Function at 0x433040
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push 0xffffffffffffffff
push 0x53d181
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xae0
push ebx
mov ebx, dword [esp + 0xb00]
test ebx, ebx
mov dword [esp + 0xc], ecx
jne 0x433078
mov ebx, dword [0x59a3dc]
mov dword [esp + 0xb00], ebx
mov eax, dword [esp + 0xaf4]
test eax, eax
jne 0x43308a
xor eax, eax
jmp 0x434552
push ebp
mov ebp, dword [esp + 0xb00]
test ebp, ebp
push esi
je 0x4330a2
push 0
push 0
mov ecx, ebp
call fcn.00473fd0
push edi
mov edi, dword [esp + 0xb04]
test edi, edi
je 0x4330c1
mov eax, dword [edi + 4]
mov dword [edi], 0
mov dword [edi + 0xc], eax
mov dword [edi + 4], 0
mov ecx, dword [esp + 0xb00]
xor esi, esi
lea eax, [ecx - 1]
cmp eax, 0x1c
ja case.0x4330d6.3
jmp dword [eax*4 + 0x43456c]
mov ecx, dword [esp + 0x18]
push edi
call fcn.00432f00
mov esi, eax
jmp case.0x4330d6.3
mov ecx, dword [esp + 0x18]
push 1
push 0x587d08
push 0
push 0
push 0x587d00
call fcn.00403480
jmp case.0x4330d6.3
xor esi, esi
lea ecx, [esp + 0x48]
push esi
call fcn.00443c30
lea edx, [esp + 0xe0]
mov ecx, edi
push edx
mov dword [esp + 0xafc], esi
call fcn.004740b0
lea ecx, [esp + 0x48]
call fcn.0051a4af
cmp eax, 1
jne 0x43316b
mov eax, dword [esp + 0xe0]
push eax
call fcn.00474150
add esp, 4
mov ecx, ebp
push eax
push esi
call fcn.00473fd0
mov ecx, dword [esp + 0xe0]
push ecx
mov ecx, ebp
call fcn.00474040
mov esi, 1
jmp 0x433179
mov edx, dword [esp + 0x18]
mov dword [edx + 0x9e8], 1
lea ecx, [esp + 0xe0]
mov dword [esp + 0xaf8], 2
call fcn.00519a06
lea ecx, [esp + 0xa4]
mov byte [esp + 0xaf8], 1
call fcn.0052ea28
mov dword [esp + 0xaf8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x434530
mov eax, dword [0x596a5c]
mov dword [esp + 0x10], eax
lea ecx, [esp + 0x10]
mov ebx, 3
push ecx
mov ecx, edi
mov dword [esp + 0xafc], ebx
call fcn.004740b0
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x40]
push edx
push 0x587cd8
push eax
call fcn.004e0190
add esp, 0xc
mov eax, dword [eax]
push 0x21
push eax
mov ecx, 0x599b30
mov byte [esp + 0xb00], 4
call fcn.00432e20
mov esi, eax
lea ecx, [esp + 0x40]
dec esi
mov byte [esp + 0xaf8], bl
neg esi
sbb esi, esi
inc esi
call fcn.00519a06
test esi, esi
jne 0x433231
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0x9e8], 1
lea ecx, [esp + 0x10]
mov dword [esp + 0xaf8], 0xffffffff
call fcn.00519a06
jmp case.0x4330d6.3
mov edx, dword [0x596a5c]
mov dword [esp + 0x10], edx
lea eax, [esp + 0x10]
mov ebx, 5
push eax
mov ecx, edi
mov dword [esp + 0xafc], ebx
call fcn.004740b0
mov ecx, dword [esp + 0x10]
push 0
push ecx
lea ecx, [esp + 0x50]
call fcn.00436150
lea ecx, [esp + 0x48]
mov byte [esp + 0xaf8], 6
call fcn.0051a4af
mov esi, eax
cmp esi, 2
jne 0x4332a4
mov edx, dword [esp + 0x18]
mov dword [edx + 0x9e8], 1
jmp 0x4332be
push 4
push 0
mov ecx, ebp
call fcn.00473fd0
mov eax, dword [esp + 0xa4]
mov ecx, ebp
push eax
call fcn.00474020
lea ecx, [esp + 0xe4]
mov byte [esp + 0xaf8], 8
call fcn.0052e920
lea ecx, [esp + 0xa8]
mov byte [esp + 0xaf8], 7
call fcn.0052e70c
lea ecx, [esp + 0x48]
mov byte [esp + 0xaf8], bl
call fcn.0051a0e5
lea ecx, [esp + 0x10]
mov dword [esp + 0xaf8], 0xffffffff
call fcn.00519a06
jmp case.0x4330d6.3
mov ecx, dword [0x596a5c]
mov dword [esp + 0x1c], ecx
lea edx, [esp + 0x1c]
mov ecx, edi
push edx
mov dword [esp + 0xafc], 9
call fcn.004740b0
lea ecx, [esp + 0x2c]
call fcn.004733a0
lea eax, [esp + 0x2c]
mov ecx, edi
push eax
mov byte [esp + 0xafc], 0xa
call fcn.004740f0
mov ecx, dword [0x596a5c]
mov dword [esp + 0x10], ecx
mov eax, dword [0x59a3dc]
lea edx, [esp + 0x10]
mov bl, 0xb
push edx
lea ecx, [eax + 0xc0]
mov byte [esp + 0xafc], bl
call fcn.004db830
push 0
push 0x587ca0
mov ecx, 0x599b30
call fcn.00463a00
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x2c]
push 0
push ecx
push edx
lea ecx, [esp + 0x54]
call fcn.004363d0
lea ecx, [esp + 0x48]
mov byte [esp + 0xaf8], 0xc
call fcn.0051a4af
mov eax, dword [esp + 0x10]
push 0
push eax
mov ecx, 0x599b30
call fcn.00463a00
mov esi, dword [esp + 0xa4]
lea ecx, [esp + 0xe4]
mov byte [esp + 0xaf8], 0xe
call fcn.0052e7cc
lea ecx, [esp + 0xa8]
mov byte [esp + 0xaf8], 0xd
call fcn.0052e70c
lea ecx, [esp + 0x48]
mov byte [esp + 0xaf8], bl
call fcn.0051a0e5
lea ecx, [esp + 0x10]
mov byte [esp + 0xaf8], 0xa
call fcn.00519a06
lea ecx, [esp + 0x2c]
mov byte [esp + 0xaf8], 9
mov dword [esp + 0x2c], 0x54d7d0
call fcn.004735a0
lea ecx, [esp + 0x1c]
mov dword [esp + 0xaf8], 0xffffffff
call fcn.00519a06
jmp case.0x4330d6.3
cmp dword [esp + 0xb00], 0xb
jne 0x4334a0
push 0x1f8
call fcn.0051a8b5
add esp, 4
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0xaf8], 0xf
je 0x433486
push ebx
push 0x587c78
push 0x1804
push 0
push 0x587c74
push 1
mov ecx, eax
call fcn.00516819
jmp 0x433488
xor eax, eax
or ebx, 0xffffffff
mov edi, eax
mov dword [esp + 0xaf8], ebx
mov dword [eax + 0x8c], 0x587c60
jmp 0x4334f5
push 0x234
call fcn.0051a8b5
add esp, 4
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0xaf8], 0x10
je 0x4334dd
push ebx
push 0x587c34
push 0x1804
push 0
push 0x587c30
push 1
mov ecx, eax
call fcn.00443f00
jmp 0x4334df
xor eax, eax
or ebx, 0xffffffff
mov edi, eax
mov dword [esp + 0xaf8], ebx
mov dword [eax + 0x8c], 0x587c1c
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0xb8]
cmp eax, 1
je 0x433508
xor esi, esi
jmp 0x433560
lea eax, [esp + 0x14]
mov ecx, edi
push eax
call fcn.00516a56
mov eax, dword [esp + 0x14]
mov dword [esp + 0xaf8], 0x11
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x43352e
xor esi, esi
jmp 0x433550
push eax
mov esi, eax
call fcn.00474150
add esp, 4
mov ecx, ebp
push eax
push 0
call fcn.00473fd0
push esi
mov ecx, ebp
call fcn.00474040
mov esi, 1
lea ecx, [esp + 0x14]
mov dword [esp + 0xaf8], ebx
call fcn.00519a06
test edi, edi
je case.0x4330d6.3
mov edx, dword [edi]
push 1
mov ecx, edi
call dword [edx + 4]
jmp case.0x4330d6.3
push ebx
push 0x587c08
push 0x8806
push 0
push 0x587c74
push 0
lea ecx, [esp + 0x60]
call fcn.00516819
mov ebx, 0x12
mov ecx, edi
mov dword [esp + 0xaf8], ebx
call fcn.00474130
test eax, eax
mov dword [esp + 0xd4], 0x587c00
je 0x4335c0
mov dword [esp + 0xd4], 0x587bf8
lea ecx, [esp + 0x48]
call fcn.0051697b
cmp eax, 1
je 0x4335d2
xor esi, esi
jmp 0x433629
lea eax, [esp + 0x14]
lea ecx, [esp + 0x48]
push eax
call fcn.00516a56
mov eax, dword [esp + 0x14]
mov byte [esp + 0xaf8], 0x13
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x4335f7
xor esi, esi
jmp 0x433619
push eax
mov esi, eax
call fcn.00474150
add esp, 4
mov ecx, ebp
push eax
push 0
call fcn.00473fd0
push esi
mov ecx, ebp
call fcn.00474040
mov esi, 1
lea ecx, [esp + 0x14]
mov byte [esp + 0xaf8], bl
call fcn.00519a06
lea ecx, [esp + 0xf4]
mov dword [esp + 0xaf8], 0x14
call fcn.00519a06
mov dword [esp + 0xaf8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x434530
mov ecx, edi
call fcn.00474130
mov ebx, eax
mov eax, dword [0x596a5c]
mov dword [esp + 0x10], eax
mov dword [esp + 0xaf8], 0x15
mov dword [esp + 0x18], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x10]
mov byte [esp + 0xaf8], 0x19
push ecx
mov ecx, edi
call fcn.004740b0
lea edx, [esp + 0x1c]
mov ecx, edi
push edx
call fcn.004740b0
lea eax, [esp + 0x18]
mov ecx, edi
push eax
call fcn.004740b0
lea ecx, [esp + 0x20]
push ecx
mov ecx, edi
call fcn.004740b0
lea edx, [esp + 0x14]
mov ecx, edi
push edx
call fcn.004740b0
mov eax, dword [esp + 0x18]
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x4336e9
test ebx, ebx
jne 0x4336db
push 0x587be8
jmp 0x4336e0
push 0x587bd0
lea ecx, [esp + 0x1c]
call fcn.00519b43
lea ecx, [esp + 0x44]
push 2
push ecx
lea ecx, [esp + 0x28]
call fcn.00515fac
mov eax, dword [eax]
push 0x587bcc
push eax
call fcn.00501dbe
add esp, 8
lea ecx, [esp + 0x44]
test eax, eax
setne byte [esp + 0x27]
call fcn.00519a06
mov al, byte [esp + 0x27]
test al, al
je 0x433748
mov edx, dword [esp + 0x20]
mov eax, dword [edx - 8]
test eax, eax
je 0x43373a
push 0x587bc8
lea ecx, [esp + 0x24]
call fcn.00519d96
push 0x587bb0
lea ecx, [esp + 0x24]
call fcn.00519d96
mov eax, dword [esp + 0x1c]
mov esi, ebx
neg esi
sbb esi, esi
push 0x587c30
and esi, 0x7002
push eax
add esi, 0x1804
call fcn.00501e6d
add esp, 8
test eax, eax
jne 0x4337b6
push 0x234
call fcn.0051a8b5
add esp, 4
mov dword [esp + 0x28], eax
test eax, eax
mov byte [esp + 0xaf8], 0x1a
je 0x4337fc
mov ecx, dword [esp + 0xb0c]
mov edx, dword [esp + 0x20]
push ecx
mov ecx, dword [esp + 0x14]
push edx
mov edx, dword [esp + 0x24]
