Function at 0x436ca0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4a5cb8
mov eax, dword fs:[0]
push eax
sub esp, 0x54
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4ed3dc]
xor eax, esp
push eax
lea eax, [esp + 0x68]
mov dword fs:[0], eax
mov edi, ecx
mov esi, edx
xor ebx, ebx
mov eax, 0x24
lea ecx, [esp + 0x24]
mov dword [esp + 0x44], 0x1328d0a
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], ebx
mov byte [esp + 0x64], bl
call fcn.0048f960
push ebx
push ebx
mov dword [esp + 0x78], ebx
mov ebp, dword [esp + 0x80]
push esi
push ebp
lea ecx, [esp + 0x34]
call fcn.0048fa90
test al, al
jne 0x436d5f
push 0x4de9e4
mov ecx, ebp
call fcn.0049cc40
mov ecx, eax
call fcn.0049ccb0
push 0x4de9f0
mov ecx, esi
mov edi, eax
call fcn.00499a40
push eax
mov ecx, edi
call fcn.0049ccb0
mov ecx, eax
call fcn.0049ccb0
lea ecx, [esp + 0x24]
call fcn.0048f900
xor al, al
jmp 0x436fac
push 0x24
lea eax, [esp + 0x48]
push eax
push ebp
lea ecx, [esp + 0x30]
call fcn.0048fa00
test al, al
jne 0x436d82
push 0x4dea10
mov ecx, ebp
call fcn.0049cc40
jmp 0x436d48
cmp dword [esp + 0x44], 0x1326916
je 0x436d9a
push 0x4e0458
mov ecx, ebp
call fcn.0049cc40
jmp 0x436d48
cmp dword [esp + 0x50], 0x24
je 0x436daf
push 0x4e0484
mov ecx, ebp
call fcn.0049cc40
jmp 0x436d48
mov eax, dword [esp + 0x4c]
cmp dword [esp + 0x48], eax
jg 0x436da1
lea ecx, [eax*8 + 0x24]
mov eax, dword [esp + 0x5c]
cmp eax, ecx
jne 0x436da1
mov esi, dword [esp + 0x58]
cmp dword [esp + 0x54], esi
jg 0x436da1
add esi, eax
push esi
call fcn.0046ef1b
mov ebp, eax
add esp, 4
cmp ebp, ebx
mov dword [esp + 0x20], ebp
jne 0x436dfa
mov ecx, dword [esp + 0x78]
push 0x4dea48
call fcn.0049cc40
jmp 0x436d48
push 0x24
lea edx, [esp + 0x48]
push edx
push esi
push ebp
call fcn.0046f5f7
mov edx, dword [esp + 0x88]
add esp, 0x10
lea eax, [esi - 0x24]
push eax
lea ecx, [ebp + 0x24]
push ecx
push edx
lea ecx, [esp + 0x30]
call fcn.0048fa00
test al, al
jne 0x436e3b
mov ecx, dword [esp + 0x78]
push 0x4dea64
call fcn.0049cc40
jmp 0x436d48
lea ecx, [esp + 0x24]
mov dword [esp + 0x70], 0xffffffff
call fcn.0048f900
push esi
call fcn.0046ef1b
add esp, 4
cmp eax, ebx
mov dword [edi], eax
jne 0x436e80
push ebp
call fcn.0046f0c7
mov ecx, dword [esp + 0x7c]
add esp, 4
push 0x4e0494
call fcn.0049cc40
mov ecx, eax
call fcn.0049ccb0
xor al, al
jmp 0x436fac
mov eax, dword [esp + 0x7c]
mov dword [eax], esi
mov esi, dword [edi]
mov dword [esi], 0x1328d0a
mov dword [esi + 4], ebx
mov ecx, dword [esp + 0x5c]
sub ecx, dword [esp + 0x50]
lea eax, [esi + 0x10]
shr ecx, 2
mov dword [esi + 8], ecx
mov edx, dword [esp + 0x50]
mov dword [esi + 0xc], edx
mov dword [eax], ebx
mov ecx, dword [esp + 0x58]
mov dword [esi + 0x14], ecx
mov edx, dword [esp + 0x5c]
mov dword [esi + 0x18], edx
mov dword [esi + 0x1c], ebx
mov byte [esi + 0x20], 1
mov ecx, dword [esp + 0x5c]
add ecx, ebp
mov dword [esp + 0x18], ecx
mov ecx, dword [edi]
mov edi, dword [esi + 0xc]
add edi, ecx
add ecx, edx
cmp dword [esp + 0x48], ebx
mov dword [esp + 0x38], eax
mov eax, dword [esi + 0x14]
mov dword [esp + 0x34], ecx
mov dword [esp + 0x3c], eax
mov byte [esp + 0x40], 1
mov dword [esp + 0x7c], ebx
jle 0x436fa1
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x50]
lea ebp, [ecx + ebp + 4]
mov dword [esp + 0x14], ebp
mov ebp, dword [ebp]
add ebp, dword [esp + 0x18]
lea edx, [esp + 0x78]
push edx
lea eax, [esp + 0x20]
push eax
mov eax, dword [esi + 4]
push ebp
sub eax, 1
push edi
mov dword [esp + 0x88], 0xffffffff
call fcn.00435140
add esp, 0x10
test al, al
jne 0x436f7d
mov ecx, dword [esp + 0x38]
mov ebx, dword [ecx]
mov edx, ebp
lea eax, [esp + 0x34]
call fcn.00432660
test al, al
je 0x436faa
mov eax, dword [esi + 4]
mov ebp, dword [esp + 0x78]
cmp ebp, eax
jge 0x436f76
mov edx, dword [esi + 8]
sub eax, ebp
add eax, eax
sub edx, ebp
add eax, eax
push eax
lea ecx, [edi + ebp*4]
push ecx
add edx, edx
add edx, edx
push edx
add ecx, 4
push ecx
call fcn.0046f7ce
add esp, 0x10
mov dword [edi + ebp*4], ebx
add dword [esi + 4], 1
mov eax, dword [esp + 0x7c]
mov ebp, dword [esp + 0x14]
add eax, 1
add ebp, 8
cmp eax, dword [esp + 0x48]
mov dword [esp + 0x7c], eax
mov dword [esp + 0x14], ebp
jl 0x436f05
mov ebp, dword [esp + 0x20]
push ebp
call fcn.0046f0c7
add esp, 4
mov al, 1
mov ecx, dword [esp + 0x68]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x60
ret 8