Function at 0x435f10
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ecx, 0x4e37e4
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x5c
mov eax, dword [ebp + 0xc]
mov esi, dword [ebp + 0x14]
mov ebx, dword [ebp + 8]
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x50], eax
mov word [ebp - 0x1c], ax
mov dword [ebp - 0x48], edi
call fcn.00427ee0
mov edx, eax
mov eax, dword [ebp + 0x24]
mov eax, dword [eax + 0x6c]
mov eax, dword [eax + 4]
mov esi, dword [eax + edx*4]
test esi, esi
je 0x435efe
mov ecx, dword [ebp + 0x20]
lea eax, [ecx*8 + 0x1b]
shr eax, 4
shl eax, 4
call fcn.0040bc20
mov edx, dword [ebp - 0x40]
sub esp, eax
lea eax, [esp + 0x13]
and eax, 0xfffffff0
cmp word [ebp - 0x50], 0xffff
sete byte [ebp - 0x20]
test edx, edx
mov dword [ebp - 0x24], eax
movzx eax, byte [ebp - 0x20]
setne dl
and dl, al
jne 0x435d44
mov edx, eax
cmp word [ebp - 0x28], 0xffff
sete byte [ebp - 0x3b]
test edi, edi
movzx eax, byte [ebp - 0x3b]
setne bl
and bl, al
jne 0x435d6f
movzx ebx, byte [ebp - 0x3b]
cmp bl, dl
jne 0x4354c7
mov eax, dword [ebp + 0x28]
or dword [eax], 4
mov eax, dword [ebp - 0x50]
mov ax, word [ebp - 0x1c]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x50]
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret 0x24
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x4354d8
cmp byte [ebp - 0x20], 0
jne 0x435d9a
movzx eax, word [ebp - 0x1c]
movzx ebx, ax
mov eax, dword [esi]
mov ecx, esi
mov dword [esp], ebx
call dword [eax + 0x20]
mov ecx, esi
sub esp, 4
mov word [ebp - 0x20], ax
mov eax, dword [esi]
mov dword [esp], ebx
call dword [eax + 0x18]
mov ecx, eax
mov eax, dword [ebp + 0x20]
sub esp, 4
test eax, eax
je 0x4354a7
mov edi, dword [ebp + 0x20]
mov eax, dword [ebp - 0x24]
mov word [ebp - 0x38], cx
xor ebx, ebx
lea eax, [eax + edi*4]
xor edi, edi
mov dword [ebp - 0x28], edi
mov edi, dword [ebp + 0x1c]
mov dword [ebp - 0x34], eax
jmp 0x435530
add ebx, 1
cmp dword [ebp + 0x20], ebx
je 0x43559c
mov edx, dword [edi + ebx*4]
mov eax, dword [esi]
mov ecx, esi
movzx edx, word [edx]
mov dword [esp], edx
call dword [eax + 0x20]
sub esp, 4
cmp word [ebp - 0x20], ax
je 0x435562
mov edx, dword [edi + ebx*4]
mov eax, dword [esi]
mov ecx, esi
movzx edx, word [edx]
mov dword [esp], edx
call dword [eax + 0x18]
sub esp, 4
cmp word [ebp - 0x38], ax
jne 0x435528
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x34]
lea edx, [eax*4]
mov eax, dword [edi + ebx*4]
add ecx, edx
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x2c], ecx
mov dword [esp], eax
call sub.msvcrt.dll_wcslen
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
add dword [ebp - 0x28], 1
mov dword [ecx], eax
mov eax, dword [ebp - 0x24]
mov dword [eax + edx], ebx
add ebx, 1
cmp dword [ebp + 0x20], ebx
jne 0x435530
mov edi, dword [ebp - 0x28]
mov dword [ebp - 0x54], ebx
cmp edi, 1
jbe 0x435eba
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x38], 0
mov ebx, dword [eax]
add eax, 4
mov dword [ebp - 0x4c], eax
mov eax, esi
mov esi, edi
mov dword [ebp - 0x1c], ebx
lea ebx, [edi*4]
mov edi, eax
mov dword [ebp - 0x44], ebx
mov ebx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x4c]
add ecx, ebx
mov ebx, dword [ebp - 0x1c]
mov edx, ecx
mov dword [ebp - 0x20], eax
sub edx, eax
and edx, 4
je 0x435610
mov eax, dword [ebp - 0x4c]
mov ebx, dword [eax]
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
cmovbe ebx, eax
mov eax, dword [ebp - 0x34]
add eax, 8
mov dword [ebp - 0x20], eax
cmp eax, ecx
je 0x435626
mov eax, dword [ebp - 0x20]
lea esi, cs:[esi]
nop
mov edx, dword [eax]
cmp ebx, edx
cmova ebx, edx
mov edx, dword [eax + 4]
cmp ebx, edx
cmova ebx, edx
add eax, 8
cmp eax, ecx
jne 0x435610
mov edx, dword [ebp - 0x40]
add dword [ebp - 0x38], 1
mov ecx, dword [ebp - 0x38]
mov eax, dword [edx + 8]
cmp eax, dword [edx + 0xc]
jae 0x4359c8
add eax, 2
mov dword [edx + 8], eax
cmp ecx, ebx
je 0x4359d9
jae 0x4357f8
mov ebx, dword [ebp - 0x40]
mov eax, dword [ebx + 8]
cmp eax, dword [ebx + 0xc]
jae 0x435be9
movzx eax, word [eax]
cmp ax, 0xffff
mov eax, 0
cmovne eax, dword [ebp - 0x40]
sete byte [ebp - 0x20]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x48]
test eax, eax
setne bl
and bl, byte [ebp - 0x3b]
jne 0x435810
movzx ebx, byte [ebp - 0x3b]
cmp byte [ebp - 0x20], bl
je 0x435843
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x4357c0
mov ebx, dword [ebp - 0x40]
mov eax, dword [ebx + 8]
cmp eax, dword [ebx + 0xc]
jae 0x435d05
movzx ecx, word [eax]
mov eax, dword [edi]
mov edx, dword [eax + 0x20]
cmp cx, 0xffff
je 0x4357c2
mov dword [esp], ecx
mov ecx, edi
call edx
mov ebx, dword [ebp - 0x40]
sub esp, 4
mov word [ebp - 0x30], ax
mov eax, dword [ebx + 8]
cmp eax, dword [ebx + 0xc]
jae 0x435cf8
movzx eax, word [eax]
cmp ax, 0xffff
movzx edx, ax
mov eax, 0xffff
cmove edx, eax
mov eax, 0
cmovne eax, dword [ebp - 0x40]
mov dword [ebp - 0x40], eax
mov eax, dword [edi]
mov ecx, edi
mov dword [esp], edx
call dword [eax + 0x18]
sub esp, 4
mov word [ebp - 0x3a], ax
test esi, esi
je 0x4357f8
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x1c], 0
add eax, eax
mov dword [ebp - 0x2c], eax
jmp 0x435764
movzx ecx, word [edx]
mov eax, dword [edi]
mov dword [esp], ecx
mov ecx, edi
call dword [eax + 0x18]
sub esp, 4
cmp word [ebp - 0x3a], ax
je 0x435799
sub esi, 1
mov ecx, dword [ebp - 0x28]
lea eax, [esi*4]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + esi*4]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x34]
mov eax, dword [ebx + esi*4]
mov dword [ebx + ecx], eax
cmp dword [ebp - 0x1c], esi
jae 0x4357a2
mov eax, dword [ebp - 0x1c]
mov ebx, dword [ebp - 0x24]
mov ecx, dword [ebp + 0x1c]
mov edx, dword [ebp - 0x2c]
shl eax, 2
add ebx, eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebx]
add edx, dword [ecx + eax*4]
mov eax, dword [edi]
movzx ecx, word [edx]
mov dword [ebp - 0x20], edx
mov dword [esp], ecx
mov ecx, edi
call dword [eax + 0x20]
mov edx, dword [ebp - 0x20]
sub esp, 4
cmp word [ebp - 0x30], ax
jne 0x435728
add dword [ebp - 0x1c], 1
cmp dword [ebp - 0x1c], esi
jb 0x435764
cmp esi, 1
jbe 0x435843
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
jmp 0x4355d0
mov eax, dword [edi]
mov dword [esp], 0xffff
mov ecx, edi
call dword [eax + 0x20]
mov edx, 0xffff
sub esp, 4
mov word [ebp - 0x30], ax
mov dword [ebp - 0x40], 0
jmp 0x4356fb
mov eax, dword [ebp - 0x38]
cmp edi, eax
je 0x435c23
