Function at 0x432b00
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push 0xffffffffffffffff
push 0x53cd11
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xae0
push ebx
mov ebx, dword [esp + 0xb00]
test ebx, ebx
mov dword [esp + 0xc], ecx
jne 0x432b38
mov ebx, dword [0x59a2f4]
mov dword [esp + 0xb00], ebx
mov eax, dword [esp + 0xaf4]
test eax, eax
jne 0x432b4a
xor eax, eax
jmp 0x434012
push ebp
mov ebp, dword [esp + 0xb00]
test ebp, ebp
push esi
je 0x432b62
push 0
push 0
mov ecx, ebp
call fcn.00473d40
push edi
mov edi, dword [esp + 0xb04]
test edi, edi
je 0x432b81
mov eax, dword [edi + 4]
mov dword [edi], 0
mov dword [edi + 0xc], eax
mov dword [edi + 4], 0
mov ecx, dword [esp + 0xb00]
xor esi, esi
lea eax, [ecx - 1]
cmp eax, 0x1c
ja case.0x432b96.3
jmp dword [eax*4 + 0x43402c]
mov ecx, dword [esp + 0x18]
push edi
call fcn.004329c0
mov esi, eax
jmp case.0x432b96.3
mov ecx, dword [esp + 0x18]
push 1
push str.fd19c7c6777bd0c85f9d8e020b47dfd7
push 0
push 0
push str.about
call fcn.00403480
jmp case.0x432b96.3
xor esi, esi
lea ecx, [esp + 0x48]
push esi
call fcn.00443710
lea edx, [esp + 0xe0]
mov ecx, edi
push edx
mov dword [esp + 0xafc], esi
call fcn.00473e20
lea ecx, [esp + 0x48]
call fcn.0051a0bf
cmp eax, 1
jne 0x432c2b
mov eax, dword [esp + 0xe0]
push eax
call fcn.00473ec0
add esp, 4
mov ecx, ebp
push eax
push esi
call fcn.00473d40
mov ecx, dword [esp + 0xe0]
push ecx
mov ecx, ebp
call fcn.00473db0
mov esi, 1
jmp 0x432c39
mov edx, dword [esp + 0x18]
mov dword [edx + 0x9e8], 1
lea ecx, [esp + 0xe0]
mov dword [esp + 0xaf8], 2
call fcn.00519616
lea ecx, [esp + 0xa4]
mov byte [esp + 0xaf8], 1
call fcn.0052e63b
mov dword [esp + 0xaf8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x433ff0
mov eax, dword [0x59697c]
mov dword [esp + 0x10], eax
lea ecx, [esp + 0x10]
mov ebx, 3
push ecx
mov ecx, edi
mov dword [esp + 0xafc], ebx
call fcn.00473e20
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x40]
push edx
push 0x587c78
push eax
call fcn.004dfd70
add esp, 0xc
mov eax, dword [eax]
push 0x21
push eax
mov ecx, 0x599a48
mov byte [esp + 0xb00], 4
call fcn.004328e0
mov esi, eax
lea ecx, [esp + 0x40]
dec esi
mov byte [esp + 0xaf8], bl
neg esi
sbb esi, esi
inc esi
call fcn.00519616
test esi, esi
jne 0x432cf1
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0x9e8], 1
lea ecx, [esp + 0x10]
mov dword [esp + 0xaf8], 0xffffffff
call fcn.00519616
jmp case.0x432b96.3
mov edx, dword [0x59697c]
mov dword [esp + 0x10], edx
lea eax, [esp + 0x10]
mov ebx, 5
push eax
mov ecx, edi
mov dword [esp + 0xafc], ebx
call fcn.00473e20
mov ecx, dword [esp + 0x10]
push 0
push ecx
lea ecx, [esp + 0x50]
call fcn.00435c20
lea ecx, [esp + 0x48]
mov byte [esp + 0xaf8], 6
call fcn.0051a0bf
mov esi, eax
cmp esi, 2
jne 0x432d64
mov edx, dword [esp + 0x18]
mov dword [edx + 0x9e8], 1
jmp 0x432d7e
push 4
push 0
mov ecx, ebp
call fcn.00473d40
mov eax, dword [esp + 0xa4]
mov ecx, ebp
push eax
call fcn.00473d90
lea ecx, [esp + 0xe4]
mov byte [esp + 0xaf8], 8
call fcn.0052e535
lea ecx, [esp + 0xa8]
mov byte [esp + 0xaf8], 7
call fcn.0052e31c
lea ecx, [esp + 0x48]
mov byte [esp + 0xaf8], bl
call fcn.00519cf5
lea ecx, [esp + 0x10]
mov dword [esp + 0xaf8], 0xffffffff
call fcn.00519616
jmp case.0x432b96.3
mov ecx, dword [0x59697c]
mov dword [esp + 0x1c], ecx
lea edx, [esp + 0x1c]
mov ecx, edi
push edx
mov dword [esp + 0xafc], 9
call fcn.00473e20
lea ecx, [esp + 0x2c]
call fcn.00473110
lea eax, [esp + 0x2c]
mov ecx, edi
push eax
mov byte [esp + 0xafc], 0xa
call fcn.00473e60
mov ecx, dword [0x59697c]
mov dword [esp + 0x10], ecx
mov eax, dword [0x59a2f4]
lea edx, [esp + 0x10]
mov bl, 0xb
push edx
lea ecx, [eax + 0xc0]
mov byte [esp + 0xafc], bl
call fcn.004db410
push 0
push 0x587c40
mov ecx, 0x599a48
call fcn.00463480
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x2c]
push 0
push ecx
push edx
lea ecx, [esp + 0x54]
call fcn.00435ea0
lea ecx, [esp + 0x48]
mov byte [esp + 0xaf8], 0xc
call fcn.0051a0bf
mov eax, dword [esp + 0x10]
push 0
push eax
mov ecx, 0x599a48
call fcn.00463480
mov esi, dword [esp + 0xa4]
lea ecx, [esp + 0xe4]
mov byte [esp + 0xaf8], 0xe
call fcn.0052e3dc
lea ecx, [esp + 0xa8]
mov byte [esp + 0xaf8], 0xd
call fcn.0052e31c
lea ecx, [esp + 0x48]
mov byte [esp + 0xaf8], bl
call fcn.00519cf5
lea ecx, [esp + 0x10]
mov byte [esp + 0xaf8], 0xa
call fcn.00519616
lea ecx, [esp + 0x2c]
mov byte [esp + 0xaf8], 9
mov dword [esp + 0x2c], 0x54d7d0
call fcn.00473310
lea ecx, [esp + 0x1c]
mov dword [esp + 0xaf8], 0xffffffff
call fcn.00519616
jmp case.0x432b96.3
cmp dword [esp + 0xb00], 0xb
jne 0x432f60
push 0x1f8
call fcn.0051a4c6
add esp, 4
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0xaf8], 0xf
je 0x432f46
push ebx
push 0x587c18
push 0x1804
push 0
push 0x587c14
push 1
mov ecx, eax
call fcn.00516429
jmp 0x432f48
xor eax, eax
or ebx, 0xffffffff
mov edi, eax
mov dword [esp + 0xaf8], ebx
mov dword [eax + 0x8c], 0x587c00
jmp 0x432fb5
push 0x234
call fcn.0051a4c6
add esp, 4
mov dword [esp + 0x28], eax
test eax, eax
mov dword [esp + 0xaf8], 0x10
je 0x432f9d
push ebx
push 0x587bd4
push 0x1804
push 0
push 0x587bd0
push 1
mov ecx, eax
call fcn.004439c0
jmp 0x432f9f
xor eax, eax
or ebx, 0xffffffff
mov edi, eax
mov dword [esp + 0xaf8], ebx
mov dword [eax + 0x8c], 0x587bbc
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0xb8]
cmp eax, 1
je 0x432fc8
xor esi, esi
jmp 0x433020
lea eax, [esp + 0x14]
mov ecx, edi
push eax
call fcn.00516666
mov eax, dword [esp + 0x14]
mov dword [esp + 0xaf8], 0x11
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x432fee
xor esi, esi
jmp 0x433010
push eax
mov esi, eax
call fcn.00473ec0
add esp, 4
mov ecx, ebp
push eax
push 0
call fcn.00473d40
push esi
mov ecx, ebp
call fcn.00473db0
mov esi, 1
lea ecx, [esp + 0x14]
mov dword [esp + 0xaf8], ebx
call fcn.00519616
test edi, edi
je case.0x432b96.3
mov edx, dword [edi]
push 1
mov ecx, edi
call dword [edx + 4]
jmp case.0x432b96.3
push ebx
push 0x587ba8
push 0x8806
push 0
push 0x587c14
push 0
lea ecx, [esp + 0x60]
call fcn.00516429
mov ebx, 0x12
mov ecx, edi
mov dword [esp + 0xaf8], ebx
call fcn.00473ea0
test eax, eax
mov dword [esp + 0xd4], 0x587ba0
je 0x433080
mov dword [esp + 0xd4], 0x587b98
lea ecx, [esp + 0x48]
call fcn.0051658b
cmp eax, 1
je 0x433092
xor esi, esi
jmp 0x4330e9
lea eax, [esp + 0x14]
lea ecx, [esp + 0x48]
push eax
call fcn.00516666
mov eax, dword [esp + 0x14]
mov byte [esp + 0xaf8], 0x13
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x4330b7
xor esi, esi
jmp 0x4330d9
push eax
mov esi, eax
call fcn.00473ec0
add esp, 4
mov ecx, ebp
push eax
push 0
call fcn.00473d40
push esi
mov ecx, ebp
call fcn.00473db0
mov esi, 1
lea ecx, [esp + 0x14]
mov byte [esp + 0xaf8], bl
call fcn.00519616
lea ecx, [esp + 0xf4]
mov dword [esp + 0xaf8], 0x14
call fcn.00519616
mov dword [esp + 0xaf8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x433ff0
mov ecx, edi
call fcn.00473ea0
mov ebx, eax
mov eax, dword [0x59697c]
mov dword [esp + 0x10], eax
mov dword [esp + 0xaf8], 0x15
mov dword [esp + 0x18], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x10]
mov byte [esp + 0xaf8], 0x19
push ecx
mov ecx, edi
call fcn.00473e20
lea edx, [esp + 0x1c]
mov ecx, edi
push edx
call fcn.00473e20
lea eax, [esp + 0x18]
mov ecx, edi
push eax
call fcn.00473e20
lea ecx, [esp + 0x20]
push ecx
mov ecx, edi
call fcn.00473e20
lea edx, [esp + 0x14]
mov ecx, edi
push edx
call fcn.00473e20
mov eax, dword [esp + 0x18]
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x4331a9
test ebx, ebx
jne 0x43319b
push 0x587b88
jmp 0x4331a0
push 0x587b70
lea ecx, [esp + 0x1c]
call fcn.00519753
lea ecx, [esp + 0x44]
push 2
push ecx
lea ecx, [esp + 0x28]
call fcn.00515bbc
mov eax, dword [eax]
push 0x587b6c
push eax
call fcn.005019be
add esp, 8
lea ecx, [esp + 0x44]
test eax, eax
setne byte [esp + 0x27]
call fcn.00519616
mov al, byte [esp + 0x27]
test al, al
je 0x433208
mov edx, dword [esp + 0x20]
mov eax, dword [edx - 8]
test eax, eax
je 0x4331fa
push 0x587b68
lea ecx, [esp + 0x24]
call fcn.005199a6
push 0x587b50
lea ecx, [esp + 0x24]
call fcn.005199a6
mov eax, dword [esp + 0x1c]
mov esi, ebx
neg esi
sbb esi, esi
push 0x587bd0
and esi, 0x7002
push eax
add esi, 0x1804
call fcn.00501a6d
add esp, 8
test eax, eax
jne 0x433276
push 0x234
call fcn.0051a4c6
add esp, 4
mov dword [esp + 0x28], eax
test eax, eax
mov byte [esp + 0xaf8], 0x1a
je 0x4332bc
mov ecx, dword [esp + 0xb0c]
mov edx, dword [esp + 0x20]
push ecx
mov ecx, dword [esp + 0x14]
push edx
mov edx, dword [esp + 0x24]
push esi
push ecx
xor ecx, ecx
push edx
test ebx, ebx
sete cl
push ecx
mov ecx, eax
call fcn.004439c0
jmp 0x4332be
push 0x1f8
call fcn.0051a4c6
add esp, 4
mov dword [esp + 0x28], eax
test eax, eax
mov byte [esp + 0xaf8], 0x1b
je 0x4332bc
mov edx, dword [esp + 0xb0c]
mov ecx, dword [esp + 0x20]
push edx
mov edx, dword [esp + 0x14]
push ecx
mov ecx, dword [esp + 0x24]
push esi
push edx
xor edx, edx
push ecx
test ebx, ebx
sete dl
push edx
mov ecx, eax
call fcn.00516429
jmp 0x4332be
xor eax, eax
mov edi, eax
mov eax, dword [esp + 0x18]
mov byte [esp + 0xaf8], 0x19
mov dword [edi + 0x8c], eax
mov eax, dword [esp + 0x14]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x4332e3
mov dword [edi + 0x88], eax
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0xb8]
cmp eax, 1
je 0x4332f6
xor esi, esi
jmp 0x43334c
lea eax, [esp + 0x28]
mov ecx, edi
push eax
call fcn.00516666
mov eax, dword [esp + 0x28]
mov byte [esp + 0xaf8], 0x1c
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x433319
xor esi, esi
jmp 0x43333b
push eax
mov esi, eax
call fcn.00473ec0
add esp, 4
mov ecx, ebp
push eax
push 0
call fcn.00473d40
push esi
mov ecx, ebp
call fcn.00473db0
mov esi, 1
lea ecx, [esp + 0x28]
mov byte [esp + 0xaf8], 0x19
call fcn.00519616
test edi, edi
je 0x433359
mov edx, dword [edi]
push 1
mov ecx, edi
call dword [edx + 4]
lea ecx, [esp + 0x14]
mov byte [esp + 0xaf8], 0x18
call fcn.00519616
lea ecx, [esp + 0x1c]
mov byte [esp + 0xaf8], 0x17
call fcn.00519616
lea ecx, [esp + 0x20]
mov byte [esp + 0xaf8], 0x16
call fcn.00519616
lea ecx, [esp + 0x18]
mov byte [esp + 0xaf8], 0x15
call fcn.00519616
lea ecx, [esp + 0x10]
mov dword [esp + 0xaf8], 0xffffffff
call fcn.00519616
jmp case.0x432b96.3
lea ecx, [esp + 0x2c]
call fcn.00473110
lea eax, [esp + 0x2c]
mov ebx, 0x1d
push eax
mov ecx, edi
mov dword [esp + 0xafc], ebx
call fcn.00473e60
lea ecx, [esp + 0x2c]
push 0
push ecx
lea ecx, [esp + 0x50]
call fcn.004363b0
lea ecx, [esp + 0x48]
mov byte [esp + 0xaf8], 0x1e
call fcn.0051a0bf
mov esi, 1
cmp eax, esi
jne 0x43343c
cmp dword [esp + 0x194], esi
jne 0x43343c
lea edx, [esp + 0x2c]
push edx
call fcn.00473ee0
add esp, 4
mov ecx, ebp
push eax
push 0
call fcn.00473d40
mov ecx, dword [esp + 0x3c]
mov edi, dword [esp + 0x34]
mov eax, ecx
push ecx
neg eax
sbb eax, eax
mov ecx, ebp
and eax, edi
push eax
call fcn.00473dd0
jmp 0x43343e
xor esi, esi
lea ecx, [esp + 0x158]
mov byte [esp + 0xaf8], 0x22
call fcn.0052e31c
lea ecx, [esp + 0x11c]
mov byte [esp + 0xaf8], 0x21
call fcn.0052e31c
lea ecx, [esp + 0xe0]
mov byte [esp + 0xaf8], 0x20
call fcn.0052e31c
lea ecx, [esp + 0xa4]
mov byte [esp + 0xaf8], 0x1f
call fcn.0052e31c
lea ecx, [esp + 0x48]
mov byte [esp + 0xaf8], bl
call fcn.00519cf5
lea ecx, [esp + 0x2c]
mov dword [esp + 0xaf8], 0xffffffff
mov dword [esp + 0x2c], 0x54d7d0
call fcn.00473310
jmp case.0x432b96.3
lea ecx, [esp + 0x2c]
call fcn.00473110
lea eax, [esp + 0x2c]
mov ebx, 0x23
push eax
mov ecx, edi
mov dword [esp + 0xafc], ebx
call fcn.00473e60
lea ecx, [esp + 0x2c]
push 0
push ecx
lea ecx, [esp + 0x50]
call fcn.00436ae0
lea ecx, [esp + 0x48]
mov byte [esp + 0xaf8], 0x24
call fcn.0051a0bf
mov esi, 1
cmp eax, esi
jne 0x433545
cmp dword [esp + 0x11c], esi
jne 0x433545
lea edx, [esp + 0x2c]
push edx
call fcn.00473ee0
add esp, 4
mov ecx, ebp
push eax
push 0
call fcn.00473d40
mov ecx, dword [esp + 0x3c]
mov edi, dword [esp + 0x34]
mov eax, ecx
push ecx
neg eax
sbb eax, eax
mov ecx, ebp
and eax, edi
push eax
call fcn.00473dd0
jmp 0x433547
xor esi, esi
lea ecx, [esp + 0x48]
mov byte [esp + 0xaf8], bl
call fcn.00436bb0
lea ecx, [esp + 0x2c]
mov dword [esp + 0xaf8], 0xffffffff
mov dword [esp + 0x2c], 0x54d7d0
call fcn.00473310
jmp case.0x432b96.3
mov ecx, edi
call fcn.00473ea0
lea ecx, [esp + 0x2c]
mov esi, eax
call fcn.00473110
lea eax, [esp + 0x2c]
push 0
mov ebx, 0x25
push eax
push esi
lea ecx, [esp + 0x54]
mov dword [esp + 0xb04], ebx
call fcn.004376d0
lea ecx, [esp + 0x48]
mov byte [esp + 0xaf8], 0x26
call fcn.0051a0bf
cmp eax, 1
jne 0x4335f4
lea ecx, [esp + 0x2c]
push ecx
call fcn.00473ee0
add esp, 4
mov ecx, ebp
push eax
push 0
call fcn.00473d40
mov ecx, dword [esp + 0x3c]
mov esi, dword [esp + 0x34]
mov eax, ecx
push ecx
neg eax
sbb eax, eax
mov ecx, ebp
and eax, esi
push eax
call fcn.00473dd0
mov esi, 1
jmp 0x4335f6
xor esi, esi
lea ecx, [esp + 0x2a4]
mov byte [esp + 0xaf8], 0x32
call fcn.00518234
lea ecx, [esp + 0x290]
mov byte [esp + 0xaf8], 0x31
call fcn.00518234
mov edi, 0x54d7d0
lea ecx, [esp + 0x27c]
mov byte [esp + 0xaf8], 0x30
mov dword [esp + 0x27c], edi
call fcn.00473310
lea ecx, [esp + 0x268]
mov byte [esp + 0xaf8], 0x2f
mov dword [esp + 0x268], edi
call fcn.00473310
lea ecx, [esp + 0x254]
mov byte [esp + 0xaf8], 0x2e
mov dword [esp + 0x254], edi
call fcn.00473310
lea ecx, [esp + 0x20c]
mov byte [esp + 0xaf8], 0x2d
call fcn.004e05f0
lea ecx, [esp + 0x1d0]
mov byte [esp + 0xaf8], 0x2c
call fcn.0052e63b
lea ecx, [esp + 0x194]
mov byte [esp + 0xaf8], 0x2b
call fcn.0052e535
lea ecx, [esp + 0x158]
mov byte [esp + 0xaf8], 0x2a
call fcn.0052e376
lea ecx, [esp + 0x11c]
mov byte [esp + 0xaf8], 0x29
call fcn.0052e376
lea ecx, [esp + 0xe0]
mov byte [esp + 0xaf8], 0x28
call fcn.0052e376
lea ecx, [esp + 0xa4]
mov byte [esp + 0xaf8], 0x27
call fcn.0052e3dc
lea ecx, [esp + 0x48]
mov byte [esp + 0xaf8], bl
call fcn.00519cf5
lea ecx, [esp + 0x2c]
mov dword [esp + 0xaf8], 0xffffffff
mov dword [esp + 0x2c], edi
call fcn.00473310
jmp case.0x432b96.3
mov ecx, edi
call fcn.00473ea0
mov edx, dword [0x59697c]
mov ebx, eax
mov dword [esp + 0x14], edx
lea eax, [esp + 0x14]
mov ecx, edi
push eax
mov dword [esp + 0xafc], 0x33
call fcn.00473e20
mov ecx, dword [esp + 0x14]
push 0
push ecx
push ebx
lea ecx, [esp + 0x54]
call fcn.00442400
lea ecx, [esp + 0x48]
mov byte [esp + 0xaf8], 0x34
call fcn.0051a0bf
lea ecx, [esp + 0x288]
mov byte [esp + 0xaf8], 0x39
mov dword [esp + 0x288], 0x54d7d0
call fcn.00473310
lea ecx, [esp + 0x23c]
mov byte [esp + 0xaf8], 0x38
call fcn.0052e31c
lea ecx, [esp + 0x200]
mov byte [esp + 0xaf8], 0x37
call fcn.0052e63b
lea ecx, [esp + 0x1c4]
mov byte [esp + 0xaf8], 0x36
call fcn.0052e31c
lea ecx, [esp + 0xa4]
mov byte [esp + 0xaf8], 0x35
call fcn.004e5be0
lea ecx, [esp + 0x48]
mov byte [esp + 0xaf8], 0x33
call fcn.00519cf5
lea ecx, [esp + 0x14]
mov dword [esp + 0xaf8], 0xffffffff
call fcn.00519616
jmp case.0x432b96.3
push 0
lea ecx, [esp + 0x4c]
call fcn.00439520
lea ecx, [esp + 0x48]
mov dword [esp + 0xaf8], 0x3a
call fcn.0051a0bf
lea ecx, [esp + 0x48]
mov dword [esp + 0xaf8], 0xffffffff
call fcn.00439760
jmp case.0x432b96.3
push 0
lea ecx, [esp + 0x4c]
call fcn.0043aa70
lea ecx, [esp + 0x48]
mov dword [esp + 0xaf8], 0x3b
call fcn.0051a0bf
lea ecx, [esp + 0x850]
mov dword [esp + 0xaf8], 0x5c
call fcn.0052e63b
lea ecx, [esp + 0x814]
mov byte [esp + 0xaf8], 0x5b
call fcn.0052e63b
lea ecx, [esp + 0x7d8]
mov byte [esp + 0xaf8], 0x5a
call fcn.0052e535
lea ecx, [esp + 0x79c]
mov byte [esp + 0xaf8], 0x59
call fcn.0052e376
lea ecx, [esp + 0x760]
mov byte [esp + 0xaf8], 0x58
call fcn.0052e376
lea ecx, [esp + 0x724]
mov byte [esp + 0xaf8], 0x57
call fcn.0052e376
lea ecx, [esp + 0x6e8]
mov byte [esp + 0xaf8], 0x56
call fcn.0052e376
lea ecx, [esp + 0x6ac]
mov byte [esp + 0xaf8], 0x55
call fcn.0052e376
lea ecx, [esp + 0x670]
mov byte [esp + 0xaf8], 0x54
call fcn.0052e376
lea ecx, [esp + 0x634]
mov byte [esp + 0xaf8], 0x53
call fcn.0052e376
lea ecx, [esp + 0x5cc]
mov byte [esp + 0xaf8], 0x52
call fcn.0040d760
lea ecx, [esp + 0x590]
mov byte [esp + 0xaf8], 0x51
call fcn.0052e376
lea ecx, [esp + 0x554]
mov byte [esp + 0xaf8], 0x50
call fcn.0052e376
mov byte [esp + 0xaf8], 0x4f
lea ecx, [esp + 0x518]
call fcn.0052e63b
lea ecx, [esp + 0x4dc]
mov byte [esp + 0xaf8], 0x4e
call fcn.0052e63b
lea ecx, [esp + 0x4a0]
mov byte [esp + 0xaf8], 0x4d
call fcn.0052e376
lea ecx, [esp + 0x464]
mov byte [esp + 0xaf8], 0x4c
call fcn.0052e376
lea ecx, [esp + 0x428]
mov byte [esp + 0xaf8], 0x4b
call fcn.0052e376
lea ecx, [esp + 0x3ec]
mov byte [esp + 0xaf8], 0x4a
call fcn.0052e376
lea ecx, [esp + 0x3b0]
mov byte [esp + 0xaf8], 0x49
call fcn.0052e376
lea ecx, [esp + 0x374]
mov byte [esp + 0xaf8], 0x48
call fcn.0052e535
lea ecx, [esp + 0x338]
mov byte [esp + 0xaf8], 0x47
call fcn.0052e63b
lea ecx, [esp + 0x2fc]
mov byte [esp + 0xaf8], 0x46
call fcn.0052e63b
lea ecx, [esp + 0x2c0]
mov byte [esp + 0xaf8], 0x45
call fcn.0052e63b
lea ecx, [esp + 0x284]
mov byte [esp + 0xaf8], 0x44
call fcn.0052e376
lea ecx, [esp + 0x248]
mov byte [esp + 0xaf8], 0x43
call fcn.0052e63b
lea ecx, [esp + 0x20c]
mov byte [esp + 0xaf8], 0x42
call fcn.0052e63b
lea ecx, [esp + 0x1d0]
mov byte [esp + 0xaf8], 0x41
call fcn.0052e376
lea ecx, [esp + 0x194]
mov byte [esp + 0xaf8], 0x40
call fcn.0052e376
lea ecx, [esp + 0x158]
mov byte [esp + 0xaf8], 0x3f
call fcn.0052e376
lea ecx, [esp + 0x11c]
mov byte [esp + 0xaf8], 0x3e
call fcn.0052e376
lea ecx, [esp + 0xe0]
mov byte [esp + 0xaf8], 0x3d
call fcn.0052e535
lea ecx, [esp + 0xa4]
mov byte [esp + 0xaf8], 0x3c
call fcn.00517527
mov dword [esp + 0xaf8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x433ff0
push 0
lea ecx, [esp + 0x4c]
call fcn.0043d180
lea ecx, [esp + 0x48]
mov dword [esp + 0xaf8], 0x5d
call fcn.0051a0bf
lea ecx, [esp + 0x188]
mov dword [esp + 0xaf8], 0x63
call fcn.00518234
lea ecx, [esp + 0x174]
mov byte [esp + 0xaf8], 0x62
call fcn.00518234
lea ecx, [esp + 0x160]
mov byte [esp + 0xaf8], 0x61
call fcn.00518234
lea ecx, [esp + 0x11c]
mov byte [esp + 0xaf8], 0x60
call fcn.0052e3dc
lea ecx, [esp + 0xe0]
mov byte [esp + 0xaf8], 0x5f
call fcn.0052e63b
lea ecx, [esp + 0xa4]
mov byte [esp + 0xaf8], 0x5e
call fcn.0052e63b
mov dword [esp + 0xaf8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x433ff0
push 0
lea ecx, [esp + 0x4c]
call fcn.0043f890
lea edx, [esp + 0x11c]
mov ecx, edi
push edx
mov dword [esp + 0xafc], 0x64
call fcn.00473e20
lea ecx, [esp + 0x48]
call fcn.0051a0bf
cmp eax, 1
jne 0x433c37
mov eax, dword [esp + 0x11c]
push eax
call fcn.00473ec0
add esp, 4
add eax, 4
mov ecx, ebp
push eax
push 0
call fcn.00473d40
mov ecx, dword [esp + 0x11c]
push ecx
mov ecx, ebp
call fcn.00473db0
mov edx, dword [esp + 0x120]
mov ecx, ebp
push edx
call fcn.00473d90
mov esi, 1
jmp 0x433c39
xor esi, esi
lea ecx, [esp + 0x11c]
mov dword [esp + 0xaf8], 0x67
call fcn.00519616
lea ecx, [esp + 0xe0]
mov byte [esp + 0xaf8], 0x66
call fcn.0052e535
lea ecx, [esp + 0xa4]
mov byte [esp + 0xaf8], 0x65
call fcn.0052e376
mov dword [esp + 0xaf8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x433ff0
push 0
lea ecx, [esp + 0x4c]
call fcn.0043fac0
mov ecx, edi
mov dword [esp + 0xaf8], 0x68
call fcn.00473ea0
mov dword [esp + 0x194], eax
lea eax, [esp + 0x198]
push eax
mov ecx, edi
call fcn.00473e20
lea ecx, [esp + 0x48]
call fcn.0051a0bf
lea ecx, [esp + 0x198]
mov dword [esp + 0xaf8], 0x6d
call fcn.00519616
lea ecx, [esp + 0x158]
mov byte [esp + 0xaf8], 0x6c
call fcn.0052e535
lea ecx, [esp + 0x11c]
mov byte [esp + 0xaf8], 0x6b
call fcn.0052e535
lea ecx, [esp + 0xe0]
mov byte [esp + 0xaf8], 0x6a
call fcn.0052e376
lea ecx, [esp + 0xa4]
mov byte [esp + 0xaf8], 0x69
call fcn.0052e31c
mov dword [esp + 0xaf8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x433ff0
push 0
lea ecx, [esp + 0x4c]
call fcn.004403c0
lea ecx, [esp + 0x158]
mov dword [esp + 0xaf8], 0x6e
push ecx
mov ecx, edi
call fcn.00473e20
lea ecx, [esp + 0x48]
call fcn.0051a0bf
lea ecx, [esp + 0x158]
mov dword [esp + 0xaf8], 0x72
call fcn.00519616
lea ecx, [esp + 0x11c]
mov byte [esp + 0xaf8], 0x71
call fcn.0052e535
lea ecx, [esp + 0xe0]
mov byte [esp + 0xaf8], 0x70
call fcn.0052e376
lea ecx, [esp + 0xa4]
mov byte [esp + 0xaf8], 0x6f
call fcn.0052e31c
mov dword [esp + 0xaf8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x433ff0
push 0
lea ecx, [esp + 0x4c]
call fcn.00440df0
lea ecx, [esp + 0x48]
mov dword [esp + 0xaf8], 0x73
call fcn.0051a0bf
mov dword [esp + 0xaf8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x433ff0
mov ecx, edi
call fcn.00473ea0
push 0
mov ecx, edi
mov esi, eax
call fcn.00473ea0
push eax
push esi
lea ecx, [esp + 0x54]
call fcn.00442c60
lea ecx, [esp + 0x48]
mov dword [esp + 0xaf8], 0x74
call fcn.0051a0bf
mov esi, eax
dec esi
neg esi
sbb esi, esi
inc esi
lea ecx, [esp + 0x1c4]
mov dword [esp + 0xaf8], 0x76
call fcn.0052e63b
lea ecx, [esp + 0xa4]
mov byte [esp + 0xaf8], 0x75
call fcn.004e5be0
mov dword [esp + 0xaf8], 0xffffffff
lea ecx, [esp + 0x48]
jmp 0x433ff0
mov ecx, edi
call fcn.00473ea0
cmp eax, 1
jne 0x433ed2
mov ecx, dword [0x5998d8]
test ecx, ecx
jne 0x433ed2
push 0x599280
call fcn.00473ec0
add esp, 4
add eax, 4
mov ecx, ebp
push eax
push 0
call fcn.00473d40
push 0
mov ecx, ebp
call fcn.00473d90
push 0x599280
mov ecx, ebp
call fcn.00473db0
mov esi, 1
jmp case.0x432b96.3
mov edx, dword [esp + 0x18]
push 0
push eax
lea ecx, [esp + 0x9b8]
mov dword [edx + 0x9d8], 2
call fcn.00441540
lea ecx, [esp + 0x9b0]
mov dword [esp + 0xaf8], 0x77
call fcn.0051a0bf
cmp eax, 1
jne 0x433f4d
mov eax, dword [esp + 0xac4]
push eax
call fcn.00473ec0
add esp, 4
add eax, 4
mov ecx, ebp
push eax
push 0
call fcn.00473d40
mov ecx, dword [esp + 0xac0]
push ecx
mov ecx, ebp
call fcn.00473d90
mov edx, dword [esp + 0xac4]
mov ecx, ebp
push edx
call fcn.00473db0
mov esi, 1
jmp 0x433f4f
xor esi, esi
lea ecx, [esp + 0xadc]
mov dword [esp + 0xaf8], 0x7e
call fcn.00518234
lea ecx, [esp + 0xad0]
mov byte [esp + 0xaf8], 0x7d
call fcn.00517665
lea ecx, [esp + 0xac8]
mov byte [esp + 0xaf8], 0x7c
call fcn.00517665
lea ecx, [esp + 0xac4]
mov byte [esp + 0xaf8], 0x7b
call fcn.00519616
lea ecx, [esp + 0xa84]
mov byte [esp + 0xaf8], 0x7a
call fcn.005171e0
lea ecx, [esp + 0xa48]
mov byte [esp + 0xaf8], 0x79
call fcn.0051705e
lea ecx, [esp + 0xa0c]
mov byte [esp + 0xaf8], 0x78
call fcn.0052e376
mov dword [esp + 0xaf8], 0xffffffff
lea ecx, [esp + 0x9b0]
call fcn.00519cf5
test ebp, ebp
pop edi
je 0x43400e
mov eax, dword [ebp + 4]
mov dword [ebp], 0
mov dword [ebp + 0xc], eax
mov dword [ebp + 4], 0
mov eax, esi
pop esi
pop ebp
mov ecx, dword [esp + 0xae4]
pop ebx
mov dword fs:[0], ecx
add esp, 0xaec
ret 0x10