Function at 0x436f67
Capabilities:
Contain obfuscated stackstrings

Disassembly:
add esp, 4
or edx, 0x6b99
call 0x436dbd
add byte [ebp + 0x3c], cl
inc ebp
inc ecx
xor eax, 0x463e413e
add esp, 4
pop edx
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x3cc], eax
jmp 0x436e10
push edi
push edx
add esp, 4
xor edi, 0xcad9
or edi, 0x1a3f
sub edi, 0x6493
add edi, 0x146c2
pop edi
push ebx
or ebx, 0xdb38
sub ebx, 0x113f4
add ebx, 0x918f
pop ebx
push eax
sub eax, 0x7787
sub eax, 0x10c4f
pop eax
push esi
xor esi, 0x15fc4
pop esi
push edi
or edi, 0x15348
sub edi, 0x30c7
sub edi, 0x12d7c
jmp 0x436e73
pop edi
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb80]
mov dword [ebp - 0x14c8], eax
push edx
add edx, 0xafcc
call 0x436e9f
add byte [eax + 0x4d], dl
dec esp
push eax
dec esp
push eax
xor eax, dword [eax + 0x3a]
add esp, 4
xor edx, 0x15983
or edx, 0x15890
pop edx
push ecx
push edx
add esp, 4
sub ecx, 0xe59e
pop ecx
mov dword [ebp - 0x1fac], 0xffffffff
push edi
push ebx
add esp, 4
xor edi, 0x171b4
pop edi
push edi
push ecx
add esp, 4
xor edi, 0x9713
or edi, 0x10a1c
pop edi
push esi
sub esi, 0x8ca2
xor esi, 0x131f8
xor esi, 0x16c3c
pop esi
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4d0], ecx
jmp 0x436f14
mov edx, dword [ebp - 0x4d0]
add edx, 1
mov dword [ebp - 0x4d0], edx
push esi
push eax
add esp, 4
sub esi, 0x10c4b
xor esi, 0x7e80
pop esi
push ebx
push edi
add esp, 4
add ebx, 0x12b63
pop ebx
push eax
call 0x436f42
add byte [ebx], bh
dec ebx
inc esi
inc edx
xor eax, 0x83483e4f
les eax, [eax + ebx*2]
mov eax, dword [ebp - 0x4d0]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x436f8e
push eax
call 0x436f67
add byte [edx], dh
inc ebx
push eax
dec edx
cmp dword [eax + 0x49], edx
xor eax, 0x4c48345
and eax, 0xf025
pop eax
push edi
push esi
add esp, 4
add edi, 0xa357
pop edi
push eax
push edi
add esp, 4
jmp 0x436f88
pop eax
jmp 0x4371bc
mov dword [ebp - 0xc10], 7
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0xa60], ecx
push eax
or eax, 0xd92b
jmp 0x436fb4
sub eax, 0xa980
jmp 0x436fc3
pop eax
push eax
push edx
add esp, 4
add eax, 0x5897
add eax, 0x11b6c
pop eax
mov edx, dword [ebp - 0x14c8]
mov dword [ebp - 0x9f0], edx
mov dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0x4d0]
cmp eax, dword [ebp - 0x14c8]
jne 0x43703d
push eax
push esi
add esp, 4
xor eax, 0xaf54
sub eax, 0xe3e3
pop eax
push edx
call 0x43701d
add byte [ebx + eax*2], dh
inc esp
cmp eax, dword [ebp + 0x39]
cmp edi, dword [ecx]
cmp al, 0x39
add esp, 4
pop edx
push ecx
push ebx
add esp, 4
jmp 0x43702b
pop ecx
mov ecx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], ecx
jmp 0x43716e
cmp dword [ebp - 0xc10], 0
jle 0x437162
push edi
sub edi, 0x5fab
add edi, 0xa646
and edi, 0x4d2e
add edi, 0x7905
pop edi
push ecx
push eax
add esp, 4
sub ecx, 0xb29c
or ecx, 0x12a9f
and ecx, 0x10ceb
pop ecx
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x9f0]
movzx edx, byte [ecx]
cmp eax, edx
je 0x4370fe
push ebx
push ebx
add esp, 4
or ebx, 0xf5ef
jmp 0x4370a5
add ebx, 0x87a0
pop ebx
push esi
push ebx
add esp, 4
or esi, 0xd979
or esi, 0x871d
add esi, 0xd641
pop esi
mov eax, dword [ebp - 0xa60]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x9f0]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x4370e6
mov dword [ebp - 0x14cc], 1
jmp 0x4370f0
mov dword [ebp - 0x14cc], 0xffffffff
mov ecx, dword [ebp - 0x14cc]
mov dword [ebp - 0xc14], ecx
jmp 0x437162
push ebx
push ebx
add esp, 4
sub ebx, 0xa8fa
sub ebx, 0x14c8d
xor ebx, 0x157ee
pop ebx
push ebx
jmp 0x43711d
add ebx, 0x7ee3
xor ebx, 0x120f6
xor ebx, 0xc406
pop ebx
mov edx, dword [ebp - 0xc10]
sub edx, 1
mov dword [ebp - 0xc10], edx
mov eax, dword [ebp - 0xa60]
add eax, 1
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0x9f0]
add ecx, 1
mov dword [ebp - 0x9f0], ecx
jmp 0x43703d
mov edx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], edx
cmp dword [ebp - 0x14d0], 0
jne 0x4371b7
push eax
call 0x437186
add byte [ecx + 0x42], cl
dec ebx
dec esp
cmp al, 0x45
dec edi
add esp, 4
call 0x437199
add byte [esi], bh
cmp dword ds:[edi], edi
aas
push eax
inc edi
inc edi
inc ebx
cmp eax, dword [ebx - 0x3f7efb3c]
invalid
jmp 0x436f05
push eax
push edx
add esp, 4
or eax, 0x15e78
xor eax, 0x2204
or eax, 0xc0f3
pop eax
push edx
or edx, 0xc886
or edx, 0x45b1
sub edx, 0x81d
add edx, 0x9aad
pop edx
mov dword [ebp - 0xa5c], 0
push ecx
add ecx, 0x4b7f
pop ecx
push edi
or edi, 0x6349
pop edi
push edx
add edx, 0x4b95
pop edx
push ecx
push eax
add esp, 4
and ecx, 0xbea2
add ecx, 0x4932
pop ecx
push edi
and edi, 0x153d9
pop edi
mov byte [ebp - 0x804], 0x45
mov byte [ebp - 0x803], 0x78
mov byte [ebp - 0x802], 0x69
mov byte [ebp - 0x801], 0x74
mov byte [ebp - 0x800], 0x50
mov byte [ebp - 0x7ff], 0x72
mov byte [ebp - 0x7fe], 0x6f
mov byte [ebp - 0x7fd], 0x63
mov byte [ebp - 0x7fc], 0x65
mov byte [ebp - 0x7fb], 0x73
mov byte [ebp - 0x7fa], 0x73
mov byte [ebp - 0x7f9], 0
push edi
push edi
add esp, 4
call 0x437292
add byte [edi + 0x3e], cl
dec esi
inc esi
cmp dword [ecx], edi
dec esi
cmp dword [ebx + 0x525f04c4], eax
and edx, 0x7bf
or edx, 0x17853
sub edx, 0x215d
and edx, 0x13859
pop edx
mov ecx, 0x6b
mov word [ebp - 0x1628], cx
mov edx, 0x65
mov word [ebp - 0x1626], dx
mov eax, 0x72
mov word [ebp - 0x1624], ax
mov ecx, 0x6e
mov word [ebp - 0x1622], cx
mov edx, 0x65
mov word [ebp - 0x1620], dx
mov eax, 0x6c
mov word [ebp - 0x161e], ax
mov ecx, 0x33
mov word [ebp - 0x161c], cx
mov edx, 0x32
mov word [ebp - 0x161a], dx
mov eax, 0x2e
mov word [ebp - 0x1618], ax
mov ecx, 0x64
mov word [ebp - 0x1616], cx
mov edx, 0x6c
mov word [ebp - 0x1614], dx
mov eax, 0x6c
mov word [ebp - 0x1612], ax
xor ecx, ecx
mov word [ebp - 0x1610], cx
push ecx
xor ecx, 0x2451
add ecx, 0x1217c
add ecx, 0x3801
add ecx, 0x2c46
pop ecx
push ecx
push esi
add esp, 4
sub ecx, 0x15ef9
add ecx, 0xc233
sub ecx, 0x142ef
pop ecx
push eax
push esi
add esp, 4
xor eax, 0x4f99
pop eax
push ecx
sub ecx, 0xe045
call 0x43739d
add byte [edx], bh
inc ebx
inc edi
dec ebp
dec edi
dec esp
inc edx
add esp, 4
or ecx, 0xfb4e
or ecx, 0x104e7
pop ecx
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1890], edx
mov eax, dword [ebp - 0x1890]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1894], ecx
mov edx, dword [ebp - 0x1894]
mov dword [ebp - 0x14d4], edx
push edi
push edx
add esp, 4
jmp 0x4373e2
jmp 0x4373e8
pop edi
push esi
jmp 0x4373ef
call 0x4373fd
add byte [edi + 0x4f], al
aas
dec edx
cmp eax, 0x83374545
les eax, [ecx + eax*4]
invalid