcb4
lea eax, [esp + 0x150]
push eax
call fcn.0049d4b0
add esp, 8
mov eax, dword [eax]
mov ecx, ebp
push eax
push 2
push edi
mov byte [esp + 0x338], 0x4b
call fcn.00589e99
lea ecx, [esp + 0x14c]
mov byte [esp + 0x32c], 0x3a
call fcn.0058df3f
mov eax, dword [0x64a120]
test eax, eax
je 0x49f5a9
mov ecx, dword [esp + 0xf0]
push ecx
push 3
call fcn.0048af30
add esp, 4
mov ecx, ebp
push eax
push edi
call fcn.00589e99
mov eax, dword [0x64a124]
test eax, eax
je 0x49f5cd
mov edx, dword [esp + 0xe8]
push edx
push 4
call fcn.0048af30
add esp, 4
mov ecx, ebp
push eax
push edi
call fcn.00589e99
mov eax, dword [0x64a128]
test eax, eax
je 0x49f5f1
mov eax, dword [esp + 0xe0]
push eax
push 5
call fcn.0048af30
add esp, 4
mov ecx, ebp
push eax
push edi
call fcn.00589e99
mov eax, dword [0x64a12c]
test eax, eax
je 0x49f650
push ecx
lea edx, [esp + 0xdc]
mov ecx, esp
mov dword [esp + 0x68], esp
push edx
call fcn.0058dcb4
lea eax, [esp + 0x144]
push eax
call fcn.004889b0
add esp, 8
mov eax, dword [eax]
mov byte [esp + 0x32c], 0x4c
push eax
push 6
call fcn.0048af30
add esp, 4
mov ecx, ebp
push eax
push edi
call fcn.00589e99
lea ecx, [esp + 0x140]
mov byte [esp + 0x32c], 0x3a
call fcn.0058df3f
mov eax, dword [0x64a130]
test eax, eax
je 0x49f6af
push ecx
lea edx, [esp + 0xd4]
mov ecx, esp
mov dword [esp + 0x68], esp
push edx
call fcn.0058dcb4
lea eax, [esp + 0x148]
push eax
call fcn.004889b0
add esp, 8
mov eax, dword [eax]
mov byte [esp + 0x32c], 0x4d
push eax
push 7
call fcn.0048af30
add esp, 4
mov ecx, ebp
push eax
push edi
call fcn.00589e99
lea ecx, [esp + 0x144]
mov byte [esp + 0x32c], 0x3a
call fcn.0058df3f
mov eax, dword [0x64a134]
test eax, eax
je 0x49f70e
push ecx
lea edx, [esp + 0xcc]
mov ecx, esp
mov dword [esp + 0x68], esp
push edx
call fcn.0058dcb4
lea eax, [esp + 0x15c]
push eax
call fcn.004889b0
add esp, 8
mov eax, dword [eax]
mov byte [esp + 0x32c], 0x4e
push eax
push 8
call fcn.0048af30
add esp, 4
mov ecx, ebp
push eax
push edi
call fcn.00589e99
lea ecx, [esp + 0x158]
mov byte [esp + 0x32c], 0x3a
call fcn.0058df3f
mov eax, dword [0x64a138]
test eax, eax
je 0x49f76d
push ecx
lea edx, [esp + 0xc4]
mov ecx, esp
mov dword [esp + 0x68], esp
push edx
call fcn.0058dcb4
lea eax, [esp + 0x164]
push eax
call fcn.004889b0
add esp, 8
mov eax, dword [eax]
mov byte [esp + 0x32c], 0x4f
push eax
push 9
call fcn.0048af30
add esp, 4
mov ecx, ebp
push eax
push edi
call fcn.00589e99
lea ecx, [esp + 0x160]
mov byte [esp + 0x32c], 0x3a
call fcn.0058df3f
mov eax, dword [0x64a13c]
test eax, eax
je 0x49f7cc
push ecx
lea edx, [esp + 0xbc]
mov ecx, esp
mov dword [esp + 0x68], esp
push edx
call fcn.0058dcb4
lea eax, [esp + 0x160]
push eax
call fcn.004889b0
add esp, 8
mov eax, dword [eax]
mov byte [esp + 0x32c], 0x50
push eax
push 0xa
call fcn.0048af30
add esp, 4
mov ecx, ebp
push eax
push edi
call fcn.00589e99
lea ecx, [esp + 0x15c]
mov byte [esp + 0x32c], 0x3a
call fcn.0058df3f
mov eax, dword [0x64a140]
test eax, eax
je 0x49f82b
push ecx
lea edx, [esp + 0xb4]
