Function at 0x435bac
Capabilities:
Check for software breakpoints

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x84
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x10], 0xb6b84a9d
mov eax, dword [ebp - 0x10]
cmp eax, 0xec948aa2
jg 0x435c26
cmp eax, 0xbab24ea2
jle 0x435c88
cmp eax, 0xd1ddbb77
jg 0x435d4a
cmp eax, 0xc8eb5411
jle 0x435ef8
cmp eax, 0xcd4c5526
jg 0x43616e
cmp eax, 0xc8eb5412
je 0x436553
cmp eax, 0xc97a4cda
je 0x43656b
cmp eax, 0xcb360944
jne 0x435bc2
mov eax, dword [ebp - 0x50]
mov al, byte [eax]
mov byte [ebp - 0x19], al
mov dword [ebp - 0x10], 0xdeb94a35
jmp 0x435bc2
cmp eax, 0x38638828
jle 0x435cf3
cmp eax, 0x5930cf58
jg 0x435db2
cmp eax, 0x4a17fab7
jle 0x435f41
cmp eax, 0x4e040973
jg 0x436194
cmp eax, 0x4a17fab8
je 0x436588
cmp eax, 0x4b5d6fdc
je 0x4365c7
cmp eax, 0x4ba8eae9
jne 0x435bc2
mov eax, dword [ebp - 0x6c]
add eax, 6
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x10], 0x1f608c99
jmp 0x435bc2
cmp eax, 0x9f4a3929
jle 0x435e1d
cmp eax, 0xa397ae2f
jle 0x435f9b
cmp eax, 0xb0923f6b
jg 0x4361ec
cmp eax, 0xa397ae30
je 0x4365f4
cmp eax, 0xa834e0f0
je 0x43661b
cmp eax, 0xae5895b3
jne 0x435bc2
mov eax, dword [ebp - 0x14]
shr eax, 0x17
imul eax, eax, 0x14a00
add eax, 0x1c9eb
mov dword [ebp - 0x14], eax
push eax
call fcn.00436ce1
add esp, 4
mov dword [ebp - 0x10], 0xe3e203cd
jmp 0x435bc2
cmp eax, 0x96eae9c
jle 0x435e8c
cmp eax, 0x1f608c98
jle 0x435fd8
cmp eax, 0x2ad68010
jg 0x436249
cmp eax, 0x1f608c99
je 0x436657
cmp eax, 0x224852fe
je 0x436676
cmp eax, 0x250fe79e
jne 0x435bc2
mov eax, dword [ebp - 0x58]
add eax, dword [ebp - 0x68]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x10], 0xa834e0f0
jmp 0x435bc2
cmp eax, 0xde454cd3
jle 0x43601f
cmp eax, 0xe3e203cc
jg 0x4362a3
cmp eax, 0xde454cd4
je 0x436698
cmp eax, 0xdeb94a35
je 0x4366ab
cmp eax, 0xe3d24b48
jne 0x435bc2
mov eax, dword [ebp - 0x14]
lea esi, [eax*4 + 0xf0]
and esi, 0x3ffffffc
mov dword [ebp - 0x14], esi
push esi
call fcn.00436ce1
add esp, 4
push esi
call fcn.00435bac
add esp, 4
mov dword [ebp - 0x10], 0xd313ba9c
jmp 0x435bc2
cmp eax, 0x6472e4c8
jle 0x43605d
cmp eax, 0x6aedcf1d
jg 0x4362e8
cmp eax, 0x6472e4c9
je 0x4366df
cmp eax, 0x66e71dfc
je 0x436707
cmp eax, 0x68b73f97
jne 0x435bc2
imul ecx, dword [ebp - 0x14], 0x2f
shr ecx, 8
and ecx, 0xffffff80
add ecx, 0xffffe480
and ecx, 0xfffff000
mov dword [ebp - 0x14], ecx
mov eax, 0x15e92bfc
cmp ecx, 0x84
jl 0x436c73
mov eax, 0x4b5d6fdc
jmp 0x436c73
cmp eax, 0x88a3f493
jle 0x4360a2
cmp eax, 0x9228fb62
jle 0x43630e
cmp eax, 0x9228fb63
je 0x436722
cmp eax, 0x975144fa
je 0x436756
cmp eax, 0x9bbcc365
jne 0x435bc2
imul eax, dword [ebp - 0x18], 0x3d
shr eax, 0xa
add eax, 0x89
mov ecx, eax
imul ecx, eax
lea edx, [ecx + ecx*2]
mov esi, ecx
not esi
lea edx, [esi + edx*8]
shr eax, 0xa
mov dword [ebp - 0x18], eax
mov eax, 0x68b73f97
cmp edx, ecx
je 0x436c73
mov eax, 0xf27b69ff
jmp 0x436c73
cmp eax, 0xf624ecb9
jg 0x436108
cmp eax, 0xf27b69fe
jle 0x43634d
cmp eax, 0xf27b69ff
je 0x436c95
cmp eax, 0xf4ed3cf2
je 0x43676d
cmp eax, 0xf4f72d93
jne 0x435bc2
mov eax, dword [ebp - 0x14]
lea eax, [eax + eax*8]
lea esi, [eax*8 - 0xba]
mov dword [ebp - 0x14], esi
push esi
call fcn.00436ce1
add esp, 4
push esi
call fcn.00436ce1
add esp, 4
mov eax, 0xde454cd4
cmp esi, 0x4a
jae 0x436aea
jmp 0x436c73
cmp eax, 0xbda6ef7b
jle 0x43636f
cmp eax, 0xbda6ef7c
je 0x436779
cmp eax, 0xc3568bb0
je 0x4367a8
cmp eax, 0xc5c42e59
jne 0x435bc2
push dword [ebp - 0x58]
push dword [ebp - 0x64]
push dword [ebp - 0x68]
call fcn.004491e0
add esp, 0xc
mov dword [ebp - 0x10], 0x250fe79e
jmp 0x435bc2
cmp eax, 0x3e425f78
jle 0x43638a
cmp eax, 0x3e425f79
je 0x4367c8
cmp eax, 0x3ebb34a7
je 0x4367f2
cmp eax, 0x411c003f
jne 0x435bc2
mov eax, dword [ebp - 0x18]
and eax, 0xfffffffe
shl eax, 0xc
add eax, 0xffffccb6
shr eax, 1
add eax, 0x1b
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x9f4a392a
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], eax
jmp 0x435bc2
cmp eax, 0xa17801b9
jle 0x4363d0
cmp eax, 0xa17801ba
je 0x436822
cmp eax, 0xa2ab9093
je 0x436852
cmp eax, 0xa2d506db
jne 0x435bc2
mov eax, dword [ebp - 0x14]
shl eax, 7
add eax, 0xffffffe8
mov dword [ebp - 0x14], eax
jmp 0x4368ac
cmp eax, 0x15e92bfb
jle 0x436413
cmp eax, 0x15e92bfc
je 0x436888
cmp eax, 0x1b4541f9
je 0x4368b8
cmp eax, 0x1d1bfa05
jne 0x435bc2
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x10], 0xec948aa3
jmp 0x435bc2
cmp eax, 0xd313ba9b
jle 0x43645b
cmp eax, 0xd313ba9c
je 0x4368cd
cmp eax, 0xd3aa9fc6
je 0x436904
cmp eax, 0xd7079ddc
jne 0x435bc2
mov eax, dword [ebp + 4]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x10], 0x5f925468
jmp 0x435bc2
cmp eax, 0x5f925467
jle 0x436486
cmp eax, 0x5f925468
je 0x4369cb
cmp eax, 0x62e731d9
je 0x436910
cmp eax, 0x630777f5
jne 0x435bc2
mov eax, dword [ebp - 0x48]
add eax, eax
lea eax, [eax + eax*2]
neg eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x10], 0x80d61a96
jmp 0x435bc2
cmp eax, 0x855476ae
jle 0x4364be
cmp eax, 0x855476af
je 0x436950
cmp eax, 0x856f3887
je 0x43697c
cmp eax, 0x880df4e8
jne 0x435bc2
imul esi, dword [ebp - 0x14], 0x1b5100
add esi, 0xff9e4b86
mov dword [ebp - 0x14], esi
push esi
call fcn.00436ce1
add esp, 4
