Function at 0x436670
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x3c]
cmp eax, dword [ecx + 8]
jbe 0x4375c6
sub esp, 0xbc
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov dword [esp + 0xb4], eax
jmp 0x436eb9
mov byte [esp + 0x24], al
mov eax, edx
xor edx, edx
div ebx
mov dword [esp + 0x94], edx
mov eax, dword [esp + 0xb8]
mov edx, dword [esp + 0x38]
movzx ebx, byte [esp + 0x24]
mov edx, eax
mov eax, ebx
mov ebx, esi
mov esi, dword [esp + 0x38]
mov dword [esp + 0x3c], ebx
mov ebx, dword [esp + 0x90]
cmp dword [esp + 0x8c], ebx
je 0x43694d
mov ebx, dword [0x7806a0]
test ebx, ebx
jne 0x436941
mov dword [esp + 0x78], esi
mov dword [esp + 0x74], ebp
mov ebx, dword [0x7800ec]
mov ebp, dword [0x7800e8]
mov esi, dword [esp + 0x94]
cmp ebx, esi
jbe 0x4375b2
mov ebx, dword [ebp + esi*4]
cmp edx, ebx
jne 0x43675e
mov ebx, dword [esp + 0x78]
mov ebp, dword [esp + 0x74]
mov esi, dword [esp + 0x3c]
mov dword [esp + 0x38], ebx
inc dword [esp + 0x8c]
mov edx, dword [esp + 0x94]
add edx, dword [esp + 0x98]
mov ebx, dword [esp + 0x90]
test ebx, ebx
jne 0x4366a9
jmp 0x4375ad
mov dword [esp + 0x70], edi
mov dword [esp + 0x9c], ebx
mov byte [esp + 0x27], al
mov dword [esp], edx
mov dword [esp + 4], ebx
cmp ecx, 2
setg al
mov byte [esp + 8], al
call fcn.0043d590
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x43692b
mov edx, dword [esp + 0x4c]
cmp edx, 2
jg 0x43691f
cmp edx, 1
jle 0x4367bc
mov ebx, dword [esp + 0x9c]
cmp dword [ebx + 4], 1
jne 0x4367fc
mov ebp, dword [ebx + 0x2c]
test ebp, ebp
je 0x4367bc
mov esi, dword [ebp + 0x78]
test esi, esi
jle 0x4367e5
movzx eax, byte [esp + 0x27]
mov ecx, dword [esp + 0x78]
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x74]
mov esi, dword [esp + 0x3c]
mov edx, dword [esp + 0xb8]
mov edi, ebx
mov ebx, ecx
mov ecx, dword [esp + 0x4c]
jmp 0x436731
mov ebp, dword [ebp + 0x4c]
test ebp, ebp
je 0x4367bc
cmp dword [ebp + 0x48], 2
jne 0x4367bc
movzx ebp, byte [ebp + 0x65]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4367bc
mov dword [esp], ebx
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 8], eax
call fcn.00437ed0
mov eax, dword [esp + 0x14]
test eax, eax
setne cl
mov edx, dword [esp + 0x18]
test edx, edx
setne bl
movzx ebp, byte [esp + 0x1c]
xchg ebp, eax
mov byte [esp + 0x25], al
xchg ebp, eax
mov esi, dword [esp + 0xc]
mov edi, dword [esp + 0x10]
mov dword [esp + 0x2c], edi
or ebx, ecx
test bl, bl
je 0x436913
mov ebx, dword [esp + 0x70]
test ebx, ebx
mov ecx, esi
xchg esi, ebx
sete bl
xchg esi, ebx
mov edi, dword [esp + 0x78]
test edi, edi
xchg ebp, ebx
sete bl
xchg ebp, ebx
and ebp, esi
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4368e0
movzx ebx, byte [esp + 0x25]
test bl, bl
jne 0x436890
movzx ebx, byte [esp + 0x27]
mov ebp, dword [esp + 0x2c]
mov esi, ecx
mov ecx, edx
mov edx, dword [esp + 0x4c]
mov edi, eax
mov eax, ebx
mov ebx, edi
jmp 0x4367d1
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x68], edx
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
call fcn.0043d320
mov eax, dword [esp + 4]
movzx ecx, byte [esp + 8]
test eax, eax
jne 0x4368cb
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x68]
mov ebx, 1
jmp 0x436879
mov dword [esp + 0xc0], eax
mov byte [esp + 0xc4], cl
add esp, 0xbc
ret
mov dword [esp + 0x28], edx
cmp ebx, eax
xchg ebp, ebx
seta bl
xchg ebp, ebx
cmp edi, edx
xchg esi, ebx
sete bl
xchg esi, ebx
setg dl
and esi, ebp
or edx, esi
test dl, dl
je 0x43690a
mov edx, dword [esp + 0x28]
jmp 0x43686b
mov edx, edi
mov eax, ebx
jmp 0x43686b
mov ecx, esi
mov ebx, dword [esp + 0x70]
mov edi, dword [esp + 0x78]
jmp 0x43690a
mov ebx, dword [esp + 0x9c]
jmp 0x4367fc
mov dword [esp + 0xc0], eax
mov byte [esp + 0xc4], 0
add esp, 0xbc
ret
mov eax, dword [esp + 0xb4]
jmp 0x436eb9
inc ecx
mov ebx, dword [esp + 0x3c]
mov edx, dword [esp + 0xb4]
mov ebx, dword [esp + 0xb8]
mov byte [esp + 0x24], al
mov eax, esi
mov esi, ebp
mov ebp, dword [esp + 0x3c]
cmp ecx, 4
jge 0x436a5b
mov dword [esp + 0x88], ebp
mov dword [esp + 0x84], esi
mov edx, dword fs:[0x14]
mov edx, dword [edx]
mov edx, dword [edx + 0x18]
mov ebx, dword [edx + 0x90]
mov dword [esp + 0x30], ebx
mov ebp, dword [edx + 0x94]
mov dword [edx + 0x90], ebp
shl ebx, 0x11
mov esi, dword [esp + 0x30]
xor ebx, esi
mov esi, ebp
xor ebp, ebx
shr ebx, 7
xor ebx, ebp
mov ebp, esi
shr esi, 0x10
xor esi, ebx
mov dword [edx + 0x94], esi
lea edx, [esi + ebp]
mov ebx, dword [0x780170]
mov ebp, dword [0x780178]
mov esi, dword [0x780174]
test ebx, ebx
je 0x4375c0
mov dword [esp + 0x50], edx
mov dword [esp + 0x80], eax
mov eax, edx
xor edx, edx
div ebx
test ebp, ebp
je 0x4375bb
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x7c], edx
mov eax, dword [esp + 0x50]
xor edx, edx
div ebp
mov edx, dword [esi + edx*4]
mov dword [esp + 0x8c], 0
mov dword [esp + 0x90], ebx
mov ebx, dword [esp + 0x7c]
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], edx
mov edx, dword [esp + 0xb8]
mov ebx, dword [esp + 0x88]
mov ebp, dword [esp + 0x84]
mov esi, dword [esp + 0x80]
movzx eax, byte [esp + 0x24]
jmp 0x4366d4
movzx ecx, byte [esp + 0x24]
test cl, cl
je 0x436b90
mov eax, edx
jmp 0x436eb9
mov ebx, dword [esp + 0x64]
lea ecx, [ebx + 1]
mov eax, dword [esp + 0xb4]
movzx edx, byte [esp + 0x23]
mov ebx, dword [esp + 0x5c]
cmp ebx, ecx
jle 0x436ae7
mov dword [esp + 0x64], ecx
mov eax, dword [esp + 0xa8]
mov edx, dword [eax + ecx*4]
mov dword [esp], edx
call fcn.0043ce70
movzx eax, byte [esp + 4]
test al, al
jne 0x436a6f
nop
nop
lea eax, [0x780618]
mov dword [esp], eax
call fcn.00409040
call fcn.0043ce10
mov eax, dword [esp]
mov dword [esp + 0xac], eax
nop
nop
lea ecx, [0x780618]
mov dword [esp], ecx
call fcn.00409250
mov eax, dword [esp + 0xac]
test eax, eax
jne 0x437164
mov eax, dword [0x7958a0]
test eax, eax
jne 0x43714e
xor eax, eax
test al, al
je 0x436cc8
nop
nop
lea eax, [0x780618]
mov dword [esp], eax
call fcn.00409040
call fcn.0043ce10
mov eax, dword [esp]
test eax, eax
je 0x436b29
mov ecx, dword [eax + 0xb70]
test ecx, ecx
je 0x437142
mov dword [esp + 0xb0], eax
nop
nop
lea ecx, [0x780618]
mov dword [esp], ecx
call fcn.00409250
mov eax, dword [esp + 0xb0]
test eax, eax
je 0x436cc8
mov dword [esp], eax
call fcn.0043ace0
movzx eax, byte [esp + 0x23]
test al, al
jne 0x436c9c
mov ecx, dword [esp + 0xb0]
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x34]
mov ebp, dword [esp + 0x38]
mov edx, dword [esp + 0xb4]
mov eax, ebp
mov edi, ebx
mov esi, dword [esp + 0x40]
mov ebp, dword [esp + 0x3c]
mov ebx, ecx
mov dword [esp + 0x40], esi
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x38], eax
mov dword [esp + 0x34], edi
mov dword [esp + 0xb0], ebx
mov ecx, dword [0x7958a0]
test ecx, ecx
je 0x4372f7
mov ecx, dword [ebx + 0xb70]
test ecx, ecx
jne 0x4372c7
xor ecx, ecx
test cl, cl
jne 0x437257
test edi, edi
setne cl
test eax, eax
setne dl
or edx, ecx
mov byte [esp + 0x26], dl
test dl, dl
je 0x437248
sub edi, ebp
sbb eax, esi
mov dword [esp + 0x54], edi
mov dword [esp + 0x58], eax
mov ecx, dword [0x7800e8]
mov dword [esp + 0xa8], ecx
mov edx, dword [0x7800ec]
mov dword [esp + 0x5c], edx
nop
nop
lea ebx, [0x780618]
mov dword [esp], ebx
call fcn.00409040
mov eax, dword [0x7806a0]
test eax, eax
jne 0x43722c
mov eax, dword [esp + 0xb0]
test byte [eax], al
mov ecx, dword [eax + 0x13f0]
test ecx, ecx
jne 0x43722c
mov ecx, dword [0x780658]
test ecx, ecx
jne 0x4371e4
call fcn.0043ae60
mov eax, dword [esp + 0xb0]
cmp dword [esp], eax
jne 0x437597
mov dword [esp], eax
call fcn.0043cd90
nop
nop
lea eax, [0x780618]
mov dword [esp], eax
call fcn.00409250
mov eax, dword [esp + 0xb4]
mov ecx, dword [eax + 0x18]
movzx edx, byte [ecx + 0x84]
mov byte [esp + 0x23], dl
test dl, dl
jne 0x4371aa
xor ecx, ecx
jmp 0x436a82
mov eax, dword [esp + 0xb4]
mov ecx, dword [eax + 0x18]
mov byte [ecx + 0x84], 1
lea ecx, [0x78064c]
mov dword [esp], ecx
mov dword [esp + 4], 1
call fcn.00402020
jmp 0x436b64
lea eax, [0x7958cc]
mov dword [esp], eax
call fcn.00401f10
mov eax, dword [esp + 4]
test eax, eax
jne 0x4370e5
xor eax, eax
test al, al
jne 0x436d71
movzx eax, byte [esp + 0x26]
test al, al
jne 0x436d58
xor eax, eax
test al, al
jne 0x436d0c
call fcn.00435b80
mov eax, dword [esp + 0xb4]
jmp 0x436eb9
lea eax, [0x780610]
mov dword [esp], eax
call fcn.00402100
mov eax, dword [esp + 4]
test eax, eax
sete cl
mov edx, dword [esp + 8]
test edx, edx
sete bl
and ebx, ecx
test bl, bl
je 0x436d39
call fcn.0042ad10
jmp 0x436cfb
mov ecx, dword [esp + 0x38]
cmp edx, ecx
sete cl
setg dl
mov ebx, dword [esp + 0x34]
cmp eax, ebx
seta al
and eax, ecx
or edx, eax
test dl, dl
jne 0x436d32
jmp 0x436cfb
lea eax, [0x7958cc]
mov dword [esp], eax
call fcn.00401f10
mov eax, dword [esp + 4]
test eax, eax
setne al
jmp 0x436cf7
lea eax, [0x780610]
mov dword [esp], eax
mov ecx, dword [esp + 0x34]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x38]
mov dword [esp + 8], ecx
call fcn.00402120
mov eax, dword [esp + 0xb4]
mov ecx, dword [eax + 0x18]
mov edx, dword [ecx + 0x54]
test edx, edx
jne 0x43756b
movzx ecx, byte [ecx + 0x84]
test cl, cl
jne 0x437555
mov ecx, dword [0x795950]
test ecx, ecx
setne cl
mov edx, dword [0x795954]
test edx, edx
setne dl
or ecx, edx
test cl, cl
je 0x4370d8
xor ecx, ecx
xor edx, edx
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.0042ae10
mov eax, dword [esp + 8]
mov dword [esp + 0x48], eax
lea eax, [0x780610]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00402120
call fcn.0045b0d0
mov eax, dword [esp]
mov ecx, dword [esp + 4]
lea edx, [0x780608]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00402120
mov eax, dword [0x795950]
test eax, eax
setne al
mov ecx, dword [0x795954]
test ecx, ecx
setne cl
or eax, ecx
test al, al
je 0x436e53
mov eax, dword [esp + 0x48]
test eax, eax
je 0x4370c7
nop
nop
lea eax, [0x780618]
mov dword [esp], eax
call fcn.00409040
call fcn.0043ce10
mov eax, dword [esp]
mov dword [esp + 0xb0], eax
nop
nop
lea ecx, [0x780618]
mov dword [esp], ecx
call fcn.00409250
mov eax, dword [esp + 0xb0]
test eax, eax
je 0x4370b6
mov dword [esp], eax
call fcn.0043ace0
mov eax, dword [esp + 0x48]
test eax, eax
jne 0x437036
movzx eax, byte [esp + 0x23]
test al, al
jne 0x43700a
mov eax, dword [esp + 0xb4]
mov ecx, dword [eax + 0x18]
mov ecx, dword [ecx + 0x54]
mov edx, dword [0x7806a0]
test edx, edx
je 0x436ed7
call fcn.00436420
mov eax, dword [esp + 0xb4]
jmp 0x436eb9
mov dword [esp + 0xb8], ecx
test byte [ecx], al
mov edx, dword [ecx + 0x13f0]
test edx, edx
jne 0x437544
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00437ed0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x40], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x34], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x38], ebx
movzx ebp, byte [0x7957ed]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x436f44
movzx ebp, byte [0x7957ee]
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x43750f
mov ebp, dword [0x759438]
mov ebp, dword [ebp]
test ebp, ebp
jne 0x4374fa
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
call fcn.0043d320
mov eax, dword [esp + 4]
movzx ecx, byte [esp + 8]
test eax, eax
jne 0x4374e5
mov eax, dword [0x780658]
test eax, eax
jne 0x43747e
lea eax, [0x7958cc]
mov dword [esp], eax
call fcn.00401f10
mov eax, dword [esp + 4]
test eax, eax
jne 0x43743a
xor eax, eax
test al, al
jne 0x437396
mov edx, dword [esp + 0xb4]
mov ebx, dword [edx + 0x18]
mov ebp, dword [0x7958b0]
movzx ebx, byte [ebx + 0x84]
test bl, bl
je 0x43734f
xor eax, eax
test al, al
jne 0x437327
mov ebx, dword [edx + 0x18]
movzx ebp, byte [ebx + 0x84]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4372fe
mov ebx, dword [esp + 0xb8]
mov ebp, dword [esp + 0x3c]
mov esi, dword [esp + 0x40]
mov edi, dword [esp + 0x34]
mov eax, dword [esp + 0x38]
xor ecx, ecx
xor ecx, ecx
mov byte [esp + 0x24], cl
xor ecx, ecx
jmp 0x43696c
mov eax, dword [esp + 0xb4]
mov ecx, dword [eax + 0x18]
mov byte [ecx + 0x84], 1
lea ecx, [0x78064c]
mov dword [esp], ecx
mov dword [esp + 4], 1
call fcn.00402020
jmp 0x436eb2
nop
nop
mov dword [esp + 0xb8], eax
test eax, eax
je 0x43704a
mov ecx, dword [eax + 0x58]
mov dword [esp + 0x48], ecx
lea eax, [esp + 0x48]
mov dword [esp], eax
call fcn.00437810
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.00433ec0
movzx eax, byte [0x78d748]
test al, al
jne 0x43709d
mov eax, dword [esp + 0xb8]
mov dword [esp + 0xc0], eax
mov byte [esp + 0xc4], 0
add esp, 0xbc
ret
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0044bbc0
jmp 0x437080
lea eax, [esp + 0x48]
mov dword [esp], eax
call fcn.00437810
jmp 0x436cfb
call fcn.00435b80
mov eax, dword [esp + 0xb4]
jmp 0x436eb9
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x54]
jmp 0x436dd7
lea eax, [0x7958d0]
mov dword [esp], eax
call fcn.00401f10
mov eax, dword [esp + 4]
test eax, eax
jbe 0x437132
lea eax, [0x780608]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.004020a0
mov eax, dword [esp + 0xc]
test eax, eax
setne al
mov ecx, dword [esp + 0x10]
test ecx, ecx
setne cl
or eax, ecx
jmp 0x436ce4
movzx eax, byte [esp + 0x26]
test al, al
jne 0x4370fb
xor eax, eax
jmp 0x436ce4
call fcn.0043cd90
xor eax, eax
jmp 0x436b29
mov dword [esp], 0
call fcn.00417df0
movzx eax, byte [esp + 4]
jmp 0x436af7
mov dword [esp], eax
call fcn.0043ace0
movzx eax, byte [esp + 0x23]
test al, al
jne 0x437181
mov eax, dword [esp + 0xb4]
jmp 0x436eb9
mov eax, dword [esp + 0xb4]
mov ecx, dword [eax + 0x18]
mov byte [ecx + 0x84], 1
lea ecx, [0x78064c]
mov dword [esp], ecx
mov dword [esp + 4], 1
call fcn.00402020
jmp 0x437175
mov byte [ecx + 0x84], 0
lea eax, [0x78064c]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call fcn.00402020
mov eax, dword [esp + 8]
test eax, eax
jl 0x437581
mov eax, dword [esp + 0xb4]
movzx edx, byte [esp + 0x23]
jmp 0x436c95
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0043cc60
mov eax, dword [esp + 8]
mov dword [esp + 0xa4], eax
nop
nop
lea ecx, [0x780618]
mov dword [esp], ecx
call fcn.00409250
mov eax, dword [esp + 0xa4]
mov dword [esp + 0xc0], eax
mov byte [esp + 0xc4], 0
add esp, 0xbc
ret
nop
nop
lea eax, [0x780618]
mov dword [esp], eax
call fcn.00409250
mov eax, dword [esp + 0xb4]
jmp 0x436eb9
mov eax, 0xffffffff
mov edi, 0xffffffff
jmp 0x436be9
mov dword [ebx + 0xb74], 2
mov eax, dword [ebx + 0xb70]
mov dword [esp + 0xb8], eax
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.00433ec0
movzx eax, byte [0x78d748]
test al, al
jne 0x4372ae
mov eax, dword [esp + 0xb8]
mov dword [esp + 0xc0], eax
mov byte [esp + 0xc4], 0
add esp, 0xbc
ret
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0044bbc0
jmp 0x437291
mov dword [esp], ebx
call fcn.00417df0
movzx ecx, byte [esp + 4]
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0xb4]
mov ebx, dword [esp + 0xb0]
mov ebp, dword [esp + 0x3c]
mov esi, dword [esp + 0x40]
mov edi, dword [esp + 0x34]
jmp 0x436bc5
xor ecx, ecx
jmp 0x436bc5
mov byte [ebx + 0x84], 1
lea eax, [0x78064c]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00402020
mov edx, dword [esp + 0xb4]
jmp 0x436fe4
mov ecx, dword [esp + 0xb8]
mov eax, dword [esp + 0x3c]
mov ebx, dword [esp + 0x40]
mov ebp, dword [esp + 0x34]
mov esi, dword [esp + 0x38]
mov eax, esi
mov edi, ebp
mov esi, ebx
mov ebp, dword [esp + 0x3c]
mov ebx, ecx
jmp 0x436b90
mov dword [esp + 0x60], ebp
lea eax, [0x78064c]
mov dword [esp], eax
call fcn.00401f10
mov eax, dword [esp + 4]
mov dword [esp + 0x7c], eax
lea ecx, [0x780648]
mov dword [esp], ecx
call fcn.00401f10
mov eax, dword [esp + 0x7c]
shl eax, 1
mov ecx, dword [esp + 0x60]
sub ecx, dword [esp + 4]
cmp eax, ecx
setae al
mov edx, dword [esp + 0xb4]
jmp 0x436fc8
mov dword [esp], 0
mov dword [esp + 4], 0
call fcn.0042ae10
mov eax, dword [esp + 8]
mov dword [esp + 0x44], eax
test eax, eax
je 0x436fa7
nop
nop
mov dword [esp + 0xb8], eax
test eax, eax
je 0x4373ce
mov ecx, dword [eax + 0x58]
mov dword [esp + 0x44], ecx
lea eax, [esp + 0x44]
mov dword [esp], eax
call fcn.00437810
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.00433ec0
movzx eax, byte [0x78d748]
test al, al
jne 0x437421
mov eax, dword [esp + 0xb8]
mov dword [esp + 0xc0], eax
mov byte [esp + 0xc4], 0
add esp, 0xbc
ret
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0044bbc0
jmp 0x437404
lea eax, [0x7958d0]
mov dword [esp], eax
call fcn.00401f10
mov eax, dword [esp + 4]
test eax, eax
ja 0x437457
xor eax, eax
jmp 0x436f9f
lea eax, [0x780608]
mov dword [esp], eax
call fcn.00402100
mov eax, dword [esp + 4]
test eax, eax
setne al
mov ecx, dword [esp + 8]
test ecx, ecx
setne cl
or eax, ecx
jmp 0x436f9f
nop
nop
lea eax, [0x780618]
mov dword [esp], eax
call fcn.00409040
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0043cc60
mov eax, dword [esp + 8]
mov dword [esp + 0xa0], eax
nop
nop
lea ecx, [0x780618]
mov dword [esp], ecx
call fcn.00409250
mov eax, dword [esp + 0xa0]
test eax, eax
je 0x436f83
mov dword [esp + 0xc0], eax
mov byte [esp + 0xc4], 0
add esp, 0xbc
ret
mov dword [esp + 0xc0], eax
mov byte [esp + 0xc4], cl
add esp, 0xbc
ret
mov dword [esp], ebp
mov dword [esp + 4], 0
call fcn.00459d70
jmp 0x436f55
call fcn.004139f0
mov eax, dword [esp]
test eax, eax
jne 0x437530
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x34]
mov ebx, dword [esp + 0x38]
jmp 0x436f44
mov dword [esp + 4], 0
mov byte [esp + 8], 1
call fcn.00433a10
jmp 0x43751b
call fcn.00434f70
mov ecx, dword [esp + 0xb8]
jmp 0x436eee
lea eax, [0x586862]
mov dword [esp], eax
mov dword [esp + 4], 0x23
call fcn.00430080
lea eax, [0x5842d2]
mov dword [esp], eax
mov dword [esp + 4], 0x1c
call fcn.00430080
lea eax, [0x585e3f]
mov dword [esp], eax
mov dword [esp + 4], 0x21
call fcn.00430080
lea eax, [0x581449]
mov dword [esp], eax
mov dword [esp + 4], 0x15
call fcn.00430080
call fcn.0042e710
mov eax, esi
mov ecx, ebx
call fcn.0045a180
call fcn.0042e710
call fcn.0042e710
nop
call fcn.00458ba0
jmp fcn.00436670