push esi
push ecx
xor ecx, ecx
push edx
test ebx, ebx
sete cl
push ecx
mov ecx, eax
call fcn.00443f00
jmp 0x4337fe
push 0x1f8
call fcn.0051a8b5
add esp, 4
mov dword [esp + 0x28], eax
test eax, eax
mov byte [esp + 0xaf8], 0x1b
je 0x4337fc
mov edx, dword [esp + 0xb0c]
mov ecx, dword [esp + 0x20]
push edx
mov edx, dword [esp + 0x14]
push ecx
mov ecx, dword [esp + 0x24]
push esi
push edx
xor edx, edx
push ecx
test ebx, ebx
sete dl
push edx
mov ecx, eax
call fcn.00516819
jmp 0x4337fe
xor eax, eax
mov edi, eax
mov eax, dword [esp + 0x18]
mov byte [esp + 0xaf8], 0x19
mov dword [edi + 0x8c], eax
mov eax, dword [esp + 0x14]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x433823
mov dword [edi + 0x88], eax
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0xb8]
cmp eax, 1
je 0x433836
xor esi, esi
jmp 0x43388c
lea eax, [esp + 0x28]
mov ecx, edi
push eax
call fcn.00516a56
mov eax, dword [esp + 0x28]
mov byte [esp + 0xaf8], 0x1c
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x433859
xor esi, esi
jmp 0x43387b
push eax
mov esi, eax
call fcn.00474150
add esp, 4
mov ecx, ebp
push eax
push 0
call fcn.00473fd0
push esi
mov ecx, ebp
call fcn.00474040
mov esi, 1
lea ecx, [esp + 0x28]
mov byte [esp + 0xaf8], 0x19
call fcn.00519a06
test edi, edi
je 0x433899
mov edx, dword [edi]
push 1
mov ecx, edi
call dword [edx + 4]
lea ecx, [esp + 0x14]
mov byte [esp + 0xaf8], 0x18
call fcn.00519a06
lea ecx, [esp + 0x1c]
mov byte [esp + 0xaf8], 0x17
call fcn.00519a06
lea ecx, [esp + 0x20]
mov byte [esp + 0xaf8], 0x16
call fcn.00519a06
lea ecx, [esp + 0x18]
mov byte [esp + 0xaf8], 0x15
call fcn.00519a06
lea ecx, [esp + 0x10]
mov dword [esp + 0xaf8], 0xffffffff
call fcn.00519a06
jmp case.0x4330d6.3
lea ecx, [esp + 0x2c]
call fcn.004733a0
lea eax, [esp + 0x2c]
mov ebx, 0x1d
push eax
mov ecx, edi
mov dword [esp + 0xafc], ebx
call fcn.004740f0
lea ecx, [esp + 0x2c]
push 0
push ecx
lea ecx, [esp + 0x50]
call fcn.004368e0
lea ecx, [esp + 0x48]
mov byte [esp + 0xaf8], 0x1e
call fcn.0051a4af
mov esi, 1
cmp eax, esi
jne 0x43397c
cmp dword [esp + 0x194], esi
jne 0x43397c
lea edx, [esp + 0x2c]
push edx
call fcn.00474170
add esp, 4
mov ecx, ebp
push eax
push 0
call fcn.00473fd0
mov ecx, dword [esp + 0x3c]
mov edi, dword [esp + 0x34]
mov eax, ecx
push ecx
neg eax
sbb eax, eax
mov ecx, ebp
and eax, edi
push eax
call fcn.00474060
jmp 0x43397e
xor esi, esi
lea ecx, [esp + 0x158]
mov byte [esp + 0xaf8], 0x22
call fcn.0052e70c
lea ecx, [esp + 0x11c]
mov byte [esp + 0xaf8], 0x21
call fcn.0052e70c
lea ecx, [esp + 0xe0]
mov byte [esp + 0xaf8], 0x20
call fcn.0052e70c
lea ecx, [esp + 0xa4]
mov byte [esp + 0xaf8], 0x1f
call fcn.0052e70c
lea ecx, [esp + 0x48]
mov byte [esp + 0xaf8], bl
call fcn.0051a0e5
lea ecx, [esp + 0x2c]
mov dword [esp + 0xaf8], 0xffffffff
mov dword [esp + 0x2c], 0x54d7d0
call fcn.004735a0
jmp case.0x4330d6.3
lea ecx, [esp + 0x2c]
call fcn.004733a0
lea eax, [esp + 0x2c]
mov ebx, 0x23
push eax
mov ecx, edi
mov dword [esp + 0xafc], ebx
call fcn.004740f0
lea ecx, [esp + 0x2c]
push 0
push ecx
lea ecx, [esp + 0x50]
call fcn.00437010
lea ecx, [esp + 0x48]
mov byte [esp + 0xaf8], 0x24
call fcn.0051a4af
mov esi, 1
cmp eax, esi
jne 0x433a85
cmp dword [esp + 0x11c], esi
jne 0x433a85
lea edx, [esp + 0x2c]
push edx
call fcn.00474170
add esp, 4
mov ecx, ebp
push eax
push 0
call fcn.00473fd0
mov ecx, dword [esp + 0x3c]
mov edi, dword [esp + 0x34]
mov eax, ecx
push ecx
neg eax
sbb eax, eax
mov ecx, ebp
and eax, edi
push eax
call fcn.00474060
jmp 0x433a87
xor esi, esi
lea ecx, [esp + 0x48]
mov byte [esp + 0xaf8], bl
call fcn.00437100
lea ecx, [esp + 0x2c]
mov dword [esp + 0xaf8], 0xffffffff
mov dword [esp + 0x2c], 0x54d7d0
call fcn.004735a0
jmp case.0x4330d6.3
mov ecx, edi
call fcn.00474130
lea ecx, [esp + 0x2c]
mov esi, eax
call fcn.004733a0
lea eax, [esp + 0x2c]
push 0
mov ebx, 0x25
push eax
push esi
lea ecx, [esp + 0x54]
mov dword [esp + 0xb04], ebx
call fcn.00437c10
lea ecx, [esp + 0x48]
mov byte [esp + 0xaf8], 0x26
call fcn.0051a4af
cmp eax, 1
jne 0x433b34
lea ecx, [esp + 0x2c]
push ecx
call fcn.00474170
add esp, 4
mov ecx, ebp
push eax
push 0
call fcn.00473fd0
mov ecx, dword [esp + 0x3c]
mov esi, dword [esp + 0x34]
mov eax, ecx
push ecx
neg eax
sbb eax, eax
mov ecx, ebp
and eax, esi
push eax
call fcn.00474060
mov esi, 1
jmp 0x433b36
xor esi, esi
lea ecx, [esp + 0x2a4]
mov byte [esp + 0xaf8], 0x32
call fcn.00518624
lea ecx, [esp + 0x290]
mov byte [esp + 0xaf8], 0x31
call fcn.00518624
mov edi, 0x54d7d0
lea ecx, [esp + 0x27c]
mov byte [esp + 0xaf8], 0x30
mov dword [esp + 0x27c], edi
call fcn.004735a0
lea ecx, [esp + 0x268]
mov byte [esp + 0xaf8], 0x2f
mov dword [esp + 0x268], edi
call fcn.004735a0
lea ecx, [esp + 0x254]
mov byte [esp + 0xaf8], 0x2e
mov dword [esp + 0x254], edi
call fcn.004735a0
lea ecx, [esp + 0x20c]
mov byte [esp + 0xaf8], 0x2d
call fcn.004e0a10
lea ecx, [esp + 0x1d0]
mov byte [esp + 0xaf8], 0x2c
call fcn.0052ea28
lea ecx, [esp + 0x194]
mov byte [esp + 0xaf8], 0x2b
call fcn.0052e920
lea ecx, [esp + 0x158]
mov byte [esp + 0xaf8], 0x2a
call fcn.0052e766
lea ecx, [esp + 0x11c]
mov byte [esp + 0xaf8], 0x29
call fcn.0052e766
lea ecx, [esp + 0xe0]
mov byte [esp + 0xaf8], 0x28
call fcn.0052e766
lea ecx, [esp + 0xa4]
mov byte [esp + 0xaf8], 0x27
call fcn.0052e7cc
lea ecx, [esp + 0x48]
mov byte [esp + 0xaf8], bl
call fcn.0051a0e5
lea ecx, [esp + 0x2c]
mov dword [esp + 0xaf8], 0xffffffff
mov dword [esp + 0x2c], edi
call fcn.004735a0
jmp case.0x4330d6.3
mov ecx, edi
call fcn.00474130
mov edx, dword [0x596a5c]
mov ebx, eax
mov dword [esp + 0x14], edx
lea eax, [esp + 0x14]
mov ecx, edi
push eax
mov dword [esp + 0xafc], 0x33
call fcn.004740b0
mov ecx, dword [esp + 0x14]
push 0
push ecx
push ebx
lea ecx, [esp + 0x54]
call fcn.00442900
lea ecx, [esp + 0x48]
mov byte [esp + 0xaf8], 0x34
call fcn.0051a4af
lea ecx, [esp + 0x288]
mov byte [esp + 0xaf8], 0x39
mov dword [esp + 0x288], 0x54d7d0
call fcn.004735a0
lea ecx, [esp + 0x23c]
mov byte [esp + 0xaf8], 0x38
call fcn.0052e70c
lea ecx, [esp + 0x200]
mov byte [esp + 0xaf8], 0x37
call fcn.0052ea28
lea ecx, [esp + 0x1c4]
mov byte [esp + 0xaf8], 0x36
call fcn.0052e70c
lea ecx, [esp + 0xa4]
mov byte [esp + 0xaf8], 0x35
call fcn.004e5fe0
lea ecx, [esp + 0x48]
mov byte [esp + 0xaf8], 0x33
call fcn.0051a0e5
lea ecx, [esp + 0x14]
mov dword [esp + 0xaf8], 0xffffffff
call fcn.00519a06
jmp case.0x4330d6.3
push 0
lea ecx, [esp + 0x4c]
call fcn.00439a70
lea ecx, [esp + 0x48]
mov dword [esp + 0xaf8], 0x3a
call fcn.0051a4af
lea ecx, [esp + 0x48]
mov dword [esp + 0xaf8], 0xffffffff
call fcn.00439cb0
jmp case.0x4330d6.3
push 0
lea ecx, [esp + 0x4c]
call fcn.0043afc0
lea ecx, [esp + 0x48]
mov dword [esp + 0xaf8], 0x3b
call fcn.0051a4af
lea ecx, [esp + 0x850]
mov dword [esp + 0xaf8], 0x5c
call fcn.0052ea28
lea ecx, [esp + 0x814]
mov byte [esp + 0xaf8], 0x5b
call fcn.0052ea28
lea ecx, [esp + 0x7d8]
mov byte [esp + 0xaf8], 0x5a
call fcn.0052e920
lea ecx, [esp + 0x79c]
mov byte [esp + 0xaf8], 0x59
call fcn.0052e766
lea ecx, [esp + 0x760]
mov byte [esp + 0xaf8], 0x58
call fcn.0052e766
lea ecx, [esp + 0x724]
mov byte [esp + 0xaf8], 0x57
call fcn.0052e766
lea ecx, [esp + 0x6e8]
mov byte [esp + 0xaf8], 0x56
call fcn.0052e766
lea ecx, [esp + 0x6ac]
mov byte [esp + 0xaf8], 0x55
call fcn.0052e766
lea ecx, [esp + 0x670]
mov byte [esp + 0xaf8], 0x54
call fcn.0052e766
lea ecx, [esp + 0x634]
mov byte [esp + 0xaf8], 0x53
call fcn.0052e766
lea ecx, [esp + 0x5cc]
mov byte [esp + 0xaf8], 0x52
call fcn.0040dab0
lea ecx, [esp + 0x590]
mov byte [esp + 0xaf8], 0x51
call fcn.0052e766
lea ecx, [esp + 0x554]
mov byte [esp + 0xaf8], 0x50
call fcn.0052e766
mov byte [esp + 0xaf8], 0x4f
lea ecx, [esp + 0x518]
call fcn.0052ea28
lea ecx, [esp + 0x4dc]
mov byte [esp + 0xaf8], 0x4e
call fcn.0052ea28
lea ecx, [esp + 0x4a0]
mov byte [esp + 0xaf8], 0x4d
call fcn.0052e766
lea ecx, [esp + 0x464]
mov byte [esp + 0xaf8], 0x4c
call fcn.0052e766
lea ecx, [esp + 0x428]
mov byte [esp + 0xaf8], 0x4b
call fcn.0052e766
lea ecx, [esp + 0x3ec]
mov byte [esp + 0xaf8], 0x4a
call fcn.0052e766
lea ecx, [esp + 0x3b0]
mov byte [esp + 0xaf8], 0x49
call fcn.0052e766
lea ecx, [esp + 0x374]
mov byte [esp + 0xaf8], 0x48
call fcn.0052e920
lea ecx, [esp + 0x338]
mov byte [esp + 0xaf8], 0x47
call fcn.0052ea28
lea ecx, [esp + 0x2fc]
mov byte [esp + 0xaf8], 0x46
call fcn.0052ea28
lea ecx, [esp + 0x2c0]
mov byte [esp + 0xaf8], 0x45
call fcn.0052ea28
lea ecx, [esp + 0x284]
mov byte [esp + 0xaf8], 0x44
call fcn.0052e766
lea ecx, [esp + 0x248]
mov byte [esp + 0xaf8], 0x43
call fcn.0052ea28
lea ecx, [esp + 0x20c]
mov byte [esp + 0xaf8], 0x42
call fcn.0052ea28
lea ecx, [esp + 0x1d0]
mov byte [esp + 0xaf8], 0x41
call fcn.0052e766
lea ecx, [esp + 0x194]
mov byte [esp + 0xaf8], 0x40
call fcn.0052e766
lea ecx, [esp + 0x158]
mov byte [esp + 0xaf8], 0x3f
call fcn.0052e766
lea ecx, [esp + 0x11c]
mov byte [esp + 0xaf8], 0x3e
call fcn.0052e766
lea ecx, [esp + 0xe0]
mov byte [esp + 0xaf8], 0x3d
call fcn.0052e920
lea ecx, [esp + 0xa4]
mov byte [esp + 0xaf8], 0x3c
call fcn.00517945
mov dword [esp + 0xaf8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x434530
push 0
lea ecx, [esp + 0x4c]
call fcn.0043d6b0
lea ecx, [esp + 0x48]
mov dword [esp + 0xaf8], 0x5d
call fcn.0051a4af
lea ecx, [esp + 0x188]
mov dword [esp + 0xaf8], 0x63
call fcn.00518624
lea ecx, [esp + 0x174]
mov byte [esp + 0xaf8], 0x62
call fcn.00518624
lea ecx, [esp + 0x160]
mov byte [esp + 0xaf8], 0x61
call fcn.00518624
lea ecx, [esp + 0x11c]
mov byte [esp + 0xaf8], 0x60
call fcn.0052e7cc
lea ecx, [esp + 0xe0]
mov byte [esp + 0xaf8], 0x5f
call fcn.0052ea28
lea ecx, [esp + 0xa4]
mov byte [esp + 0xaf8], 0x5e
call fcn.0052ea28
mov dword [esp + 0xaf8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x434530
push 0
lea ecx, [esp + 0x4c]
call fcn.0043fdc0
lea edx, [esp + 0x11c]
mov ecx, edi
push edx
mov dword [esp + 0xafc], 0x64
call fcn.004740b0
lea ecx, [esp + 0x48]
call fcn.0051a4af
cmp eax, 1
jne 0x434177
mov eax, dword [esp + 0x11c]
push eax
call fcn.00474150
add esp, 4
add eax, 4
mov ecx, ebp
push eax
push 0
call fcn.00473fd0
mov ecx, dword [esp + 0x11c]
push ecx
mov ecx, ebp
call fcn.00474040
mov edx, dword [esp + 0x120]
mov ecx, ebp
push edx
call fcn.00474020
mov esi, 1
jmp 0x434179
xor esi, esi
lea ecx, [esp + 0x11c]
mov dword [esp + 0xaf8], 0x67
call fcn.00519a06
lea ecx, [esp + 0xe0]
mov byte [esp + 0xaf8], 0x66
call fcn.0052e920
lea ecx, [esp + 0xa4]
mov byte [esp + 0xaf8], 0x65
call fcn.0052e766
mov dword [esp + 0xaf8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x434530
push 0
lea ecx, [esp + 0x4c]
call fcn.0043fff0
mov ecx, edi
mov dword [esp + 0xaf8], 0x68
call fcn.00474130
mov dword [esp + 0x194], eax
lea eax, [esp + 0x198]
push eax
mov ecx, edi
call fcn.004740b0
lea ecx, [esp + 0x48]
call fcn.0051a4af
lea ecx, [esp + 0x198]
mov dword [esp + 0xaf8], 0x6d
call fcn.00519a06
lea ecx, [esp + 0x158]
mov byte [esp + 0xaf8], 0x6c
call fcn.0052e920
lea ecx, [esp + 0x11c]
mov byte [esp + 0xaf8], 0x6b
call fcn.0052e920
lea ecx, [esp + 0xe0]
mov byte [esp + 0xaf8], 0x6a
call fcn.0052e766
lea ecx, [esp + 0xa4]
mov byte [esp + 0xaf8], 0x69
call fcn.0052e70c
mov dword [esp + 0xaf8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x434530
push 0
lea ecx, [esp + 0x4c]
call fcn.004408c0
lea ecx, [esp + 0x158]
mov dword [esp + 0xaf8], 0x6e
push ecx
mov ecx, edi
call fcn.004740b0
lea ecx, [esp + 0x48]
call fcn.0051a4af
lea ecx, [esp + 0x158]
mov dword [esp + 0xaf8], 0x72
call fcn.00519a06
lea ecx, [esp + 0x11c]
mov byte [esp + 0xaf8], 0x71
call fcn.0052e920
lea ecx, [esp + 0xe0]
mov byte [esp + 0xaf8], 0x70
call fcn.0052e766
lea ecx, [esp + 0xa4]
mov byte [esp + 0xaf8], 0x6f
call fcn.0052e70c
mov dword [esp + 0xaf8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x434530
push 0
lea ecx, [esp + 0x4c]
call fcn.00441320
lea ecx, [esp + 0x48]
mov dword [esp + 0xaf8], 0x73
call fcn.0051a4af
mov dword [esp + 0xaf8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x434530
mov ecx, edi
call fcn.00474130
push 0
mov ecx, edi
mov esi, eax
call fcn.00474130
push eax
push esi
lea ecx, [esp + 0x54]
call fcn.00443160
lea ecx, [esp + 0x48]
mov dword [esp + 0xaf8], 0x74
call fcn.0051a4af
mov esi, eax
dec esi
neg esi
sbb esi, esi
inc esi
lea ecx, [esp + 0x1c4]
mov dword [esp + 0xaf8], 0x76
call fcn.0052ea28
lea ecx, [esp + 0xa4]
mov byte [esp + 0xaf8], 0x75
call fcn.004e5fe0
mov dword [esp + 0xaf8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x434530
mov ecx, edi
call fcn.00474130
cmp eax, 1
jne 0x434412
mov ecx, dword [0x5999c0]
test ecx, ecx
jne 0x434412
push 0x599360
call fcn.00474150
add esp, 4
add eax, 4
mov ecx, ebp
push eax
push 0
call fcn.00473fd0
push 0
mov ecx, ebp
call fcn.00474020
push 0x599360
mov ecx, ebp
call fcn.00474040
mov esi, 1
jmp case.0x4330d6.3
mov edx, dword [esp + 0x18]
push 0
push eax
lea ecx, [esp + 0x9b8]
mov dword [edx + 0x9d8], 2
call fcn.00441a40
lea ecx, [esp + 0x9b0]
mov dword [esp + 0xaf8], 0x77
call fcn.0051a4af
cmp eax, 1
jne 0x43448d
mov eax, dword [esp + 0xac4]
push eax
call fcn.00474150
add esp, 4
add eax, 4
mov ecx, ebp
push eax
push 0
call fcn.00473fd0
mov ecx, dword [esp + 0xac0]
push ecx
mov ecx, ebp
call fcn.00474020
mov edx, dword [esp + 0xac4]
mov ecx, ebp
push edx
call fcn.00474040
mov esi, 1
jmp 0x43448f
xor esi, esi
lea ecx, [esp + 0xadc]
mov dword [esp + 0xaf8], 0x7e
call fcn.00518624
lea ecx, [esp + 0xad0]
mov byte [esp + 0xaf8], 0x7d
call fcn.00517a55
lea ecx, [esp + 0xac8]
mov byte [esp + 0xaf8], 0x7c
call fcn.00517a55
lea ecx, [esp + 0xac4]
mov byte [esp + 0xaf8], 0x7b
call fcn.00519a06
lea ecx, [esp + 0xa84]
mov byte [esp + 0xaf8], 0x7a
call fcn.005175fe
lea ecx, [esp + 0xa48]
mov byte [esp + 0xaf8], 0x79
call fcn.0051744e
lea ecx, [esp + 0xa0c]
mov byte [esp + 0xaf8], 0x78
call fcn.0052e766
mov dword [esp + 0xaf8], 0xffffffff
lea ecx, [esp + 0x9b0]
call fcn.0051a0e5
test ebp, ebp
pop edi
je 0x43454e
mov eax, dword [ebp + 4]
mov dword [ebp], 0
mov dword [ebp + 0xc], eax
mov dword [ebp + 4], 0
mov eax, esi
pop esi
pop ebp
mov ecx, dword [esp + 0xae4]
pop ebx
mov dword fs:[0], ecx
add esp, 0xaec
ret 0x10