mov ecx, esp
mov dword [esp + 0x68], esp
push edx
call fcn.0058dcb4
lea eax, [esp + 0x158]
push eax
call fcn.004889b0
add esp, 8
mov eax, dword [eax]
mov byte [esp + 0x32c], 0x51
push eax
push 0xb
call fcn.0048af30
add esp, 4
mov ecx, ebp
push eax
push edi
call fcn.00589e99
lea ecx, [esp + 0x154]
mov byte [esp + 0x32c], 0x3a
call fcn.0058df3f
mov eax, dword [0x64a144]
test eax, eax
je 0x49f8c1
push 0x619d34
push 0x6503a8
call fcn.00574e80
add esp, 8
test eax, eax
jne 0x49f8a6
push ecx
lea edx, [esp + 0x94]
mov ecx, esp
mov dword [esp + 0x68], esp
push edx
call fcn.0058dcb4
lea eax, [esp + 0x14c]
push eax
call fcn.004889b0
add esp, 8
mov eax, dword [eax]
mov byte [esp + 0x32c], 0x52
push eax
push 0xc
call fcn.0048af30
add esp, 4
mov ecx, ebp
push eax
push edi
call fcn.00589e99
lea ecx, [esp + 0x148]
mov byte [esp + 0x32c], 0x3a
call fcn.0058df3f
jmp 0x49f8c1
mov ecx, dword [esp + 0x90]
push ecx
push 0xc
call fcn.0048af30
add esp, 4
mov ecx, ebp
push eax
push edi
call fcn.00589e99
mov eax, dword [0x64a148]
test eax, eax
je 0x49f957
push 0x619d38
push 0x6503bc
call fcn.00574e80
add esp, 8
test eax, eax
jne 0x49f93c
push ecx
lea edx, [esp + 0x9c]
mov ecx, esp
mov dword [esp + 0x68], esp
push edx
call fcn.0058dcb4
lea eax, [esp + 0x114]
push eax
call fcn.004889b0
add esp, 8
mov eax, dword [eax]
mov byte [esp + 0x32c], 0x53
push eax
push 0xd
call fcn.0048af30
add esp, 4
mov ecx, ebp
push eax
push edi
call fcn.00589e99
lea ecx, [esp + 0x110]
mov byte [esp + 0x32c], 0x3a
call fcn.0058df3f
jmp 0x49f957
mov ecx, dword [esp + 0x98]
push ecx
push 0xd
call fcn.0048af30
add esp, 4
mov ecx, ebp
push eax
push edi
call fcn.00589e99
mov eax, dword [0x64a14c]
test eax, eax
je 0x49f9e7
push str.E_mail
push 0x6503d0
call fcn.00574e80
add esp, 8
test eax, eax
jne 0x49f9cc
push ecx
lea edx, [esp + 0x98]
mov ecx, esp
mov dword [esp + 0x68], esp
push edx
call fcn.0058dcb4
lea eax, [esp + 0x38]
push eax
call fcn.004889b0
add esp, 8
mov eax, dword [eax]
mov byte [esp + 0x32c], 0x54
push eax
push 0xe
call fcn.0048af30
add esp, 4
mov ecx, ebp
push eax
push edi
call fcn.00589e99
lea ecx, [esp + 0x34]
mov byte [esp + 0x32c], 0x3a
call fcn.0058df3f
jmp 0x49f9e7
mov ecx, dword [esp + 0x94]
push ecx
push 0xe
call fcn.0048af30
add esp, 4
mov ecx, ebp
push eax
push edi
call fcn.00589e99
mov eax, dword [0x64a150]
test eax, eax
je 0x49fa77
push 0x61b9d0
push 0x6503e4
call fcn.00574e80
add esp, 8
test eax, eax
jne 0x49fa5c
push ecx
lea edx, [esp + 0xa0]
mov ecx, esp
mov dword [esp + 0x68], esp
push edx
call fcn.0058dcb4
lea eax, [esp + 0x1c]
push eax
call fcn.004889b0
add esp, 8
mov eax, dword [eax]
mov byte [esp + 0x32c], 0x55
push eax
push 0xf
call fcn.0048af30
add esp, 4
mov ecx, ebp
push eax
push edi
call fcn.00589e99
lea ecx, [esp + 0x18]
mov byte [esp + 0x32c], 0x3a
call fcn.0058df3f
jmp 0x49fa77
mov ecx, dword [esp + 0x9c]
push ecx
push 0xf
call fcn.0048af30
add esp, 4
mov ecx, ebp
push eax
push edi
call fcn.00589e99
mov eax, dword [0x64a154]
test eax, eax
je 0x49fa9b
mov edx, dword [esp + 0x12c]
push edx
push 0x10
call fcn.0048af30
add esp, 4
mov ecx, ebp
push eax
push edi
call fcn.00589e99
mov eax, dword [0x64a158]
test eax, eax
je 0x49fabf
mov eax, dword [esp + 0xec]
push eax
push 0x11
call fcn.0048af30
add esp, 4
mov ecx, ebp
push eax
push edi
call fcn.00589e99
mov eax, dword [0x64a15c]
test eax, eax
je 0x49fae3
mov ecx, dword [esp + 0x10c]
push ecx
push 0x12
call fcn.0048af30
add esp, 4
mov ecx, ebp
push eax
push edi
call fcn.00589e99
mov eax, dword [0x64a160]
test eax, eax
je 0x49fb07
mov edx, dword [esp + 0xe4]
push edx
push 0x13
call fcn.0048af30
add esp, 4
mov ecx, ebp
push eax
push edi
call fcn.00589e99
mov eax, dword [0x64a164]
test eax, eax
je 0x49fb2b
mov eax, dword [esp + 0x11c]
push eax
push 0x14
call fcn.0048af30
add esp, 4
mov ecx, ebp
push eax
push edi
call fcn.00589e99
mov ecx, dword [esp + 0xa8]
push ecx
push 0x15
call fcn.0048af30
add esp, 4
mov ecx, ebp
push eax
push edi
call fcn.00589e99
mov eax, dword [esp + 0x17c]
xor edx, edx
xor ecx, ecx
mov dx, word [eax + 0xa]
mov cx, word [eax + 8]
push edx
xor edx, edx
mov dx, word [eax + 6]
push ecx
push edx
xor ecx, ecx
mov cx, word [eax + 4]
xor edx, edx
mov dx, word [eax + 2]
push ecx
movsx eax, word [eax]
push edx
push eax
lea ecx, [esp + 0xf4]
push str._d__02d__02d__02d:_02d:_02d
push ecx
call fcn.00588507
mov edx, dword [esp + 0xfc]
add esp, 0x20
push edx
push 0x16
call fcn.0048af30
add esp, 4
mov ecx, ebp
push eax
push edi
call fcn.00589e99
mov ecx, dword [esp + 0xd4]
mov eax, ecx
inc ecx
push eax
push 0
push 0
push 0
push 0
push 4
mov dword [esp + 0xec], ecx
push 0
push edi
mov ecx, ebp
call fcn.00589e20
mov eax, dword [esp + 0xd4]
mov ecx, dword [0x628344]
cmp eax, ecx
je 0x49fbff
mov edx, dword [esp + 0x194]
push 1
push 1
lea ecx, [esp + 0x19c]
call dword [edx + 0x14]
mov eax, dword [esp + 0x25c]
test eax, eax
je 0x49f2b8
lea ecx, [esp + 0x194]
call fcn.00557ea3
push 0x649cf8
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [0x63b4a0]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x40]
mov eax, 0x66666667
imul ecx
sar edx, 2
mov eax, edx
mov byte [esp + 0x32c], 0x56
shr eax, 0x1f
add edx, eax
mov ebx, edx
lea edx, [ebx + ebx*4]
shl edx, 1
cmp edx, ecx
je 0x49fc48
inc ebx
mov eax, dword [esi + 0xa8]
mov edi, dword [sym.imp.USER32.dll_ModifyMenuA]
push 0x618324
push 0x805b
push 0
push 0x805b
push eax
call edi
mov ecx, dword [esi + 0xa8]
push 0x618324
push 0x805c
push 0
push 0x805c
push ecx
call edi
mov edx, dword [esi + 0xa8]
push 0x618324
push 0x805d
push 0
push 0x805d
push edx
call edi
mov eax, dword [esi + 0xa8]
push 0x618324
push 0x805e
push 0
push 0x805e
push eax
call edi
mov ecx, dword [esi + 0xa8]
push 0x618324
push 0x805f
push 0
push 0x805f
push ecx
call edi
mov edx, dword [esi + 0xa8]
push 0x618324
push 0x8060
push 0
push 0x8060
push edx
call edi
mov eax, dword [esi + 0xa8]
push 0x618324
push 0x8061
push 0
push 0x8061
push eax
call edi
mov ecx, dword [esi + 0xa8]
push 0x618324
push 0x8062
push 0
push 0x8062
push ecx
call edi
mov edx, dword [esi + 0xa8]
push 0x618324
push 0x8063
push 0
push 0x8063
push edx
call edi
mov eax, dword [esi + 0xa8]
mov ebp, dword [sym.imp.USER32.dll_EnableMenuItem]
push 3
push 0x805b
push eax
call ebp
mov ecx, dword [esi + 0xa8]
push 3
push 0x805c
push ecx
call ebp
mov edx, dword [esi + 0xa8]
push 3
push 0x805d
push edx
call ebp
push 3
mov eax, dword [esi + 0xa8]
push 0x805e
push eax
call ebp
mov ecx, dword [esi + 0xa8]
push 3
push 0x805f
push ecx
call ebp
mov edx, dword [esi + 0xa8]
push 3
push 0x8060
push edx
call ebp
mov eax, dword [esi + 0xa8]
push 3
push 0x8061
push eax
call ebp
mov ecx, dword [esi + 0xa8]
push 3
push 0x8062
push ecx
call ebp
mov edx, dword [esi + 0xa8]
push 3
push 0x8063
push edx
call ebp
mov eax, dword [esp + 0x40]
cmp ebx, eax
jg 0x49fe1b
test eax, eax
jle 0x49fe1b
push ebx
lea eax, [esp + 0x40]
push 0x61831c
push eax
call fcn.00588507
mov ecx, dword [esp + 0x48]
mov edx, dword [esi + 0xa8]
add esp, 0xc
push ecx
push 0x805b
push 0
push 0x805b
push edx
call edi
mov eax, dword [esi + 0xa8]
push 0
push 0x805b
push eax
call ebp
mov eax, dword [esp + 0x40]
lea ecx, [ebx + ebx]
cmp ecx, eax
jg 0x49fe67
test eax, eax
jle 0x49fe67
push ecx
lea ecx, [esp + 0x40]
push 0x61831c
push ecx
call fcn.00588507
mov edx, dword [esp + 0x48]
mov eax, dword [esi + 0xa8]
add esp, 0xc
push edx
push 0x805c
push 0
push 0x805c
push eax
call edi
mov ecx, dword [esi + 0xa8]
push 0
push 0x805c
push ecx
call ebp
mov eax, dword [esp + 0x40]
lea ecx, [ebx + ebx*2]
cmp ecx, eax
jg 0x49feb3
test eax, eax
jle 0x49feb3
push ecx
lea edx, [esp + 0x40]
push 0x61831c
push edx
call fcn.00588507
mov eax, dword [esp + 0x48]
mov ecx, dword [esi + 0xa8]
add esp, 0xc
push eax
push 0x805d
push 0
push 0x805d
push ecx
call edi
mov edx, dword [esi + 0xa8]
push 0
push 0x805d
push edx
call ebp
mov eax, dword [esp + 0x40]
lea ecx, [ebx*4]
cmp ecx, eax
jg 0x49ff03
test eax, eax
jle 0x49ff03
push ecx
lea eax, [esp + 0x40]
push 0x61831c
push eax
call fcn.00588507
mov ecx, dword [esp + 0x48]
mov edx, dword [esi + 0xa8]
add esp, 0xc
push ecx
push 0x805e
push 0
push 0x805e
push edx
call edi
mov eax, dword [esi + 0xa8]
push 0
push 0x805e
push eax
call ebp
mov eax, dword [esp + 0x40]
lea ecx, [ebx + ebx*4]
cmp ecx, eax
jg 0x49ff4f
test eax, eax
jle 0x49ff4f
push ecx
lea ecx, [esp + 0x40]
push 0x61831c
push ecx
call fcn.00588507
mov edx, dword [esp + 0x48]
mov eax, dword [esi + 0xa8]
add esp, 0xc
push edx
push 0x805f
push 0
push 0x805f
push eax
call edi
mov ecx, dword [esi + 0xa8]
push 0
push 0x805f
push ecx
call ebp
mov eax, dword [esp + 0x40]
lea ecx, [ebx + ebx*2]
shl ecx, 1
cmp ecx, eax
jg 0x49ff9d
test eax, eax
jle 0x49ff9d
push ecx
lea edx, [esp + 0x40]
push 0x61831c
push edx
call fcn.00588507
mov eax, dword [esp + 0x48]
mov ecx, dword [esi + 0xa8]
add esp, 0xc
push eax
push 0x8060
push 0
push 0x8060
push ecx
call edi
mov edx, dword [esi + 0xa8]
push 0
push 0x8060
push edx
call ebp
mov eax, dword [esp + 0x40]
lea ecx, [ebx*8]
sub ecx, ebx
cmp ecx, eax
jg 0x49ffef
test eax, eax
jle 0x49ffef
push ecx
lea eax, [esp + 0x40]
push 0x61831c
push eax
call fcn.00588507
mov ecx, dword [esp + 0x48]
mov edx, dword [esi + 0xa8]
add esp, 0xc
push ecx
push 0x8061
push 0
push 0x8061
push edx
call edi
mov eax, dword [esi + 0xa8]
push 0
push 0x8061
push eax
call ebp
mov eax, dword [esp + 0x40]
lea ecx, [ebx*8]
cmp ecx, eax
jg 0x4a003f
test eax, eax
jle 0x4a003f
push ecx
lea ecx, [esp + 0x40]
push 0x61831c
push ecx
call fcn.00588507
mov edx, dword [esp + 0x48]
mov eax, dword [esi + 0xa8]
add esp, 0xc
push edx
push 0x8062
push 0
push 0x8062
push eax
call edi
mov ecx, dword [esi + 0xa8]
push 0
push 0x8062
push ecx
call ebp
mov eax, dword [esp + 0x40]
lea ebx, [ebx + ebx*8]
cmp ebx, eax
jg 0x4a008b
mov eax, dword [esp + 0x40]
test eax, eax
jle 0x4a008b
push ebx
lea edx, [esp + 0x40]
push 0x61831c
push edx
call fcn.00588507
mov eax, dword [esp + 0x48]
mov ecx, dword [esi + 0xa8]
add esp, 0xc
push eax
push 0x8063
push 0
push 0x8063
push ecx
call edi
mov edx, dword [esi + 0xa8]
push 0
push 0x8063
push edx
call ebp
mov eax, dword [0x63b4a0]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x4c]
push ecx
mov bl, 0x57
push 0x61a878
push edx
mov byte [esp + 0x338], bl
call fcn.00588507
mov eax, dword [esp + 0x58]
add esp, 0xc
lea ecx, [esi + 0x16a0]
push eax
call fcn.00592059
mov ecx, dword [esp + 0x334]
lea edx, [esp + 0x4c]
push ecx
push 0x61842c
push edx
call fcn.00588507
mov eax, dword [esp + 0x58]
add esp, 0xc
lea ecx, [esi + 0xe6c]
push eax
call fcn.00592059
mov ecx, dword [esp + 0x40]
lea edx, [esp + 0x4c]
push ecx
push 0x618424
push edx
call fcn.00588507
mov eax, dword [esp + 0x58]
add esp, 0xc
lea ecx, [esi + 0xe30]
push eax
call fcn.00592059
mov ecx, dword [esi + 0x1608]
mov ebp, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 9
push 0x110a
push ecx
call ebp
push 0x645010
lea ecx, [esp + 0x50]
mov edi, eax
call fcn.0058e0c8
test edi, edi
je 0x4a0234
mov edx, dword [esp + 0x4c]
push 0x645010
push edx
call fcn.00568a52
add esp, 8
test eax, eax
push edi
je 0x4a01e1
lea eax, [esp + 0x38]
lea ecx, [esi + 0x15ec]
push eax
call fcn.0058a173
push 0x6197b4
lea ecx, [esp + 0x1c]
push eax
push ecx
mov byte [esp + 0x338], 0x58
call fcn.0058e1d4
lea edx, [esp + 0x4c]
mov byte [esp + 0x32c], 0x59
push edx
push eax
lea eax, [esp + 0x18]
push eax
call fcn.0058e16e
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x330], 0x5a
call fcn.0058e078
lea ecx, [esp + 0x10]
mov byte [esp + 0x32c], 0x59
call fcn.0058df3f
lea ecx, [esp + 0x18]
mov byte [esp + 0x32c], 0x58
call fcn.0058df3f
mov byte [esp + 0x32c], bl
lea ecx, [esp + 0x34]
jmp 0x4a0214
lea ecx, [esp + 0x114]
push ecx
lea ecx, [esi + 0x15ec]
call fcn.0058a173
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x330], 0x5b
call fcn.0058e078
mov byte [esp + 0x32c], bl
lea ecx, [esp + 0x110]
call fcn.0058df3f
mov edx, dword [esi + 0x1608]
push edi
push 3
push 0x110a
