Function at 0x435680
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x485c9b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x34
push ebx
push ebp
push esi
mov ebx, ecx
mov ecx, dword [esp + 0x64]
push edi
mov edi, 1
push 0x18
shl edi, cl
mov dword [esp + 0x38], edi
call fcn.0047c2dc
add esp, 4
mov dword [esp + 0x38], eax
xor ebp, ebp
cmp eax, ebp
mov dword [esp + 0x4c], ebp
je 0x4356df
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x5c]
push ecx
push edx
push ebp
mov ecx, eax
call fcn.00432a00
mov ecx, eax
mov dword [esp + 0x60], ecx
jmp 0x4356e5
mov dword [esp + 0x60], ebp
mov ecx, ebp
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x4c], 0xffffffff
cmp eax, ebp
je 0x4356fc
call fcn.00432dc0
jmp 0x435701
call fcn.00432da0
mov esi, dword [esp + 0x54]
cmp esi, ebp
je 0x435723
mov eax, dword [esp + 0x98]
lea ecx, [esp + 0x10]
push eax
push ecx
mov ecx, dword [ebx + 0x90]
call fcn.004322f0
jmp 0x435734
mov edx, dword [ebx + 0x68]
mov ecx, dword [ebx + 0x4c]
lea eax, [esp + 0x10]
push edx
push eax
call fcn.00453ba0
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x64]
imul ecx, edi
neg ecx
test eax, eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x28], ebp
jbe 0x435b71
jmp 0x43575f
mov edi, dword [esp + 0x34]
mov ebp, dword [esp + 0x38]
mov esi, dword [esp + 0x54]
test esi, esi
je 0x43577d
mov edx, dword [esp + 0x98]
mov ecx, dword [ebx + 0x90]
lea eax, [esp + 0x14]
push edx
push eax
call fcn.004322f0
jmp 0x43578e
mov ecx, dword [ebx + 0x68]
lea edx, [esp + 0x14]
push ecx
mov ecx, dword [ebx + 0x4c]
push edx
call fcn.00453ba0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
imul eax, edi
add ecx, eax
test esi, esi
mov dword [esp + 0x10], ecx
je 0x4357bd
mov ecx, dword [esp + 0x90]
lea edx, [esp + 0x18]
push ecx
mov ecx, dword [ebx + 0x90]
push edx
call fcn.004322f0
jmp 0x4357ce
mov eax, dword [ebx + 0x70]
lea ecx, [esp + 0x18]
push eax
push ecx
mov ecx, dword [ebx + 0x4c]
call fcn.00453ba0
add ebp, dword [esp + 0x18]
mov dword [esp + 0x38], ebp
mov dword [esp + 0x5c], ebp
cmp edi, 1
jne 0x4357e9
mov dword [esp + 0x14], 0
jmp 0x435814
test esi, esi
je 0x435803
mov edx, dword [esp + 0x68]
mov ecx, dword [ebx + 0x90]
push edx
call fcn.004323e0
mov dword [esp + 0x14], eax
jmp 0x435814
mov eax, dword [ebx + 0x6c]
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, dword [ebx + 0x4c]
call fcn.00453ba0
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
test esi, esi
lea edi, [eax + edx]
je 0x435854
mov eax, dword [esp + 0x70]
test eax, eax
je 0x435842
lea ecx, [esp + 0x3c]
push eax
push ecx
mov ecx, dword [ebx + 0x90]
call fcn.004322f0
mov esi, dword [esp + 0x3c]
jmp 0x43586a
mov edx, dword [esp + 0x74]
mov ecx, dword [ebx + 0x90]
push edx
call fcn.004323e0
jmp 0x435868
mov eax, dword [ebx + 0x8c]
mov ecx, dword [esp + 0x74]
push eax
push ecx
mov ecx, dword [ebx + 0x4c]
call fcn.00453d60
mov esi, eax
cmp esi, dword [esp + 0x6c]
jb 0x435882
push 0x4bb438
call fcn.00466a1e
add esp, 4
jmp 0x435afd
mov eax, dword [esp + 0x58]
test eax, eax
je 0x43596a
mov eax, dword [esp + 0x54]
test eax, eax
je 0x435951
mov ecx, dword [ebx + 0x90]
call fcn.00432490
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x435972
mov eax, dword [esp + 0x54]
test eax, eax
je 0x4359bd
mov ecx, dword [esp + 0x9c]
lea edx, [esp + 0x24]
push ecx
mov ecx, dword [ebx + 0x90]
push edx
call fcn.004322f0
mov eax, dword [esp + 0xa0]
lea ecx, [esp + 0x20]
push eax
push ecx
mov ecx, dword [ebx + 0x90]
call fcn.004322f0
mov edx, dword [esp + 0xa4]
mov ecx, dword [ebx + 0x90]
lea eax, [esp + 0x2c]
push edx
push eax
call fcn.004322f0
mov ecx, dword [esp + 0xa8]
lea edx, [esp + 0x30]
push ecx
mov ecx, dword [ebx + 0x90]
push edx
call fcn.004322f0
mov eax, dword [esp + 0xac]
lea ecx, [esp + 0x40]
push eax
push ecx
mov ecx, dword [ebx + 0x90]
call fcn.004322f0
mov ecx, dword [ebx + 0x90]
call fcn.004322e0
mov ecx, dword [ebx + 0x4c]
call fcn.004538e0
jmp 0x435a07
mov edx, dword [ebx + 0x88]
mov ecx, dword [ebx + 0x4c]
lea eax, [esp + 0x1c]
push edx
push eax
call fcn.00453ba0
jmp 0x4358a9
mov dword [esp + 0x1c], 0
mov edx, dword [esp + 0x78]
mov esi, dword [edx + esi*4]
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0xc]
mov edx, dword [esp + 0x84]
dec eax
dec ecx
mov dword [esp + 0x7c], eax
test edx, edx
mov edx, dword [esp + 0x88]
mov dword [esp + 0x5c], ecx
je 0x435ab7
cmp edx, 3
ja case.default.0x4359a8
jmp dword [edx*4 + 0x435b8c]
mov eax, dword [esp + 0x80]
push eax
push ebp
jmp 0x435aa4
mov edx, dword [ebx + 0x80]
mov ecx, dword [ebx + 0x4c]
lea eax, [esp + 0x24]
push edx
push eax
call fcn.00453ba0
mov ecx, dword [ebx + 0x84]
lea edx, [esp + 0x20]
push ecx
mov ecx, dword [ebx + 0x4c]
push edx
call fcn.00453ba0
mov eax, dword [ebx + 0x78]
lea ecx, [esp + 0x2c]
push eax
push ecx
mov ecx, dword [ebx + 0x4c]
call fcn.00453ba0
mov edx, dword [ebx + 0x7c]
mov ecx, dword [ebx + 0x4c]
lea eax, [esp + 0x30]
push edx
push eax
call fcn.00453ba0
mov eax, dword [esp + 0x24]
test eax, eax
jge 0x435a10
dec eax
cdq
sub eax, edx
mov edx, dword [esp + 0x2c]
sar eax, 1
add eax, edx
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x20]
test eax, eax
jge 0x435a28
dec eax
mov ebp, dword [esp + 0xb8]
mov ecx, dword [esp + 0x30]
cdq
sub eax, edx
push ebp
mov ebp, dword [esp + 0xb8]
sar eax, 1
add eax, ecx
mov ecx, dword [esp + 0x7c]
push ebp
push eax
mov ecx, dword [ecx + esi*4]
mov eax, dword [esp + 0x88]
push eax
mov eax, dword [esp + 0x30]
mov edx, dword [ecx + 0xc]
mov esi, dword [ecx + 8]
push ecx
mov ecx, dword [esp + 0xc4]
push 0
push ecx
mov ecx, dword [esp + 0x40]
add edx, eax
add esi, ecx
push edx
push esi
mov ecx, ebx
call fcn.00438080
mov ebp, dword [esp + 0x5c]
mov esi, eax
jmp 0x435979
mov ecx, dword [esp + 0x80]
push ecx
push ebp
jmp 0x435aa4
mov edx, dword [esp + 0x80]
push edx
jmp 0x435aa1
mov ecx, dword [esp + 0x80]
push ecx
push ebp
sub edi, eax
mov ecx, dword [esp + 0x68]
push edi
push esi
call fcn.00432e10
mov ecx, dword [esp + 0x5c]
add ebp, ecx
jmp 0x435ae9
cmp edx, 3
ja case.default.0x435abc
jmp dword [edx*4 + 0x435b9c]
mov edx, dword [esp + 0x80]
sub edi, ecx
push edx
jmp 0x435ad7
mov eax, dword [esp + 0x80]
push eax
mov ecx, dword [esp + 0x64]
push edi
push ebp
push esi
call fcn.00432e10
mov eax, dword [esp + 0x7c]
add ebp, eax
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x435afd
test esi, esi
je 0x435afd
mov edx, dword [esi]
push 1
mov ecx, esi
call dword [edx]
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x54]
inc ecx
test eax, eax
mov dword [esp + 0x28], ecx
je 0x435b2c
mov eax, dword [esp + 0x94]
lea ecx, [esp + 0x18]
push eax
push ecx
mov ecx, dword [ebx + 0x90]
call fcn.004322f0
test eax, eax
je 0x435b61
jmp 0x435b41
mov edx, dword [ebx + 0x74]
mov ecx, dword [ebx + 0x4c]
lea eax, [esp + 0x18]
push edx
push eax
call fcn.00453ba0
test eax, eax
je 0x435b61
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x8c]
mov edi, dword [esp + 0x34]
mov esi, dword [esp + 0x54]
add ecx, edx
add ebp, ecx
mov dword [esp + 0x5c], ebp
jmp 0x4357da
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x64]
cmp eax, ecx
jb 0x435753
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x60]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x40
ret 0x68