Function at 0x436200
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push 0xffffffffffffffff
push 0x54dda8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xfd0
push ebx
mov ebx, dword [esp + 0xff0]
test ebx, ebx
mov dword [esp + 8], ecx
jne 0x436238
mov ebx, dword [0x5b1ac0]
mov dword [esp + 0xff0], ebx
mov eax, dword [esp + 0xfe4]
test eax, eax
jne 0x43624a
xor eax, eax
jmp 0x43772f
push ebp
mov ebp, dword [esp + 0xff0]
test ebp, ebp
push esi
je 0x436262
push 0
push 0
mov ecx, ebp
call fcn.00478920
push edi
mov edi, dword [esp + 0xff4]
test edi, edi
je 0x436281
mov eax, dword [edi + 4]
mov dword [edi], 0
mov dword [edi + 0xc], eax
mov dword [edi + 4], 0
mov ecx, dword [esp + 0xff0]
xor esi, esi
lea eax, [ecx - 1]
cmp eax, 0x1c
ja case.0x436296.3
jmp dword [eax*4 + 0x437748]
mov ecx, dword [esp + 0x14]
push edi
call fcn.004360b0
mov esi, eax
jmp case.0x436296.3
mov ecx, dword [esp + 0x14]
push 1
push str.401ef48c9e84e1855c6268b769392d7c
push 0
push 0
push str.about
call fcn.00403480
jmp case.0x436296.3
xor esi, esi
lea ecx, [esp + 0x48]
push esi
call fcn.004472d0
lea edx, [esp + 0xe0]
mov ecx, edi
push edx
mov dword [esp + 0xfec], esi
call fcn.00478a00
lea ecx, [esp + 0x48]
call fcn.005289f4
cmp eax, 1
jne 0x43632b
mov eax, dword [esp + 0xe0]
push eax
call fcn.00478aa0
add esp, 4
mov ecx, ebp
push eax
push esi
call fcn.00478920
mov ecx, dword [esp + 0xe0]
push ecx
mov ecx, ebp
call fcn.00478990
mov esi, 1
jmp 0x436339
mov edx, dword [esp + 0x14]
mov dword [edx + 0x9fc], 1
lea ecx, [esp + 0xe0]
mov dword [esp + 0xfe8], 2
call fcn.00527eff
lea ecx, [esp + 0xa4]
mov byte [esp + 0xfe8], 1
call fcn.0053d0df
mov dword [esp + 0xfe8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x43770d
mov eax, dword [0x5ada84]
mov dword [esp + 0x10], eax
lea ecx, [esp + 0x10]
mov ebx, 3
push ecx
mov ecx, edi
mov dword [esp + 0xfec], ebx
call fcn.00478a00
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x44]
push edx
push 0x59e6b4
push eax
call fcn.004e6ca0
add esp, 0xc
mov eax, dword [eax]
push 0x21
push eax
mov ecx, 0x5b1210
mov byte [esp + 0xff0], 4
call fcn.00435fe0
mov esi, eax
lea ecx, [esp + 0x44]
dec esi
mov byte [esp + 0xfe8], bl
neg esi
sbb esi, esi
inc esi
call fcn.00527eff
test esi, esi
jne 0x4363f1
mov ecx, dword [esp + 0x14]
mov dword [ecx + 0x9fc], 1
lea ecx, [esp + 0x10]
mov dword [esp + 0xfe8], 0xffffffff
call fcn.00527eff
jmp case.0x436296.3
mov edx, dword [0x5ada84]
mov dword [esp + 0x10], edx
lea eax, [esp + 0x10]
mov ebx, 5
push eax
mov ecx, edi
mov dword [esp + 0xfec], ebx
call fcn.00478a00
mov ecx, dword [esp + 0x10]
push 0
push ecx
lea ecx, [esp + 0x50]
call fcn.00439340
lea ecx, [esp + 0x48]
mov byte [esp + 0xfe8], 6
call fcn.005289f4
mov esi, eax
cmp esi, 2
jne 0x436464
mov edx, dword [esp + 0x14]
mov dword [edx + 0x9fc], 1
jmp 0x43647e
push 4
push 0
mov ecx, ebp
call fcn.00478920
mov eax, dword [esp + 0xa4]
mov ecx, ebp
push eax
call fcn.00478970
lea ecx, [esp + 0xe4]
mov byte [esp + 0xfe8], 8
call fcn.0053cfdc
lea ecx, [esp + 0xa8]
mov byte [esp + 0xfe8], 7
call fcn.0053cdc3
lea ecx, [esp + 0x48]
mov byte [esp + 0xfe8], bl
call fcn.0052862a
lea ecx, [esp + 0x10]
mov dword [esp + 0xfe8], 0xffffffff
call fcn.00527eff
jmp case.0x436296.3
mov ecx, dword [0x5ada84]
mov dword [esp + 0x1c], ecx
lea edx, [esp + 0x1c]
mov ecx, edi
push edx
mov dword [esp + 0xfec], 9
call fcn.00478a00
lea ecx, [esp + 0x2c]
call fcn.00477cf0
lea eax, [esp + 0x2c]
mov ecx, edi
push eax
mov byte [esp + 0xfec], 0xa
call fcn.00478a40
mov ecx, dword [0x5ada84]
mov dword [esp + 0x10], ecx
mov eax, dword [0x5b1ac0]
lea edx, [esp + 0x10]
mov bl, 0xb
push edx
lea ecx, [eax + 0xc0]
mov byte [esp + 0xfec], bl
call fcn.004e2280
push 0
push 0x59e67c
mov ecx, 0x5b1210
call fcn.00467600
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x2c]
push 0
push ecx
push edx
lea ecx, [esp + 0x54]
call fcn.004395c0
lea ecx, [esp + 0x48]
mov byte [esp + 0xfe8], 0xc
call fcn.005289f4
mov eax, dword [esp + 0x10]
push 0
push eax
mov ecx, 0x5b1210
call fcn.00467600
mov esi, dword [esp + 0xa4]
lea ecx, [esp + 0xe4]
mov byte [esp + 0xfe8], 0xe
call fcn.0053ce83
lea ecx, [esp + 0xa8]
mov byte [esp + 0xfe8], 0xd
call fcn.0053cdc3
lea ecx, [esp + 0x48]
mov byte [esp + 0xfe8], bl
call fcn.0052862a
lea ecx, [esp + 0x10]
mov byte [esp + 0xfe8], 0xa
call fcn.00527eff
lea ecx, [esp + 0x2c]
mov byte [esp + 0xfe8], 9
mov dword [esp + 0x2c], 0x55f890
call fcn.00477ef0
lea ecx, [esp + 0x1c]
mov dword [esp + 0xfe8], 0xffffffff
call fcn.00527eff
jmp case.0x436296.3
cmp dword [esp + 0xff0], 0xb
jne 0x436660
push 0x1f8
call fcn.00528dfb
add esp, 4
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0xfe8], 0xf
je 0x436646
push ebx
push 0x59e654
push 0x1804
push 0
push 0x59e650
push 1
mov ecx, eax
call fcn.00524b59
jmp 0x436648
xor eax, eax
or ebx, 0xffffffff
mov edi, eax
mov dword [esp + 0xfe8], ebx
mov dword [eax + 0x8c], 0x59e63c
jmp 0x4366b5
push 0x234
call fcn.00528dfb
add esp, 4
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0xfe8], 0x10
je 0x43669d
push ebx
push 0x59e610
push 0x1804
push 0
push 0x59e60c
push 1
mov ecx, eax
call fcn.00447580
jmp 0x43669f
xor eax, eax
or ebx, 0xffffffff
mov edi, eax
mov dword [esp + 0xfe8], ebx
mov dword [eax + 0x8c], 0x59e5f8
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0xb8]
cmp eax, 1
je 0x4366c8
xor esi, esi
jmp 0x436720
lea eax, [esp + 0x18]
mov ecx, edi
push eax
call fcn.00524d96
mov eax, dword [esp + 0x18]
mov dword [esp + 0xfe8], 0x11
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x4366ee
xor esi, esi
jmp 0x436710
push eax
mov esi, eax
call fcn.00478aa0
add esp, 4
mov ecx, ebp
push eax
push 0
call fcn.00478920