push edx
call ebp
mov edi, eax
test edi, edi
jne 0x4a0145
lea eax, [esp + 0x4c]
lea ecx, [esp + 0x10]
push eax
push 0x62eeb8
push ecx
call fcn.0058e248
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x330], 0x5c
call fcn.0058e078
lea ecx, [esp + 0x10]
mov byte [esp + 0x32c], bl
call fcn.0058df3f
mov edx, dword [esp + 0x4c]
lea ecx, [esi + 0x1628]
push edx
call fcn.00592059
mov ecx, dword [esi + 0x16bc]
mov edi, dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [esp + 0x24]
push eax
push ecx
call edi
lea edx, [esp + 0x24]
mov ecx, esi
push edx
call fcn.0059688d
mov ecx, dword [esi + 0x1c]
mov ebp, dword [sym.imp.USER32.dll_InvalidateRect]
lea eax, [esp + 0x24]
push 1
push eax
push ecx
call ebp
mov eax, dword [esi + 0xe88]
lea edx, [esp + 0x24]
push edx
push eax
call edi
lea ecx, [esp + 0x24]
push ecx
mov ecx, esi
call fcn.0059688d
mov eax, dword [esi + 0x1c]
lea edx, [esp + 0x24]
push 1
push edx
push eax
call ebp
mov edx, dword [esi + 0xe4c]
lea ecx, [esp + 0x24]
push ecx
push edx
call edi
lea eax, [esp + 0x24]
mov ecx, esi
push eax
call fcn.0059688d
mov edx, dword [esi + 0x1c]
lea ecx, [esp + 0x24]
push 1
push ecx
push edx
call ebp
mov ecx, dword [esi + 0x1644]
lea eax, [esp + 0x24]
push eax
push ecx
call edi
lea edx, [esp + 0x24]
mov ecx, esi
push edx
call fcn.0059688d
mov ecx, dword [esi + 0x1c]
lea eax, [esp + 0x24]
push 1
push eax
push ecx
call ebp
lea edx, [esp + 0x24]
mov eax, dword [esi + 0x1590]
push edx
push eax
call edi
lea ecx, [esp + 0x24]
push ecx
mov ecx, esi
call fcn.0059688d
mov eax, dword [esp + 0x24]
mov ebx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x30]
dec eax
inc ebx
dec edx
mov dword [esp + 0x24], eax
mov eax, dword [esi + 0x1c]
mov dword [esp + 0x28], edx
lea edx, [esp + 0x24]
push 1
inc ecx
push edx
push eax
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ecx
call ebp
mov edx, dword [esi + 0x7bc]
lea ecx, [esp + 0x24]
push ecx
push edx
call edi
lea eax, [esp + 0x24]
mov ecx, esi
push eax
call fcn.0059688d
mov ebx, dword [esp + 0x24]
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x30]
dec ebx
inc edx
dec ecx
mov dword [esp + 0x2c], edx
mov edx, dword [esi + 0x1c]
mov dword [esp + 0x28], ecx
lea ecx, [esp + 0x24]
push 1
inc eax
push ecx
push edx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x3c], eax
call ebp
mov ecx, dword [esi + 0x10a4]
lea eax, [esp + 0x24]
push eax
push ecx
call edi
lea edx, [esp + 0x24]
mov ecx, esi
push edx
call fcn.0059688d
mov eax, dword [esp + 0x24]
mov ebx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x30]
dec eax
inc ebx
dec edx
inc ecx
mov dword [esp + 0x24], eax
mov dword [esp + 0x30], ecx
mov ecx, dword [esi + 0x1c]
lea eax, [esp + 0x24]
push 1
push eax
push ecx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x34], edx
call ebp
lea edx, [esp + 0x24]
mov eax, dword [esi + 0xff0]
push edx
push eax
call edi
lea ecx, [esp + 0x24]
push ecx
mov ecx, esi
call fcn.0059688d
mov eax, dword [esp + 0x24]
mov ebx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x30]
dec eax
inc ebx
dec edx
mov dword [esp + 0x24], eax
mov eax, dword [esi + 0x1c]
mov dword [esp + 0x28], edx
lea edx, [esp + 0x24]
push 1
inc ecx
push edx
push eax
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ecx
call ebp
mov edx, dword [esi + 0x1068]
lea ecx, [esp + 0x24]
push ecx
push edx
call edi
lea eax, [esp + 0x24]
mov ecx, esi
push eax
call fcn.0059688d
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x2c]
mov ebx, dword [esp + 0x28]
mov edx, dword [esp + 0x30]
dec ecx
inc eax
dec ebx
inc edx
mov dword [esp + 0x24], ecx
mov dword [esp + 0x30], edx
mov edx, dword [esi + 0x1c]
lea ecx, [esp + 0x24]
push 1
push ecx
push edx
mov dword [esp + 0x38], eax
mov dword [esp + 0x34], ebx
call ebp
mov ecx, dword [esi + 0x102c]
lea eax, [esp + 0x24]
push eax
push ecx
call edi
lea edx, [esp + 0x24]
mov ecx, esi
push edx
call fcn.0059688d
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x28]
mov ebx, dword [esp + 0x30]
dec edx
inc ecx
dec eax
mov dword [esp + 0x2c], ecx
mov ecx, dword [esi + 0x1c]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x24]
push 1
inc ebx
push eax
push ecx
mov dword [esp + 0x30], edx
mov dword [esp + 0x3c], ebx
call ebp
lea edx, [esp + 0x24]
mov eax, dword [esi + 0x960]
push edx
push eax
call edi
lea ecx, [esp + 0x24]
push ecx
mov ecx, esi
call fcn.0059688d
mov edi, dword [esp + 0x24]
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x30]
dec edi
inc edx
dec ecx
inc eax
mov dword [esp + 0x2c], edx
mov dword [esp + 0x30], eax
mov eax, dword [esi + 0x1c]
lea edx, [esp + 0x24]
push 1
push edx
push eax
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], ecx
call ebp
mov ecx, dword [esp + 0x138]
call fcn.00592207
lea ecx, [esp + 0x4c]
mov byte [esp + 0x32c], 0x56
call fcn.0058df3f
lea ecx, [esp + 0x3c]
mov byte [esp + 0x32c], 0x3a
call fcn.0058df3f
lea ecx, [esp + 0xac]
mov byte [esp + 0x32c], 0x39
call fcn.0058df3f
lea ecx, [esp + 0xa0]
mov byte [esp + 0x32c], 0x38
call fcn.0058df3f
lea ecx, [esp + 0x8c]
mov byte [esp + 0x32c], 0x37
call fcn.0058df3f
lea ecx, [esp + 0x84]
mov byte [esp + 0x32c], 0x36
call fcn.0058df3f
lea ecx, [esp + 0x78]
mov byte [esp + 0x32c], 0x35
call fcn.0058df3f
lea ecx, [esp + 0x74]
mov byte [esp + 0x32c], 0x34
call fcn.0058df3f
lea ecx, [esp + 0x6c]
mov byte [esp + 0x32c], 0x33
call fcn.0058df3f
lea ecx, [esp + 0x68]
mov byte [esp + 0x32c], 0x32
call fcn.0058df3f
lea ecx, [esp + 0x60]
mov byte [esp + 0x32c], 0x31
call fcn.0058df3f
lea ecx, [esp + 0x5c]
mov byte [esp + 0x32c], 0x30
call fcn.0058df3f
lea ecx, [esp + 0x58]
mov byte [esp + 0x32c], 0x2f
call fcn.0058df3f
lea ecx, [esp + 0x54]
mov byte [esp + 0x32c], 0x2e
call fcn.0058df3f
lea ecx, [esp + 0x50]
mov byte [esp + 0x32c], 0x2d
call fcn.0058df3f
lea ecx, [esp + 0x48]
mov byte [esp + 0x32c], 0x2c
call fcn.0058df3f
lea ecx, [esp + 0x44]
mov byte [esp + 0x32c], 0x2b
call fcn.0058df3f
mov byte [esp + 0x32c], 0x2a
lea ecx, [esp + 0x164]
call fcn.0055b3f5
lea ecx, [esp + 0x70]
mov byte [esp + 0x32c], 0x29
call fcn.0058df3f
lea ecx, [esp + 0x88]
mov byte [esp + 0x32c], 0x28
call fcn.0058df3f
lea ecx, [esp + 0x80]
mov byte [esp + 0x32c], 0x27
call fcn.0058df3f
lea ecx, [esp + 0x14]
mov byte [esp + 0x32c], 0x26
call fcn.0058df3f
lea ecx, [esp + 0x7c]
mov byte [esp + 0x32c], 0x25
call fcn.0058df3f
lea ecx, [esp + 0x20]
mov byte [esp + 0x32c], 0x24
call fcn.0058df3f
lea ecx, [esp + 0x194]
mov byte [esp + 0x32c], 0x23
call fcn.00557cc6
lea ecx, [esp + 0x174]
mov byte [esp + 0x32c], 0x22
call fcn.0055b3f5
lea ecx, [esp + 0x184]
mov byte [esp + 0x32c], 0x21
call fcn.0055b3f5
lea ecx, [esp + 0x304]
mov byte [esp + 0x32c], 0x20
call fcn.0055b3f5
lea ecx, [esp + 0x314]
mov byte [esp + 0x32c], 0x1f
call fcn.0055b3f5
lea ecx, [esp + 0x2c4]
mov byte [esp + 0x32c], 0x1e
call fcn.0055b3f5
lea ecx, [esp + 0x2a4]
mov byte [esp + 0x32c], 0x1d
call fcn.0055b3f5
lea ecx, [esp + 0x2e4]
mov byte [esp + 0x32c], 0x1c
call fcn.0055b3f5
lea ecx, [esp + 0x2b4]
mov byte [esp + 0x32c], 0x1b
call fcn.0055b3f5
lea ecx, [esp + 0x2d4]
mov byte [esp + 0x32c], 0x1a
call fcn.0055b3f5
lea ecx, [esp + 0x2f4]
mov byte [esp + 0x32c], 0x19
call fcn.0055b3f5
lea ecx, [esp + 0xdc]
mov byte [esp + 0x32c], 0x18
call fcn.0058df3f
lea ecx, [esp + 0x134]
mov byte [esp + 0x32c], 0x17
call fcn.0058df3f
lea ecx, [esp + 0x150]
mov byte [esp + 0x32c], 0x16
call fcn.0058df3f
lea ecx, [esp + 0x11c]
mov byte [esp + 0x32c], 0x15
call fcn.0058df3f
lea ecx, [esp + 0xe4]
mov byte [esp + 0x32c], 0x14
call fcn.0058df3f
lea ecx, [esp + 0x10c]
mov byte [esp + 0x32c], 0x13
call fcn.0058df3f
lea ecx, [esp + 0xec]
mov byte [esp + 0x32c], 0x12
call fcn.0058df3f
lea ecx, [esp + 0x12c]
mov byte [esp + 0x32c], 0x11
call fcn.0058df3f
lea ecx, [esp + 0x9c]
mov byte [esp + 0x32c], 0x10
call fcn.0058df3f
mov byte [esp + 0x32c], 0xf
lea ecx, [esp + 0x94]
call fcn.0058df3f
lea ecx, [esp + 0x98]
mov byte [esp + 0x32c], 0xe
call fcn.0058df3f
lea ecx, [esp + 0x90]
mov byte [esp + 0x32c], 0xd
call fcn.0058df3f
lea ecx, [esp + 0xb0]
mov byte [esp + 0x32c], 0xc
call fcn.0058df3f
lea ecx, [esp + 0xb8]
mov byte [esp + 0x32c], 0xb
call fcn.0058df3f
lea ecx, [esp + 0xc0]
mov byte [esp + 0x32c], 0xa
call fcn.0058df3f
lea ecx, [esp + 0xc8]
mov byte [esp + 0x32c], 9
call fcn.0058df3f
lea ecx, [esp + 0xd0]
mov byte [esp + 0x32c], 8
call fcn.0058df3f
lea ecx, [esp + 0xd8]
mov byte [esp + 0x32c], 7
call fcn.0058df3f
lea ecx, [esp + 0xe0]
mov byte [esp + 0x32c], 6
call fcn.0058df3f
lea ecx, [esp + 0xe8]
mov byte [esp + 0x32c], 5
call fcn.0058df3f
lea ecx, [esp + 0xf0]
mov byte [esp + 0x32c], 4
call fcn.0058df3f
lea ecx, [esp + 0xf8]
mov byte [esp + 0x32c], 3
call fcn.0058df3f
lea ecx, [esp + 0xa8]
mov byte [esp + 0x32c], 2
call fcn.0058df3f
lea ecx, [esp + 0xa4]
mov byte [esp + 0x32c], 1
call fcn.0058df3f
lea ecx, [esp + 0x100]
mov dword [esp + 0x32c], 0xffffffff
call fcn.0058df3f
mov ecx, dword [esp + 0x324]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x320
ret 4