Function at 0x436ef8
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff0
push ebx
push esi
push edi
mov eax, dword [ebp + 8]
xor edx, edx
mov dword [eax - 0x40004], edx
mov eax, dword [ebp + 8]
push eax
mov eax, 0x4489f4
mov cx, 1
mov dl, 4
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
mov eax, 0x44891c
mov cx, 2
mov dl, 4
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
mov eax, 0x448c00
mov cx, 4
mov dl, 4
call fcn.00436de0
pop ecx
lea eax, [ebp - 0x10]
push eax
call sub.kernel32.dll_GetSystemTime
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0x10]
mov cx, 6
mov dl, 7
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
mov eax, 0x447320
mov cx, 8
mov dl, 9
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
mov eax, 0x448bfc
mov cx, 9
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x40004]
mov edx, dword [ebp + 8]
lea eax, [edx + eax - 0x40000]
mov word [eax], 0
mov eax, dword [ebp + 8]
add dword [eax - 0x40004], 2
mov bl, byte [0x448b78]
dec ebx
test bl, bl
jb 0x437c0a
inc ebx
mov esi, 0x448b7c
mov eax, dword [esi]
mov edi, eax
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6d]
mov cx, 0xa
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x30]
mov cx, 0xb
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x31]
mov cx, 0xc
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x32]
mov cx, 0xd
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x34]
mov cx, 0xe
mov dl, 4
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x38]
mov cx, 0xf
mov dl, 4
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x3c]
mov cx, 0x10
mov dl, 4
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x40]
mov cx, 0x11
mov dl, 4
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x44]
mov cx, 0x12
mov dl, 4
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x48]
mov cx, 0x13
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x4c]
mov cx, 0x14
mov dl, 4
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x58]
mov cx, 0x15
mov dl, 0xa
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x60]
mov cx, 0x17
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x62]
mov cx, 0x18
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x64]
mov cx, 0x19
mov dl, 5
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x69]
mov cx, 0x1b
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6a]
mov cx, 0x1c
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6b]
mov cx, 0x1d
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6c]
mov cx, 0x1e
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x72]
mov cx, 0x1f
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x73]
mov cx, 0x20
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x74]
mov cx, 0x21
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x75]
mov cx, 0x22
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x76]
mov cx, 0x23
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x77]
mov cx, 0x24
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x78]
mov cx, 0x25
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x79]
mov cx, 0x26
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x7a]
mov cx, 0x27
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x7b]
mov cx, 0x28
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x7c]
mov cx, 0x29
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x7d]
mov cx, 0x2a
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x85]
mov cx, 0x2c
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x86]
mov cx, 0x2d
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x87]
mov cx, 0x2e
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x88]
mov cx, 0x2f
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x89]
mov cx, 0x30
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x8a]
mov cx, 0x31
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x8d]
mov cx, 0x33
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x8e]
mov cx, 0x35
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x8f]
mov cx, 0x36
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x94]
mov cx, 0x37
mov dl, 7
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0xa4]
mov cx, 0x38
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0xa7]
mov cx, 0x39
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x2aa]
mov cx, 0x3b
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x2ab]
mov cx, 0x3c
mov dl, 1
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6ab]
mov cx, 0x3e
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6ac]
mov cx, 0x3f
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6ad]
mov cx, 0x40
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6ae]
mov cx, 0x41
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6af]
mov cx, 0x42
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6b0]
mov cx, 0x43
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6b1]
mov cx, 0x44
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6b2]
mov cx, 0x45
mov dl, 9
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6b4]
mov cx, 0x46
mov dl, 9
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6b6]
mov cx, 0x47
mov dl, 9
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6b8]
mov cx, 0x48
mov dl, 9
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6ba]
mov cx, 0x49
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6bc]
mov cx, 0x4a
mov dl, 9
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6be]
mov cx, 0x4c
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6c0]
mov cx, 0x4d
mov dl, 5
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6c8]
mov cx, 0x4e
mov dl, 5
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6cc]
mov cx, 0x50
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6d0]
mov cx, 0x51
mov dl, 5
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6d4]
mov cx, 0x52
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6d8]
mov cx, 0x53
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6d9]
mov cx, 0x55
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6dc]
mov cx, 0x56
mov dl, 5
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6e0]
mov cx, 0x57
mov dl, 5
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6e8]
mov cx, 0x5b
mov dl, 4
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6ec]
mov cx, 0x5c
mov dl, 5
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6f0]
mov cx, 0x5d
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x275e]
mov cx, 0x5e
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x2760]
mov cx, 0x5f
mov dl, 5
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x700]
mov cx, 0x60
mov dl, 4
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6f4]
mov cx, 0x61
mov dl, 4
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x71]
mov cx, 0x62
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x7e]
mov cx, 0x63
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x7f]
mov cx, 0x64
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x80]
mov cx, 0x65
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0xa5]
mov cx, 0x6a
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0xa8]
mov cx, 0x6b
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x2755]
mov cx, 0x6c
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6f8]
mov cx, 0x71
mov dl, 4
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x81]
mov cx, 0x72
mov dl, 3
call fcn.00436de0
pop ecx
cmp byte [0x448c74], 0
je 0x4376bc
mov eax, dword [ebp + 8]
push eax
mov eax, 0x448c88
mov cx, 0x73
mov dl, 4
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x90]
mov cx, 0x74
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x91]
mov cx, 0x75
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x706]
mov cx, 0x76
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x2756]
mov cx, 0x77
mov dl, 9
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x2758]
mov cx, 0x78
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x50]
mov cx, 0x79
mov dl, 5
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x61]
mov cx, 0x7a
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x63]
mov cx, 0x7b
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x83]
mov cx, 0x7c
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x275a]
mov cx, 0x7d
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x2754]
mov cx, 0x7e
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x275c]
mov cx, 0x7f
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x275d]
mov cx, 0x80
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6e]
mov cx, 0x81
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x6f]
mov cx, 0x82
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x70]
mov cx, 0x83
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x2759]
mov cx, 0x84
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x8b]
mov cx, 0x85
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x8c]
mov cx, 0x86
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x707]
mov cx, 0x87
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x708]
mov cx, 0x8a
mov dl, 9
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x70a]
mov cx, 3
mov dl, 9
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x70c]
mov cx, 0x89
mov dl, 5
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x710]
mov cx, 0x8b
mov dl, 5
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x714]
mov cx, 0x8c
mov dl, 5
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x2718]
mov cx, 0x8e
mov dl, 5
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x271c]
mov cx, 0x66
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x271d]
mov cx, 0x67
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x271e]
mov cx, 0x68
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x271f]
mov cx, 0x69
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x2720]
mov cx, 0x58
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x2721]
mov cx, 0x59
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x2724]
mov cx, 0x5a
mov dl, 5
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x2728]
mov cx, 5
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x2729]
mov cx, 7
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x272a]
mov cx, 0x1a
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x272b]
mov cx, 0x2b
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x272c]
mov cx, 0x32
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x272d]
mov cx, 0x34
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x272e]
mov cx, 0x4b
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x2730]
mov cx, 0x4f
mov dl, 5
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x2734]
mov cx, 0x54
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x2736]
mov cx, 0x6f
mov dl, 9
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x2738]
mov cx, 0x70
mov dl, 5
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x273c]
mov cx, 0x90
mov dl, 5
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x2740]
mov cx, 0x91
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x2744]
mov cx, 0x92
mov dl, 5
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x2748]
mov cx, 0x93
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x2749]
mov cx, 0x94
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x274a]
mov cx, 0x95
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x274b]
mov cx, 0x96
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x274c]
mov cx, 0x97
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x274d]
mov cx, 0x98
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x274e]
mov cx, 0x99
mov dl, 2
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x274f]
mov cx, 0x9a
mov dl, 3
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x2750]
mov cx, 0x9b
mov dl, 5
call fcn.00436de0
pop ecx
cmp byte [edi + 0x707], 0
je 0x437bb1
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x718]
mov cx, 0x88
mov dl, 0xb
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x1718]
mov cx, 0x8d
mov dl, 0xb
call fcn.00436de0
pop ecx
jmp 0x437bdd
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0xaa]
mov cx, 0x3a
mov dl, 1
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [edi + 0x4ab]
mov cx, 0x3d
mov dl, 1
call fcn.00436de0
pop ecx
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x40004]
mov edx, dword [ebp + 8]
lea eax, [edx + eax - 0x40000]
mov word [eax], 0
mov eax, dword [ebp + 8]
add dword [eax - 0x40004], 2
add esi, 4
dec bl
jne 0x436fc8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret