Function at 0x436320
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push 0xffffffffffffffff
push 0x54dec8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xfd0
push ebx
mov ebx, dword [esp + 0xff0]
test ebx, ebx
mov dword [esp + 8], ecx
jne 0x436358
mov ebx, dword [0x5b1ac0]
mov dword [esp + 0xff0], ebx
mov eax, dword [esp + 0xfe4]
test eax, eax
jne 0x43636a
xor eax, eax
jmp 0x43784f
push ebp
mov ebp, dword [esp + 0xff0]
test ebp, ebp
push esi
je 0x436382
push 0
push 0
mov ecx, ebp
call fcn.00478a20
push edi
mov edi, dword [esp + 0xff4]
test edi, edi
je 0x4363a1
mov eax, dword [edi + 4]
mov dword [edi], 0
mov dword [edi + 0xc], eax
mov dword [edi + 4], 0
mov ecx, dword [esp + 0xff0]
xor esi, esi
lea eax, [ecx - 1]
cmp eax, 0x1c
ja case.0x4363b6.3
jmp dword [eax*4 + 0x437868]
mov ecx, dword [esp + 0x14]
push edi
call fcn.004361d0
mov esi, eax
jmp case.0x4363b6.3
mov ecx, dword [esp + 0x14]
push 1
push str.401ef48c9e84e1855c6268b769392d7c
push 0
push 0
push str.about
call fcn.00403490
jmp case.0x4363b6.3
xor esi, esi
lea ecx, [esp + 0x48]
push esi
call fcn.004473f0
lea edx, [esp + 0xe0]
mov ecx, edi
push edx
mov dword [esp + 0xfec], esi
call fcn.00478b00
lea ecx, [esp + 0x48]
call fcn.00528b14
cmp eax, 1
jne 0x43644b
mov eax, dword [esp + 0xe0]
push eax
call fcn.00478ba0
add esp, 4
mov ecx, ebp
push eax
push esi
call fcn.00478a20
mov ecx, dword [esp + 0xe0]
push ecx
mov ecx, ebp
call fcn.00478a90
mov esi, 1
jmp 0x436459
mov edx, dword [esp + 0x14]
mov dword [edx + 0x9fc], 1
lea ecx, [esp + 0xe0]
mov dword [esp + 0xfe8], 2
call fcn.0052801f
lea ecx, [esp + 0xa4]
mov byte [esp + 0xfe8], 1
call fcn.0053d202
mov dword [esp + 0xfe8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x43782d
mov eax, dword [0x5ada84]
mov dword [esp + 0x10], eax
lea ecx, [esp + 0x10]
mov ebx, 3
push ecx
mov ecx, edi
mov dword [esp + 0xfec], ebx
call fcn.00478b00
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x44]
push edx
push 0x59e6b4
push eax
call fcn.004e6da0
add esp, 0xc
mov eax, dword [eax]
push 0x21
push eax
mov ecx, 0x5b1210
mov byte [esp + 0xff0], 4
call fcn.00436100
mov esi, eax
lea ecx, [esp + 0x44]
dec esi
mov byte [esp + 0xfe8], bl
neg esi
sbb esi, esi
inc esi
call fcn.0052801f
test esi, esi
jne 0x436511
mov ecx, dword [esp + 0x14]
mov dword [ecx + 0x9fc], 1
lea ecx, [esp + 0x10]
mov dword [esp + 0xfe8], 0xffffffff
call fcn.0052801f
jmp case.0x4363b6.3
mov edx, dword [0x5ada84]
mov dword [esp + 0x10], edx
lea eax, [esp + 0x10]
mov ebx, 5
push eax
mov ecx, edi
mov dword [esp + 0xfec], ebx
call fcn.00478b00
mov ecx, dword [esp + 0x10]
push 0
push ecx
lea ecx, [esp + 0x50]
call fcn.00439460
lea ecx, [esp + 0x48]
mov byte [esp + 0xfe8], 6
call fcn.00528b14
mov esi, eax
cmp esi, 2
jne 0x436584
mov edx, dword [esp + 0x14]
mov dword [edx + 0x9fc], 1
jmp 0x43659e
push 4
