Function at 0x435fd5
Capabilities:
Check for software breakpoints

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x28
mov dword [ebp - 0x10], 0x39c0947c
mov edi, dword [ebp - 0x30]
mov ebx, dword [0x46f21c]
mov eax, dword [ebp - 0x10]
cmp eax, 0xf04bccf0
jle 0x436053
cmp eax, 0x3acddb48
jg 0x4360ad
cmp eax, 0x2e480e9d
jle 0x436177
cmp eax, 0x37d0246a
jg 0x436259
cmp eax, 0x2e480e9e
je 0x4363f9
cmp eax, 0x3206c62a
je 0x43648c
cmp eax, 0x34319415
jne 0x435fee
add edi, 0xffffffb6
mov eax, 0x95c88730
cmp edi, 0x490
jae 0x43604b
mov eax, 0x5e69fb01
shr edi, 4
jmp 0x4367ca
cmp eax, 0xa6b01960
jle 0x43610a
cmp eax, 0xbe8dfb6b
jle 0x4361b6
cmp eax, 0xd6ff24ac
jg 0x43628c
cmp eax, 0xbe8dfb6c
je 0x4364b4
cmp eax, 0xcac22c0f
je 0x4364dd
cmp eax, 0xd5aac676
jne 0x435fee
mov eax, dword [ebp - 0x14]
movzx eax, al
shl eax, 0x10
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x79fe424b
jmp 0x435fee
cmp eax, 0x70430d16
jg 0x4361e7
cmp eax, 0x55681de9
jle 0x4362b9
cmp eax, 0x55681dea
je 0x436517
cmp eax, 0x5770dfe4
je 0x43652b
cmp eax, 0x5e69fb01
jne 0x435fee
push 2
push 0x104
call fcn.0044e041
add esp, 8
mov dword [ebp - 0x18], eax
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x10], 0x55681dea
jmp 0x435fee
cmp eax, 0x95c8872f
jg 0x436218
cmp eax, 0x8b38ceec
jle 0x4362db
cmp eax, 0x8b38ceed
je 0x43655c
cmp eax, 0x8fdab2e2
je 0x436568
cmp eax, 0x95a43c8b
jne 0x435fee
mov eax, dword [ebp - 0x14]
mov ecx, 0xc6
add eax, ecx
mov ecx, eax
shl ecx, 0xd
imul eax, eax
imul edx, eax, 0x137
or ecx, 0x14
dec edx
mov dword [ebp - 0x14], ecx
mov ecx, 0xa14ee690
cmp edx, eax
je 0x4364d5
mov ecx, 0x3206c62a
jmp 0x4364d5
cmp eax, 0xfc344943
jle 0x43630b
cmp eax, 0xfc344944
je 0x4365aa
cmp eax, 0xc252d93
je 0x4365b6
cmp eax, 0x10c6cb07
jne 0x435fee
mov dword [ebp - 0x14], 8
mov dword [ebp - 0x10], 0xb227df7e
jmp 0x435fee
cmp eax, 0xb227df7d
jle 0x43635d
cmp eax, 0xb227df7e
je 0x436445
cmp eax, 0xb9ce6b7e
je 0x4365d7
cmp eax, 0xba26994b
je 0x436410
jmp 0x435fee
cmp eax, 0x79ab1068
jle 0x43637f
cmp eax, 0x79ab1069
je 0x4365e3
cmp eax, 0x79fe424b
je 0x4365f2
cmp eax, 0x7c26b309
je 0x436460
jmp 0x435fee
cmp eax, 0xa14ee68f
jle 0x4363ab
cmp eax, 0xa14ee690
je 0x43660d
cmp eax, 0xa42e8fd6
je 0x436636
cmp eax, 0xa63a7ff5
jne 0x435fee
mov eax, dword [ebp - 0x20]
mov dword [eax], 0
mov dword [ebp - 0x10], 0x4890566c
jmp 0x435fee
cmp eax, 0x37d0246b
je 0x43664f
cmp eax, 0x389c77e9
je 0x436681
cmp eax, 0x39c0947c
jne 0x435fee
push eax
mov eax, esp
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x10], 0xed35f764
jmp 0x435fee
cmp eax, 0xd6ff24ad
je 0x43669f
cmp eax, 0xe7eb6c88
je 0x4366d2
cmp eax, 0xed35f764
jne 0x435fee
mov dword [ebp - 0x10], 0xb9ce6b7e
jmp 0x435fee
cmp eax, 0x41584ebd
je 0x4366de
cmp eax, 0x4890566c
jne 0x4367d2
mov dword [ebp - 0x10], 0x41584ebd
jmp 0x435fee
cmp eax, 0x81aacd54
je 0x43671d
cmp eax, 0x83db9c68
jne 0x435fee
push dword [ebp + 0xc]
push dword [ebp - 0x18]
call ebx
mov eax, dword [ebp + 4]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x10], 0xd5aac676
jmp 0x435fee
cmp eax, 0xf04bccf1
je 0x436729
cmp eax, 0xf0a6a98d
jne 0x435fee
imul eax, dword [ebp - 0x14], 0xae
shr eax, 2
lea ecx, [eax + eax*2]
mov edx, eax
imul edx, eax
imul esi, edx, 0x28f3
dec esi
shl ecx, 0xc
add ecx, 0xffe5f000
mov dword [ebp - 0x14], ecx
mov eax, 0xbe8dfb6c
cmp edx, esi
je 0x4367ca
mov eax, 0x8b38ceed
jmp 0x4367ca
cmp eax, 0xa6b01961
je 0x436740
cmp eax, 0xad3225e8
jne 0x435fee
mov dword [ebp - 0x10], 0xc252d93
jmp 0x435fee
cmp eax, 0x70430d17
je 0x43677e
cmp eax, 0x70ca823d
jne 0x435fee
mov dword [ebp - 0x24], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], 0xfc344944
jmp 0x435fee
cmp eax, 0x95c88730
je 0x4367a7
cmp eax, 0x9986a130
jne 0x435fee
imul esi, edi, 0x6c000
add esi, 0xfcc88000
mov eax, esi
shr eax, 5
add eax, 0xffffff78
mov edi, eax
push eax
call fcn.00435a50
add esp, 4
mov eax, 0x389c77e9
test esi, esi
je 0x4367ca
mov eax, 0x5770dfe4
jmp 0x4367ca
mov eax, dword [ebp - 0x28]
movzx eax, word [eax]
cmp eax, 0xcd03
je 0x436445
movzx eax, ax
cmp eax, 0xf0b
jne 0x436460
mov eax, dword [ebp - 0x14]
shr eax, 9
mov ecx, eax
shl ecx, 8
imul eax, eax
imul edx, eax, 0x54a9
dec edx
add ecx, 0x184
mov dword [ebp - 0x14], ecx
mov ecx, 0x34319415
cmp eax, edx
je 0x4364d5
mov ecx, 0xb227df7e
jmp 0x4364d5
mov dword [ebp - 0x2c], edi
popal
jmp 0x436449
mov eax, dword [ebp - 0x14]
add eax, 0xffffffdf
shr eax, 0xb
lea ecx, [eax + 0xcd]
imul eax, eax
imul edx, eax, 0x404b
dec edx
mov dword [ebp - 0x14], ecx
mov ecx, 0xbe8dfb6c
cmp eax, edx
je 0x4364d5
mov ecx, 0x8b38ceed
jmp 0x4364d5
mov esi, 0x464178
push esi
push dword [ebp - 0x18]
call ebx
mov eax, dword [ebp + 8]
push dword [eax + 4]
push dword [ebp - 0x18]
call ebx
push esi
push dword [ebp - 0x18]
call ebx
mov dword [ebp - 0x10], 0x83db9c68
jmp 0x435fee
push dword [ebp + 0xc]
push dword [ebp - 0x1c]
call ebx
push dword [ebp - 0x1c]
call fcn.0041067a
add esp, 4
mov ecx, 0x3acddb49
test eax, eax
je 0x4364d5
mov ecx, 0xa42e8fd6
mov dword [ebp - 0x10], ecx
jmp 0x435fee
mov eax, dword [ebp - 0x14]
add eax, 0x2d
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x7a7f
shr eax, 4
and eax, 0x1ffffe
dec edx
imul eax, eax, 0xa6
mov dword [ebp - 0x14], eax
mov eax, 0x39c0947c
cmp ecx, edx
je 0x4367ca
mov eax, 0x2e480e9e
jmp 0x4367ca
push dword [ebp - 0x34]
push dword [ebp - 0x18]
call ebx
mov dword [ebp - 0x10], 0x95a43c8b
jmp 0x435fee
mov esi, edi
and esi, 0x3fffffc
lea eax, [esi + 0xd3]
mov edi, eax
push eax
call fcn.00435a50
add esp, 4
mov eax, 0x70430d17
cmp esi, 5
jae 0x4367ca
mov eax, 0x8fdab2e2
jmp 0x4367ca
mov dword [ebp - 0x10], 0xe7eb6c88
jmp 0x435fee
imul edi, edi, 0xc5
add edi, 0x35de
push edi
push 8
call fcn.004367e8
add esp, 8
push edi
push 0x1eab
push 0x580
call fcn.00435fd5
add esp, 0xc
mov eax, 0x83db9c68
cmp edi, 0x11
jl 0x4367ca
mov eax, 0xbe8dfb6c
jmp 0x4367ca
mov dword [ebp - 0x10], 0xa63a7ff5
jmp 0x435fee
mov eax, dword [ebp + 8]
push dword [eax + 8]
push dword [ebp - 0x1c]
call ebx
push 0x4641be
push dword [ebp - 0x1c]
call ebx
mov dword [ebp - 0x10], 0xbe8dfb6c
jmp 0x435fee
mov dword [ebp - 0x10], 0x81aacd54
jmp 0x435fee
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], 0x3acddb49
jmp 0x435fee
mov eax, dword [ebp - 0x28]
cmp byte [eax], 0xcc
mov eax, 0x10c6cb07
je 0x4367ca
mov eax, 0xcac22c0f
jmp 0x4367ca
shr edi, 1
add edi, 0xffffff89
mov eax, edi
shr eax, 9
mov ecx, 0x55681dea
cmp edi, 0x4a00
jae 0x436629
mov ecx, 0x389c77e9
add eax, 0x64
mov dword [ebp - 0x10], ecx
mov edi, eax
jmp 0x435fee
imul eax, dword [ebp - 0x14], 0xa8000000
or eax, 0x25
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x5e69fb01
jmp 0x435fee
imul edi, edi, 0x4c000
add edi, 0xf72fc000
push 0x548a
push edi
call fcn.004367e8
add esp, 8
mov eax, 0x39c0947c
cmp edi, 0x35
jl 0x4367ca
mov eax, 0xa6b01961
jmp 0x4367ca
push 2
push 0x104
call fcn.0044e041
add esp, 8
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 0xd6ff24ad
jmp 0x435fee
mov eax, dword [ebp - 0x14]
mov ecx, 0xfffffec3
add eax, ecx
shr eax, 5
mov dword [ebp - 0x14], eax
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0xd5b
dec edx
mov eax, 0x37d0246b
cmp edx, ecx
je 0x4367ca
mov eax, 0xad3225e8
jmp 0x4367ca
mov dword [ebp - 0x10], 0x70ca823d
jmp 0x435fee
push dword [ebp - 0x20]
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x1c]
call fcn.004103d2
add esp, 0xc
mov eax, dword [ebp - 0x20]
push dword [eax]
push dword [ebp - 0x24]
push dword [ebp - 0x18]
push dword [ebp + 0x10]
call fcn.004202d8
add esp, 0x10
push dword [ebp - 0x18]
call fcn.0044e887
add esp, 4
mov dword [ebp - 0x10], 0xf04bccf1
jmp 0x435fee
mov dword [ebp - 0x10], 0x389c77e9
jmp 0x435fee
push dword [ebp - 0x1c]
call fcn.0044e887
add esp, 4
mov dword [ebp - 0x10], 0x79ab1069
jmp 0x435fee
and edi, 0xffff8
add edi, 0x228
push 0x3b40
push 0x6346
push edi
call fcn.00435fd5
add esp, 0xc
push 0xfd6
push edi
push 0x41c
call fcn.00435fd5
add esp, 0xc
mov dword [ebp - 0x10], 0x39c0947c
jmp 0x435fee
imul edi, edi, 0x8c4c
add edi, 0x18462
push edi
call fcn.00435a50
add esp, 4
mov eax, 0x5e69fb01
cmp edi, 0xe4
jl 0x4367ca
mov eax, 0x39c0947c
jmp 0x4367ca
add edi, 0xfffffe46
push 0x3ec3
push edi
call fcn.004367e8
add esp, 8
mov eax, 0x5e69fb01
cmp edi, 0x64
jb 0x4367ca
mov eax, 0x389c77e9
mov dword [ebp - 0x10], eax
jmp 0x435fee
cmp eax, 0x3acddb49
jne 0x435fee
mov dword [ebp - 0x30], edi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret