Function at 0x436c13
Capabilities:
Check for peb ntglobalflag flag

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4720b8
mov eax, dword fs:[0]
push eax
sub esp, 0x70
mov eax, dword [0x49b7f8]
xor eax, esp
mov dword [esp + 0x68], eax
push ebx
push esi
push edi
mov eax, dword [0x49b7f8]
xor eax, esp
push eax
lea eax, [esp + 0x80]
mov dword fs:[0], eax
mov esi, dword [ebp + 0x18]
mov ebx, dword [ebp + 0xc]
mov eax, dword [esi + 0x14]
mov edx, dword [ebp + 0x14]
mov edi, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x1c]
and eax, 0x3000
mov dword [esp + 0x30], ebx
mov dword [esp + 0x2c], edx
cmp eax, 0x3000
jne 0x436c88
push ecx
push esi
push edx
push edi
push ebx
push dword [ebp + 8]
call fcn.004374c7
add esp, 0x18
jmp 0x43723d
lea eax, [esp + 0x34]
push eax
mov ecx, esi
call fcn.00401b70
and dword [esp + 0x88], 0
push eax
call fcn.00417750
or dword [esp + 0x8c], 0xffffffff
pop ecx
lea ecx, [esp + 0x34]
mov dword [esp + 0x28], eax
call fcn.004014f0
mov ecx, dword [esp + 0x28]
lea eax, [esp + 0x50]
push eax
call fcn.00417480
lea eax, [esp + 0x24]
push eax
mov ecx, esi
mov dword [esp + 0x8c], 1
mov dword [esp + 0x1c], ebx
mov byte [esp + 0x1a], 0
call fcn.00401b70
push eax
mov byte [esp + 0x8c], 2
call fcn.0040afb0
pop ecx
lea ecx, [esp + 0x24]
mov esi, eax
mov byte [esp + 0x88], 1
call fcn.004014f0
mov edx, dword [esi]
lea eax, [esp + 0x68]
push eax
push 0x484d66
push str.0123456789_Ee
mov ecx, esi
call dword [edx + 0x1c]
mov esi, dword [esp + 0x2c]
push esi
mov ecx, edi
call fcn.00438d1d
test al, al
jne 0x436d77
cmp byte [edi + 4], al
jne 0x436d3a
mov ecx, edi
call fcn.00437bb6
mov al, byte [edi + 5]
cmp al, byte [esp + 0x73]
jne 0x436d4c
mov eax, dword [esp + 0x30]
mov byte [eax], 0x2b
jmp 0x436d69
cmp byte [edi + 4], 0
jne 0x436d59
mov ecx, edi
call fcn.00437bb6
mov al, byte [edi + 5]
cmp al, byte [esp + 0x72]
jne 0x436d77
mov eax, dword [esp + 0x30]
mov byte [eax], 0x2d
lea ebx, [eax + 1]
mov ecx, edi
mov dword [esp + 0x18], ebx
call fcn.00437b94
xor ecx, ecx
cmp dword [esp + 0x64], 0x10
lea eax, [esp + 0x50]
cmovae eax, dword [esp + 0x50]
mov dword [esp + 0x24], eax
mov al, byte [eax]
mov byte [esp + 0x15], cl
mov dword [esp + 0x20], ecx
mov dword [esp + 0x1c], ecx
cmp al, 0x7f
je 0x436f53
test al, al
jle 0x436f53
cmp dword [esp + 0x60], ecx
jne 0x436db5
mov byte [esp + 0x17], cl
jmp 0x436dc4
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov byte [esp + 0x17], al
xor ecx, ecx
push ecx
mov dword [esp + 0x4c], ecx
mov byte [esp + 0x3c], cl
push 1
lea ecx, [esp + 0x40]
mov dword [esp + 0x54], 0xf
call fcn.004174c0
push dword [esp + 0x2c]
mov ecx, edi
mov byte [esp + 0x8c], 3
xor esi, esi
call fcn.00438d1d
test al, al
jne 0x436eec
cmp byte [edi + 4], 0
jne 0x436e0a
mov ecx, edi
call fcn.00437bb6
movzx eax, byte [edi + 5]
push eax
lea eax, [esp + 0x6c]
push eax
call fcn.004387b8
pop ecx
pop ecx
cmp eax, 0xa
jae 0x436e71
mov ecx, dword [esp + 0x20]
mov byte [esp + 0x15], 1
cmp ecx, 0x24
jl 0x436e34
inc dword [esp + 0x1c]
jmp 0x436e4a
test eax, eax
jne 0x436e3c
test ecx, ecx
je 0x436e4a
mov al, byte [eax + str.0123456789_Ee]
mov byte [ebx], al
inc ebx
inc ecx
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x38]
cmp ecx, 0x10
lea eax, [esp + 0x38]
cmovae eax, edx
cmp byte [eax + esi], 0x7f
je 0x436eb1
cmp ecx, 0x10
lea eax, [esp + 0x38]
cmovae eax, edx
inc byte [eax + esi]
jmp 0x436eb1
cmp dword [esp + 0x4c], 0x10
lea eax, [esp + 0x38]
cmovae eax, dword [esp + 0x38]
cmp byte [eax + esi], 0
je 0x436ecb
mov al, byte [esp + 0x17]
test al, al
je 0x436ecb
cmp byte [edi + 4], 0
jne 0x436e9e
mov ecx, edi
call fcn.00437bb6
mov al, byte [esp + 0x17]
cmp byte [edi + 5], al
jne 0x436ecb
push 0
push 1
lea ecx, [esp + 0x40]
call fcn.00426e21
inc esi
mov ecx, edi
call fcn.00437b94
push dword [esp + 0x2c]
mov ecx, edi
call fcn.00438d1d
test al, al
je 0x436dfd
mov edx, dword [esp + 0x4c]
mov dword [esp + 0x18], ebx
test esi, esi
je 0x436ef0
cmp edx, 0x10
lea eax, [esp + 0x38]
cmovae eax, dword [esp + 0x38]
cmp byte [eax + esi], 0
jle 0x436f37
inc esi
jmp 0x436ef0
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x24]
test esi, esi
je 0x436f3c
mov cl, byte [eax]
cmp cl, 0x7f
je 0x436f3c
dec esi
je 0x436f13
cmp edx, 0x10
lea eax, [esp + 0x38]
cmovae eax, dword [esp + 0x38]
cmp cl, byte [eax + esi]
jne 0x436f37
test esi, esi
jne 0x436f27
cmp edx, 0x10
lea eax, [esp + 0x38]
cmovae eax, dword [esp + 0x38]
cmp cl, byte [eax]
jl 0x436f37
mov eax, dword [esp + 0x24]
inc eax
cmp byte [eax], 0
jle 0x436ef0
mov dword [esp + 0x24], eax
jmp 0x436ef4
mov byte [esp + 0x16], 1
lea ecx, [esp + 0x38]
mov byte [esp + 0x88], 1
call fcn.00404060
mov esi, dword [esp + 0x2c]
jmp 0x436fc3
push esi
mov ecx, edi
call fcn.00438d1d
test al, al
jne 0x436fd9
cmp byte [edi + 4], 0
jne 0x436f6c
mov ecx, edi
call fcn.00437bb6
movzx eax, byte [edi + 5]
push eax
lea eax, [esp + 0x6c]
push eax
call fcn.004387b8
pop ecx
pop ecx
cmp eax, 0xa
jae 0x436fbf
mov ecx, dword [esp + 0x20]
cmp ecx, 0x24
jl 0x436f91
inc dword [esp + 0x1c]
jmp 0x436fa7
test eax, eax
jne 0x436f99
test ecx, ecx
je 0x436fa7
mov al, byte [eax + str.0123456789_Ee]
mov byte [ebx], al
inc ebx
inc ecx
mov dword [esp + 0x20], ecx
mov ecx, edi
mov byte [esp + 0x15], 1
call fcn.00437b94
push esi
mov ecx, edi
call fcn.00438d1d
test al, al
je 0x436f5f
mov dword [esp + 0x18], ebx
cmp byte [esp + 0x15], 0
je 0x436fd9
cmp dword [esp + 0x20], 0
jne 0x436fd9
mov byte [ebx], 0x30
inc ebx
mov dword [esp + 0x18], ebx
push esi
mov ecx, edi
call fcn.00438d1d
test al, al
jne 0x437016
cmp byte [edi + 4], al
jne 0x436ff1
mov ecx, edi
call fcn.00437bb6
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx]
call dword [eax + 0xc]
cmp byte [edi + 5], al
jne 0x437016
call fcn.00450ef0
mov eax, dword [eax]
mov ecx, edi
mov al, byte [eax]
mov byte [ebx], al
inc ebx
mov dword [esp + 0x18], ebx
call fcn.00437b94
cmp dword [esp + 0x20], 0
jne 0x4370c1
push esi
mov ecx, edi
call fcn.00438d1d
test al, al
jne 0x437068
mov ebx, dword [esp + 0x1c]
cmp byte [edi + 4], 0
jne 0x43703e
mov ecx, edi
call fcn.00437bb6
mov al, byte [edi + 5]
cmp al, byte [esp + 0x68]
jne 0x437060
mov ecx, edi
dec ebx
mov byte [esp + 0x15], 1
call fcn.00437b94
push esi
mov ecx, edi
call fcn.00438d1d
test al, al
je 0x437031
mov dword [esp + 0x1c], ebx
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
test eax, eax
jns 0x4370c1
mov byte [ebx], 0x30
inc ebx
inc eax
mov dword [esp + 0x1c], eax
jmp 0x4370c1
cmp byte [edi + 4], 0
jne 0x437088
mov ecx, edi
call fcn.00437bb6
movzx eax, byte [edi + 5]
push eax
lea eax, [esp + 0x6c]
push eax
call fcn.004387b8
pop ecx
pop ecx
cmp eax, 0xa
jae 0x4370cd
mov ecx, dword [esp + 0x20]
cmp ecx, 0x24
jge 0x4370b5
mov al, byte [eax + str.0123456789_Ee]
mov byte [ebx], al
inc ebx
inc ecx
mov dword [esp + 0x20], ecx
mov ecx, edi
mov byte [esp + 0x15], 1
call fcn.00437b94
push esi
mov ecx, edi
call fcn.00438d1d
test al, al
je 0x43707b
mov al, byte [esp + 0x15]
test al, al
je 0x43721e
push esi
mov ecx, edi
call fcn.00438d1d
test al, al
jne 0x43721a
cmp byte [edi + 4], al
jne 0x4370f5
mov ecx, edi
call fcn.00437bb6
mov al, byte [edi + 5]
cmp al, byte [esp + 0x75]
je 0x437118
cmp byte [edi + 4], 0
jne 0x43710b
mov ecx, edi
call fcn.00437bb6
mov al, byte [edi + 5]
cmp al, byte [esp + 0x74]
jne 0x43721a
mov byte [ebx], 0x65
inc ebx
mov ecx, edi
mov dword [esp + 0x18], ebx
call fcn.00437b94
and dword [esp + 0x28], 0
push esi
mov ecx, edi
mov byte [esp + 0x19], 0
call fcn.00438d1d
test al, al
jne 0x43717c
cmp byte [edi + 4], al
jne 0x437149
mov ecx, edi
call fcn.00437bb6
mov al, byte [edi + 5]
cmp al, byte [esp + 0x73]
jne 0x437157
mov byte [ebx], 0x2b
jmp 0x437170
cmp byte [edi + 4], 0
jne 0x437164
mov ecx, edi
call fcn.00437bb6
mov al, byte [edi + 5]
cmp al, byte [esp + 0x72]
jne 0x43717c
mov byte [ebx], 0x2d
inc ebx
mov ecx, edi
mov dword [esp + 0x18], ebx
call fcn.00437b94
push esi
mov ecx, edi
call fcn.00438d1d
test al, al
jne 0x4371c7
mov bl, byte [esp + 0x15]
cmp byte [edi + 4], 0
jne 0x437199
mov ecx, edi
call fcn.00437bb6
mov al, byte [edi + 5]
cmp al, byte [esp + 0x68]
jne 0x4371b7
mov ecx, edi
mov bl, 1
call fcn.00437b94
push esi
mov ecx, edi
call fcn.00438d1d
test al, al
je 0x43718c
mov byte [esp + 0x15], bl
test bl, bl
mov ebx, dword [esp + 0x18]
je 0x4371c7
mov byte [ebx], 0x30
inc ebx
push esi
mov ecx, edi
call fcn.00438d1d
test al, al
jne 0x43721a
cmp byte [edi + 4], al
jne 0x4371df
mov ecx, edi
call fcn.00437bb6
movzx eax, byte [edi + 5]
push eax
lea eax, [esp + 0x6c]
push eax
call fcn.004387b8
pop ecx
pop ecx
cmp eax, 0xa
jae 0x43721a
mov ecx, dword [esp + 0x28]
cmp ecx, 8
jge 0x43720c
mov al, byte [eax + str.0123456789_Ee]
mov byte [ebx], al
inc ebx
inc ecx
mov dword [esp + 0x28], ecx
mov ecx, edi
mov byte [esp + 0x15], 1
call fcn.00437b94
jmp 0x4371c7
mov al, byte [esp + 0x15]
cmp byte [esp + 0x16], 0
jne 0x437229
test al, al
jne 0x43722d
mov ebx, dword [esp + 0x30]
lea ecx, [esp + 0x50]
mov byte [ebx], 0
call fcn.00404060
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x80]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.0044f834
mov esp, ebp
pop ebp
ret