Function at 0x436470
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x436735
sub esp, 0x68
nop
lea eax, [0xb7d0dc]
mov dword [esp], eax
call fcn.00402210
mov eax, dword [esp + 4]
test eax, eax
je 0x436723
mov ecx, dword [eax + 4]
mov edx, dword [eax]
mov eax, dword [eax + 8]
mov dword [esp + 0x64], edx
mov dword [esp + 0x30], ecx
mov dword [esp + 0x34], eax
lea ebx, [0x79bc00]
mov dword [esp], ebx
call fcn.00409f80
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x30]
test eax, eax
jbe 0x43672e
mov dword [esp + 0x60], edi
mov ecx, dword [esp + 0x64]
mov edx, dword [ecx]
mov edx, dword [edx + 0x64]
mov ebx, dword [0xb91180]
mov ebp, dword [esp + 0x34]
dec ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, 4
add ebp, ecx
mov dword [esp + 0x5c], ebp
test ebx, ebx
jne 0x436717
mov dword [edi], edx
lea eax, [0x79b280]
mov dword [esp], eax
call fcn.00409f80
mov eax, dword [esp + 0x64]
mov eax, dword [eax]
mov edi, dword [esp + 4]
mov ecx, dword [eax + 0x80]
mov edx, dword [eax + 0x7c]
mov eax, dword [eax + 0x78]
mov dword [edi + 4], edx
mov dword [edi + 8], ecx
mov ecx, dword [0xb91180]
test ecx, ecx
jne 0x43670d
mov dword [edi], eax
mov ecx, dword [esp + 0x30]
dec ecx
mov dword [esp + 0x44], ecx
mov edx, dword [esp + 0x5c]
mov ebx, dword [esp + 0x60]
xor eax, eax
mov ebp, 1
mov esi, 1
mov ebp, 1
mov dword [esp + 0x20], ebp
mov ebp, 1
mov dword [esp + 0x24], ebp
jmp 0x43658c
inc eax
mov ecx, dword [esp + 0x44]
mov ebx, dword [esp + 0x5c]
mov esi, dword [esp + 0x24]
mov esi, edx
mov ebx, dword [esp + 0x48]
mov edx, dword [esp + 0x5c]
cmp eax, ecx
jge 0x4366e6
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x28], esi
mov dword [esp + 0x40], eax
mov edx, dword [edx + eax*4]
mov dword [esp + 0x4c], edx
mov ecx, dword [esp + 0x20]
lea ebp, [ecx + 1]
mov edx, dword [edx + 0x64]
mov esi, dword [esp + 0x24]
cmp ebp, esi
ja 0x43669c
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], esi
mov ebp, dword [0xb91180]
lea esi, [ebx + ecx*4]
test ebp, ebp
jne 0x436686
mov dword [ebx + ecx*4], edx
mov dword [esp + 0x48], ebx
mov ecx, dword [esp + 0x28]
lea edx, [ecx + 1]
mov ebp, dword [esp + 0x4c]
mov esi, dword [ebp + 0x80]
mov ebx, dword [ebp + 0x7c]
mov ebp, dword [ebp + 0x78]
mov dword [esp + 0x58], ebp
mov ebp, dword [esp + 0x2c]
cmp edx, ebp
ja 0x43663c
lea ecx, [ecx + ecx*2]
mov dword [edi + ecx*4 + 4], ebx
mov dword [edi + ecx*4 + 8], esi
mov ebx, dword [0xb91180]
lea esi, [edi + ecx*4]
test ebx, ebx
jne 0x436624
mov ebx, dword [esp + 0x58]
mov dword [edi + ecx*4], ebx
jmp 0x436575
mov ecx, edi
mov edi, esi
mov ebx, eax
mov eax, dword [esp + 0x58]
call fcn.0044f0d0
mov eax, ebx
mov edi, ecx
jmp 0x436575
mov dword [esp + 0x3c], esi
mov dword [esp + 0x38], ebx
lea eax, [0x790740]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.0043a950
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea edx, [eax + 1]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x28]
mov ebx, dword [esp + 0x38]
mov esi, dword [esp + 0x3c]
jmp 0x436600
mov ecx, edi
mov edi, esi
mov ebp, eax
mov eax, edx
call fcn.0044f0d0
mov eax, ebp
mov edi, ecx
jmp 0x4365d9
mov dword [esp + 0x54], edx
mov dword [esp + 0x50], edi
lea eax, [0x7ac1c0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.0043a950
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea ebp, [eax + 1]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x54]
mov edi, dword [esp + 0x50]
jmp 0x4365bd
mov dword [esp + 0x6c], ebx
mov eax, dword [esp + 0x20]
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], edi
mov dword [esp + 0x7c], esi
mov dword [esp + 0x80], ebp
add esp, 0x68
ret
call fcn.0044f0d0
jmp 0x436544
mov eax, edx
call fcn.0044f0d0
jmp 0x43650a
xor edx, edx
xor ecx, ecx
xor eax, eax
jmp 0x4364ac
call fcn.004287c0
ud2
call fcn.0044d880
jmp fcn.00436470