Function at 0x435320
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x59a48a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x20
push ebx
push ebp
push esi
push edi
push 0
mov ebx, ecx
call fcn.005054c0
push str.hover.wav
push eax
mov dword [0x5e0064], eax
call fcn.005059f0
push 0
call fcn.005054c0
push str.ok.wav
push eax
mov dword [0x5e0068], eax
call fcn.005059f0
push 0
call fcn.005054c0
push str.in.wav
push eax
mov dword [0x5e006c], eax
call fcn.005059f0
push 0
call fcn.005054c0
push str.out.wav
push eax
mov dword [0x5e0070], eax
call fcn.005059f0
push 0
call fcn.005054c0
push str.cancel.wav
push eax
mov dword [0x5e0074], eax
call fcn.005059f0
push 0
call fcn.005054c0
add esp, 0x40
mov dword [0x5e0078], eax
push str.flip.wav
push eax
call fcn.005059f0
add esp, 8
mov ecx, ebx
call fcn.0045a770
mov ecx, ebx
call fcn.0045a6b0
push 0x6c
call fcn.00508b18
add esp, 4
mov dword [esp + 0x18], eax
test eax, eax
mov dword [esp + 0x38], 0
je 0x4353ff
mov ecx, eax
call fcn.0046b270
jmp 0x435401
xor eax, eax
or ebp, 0xffffffff
push 0x58
mov dword [esp + 0x3c], ebp
mov dword [ebx + 0x2c4], eax
call fcn.00508b18
add esp, 4
mov dword [esp + 0x18], eax
test eax, eax
mov dword [esp + 0x38], 1
je 0x435431
mov ecx, eax
call fcn.0046b680
jmp 0x435433
xor eax, eax
sub esp, 0x14
mov ecx, 5
lea esi, [esp + 0x30]
mov edi, esp
mov dword [esp + 0x40], 0x3f800000
mov dword [esp + 0x38], 0x43828000
mov dword [esp + 0x3c], 0x43390000
mov dword [esp + 0x30], 0x43740000
mov dword [esp + 0x34], 0x433e0000
mov dword [esp + 0x4c], ebp
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov dword [ebx + 0x2c8], eax
call fcn.0046b910
mov eax, dword [ebx + 0x2c8]
push eax
xor eax, eax
sub esp, 0x10
mov ecx, esp
mov dword [ecx], eax
mov eax, 1
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov ecx, dword [ebx + 0x2c4]
call fcn.00462e50
mov ecx, dword [ebx + 0x2c4]
push 0
mov edx, dword [ecx]
call dword [edx + 0x58]
push 0x6c
call fcn.00508b18
mov esi, eax
add esp, 4
mov dword [esp + 0x18], esi
test esi, esi
mov dword [esp + 0x38], 2
je 0x4354dd
mov ecx, esi
call fcn.00462d50
mov dword [esi], 0x5a86a0
jmp 0x4354df
xor esi, esi
push 0x34
mov dword [esp + 0x3c], ebp
mov dword [ebx + 0x2d0], esi
call fcn.00508b18
add esp, 4
mov dword [esp + 0x18], eax
test eax, eax
mov dword [esp + 0x38], 3
je 0x43550c
mov ecx, eax
call fcn.0046c000
jmp 0x43550e
xor eax, eax
sub esp, 0x14
mov ecx, 5
lea esi, [esp + 0x30]
mov edi, esp
mov dword [esp + 0x38], 0x43960000
mov dword [esp + 0x3c], 0x42c00000
mov dword [esp + 0x30], 0x43850000
mov dword [esp + 0x34], 0x43520000
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov dword [esp + 0x4c], ebp
mov dword [ebx + 0x2cc], eax
call fcn.0046c1d0
mov eax, dword [ebx + 0x2cc]
push eax
xor eax, eax
sub esp, 0x10
mov ecx, esp
mov dword [ecx], eax
mov eax, 1
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov ecx, dword [ebx + 0x2d0]
call fcn.00462e50
mov ecx, dword [ebx + 0x2d0]
push 0
mov edx, dword [ecx]
call dword [edx + 0x58]
push 0x6c
call fcn.00508b18
mov esi, eax
add esp, 4
mov dword [esp + 0x18], esi
test esi, esi
mov dword [esp + 0x38], 4
je 0x4355b0
mov ecx, esi
call fcn.00462d50
mov dword [esi], 0x5a8640
jmp 0x4355b2
xor esi, esi
push 0x48
mov dword [esp + 0x3c], ebp
mov dword [ebx + 0x300], esi
call fcn.00508b18
add esp, 4
mov dword [esp + 0x18], eax
test eax, eax
mov dword [esp + 0x38], 5
je 0x4355df
mov ecx, eax
call fcn.0046caa0
jmp 0x4355e1
xor eax, eax
sub esp, 0x14
mov ecx, 5
lea esi, [esp + 0x30]
mov edi, esp
mov dword [esp + 0x38], 0x43a00000
mov dword [esp + 0x3c], 0x43400000
mov dword [esp + 0x30], 0x43730000
mov dword [esp + 0x34], 0x433a0000
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov dword [esp + 0x4c], ebp
mov dword [ebx + 0x2fc], eax
call fcn.0046cc00
mov eax, dword [ebx + 0x2fc]
push eax
xor eax, eax
sub esp, 0x10
mov ecx, esp
mov dword [ecx], eax
mov eax, 1
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov ecx, dword [ebx + 0x300]
call fcn.00462e50
mov ecx, dword [ebx + 0x300]
push 0
mov edx, dword [ecx]
call dword [edx + 0x58]
push 0x6c
call fcn.00508b18
mov esi, eax
add esp, 4
mov dword [esp + 0x18], esi
test esi, esi
mov dword [esp + 0x38], 6
je 0x435683
mov ecx, esi
call fcn.00462d50
mov dword [esi], 0x5a85e0
jmp 0x435685
xor esi, esi
push 0x3c
mov dword [esp + 0x3c], ebp
mov dword [ebx + 0x2d4], esi
call fcn.00508b18
add esp, 4
mov dword [esp + 0x18], eax
test eax, eax
mov dword [esp + 0x38], 7
je 0x4356b2
mov ecx, eax
call fcn.0046db50
jmp 0x4356b4
xor eax, eax
push 1
mov ecx, 5
sub esp, 0x14
lea esi, [esp + 0x34]
mov edi, esp
mov dword [esp + 0x3c], 0x43828000
mov dword [esp + 0x40], 0x43390000
mov dword [esp + 0x34], 0x43740000
mov dword [esp + 0x38], 0x433e0000
mov dword [esp + 0x50], ebp
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov dword [ebx + 0x2d8], eax
call fcn.0046e240
mov eax, dword [ebx + 0x2d8]
push eax
xor eax, eax
sub esp, 0x10
mov ecx, esp
mov dword [ecx], eax
mov eax, 1
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov ecx, dword [ebx + 0x2d4]
call fcn.00462e50
mov ecx, dword [ebx + 0x2d4]
xor edi, edi
push edi
mov edx, dword [ecx]
call dword [edx + 0x58]
push 0x484
mov dword [esp + 0x20], edi
call fcn.00508b18
add esp, 4
mov dword [esp + 0x18], eax
cmp eax, edi
mov dword [esp + 0x38], 8
je 0x435766
mov ecx, dword [str..mc]
push ecx
push 1
push str.mua000.mcb
mov ecx, eax
call fcn.004a2f60
jmp 0x435768
xor eax, eax
mov dword [ebx + 0x38], eax
mov eax, dword [ebx + 0x24]
cmp eax, edi
mov dword [esp + 0x38], ebp
je 0x435785
call eax
cmp eax, 1
jne 0x435785
mov dword [esp + 0x1c], 2
push 0x6c
call fcn.00508b18
mov esi, eax
add esp, 4
mov dword [esp + 0x18], esi
cmp esi, edi
mov dword [esp + 0x38], 9
je 0x4357b4
mov ecx, esi
call fcn.00462d50
mov dword [esi], 0x5a8580
mov dword [esp + 0x10], esi
jmp 0x4357ba
mov dword [esp + 0x10], edi
mov esi, edi
push 0xc
mov dword [esp + 0x3c], ebp
mov dword [esi + 4], str.Con_Forward
call fcn.00508b18
add esp, 4
cmp eax, edi
je 0x4357de
mov dword [eax + 4], edi
mov dword [eax], 0x5a8528
mov edi, eax
push str.mub001.mcb
mov ecx, edi
call fcn.00463cb0
mov eax, dword [esp + 0x1c]
push edi
sub esp, 0x10
mov ecx, esi
mov edx, esp
mov dword [edx], eax
mov eax, 1
mov dword [edx + 4], eax
mov dword [edx + 8], eax
xor eax, eax
mov dword [edx + 0xc], eax
call fcn.00462e50
push 3
mov ecx, esi
call fcn.00463050
mov eax, dword [ebx + 0x24]
xor esi, esi
test eax, eax
je 0x43582b
call eax
cmp eax, 1
jne 0x43582b
mov esi, 2
push 0x6c
call fcn.00508b18
mov ebp, eax
add esp, 4
mov dword [esp + 0x18], ebp
test ebp, ebp
mov dword [esp + 0x38], 0xa
je 0x43585b
mov ecx, ebp
call fcn.00462d50
mov dword [ebp], 0x5a8580
mov dword [esp + 0x14], ebp
jmp 0x435867
mov dword [esp + 0x14], 0
mov ebp, dword [esp + 0x14]
push 0xc
mov dword [esp + 0x3c], 0xffffffff
mov dword [ebp + 4], str.Con_Forward
call fcn.00508b18
xor edi, edi
add esp, 4
cmp eax, edi
je 0x435891
mov dword [eax + 4], edi
mov dword [eax], 0x5a8528
mov edi, eax
push str.mub002.mcb
mov ecx, edi
call fcn.00463cb0
push edi
sub esp, 0x10
mov ecx, esp
mov dword [ecx], esi
mov esi, 1
mov eax, esi
mov dword [ecx + 4], esi
mov dword [ecx + 8], eax
xor eax, eax
mov dword [ecx + 0xc], eax
mov ecx, ebp
call fcn.00462e50
push 0xa
mov ecx, ebp
call fcn.00463050
push 0x6c
xor ebp, ebp
call fcn.00508b18
mov edi, eax
add esp, 4
mov dword [esp + 0x18], edi
cmp edi, ebp
mov dword [esp + 0x38], 0xb
je 0x4358f4
mov ecx, edi
call fcn.00462d50
mov dword [edi], 0x5a8580
jmp 0x4358f6
xor edi, edi
push 0xc
mov dword [esp + 0x3c], 0xffffffff
mov dword [edi + 4], str.Con_Forward
call fcn.00508b18
add esp, 4
cmp eax, ebp
je 0x43591e
mov dword [eax + 4], ebp
mov dword [eax], 0x5a8528
mov ebp, eax
push str.mub003.mcb
mov ecx, ebp
call fcn.00463cb0
push ebp
xor eax, eax
sub esp, 0x10
mov ecx, edi
mov edx, esp
mov dword [edx], eax
mov eax, 1
mov dword [edx + 4], esi
mov dword [edx + 8], eax
xor eax, eax
mov dword [edx + 0xc], eax
call fcn.00462e50
push 7
mov ecx, edi
call fcn.00463050
push 0x6c
mov dword [ebx + 0x330], edi
call fcn.00508b18
mov ebp, eax
add esp, 4
mov dword [esp + 0x18], ebp
test ebp, ebp
mov dword [esp + 0x38], 0xc
je 0x435986
mov ecx, ebp
call fcn.00462d50
mov dword [ebp], 0x5a8580
jmp 0x435988
xor ebp, ebp
push 0xc
mov dword [esp + 0x3c], 0xffffffff
mov dword [ebp + 4], str.Con_Forward
call fcn.00508b18
xor esi, esi
add esp, 4
cmp eax, esi
je 0x4359b2
mov dword [eax + 4], esi
mov dword [eax], 0x5a8528
mov esi, eax
push str.mub004.mcb
mov ecx, esi
call fcn.00463cb0
push esi
xor eax, eax
sub esp, 0x10
mov ecx, esp
mov dword [ecx], eax
mov eax, 1
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
xor eax, eax
mov dword [ecx + 0xc], eax
mov ecx, ebp
call fcn.00462e50
push 8
mov ecx, ebp
call fcn.00463050
push 0x6c
call fcn.00508b18
mov esi, eax
add esp, 4
mov dword [esp + 0x18], esi
test esi, esi
mov dword [esp + 0x38], 0xd
je 0x435a13
mov ecx, esi
call fcn.00462d50
mov dword [esi], 0x5a8580
jmp 0x435a15
xor esi, esi
push 0xc
mov dword [esp + 0x3c], 0xffffffff
mov dword [esi + 4], str.Con_Forward
call fcn.00508b18
xor ecx, ecx
add esp, 4
cmp eax, ecx
je 0x435a43
mov dword [eax + 4], ecx
mov dword [eax], 0x5a8528
mov dword [esp + 0x18], eax
jmp 0x435a47
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x18]
push str.mub016.mcb
call fcn.00463cb0
mov edx, dword [esp + 0x18]
xor eax, eax
push edx
sub esp, 0x10
mov ecx, esp
mov dword [ecx], eax
mov eax, 1
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
xor eax, eax
mov dword [ecx + 0xc], eax
mov ecx, esi
call fcn.00462e50
push 2
mov ecx, esi
call fcn.00463050
push 0xc
call fcn.00508b18
xor ecx, ecx
add esp, 4
cmp eax, ecx
je 0x435aa5
mov dword [eax + 4], ecx
mov dword [eax], 0x5a84d0
mov dword [eax + 8], ecx
mov dword [esp + 0x18], eax
jmp 0x435aa9
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x18]
push str.mua001.mcb
call fcn.0046a510
mov edx, dword [esp + 0x18]
xor eax, eax
push edx
sub esp, 0x10
mov ecx, esp
mov dword [ecx], eax
mov eax, 1
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
xor eax, eax
mov dword [ecx + 0xc], eax
mov ecx, dword [ebx + 0x27c]
call fcn.00462e50
mov edx, dword [esp + 0x10]
mov ecx, dword [ebx + 0x27c]
push edx
call fcn.00462bf0
mov eax, dword [esp + 0x14]
mov ecx, dword [ebx + 0x27c]
push eax
call fcn.00462bf0
mov ecx, dword [ebx + 0x27c]
push edi
call fcn.00462bf0
mov ecx, dword [ebx + 0x27c]
push ebp
call fcn.00462bf0
mov ecx, dword [ebx + 0x27c]
push esi
call fcn.00462bf0
mov ecx, dword [ebx + 0x2b0]
push ecx
mov ecx, dword [esp + 0x14]
call fcn.00570fc0
mov edx, dword [ebx + 0x280]
mov ecx, dword [esp + 0x14]
push edx
call fcn.00570fc0
mov eax, dword [ebx + 0x29c]
mov ecx, edi
push eax
call fcn.00570fc0
mov ecx, dword [ebx + 0x288]
push ecx
mov ecx, ebp
call fcn.00570fc0
mov edx, dword [ebx + 0x298]
mov ecx, esi
push edx
call fcn.00570fc0
mov ecx, ebx
call fcn.00435c10
mov ecx, ebx
call fcn.00436bb0
mov ecx, ebx
call fcn.0043c710
mov ecx, ebx
call fcn.0043ce80
mov ecx, ebx
call fcn.0043de90
mov ecx, ebx
call fcn.0043f030
mov ecx, ebx
call fcn.00443f40
mov ecx, ebx
call fcn.00444230
mov ecx, ebx
call fcn.00445370
mov ecx, ebx
call fcn.00445700
mov ecx, ebx
call fcn.00445d60
mov ecx, ebx
call fcn.00446380
mov ecx, ebx
call fcn.0044bda0
mov eax, dword [ebx + 0x27c]
push eax
mov ecx, dword [0x5e0324]
call fcn.00461e50
mov ecx, dword [ebx + 0x27c]
push ecx
mov ecx, ebx
call fcn.0045a410
mov ecx, dword [esp + 0x30]
pop edi
pop esi
pop ebp
mov eax, 1
mov dword fs:[0], ecx
pop ebx
add esp, 0x2c
ret