push 0
mov ecx, ebp
call fcn.00478a20
mov eax, dword [esp + 0xa4]
mov ecx, ebp
push eax
call fcn.00478a70
lea ecx, [esp + 0xe4]
mov byte [esp + 0xfe8], 8
call fcn.0053d0f7
lea ecx, [esp + 0xa8]
mov byte [esp + 0xfe8], 7
call fcn.0053cee3
lea ecx, [esp + 0x48]
mov byte [esp + 0xfe8], bl
call fcn.0052874a
lea ecx, [esp + 0x10]
mov dword [esp + 0xfe8], 0xffffffff
call fcn.0052801f
jmp case.0x4363b6.3
mov ecx, dword [0x5ada84]
mov dword [esp + 0x1c], ecx
lea edx, [esp + 0x1c]
mov ecx, edi
push edx
mov dword [esp + 0xfec], 9
call fcn.00478b00
lea ecx, [esp + 0x2c]
call fcn.00477df0
lea eax, [esp + 0x2c]
mov ecx, edi
push eax
mov byte [esp + 0xfec], 0xa
call fcn.00478b40
mov ecx, dword [0x5ada84]
mov dword [esp + 0x10], ecx
mov eax, dword [0x5b1ac0]
lea edx, [esp + 0x10]
mov bl, 0xb
push edx
lea ecx, [eax + 0xc0]
mov byte [esp + 0xfec], bl
call fcn.004e2380
push 0
push 0x59e67c
mov ecx, 0x5b1210
call fcn.004676f0
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x2c]
push 0
push ecx
push edx
lea ecx, [esp + 0x54]
call fcn.004396e0
lea ecx, [esp + 0x48]
mov byte [esp + 0xfe8], 0xc
call fcn.00528b14
mov eax, dword [esp + 0x10]
push 0
push eax
mov ecx, 0x5b1210
call fcn.004676f0
mov esi, dword [esp + 0xa4]
lea ecx, [esp + 0xe4]
mov byte [esp + 0xfe8], 0xe
call fcn.0053cfa3
lea ecx, [esp + 0xa8]
mov byte [esp + 0xfe8], 0xd
call fcn.0053cee3
lea ecx, [esp + 0x48]
mov byte [esp + 0xfe8], bl
call fcn.0052874a
lea ecx, [esp + 0x10]
mov byte [esp + 0xfe8], 0xa
call fcn.0052801f
lea ecx, [esp + 0x2c]
mov byte [esp + 0xfe8], 9
mov dword [esp + 0x2c], 0x55f890
call fcn.00477ff0
lea ecx, [esp + 0x1c]
mov dword [esp + 0xfe8], 0xffffffff
call fcn.0052801f
jmp case.0x4363b6.3
cmp dword [esp + 0xff0], 0xb
jne 0x436780
push 0x1f8
call fcn.00528f1b
add esp, 4
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0xfe8], 0xf
je 0x436766
push ebx
push 0x59e654
push 0x1804
push 0
push 0x59e650
push 1
mov ecx, eax
call fcn.00524c5d
jmp 0x436768
xor eax, eax
or ebx, 0xffffffff
mov edi, eax
mov dword [esp + 0xfe8], ebx
mov dword [eax + 0x8c], 0x59e63c
jmp 0x4367d5
push 0x234
call fcn.00528f1b
add esp, 4
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0xfe8], 0x10
je 0x4367bd
push ebx
push 0x59e610
push 0x1804
push 0
push 0x59e60c
push 1
mov ecx, eax
call fcn.004476a0
jmp 0x4367bf
xor eax, eax
or ebx, 0xffffffff
mov edi, eax
mov dword [esp + 0xfe8], ebx
mov dword [eax + 0x8c], 0x59e5f8
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0xb8]
cmp eax, 1
je 0x4367e8
xor esi, esi
jmp 0x436840
lea eax, [esp + 0x18]
mov ecx, edi
push eax
call fcn.00524e9a
mov eax, dword [esp + 0x18]
mov dword [esp + 0xfe8], 0x11
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x43680e
xor esi, esi
jmp 0x436830
push eax
mov esi, eax
call fcn.00478ba0
add esp, 4
mov ecx, ebp
push eax
push 0
call fcn.00478a20
push esi
mov ecx, ebp
call fcn.00478a90
mov esi, 1
lea ecx, [esp + 0x18]
mov dword [esp + 0xfe8], ebx
call fcn.0052801f
test edi, edi
je case.0x4363b6.3
mov edx, dword [edi]
push 1
mov ecx, edi
call dword [edx + 4]
jmp case.0x4363b6.3
push ebx
push 0x59e5e4
push 0x8806
push 0
push 0x59e650
push 0
lea ecx, [esp + 0x60]
call fcn.00524c5d
mov ebx, 0x12
mov ecx, edi
mov dword [esp + 0xfe8], ebx
call fcn.00478b80
test eax, eax
mov dword [esp + 0xd4], 0x59e5dc
je 0x4368a0
mov dword [esp + 0xd4], 0x59e5d4
lea ecx, [esp + 0x48]
call fcn.00524dbf
cmp eax, 1
je 0x4368b2
xor esi, esi
jmp 0x436909
lea eax, [esp + 0x18]
lea ecx, [esp + 0x48]
push eax
call fcn.00524e9a
mov eax, dword [esp + 0x18]
mov byte [esp + 0xfe8], 0x13
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x4368d7
xor esi, esi
jmp 0x4368f9
push eax
mov esi, eax
call fcn.00478ba0
add esp, 4
mov ecx, ebp
push eax
push 0
call fcn.00478a20
push esi
mov ecx, ebp
call fcn.00478a90
mov esi, 1
lea ecx, [esp + 0x18]
mov byte [esp + 0xfe8], bl
call fcn.0052801f
lea ecx, [esp + 0xf4]
mov dword [esp + 0xfe8], 0x14
call fcn.0052801f
mov dword [esp + 0xfe8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x43782d
mov ecx, edi
call fcn.00478b80
mov ebx, eax
mov eax, dword [0x5ada84]
mov dword [esp + 0x10], eax
mov dword [esp + 0xfe8], 0x15
mov dword [esp + 0x14], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], eax
lea ecx, [esp + 0x10]
mov byte [esp + 0xfe8], 0x19
push ecx
mov ecx, edi
call fcn.00478b00
lea edx, [esp + 0x1c]
mov ecx, edi
push edx
call fcn.00478b00
lea eax, [esp + 0x14]
mov ecx, edi
push eax
call fcn.00478b00
lea ecx, [esp + 0x20]
push ecx
mov ecx, edi
call fcn.00478b00
lea edx, [esp + 0x18]
mov ecx, edi
push edx
call fcn.00478b00
mov eax, dword [esp + 0x14]
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x4369c9
test ebx, ebx
jne 0x4369bb
push 0x59e5c4
jmp 0x4369c0
push 0x59e5ac
lea ecx, [esp + 0x18]
call fcn.005281a8
lea ecx, [esp + 0x40]
push 2
push ecx
lea ecx, [esp + 0x28]
call fcn.005243f0
mov eax, dword [eax]
push 0x59e5a8
push eax
call fcn.0051000a
add esp, 8
lea ecx, [esp + 0x40]
test eax, eax
setne byte [esp + 0x27]
call fcn.0052801f
mov al, byte [esp + 0x27]
test al, al
je 0x436a28
mov edx, dword [esp + 0x20]
mov eax, dword [edx - 8]
test eax, eax
je 0x436a1a
push 0x59e5a4
lea ecx, [esp + 0x24]
call fcn.005283fb
push 0x59e58c
lea ecx, [esp + 0x24]
call fcn.005283fb
mov eax, dword [esp + 0x1c]
mov esi, ebx
neg esi
sbb esi, esi
push 0x59e60c
and esi, 0x7002
push eax
add esi, 0x1804
call fcn.005100b9
add esp, 8
test eax, eax
jne 0x436a96
push 0x234
call fcn.00528f1b
add esp, 4
mov dword [esp + 0x28], eax
test eax, eax
mov byte [esp + 0xfe8], 0x1a
je 0x436adc
mov ecx, dword [esp + 0xffc]
mov edx, dword [esp + 0x20]
push ecx
mov ecx, dword [esp + 0x14]
push edx
mov edx, dword [esp + 0x24]
push esi
push ecx
xor ecx, ecx
push edx
test ebx, ebx
sete cl
push ecx
mov ecx, eax
call fcn.004476a0
jmp 0x436ade
push 0x1f8
call fcn.00528f1b
add esp, 4
mov dword [esp + 0x28], eax
test eax, eax
mov byte [esp + 0xfe8], 0x1b
je 0x436adc
mov edx, dword [esp + 0xffc]
mov ecx, dword [esp + 0x20]
push edx
mov edx, dword [esp + 0x14]
push ecx
mov ecx, dword [esp + 0x24]
push esi
push edx
xor edx, edx
push ecx
test ebx, ebx
sete dl
push edx
mov ecx, eax
call fcn.00524c5d
jmp 0x436ade
xor eax, eax
mov edi, eax
mov eax, dword [esp + 0x14]
mov byte [esp + 0xfe8], 0x19
mov dword [edi + 0x8c], eax
mov eax, dword [esp + 0x18]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x436b03
mov dword [edi + 0x88], eax
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0xb8]
cmp eax, 1
je 0x436b16
xor esi, esi
jmp 0x436b6c
lea eax, [esp + 0x28]
mov ecx, edi
push eax
call fcn.00524e9a
mov eax, dword [esp + 0x28]
mov byte [esp + 0xfe8], 0x1c
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x436b39
xor esi, esi
jmp 0x436b5b
push eax
mov esi, eax
call fcn.00478ba0
add esp, 4
mov ecx, ebp
push eax
push 0
call fcn.00478a20
push esi
mov ecx, ebp
call fcn.00478a90
mov esi, 1
lea ecx, [esp + 0x28]
mov byte [esp + 0xfe8], 0x19
call fcn.0052801f
test edi, edi
je 0x436b79
mov edx, dword [edi]
push 1
mov ecx, edi
call dword [edx + 4]
lea ecx, [esp + 0x18]
mov byte [esp + 0xfe8], 0x18
call fcn.0052801f
lea ecx, [esp + 0x1c]
mov byte [esp + 0xfe8], 0x17
call fcn.0052801f
lea ecx, [esp + 0x20]
mov byte [esp + 0xfe8], 0x16
call fcn.0052801f
lea ecx, [esp + 0x14]
mov byte [esp + 0xfe8], 0x15
call fcn.0052801f
lea ecx, [esp + 0x10]
mov dword [esp + 0xfe8], 0xffffffff
call fcn.0052801f
jmp case.0x4363b6.3
lea ecx, [esp + 0x2c]
call fcn.00477df0
lea eax, [esp + 0x2c]
mov ebx, 0x1d
push eax
mov ecx, edi
mov dword [esp + 0xfec], ebx
call fcn.00478b40
lea ecx, [esp + 0x2c]
push 0
push ecx
lea ecx, [esp + 0x50]
call fcn.00439bf0
lea ecx, [esp + 0x48]
mov byte [esp + 0xfe8], 0x1e
call fcn.00528b14
mov esi, 1
cmp eax, esi
jne 0x436c5c
cmp dword [esp + 0x194], esi
jne 0x436c5c
lea edx, [esp + 0x2c]
push edx
call fcn.00478bc0
add esp, 4
mov ecx, ebp
push eax
push 0
call fcn.00478a20
mov ecx, dword [esp + 0x3c]
mov edi, dword [esp + 0x34]
mov eax, ecx
push ecx
neg eax
sbb eax, eax
mov ecx, ebp
and eax, edi
push eax
call fcn.00478ab0
jmp 0x436c5e
xor esi, esi
lea ecx, [esp + 0x158]
mov byte [esp + 0xfe8], 0x22
call fcn.0053cee3
lea ecx, [esp + 0x11c]
mov byte [esp + 0xfe8], 0x21
call fcn.0053cee3
lea ecx, [esp + 0xe0]
mov byte [esp + 0xfe8], 0x20
call fcn.0053cee3
lea ecx, [esp + 0xa4]
mov byte [esp + 0xfe8], 0x1f
call fcn.0053cee3
lea ecx, [esp + 0x48]
mov byte [esp + 0xfe8], bl
call fcn.0052874a
lea ecx, [esp + 0x2c]
mov dword [esp + 0xfe8], 0xffffffff
mov dword [esp + 0x2c], 0x55f890