push esi
mov ecx, ebp
call fcn.00478990
mov esi, 1
lea ecx, [esp + 0x18]
mov dword [esp + 0xfe8], ebx
call fcn.00527eff
test edi, edi
je case.0x436296.3
mov edx, dword [edi]
push 1
mov ecx, edi
call dword [edx + 4]
jmp case.0x436296.3
push ebx
push 0x59e5e4
push 0x8806
push 0
push 0x59e650
push 0
lea ecx, [esp + 0x60]
call fcn.00524b59
mov ebx, 0x12
mov ecx, edi
mov dword [esp + 0xfe8], ebx
call fcn.00478a80
test eax, eax
mov dword [esp + 0xd4], 0x59e5dc
je 0x436780
mov dword [esp + 0xd4], 0x59e5d4
lea ecx, [esp + 0x48]
call fcn.00524cbb
cmp eax, 1
je 0x436792
xor esi, esi
jmp 0x4367e9
lea eax, [esp + 0x18]
lea ecx, [esp + 0x48]
push eax
call fcn.00524d96
mov eax, dword [esp + 0x18]
mov byte [esp + 0xfe8], 0x13
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x4367b7
xor esi, esi
jmp 0x4367d9
push eax
mov esi, eax
call fcn.00478aa0
add esp, 4
mov ecx, ebp
push eax
push 0
call fcn.00478920
push esi
mov ecx, ebp
call fcn.00478990
mov esi, 1
lea ecx, [esp + 0x18]
mov byte [esp + 0xfe8], bl
call fcn.00527eff
lea ecx, [esp + 0xf4]
mov dword [esp + 0xfe8], 0x14
call fcn.00527eff
mov dword [esp + 0xfe8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x43770d
mov ecx, edi
call fcn.00478a80
mov ebx, eax
mov eax, dword [0x5ada84]
mov dword [esp + 0x10], eax
mov dword [esp + 0xfe8], 0x15
mov dword [esp + 0x14], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], eax
lea ecx, [esp + 0x10]
mov byte [esp + 0xfe8], 0x19
push ecx
mov ecx, edi
call fcn.00478a00
lea edx, [esp + 0x1c]
mov ecx, edi
push edx
call fcn.00478a00
lea eax, [esp + 0x14]
mov ecx, edi
push eax
call fcn.00478a00
lea ecx, [esp + 0x20]
push ecx
mov ecx, edi
call fcn.00478a00
lea edx, [esp + 0x18]
mov ecx, edi
push edx
call fcn.00478a00
mov eax, dword [esp + 0x14]
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x4368a9
test ebx, ebx
jne 0x43689b
push 0x59e5c4
jmp 0x4368a0
push 0x59e5ac
lea ecx, [esp + 0x18]
call fcn.00528088
lea ecx, [esp + 0x40]
push 2
push ecx
lea ecx, [esp + 0x28]
call fcn.005242d0
mov eax, dword [eax]
push 0x59e5a8
push eax
call fcn.0050fefa
add esp, 8
lea ecx, [esp + 0x40]
test eax, eax
setne byte [esp + 0x27]
call fcn.00527eff
mov al, byte [esp + 0x27]
test al, al
je 0x436908
mov edx, dword [esp + 0x20]
mov eax, dword [edx - 8]
test eax, eax
je 0x4368fa
push 0x59e5a4
lea ecx, [esp + 0x24]
call fcn.005282db
push 0x59e58c
lea ecx, [esp + 0x24]
call fcn.005282db
mov eax, dword [esp + 0x1c]
mov esi, ebx
neg esi
sbb esi, esi
push 0x59e60c
and esi, 0x7002
push eax
add esi, 0x1804
call fcn.0050ffa9
add esp, 8
test eax, eax
jne 0x436976
push 0x234
call fcn.00528dfb
add esp, 4
mov dword [esp + 0x28], eax
test eax, eax
mov byte [esp + 0xfe8], 0x1a
je 0x4369bc
mov ecx, dword [esp + 0xffc]
mov edx, dword [esp + 0x20]
push ecx
mov ecx, dword [esp + 0x14]
push edx
mov edx, dword [esp + 0x24]
