Function at 0x436840
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
xor edi, edi
push esi
push ebx
sub esp, 0xac
mov eax, dword [esp + 0xcc]
mov dword [esp + 0x4c], ecx
mov ebp, dword [esp + 0xc0]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0xd0]
lea ebx, [eax + 0x6c]
mov dword [esp], ebx
call fcn.004c68f0
mov dword [esp], ebx
mov dword [esp + 0x50], eax
call fcn.004c69b0
mov ebx, eax
mov eax, dword [esp + 0xdc]
mov esi, ebx
mov dword [esp], eax
call sub.msvcrt.dll_strlen
mov dword [esp + 0x68], 0
mov dword [esp + 0x44], eax
cmp dword [esp + 0x38], 0xffffffff
sete bl
test ebp, ebp
setne dl
and dl, bl
jne 0x436a20
mov edx, ebx
mov ecx, dword [esp + 0x3c]
cmp dword [esp + 0x40], 0xffffffff
sete byte [esp + 0x5d]
movzx eax, byte [esp + 0x5d]
test ecx, ecx
je 0x4368eb
test al, al
jne 0x436a38
xor dl, byte [esp + 0x5d]
mov eax, dword [esp + 0x68]
cmp edi, dword [esp + 0x44]
jae 0x4369f0
test dl, dl
je 0x4369f0
test eax, eax
jne 0x4369fa
mov edx, dword [esp + 0xdc]
add edx, edi
movzx eax, byte [edx]
mov dword [esp + 0x48], eax
mov ecx, eax
movzx eax, byte [esi + eax + 0x11d]
test al, al
jne 0x43694c
mov eax, dword [esi]
mov eax, dword [eax + 0x20]
cmp eax, 0x42e920
jne 0x436a78
test cl, cl
je 0x436950
mov eax, dword [esp + 0x48]
mov byte [esi + eax + 0x11d], cl
mov eax, ecx
cmp al, 0x25
je 0x436980
movzx edx, byte [edx]
test ebp, ebp
je 0x43695f
test bl, bl
jne 0x436b60
mov eax, dword [esp + 0x38]
cmp dl, al
je 0x436ae8
or dword [esp + 0x68], 4
add edi, 1
jmp 0x4368b5
lea eax, [edi + 1]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0xdc]
movzx edx, byte [eax + edi + 1]
movzx eax, byte [esi + edx + 0x11d]
mov ecx, edx
test al, al
jne 0x4369c2
mov eax, dword [esi]
mov eax, dword [eax + 0x20]
cmp eax, 0x42e920
jne 0x437610
test cl, cl
je 0x436b80
mov byte [esi + edx + 0x11d], cl
mov eax, ecx
mov dword [esp + 0x6c], 0
cmp al, 0x45
je 0x436b10
cmp al, 0x4f
je 0x436b10
mov edi, dword [esp + 0x48]
sub eax, 0x41
cmp al, 0x38
ja case.0x4369e8.4
movzx eax, al
jmp dword [eax*4 + 0x4d2914]
test eax, eax
jne 0x4369fa
cmp edi, dword [esp + 0x44]
je 0x436a04
mov eax, dword [esp + 0xd4]
or dword [eax], 4
mov edx, dword [esp + 0x38]
add esp, 0xac
mov eax, ebp
pop ebx
pop esi
pop edi
pop ebp
ret 0x20
mov eax, dword [ebp + 0xc]
cmp dword [ebp + 8], eax
jae 0x437638
xor edx, edx
jmp 0x4368cc
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax + 0xc]
cmp dword [eax + 8], ecx
jb 0x4368ef
mov ecx, eax
mov eax, dword [eax]
mov byte [esp + 0x48], dl
call dword [eax + 0x24]
movzx edx, byte [esp + 0x48]
cmp eax, 0xffffffff
jne 0x4368ef
mov dword [esp + 0x3c], 0
xor edx, 1
jmp 0x4368ef
movsx ecx, cl
mov dword [esp + 0x54], edx
mov dword [esp], ecx
mov ecx, esi
mov dword [esp + 4], 0
call eax
sub esp, 8
mov ecx, eax
mov edx, dword [esp + 0x54]
jmp 0x43693b
test ebp, ebp
jne 0x437695
mov eax, dword [esp + 0x38]
mov edx, eax
movzx ebx, al
movzx eax, byte [esi + ebx + 0x11d]
test al, al
jne 0x436ada
mov eax, dword [esi]
mov eax, dword [eax + 0x20]
cmp eax, 0x42e920
jne 0x437744
test dl, dl
je case.0x4369e8.4
mov byte [esi + ebx + 0x11d], dl
mov eax, edx
cmp al, 9
jne case.0x4369e8.4
lea esi, [esi]
mov eax, dword [ebp + 8]
cmp eax, dword [ebp + 0xc]
jae 0x437688
add eax, 1
mov dword [ebp + 8], eax
mov dword [esp + 0x38], 0xffffffff
jmp 0x436970
mov eax, dword [esp + 0xdc]
add edi, 2
movzx eax, byte [eax + edi]
mov dword [esp + 0x48], eax
mov edx, eax
movzx eax, byte [esi + eax + 0x11d]
test al, al
jne 0x4369de
mov eax, dword [esi]
mov eax, dword [eax + 0x20]
cmp eax, 0x42e920
jne 0x437668
test dl, dl
je case.0x4369e8.4
mov eax, dword [esp + 0x48]
mov byte [esi + eax + 0x11d], dl
mov eax, edx
jmp 0x4369de
mov eax, dword [ebp + 8]
cmp eax, dword [ebp + 0xc]
jae 0x4376e3
cmp dl, byte [eax]
jne case.0x4369e8.4
jmp 0x436af4
mov edi, dword [esp + 0x48]
jmp case.0x4369e8.4
lea eax, [esp + 0x68]
mov dword [esp], ebp
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 0x1c], 4
mov dword [esp + 0x20], eax
lea eax, [esp + 0x6c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x18], 0x270f
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x14], 0
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
call fcn.00435c30
sub esp, 0x28
mov ebp, eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x38], edx
test eax, eax
jne 0x436970
mov edx, dword [esp + 0x6c]
mov ebx, dword [esp + 0xd8]
lea ecx, [edx + 0x64]
lea eax, [edx - 0x76c]
test edx, edx
cmovs eax, ecx
mov dword [ebx + 0x14], eax
jmp 0x436970
mov eax, dword [esp + 0x50]
mov eax, dword [eax + 8]
mov edx, dword [eax + 0x94]
mov dword [esp + 0x70], edx
mov edx, dword [eax + 0x98]
mov dword [esp + 0x74], edx
mov edx, dword [eax + 0x9c]
mov dword [esp + 0x78], edx
mov edx, dword [eax + 0xa0]
mov dword [esp + 0x7c], edx
mov edx, dword [eax + 0xa4]
mov dword [esp + 0x80], edx
mov edx, dword [eax + 0xa8]
mov dword [esp + 0x84], edx
mov edx, dword [eax + 0xac]
mov dword [esp + 0x88], edx
mov edx, dword [eax + 0xb0]
mov dword [esp + 0x8c], edx
mov edx, dword [eax + 0xb4]
mov dword [esp + 0x90], edx
mov edx, dword [eax + 0xb8]
mov dword [esp + 0x94], edx
mov edx, dword [eax + 0xbc]
mov dword [esp + 0x98], edx
mov eax, dword [eax + 0xc0]
mov dword [esp + 0x9c], eax
lea eax, [esp + 0x68]
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0xd0]
mov dword [esp], ebp
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x70]
mov dword [esp + 0x14], eax
lea eax, [esp + 0x6c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x18], 0xc
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
call fcn.004360b0
sub esp, 0x24
mov ebp, eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x38], edx
test eax, eax
jne 0x436970
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xd8]
mov dword [ebx + 0x10], eax
jmp 0x436970
lea eax, [esp + 0x68]
mov dword [esp + 0x1c], 2
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 0x18], 0x17
mov dword [esp + 0x20], eax
mov dword [esp + 0x14], 0
lea eax, [esp + 0x6c]
mov dword [esp], ebp
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
call fcn.00435c30
sub esp, 0x28
mov ebp, eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x38], edx
test ecx, ecx
jne 0x436970
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xd8]
mov dword [ebx + 8], eax
jmp 0x436970
lea eax, [esp + 0x68]
mov dword [esp + 0x1c], 2
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 0x18], 0xc
mov dword [esp + 0x20], eax
mov dword [esp + 0x14], 1
jmp 0x436d56
lea eax, [esp + 0x68]
mov dword [esp], ebp
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 0x1c], 2
mov dword [esp + 0x20], eax
lea eax, [esp + 0x6c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x18], 0x3b
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x14], 0
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
call fcn.00435c30
sub esp, 0x28
mov ebp, eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x38], edx
test eax, eax
jne 0x436970
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xd8]
mov dword [ebx + 4], eax
jmp 0x436970
movzx eax, byte [esi + 0x1c]
cmp al, 1
je 0x4375a8
test al, al
je 0x437710
mov eax, dword [esi]
mov eax, dword [eax + 0x1c]
cmp eax, 0x42e890
je 0x4375a8
lea ebx, [esp + 0x70]
mov dword [esp + 4], 0x4d2909
mov ecx, esi
mov dword [esp + 8], ebx
mov dword [esp], 0x4d2903
call eax
sub esp, 0xc
jmp 0x4375be
lea eax, [esp + 0x68]
mov dword [esp], ebp
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 0x1c], 2
mov dword [esp + 0x20], eax
lea eax, [esp + 0x6c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x18], 0x3c
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x14], 0
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
call fcn.00435c30
sub esp, 0x28
mov ebp, eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x38], edx
test eax, eax
jne 0x436970
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xd8]
mov dword [ebx], eax
jmp 0x436970
mov eax, dword [esp + 0x50]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x10]
mov dword [esp + 0x1c], eax
lea esi, [esi]
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0x4c]
mov dword [esp], ebp
mov dword [esp + 0x18], eax
lea eax, [esp + 0x68]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
call fcn.00436840
sub esp, 0x20
mov ebp, eax
mov dword [esp + 0x38], edx
jmp 0x436970
mov eax, dword [esp + 0x50]
mov eax, dword [eax + 8]
mov edx, dword [eax + 0x2c]
mov dword [esp + 0x70], edx
mov edx, dword [eax + 0x30]
mov dword [esp + 0x74], edx
mov edx, dword [eax + 0x34]
mov dword [esp + 0x78], edx
mov edx, dword [eax + 0x38]
mov dword [esp + 0x7c], edx
mov edx, dword [eax + 0x3c]
mov dword [esp + 0x80], edx
mov edx, dword [eax + 0x40]
mov dword [esp + 0x84], edx
mov eax, dword [eax + 0x44]
mov dword [esp + 0x88], eax
lea eax, [esp + 0x68]
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0xd0]
mov dword [esp], ebp
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x70]
mov dword [esp + 0x14], eax
lea eax, [esp + 0x6c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x18], 7
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
call fcn.004360b0
sub esp, 0x24
mov ebp, eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x38], edx
test eax, eax
jne 0x436970
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xd8]
mov dword [ebx + 0x18], eax
jmp 0x436970
movzx eax, byte [esi + 0x1c]
cmp al, 1
je 0x4375f0
test al, al
je 0x43771c
mov eax, dword [esi]
mov eax, dword [eax + 0x1c]
cmp eax, 0x42e890
je 0x4375f0
lea ebx, [esp + 0x70]
mov dword [esp + 4], 0x4d2912
mov ecx, esi
mov dword [esp + 8], ebx
mov dword [esp], 0x4d2909
call eax
sub esp, 0xc
jmp 0x4375be
movzx eax, byte [esi + 0x1c]
cmp al, 1
je 0x4375d0
test al, al
je 0x437704
mov eax, dword [esi]
mov eax, dword [eax + 0x1c]
cmp eax, 0x42e890
je 0x4375d0
lea ebx, [esp + 0x70]
mov dword [esp + 4], 0x4d2903
mov ecx, esi
mov dword [esp + 8], ebx
mov dword [esp], 0x4d28fa
call eax
sub esp, 0xc
jmp 0x4375be
mov eax, dword [esp + 0x50]
mov eax, dword [eax + 8]
mov edx, dword [eax + 0x64]
mov dword [esp + 0x70], edx
mov edx, dword [eax + 0x68]
mov dword [esp + 0x74], edx
mov edx, dword [eax + 0x6c]
mov dword [esp + 0x78], edx
mov edx, dword [eax + 0x70]
mov dword [esp + 0x7c], edx
mov edx, dword [eax + 0x74]
mov dword [esp + 0x80], edx
mov edx, dword [eax + 0x78]
mov dword [esp + 0x84], edx
mov edx, dword [eax + 0x7c]
mov dword [esp + 0x88], edx
mov edx, dword [eax + 0x80]
mov dword [esp + 0x8c], edx
mov edx, dword [eax + 0x84]
mov dword [esp + 0x90], edx
mov edx, dword [eax + 0x88]
mov dword [esp + 0x94], edx
mov edx, dword [eax + 0x8c]
mov dword [esp + 0x98], edx
mov eax, dword [eax + 0x90]
jmp 0x436cad
mov eax, dword [esp + 0x50]
mov eax, dword [eax + 8]
mov eax, dword [eax + 8]
mov dword [esp + 0x1c], eax
jmp 0x436f30
mov eax, dword [esp + 0x50]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x18]
mov dword [esp + 0x1c], eax
jmp 0x436f30
test ebp, ebp
je 0x437190
test bl, bl
je 0x437190
mov eax, dword [ebp + 8]
cmp eax, dword [ebp + 0xc]
jae 0x437860
movzx ebx, byte [eax]
mov edx, ebx
jmp 0x437199
mov eax, dword [esp + 0x38]
mov edx, eax
movzx ebx, al
movzx eax, byte [esi + ebx + 0x11d]
test al, al
jne 0x4371c6
mov eax, dword [esi]
mov eax, dword [eax + 0x20]
cmp eax, 0x42e920
jne 0x437728
test dl, dl
je case.0x4369e8.4
mov byte [esi + ebx + 0x11d], dl
mov eax, edx
cmp al, 0xa
jne case.0x4369e8.4
jmp 0x436ae8
test ebp, ebp
je 0x4371f0
test bl, bl
je 0x4371f0
mov eax, dword [ebp + 8]
cmp eax, dword [ebp + 0xc]
jae 0x4377e9
movzx eax, byte [eax]
jmp 0x4371f5
movzx eax, byte [esp + 0x38]
mov edx, dword [esi + 0x18]
test byte [edx + eax*2], 1
je case.0x4369e8.4
lea eax, [esp + 0x68]
lea ebx, [esp + 0x70]
mov dword [esp], ebp
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 0x18], 0xe
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x14], 0x4d1480
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
call fcn.004360b0
sub esp, 0x24
mov ebp, eax
cmp edx, 0xffffffff
sete byte [esp + 0x48]
test ebp, ebp
mov dword [esp + 0x58], edx
setne cl
mov dword [esp + 0x38], edx
movzx edx, byte [esp + 0x48]
and cl, dl
mov byte [esp + 0x54], cl
jne 0x4377b0
mov eax, dword [esp + 0x3c]
test eax, eax
setne al
and al, byte [esp + 0x5d]
mov byte [esp + 0x5e], al
jne 0x437760
cmp byte [esp + 0x5d], dl
je 0x436970
mov eax, dword [esp + 0x68]
or eax, dword [esp + 0x70]
jne 0x436970
cmp byte [esp + 0x54], 0
mov eax, dword [esp + 0x58]
jne 0x4378bb
cmp byte [esi + 0x1c], 0
mov byte [esp + 0x5d], al
je 0x437802
movzx ecx, byte [esi + 0x4a]
cmp byte [esp + 0x5d], cl
je 0x437301
test ebp, ebp
je 0x4372e1
cmp byte [esp + 0x48], 0
jne 0x4378ef
mov eax, dword [esp + 0x58]
cmp byte [esi + 0x1c], 0
mov byte [esp + 0x5d], al
je 0x43787b
movzx edx, byte [esi + 0x48]
cmp byte [esp + 0x5d], dl
jne 0x436970
lea eax, [esp + 0x68]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x58]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x3c]
mov dword [esp], ebp
mov ebp, dword [esp + 0x4c]
mov dword [esp + 0x1c], 2
mov dword [esp + 0x18], 0x17
mov ecx, ebp
mov dword [esp + 0x14], 0
mov dword [esp + 8], eax
mov dword [esp + 4], edx
call fcn.00435c30
sub esp, 0x28
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x3c]
lea ecx, [esp + 0x68]
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0xd0]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x40]
mov dword [esp + 0x20], ecx
mov ecx, ebp
mov dword [esp + 0x1c], 2
mov dword [esp + 0x18], 0x3b
mov dword [esp + 0x14], 0
mov dword [esp + 0xc], ebx
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00435c30
sub esp, 0x28
mov ebp, eax
mov dword [esp + 0x38], edx
jmp 0x436970
mov eax, dword [esp + 0x50]
mov eax, dword [eax + 8]
mov edx, dword [eax + 0x48]
mov dword [esp + 0x70], edx
mov edx, dword [eax + 0x4c]
mov dword [esp + 0x74], edx
mov edx, dword [eax + 0x50]
mov dword [esp + 0x78], edx
mov edx, dword [eax + 0x54]
mov dword [esp + 0x7c], edx
mov edx, dword [eax + 0x58]
mov dword [esp + 0x80], edx
mov edx, dword [eax + 0x5c]
mov dword [esp + 0x84], edx
mov eax, dword [eax + 0x60]
jmp 0x436fba
test ebp, ebp
je 0x437478
test bl, bl
je 0x437478
mov eax, dword [ebp + 8]
cmp eax, dword [ebp + 0xc]
jae 0x437831
movzx ecx, byte [eax]
mov edx, dword [esi + 0x18]
test byte [edx + ecx*2], 0x20
je 0x4376b3
add eax, 1
mov dword [ebp + 8], eax
lea eax, [esp + 0x68]
mov dword [esp + 0x1c], 1
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 0x18], 9
mov dword [esp + 0x20], eax
lea eax, [esp + 0x6c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x14], 1
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp], ebp
mov dword [esp + 0xc], eax
mov dword [esp + 4], 0xffffffff
jmp 0x437570
mov eax, dword [esp + 0x38]
mov edx, dword [esi + 0x18]
movzx eax, al
test byte [edx + eax*2], 0x20
je 0x4376b3
mov eax, dword [ebp + 8]
cmp eax, dword [ebp + 0xc]
jb 0x43741b
mov eax, dword [ebp]
mov ecx, ebp
call dword [eax + 0x28]
jmp 0x437421
lea eax, [esp + 0x68]
mov dword [esp], ebp
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 0x1c], 2
mov dword [esp + 0x20], eax
lea eax, [esp + 0x6c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x18], 0xc
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x14], 1
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
call fcn.00435c30
sub esp, 0x28
mov ebp, eax
mov dword [esp + 0x38], edx
mov edx, dword [esp + 0x68]
test edx, edx
jne 0x436970
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xd8]
sub eax, 1
mov dword [ebx + 0x10], eax
jmp 0x436970
lea eax, [esp + 0x68]
mov dword [esp + 0x1c], 2
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 0x18], 0x1f
mov dword [esp + 0x20], eax
mov dword [esp + 0x14], 1
lea eax, [esp + 0x6c]
mov dword [esp], ebp
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x4c]
call fcn.00435c30
sub esp, 0x28
mov ebp, eax
mov ebx, dword [esp + 0x68]
mov dword [esp + 0x38], edx
test ebx, ebx
jne 0x436970
mov eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0xd8]
mov dword [ebx + 0xc], eax
jmp 0x436970
mov eax, 0x4d
mov dword [esp + 0x70], 0x253a4825
lea ebx, [esp + 0x70]
mov word [esp + 0x74], ax
mov dword [esp + 0x1c], ebx
jmp 0x436f30
mov dword [esp + 0x70], 0x252f6d25
lea ebx, [esp + 0x70]
mov dword [esp + 0x74], 0x79252f64
mov byte [esp + 0x78], 0
jmp 0x4375be
mov dword [esp + 0x70], 0x253a4825
lea ebx, [esp + 0x70]
mov dword [esp + 0x74], 0x53253a4d
mov byte [esp + 0x78], 0
jmp 0x4375be
movsx ecx, dl
mov dword [esp + 0x54], edx
mov dword [esp], ecx
mov ecx, esi
mov dword [esp + 4], 0
call eax
sub esp, 8
mov ecx, eax
mov edx, dword [esp + 0x54]
jmp 0x4369b1
mov eax, dword [ebp]
mov byte [esp + 0x5d], dl
mov ecx, ebp
call dword [eax + 0x24]
movzx edx, byte [esp + 0x5d]
cmp eax, 0xffffffff
mov eax, 0
cmovne edx, eax
mov eax, 0
cmove ebp, eax
jmp 0x4368cc
movsx edx, dl
mov dword [esp + 4], 0
mov ecx, esi
mov dword [esp], edx
call eax
sub esp, 8
mov edx, eax
jmp 0x436b44
mov eax, dword [ebp]
mov ecx, ebp
call dword [eax + 0x28]
jmp 0x436afa
test bl, bl
je 0x436aa4
mov eax, dword [ebp + 8]
cmp eax, dword [ebp + 0xc]
jae 0x437849
movzx ebx, byte [eax]
mov edx, ebx
jmp 0x436aad
lea eax, [esp + 0x68]
mov dword [esp + 0x1c], 2
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 0x18], 0x1f
mov dword [esp + 0x20], eax
mov dword [esp + 0x14], 0xa
jmp 0x43754d
mov eax, dword [ebp]
mov byte [esp + 0x5d], dl
mov ecx, ebp
mov ebx, 0
call dword [eax + 0x24]
movzx edx, byte [esp + 0x5d]
cmp eax, 0xffffffff
cmove ebp, ebx
jmp 0x436963
mov ecx, esi
call fcn.0042e580
jmp 0x437093
mov ecx, esi
call fcn.0042e580
jmp 0x436e6d
mov ecx, esi
call fcn.0042e580
jmp 0x43704c
movsx edx, dl
mov dword [esp + 4], 0
mov ecx, esi
mov dword [esp], edx
call eax
sub esp, 8
mov edx, eax
jmp 0x4371b5
movsx edx, dl
mov dword [esp + 4], 0
mov ecx, esi
mov dword [esp], edx
call eax
sub esp, 8
mov edx, eax
jmp 0x436ac9
mov eax, dword [esp + 0x3c]
mov byte [esp + 0x5d], 0
mov ecx, dword [eax + 0xc]
cmp dword [eax + 8], ecx
jb 0x437293
mov ecx, eax
mov eax, dword [eax]
mov byte [esp + 0x5f], dl
call dword [eax + 0x24]
movzx edx, byte [esp + 0x5e]
add eax, 1
mov eax, 0
cmovne edx, eax
mov eax, 0
cmovne eax, dword [esp + 0x3c]
mov byte [esp + 0x5d], dl
movzx edx, byte [esp + 0x5f]
mov dword [esp + 0x3c], eax
jmp 0x437293
mov ecx, dword [eax + 0xc]
xor edx, edx
cmp dword [eax + 8], ecx
jb 0x43727c
mov eax, dword [ebp]
mov byte [esp + 0x5e], dl
mov ecx, ebp
call dword [eax + 0x24]
movzx edx, byte [esp + 0x5e]
add eax, 1
jne 0x43727c
movzx edx, byte [esp + 0x54]
xor ebp, ebp
mov byte [esp + 0x54], 0
jmp 0x43727c
mov eax, dword [ebp]
mov ecx, ebp
call dword [eax + 0x24]
cmp eax, 0xffffffff
je 0x4378cb
movzx eax, al
jmp 0x4371f5
mov ecx, esi
call fcn.0042e580
mov eax, dword [esi]
mov ecx, 0x2d
mov eax, dword [eax + 0x18]
cmp eax, 0x42e8d0
je 0x4372cc
mov ecx, esi
mov dword [esp], 0x2d
call eax
push ecx
mov ecx, eax
jmp 0x4372cc
mov eax, dword [ebp]
mov ecx, ebp
mov ebx, 0
call dword [eax + 0x24]
cmp eax, 0xffffffff
cmove ebp, ebx
jmp 0x43747c
mov eax, dword [ebp]
mov ecx, ebp
call dword [eax + 0x24]
cmp eax, 0xffffffff
je 0x4378aa
mov edx, eax
movzx ebx, al
jmp 0x436aad
mov eax, dword [ebp]
mov ecx, ebp
call dword [eax + 0x24]
cmp eax, 0xffffffff
je 0x4378ff
mov edx, eax
movzx ebx, al
jmp 0x437199
mov ecx, esi
call fcn.0042e580
mov eax, dword [esi]
mov edx, 0x2b
mov eax, dword [eax + 0x18]
cmp eax, 0x42e8d0
je 0x4372f7
mov dword [esp], 0x2b
mov ecx, esi
call eax
push edx
mov edx, eax
jmp 0x4372f7
mov ebx, 0xff
mov edx, 0xffffffff
xor ebp, ebp
jmp 0x436aad
mov eax, dword [ebp + 8]
cmp eax, dword [ebp + 0xc]
jae 0x4378d7
movzx eax, byte [eax]
jmp 0x4372ba
mov eax, 0xff
xor ebp, ebp
jmp 0x4371f5
mov eax, dword [ebp]
mov ecx, ebp
call dword [eax + 0x24]
mov ecx, 0
cmp eax, 0xffffffff
cmove ebp, ecx
jmp 0x4372ba
mov eax, dword [ebp + 8]
cmp eax, dword [ebp + 0xc]
jae 0x437910
movzx eax, byte [eax]
jmp 0x4372e5
mov ebx, 0xff
mov edx, 0xffffffff
xor ebp, ebp
jmp 0x437199
mov eax, dword [ebp]
mov ecx, ebp
call dword [eax + 0x24]
mov ecx, 0
cmp eax, 0xffffffff
cmove ebp, ecx
jmp 0x4372e5