call fcn.00477ff0
jmp case.0x4363b6.3
lea ecx, [esp + 0x2c]
call fcn.00477df0
lea eax, [esp + 0x2c]
mov ebx, 0x23
push eax
mov ecx, edi
mov dword [esp + 0xfec], ebx
call fcn.00478b40
lea ecx, [esp + 0x2c]
push 0
push ecx
lea ecx, [esp + 0x50]
call fcn.0043a320
lea ecx, [esp + 0x48]
mov byte [esp + 0xfe8], 0x24
call fcn.00528b14
mov esi, 1
cmp eax, esi
jne 0x436d65
cmp dword [esp + 0x11c], esi
jne 0x436d65
lea edx, [esp + 0x2c]
push edx
call fcn.00478bc0
add esp, 4
mov ecx, ebp
push eax
push 0
call fcn.00478a20
mov ecx, dword [esp + 0x3c]
mov edi, dword [esp + 0x34]
mov eax, ecx
push ecx
neg eax
sbb eax, eax
mov ecx, ebp
and eax, edi
push eax
call fcn.00478ab0
jmp 0x436d67
xor esi, esi
lea ecx, [esp + 0x48]
mov byte [esp + 0xfe8], bl
call fcn.0043a3f0
lea ecx, [esp + 0x2c]
mov dword [esp + 0xfe8], 0xffffffff
mov dword [esp + 0x2c], 0x55f890
call fcn.00477ff0
jmp case.0x4363b6.3
mov ecx, edi
call fcn.00478b80
lea ecx, [esp + 0x2c]
mov esi, eax
call fcn.00477df0
lea eax, [esp + 0x2c]
push 0
mov ebx, 0x25
push eax
push esi
lea ecx, [esp + 0x54]
mov dword [esp + 0xff4], ebx
call fcn.0043af20
lea ecx, [esp + 0x48]
mov byte [esp + 0xfe8], 0x26
call fcn.00528b14
cmp eax, 1
jne 0x436e14
lea ecx, [esp + 0x2c]
push ecx
call fcn.00478bc0
add esp, 4
mov ecx, ebp
push eax
push 0
call fcn.00478a20
mov ecx, dword [esp + 0x3c]
mov esi, dword [esp + 0x34]
mov eax, ecx
push ecx
neg eax
sbb eax, eax
mov ecx, ebp
and eax, esi
push eax
call fcn.00478ab0
mov esi, 1
jmp 0x436e16
xor esi, esi
lea ecx, [esp + 0x2a4]
mov byte [esp + 0xfe8], 0x32
call fcn.00526a99
lea ecx, [esp + 0x290]
mov byte [esp + 0xfe8], 0x31
call fcn.00526a99
mov edi, 0x55f890
lea ecx, [esp + 0x27c]
mov byte [esp + 0xfe8], 0x30
mov dword [esp + 0x27c], edi
call fcn.00477ff0
lea ecx, [esp + 0x268]
mov byte [esp + 0xfe8], 0x2f
mov dword [esp + 0x268], edi
call fcn.00477ff0
lea ecx, [esp + 0x254]
mov byte [esp + 0xfe8], 0x2e
mov dword [esp + 0x254], edi
call fcn.00477ff0
lea ecx, [esp + 0x20c]
mov byte [esp + 0xfe8], 0x2d
call fcn.004e76a0
lea ecx, [esp + 0x1d0]
mov byte [esp + 0xfe8], 0x2c
call fcn.0053d202
lea ecx, [esp + 0x194]
mov byte [esp + 0xfe8], 0x2b
call fcn.0053d0f7
lea ecx, [esp + 0x158]
mov byte [esp + 0xfe8], 0x2a
call fcn.0053cf3d
lea ecx, [esp + 0x11c]
mov byte [esp + 0xfe8], 0x29
call fcn.0053cf3d
lea ecx, [esp + 0xe0]
mov byte [esp + 0xfe8], 0x28
call fcn.0053cf3d
lea ecx, [esp + 0xa4]
mov byte [esp + 0xfe8], 0x27
call fcn.0053cfa3
lea ecx, [esp + 0x48]
mov byte [esp + 0xfe8], bl
call fcn.0052874a
lea ecx, [esp + 0x2c]
mov dword [esp + 0xfe8], 0xffffffff
mov dword [esp + 0x2c], edi
call fcn.00477ff0
jmp case.0x4363b6.3
mov ecx, edi
call fcn.00478b80
mov edx, dword [0x5ada84]
mov ebx, eax
mov dword [esp + 0x18], edx
lea eax, [esp + 0x18]
mov ecx, edi
push eax
mov dword [esp + 0xfec], 0x33
call fcn.00478b00
mov ecx, dword [esp + 0x18]
push 0
push ecx
push ebx
lea ecx, [esp + 0x54]
call fcn.00446090
lea ecx, [esp + 0x48]
mov byte [esp + 0xfe8], 0x34
call fcn.00528b14
lea ecx, [esp + 0x288]
mov byte [esp + 0xfe8], 0x39
mov dword [esp + 0x288], 0x55f890
call fcn.00477ff0
lea ecx, [esp + 0x23c]
mov byte [esp + 0xfe8], 0x38
call fcn.0053cee3
lea ecx, [esp + 0x200]
mov byte [esp + 0xfe8], 0x37
call fcn.0053d202
lea ecx, [esp + 0x1c4]
mov byte [esp + 0xfe8], 0x36
call fcn.0053cee3
lea ecx, [esp + 0xa4]
mov byte [esp + 0xfe8], 0x35
call fcn.004ecd50
lea ecx, [esp + 0x48]
mov byte [esp + 0xfe8], 0x33
call fcn.0052874a
lea ecx, [esp + 0x18]
mov dword [esp + 0xfe8], 0xffffffff
call fcn.0052801f
jmp case.0x4363b6.3
push 0
lea ecx, [esp + 0x4c]
call fcn.0043cd70
lea ecx, [esp + 0x48]
mov dword [esp + 0xfe8], 0x3a
call fcn.00528b14
lea ecx, [esp + 0x48]
mov dword [esp + 0xfe8], 0xffffffff
call fcn.0043cfb0
jmp case.0x4363b6.3
push 0
lea ecx, [esp + 0x640]
call fcn.0043e2c0
lea ecx, [esp + 0x63c]
mov dword [esp + 0xfe8], 0x3b
call fcn.00528b14
lea ecx, [esp + 0xe80]
mov dword [esp + 0xfe8], 0x5d
call fcn.0053d202
lea ecx, [esp + 0xe44]
mov byte [esp + 0xfe8], 0x5c
call fcn.0053d202
lea ecx, [esp + 0xe08]
mov byte [esp + 0xfe8], 0x5b
call fcn.0053d0f7
lea ecx, [esp + 0xdcc]
mov byte [esp + 0xfe8], 0x5a
call fcn.0053cf3d
lea ecx, [esp + 0xd90]
mov byte [esp + 0xfe8], 0x59
call fcn.0053cf3d
lea ecx, [esp + 0xd54]
mov byte [esp + 0xfe8], 0x58
call fcn.0053cf3d
lea ecx, [esp + 0xd18]
mov byte [esp + 0xfe8], 0x57
call fcn.0053cf3d
lea ecx, [esp + 0xcdc]
mov byte [esp + 0xfe8], 0x56
call fcn.0053cf3d
lea ecx, [esp + 0xca0]
mov byte [esp + 0xfe8], 0x55
call fcn.0053cf3d
lea ecx, [esp + 0xc64]
mov byte [esp + 0xfe8], 0x54
call fcn.0053cf3d
lea ecx, [esp + 0xc28]
mov byte [esp + 0xfe8], 0x53
call fcn.0053cf3d
lea ecx, [esp + 0xbc0]
mov byte [esp + 0xfe8], 0x52
call fcn.0040f890
lea ecx, [esp + 0xb84]
mov byte [esp + 0xfe8], 0x51
call fcn.0053cf3d
mov byte [esp + 0xfe8], 0x50
lea ecx, [esp + 0xb48]
call fcn.0053cf3d
lea ecx, [esp + 0xb0c]
mov byte [esp + 0xfe8], 0x4f
call fcn.0053d202
lea ecx, [esp + 0xad0]
mov byte [esp + 0xfe8], 0x4e
call fcn.0053d202
lea ecx, [esp + 0xa94]
mov byte [esp + 0xfe8], 0x4d
call fcn.0053cf3d
lea ecx, [esp + 0xa58]
mov byte [esp + 0xfe8], 0x4c
call fcn.0053cf3d
lea ecx, [esp + 0xa1c]
mov byte [esp + 0xfe8], 0x4b
call fcn.0053cf3d
lea ecx, [esp + 0x9e0]
mov byte [esp + 0xfe8], 0x4a
call fcn.0053cf3d
lea ecx, [esp + 0x9a4]
mov byte [esp + 0xfe8], 0x49
call fcn.0053cf3d
lea ecx, [esp + 0x968]
mov byte [esp + 0xfe8], 0x48
call fcn.0053d0f7
lea ecx, [esp + 0x92c]
mov byte [esp + 0xfe8], 0x47
call fcn.0053d202
lea ecx, [esp + 0x8f0]
mov byte [esp + 0xfe8], 0x46
call fcn.0053d202
lea ecx, [esp + 0x8b4]
mov byte [esp + 0xfe8], 0x45
call fcn.0053d202
lea ecx, [esp + 0x878]
mov byte [esp + 0xfe8], 0x44
call fcn.0053cf3d
lea ecx, [esp + 0x83c]
mov byte [esp + 0xfe8], 0x43
call fcn.0053d202
lea ecx, [esp + 0x800]
mov byte [esp + 0xfe8], 0x42
call fcn.0053d202
lea ecx, [esp + 0x7c4]
mov byte [esp + 0xfe8], 0x41
call fcn.0053cf3d
lea ecx, [esp + 0x788]
mov byte [esp + 0xfe8], 0x40
call fcn.0053cf3d
lea ecx, [esp + 0x74c]
mov byte [esp + 0xfe8], 0x3f
call fcn.0053cf3d
lea ecx, [esp + 0x710]
mov byte [esp + 0xfe8], 0x3e
call fcn.0053cf3d
lea ecx, [esp + 0x6d4]
mov byte [esp + 0xfe8], 0x3d
call fcn.0053d0f7
lea ecx, [esp + 0x698]
mov byte [esp + 0xfe8], 0x3c
call fcn.00525dba
mov dword [esp + 0xfe8], 0xffffffff
lea ecx, [esp + 0x63c]
jmp 0x43782d
push 0
lea ecx, [esp + 0x4c]
call fcn.00440e60
lea ecx, [esp + 0x48]
mov dword [esp + 0xfe8], 0x5e
call fcn.00528b14
lea ecx, [esp + 0x188]
mov dword [esp + 0xfe8], 0x64
call fcn.00526a99
lea ecx, [esp + 0x174]
mov byte [esp + 0xfe8], 0x63
call fcn.00526a99
lea ecx, [esp + 0x160]
mov byte [esp + 0xfe8], 0x62
call fcn.00526a99
lea ecx, [esp + 0x11c]
mov byte [esp + 0xfe8], 0x61
call fcn.0053cfa3
lea ecx, [esp + 0xe0]
mov byte [esp + 0xfe8], 0x60
call fcn.0053d202
lea ecx, [esp + 0xa4]
mov byte [esp + 0xfe8], 0x5f
call fcn.0053d202
mov dword [esp + 0xfe8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x43782d
push 0
lea ecx, [esp + 0x4c]
call fcn.00443550
lea edx, [esp + 0x11c]
mov ecx, edi
push edx
mov dword [esp + 0xfec], 0x65
call fcn.00478b00
lea ecx, [esp + 0x48]
call fcn.00528b14
cmp eax, 1
jne 0x437474
mov eax, dword [esp + 0x11c]
push eax
call fcn.00478ba0
add esp, 4
add eax, 4
mov ecx, ebp
push eax
push 0
call fcn.00478a20
mov ecx, dword [esp + 0x11c]
push ecx
mov ecx, ebp
call fcn.00478a90
mov edx, dword [esp + 0x120]
mov ecx, ebp
push edx
call fcn.00478a70
mov esi, 1
jmp 0x437476
xor esi, esi
lea ecx, [esp + 0x11c]
mov dword [esp + 0xfe8], 0x68
call fcn.0052801f
lea ecx, [esp + 0xe0]
mov byte [esp + 0xfe8], 0x67
call fcn.0053d0f7
lea ecx, [esp + 0xa4]
mov byte [esp + 0xfe8], 0x66
call fcn.0053cf3d
mov dword [esp + 0xfe8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x43782d
push 0
lea ecx, [esp + 0x4c]
call fcn.00443780
mov ecx, edi
mov dword [esp + 0xfe8], 0x69
call fcn.00478b80
mov dword [esp + 0x194], eax
lea eax, [esp + 0x198]
push eax
mov ecx, edi
call fcn.00478b00
lea ecx, [esp + 0x48]
call fcn.00528b14
lea ecx, [esp + 0x198]
mov dword [esp + 0xfe8], 0x6e
call fcn.0052801f
lea ecx, [esp + 0x158]
mov byte [esp + 0xfe8], 0x6d
call fcn.0053d0f7
lea ecx, [esp + 0x11c]
mov byte [esp + 0xfe8], 0x6c
call fcn.0053d0f7
lea ecx, [esp + 0xe0]
mov byte [esp + 0xfe8], 0x6b
call fcn.0053cf3d
lea ecx, [esp + 0xa4]
mov byte [esp + 0xfe8], 0x6a
call fcn.0053cee3
mov dword [esp + 0xfe8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x43782d
push 0
lea ecx, [esp + 0x4c]
call fcn.00444080
lea ecx, [esp + 0x158]
mov dword [esp + 0xfe8], 0x6f
push ecx
mov ecx, edi
call fcn.00478b00
lea ecx, [esp + 0x48]
call fcn.00528b14
lea ecx, [esp + 0x158]
mov dword [esp + 0xfe8], 0x73
call fcn.0052801f
lea ecx, [esp + 0x11c]
mov byte [esp + 0xfe8], 0x72
call fcn.0053d0f7
lea ecx, [esp + 0xe0]
mov byte [esp + 0xfe8], 0x71
call fcn.0053cf3d
lea ecx, [esp + 0xa4]
mov byte [esp + 0xfe8], 0x70
call fcn.0053cee3
mov dword [esp + 0xfe8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x43782d
push 0
lea ecx, [esp + 0x4c]
call fcn.00444ab0
lea ecx, [esp + 0x48]
mov dword [esp + 0xfe8], 0x74
call fcn.00528b14
mov dword [esp + 0xfe8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x43782d
mov ecx, edi
call fcn.00478b80
push 0
mov ecx, edi
mov esi, eax
call fcn.00478b80
push eax
push esi
lea ecx, [esp + 0x54]
call fcn.00446900
lea ecx, [esp + 0x48]
mov dword [esp + 0xfe8], 0x75
call fcn.00528b14
mov esi, eax
dec esi
neg esi
sbb esi, esi
inc esi
lea ecx, [esp + 0x1c4]
mov dword [esp + 0xfe8], 0x77
call fcn.0053d202
lea ecx, [esp + 0xa4]
mov byte [esp + 0xfe8], 0x76
call fcn.004ecd50
mov dword [esp + 0xfe8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x43782d
mov ecx, edi
call fcn.00478b80
cmp eax, 1
jne 0x43770f
mov ecx, dword [0x5b10a0]
test ecx, ecx
jne 0x43770f
push 0x5b0a40
call fcn.00478ba0
add esp, 4
add eax, 4
mov ecx, ebp
push eax
push 0
call fcn.00478a20
push 0
mov ecx, ebp
call fcn.00478a70
push 0x5b0a40
mov ecx, ebp
call fcn.00478a90
mov esi, 1
jmp case.0x4363b6.3
mov edx, dword [esp + 0x14]
push 0
push eax
lea ecx, [esp + 0x504]
mov dword [edx + 0x9ec], 2
call fcn.004451d0
lea ecx, [esp + 0x4fc]
mov dword [esp + 0xfe8], 0x78
call fcn.00528b14
cmp eax, 1
jne 0x43778a
mov eax, dword [esp + 0x610]
push eax
call fcn.00478ba0
add esp, 4
add eax, 4
mov ecx, ebp
push eax
push 0
call fcn.00478a20
mov ecx, dword [esp + 0x60c]
push ecx
mov ecx, ebp
call fcn.00478a70
mov edx, dword [esp + 0x610]
mov ecx, ebp
push edx
call fcn.00478a90
mov esi, 1
jmp 0x43778c
xor esi, esi
lea ecx, [esp + 0x628]
mov dword [esp + 0xfe8], 0x7f
call fcn.00526a99
lea ecx, [esp + 0x61c]
mov byte [esp + 0xfe8], 0x7e
call fcn.00525eca
lea ecx, [esp + 0x614]
mov byte [esp + 0xfe8], 0x7d
call fcn.00525eca
lea ecx, [esp + 0x610]
mov byte [esp + 0xfe8], 0x7c
call fcn.0052801f
lea ecx, [esp + 0x5d0]
mov byte [esp + 0xfe8], 0x7b
call fcn.00525a73
lea ecx, [esp + 0x594]
mov byte [esp + 0xfe8], 0x7a
call fcn.005258c3
lea ecx, [esp + 0x558]
mov byte [esp + 0xfe8], 0x79
call fcn.0053cf3d
mov dword [esp + 0xfe8], 0xffffffff
lea ecx, [esp + 0x4fc]
call fcn.0052874a
test ebp, ebp
pop edi
je 0x43784b
mov eax, dword [ebp + 4]
mov dword [ebp], 0
mov dword [ebp + 0xc], eax
mov dword [ebp + 4], 0
mov eax, esi
pop esi
pop ebp
mov ecx, dword [esp + 0xfd4]
pop ebx
mov dword fs:[0], ecx
add esp, 0xfdc
ret 0x10