Function at 0x435b00
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4f10d6
mov eax, dword fs:[0]
push eax
sub esp, 0xe8
mov eax, dword [0x52a6ec]
xor eax, esp
mov dword [esp + 0xe0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x52a6ec]
xor eax, esp
push eax
lea eax, [esp + 0xfc]
mov dword fs:[0], eax
mov eax, dword [esp + 0x110]
mov ebp, dword [esp + 0x11c]
mov edx, dword [esp + 0x120]
mov esi, dword [esp + 0x124]
xor ebx, ebx
mov dword [esp + 0x2c], ecx
mov ecx, dword [esp + 0x114]
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], ecx
mov dword [esp + 0x50], ebp
mov dword [esp + 0x48], edx
mov dword [esp + 0x44], esi
mov dword [esp + 0x30], ebx
cmp eax, ebx
jne 0x435bac
xor eax, eax
mov ecx, dword [esp + 0xfc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xe0]
xor ecx, esp
call fcn.004c9392
add esp, 0xf4
ret 0x1c
cmp dword [esp + 0x10c], 0x100
jg 0x435b80
mov eax, dword [esi + 4]
mov edi, dword [eax]
mov eax, dword [edi + 4]
push 0xc
mov dword [esp + 0x2c], eax
call fcn.004c958c
add esp, 4
cmp eax, ebx
je 0x436205
mov ecx, dword [esp + 0x28]
mov dword [eax + 4], ecx
lea ecx, [eax + 8]
mov dword [eax], edi
cmp ecx, ebx
je 0x435bed
mov edx, dword [esp + 0x34]
mov dword [ecx], edx
mov ecx, dword [esi + 8]
mov edx, 0x3ffffffe
sub edx, ecx
cmp edx, 1
jae 0x435c06
push str.list_T__too_long
call fcn.004c831f
inc ecx
mov dword [esi + 8], ecx
mov dword [edi + 4], eax
mov ecx, dword [eax + 4]
mov dword [ecx], eax
mov eax, dword [esi + 4]
mov ecx, dword [eax]
push ecx
lea eax, [ecx + 8]
push eax
lea eax, [esp + 0x44]
push eax
push esi
call fcn.004375a0
push 8
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x58], ebx
call fcn.004c958c
add esp, 4
cmp eax, ebx
je 0x4361e5
xor ecx, ecx
mov dword [esp + 0x54], eax
mov dword [eax], ecx
xor edx, edx
mov dword [eax + 4], edx
mov edx, dword [esp + 0x54]
lea ecx, [esp + 0x54]
mov dword [edx], ecx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x104], 2
mov eax, dword [ebp]
mov dword [esp + 0x20], eax
lea ebx, [ebx]
lea edi, [esp + 0x54]
mov byte [esp + 0x1b], bl
call fcn.00436ba0
mov ecx, dword [ebp]
mov edx, dword [esp + 0x34]
mov dword [esp + 0x20], ecx
mov eax, dword [edx + 4]
mov ecx, dword [esp + 0x2c]
mov edx, dword [ecx + 0x50]
add ecx, 0x50
push eax
mov eax, dword [edx + 0x14]
mov dword [esp + 0x28], ebx
call eax
cmp eax, ebx
je 0x435cc1
mov ecx, 0x4d6a
cmp word [eax], cx
jne 0x435cc1
mov esi, eax
jmp 0x435cc3
xor esi, esi
lea edx, [esp + 0x1b]
push edx
lea eax, [esp + 0x74]
push eax
mov dword [esp + 0x24], esi
call fcn.00436900
mov byte [esp + 0x104], 3
cmp esi, ebx
je 0x4360df
cmp dword [esp + 0x20], ebx
je 0x4360df
mov esi, dword [esp + 0x74]
lea ecx, [esp + 0x6c]
push ecx
lea ebx, [esp + 0x20]
lea eax, [esp + 0x74]
call fcn.004650b0
cmp dword [esp + 0x6c], esi
jne 0x4360d2
mov edx, dword [esp + 0x74]
mov esi, dword [edx]
mov edi, dword [esi + 4]
push 0xc
call fcn.004c958c
add esp, 4
test eax, eax
je 0x436118
mov ebx, dword [esp + 0x1c]
lea ecx, [eax + 8]
mov dword [eax], esi
mov dword [eax + 4], edi
test ecx, ecx
je 0x435d3d
mov dword [ecx], ebx
mov ecx, 0x3ffffffe
sub ecx, dword [esp + 0x78]
cmp ecx, 1
jb 0x435bfc
inc dword [esp + 0x78]
mov dword [esi + 4], eax
mov ecx, dword [eax + 4]
mov dword [ecx], eax
mov edx, dword [esp + 0x74]
mov eax, dword [edx]
push eax
add eax, 8
push eax
lea eax, [esp + 0xa4]
push eax
lea ecx, [esp + 0x7c]
push ecx
call fcn.004375a0
mov esi, dword [esp + 0x38]
mov eax, dword [esi + 4]
lea edi, [ebx + 2]
cmp edi, eax
jae 0x435de4
mov edx, dword [esi]
cmp edx, edi
ja 0x435de4
mov ecx, dword [esi + 8]
sub edi, edx
sar edi, 1
cmp eax, ecx
jne 0x435dd0
sub eax, edx
sar eax, 1
cmp eax, 0x7ffffffe
ja 0x43610e
sub ecx, edx
inc eax
sar ecx, 1
cmp eax, ecx
jbe 0x435dd0
mov edx, ecx
shr edx, 1
mov ebp, SysReAllocString
sub ebp, edx
cmp ebp, ecx
jae 0x435dc2
xor ecx, ecx
jmp 0x435dc4
add ecx, edx
cmp ecx, eax
jae 0x435dca
mov ecx, eax
push ecx
call fcn.00455db0
mov eax, dword [esi + 4]
mov edx, dword [esi]
lea ecx, [edx + edi*2]
test eax, eax
je 0x435e33
mov cx, word [ecx]
mov word [eax], cx
jmp 0x435e33
mov ecx, dword [esi + 8]
cmp eax, ecx
jne 0x435e26
mov edx, dword [esi]
sub eax, edx
sar eax, 1
cmp eax, 0x7ffffffe
ja 0x43610e
sub ecx, edx
inc eax
sar ecx, 1
cmp eax, ecx
jbe 0x435e26
mov edx, ecx
shr edx, 1
mov ebp, SysReAllocString
sub ebp, edx
cmp ebp, ecx
jae 0x435e18
xor ecx, ecx
jmp 0x435e1a
add ecx, edx
cmp ecx, eax
jae 0x435e20
mov ecx, eax
push ecx
call fcn.00455db0
mov eax, dword [esi + 4]
test eax, eax
je 0x435e33
mov dx, word [edi]
mov word [eax], dx
add dword [esi + 4], 2
mov ecx, dword [esp + 0x2c]
mov eax, dword [ebx + 8]
mov edx, dword [ecx + 0x50]
add ecx, 0x50
push eax
mov eax, dword [edx + 0x14]
call eax
test eax, eax
je 0x435e62
mov ecx, dword [eax]
and ecx, 0xfc000000
cmp ecx, 0xb4000000
jne 0x435e62
mov ebp, eax
jmp 0x435e64
xor ebp, ebp
xor ebx, ebx
xor eax, eax
cmp ebp, ebx
je 0x436042
cmp dword [esp + 0x20], ebx
je 0x436042
inc eax
mov dword [esp + 0x30], eax
cmp eax, 0x100
jg 0x4360b6
cmp byte [esp + 0x118], 0
je 0x435ea9
mov edx, dword [ebp + 4]
and edx, 0x80000000
cmp edx, 0x80000000
jne 0x436009
xor ecx, ecx
lea eax, [ebp + 8]
mov word [esp + 0xd8], cx
mov ecx, eax
mov dword [esp + 0xec], 7
mov dword [esp + 0xe8], ebx
lea edx, [ecx + 2]
lea ecx, [ecx]
mov si, word [ecx]
add ecx, 2
cmp si, bx
jne 0x435ed0
sub ecx, edx
sar ecx, 1
push ecx
lea esi, [esp + 0xdc]
call fcn.00404e70
mov byte [esp + 0x104], 0x17
mov edi, dword [ebp + 4]
xor edx, edx
add edi, edi
mov word [esp + 0xa8], dx
add edi, edi
push ebx
or eax, 0xffffffff
mov ecx, esi
lea edx, [esp + 0xac]
sar edi, 2
mov dword [esp + 0xc0], 7
mov dword [esp + 0xbc], ebx
call fcn.004068f0
mov ebx, dword [esp + 0x38]
lea esi, [esp + 0xc4]
mov byte [esp + 0x104], 0x18
call fcn.004364a0
mov dword [esp + 0xd4], edi
lea eax, [esp + 0xa8]
push eax
lea ecx, [esp + 0x58]
push ecx
mov byte [esp + 0x10c], 0x19
call fcn.00437e90
mov byte [esp + 0x104], 0x1a
mov eax, dword [esp + 0xc4]
xor esi, esi
cmp eax, esi
je 0x435f83
push eax
call fcn.004c9387
add esp, 4
mov edi, 8
mov byte [esp + 0x104], 0x17
mov dword [esp + 0xc4], esi
mov dword [esp + 0xc8], esi
mov dword [esp + 0xcc], esi
cmp dword [esp + 0xbc], edi
jb 0x435fbe
mov edx, dword [esp + 0xa8]
push edx
call fcn.004c9387
add esp, 4
xor eax, eax
mov byte [esp + 0x104], 3
mov dword [esp + 0xbc], 7
mov dword [esp + 0xb8], esi
mov word [esp + 0xa8], ax
cmp dword [esp + 0xec], edi
jb 0x435ffb
mov ecx, dword [esp + 0xd8]
push ecx
call fcn.004c9387
add esp, 4
inc dword [esp + 0x24]
cmp dword [esp + 0x20], esi
jle 0x436009
dec dword [esp + 0x20]
mov eax, dword [ebp]
mov ecx, dword [esp + 0x2c]
mov edx, dword [ecx + 0x50]
and eax, 0x3ffffff
add ecx, 0x50
push eax
mov eax, dword [edx + 0x14]
call eax
xor ebx, ebx
cmp eax, ebx
je 0x436042
mov ecx, dword [eax]
and ecx, 0xfc000000
cmp ecx, 0xb4000000
jne 0x436042
mov ebp, eax
mov eax, dword [esp + 0x30]
jmp 0x435e70
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0x38]
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x2c]
push edx
mov edx, dword [esp + 0x11c]
lea eax, [esp + 0x58]
push eax
mov eax, dword [esp + 0x114]
lea ecx, [esp + 0x28]
push ecx
push edx
push ebx
push esi
inc eax
push eax
mov ecx, edi
call fcn.00435b00
add dword [esp + 0x24], eax
mov eax, dword [esi + 0xc]
mov edx, dword [edi + 0x50]
lea ecx, [edi + 0x50]
push eax
mov eax, dword [edx + 0x14]
call eax
test eax, eax
je 0x436098
mov ecx, 0x4d6a
cmp word [eax], cx
je 0x43609a
xor eax, eax
mov ecx, dword [ebx + 4]
mov dword [esp + 0x1c], eax
cmp dword [ebx], ecx
je 0x4360ab
add ecx, 0xfffffffe
mov dword [ebx + 4], ecx
test eax, eax
je 0x4360dd
xor ebx, ebx
jmp 0x435ce6
mov byte [esp + 0x1b], 1
cmp dword [esp + 0x28], ebx
jne 0x4360dd
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x2c]
push edx
push eax
call fcn.00435440
jmp 0x4360dd
mov ecx, dword [esp + 0x1c]
mov dword [ecx + 0xc], 0
xor ebx, ebx
lea edx, [esp + 0x70]
push edx
mov byte [esp + 0x108], 2
call fcn.00464f70
cmp byte [esp + 0x1b], bl
je 0x436139
mov eax, dword [esp + 0x28]
inc eax
mov dword [esp + 0x28], eax
cmp eax, 2
jge 0x436139
mov ebp, dword [esp + 0x50]
jmp 0x435c80
push str.vector_T__too_long
call fcn.004c831f
mov dword [esp + 0x4c], 0
mov dword [esp + 0x48], vtable.stdext::bad_alloc.0
lea esi, [esp + 0x48]
mov byte [esp + 0x104], 4
call fcn.00406640
sub esp, 0xc
mov eax, esp
lea edx, [esp + 0x60]
mov dword [esp + 0x3c], esp
call fcn.004366f0
sub esp, 0xc
mov eax, esp
lea ecx, [esp + 0x6c]
mov dword [esp + 0x48], esp
call fcn.004366d0
mov edi, dword [esp + 0x60]
lea eax, [esp + 0xb4]
mov edx, edi
call fcn.004366f0
sub esp, 0xc
mov ecx, esp
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov edx, dword [eax]
mov dword [esp + 0x6c], esp
cmp edx, ebx
je 0x43618d
mov edx, dword [edx]
cmp edx, ebx
je 0x43618d
mov edx, dword [edx]
mov dword [ecx], edx
mov eax, dword [eax + 8]
mov dword [ecx + 8], eax
call fcn.004373d0
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x50]
lea eax, [esp + 0x34]
push eax
mov eax, dword [esp + 0x48]
mov dword [edx], ecx
call fcn.00436570
lea edi, [esp + 0x54]
mov dword [esp + 0x104], 0x1b
call fcn.00436ba0
mov dword [esp + 0x104], 0xffffffff
mov ecx, dword [esp + 0x54]
push ecx
call fcn.004c9387
mov eax, dword [esp + 0x28]
add esp, 4
jmp 0x435b82
mov dword [esp + 0x40], ebx
mov dword [esp + 0x3c], vtable.stdext::bad_alloc.0
lea esi, [esp + 0x3c]
mov dword [esp + 0x104], 1
call fcn.00406640
mov dword [esp + 0x40], ebx
mov dword [esp + 0x3c], vtable.stdext::bad_alloc.0
lea esi, [esp + 0x3c]
mov dword [esp + 0x104], ebx
call fcn.00406640
int3