Function at 0x435f40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x240
push ebx
push ebp
mov ebp, dword [esp + 0x24c]
push esi
xor ebx, ebx
cmp dword [0x100ee504], ebx
mov esi, ecx
push edi
mov dword [esp + 0x10], esi
je 0x435f99
push 0x1005b358
push ebp
push 0x10066314
lea ecx, [esp + 0x1fc]
call fcn.0042be60
mov ecx, eax
call fcn.0042ad00
mov ecx, eax
call fcn.0042ad20
mov ecx, eax
call fcn.0042ad00
lea ecx, [esp + 0x1f0]
call fcn.0042bea0
push 0x1005b35c
push ebp
call fcn.0041ae20
add esp, 8
test eax, eax
je 0x43631c
mov eax, dword [0x1005c844]
mov ecx, dword [0x1005c848]
mov edx, dword [0x1005c84c]
mov dword [esp + 0x94], eax
mov ax, word [0x1005c850]
mov dword [esp + 0x98], ecx
xor ecx, ecx
cmp word [ebp], bx
mov word [esp + 0xa0], ax
mov dword [esp + 0x9c], edx
mov eax, ebp
je 0x43631c
add eax, 2
add ecx, 1
cmp word [eax], bx
jne 0x435ff1
cmp ecx, 6
jb 0x43631c
cmp word [ebp + 0xa], 0x3a
jne 0x43631c
mov cx, word [ebp + 8]
lea edx, [esp + 0x14]
push 4
push edx
mov word [esp + 0xa4], cx
call fcn.0041a4a0
mov ecx, dword [esi + 0x58]
mov eax, dword [ecx]
mov eax, dword [eax + 0x3c]
add esp, 8
lea edx, [esp + 0x14]
push edx
push ebx
push 1
push 0x80000000
lea edx, [esp + 0xa4]
push edx
call eax
mov ecx, dword [esp + 0x14]
cmp ecx, ebx
je 0x4360ed
mov edx, dword [ecx]
mov eax, dword [edx + 0x58]
call eax
test eax, eax
je 0x4360e9
lea ecx, [esp + 0x94]
push ecx
lea ecx, [esp + 0x1a8]
call fcn.004197e0
mov ecx, dword [esp + 0x258]
lea edx, [esp + 0x1a4]
push edx
call fcn.00419800
lea ecx, [esp + 0x1a4]
call fcn.00419210
cmp word [ebp + 0xc], 0x5c
lea eax, [ebp + 0xc]
jne 0x4360a6
add eax, 2
push eax
lea ecx, [esp + 0x184]
call fcn.004197e0
mov ecx, dword [esp + 0x25c]
lea eax, [esp + 0x180]
push eax
call fcn.00419800
lea ecx, [esp + 0x180]
call fcn.00419210
lea ecx, [esp + 0x14]
call fcn.004190c0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x240
ret 0xc
mov ecx, dword [esp + 0x14]
cmp dword [0x100ee4d8], ebx
je 0x436310
movzx edx, word [ebp + 8]
mov eax, dword [0x100ee508]
movzx edi, word [eax + edx*2]
sub edi, 0x41
cmp edi, 0x20
jae 0x436310
mov ecx, dword [0x100ee438]
mov esi, dword [ecx + 0x9b4]
push ebx
push 0x24
lea edx, [esp + 0x234]
push edx
push 0x17
call dword [0x1005b1f0]
push eax
call esi
test eax, eax
jne 0x43630c
mov al, byte [esp + edi + 0x230]
cmp al, bl
je 0x436153
cmp al, 1
je 0x436153
cmp al, 4
jne 0x43630c
mov esi, dword [esp + 0x10]
lea eax, [esp + 0x1ec]
push eax
lea ecx, [esp + 0xd0]
add esi, 0xfc
push ecx
mov ecx, esi
mov dword [esp + 0xd4], edi
call fcn.00433510
test eax, eax
je 0x4361f3
push 0x1005b318
lea ecx, [esp + 0x1b4]
call fcn.004197e0
mov ecx, dword [esp + 0x258]
lea edx, [esp + 0x1b0]
push edx
call fcn.00419800
lea ecx, [esp + 0x1b0]
call fcn.00419210
push ebp
lea ecx, [esp + 0x1c8]
call fcn.004197e0
mov ecx, dword [esp + 0x25c]
lea eax, [esp + 0x1c4]
push eax
call fcn.00419800
lea ecx, [esp + 0x1c4]
call fcn.00419210
lea ecx, [esp + 0x14]
call fcn.004190c0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x240
ret 0xc
mov dword [esp + 0x68], 1
mov dword [esp + 0x70], ebx
mov dword [esp + 0x74], ebx
mov dword [esp + 0x60], edi
mov dword [esp + 0xa4], edi
mov edi, edi
mov ecx, dword [esp + 0x68]
push ecx
lea ecx, [esp + 0x74]
call fcn.0041aed0
lea edx, [esp + 0x60]
push edx
mov eax, edx
push eax
mov ecx, esi
call fcn.00432cd0
mov ebp, dword [esp + 0x70]
lea ecx, [esp + 0x68]
push ecx
push ebp
lea edx, [esp + 0xa4]
push edx
call dword [0x100ee4d8]
mov edi, eax
lea eax, [esp + 0xa4]
push eax
mov ecx, esi
call fcn.00433670
cmp edi, 0xea
je 0x436210
cmp edi, ebx
jne 0x436303
push 0x10066304
lea ecx, [esp + 0x148]
call fcn.004197e0
add ebp, 2
push ebp
lea ecx, [esp + 0x148]
call fcn.0041cc40
mov esi, dword [esp + 0x25c]
mov ecx, dword [esp + 0x258]
mov edx, dword [esp + 0x144]
push esi
push ecx
mov ecx, dword [esp + 0x18]
push edx
call fcn.00435f40
cmp dword [esi + 4], ebx
je 0x4362c6
push 0x5c
mov ecx, esi
call fcn.0042f350
test al, al
jne 0x4362c6
push 0x1005b86c
mov ecx, esi
call fcn.0041cc40
mov eax, dword [esp + 0x254]
add eax, 0xe
push eax
mov ecx, esi
call fcn.0041cc40
lea ecx, [esp + 0x144]
call fcn.00419210
lea ecx, [esp + 0x70]
call fcn.00419090
lea ecx, [esp + 0x14]
call fcn.004190c0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x240
ret 0xc
lea ecx, [esp + 0x70]
call fcn.00419090
mov ecx, dword [esp + 0x14]
cmp ecx, ebx
je 0x43631c
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push ecx
call eax
mov ebp, dword [esp + 0x10]
add ebp, 0xdc
push ebp
lea ecx, [esp + 0x38]
mov dword [esp + 0x1c], ebp
call fcn.004215f0
mov ecx, ebp
call fcn.00433430
cmp eax, ebx
mov dword [esp + 0x78], eax
je 0x436419
lea ecx, [esp + 0x78]
push ecx
mov ecx, ebp
call fcn.00433490
mov edx, dword [eax]
push edx
lea ecx, [esp + 0x80]
mov dword [esp + 0x80], ebx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x88], ebx
call fcn.004190e0
mov eax, dword [esp + 0x254]
mov esi, dword [esp + 0x7c]
push 1
push eax
push esi
call fcn.0041a7a0
add esp, 0xc
test eax, eax
push esi
je 0x436538
lea ecx, [esp + 0x4c]
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], ebx
mov dword [esp + 0x54], ebx
call fcn.004190e0
push 0x1005b86c
lea ecx, [esp + 0x4c]
call fcn.0041cc40
mov edi, dword [esp + 0x48]
mov ecx, dword [esp + 0x254]
push edi
push ecx
call fcn.0041ae20
add esp, 8
test eax, eax
jne 0x4365e4
cmp edi, ebx
je 0x4363f0
push edi
call fcn.0041a630
add esp, 4
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], ebx
cmp esi, ebx
je 0x43640f
push esi
call fcn.0041a630
add esp, 4
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x80], ebx
mov dword [esp + 0x84], ebx
cmp dword [esp + 0x78], ebx
jne 0x436347
cmp byte [esp + 0x39], bl
je 0x436450
mov esi, dword [esp + 0x34]
push ebx
lea edx, [esi + 8]
push edx
call dword [0x1005b0ac]
mov ecx, dword [esi + 0xc]
test ecx, ecx
lea eax, [esi + 0xc]
jle 0x436450
push eax
call dword [0x1005b098]
mov edx, dword [esp + 0x34]
mov eax, dword [edx + 0x10]
push ebx
push 1
push eax
call dword [0x1005b0a8]
mov edi, dword [esp + 0x254]
push 0x100662b8
push edi
call fcn.0041ae20
add esp, 8
test eax, eax
je 0x4364a5
xor ecx, ecx
mov eax, 0x100662b8
add eax, 2
add ecx, 1
cmp word [eax], bx
jne 0x436470
movzx eax, word [edi + ecx*2]
cmp ax, bx
lea esi, [edi + ecx*2]
je 0x4364a5
jmp 0x436490
add esi, 2
cmp ax, 0x5c
movzx eax, word [esi]
je 0x4366a8
cmp ax, bx
jne 0x436490
push edi
lea ecx, [esp + 0x28]
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
call fcn.004190e0
jmp 0x4364c0
mov esi, dword [esp + 0x24]
push esi
lea eax, [esp + 0x140]
push eax
call dword [0x100ee594]
xor edi, edi
movzx eax, word [esi]
cmp ax, 0x5c
je 0x4364e3
cmp ax, bx
jne 0x436527
lea ecx, [esp + 0x13c]
push ecx
lea edx, [esp + 0x40]
push edx
mov word [esp + 0x144], di
call fcn.004300c0
add esp, 8
cmp dword [esp + 0x40], ebx
jne 0x436769
mov eax, dword [esp + 0x3c]
cmp eax, ebx
je 0x436527
push eax
call fcn.0041a630
add esp, 4
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
cmp word [esi], bx
je 0x4367da
add edi, 2
add esi, 2
jmp 0x4364d5
mov ecx, dword [esp + 0x25c]
call fcn.004190e0
push 0x1005b318
lea ecx, [esp + 0xe4]
mov dword [esp + 0xe4], ebx
mov dword [esp + 0xe8], ebx
mov dword [esp + 0xec], ebx
call fcn.004190e0
mov edi, dword [esp + 0xe0]
mov ecx, dword [esp + 0x25c]
push edi
call fcn.004190e0
cmp edi, ebx
je 0x43658b
push edi
call fcn.0041a630
add esp, 4
cmp esi, ebx
je 0x436598
push esi
call fcn.0041a630
add esp, 4
cmp byte [esp + 0x39], bl
je 0x436f5a
mov esi, dword [esp + 0x34]
push ebx
lea edx, [esi + 8]
push edx
call dword [0x1005b0ac]
mov ecx, dword [esi + 0xc]
test ecx, ecx
lea eax, [esi + 0xc]
jle 0x436f5a
push eax
call dword [0x1005b098]
mov edx, dword [esp + 0x34]
mov eax, dword [edx + 0x10]
push ebx
push 1
push eax
call dword [0x1005b0a8]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x240
ret 0xc
mov ecx, dword [esp + 0x258]
push esi
call fcn.004190e0
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x254]
lea eax, [edx + ecx*2]
push eax
lea ecx, [esp + 0x114]
mov dword [esp + 0x114], ebx
mov dword [esp + 0x118], ebx
mov dword [esp + 0x11c], ebx
call fcn.004190e0
mov ebp, dword [esp + 0x110]
mov ecx, dword [esp + 0x25c]
push ebp
call fcn.004190e0
cmp ebp, ebx
je 0x436642
push ebp
call fcn.0041a630
add esp, 4
cmp edi, ebx
je 0x43664f
push edi
call fcn.0041a630
add esp, 4
cmp esi, ebx
je 0x43665c
push esi
call fcn.0041a630
add esp, 4
cmp byte [esp + 0x39], bl
je 0x436f5a
mov esi, dword [esp + 0x34]
push ebx
lea ecx, [esi + 8]
push ecx
call dword [0x1005b0ac]
mov edx, dword [esi + 0xc]
test edx, edx
lea eax, [esi + 0xc]
jle 0x436f5a
push eax
call dword [0x1005b098]
mov eax, dword [esp + 0x34]
mov ecx, dword [eax + 0x10]
push ebx
push 1
push ecx
call dword [0x1005b0a8]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x240
ret 0xc
cmp ax, bx
je 0x4364a5
cmp ax, 0x5c
je 0x4364a5
cmp ax, 0x3a
je 0x4366d2
movzx eax, word [esi + 2]
add esi, 2
cmp ax, bx
jne 0x4366b1
jmp 0x4364a5
movzx eax, word [esi]
cmp ax, bx
je 0x4364a5
mov edi, edi
cmp ax, 0x5c
je 0x4366f7
movzx eax, word [esi + 2]
add esi, 2
cmp ax, bx
jne 0x4366e0
jmp 0x4364a5
push 0x10066304
lea ecx, [esp + 0xb4]
mov dword [esp + 0xb4], ebx
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xbc], ebx
call fcn.004190e0
push esi
lea ecx, [esp + 0xb4]
call fcn.0041cc40
mov ecx, dword [esp + 0x25c]
mov edx, dword [esp + 0x258]
mov esi, dword [esp + 0xb0]
push ecx
mov ecx, dword [esp + 0x14]
push edx
push esi
call fcn.00435f40
cmp esi, ebx
je 0x436f5a
push esi
call fcn.0041a630
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x240
ret 0xc
push esi
lea eax, [esp + 0x40]
push eax
lea ecx, [esp + 0x10c]
push ecx
call fcn.0041d350
mov edx, dword [eax]
add esp, 0xc
push edx
lea ecx, [esp + 0x28]
call fcn.004190e0
mov eax, dword [esp + 0x104]
cmp eax, ebx
je 0x4367b4
push eax
call fcn.0041a630
add esp, 4
mov dword [esp + 0x104], ebx
mov dword [esp + 0x108], ebx
mov dword [esp + 0x10c], ebx
mov eax, dword [esp + 0x3c]
cmp eax, ebx
je 0x4364c0
push eax
call fcn.0041a630
add esp, 4
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
jmp 0x4364c0
mov edi, ebp
mov ebp, dword [0x1005b0b8]
mov byte [esp + 0x21], bl
mov dword [esp + 0x1c], edi
call ebp
add edi, 8
mov esi, eax
mov eax, dword [edi]
cmp esi, eax
mov dword [esp + 0x10], edi
jne 0x436801
mov byte [esp + 0x21], bl
jmp 0x43682b
mov eax, edi
mov ecx, dword [eax]
test ecx, ecx
jne 0x436816
push ebx
push esi
push eax
call dword [0x1005b090]
test eax, eax
je 0x436826
mov ecx, dword [esp + 0x1c]
push 0xffffffffffffffff
push esi
call fcn.0041d4f0
test al, al
je 0x43682b
mov byte [esp + 0x21], 1
mov byte [esp + 0xc9], bl
call ebp
mov esi, dword [esp + 0x18]
mov edx, dword [esi + 8]
add esi, 8
mov edi, eax
cmp edi, edx
jne 0x43684d
mov byte [esp + 0xc9], bl
jmp 0x436878
mov eax, dword [esi]
test eax, eax
jne 0x436860
push ebx
push edi
push esi
call dword [0x1005b090]
test eax, eax
je 0x436870
mov ecx, dword [esp + 0x18]
push 0xffffffffffffffff
push edi
call fcn.0041d4f0
test al, al
je 0x436878
mov byte [esp + 0xc9], 1
mov byte [esp + 0x1c1], bl
call ebp
mov ecx, dword [esi]
mov edi, eax
cmp edi, ecx
jne 0x43688d
xor al, al
jmp 0x4368bb
mov edx, dword [esi]
test edx, edx
jne 0x4368a0
push ebx
push edi
push esi
call dword [0x1005b090]
test eax, eax
je 0x4368b0
mov ecx, dword [esp + 0x18]
push 0xffffffffffffffff
push edi
call fcn.0041d4f0
test al, al
je 0x4368b4
mov al, 1
jmp 0x4368bb
mov al, byte [esp + 0x1c1]
cmp al, bl
mov ebp, dword [esp + 0x18]
mov edi, dword [ebp + 0x14]
je 0x4368ec
push ebx
push esi
call dword [0x1005b0ac]
mov ecx, dword [ebp + 0xc]
test ecx, ecx
lea eax, [ebp + 0xc]
jle 0x4368ec
push eax
call dword [0x1005b098]
mov edx, dword [ebp + 0x10]
push ebx
push 1
push edx
call dword [0x1005b0a8]
cmp byte [esp + 0xc9], bl
je 0x43691b
push ebx
push esi
call dword [0x1005b0ac]
mov ecx, dword [ebp + 0xc]
test ecx, ecx
lea eax, [ebp + 0xc]
jle 0x43691b
push eax
call dword [0x1005b098]
mov edx, dword [ebp + 0x10]
push ebx
push 1
push edx
call dword [0x1005b0a8]
cmp edi, ebx
mov dword [esp + 0x30], edi
je 0x4369f9
lea eax, [esp + 0x30]
push eax
mov ecx, ebp
call fcn.00433490
mov ecx, dword [eax]
push ecx
lea ecx, [esp + 0x8c]
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x90], ebx
mov dword [esp + 0x94], ebx
call fcn.004190e0
mov edx, dword [esp + 0x24]
mov esi, dword [esp + 0x88]
push 1
push edx
push esi
call fcn.0041a7a0
add esp, 0xc
test eax, eax
push esi
je 0x436b5e
lea ecx, [esp + 0x58]
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebx
call fcn.004190e0
push 0x1005b86c
lea ecx, [esp + 0x58]
call fcn.0041cc40
mov edi, dword [esp + 0x54]
mov eax, dword [esp + 0x24]
push edi
push eax
call fcn.0041ae20
add esp, 8
test eax, eax
jne 0x436c18
cmp edi, ebx
je 0x4369cd
push edi
call fcn.0041a630
add esp, 4
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
cmp esi, ebx
je 0x4369ef
push esi
call fcn.0041a630
add esp, 4
mov dword [esp + 0x88], ebx
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x90], ebx
cmp dword [esp + 0x30], ebx
jne 0x436927
cmp byte [esp + 0x21], bl
je 0x436a31
mov ecx, dword [esp + 0x10]
push ebx
push ecx
call dword [0x1005b0ac]
mov eax, dword [esp + 0x1c]
mov edx, dword [eax + 0xc]
add eax, 0xc
test edx, edx
jle 0x436a31
push eax
call dword [0x1005b098]
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax + 0x10]
push ebx
push 1
push ecx
call dword [0x1005b0a8]
mov ebp, dword [esp + 0x24]
push ebp
lea edx, [esp + 0x138]
push edx
call dword [0x100ee594]
lea eax, [esp + 0x134]
mov dword [esp + 0x170], eax
mov eax, dword [esp + 0x28]
movzx ecx, ax
lea edx, [eax + eax]
movzx eax, dx
mov dword [esp + 0x168], 0x18
mov dword [esp + 0x16c], ebx
mov dword [esp + 0x174], 0x40
mov dword [esp + 0x178], ebx
mov dword [esp + 0x17c], ebx
lea ebp, [ebp + ecx*2]
mov dword [esp + 0x30], 1
mov dword [esp + 0x10], eax
lea ebx, [ebx]
movzx eax, word [ebp]
cmp ax, 0x5c
je 0x436ab3
cmp ax, bx
jne 0x436d79
mov cx, word [esp + 0x10]
mov edx, dword [0x100ee438]
push 0x21
mov word [esp + 0x138], cx
mov eax, dword [edx + 0xc0]
push 3
lea ecx, [esp + 0x224]
push ecx
lea edx, [esp + 0x174]
push edx
push 0x100000
lea ecx, [esp + 0x78]
push ecx
call eax
test eax, eax
jne 0x436d79
mov edi, 0x400
lea esp, [esp]
xor esi, esi
cmp edi, ebx
jbe 0x436b11
push edi
call fcn.0041a530
add esp, 4
mov esi, eax
mov edx, dword [0x100ee438]
mov eax, dword [edx + 0x840]
mov edx, dword [esp + 0x64]
lea ecx, [esp + 0x1e8]
push ecx
push edi
push esi
push 1
push edx
call eax
cmp eax, 0xc0000004
je 0x436b49
cmp eax, 0x80000005
je 0x436b49
cmp eax, 0xc0000023
jne 0x436ccc
add edi, 0x100
cmp esi, ebx
je 0x436b00
push esi
call fcn.0041a630
add esp, 4
jmp 0x436b00
mov ecx, dword [esp + 0x25c]
call fcn.004190e0
push 0x1005b318
lea ecx, [esp + 0xfc]
mov dword [esp + 0xfc], ebx
mov dword [esp + 0x100], ebx
mov dword [esp + 0x104], ebx
call fcn.004190e0
mov edi, dword [esp + 0xf8]
mov ecx, dword [esp + 0x25c]
push edi
call fcn.004190e0
cmp edi, ebx
je 0x436bb1
push edi
call fcn.0041a630
add esp, 4
cmp esi, ebx
je 0x436bbe
push esi
call fcn.0041a630
add esp, 4
cmp byte [esp + 0x21], bl
je 0x436bf6
mov ecx, dword [esp + 0x10]
push ebx
push ecx
call dword [0x1005b0ac]
mov eax, dword [esp + 0x1c]
mov edx, dword [eax + 0xc]
add eax, 0xc
test edx, edx
jle 0x436bf6
push eax
call dword [0x1005b098]
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax + 0x10]
push ebx
push 1
push ecx
call dword [0x1005b0a8]
mov eax, dword [esp + 0x24]
cmp eax, ebx
je 0x436f5a
push eax
call fcn.0041a630
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x240
ret 0xc
mov ecx, dword [esp + 0x258]
push esi
call fcn.004190e0
mov edx, dword [esp + 0x58]
mov eax, dword [esp + 0x24]
lea ecx, [eax + edx*2]
push ecx
lea ecx, [esp + 0xf0]
mov dword [esp + 0xf0], ebx
mov dword [esp + 0xf4], ebx
mov dword [esp + 0xf8], ebx
call fcn.004190e0
mov ebp, dword [esp + 0xec]
mov ecx, dword [esp + 0x25c]
push ebp
call fcn.004190e0
cmp ebp, ebx
je 0x436c73
push ebp
call fcn.0041a630
add esp, 4
cmp edi, ebx
je 0x436c80
push edi
call fcn.0041a630
add esp, 4
cmp esi, ebx
je 0x436c8d
push esi
call fcn.0041a630
add esp, 4
cmp byte [esp + 0x21], bl
je 0x436bf6
mov edx, dword [esp + 0x10]
push ebx
push edx
call dword [0x1005b0ac]
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax + 0xc]
add eax, 0xc
test ecx, ecx
jle 0x436bf6
push eax
call dword [0x1005b098]
mov edx, dword [esp + 0x1c]
mov eax, dword [edx + 0x10]
push ebx
push 1
push eax
jmp 0x436bf0
cmp eax, ebx
jne 0x436d59
push ebp
lea eax, [esp + 0x120]
push esi
push eax
call fcn.0041b240
add esp, 8
push eax
lea ecx, [esp + 0x130]
push ecx
call fcn.0041d350
mov edx, dword [eax]
add esp, 0xc
push edx
lea ecx, [esp + 0x28]
call fcn.004190e0
mov eax, dword [esp + 0x128]
cmp eax, ebx
je 0x436d2c
push eax
call fcn.0041a630
add esp, 4
mov dword [esp + 0x128], ebx
mov dword [esp + 0x12c], ebx
mov dword [esp + 0x130], ebx
mov eax, dword [esp + 0x11c]
cmp eax, ebx
je 0x436d55
push eax
call fcn.0041a630
add esp, 4
mov dword [esp + 0x11c], ebx
mov dword [esp + 0x120], ebx
mov dword [esp + 0x124], ebx
mov dword [esp + 0x30], ebx
cmp esi, ebx
je 0x436d66
push esi
call fcn.0041a630
add esp, 4
mov eax, dword [esp + 0x64]
mov ecx, dword [0x100ee438]
mov edx, dword [ecx + 0x1d8]
push eax
call edx
cmp dword [esp + 0x24], ebp
je 0x436d94
add dword [esp + 0x10], 0xfffe
sub ebp, 2
cmp dword [esp + 0x30], ebx
jne 0x436aa0
mov edi, dword [esp + 0x24]
push edi
lea eax, [esp + 0xc0]
push eax
call dword [0x100ee594]
lea ecx, [esp + 0xbc]
mov dword [esp + 0x150], 0x18
mov dword [esp + 0x154], ebx
mov dword [esp + 0x15c], 0x40
mov dword [esp + 0x158], ecx
mov dword [esp + 0x160], ebx
mov dword [esp + 0x164], ebx
mov dword [esp + 0x10], ebx
xor ebp, ebp
movzx eax, word [edi]
cmp ax, 0x5c
je 0x436df8
cmp ax, bx
jne 0x436eb5
mov word [esp + 0xbc], bp
cmp word [edi], 0x5c
jne 0x436e11
lea edx, [ebp + 2]
mov word [esp + 0xbc], dx
mov eax, dword [0x100ee438]
mov eax, dword [eax + 0xc0]
push 0x21
push 3
lea ecx, [esp + 0x21c]
push ecx
lea edx, [esp + 0x15c]
push edx
push 0x100001
lea ecx, [esp + 0x80]
push ecx
call eax
test eax, eax
jne 0x436eb5
push 0x400
call fcn.0041a530
mov edx, dword [0x100ee438]
mov ecx, dword [edx + 0x3b8]
mov edx, dword [esp + 0x70]
add esp, 4
push 1
push ebx
push ebx
push 3
push 0x400
push eax
mov dword [esp + 0xc0], eax
lea eax, [esp + 0x23c]
push eax
push ebx
push ebx
push ebx
push edx
mov dword [esp + 0xd8], 0x400
call ecx
mov ecx, dword [0x100ee438]
mov edx, dword [ecx + 0x1d8]
mov esi, eax
mov eax, dword [esp + 0x6c]
push eax
call edx
cmp esi, ebx
je 0x436ece
lea ecx, [esp + 0xa8]
call fcn.00419090
cmp word [edi], bx
je 0x436f67
add dword [esp + 0x10], 1
add ebp, 2
add edi, 2
jmp 0x436de6
movzx esi, word [esp + 0x10]
push esi
push ebx
lea eax, [esp + 0x204]
push eax
lea ecx, [esp + 0x30]
call fcn.0042faf0
mov edi, dword [esp + 0x258]
push eax
mov ecx, edi
call fcn.00419800
lea ecx, [esp + 0x1fc]
call fcn.00419210
push 0xffffffffffffffff
add esi, 1
push esi
lea ecx, [esp + 0x210]
push ecx
lea ecx, [esp + 0x30]
call fcn.0042faf0
mov ecx, dword [esp + 0x25c]
push eax
call fcn.00419800
lea ecx, [esp + 0x208]
call fcn.00419210
lea ecx, [esp + 0xa8]
call fcn.00419090
sub esp, 0xc
mov ecx, esp
push edi
call fcn.0041b210
mov ecx, dword [esp + 0x24]
call fcn.004354b0
lea ecx, [esp + 0x24]
call fcn.00419210
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x240
ret 0xc
mov esi, dword [esp + 0x254]
push 0x1005b35c
push esi
call fcn.0041ae20
add esp, 8
test eax, eax
je 0x437057
mov edx, dword [0x1005c844]
mov eax, dword [0x1005c848]
mov ecx, dword [0x1005c84c]
mov dword [esp + 0xd0], edx
mov dx, word [0x1005c850]
push esi
mov dword [esp + 0xd8], eax
mov dword [esp + 0xdc], ecx
mov word [esp + 0xe0], dx
call fcn.00418ee0
add esp, 4
cmp eax, 6
jb 0x437057
cmp word [esi + 0xa], 0x3a
jne 0x437057
mov ax, word [esi + 8]
lea ecx, [esp + 0xd0]
push ecx
lea ecx, [esp + 0x1e0]
mov word [esp + 0xdc], ax
call fcn.004197e0
mov edi, dword [esp + 0x258]
lea edx, [esp + 0x1dc]
push edx
mov ecx, edi
call fcn.00419800
lea ecx, [esp + 0x1dc]
call fcn.00419210
cmp word [esi + 0xc], 0x5c
lea eax, [esi + 0xc]
jne 0x437025
add eax, 2
push eax
lea ecx, [esp + 0x1d4]
call fcn.004197e0
mov ecx, dword [esp + 0x25c]
lea eax, [esp + 0x1d0]
push eax
call fcn.00419800
lea ecx, [esp + 0x1d0]
call fcn.00419210
jmp 0x436f3d
push 0x1005b318
lea ecx, [esp + 0x19c]
call fcn.004197e0
lea ecx, [esp + 0x198]
push ecx
mov ecx, dword [esp + 0x25c]
call fcn.00419800
lea ecx, [esp + 0x198]
call fcn.00419210
push esi
lea ecx, [esp + 0x190]
call fcn.004197e0
mov ecx, dword [esp + 0x25c]
lea edx, [esp + 0x18c]
push edx
call fcn.00419800
lea ecx, [esp + 0x18c]
call fcn.00419210
jmp 0x436f51