push esi
call fcn.00435bac
add esp, 4
mov eax, 0xde454cd4
cmp esi, 0x2b
jl 0x436c73
mov eax, 0x975144fa
jmp 0x436c73
cmp eax, 0xffa81ce6
jle 0x436512
cmp eax, 0xffa81ce7
je 0x436988
cmp eax, 0x2a0ca48
je 0x436994
cmp eax, 0x6610955
jne 0x435bc2
mov ecx, dword [ebp - 0x18]
mov eax, ecx
shr eax, 4
shr ecx, 9
imul eax, eax
lea edx, [ecx + ecx*4]
lea edx, [ecx + edx*4]
imul esi, eax, 0x631b
dec esi
add ecx, edx
add ecx, 0x45
mov dword [ebp - 0x18], ecx
mov ecx, 0xcb360944
cmp eax, esi
je 0x43674e
mov ecx, 0xd0905a80
jmp 0x43674e
cmp eax, 0xcd4c5527
je 0x4369ac
cmp eax, 0xceb89f54
je 0x4368ac
cmp eax, 0xd0905a80
je 0x436a8e
jmp 0x435bc2
cmp eax, 0x4e040974
je 0x4369d7
cmp eax, 0x55701329
je 0x4369f5
cmp eax, 0x58a04815
jne 0x435bc2
imul ecx, dword [ebp - 0x18], 0xe9
add ecx, 0xaa33
imul eax, ecx, 0xc1
imul ecx, ecx
imul edx, ecx, 0xb77
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x6b526a24
cmp ecx, edx
je 0x436c73
mov eax, 0x8c60b0d1
jmp 0x436c73
cmp eax, 0xb0923f6c
je 0x436a2e
cmp eax, 0xb6b84a9d
je 0x436a51
cmp eax, 0xb946de17
jne 0x435bc2
mov eax, dword [ebp - 0x14]
mov ecx, 0xffffff29
add eax, ecx
shr eax, 3
mov esi, eax
shl esi, 6
add esi, eax
mov dword [ebp - 0x14], esi
push esi
call fcn.00436ce1
add esp, 4
push esi
call fcn.00435bac
add esp, 4
mov eax, 0x1f608c99
cmp esi, 0x4b
jae 0x436c6e
jmp 0x436c73
cmp eax, 0x2ad68011
je 0x436a5d
cmp eax, 0x2b2a022c
je 0x436aba
cmp eax, 0x2b331914
jne 0x435bc2
mov eax, dword [ebp - 0x14]
mov esi, eax
shl esi, 8
sub esi, eax
sub esi, eax
add esi, 0xbe8
mov dword [ebp - 0x14], esi
push esi
call fcn.00436ce1
add esp, 4
mov eax, 0xa17801ba
cmp esi, 0xcd
jae 0x436c73
mov eax, 0xd2333425
jmp 0x436c73
cmp eax, 0xe3e203cd
je 0x436af4
cmp eax, 0xe5345454
je 0x436b0f
cmp eax, 0xebc7d899
jne 0x435bc2
imul eax, dword [ebp - 0x18], 0xca4c
add eax, 0x5a48
shr eax, 0xb
imul eax, eax, 0xd1
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x2ad68011
jmp 0x435bc2
cmp eax, 0x6aedcf1e
je 0x436b38
cmp eax, 0x6b526a24
je 0x436b52
cmp eax, 0x7ecb0972
je 0x436aa0
jmp 0x435bc2
cmp eax, 0x88a3f494
je 0x436b8f
cmp eax, 0x911c4725
jne 0x436cc8
imul esi, dword [ebp - 0x14], 0x9c4c8
add esi, 0x72
mov dword [ebp - 0x14], esi
push esi
call fcn.00436ce1
add esp, 4
mov eax, 0x6472e4c9
cmp esi, 0x27
jae 0x43687e
jmp 0x436c73
cmp eax, 0xec948aa3
je 0x436b2c
cmp eax, 0xef61729b
jne 0x435bc2
mov dword [ebp - 0x10], 0x4ba8eae9
jmp 0x435bc2
cmp eax, 0xbab24ea3
je 0x436bb7
cmp eax, 0xbb1da567
je 0x436a74
jmp 0x435bc2
cmp eax, 0x38638829
je 0x436bc3
cmp eax, 0x3dea12e3
jne 0x435bc2
mov eax, dword [ebp - 0x14]
shr eax, 9
imul ecx, eax, 0xd0
add ecx, 0x9a
mov dword [ebp - 0x14], ecx
mov eax, 0x224852fe
cmp ecx, 0x96
jl 0x436c73
mov eax, 0x38638829
jmp 0x436c73
cmp eax, 0x9f4a392a
je 0x436be3
cmp eax, 0x9f700218
jne 0x435bc2
imul eax, dword [ebp - 0x14], 0xe4
shr eax, 7
add eax, 0x20
shr eax, 0x16
add eax, 0x84
mov dword [ebp - 0x14], eax
push eax
call fcn.00436ce1
add esp, 4
mov dword [ebp - 0x10], 0xcd4c5527
jmp 0x435bc2
cmp eax, 0x96eae9d
je 0x436c01
cmp eax, 0xfdcdbcd
jne 0x435bc2
mov eax, dword [ebp - 0x14]
shr eax, 6
imul ecx, eax, 0x5e
add ecx, 0xb62
shr ecx, 1
and ecx, 0xfffffff0
lea eax, [ecx - 0x34]
mov dword [ebp - 0x14], eax
mov eax, 0xcb360944
cmp ecx, 0x48
jae 0x436c73
mov eax, 0x5930cf59
jmp 0x436c73
cmp eax, 0xd1ddbb78
je 0x436c39
cmp eax, 0xd2333425
jne 0x435bc2
mov eax, dword [ebp - 0x6c]
sub eax, dword [ebp - 0x64]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x10], 0x55701329
jmp 0x435bc2
cmp eax, 0x5930cf59
je 0x436c45
cmp eax, 0x5a1eeea1
jne 0x435bc2
imul ecx, dword [ebp - 0x14], 0x1c56
mov dword [ebp - 0x14], ecx
mov eax, 0xf6b5b766
cmp ecx, 0x64
jge 0x436c73
mov eax, 0xcb360944
jmp 0x436c73
cmp eax, 0x80763115
je 0x436c7b
cmp eax, 0x80d61a96
jne 0x435bc2
mov eax, dword [ebp - 0x18]
add eax, 0x30
shr eax, 9
imul ecx, eax, 0xe40
imul eax, eax
imul edx, eax, 0xb3f
dec edx
add ecx, 0xfffdf0f0
mov dword [ebp - 0x18], ecx
mov ecx, 0xf624ecba
cmp eax, edx
je 0x436504
mov ecx, 0x1b4541f9
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x3c], eax
jmp 0x435bc2
cmp eax, 0xf624ecba
je 0x436ca1
cmp eax, 0xf6b5b766
jne 0x435bc2
imul ecx, dword [ebp - 0x14], 0x2c7000
add ecx, 0xfd390000
mov dword [ebp - 0x14], ecx
mov eax, 0xa397ae30
cmp ecx, 0xe7
jl 0x436c73
mov eax, 0xb946de17
jmp 0x436c73
push ebx
call fcn.004490d0
add esp, 4
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x10], 0xd3aa9fc6
jmp 0x435bc2
push 0x462d2a
push ebx
call fcn.00440990
add esp, 8
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x10], 0xa17801ba
jmp 0x435bc2
mov esi, dword [ebp - 0x14]
mov eax, 0xa4
add esi, eax
mov edi, esi
shr edi, 2
mov dword [ebp - 0x14], edi
push edi
call fcn.00436ce1
add esp, 4
push edi
call fcn.00436ce1
add esp, 4
mov eax, 0x2b331914
cmp esi, 0x13c
jae 0x436c73
mov eax, 0xc97a4cda
jmp 0x436c73
mov ecx, dword [ebp - 0x14]
shl ecx, 4
and ecx, 0xffffc00
or ecx, 0x5a
mov dword [ebp - 0x14], ecx
mov eax, 0xde454cd4
cmp ecx, 0xa9
jb 0x436c73
mov eax, 0xa2d506db
jmp 0x436c73
push dword [ebp - 0x7c]
call fcn.00448a24
add esp, 4
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
mov eax, 0x58a04815
je 0x436c73
mov eax, 0xbab24ea3
jmp 0x436c73
mov ecx, dword [ebp - 0x18]
lea eax, [ecx + 0xbd]
imul eax, eax
imul edx, eax, 0x59b7
dec edx
shl ecx, 8
add ecx, 0x135300
and ecx, 0xffffe000
mov dword [ebp - 0x18], ecx
mov ecx, 0xbda6ef7c
cmp edx, eax
je 0x43674e
mov ecx, 0xef61729b
jmp 0x43674e
push 0x462d2a
push dword [ebp - 0x24]
call fcn.00440990
add esp, 8
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x10], 0xffa81ce7
jmp 0x435bc2
imul ecx, dword [ebp - 0x14], 0xcb6c0000
mov dword [ebp - 0x14], ecx
mov eax, 0xe3e203cd
cmp ecx, 0x7f
jg 0x436c73
mov eax, 0xae5895b3
jmp 0x436c73
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x10], 0x9bbcc365
jmp 0x435bc2
mov ecx, dword [ebp - 0x18]
imul eax, ecx, 0x4f
add eax, 0x1e3e
imul eax, eax
imul edx, eax, 0x29ff
imul ecx, ecx, 0x2f86
dec edx
add ecx, 0x11d9ad
mov dword [ebp - 0x18], ecx
mov ecx, 0x9f700218
cmp eax, edx
je 0x43674e
mov ecx, 0xe3e203cd
jmp 0x43674e
mov ecx, dword [ebp - 0x14]
shr ecx, 4
and ecx, 0xffffffe0
lea eax, [ecx + 0x2e]
shr eax, 0xb
mov dword [ebp - 0x14], eax
mov eax, 0x855476af
cmp ecx, 0x377d2
jb 0x436aea
jmp 0x436c73
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x88]
add eax, ecx
inc eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x10], 0xa397ae30
jmp 0x435bc2
mov eax, dword [ebp - 0x18]
shr eax, 0xe
add eax, 0xffffff5c
imul ecx, eax, 0xe3
imul eax, eax
imul edx, eax, 0x385b
dec edx
mov dword [ebp - 0x18], ecx
mov ecx, 0x911c4725
cmp edx, eax
je 0x43674e
mov ecx, 0x630777f5
mov dword [ebp - 0x10], ecx
jmp 0x435bc2
imul eax, dword [ebp - 0x14], 0xf4800000
add eax, 0x64800000
shr eax, 0xd
mov dword [ebp - 0x14], eax
jmp 0x436c95
mov dword [ebp - 0x10], 0x66e71dfc
jmp 0x435bc2
push 0x462d2a
push ebx
call fcn.00440990
add esp, 8
mov ecx, 0x1b4541f9
test eax, eax
je 0x436795
mov ecx, 0x1d1bfa05
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x44], eax
xor eax, eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], eax
jmp 0x435bc2
imul ecx, dword [ebp - 0x14], 0x5d
add ecx, 0xffffd93c
mov dword [ebp - 0x14], ecx
mov eax, 0x4a17fab8
cmp ecx, 0x12
jge 0x436c6e
jmp 0x436c73
cmp dword [ebp - 0x60], 0
mov eax, 0x411c003f
je 0x4367d8
mov eax, 0x4e040974
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], ecx
jmp 0x435bc2
mov eax, dword [ebp - 0x18]
mov ecx, 0xfffff
and eax, ecx
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x7891
dec edx
add eax, 0x85
mov dword [ebp - 0x18], eax
mov eax, 0xa2ab9093
cmp ecx, edx
jne 0x436c32
jmp 0x436c73
cmp dword [ebp - 0x54], 0
mov eax, 0x9f4a392a
je 0x436832
mov eax, 0x4e040974
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ecx
jmp 0x435bc2
mov esi, dword [ebp - 0x14]
shl esi, 7
and esi, 0xffff80
or esi, 0x5e
mov dword [ebp - 0x14], esi
push esi
call fcn.00436ce1
add esp, 4
mov eax, 0x880df4e8
cmp esi, 0x96
jae 0x436c73
mov eax, 0x2a0ca48
jmp 0x436c73
mov eax, dword [ebp - 0x14]
shr eax, 0xb
imul esi, eax, 0xfd
add esi, 0x45
mov dword [ebp - 0x14], esi
push esi
call fcn.00436ce1
add esp, 4
push esi
call fcn.00436ce1
add esp, 4
mov dword [ebp - 0x10], 0xbda6ef7c
jmp 0x435bc2
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x10], 0xd7079ddc
jmp 0x435bc2
mov esi, dword [ebp - 0x14]
shl esi, 0x16
add esi, 0xfffe988c
mov dword [ebp - 0x14], esi
push esi
call fcn.00436ce1
add esp, 4
push esi
call fcn.00436ce1
add esp, 4
mov eax, 0xcb360944
cmp esi, 0xec
jl 0x436c6e
jmp 0x436c73
mov dword [ebp - 0x10], 0xceb89f54
jmp 0x435bc2
imul esi, dword [ebp - 0x14], 0x648
add esi, 0xfffffdea
shr esi, 0xc
and esi, 0xfffffffe
mov dword [ebp - 0x14], esi
push esi
call fcn.00436ce1
add esp, 4
push esi
call fcn.00436ce1
add esp, 4
mov eax, 0x2ad68011
cmp esi, 0x7a
jb 0x436c73
mov eax, 0xfdcdbcd
jmp 0x436c73
push 0x462d2a
push dword [ebp - 0x74]
call fcn.00440990
add esp, 8
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
mov eax, 0x9228fb63
je 0x436c73
mov eax, 0x88a3f494
jmp 0x436c73
mov dword [ebp - 0x10], 0xc5c42e59
jmp 0x435bc2
mov dword [ebp - 0x10], 0x3e425f79
jmp 0x435bc2
mov eax, dword [ebp - 0x84]
add eax, 6
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x10], 0x3ebb34a7
jmp 0x435bc2
imul eax, dword [ebp - 0x14], 0x4400
add eax, 0xffffff09
shr eax, 1
add eax, 0xffffff17
mov dword [ebp - 0x14], eax
push eax
call fcn.00435bac
add esp, 4
mov dword [ebp - 0x10], 0xcb360944
jmp 0x435bc2
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x10], 0xd1ddbb78
jmp 0x435bc2
mov eax, dword [ebp - 0x18]
mov ecx, 0xffffff73
add eax, ecx
mov ecx, eax
imul ecx, eax
shr eax, 2
imul edx, ecx, 0x740f
imul eax, eax, 0x4d
dec edx
shr eax, 0xa
mov dword [ebp - 0x18], eax
mov eax, 0xc3568bb0
cmp ecx, edx
je 0x436c73
mov eax, 0x856f3887
jmp 0x436c73
mov eax, dword [ebp - 0x18]
shl eax, 9
or eax, 0x42
imul eax, eax, 0x2a4
and eax, 0xffffc000
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x8c60b0d1
jmp 0x435bc2
mov dword [ebp - 0x10], 0xc8eb5412
jmp 0x435bc2
mov eax, dword [ebp - 0x50]
movzx eax, word [eax]
cmp eax, 0xcd03
je 0x436a8e
movzx eax, ax
cmp eax, 0xf0b
jne 0x436aa0
mov eax, dword [ebp - 0x18]
shl eax, 0xc
or eax, 0xe5
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xd0905a80
jmp 0x435bc2
popal
jmp 0x436a8f
mov eax, dword [ebp - 0x18]
shl eax, 9
add eax, 0x10311
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xf4ed3cf2
jmp 0x435bc2
imul esi, dword [ebp - 0x14], 0x1de96e18
add esi, 0x18a64ad6
mov dword [ebp - 0x14], esi
push esi
call fcn.00435bac
add esp, 4
push esi
call fcn.00436ce1
add esp, 4
mov eax, 0x96eae9d
cmp esi, 0x20
jl 0x436c73
mov eax, 0xbda6ef7c
jmp 0x436c73
mov cl, byte [ebp - 0x19]
mov eax, 0x6610955
cmp cl, 0xcc
je 0x436c73
mov eax, 0xebc7d899
jmp 0x436c73
mov eax, dword [ebp - 0x14]
shr eax, 0xa
imul eax, eax, 0x2db800
add eax, 0xfffa95ad
mov dword [ebp - 0x14], eax
push eax
call fcn.00435bac
add esp, 4
mov dword [ebp - 0x10], 0xde454cd4
jmp 0x435bc2
mov eax, dword [ebp - 0x14]
shr eax, 0xc
add eax, 0xffffff06
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xa397ae30
jmp 0x435bc2
imul esi, dword [ebp - 0x14], 0x1cc
add esi, 0xfffe427e
mov dword [ebp - 0x14], esi
push esi
call fcn.00436ce1
add esp, 4
push esi
call fcn.00436ce1
add esp, 4
mov eax, 0x6aedcf1e
cmp esi, 0xd5
jae 0x436c73
mov eax, 0x66e71dfc
jmp 0x436c73
imul eax, dword [ebp - 0x18], 0x62b80000
or eax, 1
imul eax, eax, 0x61
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x1d1bfa05
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x40], eax
jmp 0x435bc2
mov dword [ebp - 0x10], 0xc97a4cda
jmp 0x435bc2
push dword [ebp - 0x90]
push dword [ebp - 0x8c]
call fcn.00448ee0
add esp, 8
mov dword [ebp - 0x10], 0xb0923f6c
jmp 0x435bc2
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x10], 0x38638829
jmp 0x435bc2
imul esi, dword [ebp - 0x14], 0xc5
add esi, 0xffffff6e
shr esi, 3
add esi, 0xffffffbc
mov eax, esi
shr eax, 0xe
mov dword [ebp - 0x14], eax
push eax
call fcn.00436ce1
add esp, 4
mov eax, 0xde454cd4
cmp esi, 0x5c000
jae 0x436c73
mov eax, 0x855476af
jmp 0x436c73
mov dword [ebp - 0x10], 0xd2333425
jmp 0x435bc2
movzx esi, word [ebp - 0x12]
add esi, 0xffffff9d
mov dword [ebp - 0x14], esi
push esi
call fcn.00435bac
add esp, 4
push esi
call fcn.00436ce1
add esp, 4
mov eax, 0xbda6ef7c
cmp esi, 0xc8
jae 0x436c73
mov eax, 0xd7079ddc
mov dword [ebp - 0x10], eax
jmp 0x435bc2
mov eax, dword [ebp - 0x14]
and eax, 0xfffffff0
shl eax, 7
add eax, 0xfffffdf8
mov dword [ebp - 0x14], eax
push eax
call fcn.00435bac
add esp, 4
mov dword [ebp - 0x10], 0x2a0ca48
jmp 0x435bc2
imul esi, dword [ebp - 0x14], 0x3c
add esi, 0xaa
mov dword [ebp - 0x14], esi
push esi
call fcn.00436ce1
add esp, 4
mov eax, 0xe5345454
cmp esi, 0x2d
jae 0x436c73
mov eax, 0x80763115
jmp 0x436c73
cmp eax, 0x8c60b0d1
jne 0x435bc2
mov eax, dword [ebp - 0x20]
add esp, 0x84
pop esi
pop edi
pop ebx
pop ebp
ret