Function at 0x436631
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x671870
mov eax, dword fs:[0]
push eax
sub esp, 0x10c
push esi
push edi
mov eax, dword [0x6ee104]
xor eax, esp
push eax
lea eax, [esp + 0x118]
mov dword fs:[0], eax
mov eax, dword [ebx + 8]
lea ecx, [eax + 0x80914]
call fcn.0044fd1d
mov ecx, eax
call fcn.0045619f
fstp dword [esp + 0x18]
mov eax, dword [ebx + 8]
lea ecx, [esp + 0x54]
push ecx
lea ecx, [eax + 0x80914]
call fcn.0044fd1d
mov ecx, eax
call fcn.00456515
push str.obje002_000.bmp
lea ecx, [esp + 0x20]
mov byte [ebx + 0x184a], 0
call fcn.00404096
xor esi, esi
push esi
xor edi, edi
inc edi
push edi
lea ecx, [ebx + 0x44]
push 0x15
lea edx, [esp + 0x28]
mov dword [esp + 0x12c], esi
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
or dword [esp + 0x120], 0xffffffff
push esi
push edi
lea ecx, [esp + 0x24]
call fcn.00403f20
push str.obje003_000.bmp
lea ecx, [esp + 0x20]
call fcn.00404096
push esi
push edi
lea ecx, [ebx + 0xd8]
push 0x15
lea edx, [esp + 0x28]
mov dword [esp + 0x12c], edi
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
or dword [esp + 0x120], 0xffffffff
push esi
push edi
lea ecx, [esp + 0x24]
call fcn.00403f20
push str.obje004_000.bmp
lea ecx, [esp + 0x20]
call fcn.00404096
push esi
push edi
lea ecx, [ebx + 0x6a4]
push 0x15
lea edx, [esp + 0x28]
mov dword [esp + 0x12c], 2
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
or dword [esp + 0x120], 0xffffffff
push esi
push edi
lea ecx, [esp + 0x24]
call fcn.00403f20
push str.obje004_001.bmp
lea ecx, [esp + 0x20]
call fcn.00404096
push esi
lea ecx, [ebx + 0x738]
push edi
mov dword [esp + 0x128], 3
mov eax, dword [ecx]
push 0x15
lea edx, [esp + 0x28]
push edx
call dword [eax + 0x140]
or dword [esp + 0x120], 0xffffffff
push esi
push edi
lea ecx, [esp + 0x24]
call fcn.00403f20
push str.obje004_002.bmp
lea ecx, [esp + 0x20]
call fcn.00404096
push esi
push edi
lea ecx, [ebx + 0x7cc]
push 0x15
lea edx, [esp + 0x28]
mov dword [esp + 0x12c], 4
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
or dword [esp + 0x120], 0xffffffff
push esi
push edi
lea ecx, [esp + 0x24]
call fcn.00403f20
push str.obje004_003.bmp
lea ecx, [esp + 0x20]
call fcn.00404096
push esi
push edi
lea ecx, [ebx + 0x860]
push 0x15
lea edx, [esp + 0x28]
mov dword [esp + 0x12c], 5
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
or dword [esp + 0x120], 0xffffffff
push esi
push edi
lea ecx, [esp + 0x24]
call fcn.00403f20
push str.obje004_004.bmp
lea ecx, [esp + 0x20]
call fcn.00404096
push esi
push edi
lea ecx, [ebx + 0x8f4]
push 0x15
lea edx, [esp + 0x28]
mov dword [esp + 0x12c], 6
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
or dword [esp + 0x120], 0xffffffff
push esi
push edi
lea ecx, [esp + 0x24]
call fcn.00403f20
push str.obje004_005.bmp
lea ecx, [esp + 0x20]
call fcn.00404096
push esi
push edi
lea ecx, [ebx + 0x988]
push 0x15
lea edx, [esp + 0x28]
mov dword [esp + 0x12c], 7
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
or dword [esp + 0x120], 0xffffffff
push esi
push edi
lea ecx, [esp + 0x24]
call fcn.00403f20
push str.obje004_006.bmp
lea ecx, [esp + 0x20]
call fcn.00404096
push esi
push edi
lea ecx, [ebx + 0xa1c]
push 0x15
lea edx, [esp + 0x28]
mov dword [esp + 0x12c], 8
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
or dword [esp + 0x120], 0xffffffff
push esi
push edi
lea ecx, [esp + 0x24]
call fcn.00403f20
push str.obje004_007.bmp
lea ecx, [esp + 0x20]
call fcn.00404096
push esi
push edi
lea ecx, [ebx + 0xab0]
push 0x15
lea edx, [esp + 0x28]
mov dword [esp + 0x12c], 9
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
or dword [esp + 0x120], 0xffffffff
push esi
push edi
lea ecx, [esp + 0x24]
call fcn.00403f20
push str.obje004_008.bmp
lea ecx, [esp + 0x20]
call fcn.00404096
push esi
push edi
lea ecx, [ebx + 0xb44]
push 0x15
lea edx, [esp + 0x28]
mov dword [esp + 0x12c], 0xa
mov eax, dword [ecx]
push edx
call dword [eax + 0x140]
or dword [esp + 0x120], 0xffffffff
push esi
push edi
lea ecx, [esp + 0x24]
call fcn.00403f20
fld dword [0x6b270c]
fst dword [esp + 0xc]
mov eax, dword [esp + 0xc]
fld dword [0x6b2708]
mov dword [esp + 0xa4], eax
fstp dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa8], eax
fst dword [esp + 0xc]
mov eax, dword [esp + 0xc]
fld dword [0x6b2704]
mov dword [esp + 0xac], eax
fstp dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb0], eax
fst dword [esp + 0xc]
mov eax, dword [esp + 0xc]
fld dword [0x6b2700]
mov dword [esp + 0xb4], eax
fstp dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb8], eax
fst dword [esp + 0xc]
mov eax, dword [esp + 0xc]
fld dword [0x6b26fc]
mov dword [esp + 0xbc], eax
fstp dword [esp + 0x10]
mov eax, dword [esp + 0x10]
fst dword [esp + 0xc]
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0xc]
fld dword [0x6b26f8]
fstp dword [esp + 0x10]
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x10]
fst dword [esp + 0xc]
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0xc]
fld dword [0x6b26f4]
fstp dword [esp + 0x10]
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0x10]
fst dword [esp + 0xc]
mov dword [esp + 0xd0], eax
mov eax, dword [esp + 0xc]
fld dword [0x6b26f0]
fstp dword [esp + 0x10]
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0x10]
fst dword [esp + 0xc]
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0xc]
fld dword [0x6b26ec]
fstp dword [esp + 0x10]
mov dword [esp + 0xdc], eax
mov eax, dword [esp + 0x10]
fstp dword [esp + 0xc]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0xc]
fld dword [0x6b26e8]
fstp dword [esp + 0x10]
mov dword [esp + 0xe4], eax
mov eax, dword [esp + 0x10]
fld dword [0x6b26e4]
fstp dword [esp + 0xc]
mov dword [esp + 0xe8], eax
mov eax, dword [esp + 0xc]
fld dword [0x6b26e0]
fstp dword [esp + 0x10]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x10]
fld dword [0x6b26dc]
fstp dword [esp + 0xc]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0xc]
fld dword [0x6b25bc]
fstp dword [esp + 0x10]
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x10]
fld dword [0x6b21f4]
fstp dword [esp + 0xc]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0xc]
fld dword [0x6b26d8]
fstp dword [esp + 0x10]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x10]
fld dword [0x6b26d4]
fstp dword [esp + 0xc]
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0xc]
fld dword [0x6b26d0]
fstp dword [esp + 0x10]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x10]
fld dword [0x6b26cc]
fstp dword [esp + 0xc]
mov dword [esp + 0x78], eax
fld dword [0x6b26c8]
mov eax, dword [esp + 0xc]
fstp dword [esp + 0x10]
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x10]
fld dword [0x6b26c4]
fstp dword [esp + 0xc]
mov dword [esp + 0x80], eax
fld dword [0x6b26c0]
mov eax, dword [esp + 0xc]
fstp dword [esp + 0x10]
fld dword [0x6b26bc]
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0x10]
fstp dword [esp + 0xc]
fld dword [0x6b26b8]
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0xc]
fstp dword [esp + 0x10]
fld dword [0x6b26b4]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x10]
fstp dword [esp + 0xc]
fld dword [0x6b26b0]
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0xc]
fstp dword [esp + 0x10]
fld dword [0x6b26ac]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x10]
fstp dword [esp + 0xc]
fld dword [0x6b26a8]
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0xc]
fstp dword [esp + 0x10]
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0xa0], eax
lea eax, [ebx + 0x200]
mov dword [esp + 0x14], eax
lea eax, [ebx + 0xbd8]
mov dword [esp + 0x48], eax
lea eax, [ebx + 0x6a4]
mov dword [esp + 0x40], esi
mov dword [esp + 0x110], 4
mov dword [esp + 0xf8], 3
mov dword [esp + 0x100], 5
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], esi
mov dword [esp + 0x44], eax
jmp 0x436c72
xor edi, edi
inc edi
xor esi, esi
push dword [esp + 0x110]
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x18]
mov eax, dword [eax]
push edx
push dword [esp + 0x100]
mov dword [esp + 0x18], eax
push edx
push 2
pop eax
push eax
mov ecx, dword [esp + 0x28]
push edx
xor eax, eax
inc eax
push eax
push edx
xor eax, eax
push eax
push edx
push dword [esp + 0x128]
push 9
pop eax
push eax
lea eax, [ebx + 0xd8]
push eax
mov eax, dword [esp + 0x40]
call dword [eax + 0x84]
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
push esi
call dword [eax + 0x18]
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
push edi
call dword [eax + 8]
mov edi, dword [esp + 0x14]
mov eax, dword [edi]
push esi
mov ecx, edi
call dword [eax + 0xc]
mov eax, dword [esp + 0x40]
lea eax, [esp + eax*8 + 0xa8]
fld dword [eax - 4]
mov dword [esp + 0xc], eax
fmul dword [esp + 0x18]
call fcn.0062e180
mov dword [esp + 0xec], eax
mov eax, dword [esp + 0xc]
fld dword [eax]
fmul dword [esp + 0x18]
call fcn.0062e180
mov edx, dword [edi]
push eax
push dword [esp + 0xf0]
mov ecx, edi
call dword [edx + 0x2c]
fld dword [esp + 0x18]
push dword [esp + 0x58]
push dword [esp + 0x58]
push ecx
mov ecx, edi
fstp dword [esp]
call fcn.004a3da8
mov eax, dword [edi]
push esi
mov ecx, edi
call dword [eax + 0x28]
mov edi, dword [esp + 0x44]
mov eax, dword [edi]
lea ecx, [esp + 0x4c]
push ecx
mov ecx, edi
call dword [eax + 0x1c]
mov esi, dword [esp + 0x48]
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x28]
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x28], eax
mov eax, dword [esi]
sub esp, 0x10
mov edi, esp
lea esi, [esp + 0x2c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [esp + 0x58]
mov ecx, esi
call dword [eax + 0x4c]
mov eax, dword [esi]
push 0xff
mov ecx, esi
call dword [eax + 0x48]
mov eax, dword [esi]
push 0xf
mov ecx, esi
call dword [eax + 0x50]
mov edi, dword [esp + 0x40]
fld dword [esp + edi*8 + 0x5c]
fmul dword [esp + 0x18]
call fcn.0062e180
fld dword [esp + edi*8 + 0x60]
fmul dword [esp + 0x18]
mov dword [esp + 0x104], eax
call fcn.0062e180
mov edx, dword [esi]
push eax
push dword [esp + 0x108]
mov ecx, esi
call dword [edx + 0x44]
push esi
push dword [esp + 0x18]
lea eax, [ebx + 0x10]
push eax
call fcn.00433965
add dword [esp + 0x44], 0x94
add dword [esp + 0x14], 0x84
inc edi
add esi, 0x15c
mov dword [esp + 0x40], edi
mov dword [esp + 0x48], esi
cmp edi, 9
jb 0x436c6d
mov eax, dword [ebx + 8]
cmp dword [eax + 0x360], 0
jne 0x436e17
lea ecx, [ebx + 0x200]
mov eax, dword [ecx]
call dword [eax + 0x7c]
mov eax, dword [ebx + 8]
cmp dword [eax + 0x364], 0
je 0x436e4f
lea ecx, [ebx + 0x200]
mov eax, dword [ecx]
call dword [eax + 0x7c]
lea ecx, [ebx + 0x308]
mov eax, dword [ecx]
call dword [eax + 0x7c]
lea ecx, [ebx + 0x38c]
mov eax, dword [ecx]
call dword [eax + 0x7c]
lea ecx, [ebx + 0x410]
mov eax, dword [ecx]
call dword [eax + 0x7c]
mov eax, dword [ebx + 8]
or dword [ebx + 0x185c], 0xffffffff
mov dword [ebx + 0x18], eax
mov dword [ebx + 0x3c], 2
mov ecx, dword [esp + 0x118]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret