Function at 0x435ce0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x4c
push ebx
mov ebx, dword [ebp + 8]
mov eax, dword [ebx + 0x164]
push esi
push edi
mov edi, dword [ebp + 0x10]
mov dword [esp + 0x30], eax
cmp edi, dword [ebx + 0x90]
jne 0x435d1a
lea ecx, [ebx + 0x120]
lea edx, [ebx + 0x124]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x20], edx
jmp 0x435d2b
mov eax, dword [ebx + 0x12c]
mov dword [esp + 0x18], eax
add eax, 4
mov dword [esp + 0x20], eax
mov eax, dword [ebp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [ecx], eax
mov eax, dword [ebp + 0x14]
mov esi, dword [ebp + 0x18]
lea edx, [esp + 0x14]
push edx
push esi
push eax
mov dword [esp + 0x20], eax
mov eax, dword [edi + 4]
push edi
call eax
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x30]
add eax, 5
add esp, 0x10
mov dword [edx], ecx
cmp eax, 0x12
ja case.default.0x435d64
jmp dword [eax*4 + 0x4368e0]
mov eax, dword [edi + 0x44]
mov edx, dword [edi + 0x30]
sub ecx, eax
add eax, dword [ebp + 0x14]
push ecx
push eax
push edi
call edx
add esp, 0xc
mov byte [esp + 0x12], al
test al, al
je 0x435dc4
mov eax, dword [ebx + 0x3c]
test eax, eax
je 0x435da2
mov edx, dword [ebx + 4]
push 1
lea ecx, [esp + 0x16]
push ecx
push edx
call eax
add esp, 0xc
jmp 0x435e60
cmp dword [ebx + 0x50], 0
je 0x435e60
mov eax, dword [ebp + 0x14]
push eax
mov eax, dword [esp + 0x18]
push edi
mov esi, ebx
call fcn.0043a9f0
add esp, 8
jmp 0x435e60
mov ecx, dword [edi + 0x44]
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x30]
sub eax, ecx
add ecx, dword [ebp + 0x14]
push eax
push ecx
add esi, 0x50
push edi
mov eax, esi
call fcn.0043bef0
add esp, 0xc
test eax, eax
je 0x4367dc
mov eax, dword [esi + 0xc]
cmp eax, dword [esi + 8]
jne 0x435e01
call fcn.0043c570
test al, al
je 0x4367dc
mov ecx, dword [esi + 0xc]
mov byte [ecx], 0
inc dword [esi + 0xc]
mov esi, dword [esi + 0x10]
mov dword [esp + 0x2c], esi
test esi, esi
je 0x4367dc
mov edi, dword [esp + 0x30]
push 0
push esi
push ebx
call fcn.0043bbf0
mov edx, dword [edi + 0x60]
add esp, 0xc
cmp byte [edi + 0x81], 0
mov esi, eax
mov dword [edi + 0x5c], edx
je 0x435eaf
cmp byte [edi + 0x82], 0
jne 0x435eaf
test esi, esi
jne 0x435ec1
mov eax, dword [ebx + 0x78]
test eax, eax
je 0x435e91
mov ecx, dword [esp + 0x2c]
mov edx, dword [ebx + 4]
push esi
push ecx
push edx
call eax
add esp, 0xc
mov edi, dword [ebp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [ebp + 0x14], ecx
mov dword [edx], ecx
mov eax, dword [ebx + 0x1e0]
sub eax, 2
je 0x4368d4
dec eax
jne 0x435d34
mov eax, dword [ebp + 0x1c]
mov dword [eax], ecx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [ebx + 0x50], 0
je 0x435e5d
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
push eax
mov eax, dword [esp + 0x18]
push ecx
mov esi, ebx
call fcn.0043a9f0
add esp, 8
jmp 0x435e5d
test esi, esi
je 0x436797
cmp byte [esi + 0x22], 0
je 0x4367a3
cmp byte [esi + 0x20], 0
jne 0x4367af
cmp dword [esi + 0x1c], 0
jne 0x4367bb
cmp dword [esi + 4], 0
je 0x435f38
cmp byte [ebx + 0x134], 0
jne 0x435f1e
mov eax, dword [ebx + 0x78]
test eax, eax
je 0x435ef9
mov edx, dword [esi]
mov ecx, dword [ebx + 4]
push 0
push edx
push ecx
jmp 0x435e58
cmp dword [ebx + 0x50], 0
je 0x435e5d
mov edx, dword [ebp + 0x14]
mov eax, dword [ebp + 0x10]
push edx
push eax
mov eax, dword [esp + 0x1c]
mov esi, ebx
call fcn.0043a9f0
add esp, 8
jmp 0x435e5d
push 0
push esi
mov esi, ebx
call fcn.00439c80
add esp, 8
test eax, eax
jne 0x4368d9
jmp 0x435e5d
cmp dword [ebx + 0x70], 0
je 0x435ef9
mov edi, ebx
mov byte [esi + 0x20], 1
call fcn.0043ae40
mov byte [esi + 0x20], 0
test eax, eax
je 0x4367dc
mov ecx, dword [esi + 0x18]
mov edx, dword [esi + 0x10]
push ecx
mov ecx, dword [esi + 0x14]
push edx
mov edx, dword [ebx + 0x74]
push ecx
push eax
mov eax, dword [ebx + 0x70]
push edx
call eax
add esp, 0x14
test eax, eax
je 0x4367c7
mov ecx, dword [ebx + 0x1b0]
mov dword [ebx + 0x1ac], ecx
jmp 0x435e5d
mov esi, dword [ebx + 0x170]
test esi, esi
je 0x435f9b
mov ecx, dword [esi]
mov dword [ebx + 0x170], ecx
jmp 0x435fca
mov edx, dword [ebx + 0xc]
push 0x30
call edx
mov esi, eax
add esp, 4
test esi, esi
je 0x4367dc
mov eax, dword [ebx + 0xc]
push 0x20
call eax
add esp, 4
mov dword [esi + 0x24], eax
test eax, eax
je 0x4367d3
add eax, 0x20
mov dword [esi + 0x28], eax
xor ecx, ecx
mov dword [esi + 0x2c], ecx
mov edx, dword [ebx + 0x16c]
lea eax, [esi + 0x2c]
mov dword [esi], edx
mov dword [ebx + 0x16c], esi
mov dword [esi + 0x10], ecx
mov dword [esi + 0x14], ecx
mov dword [esp + 0x38], eax
mov eax, dword [edi + 0x44]
add eax, dword [ebp + 0x14]
push eax
mov dword [esi + 4], eax
mov edx, dword [edi + 0x20]
push edi
call edx
mov dword [esi + 8], eax
inc dword [ebx + 0x138]
mov ecx, dword [esi + 4]
mov eax, dword [esi + 8]
add eax, ecx
mov dword [esp + 0x2c], ecx
mov ecx, dword [esi + 0x24]
mov dword [esp + 0x24], ecx
mov edx, dword [esi + 0x28]
dec edx
push edx
lea ecx, [esp + 0x28]
push ecx
push eax
lea edx, [esp + 0x38]
push edx
mov dword [esp + 0x40], eax
mov eax, dword [edi + 0x3c]
push edi
call eax
mov eax, dword [esp + 0x38]
sub eax, dword [esi + 0x24]
mov ecx, dword [esp + 0x44]
add esp, 0x1c
mov dword [esp + 0x2c], eax
cmp dword [esp + 0x24], ecx
je 0x4360b7
jmp 0x436050
mov ecx, dword [esi + 0x24]
mov eax, dword [esi + 0x28]
mov edx, dword [ebx + 0x10]
sub eax, ecx
add eax, eax
push eax
push ecx
mov dword [esp + 0x3c], eax
call edx
add esp, 8
test eax, eax
je 0x4367dc
mov ecx, dword [esp + 0x34]
lea edx, [eax + ecx]
mov ecx, dword [esp + 0x28]
mov dword [esi + 0x24], eax
add eax, dword [esp + 0x2c]
mov dword [esi + 0x28], edx
mov dword [esp + 0x1c], eax
mov edx, dword [esi + 0x28]
dec edx
push edx
lea eax, [esp + 0x20]
push eax
mov eax, dword [edi + 0x3c]
push ecx
lea edx, [esp + 0x30]
push edx
push edi
call eax
mov ecx, dword [esp + 0x30]
sub ecx, dword [esi + 0x24]
mov edx, dword [esp + 0x3c]
add esp, 0x14
mov dword [esp + 0x2c], ecx
cmp dword [esp + 0x24], edx
jne 0x436050
mov eax, dword [esp + 0x2c]
mov ecx, dword [esi + 0x24]
mov dword [esi + 0x18], eax
lea eax, [esi + 0xc]
mov dword [eax], ecx
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x38]
push ecx
push eax
mov byte [edx], 0
mov edx, dword [ebp + 0x14]
push edx
push edi
push ebx
mov dword [esp + 0x48], eax
call fcn.00436930
add esp, 0x14
test eax, eax
jne 0x4368d9
mov eax, dword [ebx + 0x34]
test eax, eax
je 0x43611b
mov ecx, dword [ebx + 0x188]
mov edx, dword [esp + 0x34]
push ecx
mov ecx, dword [edx]
mov edx, dword [ebx + 4]
push ecx
push edx
call eax
add esp, 0xc
lea ecx, [ebx + 0x1a0]
call fcn.0043beb0
jmp 0x435e60
cmp dword [ebx + 0x50], 0
je 0x436134
mov eax, dword [ebp + 0x14]
push eax
mov eax, dword [esp + 0x18]
push edi
mov esi, ebx
call fcn.0043a9f0
add esp, 8
lea ecx, [ebx + 0x1a0]
call fcn.0043beb0
jmp 0x435e60
mov esi, dword [edi + 0x44]
add esi, dword [ebp + 0x14]
mov ecx, dword [edi + 0x20]
push esi
push edi
mov dword [esp + 0x34], 0
mov byte [esp + 0x1b], 1
call ecx
add eax, esi
push eax
push esi
push edi
lea eax, [ebx + 0x1a0]
call fcn.0043bef0
add esp, 0x14
test eax, eax
je 0x4361ab
mov edx, dword [ebx + 0x1ac]
cmp edx, dword [ebx + 0x1a8]
jne 0x436196
lea esi, [ebx + 0x1a0]
call fcn.0043c570
test al, al
jne 0x436196
xor eax, eax
jmp 0x4361ab
mov eax, dword [ebx + 0x1ac]
mov byte [eax], 0
inc dword [ebx + 0x1ac]
mov eax, dword [ebx + 0x1b0]
mov dword [esp + 0x40], eax
test eax, eax
je 0x4367dc
mov ecx, dword [ebx + 0x1ac]
lea edx, [esp + 0x2c]
push edx
lea eax, [esp + 0x44]
push eax
mov dword [ebx + 0x1b0], ecx
mov ecx, dword [ebp + 0x14]
push ecx
push edi
push ebx
call fcn.00436930
add esp, 0x14
test eax, eax
jne 0x4368d9
mov eax, dword [ebx + 0x34]
mov edx, dword [ebx + 0x1ac]
mov esi, dword [esp + 0x40]
mov dword [ebx + 0x1b0], edx
test eax, eax
je 0x43620f
mov ecx, dword [ebx + 0x188]
mov edx, dword [ebx + 4]
push ecx
push esi
push edx
call eax
add esp, 0xc
xor al, al
jmp 0x436213
mov al, byte [esp + 0x13]
cmp dword [ebx + 0x38], 0
je 0x436237
cmp dword [ebx + 0x34], 0
je 0x43622b
mov eax, dword [esp + 0x20]
mov ecx, dword [eax]
mov edx, dword [esp + 0x18]
mov dword [edx], ecx
mov eax, dword [ebx + 4]
mov ecx, dword [ebx + 0x38]
push esi
push eax
call ecx
jmp 0x436251
test al, al
je 0x436254
cmp dword [ebx + 0x50], 0
je 0x436254
mov edx, dword [ebp + 0x14]
mov eax, dword [esp + 0x14]
push edx
push edi
mov esi, ebx
call fcn.0043a9f0
add esp, 8
lea ecx, [ebx + 0x1a0]
call fcn.0043beb0
mov esi, dword [esp + 0x2c]
test esi, esi
je 0x4362a3
mov ecx, dword [ebx + 0x68]
mov eax, esi
mov dword [esp + 0x38], eax
test ecx, ecx
je 0x436284
mov eax, dword [esi]
mov edx, dword [eax]
mov eax, dword [ebx + 4]
push edx
push eax
call ecx
add esp, 8
mov eax, esi
mov edx, dword [ebx + 0x178]
lea ecx, [esi + 4]
mov esi, dword [ecx]
mov dword [ecx], edx
mov dword [ebx + 0x178], eax
mov ecx, dword [eax]
mov edx, dword [eax + 8]
mov dword [ecx + 4], edx
test esi, esi
jne 0x436267
cmp dword [ebx + 0x138], 0
jne 0x435e60
mov eax, dword [ebp + 0x1c]
mov ecx, dword [ebp + 0x18]
mov edx, dword [esp + 0x14]
push eax
push ecx
push edx
push ebx
call fcn.00439aa0
add esp, 0x10
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0xc]
cmp dword [ebx + 0x138], eax
je 0x4368ba
mov esi, dword [ebx + 0x16c]
mov ecx, dword [esi]
mov edx, dword [ebx + 0x170]
mov dword [ebx + 0x16c], ecx
mov dword [esi], edx
mov ecx, dword [ebp + 0x14]
mov dword [ebx + 0x170], esi
mov eax, dword [edi + 0x44]
mov edx, dword [edi + 0x20]
lea eax, [ecx + eax*2]
push eax
push edi
mov dword [esp + 0x40], esi
mov dword [esp + 0x30], eax
call edx
add esp, 8
cmp eax, dword [esi + 8]
jne 0x4367e8
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x24], ecx
mov ecx, dword [esi + 4]
mov edx, dword [esp + 0x24]
mov dword [esp + 0x2c], ecx
cmp eax, 4
jb 0x436358
mov ecx, dword [ecx]
cmp ecx, dword [edx]
jne 0x4367e8
mov ecx, dword [esp + 0x2c]
sub eax, 4
add edx, 4
add ecx, 4
mov dword [esp + 0x24], edx
mov dword [esp + 0x2c], ecx
cmp eax, 4
jae 0x436334
test eax, eax
je 0x436390
mov dl, byte [edx]
cmp dl, byte [ecx]
jne 0x4367e8
cmp eax, 1
jbe 0x436390
mov edx, dword [esp + 0x24]
mov dl, byte [edx + 1]
cmp dl, byte [ecx + 1]
jne 0x4367e8
cmp eax, 2
jbe 0x436390
mov eax, dword [esp + 0x24]
mov dl, byte [eax + 2]
cmp dl, byte [ecx + 2]
jne 0x4367e8
dec dword [ebx + 0x138]
cmp dword [ebx + 0x38], 0
je 0x4363fe
cmp byte [ebx + 0xec], 0
mov edx, dword [esi + 0x10]
je 0x4363ef
test edx, edx
je 0x4363ef
mov eax, dword [esi + 0x1c]
mov cl, byte [edx]
add eax, dword [esi + 0xc]
test cl, cl
je 0x4363c2
inc edx
mov byte [eax], cl
mov cl, byte [edx]
inc eax
test cl, cl
jne 0x4363b8
cmp byte [ebx + 0xed], 0
mov edx, dword [esi + 0x14]
je 0x4363ec
test edx, edx
je 0x4363ec
movzx ecx, byte [ebx + 0x1d8]
mov byte [eax], cl
mov cl, byte [edx]
inc eax
test cl, cl
je 0x4363ec
inc edx
mov byte [eax], cl
mov cl, byte [edx]
inc eax
test cl, cl
jne 0x4363e2
mov byte [eax], 0
mov edx, dword [esi + 0xc]
mov eax, dword [ebx + 4]
mov ecx, dword [ebx + 0x38]
push edx
push eax
call ecx
jmp 0x436418
cmp dword [ebx + 0x50], 0
je 0x43641b
mov edx, dword [ebp + 0x14]
mov eax, dword [esp + 0x14]
push edx
push edi
mov esi, ebx
call fcn.0043a9f0
mov esi, dword [esp + 0x40]
add esp, 8
cmp dword [esi + 0x2c], 0
je 0x436467
mov ecx, dword [ebx + 0x68]
mov eax, dword [esi + 0x2c]
mov dword [esp + 0x2c], eax
test ecx, ecx
je 0x436441
mov edx, dword [eax]
mov eax, dword [edx]
mov edx, dword [ebx + 4]
push eax
push edx
call ecx
mov eax, dword [esp + 0x34]
add esp, 8
mov ecx, dword [esi + 0x2c]
mov edx, dword [ecx + 4]
mov dword [esi + 0x2c], edx
mov ecx, dword [ebx + 0x178]
mov dword [eax + 4], ecx
mov dword [ebx + 0x178], eax
mov edx, dword [eax]
mov eax, dword [eax + 8]
mov dword [edx + 4], eax
cmp dword [esi + 0x2c], 0
jne 0x436421
cmp dword [ebx + 0x138], 0
je 0x4362b0
jmp 0x435e60
mov ecx, dword [ebp + 0x14]
mov edx, dword [edi + 0x2c]
push ecx
push edi
call edx
add esp, 8
test eax, eax
js 0x4367fe
mov esi, dword [ebx + 0x3c]
test esi, esi
je 0x4364b0
lea ecx, [esp + 0x3c]
call fcn.00448d10
push eax
mov eax, ecx
mov ecx, dword [ebx + 4]
push eax
push ecx
call esi
add esp, 0xc
jmp 0x435e60
cmp dword [ebx + 0x50], 0
je 0x435e60
mov edx, dword [ebp + 0x14]
mov eax, dword [esp + 0x14]
push edx
push edi
mov esi, ebx
call fcn.0043a9f0
add esp, 8
jmp 0x435e60
mov eax, dword [ebx + 0x3c]
test eax, eax
je case.default.0x435d64
mov edx, dword [ebx + 4]
push 1
lea ecx, [esp + 0x17]
push ecx
push edx
mov byte [esp + 0x1f], 0xa
call eax
add esp, 0xc
jmp 0x435e60
cmp dword [ebx + 0x50], 0
je 0x435e60
mov eax, dword [ebp + 0x14]
push eax
push edi
mov eax, ecx
mov esi, ebx
call fcn.0043a9f0
add esp, 8
jmp 0x435e60
mov eax, dword [ebx + 0x48]
test eax, eax
je 0x436525
mov ecx, dword [ebx + 4]
push ecx
call eax
add esp, 4
jmp 0x43653c
cmp dword [ebx + 0x50], 0
je 0x43653c
mov edx, dword [ebp + 0x14]
push edx
push edi
mov eax, ecx
mov esi, ebx
call fcn.0043a9f0
add esp, 8
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp + 0x1c]
mov edx, dword [ebp + 0x18]
mov edi, dword [ebp + 0x10]
push eax
push ecx
push edx
lea eax, [esp + 0x20]
push eax
mov eax, ebx
call fcn.00437540
add esp, 0x10
test eax, eax
jne 0x4368d9
cmp dword [esp + 0x14], eax
jne 0x435e60
mov dword [ebx + 0x118], 0x437470
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov esi, dword [ebx + 0x3c]
test esi, esi
je 0x436646
cmp byte [edi + 0x48], 0
jne 0x436631
mov edx, dword [ebx + 0x2c]
mov eax, dword [ebx + 0x30]
push eax
mov dword [esp + 0x28], edx
lea edx, [esp + 0x28]
push edx
push ecx
mov ecx, dword [edi + 0x3c]
lea eax, [ebp + 0x14]
push eax
push edi
call ecx
mov edx, dword [ebp + 0x14]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x38]
mov dword [eax], edx
mov eax, dword [ebx + 0x2c]
mov edx, dword [ebx + 4]
add esp, 0x14
sub ecx, eax
push ecx
push eax
push edx
call esi
mov eax, dword [ebp + 0x14]
mov ecx, dword [esp + 0x20]
add esp, 0xc
cmp eax, ecx
je 0x435e60
lea esp, [esp]
mov edx, dword [esp + 0x18]
mov dword [edx], eax
mov eax, dword [ebx + 0x2c]
mov edx, dword [ebx + 0x30]
push edx
mov edx, dword [edi + 0x3c]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x28]
push eax
push ecx
lea ecx, [ebp + 0x14]
push ecx
push edi
call edx
mov eax, dword [ebp + 0x14]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x38]
mov dword [ecx], eax
mov eax, dword [ebx + 0x2c]
add esp, 0x14
sub edx, eax
push edx
push eax
mov eax, dword [ebx + 4]
push eax
call esi
mov eax, dword [ebp + 0x14]
mov ecx, dword [esp + 0x20]
add esp, 0xc
cmp eax, ecx
jne 0x4365e0
jmp 0x435e60
mov eax, dword [ebp + 0x14]
sub ecx, eax
push ecx
mov ecx, dword [ebx + 4]
push eax
push ecx
call esi
add esp, 0xc
jmp 0x435e60
cmp dword [ebx + 0x50], 0
je 0x435e60
mov edx, dword [ebp + 0x14]
push edx
push edi
mov eax, ecx
mov esi, ebx
call fcn.0043a9f0
add esp, 8
jmp 0x435e60
mov eax, dword [ebp + 0x14]
push ecx
push eax
push ebx
mov ecx, edi
call fcn.0043a830
add esp, 0xc
test eax, eax
je 0x4367dc
jmp 0x435e60
mov edx, dword [ebp + 0x14]
push edx
mov edx, dword [ebp + 0x10]
mov eax, ecx
mov edi, ebx
call fcn.0043a950
add esp, 4
test eax, eax
je 0x4367dc
jmp 0x435e5d
cmp byte [ebp + 0x20], 0
je 0x4366ba
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x1c]
mov dword [ecx], eax
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [esp + 0x20]
mov dword [edx], esi
mov eax, dword [ebx + 0x3c]
test eax, eax
je 0x4366de
mov edx, dword [ebx + 4]
push 1
lea ecx, [esp + 0x17]
push ecx
push edx
mov byte [esp + 0x1f], 0xa
call eax
add esp, 0xc
jmp 0x4366f9
cmp dword [ebx + 0x50], 0
je 0x4366f9
mov eax, dword [ebp + 0x14]
push eax
mov eax, dword [ebp + 0x18]
push edi
mov esi, ebx
call fcn.0043a9f0
mov esi, dword [ebp + 0x18]
add esp, 8
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x4368a0
cmp dword [ebx + 0x138], eax
jne 0x4368ba
mov ecx, dword [ebp + 0x1c]
mov dword [ecx], esi
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp byte [ebp + 0x20], 0
je 0x436735
mov eax, dword [ebp + 0x1c]
mov edx, dword [ebp + 0x14]
mov dword [eax], edx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0xc]
test eax, eax
jle 0x4368a0
cmp dword [ebx + 0x138], eax
jne 0x4368ba
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x1c]
mov dword [edx], ecx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0x18]
mov dword [eax], ecx
mov eax, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp byte [ebp + 0x20], 0
jne 0x43674c
mov eax, 5
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp byte [ebp + 0x20], 0
jne 0x4366a9
mov eax, 6
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xb
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0x18
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xf
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0x15
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [ebx + 0x14]
push esi
call edx
add esp, 4
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x28]
mov dword [eax], ecx
mov eax, 7
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xe
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0x11
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp byte [ebp + 0x20], 0
jne 0x436724
mov eax, dword [ebx + 0x3c]
test eax, eax
je 0x436878
cmp byte [edi + 0x48], 0
jne 0x436864
mov edx, dword [ebx + 0x30]
mov ecx, dword [ebx + 0x2c]
push edx
mov edx, dword [edi + 0x3c]
lea eax, [esp + 0x34]
push eax
mov dword [esp + 0x38], ecx
push esi
lea ecx, [ebp + 0x14]
push ecx
push edi
call edx
mov eax, dword [ebx + 0x2c]
mov ecx, dword [esp + 0x44]
mov edx, dword [ebx + 4]
add esp, 0x14
sub ecx, eax
push ecx
push eax
mov eax, dword [ebx + 0x3c]
push edx
call eax
add esp, 0xc
jmp 0x436893
mov ecx, dword [ebp + 0x14]
mov edx, esi
sub edx, ecx
push edx
push ecx
mov ecx, dword [ebx + 4]
push ecx
call eax
add esp, 0xc
jmp 0x436893
cmp dword [ebx + 0x50], 0
je 0x436893
mov edx, dword [ebp + 0x14]
mov eax, dword [ebp + 0x18]
push edx
push edi
mov esi, ebx
call fcn.0043a9f0
mov esi, dword [ebp + 0x18]
add esp, 8
mov eax, dword [ebp + 0xc]
test eax, eax
jne 0x4368ac
mov eax, dword [esp + 0x18]
mov dword [eax], esi
mov eax, 3
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [ebx + 0x138], eax
je 0x4368c6
mov ecx, dword [esp + 0x18]
mov dword [ecx], esi
mov eax, 0xd
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [ebp + 0x1c]
mov dword [edx], esi
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0x23
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret