Function at 0x435a84
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffbc
push ebx
push esi
xor eax, eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], eax
xor eax, eax
push ebp
push 0x4367fd
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 1], 0
mov byte [ebp - 2], 1
mov eax, dword [0x449b3c]
mov byte [eax], 0
call fcn.0043ba18
test al, al
je 0x435aee
mov eax, dword [0x449c40]
mov eax, dword [eax]
mov eax, dword [eax + 0x1c]
call fcn.0043b94c
test al, al
jne 0x435aee
mov edx, 0x436818
mov eax, 0x436848
call fcn.0043bab4
jmp 0x4367d2
lea eax, [ebp - 0x28]
push eax
mov eax, dword [0x449c40]
mov eax, dword [eax]
mov ecx, 0x436858
mov edx, 0x43686c
call fcn.004258ac
mov eax, dword [ebp - 0x28]
lea edx, [ebp - 0x18]
call fcn.00417a5c
lea eax, [ebp - 0x28]
push eax
mov eax, dword [0x449c40]
mov eax, dword [eax]
mov ecx, 0x436880
mov edx, 0x436898
call fcn.004258ac
mov eax, dword [ebp - 0x28]
lea edx, [ebp - 0x1c]
call fcn.00417a5c
lea edx, [ebp - 0x28]
mov eax, dword [ebp - 0x18]
call fcn.00407124
mov eax, dword [ebp - 0x28]
call fcn.00417d6c
mov ebx, eax
call fcn.0043d778
cmp ebx, eax
jg 0x435b75
lea edx, [ebp - 0x28]
mov eax, 4
call fcn.0043a434
mov edx, dword [ebp - 0x28]
mov eax, 0x436848
call fcn.0043bab4
jmp 0x4367d2
mov eax, dword [0x449c40]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x4368b0
call fcn.00425940
mov byte [ebp - 9], al
lea eax, [ebp - 0x28]
push eax
mov eax, dword [0x449c40]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x4368c4
call fcn.004258ac
cmp dword [ebp - 0x28], 0
jne 0x435bcc
lea eax, [ebp - 0x28]
mov ecx, 0x4368d4
mov edx, dword [ebp - 0x1c]
call fcn.00403880
mov ecx, dword [ebp - 0x28]
mov eax, dword [0x449c40]
mov eax, dword [eax]
mov edx, 0x4368c4
call fcn.0042595c
lea eax, [ebp - 0x28]
push eax
mov eax, dword [0x449c40]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x4368c4
call fcn.004258ac
mov edx, dword [ebp - 0x28]
mov eax, dword [0x449ba8]
call fcn.0040360c
mov eax, dword [0x449b88]
cmp byte [eax], 0
jne 0x435c41
cmp byte [ebp - 9], 0
je 0x435c22
push 0
lea edx, [ebp - 0x28]
mov eax, dword [0x449ba8]
mov eax, dword [eax]
call fcn.004070f0
mov edx, dword [ebp - 0x28]
mov eax, dword [0x449c28]
mov eax, dword [eax]
mov cl, 1
call fcn.0042c338
push 0
push 0
mov edx, dword [0x449ba8]
mov edx, dword [edx]
mov eax, dword [0x449c28]
mov eax, dword [eax]
mov cx, word [0x4368e0]
call fcn.0042c16c
cmp byte [ebp - 9], 0
je 0x435c4c
call fcn.0042ad28
cmp byte [ebp - 9], 0
je 0x435cb7
call fcn.0042ad10
test al, al
je 0x435cb7
mov eax, dword [0x449b88]
cmp byte [eax], 0
jne 0x435cb7
lea eax, [ebp - 0x28]
push eax
mov eax, dword [0x449c40]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x4368ec
call fcn.004258ac
mov ecx, dword [ebp - 0x28]
mov edx, 0x4368ec
mov eax, 0x4368fc
call fcn.0042ad30
lea eax, [ebp - 0x28]
push eax
mov eax, dword [0x449c40]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x43690c
call fcn.004258ac
mov ecx, dword [ebp - 0x28]
mov eax, 0x4368fc
mov edx, 0x43690c
call fcn.0042ad30
xor eax, eax
push ebp
push 0x4367cb
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x449b88]
cmp byte [eax], 0
je 0x435ce0
mov eax, dword [0x449c40]
mov eax, dword [eax]
cmp byte [eax + 0x54], 2
jne 0x435d84
mov eax, dword [0x449c40]
mov eax, dword [eax]
mov byte [eax + 0x54], 0
mov eax, dword [0x449b88]
mov byte [eax], 0
push 0
push 1
mov dword [ebp - 0x30], 6
mov byte [ebp - 0x2c], 0
lea edx, [ebp - 0x30]
mov eax, dword [0x449b60]
xor ecx, ecx
call fcn.00425f90
mov edx, eax
xor ecx, ecx
mov eax, 9
call fcn.00438d90
test eax, eax
jne 0x435d75
mov eax, 0x43c030
mov edx, 1
call fcn.0043bf38
mov byte [ebp - 2], al
mov eax, dword [0x449be4]
cmp byte [eax], 0
je 0x435d49
call fcn.00403170
jmp 0x4367d2
push 1
push 1
mov dword [ebp - 0x30], 6
mov byte [ebp - 0x2c], 0
lea edx, [ebp - 0x30]
mov eax, dword [0x449b60]
xor ecx, ecx
call fcn.00425f90
mov edx, eax
xor ecx, ecx
mov eax, 0xa
call fcn.00438d90
mov eax, dword [0x449c40]
mov eax, dword [eax]
add eax, 0x2c
call fcn.004035b8
cmp byte [ebp - 2], 0
je 0x435fe6
mov eax, dword [0x449b88]
cmp byte [eax], 0
jne 0x435fe6
mov eax, dword [0x449c40]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x436920
call fcn.00425940
test al, al
je 0x435e6c
mov eax, dword [0x449ba8]
mov eax, dword [eax]
call fcn.00406ebc
test al, al
je 0x435e6c
mov eax, dword [0x449c10]
cmp byte [eax], 0
jne 0x435e6c
lea edx, [ebp - 0x28]
mov eax, 0x10
call fcn.0043a434
mov eax, dword [ebp - 0x28]
mov edx, 0x2ee
call fcn.0043996c
call fcn.004352cc
call fcn.004399dc
jmp 0x435e6c
push 0x2031
lea eax, [ebp - 0x28]
push eax
lea edx, [ebp - 0x34]
mov eax, 0x13
call fcn.0043a434
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [0x449c54]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov byte [ebp - 0x2c], 0xb
lea edx, [ebp - 0x30]
xor ecx, ecx
pop eax
call fcn.004079a8
mov eax, dword [ebp - 0x28]
push eax
lea eax, [ebp - 0x34]
push eax
mov eax, dword [0x449c40]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x43693c
call fcn.004258ac
mov edx, dword [ebp - 0x34]
mov eax, dword [0x449c48]
mov eax, dword [eax]
pop ecx
call fcn.00418f74
cmp eax, 2
jne 0x435e6c
call fcn.00403170
jmp 0x4367d2
mov eax, dword [0x449c54]
mov eax, dword [eax]
call fcn.00406ebc
test al, al
je 0x435dff
push 0
push 1
xor eax, eax
mov dword [ebp - 0x30], eax
mov byte [ebp - 0x2c], 0
lea edx, [ebp - 0x30]
mov eax, dword [0x449b60]
xor ecx, ecx
call fcn.00425f90
mov edx, eax
xor ecx, ecx
mov eax, 9
call fcn.00438d90
test eax, eax
jne 0x435fb6
mov eax, 0x434b08
xor edx, edx
call fcn.0043bf38
mov byte [ebp - 2], al
cmp byte [ebp - 2], 0
je 0x435f30
push 0x44aafc
push 0
push 0
push 0x434dbc
push 0
push 0
call sub.KERNEL32.DLL_CreateThread
mov dword [0x44aaf4], eax
xor eax, eax
push ebp
push 0x435f29
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0041a244
lea eax, [ebp - 8]
push eax
mov eax, dword [0x44aaf4]
push eax
call sub.KERNEL32.DLL_GetExitCodeThread
cmp dword [ebp - 8], 0x103
je 0x435eed
mov al, byte [ebp - 8]
mov byte [ebp - 2], al
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x435f30
mov eax, dword [0x44aaf4]
push eax
call sub.KERNEL32.DLL_CloseHandle
ret
mov al, byte [ebp - 2]
and al, byte [ebp - 9]
je 0x435f8c
call fcn.0042ad10
test al, al
je 0x435f8c
cmp byte [0x4496c8], 0
jne 0x435f8c
mov edx, dword [0x449c68]
mov edx, dword [edx]
lea eax, [ebp - 0x28]
mov ecx, 0x43694c
call fcn.00403880
mov eax, dword [ebp - 0x28]
push eax
lea eax, [ebp - 0x34]
mov ecx, 0x436960
mov edx, dword [ebp - 0x1c]
call fcn.00403880
mov edx, dword [ebp - 0x34]
xor ecx, ecx
pop eax
call fcn.00435940
test al, al
jne 0x435f8c
call fcn.00403170
jmp 0x4367d2
push 1
push 1
xor eax, eax
mov dword [ebp - 0x30], eax
mov byte [ebp - 0x2c], 0
lea edx, [ebp - 0x30]
mov eax, dword [0x449b60]
xor ecx, ecx
call fcn.00425f90
mov edx, eax
xor ecx, ecx
mov eax, 0xa
call fcn.00438d90
cmp byte [ebp - 2], 0
je 0x435fe6
mov eax, dword [0x449c40]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 0x436978
call fcn.00425940
test al, al
je 0x435fe6
xor edx, edx
mov al, 3
call fcn.0043cf20
call fcn.00403170
jmp 0x4367d2
cmp byte [ebp - 2], 0
je 0x43607e
mov eax, dword [0x449b88]
cmp byte [eax], 0
je 0x436007
mov eax, dword [0x449c40]
mov eax, dword [eax]
cmp byte [eax + 0x54], 3
jne 0x43607e
mov eax, dword [0x449c40]
mov eax, dword [eax]
mov byte [eax + 0x54], 0
mov eax, dword [0x449b88]
mov byte [eax], 0
push 0
push 1
mov dword [ebp - 0x30], 4
mov byte [ebp - 0x2c], 0
lea edx, [ebp - 0x30]
mov eax, dword [0x449b60]
xor ecx, ecx
call fcn.00425f90
mov edx, eax
xor ecx, ecx
mov eax, 9
call fcn.00438d90
test eax, eax
jne 0x43607e
call fcn.004346dc
mov byte [ebp - 2], al
push 1
push 1
mov dword [ebp - 0x30], 4
mov byte [ebp - 0x2c], 0
lea edx, [ebp - 0x30]
mov eax, dword [0x449b60]
xor ecx, ecx
call fcn.00425f90
mov edx, eax
xor ecx, ecx
mov eax, 0xa
call fcn.00438d90
mov eax, dword [0x449b88]
cmp byte [eax], 0
jne 0x436259
cmp byte [ebp - 2], 0
je 0x4360fd
push 0
push 1
mov dword [ebp - 0x30], 1
mov byte [ebp - 0x2c], 0
lea edx, [ebp - 0x30]
mov eax, dword [0x449b60]
xor ecx, ecx
call fcn.00425f90
mov edx, eax
xor ecx, ecx
mov eax, 9
call fcn.00438d90
test eax, eax
jne 0x4360fd
mov eax, 0x4338e4
xor edx, edx
call fcn.0043bf38
mov byte [ebp - 2], al
push 1
push 1
mov dword [ebp - 0x30], 1
mov byte [ebp - 0x2c], 0
lea edx, [ebp - 0x30]
mov eax, dword [0x449b60]
xor ecx, ecx
call fcn.00425f90
mov edx, eax
xor ecx, ecx
mov eax, 0xa
call fcn.00438d90
cmp byte [ebp - 2], 0
je 0x43616e
push 0
push 1
mov dword [ebp - 0x30], 2
mov byte [ebp - 0x2c], 0
lea edx, [ebp - 0x30]
mov eax, dword [0x449b60]
xor ecx, ecx
call fcn.00425f90
mov edx, eax
xor ecx, ecx
mov eax, 9
call fcn.00438d90
test eax, eax
jne 0x43616e
mov eax, 0x434194
xor edx, edx
call fcn.0043bf38
mov byte [ebp - 2], al
push 1
push 1
mov dword [ebp - 0x30], 2
mov byte [ebp - 0x2c], 0
lea edx, [ebp - 0x30]
mov eax, dword [0x449b60]
xor ecx, ecx
call fcn.00425f90
mov edx, eax
xor ecx, ecx
mov eax, 0xa
call fcn.00438d90
cmp byte [ebp - 2], 0
je 0x4361da
push 0
push 1
mov dword [ebp - 0x30], 5
mov byte [ebp - 0x2c], 0
lea edx, [ebp - 0x30]
mov eax, dword [0x449b60]
xor ecx, ecx
call fcn.00425f90
mov edx, eax
xor ecx, ecx
mov eax, 9
call fcn.00438d90
test eax, eax
jne 0x4361da
xor eax, eax
call fcn.004348d0
mov byte [ebp - 2], al
push 1
push 1
mov dword [ebp - 0x30], 5
mov byte [ebp - 0x2c], 0
lea edx, [ebp - 0x30]
mov eax, dword [0x449b60]
xor ecx, ecx
call fcn.00425f90
mov edx, eax
xor ecx, ecx
mov eax, 0xa
call fcn.00438d90
cmp byte [ebp - 2], 0
je 0x43624b
push 0
push 1
mov dword [ebp - 0x30], 3
mov byte [ebp - 0x2c], 0
lea edx, [ebp - 0x30]
mov eax, dword [0x449b60]
xor ecx, ecx
call fcn.00425f90
mov edx, eax
xor ecx, ecx
mov eax, 9
call fcn.00438d90
test eax, eax
jne 0x43624b
mov eax, 0x433c90
xor edx, edx
call fcn.0043bf38
mov byte [ebp - 2], al
push 1
push 1
mov dword [ebp - 0x30], 3
mov byte [ebp - 0x2c], 0
lea edx, [ebp - 0x30]
mov eax, dword [0x449b60]
xor ecx, ecx
call fcn.00425f90
mov edx, eax
xor ecx, ecx
mov eax, 0xa
call fcn.00438d90
cmp byte [ebp - 2], 0
je 0x436259
call fcn.00435268
mov byte [ebp - 2], al
cmp byte [ebp - 2], 0
je 0x43631f
mov eax, dword [0x449b88]
cmp byte [eax], 0
je 0x43627e
mov eax, dword [0x449c40]
mov eax, dword [eax]
cmp byte [eax + 0x54], 4
jne 0x43631f
mov eax, dword [0x449c40]
mov eax, dword [eax]
mov byte [eax + 0x54], 0
mov eax, dword [0x449b88]
mov byte [eax], 0
push 0
push 1
mov dword [ebp - 0x30], 6
mov byte [ebp - 0x2c], 0
lea edx, [ebp - 0x30]
mov eax, dword [0x449b60]
xor ecx, ecx
call fcn.00425f90
mov edx, eax
xor ecx, ecx
mov eax, 9
call fcn.00438d90
test eax, eax
jne 0x436310
mov eax, 0x43c030
xor edx, edx
call fcn.0043bf38
mov byte [ebp - 2], al
mov eax, dword [0x449be4]
cmp byte [eax], 0
je 0x4362e4
call fcn.00403170
jmp 0x4367d2
push 1
push 1
mov dword [ebp - 0x30], 6
mov byte [ebp - 0x2c], 0
lea edx, [ebp - 0x30]
mov eax, dword [0x449b60]
xor ecx, ecx
call fcn.00425f90
mov edx, eax
xor ecx, ecx
mov eax, 0xa
call fcn.00438d90
mov eax, dword [0x449c40]
mov eax, dword [eax]
add eax, 0x2c
call fcn.004035b8
mov al, byte [ebp - 2]
and al, byte [ebp - 9]
je 0x436794
call fcn.0042ad10
test al, al
je 0x436794
push 0
push 1
mov dword [ebp - 0x30], 6
mov byte [ebp - 0x2c], 0
lea edx, [ebp - 0x30]
mov eax, dword [0x449b60]
xor ecx, ecx
call fcn.00425f90
mov edx, eax
xor ecx, ecx
mov eax, 9
call fcn.00438d90
test eax, eax
jne 0x4363a3
mov eax, 0x43c030
mov edx, 2
call fcn.0043bf38
push 1
push 1
mov dword [ebp - 0x30], 6
mov byte [ebp - 0x2c], 0
lea edx, [ebp - 0x30]
mov eax, dword [0x449b60]
xor ecx, ecx
call fcn.00425f90
mov edx, eax
xor ecx, ecx
mov eax, 0xa
call fcn.00438d90
push 0
push 1
mov dword [ebp - 0x30], 6
mov byte [ebp - 0x2c], 0
lea edx, [ebp - 0x30]
mov eax, dword [0x449b60]
xor ecx, ecx
call fcn.00425f90
mov edx, eax
xor ecx, ecx
mov eax, 9
call fcn.00438d90
test eax, eax
jne 0x43640e
mov eax, 0x43c030
mov edx, 3
call fcn.0043bf38
push 1
push 1
mov dword [ebp - 0x30], 6
mov byte [ebp - 0x2c], 0
lea edx, [ebp - 0x30]
mov eax, dword [0x449b60]
xor ecx, ecx
call fcn.00425f90
mov edx, eax
xor ecx, ecx
mov eax, 0xa
call fcn.00438d90
lea eax, [ebp - 0x10]
push eax
mov eax, dword [0x449c40]
mov eax, dword [eax]
mov ecx, 0x436988
mov edx, 0x4368ec
call fcn.004258ac
lea eax, [ebp - 0x14]
push eax
mov eax, 0x436994
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x40], 0xb
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 0x38], 0xb
lea edx, [ebp - 0x44]
mov ecx, 1
mov eax, 0x4369d4
call fcn.004079a8
xor ecx, ecx
xor edx, edx
mov eax, dword [ebp - 0x14]
call fcn.00413c6c
test al, al
jne 0x436490
lea eax, [ebp - 0x14]
push eax
mov eax, 0x436994
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x40], 0xb
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 0x38], 0xb
lea edx, [ebp - 0x44]
mov ecx, 1
mov eax, 0x4369e8
call fcn.004079a8
push 0x4369fc
mov ecx, 0x436a10
mov edx, 0x436a30
mov eax, dword [ebp - 0x14]
call fcn.00435530
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x436960
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x1c]
call fcn.00403880
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x40], 0xb
mov eax, dword [0x449ba8]
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 0x38], 0xb
lea edx, [ebp - 0x44]
mov ecx, 1
mov eax, 0x436a44
call fcn.004079a8
mov eax, dword [0x449bfc]
cmp dword [eax + 1], 5
jl 0x436510
mov eax, dword [ebp - 0x10]
push eax
xor ecx, ecx
mov edx, 0x436a58
mov eax, dword [ebp - 0x14]
call fcn.00435530
lea eax, [ebp - 0x10]
mov edx, 0x436a6c
call fcn.0040383c
mov eax, dword [ebp - 0x10]
push eax
xor ecx, ecx
mov edx, 0x436a78
mov eax, dword [ebp - 0x14]
call fcn.00435530
push 0
mov ecx, 0x43686c
mov edx, 0x436a90
mov eax, dword [ebp - 0x14]
call fcn.00435530
push 0
mov ecx, 0x436aa8
mov edx, 0x436abc
mov eax, dword [ebp - 0x14]
call fcn.00435530
mov eax, dword [0x449c54]
mov eax, dword [eax]
push eax
xor ecx, ecx
mov edx, 0x436ad4
mov eax, dword [ebp - 0x14]
call fcn.00435530
push 0
mov ecx, 0x436af0
mov edx, 0x436b00
mov eax, dword [ebp - 0x14]
call fcn.00435530
push 0
mov ecx, 0x436b14
mov edx, 0x436b24
mov eax, dword [ebp - 0x14]
call fcn.00435530
push 0
mov ecx, 0x436b38
mov edx, 0x436b4c
mov eax, dword [ebp - 0x14]
call fcn.00435530
push 0
mov ecx, 0x436b60
mov edx, 0x436b74
mov eax, dword [ebp - 0x14]
call fcn.00435530
push 0
mov ecx, 0x436b8c
mov edx, 0x436ba0
mov eax, dword [ebp - 0x14]
call fcn.00435530
push 0
mov ecx, 0x436bb8
mov edx, 0x436bd4
mov eax, dword [ebp - 0x14]
call fcn.00435530
push 0
mov ecx, 0x436be4
mov edx, 0x436bfc
mov eax, dword [ebp - 0x14]
call fcn.00435530
push 0
mov ecx, 0x436c10
mov edx, 0x436c28
mov eax, dword [ebp - 0x14]
call fcn.00435530
push 0
mov ecx, 0x436c40
mov edx, 0x436c54
mov eax, dword [ebp - 0x14]
call fcn.00435530
push 0
mov ecx, 0x436c64
mov edx, 0x436c7c
mov eax, dword [ebp - 0x14]
call fcn.00435530
push 0
mov ecx, 0x436c94
mov edx, 0x436ca8
mov eax, dword [ebp - 0x14]
call fcn.00435530
push 0
mov ecx, 0x436cbc
mov edx, 0x436cbc
mov eax, dword [ebp - 0x14]
call fcn.00435530
mov eax, dword [0x449c08]
mov eax, dword [eax]
call fcn.0041c74c
mov eax, dword [0x449c40]
mov eax, dword [eax]
mov edx, dword [eax + 0x34]
mov eax, dword [0x449c08]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [0x449c08]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
call fcn.004358dc
mov eax, dword [0x449c08]
mov eax, dword [eax]
add eax, 0x20
mov edx, dword [0x449c40]
mov edx, dword [edx]
mov edx, dword [edx + 0x30]
call fcn.0040360c
lea eax, [ebp - 0x10]
call fcn.004035b8
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x20]
mov eax, dword [0x449c40]
mov eax, dword [eax]
mov eax, dword [eax + 0x40]
mov edx, dword [ebp - 0x10]
call fcn.00422620
mov ebx, eax
test ebx, ebx
je 0x436729
mov eax, ebx
call fcn.00422318
cmp al, 1
jne 0x436715
mov eax, dword [0x449c08]
mov eax, dword [eax]
mov ecx, dword [eax + 0x1c]
mov dl, 1
mov eax, dword [0x41ff40]
call fcn.0041c3fc
mov esi, eax
lea eax, [esi + 0x24]
mov edx, dword [ebx + 0x24]
call fcn.0040360c
mov eax, dword [0x449c08]
mov eax, dword [eax]
mov eax, dword [eax + 0x1c]
mov edx, esi
mov ecx, dword [eax]
call dword [ecx + 0x68]
mov edx, dword [esi + 0x24]
mov eax, dword [0x449c28]
mov eax, dword [eax]
call fcn.0042c5a4
cmp dword [ebp - 0x24], 0
je 0x436729
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 0x24]
mov edx, dword [edx + 0x24]
call fcn.00403650
cmp dword [ebp - 0x24], 0
jne 0x4366a8
lea ecx, [ebp - 0x10]
mov eax, dword [0x449ba8]
mov eax, dword [eax]
mov edx, 0x436cd4
call fcn.0040705c
push 1
push 0
mov eax, dword [0x449c28]
mov eax, dword [eax]
mov cx, word [0x4368e0]
mov edx, dword [ebp - 0x10]
call fcn.0042c16c
mov eax, dword [0x449c08]
mov eax, dword [eax]
mov ecx, 0x436ce4
mov edx, dword [ebp - 0x10]
call fcn.0041d360
mov eax, dword [ebp - 0x10]
push eax
xor ecx, ecx
mov edx, 0x436cfc
mov eax, dword [ebp - 0x14]
call fcn.00435530
mov eax, dword [0x449c28]
mov eax, dword [eax]
call fcn.0042c2f4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4367d2
mov eax, dword [0x449be0]
mov edx, dword [0x449bb0]
mov ecx, dword [edx]
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
xor edx, edx
xor eax, eax
call fcn.0043d7d4
call fcn.00412b88
mov al, byte [ebp - 2]
mov byte [ebp - 1], al
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x436804
lea eax, [ebp - 0x34]
call fcn.004035b8
lea eax, [ebp - 0x28]
call fcn.004035b8
lea eax, [ebp - 0x1c]
mov edx, 4
call fcn.004035dc
ret