push esi
push ecx
xor ecx, ecx
push edx
test ebx, ebx
sete cl
push ecx
mov ecx, eax
call fcn.00447580
jmp 0x4369be
push 0x1f8
call fcn.00528dfb
add esp, 4
mov dword [esp + 0x28], eax
test eax, eax
mov byte [esp + 0xfe8], 0x1b
je 0x4369bc
mov edx, dword [esp + 0xffc]
mov ecx, dword [esp + 0x20]
push edx
mov edx, dword [esp + 0x14]
push ecx
mov ecx, dword [esp + 0x24]
push esi
push edx
xor edx, edx
push ecx
test ebx, ebx
sete dl
push edx
mov ecx, eax
call fcn.00524b59
jmp 0x4369be
xor eax, eax
mov edi, eax
mov eax, dword [esp + 0x14]
mov byte [esp + 0xfe8], 0x19
mov dword [edi + 0x8c], eax
mov eax, dword [esp + 0x18]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x4369e3
mov dword [edi + 0x88], eax
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0xb8]
cmp eax, 1
je 0x4369f6
xor esi, esi
jmp 0x436a4c
lea eax, [esp + 0x28]
mov ecx, edi
push eax
call fcn.00524d96
mov eax, dword [esp + 0x28]
mov byte [esp + 0xfe8], 0x1c
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x436a19
xor esi, esi
jmp 0x436a3b
push eax
mov esi, eax
call fcn.00478aa0
add esp, 4
mov ecx, ebp
push eax
push 0
call fcn.00478920
push esi
mov ecx, ebp
call fcn.00478990
mov esi, 1
lea ecx, [esp + 0x28]
mov byte [esp + 0xfe8], 0x19
call fcn.00527eff
test edi, edi
je 0x436a59
mov edx, dword [edi]
push 1
mov ecx, edi
call dword [edx + 4]
lea ecx, [esp + 0x18]
mov byte [esp + 0xfe8], 0x18
call fcn.00527eff
lea ecx, [esp + 0x1c]
mov byte [esp + 0xfe8], 0x17
call fcn.00527eff
lea ecx, [esp + 0x20]
mov byte [esp + 0xfe8], 0x16
call fcn.00527eff
lea ecx, [esp + 0x14]
mov byte [esp + 0xfe8], 0x15
call fcn.00527eff
lea ecx, [esp + 0x10]
mov dword [esp + 0xfe8], 0xffffffff
call fcn.00527eff
jmp case.0x436296.3
lea ecx, [esp + 0x2c]
call fcn.00477cf0
lea eax, [esp + 0x2c]
mov ebx, 0x1d
push eax
mov ecx, edi
mov dword [esp + 0xfec], ebx
call fcn.00478a40
lea ecx, [esp + 0x2c]
push 0
push ecx
lea ecx, [esp + 0x50]
call fcn.00439ad0
lea ecx, [esp + 0x48]
mov byte [esp + 0xfe8], 0x1e
call fcn.005289f4
mov esi, 1
cmp eax, esi
jne 0x436b3c
cmp dword [esp + 0x194], esi
jne 0x436b3c
lea edx, [esp + 0x2c]
push edx
call fcn.00478ac0
add esp, 4
mov ecx, ebp
push eax
push 0
call fcn.00478920
mov ecx, dword [esp + 0x3c]
mov edi, dword [esp + 0x34]
mov eax, ecx
push ecx
neg eax
sbb eax, eax
mov ecx, ebp
and eax, edi
push eax
call fcn.004789b0
jmp 0x436b3e
xor esi, esi
lea ecx, [esp + 0x158]
mov byte [esp + 0xfe8], 0x22
call fcn.0053cdc3
lea ecx, [esp + 0x11c]
mov byte [esp + 0xfe8], 0x21
call fcn.0053cdc3
lea ecx, [esp + 0xe0]
mov byte [esp + 0xfe8], 0x20
call fcn.0053cdc3
lea ecx, [esp + 0xa4]
mov byte [esp + 0xfe8], 0x1f
call fcn.0053cdc3
lea ecx, [esp + 0x48]
mov byte [esp + 0xfe8], bl
call fcn.0052862a
lea ecx, [esp + 0x2c]
mov dword [esp + 0xfe8], 0xffffffff
mov dword [esp + 0x2c], 0x55f890
call fcn.00477ef0
jmp case.0x436296.3
lea ecx, [esp + 0x2c]
call fcn.00477cf0
lea eax, [esp + 0x2c]
mov ebx, 0x23
push eax
mov ecx, edi
mov dword [esp + 0xfec], ebx
call fcn.00478a40
lea ecx, [esp + 0x2c]
push 0
push ecx
lea ecx, [esp + 0x50]
call fcn.0043a200
lea ecx, [esp + 0x48]
mov byte [esp + 0xfe8], 0x24
call fcn.005289f4
mov esi, 1
cmp eax, esi
jne 0x436c45
cmp dword [esp + 0x11c], esi
jne 0x436c45
lea edx, [esp + 0x2c]
push edx
call fcn.00478ac0
add esp, 4
mov ecx, ebp
push eax
push 0
call fcn.00478920
mov ecx, dword [esp + 0x3c]
mov edi, dword [esp + 0x34]
mov eax, ecx
push ecx
neg eax
sbb eax, eax
mov ecx, ebp
and eax, edi
push eax
call fcn.004789b0
jmp 0x436c47
xor esi, esi
lea ecx, [esp + 0x48]
mov byte [esp + 0xfe8], bl
call fcn.0043a2d0
lea ecx, [esp + 0x2c]
mov dword [esp + 0xfe8], 0xffffffff
mov dword [esp + 0x2c], 0x55f890
call fcn.00477ef0
jmp case.0x436296.3
mov ecx, edi
call fcn.00478a80
lea ecx, [esp + 0x2c]
mov esi, eax
call fcn.00477cf0
lea eax, [esp + 0x2c]
push 0
mov ebx, 0x25
push eax
push esi
lea ecx, [esp + 0x54]
mov dword [esp + 0xff4], ebx
call fcn.0043ade0
lea ecx, [esp + 0x48]
mov byte [esp + 0xfe8], 0x26
call fcn.005289f4
cmp eax, 1
jne 0x436cf4
lea ecx, [esp + 0x2c]
push ecx
call fcn.00478ac0
add esp, 4
mov ecx, ebp
push eax
push 0
call fcn.00478920
mov ecx, dword [esp + 0x3c]
mov esi, dword [esp + 0x34]
mov eax, ecx
push ecx
neg eax
sbb eax, eax
mov ecx, ebp
and eax, esi
push eax
call fcn.004789b0
mov esi, 1
jmp 0x436cf6
xor esi, esi
lea ecx, [esp + 0x2a4]
mov byte [esp + 0xfe8], 0x32
call fcn.00526979
lea ecx, [esp + 0x290]
mov byte [esp + 0xfe8], 0x31
call fcn.00526979
mov edi, 0x55f890
lea ecx, [esp + 0x27c]
mov byte [esp + 0xfe8], 0x30
mov dword [esp + 0x27c], edi
call fcn.00477ef0
lea ecx, [esp + 0x268]
mov byte [esp + 0xfe8], 0x2f
mov dword [esp + 0x268], edi
call fcn.00477ef0
lea ecx, [esp + 0x254]
mov byte [esp + 0xfe8], 0x2e
mov dword [esp + 0x254], edi
call fcn.00477ef0
lea ecx, [esp + 0x20c]
mov byte [esp + 0xfe8], 0x2d
call fcn.004e75a0
lea ecx, [esp + 0x1d0]
mov byte [esp + 0xfe8], 0x2c
call fcn.0053d0df
lea ecx, [esp + 0x194]
mov byte [esp + 0xfe8], 0x2b
call fcn.0053cfdc
lea ecx, [esp + 0x158]
mov byte [esp + 0xfe8], 0x2a
call fcn.0053ce1d
lea ecx, [esp + 0x11c]
mov byte [esp + 0xfe8], 0x29
call fcn.0053ce1d
lea ecx, [esp + 0xe0]
mov byte [esp + 0xfe8], 0x28
call fcn.0053ce1d
lea ecx, [esp + 0xa4]
mov byte [esp + 0xfe8], 0x27
call fcn.0053ce83
lea ecx, [esp + 0x48]
mov byte [esp + 0xfe8], bl
call fcn.0052862a
lea ecx, [esp + 0x2c]
mov dword [esp + 0xfe8], 0xffffffff
mov dword [esp + 0x2c], edi
call fcn.00477ef0
jmp case.0x436296.3
mov ecx, edi
call fcn.00478a80
mov edx, dword [0x5ada84]
mov ebx, eax
mov dword [esp + 0x18], edx
lea eax, [esp + 0x18]
mov ecx, edi
push eax
mov dword [esp + 0xfec], 0x33
call fcn.00478a00
mov ecx, dword [esp + 0x18]
push 0
push ecx
push ebx
lea ecx, [esp + 0x54]
call fcn.00445f90
lea ecx, [esp + 0x48]
mov byte [esp + 0xfe8], 0x34
call fcn.005289f4
lea ecx, [esp + 0x288]
mov byte [esp + 0xfe8], 0x39
mov dword [esp + 0x288], 0x55f890
call fcn.00477ef0
lea ecx, [esp + 0x23c]
mov byte [esp + 0xfe8], 0x38
call fcn.0053cdc3
lea ecx, [esp + 0x200]
mov byte [esp + 0xfe8], 0x37
call fcn.0053d0df
lea ecx, [esp + 0x1c4]
mov byte [esp + 0xfe8], 0x36
call fcn.0053cdc3
lea ecx, [esp + 0xa4]
mov byte [esp + 0xfe8], 0x35
call fcn.004ecc60
lea ecx, [esp + 0x48]
mov byte [esp + 0xfe8], 0x33
call fcn.0052862a
lea ecx, [esp + 0x18]
mov dword [esp + 0xfe8], 0xffffffff
call fcn.00527eff
jmp case.0x436296.3
push 0
lea ecx, [esp + 0x4c]
call fcn.0043cc30
lea ecx, [esp + 0x48]
mov dword [esp + 0xfe8], 0x3a
call fcn.005289f4
lea ecx, [esp + 0x48]
mov dword [esp + 0xfe8], 0xffffffff
call fcn.0043ce70
jmp case.0x436296.3
push 0
lea ecx, [esp + 0x640]
call fcn.0043e180
lea ecx, [esp + 0x63c]
mov dword [esp + 0xfe8], 0x3b
call fcn.005289f4
lea ecx, [esp + 0xe80]
mov dword [esp + 0xfe8], 0x5d
call fcn.0053d0df
lea ecx, [esp + 0xe44]
mov byte [esp + 0xfe8], 0x5c
call fcn.0053d0df
lea ecx, [esp + 0xe08]
mov byte [esp + 0xfe8], 0x5b
call fcn.0053cfdc
lea ecx, [esp + 0xdcc]
mov byte [esp + 0xfe8], 0x5a
call fcn.0053ce1d
lea ecx, [esp + 0xd90]
mov byte [esp + 0xfe8], 0x59
call fcn.0053ce1d
lea ecx, [esp + 0xd54]
mov byte [esp + 0xfe8], 0x58
call fcn.0053ce1d
lea ecx, [esp + 0xd18]
mov byte [esp + 0xfe8], 0x57
call fcn.0053ce1d
lea ecx, [esp + 0xcdc]
mov byte [esp + 0xfe8], 0x56
call fcn.0053ce1d
lea ecx, [esp + 0xca0]
mov byte [esp + 0xfe8], 0x55
call fcn.0053ce1d
lea ecx, [esp + 0xc64]
mov byte [esp + 0xfe8], 0x54
call fcn.0053ce1d
lea ecx, [esp + 0xc28]
mov byte [esp + 0xfe8], 0x53
call fcn.0053ce1d
lea ecx, [esp + 0xbc0]
mov byte [esp + 0xfe8], 0x52
call fcn.0040f770
lea ecx, [esp + 0xb84]
mov byte [esp + 0xfe8], 0x51
call fcn.0053ce1d
mov byte [esp + 0xfe8], 0x50
lea ecx, [esp + 0xb48]
call fcn.0053ce1d
lea ecx, [esp + 0xb0c]
mov byte [esp + 0xfe8], 0x4f
call fcn.0053d0df
lea ecx, [esp + 0xad0]
mov byte [esp + 0xfe8], 0x4e
call fcn.0053d0df
lea ecx, [esp + 0xa94]
mov byte [esp + 0xfe8], 0x4d
call fcn.0053ce1d
lea ecx, [esp + 0xa58]
mov byte [esp + 0xfe8], 0x4c
call fcn.0053ce1d
lea ecx, [esp + 0xa1c]
mov byte [esp + 0xfe8], 0x4b
call fcn.0053ce1d
lea ecx, [esp + 0x9e0]
mov byte [esp + 0xfe8], 0x4a
call fcn.0053ce1d
lea ecx, [esp + 0x9a4]
mov byte [esp + 0xfe8], 0x49
call fcn.0053ce1d
lea ecx, [esp + 0x968]
mov byte [esp + 0xfe8], 0x48
call fcn.0053cfdc
lea ecx, [esp + 0x92c]
mov byte [esp + 0xfe8], 0x47
call fcn.0053d0df
lea ecx, [esp + 0x8f0]
mov byte [esp + 0xfe8], 0x46
call fcn.0053d0df
lea ecx, [esp + 0x8b4]
mov byte [esp + 0xfe8], 0x45
call fcn.0053d0df
lea ecx, [esp + 0x878]
mov byte [esp + 0xfe8], 0x44
call fcn.0053ce1d
lea ecx, [esp + 0x83c]
mov byte [esp + 0xfe8], 0x43
call fcn.0053d0df
lea ecx, [esp + 0x800]
mov byte [esp + 0xfe8], 0x42
call fcn.0053d0df
lea ecx, [esp + 0x7c4]
mov byte [esp + 0xfe8], 0x41
call fcn.0053ce1d
lea ecx, [esp + 0x788]
mov byte [esp + 0xfe8], 0x40
call fcn.0053ce1d
lea ecx, [esp + 0x74c]
mov byte [esp + 0xfe8], 0x3f
call fcn.0053ce1d
lea ecx, [esp + 0x710]
mov byte [esp + 0xfe8], 0x3e
call fcn.0053ce1d
lea ecx, [esp + 0x6d4]
mov byte [esp + 0xfe8], 0x3d
call fcn.0053cfdc
lea ecx, [esp + 0x698]
mov byte [esp + 0xfe8], 0x3c
call fcn.00525c6f
mov dword [esp + 0xfe8], 0xffffffff
lea ecx, [esp + 0x63c]
jmp 0x43770d
push 0
lea ecx, [esp + 0x4c]
call fcn.00440d40
lea ecx, [esp + 0x48]
mov dword [esp + 0xfe8], 0x5e
call fcn.005289f4
lea ecx, [esp + 0x188]
mov dword [esp + 0xfe8], 0x64
call fcn.00526979
lea ecx, [esp + 0x174]
mov byte [esp + 0xfe8], 0x63
call fcn.00526979
lea ecx, [esp + 0x160]
mov byte [esp + 0xfe8], 0x62
call fcn.00526979
lea ecx, [esp + 0x11c]
mov byte [esp + 0xfe8], 0x61
call fcn.0053ce83
lea ecx, [esp + 0xe0]
mov byte [esp + 0xfe8], 0x60
call fcn.0053d0df
lea ecx, [esp + 0xa4]
mov byte [esp + 0xfe8], 0x5f
call fcn.0053d0df
mov dword [esp + 0xfe8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x43770d
push 0
lea ecx, [esp + 0x4c]
call fcn.00443430
lea edx, [esp + 0x11c]
mov ecx, edi
push edx
mov dword [esp + 0xfec], 0x65
call fcn.00478a00
lea ecx, [esp + 0x48]
call fcn.005289f4
cmp eax, 1
jne 0x437354
mov eax, dword [esp + 0x11c]
push eax
call fcn.00478aa0
add esp, 4
add eax, 4
mov ecx, ebp
push eax
push 0
call fcn.00478920
mov ecx, dword [esp + 0x11c]
push ecx
mov ecx, ebp
call fcn.00478990
mov edx, dword [esp + 0x120]
mov ecx, ebp
push edx
call fcn.00478970
mov esi, 1
jmp 0x437356
xor esi, esi
lea ecx, [esp + 0x11c]
mov dword [esp + 0xfe8], 0x68
call fcn.00527eff
lea ecx, [esp + 0xe0]
mov byte [esp + 0xfe8], 0x67
call fcn.0053cfdc
lea ecx, [esp + 0xa4]
mov byte [esp + 0xfe8], 0x66
call fcn.0053ce1d
mov dword [esp + 0xfe8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x43770d
push 0
lea ecx, [esp + 0x4c]
call fcn.00443660
mov ecx, edi
mov dword [esp + 0xfe8], 0x69
call fcn.00478a80
mov dword [esp + 0x194], eax
lea eax, [esp + 0x198]
push eax
mov ecx, edi
call fcn.00478a00
lea ecx, [esp + 0x48]
call fcn.005289f4
lea ecx, [esp + 0x198]
mov dword [esp + 0xfe8], 0x6e
call fcn.00527eff
lea ecx, [esp + 0x158]
mov byte [esp + 0xfe8], 0x6d
call fcn.0053cfdc
lea ecx, [esp + 0x11c]
mov byte [esp + 0xfe8], 0x6c
call fcn.0053cfdc
lea ecx, [esp + 0xe0]
mov byte [esp + 0xfe8], 0x6b
call fcn.0053ce1d
lea ecx, [esp + 0xa4]
mov byte [esp + 0xfe8], 0x6a
call fcn.0053cdc3
mov dword [esp + 0xfe8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x43770d
push 0
lea ecx, [esp + 0x4c]
call fcn.00443f60
lea ecx, [esp + 0x158]
mov dword [esp + 0xfe8], 0x6f
push ecx
mov ecx, edi
call fcn.00478a00
lea ecx, [esp + 0x48]
call fcn.005289f4
lea ecx, [esp + 0x158]
mov dword [esp + 0xfe8], 0x73
call fcn.00527eff
lea ecx, [esp + 0x11c]
mov byte [esp + 0xfe8], 0x72
call fcn.0053cfdc
lea ecx, [esp + 0xe0]
mov byte [esp + 0xfe8], 0x71
call fcn.0053ce1d
lea ecx, [esp + 0xa4]
mov byte [esp + 0xfe8], 0x70
call fcn.0053cdc3
mov dword [esp + 0xfe8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x43770d
push 0
lea ecx, [esp + 0x4c]
call fcn.00444990
lea ecx, [esp + 0x48]
mov dword [esp + 0xfe8], 0x74
call fcn.005289f4
mov dword [esp + 0xfe8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x43770d
mov ecx, edi
call fcn.00478a80
push 0
mov ecx, edi
mov esi, eax
call fcn.00478a80
push eax
push esi
lea ecx, [esp + 0x54]
call fcn.00446800
lea ecx, [esp + 0x48]
mov dword [esp + 0xfe8], 0x75
call fcn.005289f4
mov esi, eax
dec esi
neg esi
sbb esi, esi
inc esi
lea ecx, [esp + 0x1c4]
mov dword [esp + 0xfe8], 0x77
call fcn.0053d0df
lea ecx, [esp + 0xa4]
mov byte [esp + 0xfe8], 0x76
call fcn.004ecc60
mov dword [esp + 0xfe8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x43770d
mov ecx, edi
call fcn.00478a80
cmp eax, 1
jne 0x4375ef
mov ecx, dword [0x5b10a0]
test ecx, ecx
jne 0x4375ef
push 0x5b0a40
call fcn.00478aa0
add esp, 4
add eax, 4
mov ecx, ebp
push eax
push 0
call fcn.00478920
push 0
mov ecx, ebp
call fcn.00478970
push 0x5b0a40
mov ecx, ebp
call fcn.00478990
mov esi, 1
jmp case.0x436296.3
mov edx, dword [esp + 0x14]
push 0
push eax
lea ecx, [esp + 0x504]
mov dword [edx + 0x9ec], 2
call fcn.004450d0
lea ecx, [esp + 0x4fc]
mov dword [esp + 0xfe8], 0x78
call fcn.005289f4
cmp eax, 1
jne 0x43766a
mov eax, dword [esp + 0x610]
push eax
call fcn.00478aa0
add esp, 4
add eax, 4
mov ecx, ebp
push eax
push 0
call fcn.00478920
mov ecx, dword [esp + 0x60c]
push ecx
mov ecx, ebp
call fcn.00478970
mov edx, dword [esp + 0x610]
mov ecx, ebp
push edx
call fcn.00478990
mov esi, 1
jmp 0x43766c
xor esi, esi
lea ecx, [esp + 0x628]
mov dword [esp + 0xfe8], 0x7f
call fcn.00526979
lea ecx, [esp + 0x61c]
mov byte [esp + 0xfe8], 0x7e
call fcn.00525daa
lea ecx, [esp + 0x614]
mov byte [esp + 0xfe8], 0x7d
call fcn.00525daa
lea ecx, [esp + 0x610]
mov byte [esp + 0xfe8], 0x7c
call fcn.00527eff
lea ecx, [esp + 0x5d0]
mov byte [esp + 0xfe8], 0x7b
call fcn.00525928
lea ecx, [esp + 0x594]
mov byte [esp + 0xfe8], 0x7a
call fcn.005257a3
lea ecx, [esp + 0x558]
mov byte [esp + 0xfe8], 0x79
call fcn.0053ce1d
mov dword [esp + 0xfe8], 0xffffffff
lea ecx, [esp + 0x4fc]
call fcn.0052862a
test ebp, ebp
pop edi
je 0x43772b
mov eax, dword [ebp + 4]
mov dword [ebp], 0
mov dword [ebp + 0xc], eax
mov dword [ebp + 4], 0
mov eax, esi
pop esi
pop ebp
mov ecx, dword [esp + 0xfd4]
pop ebx
mov dword fs:[0], ecx
add esp, 0xfdc
ret 0x10