lea esi, [esi]
mov eax, 0xffffffff
mov word [ebp - 0x1c], ax
jmp 0x4354a7
mov edx, dword [ebp - 0x48]
mov eax, dword [edx + 8]
cmp eax, dword [edx + 0xc]
jae 0x435ceb
movzx eax, word [eax]
cmp ax, 0xffff
mov eax, 0
cmovne ebx, eax
mov eax, 0
cmovne eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
cmp byte [ebp - 0x20], bl
jne 0x435694
mov eax, edi
mov edi, esi
mov esi, eax
mov eax, 0xffffffff
mov word [ebp - 0x1c], ax
cmp edi, 1
jne 0x4354a7
mov edi, dword [ebp - 0x40]
mov eax, dword [edi + 8]
cmp eax, dword [edi + 0xc]
jae 0x435dbe
add eax, 2
mov dword [edi + 8], eax
add dword [ebp - 0x38], 1
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov edi, dword [ebp - 0x20]
mov eax, dword [ebp + 0x1c]
mov eax, dword [eax + edi*4]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x34]
mov edi, dword [eax]
cmp dword [ebp - 0x38], edi
jae 0x4357e6
mov eax, dword [ebp - 0x40]
test eax, eax
jne 0x435960
mov ebx, dword [ebp - 0x48]
mov edx, 1
test ebx, ebx
setne bl
and bl, byte [ebp - 0x3b]
jne 0x435996
movzx ebx, byte [ebp - 0x3b]
cmp bl, dl
je 0x4357e6
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x38]
mov ecx, esi
mov eax, dword [esi]
movzx edx, word [ebx + edx*2]
mov dword [esp], edx
call dword [eax + 0x20]
mov ecx, dword [ebp - 0x40]
sub esp, 4
mov ebx, eax
test ecx, ecx
jne 0x435c39
mov eax, dword [esi]
mov ecx, esi
mov dword [esp], 0xffff
call dword [eax + 0x20]
sub esp, 4
cmp ax, bx
je 0x435bf6
mov ebx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x38]
mov eax, dword [esi]
movzx edx, word [ebx + ecx*2]
mov ecx, esi
mov dword [esp], edx
call dword [eax + 0x18]
mov edx, 0xffff
sub esp, 4
mov dword [ebp - 0x40], 0
mov ebx, eax
mov eax, dword [esi]
mov ecx, esi
mov dword [esp], edx
call dword [eax + 0x18]
sub esp, 4
cmp ax, bx
jne 0x4357e6
mov ebx, dword [ebp - 0x40]
mov eax, dword [ebx + 8]
cmp eax, dword [ebx + 0xc]
jae 0x435c0c
add eax, 2
add dword [ebp - 0x38], 1
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x38]
cmp edi, eax
je 0x435c23
mov ebx, dword [ebp - 0x40]
mov eax, dword [ebx + 8]
cmp eax, dword [ebx + 0xc]
jae 0x435dec
movzx eax, word [eax]
mov ebx, dword [ebp - 0x48]
cmp ax, 0xffff
mov eax, 0
cmovne eax, dword [ebp - 0x40]
sete dl
test ebx, ebx
mov dword [ebp - 0x40], eax
setne bl
and bl, byte [ebp - 0x3b]
je 0x4358b7
mov ecx, dword [ebp - 0x48]
mov eax, dword [ecx + 8]
cmp eax, dword [ecx + 0xc]
jae 0x435dd8
movzx eax, word [eax]
cmp ax, 0xffff
mov eax, 0
cmovne ebx, eax
mov eax, 0
cmovne eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
jmp 0x4358bb
mov ecx, dword [ebp - 0x40]
mov eax, dword [ecx]
call dword [eax + 0x28]
cmp dword [ebp - 0x38], ebx
jne 0x43564a
mov ebx, dword [ebp - 0x40]
mov eax, dword [ebx + 8]
cmp eax, dword [ebx + 0xc]
jae 0x435e28
movzx eax, word [eax]
cmp ax, 0xffff
mov eax, 0
cmovne eax, dword [ebp - 0x40]
sete dl
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x48]
test eax, eax
setne bl
and bl, byte [ebp - 0x3b]
jne 0x435d15
movzx ebx, byte [ebp - 0x3b]
mov byte [ebp - 0x20], 0
cmp dl, bl
je 0x435b13
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x435cc5
mov ebx, dword [ebp - 0x40]
mov eax, dword [ebx + 8]
cmp eax, dword [ebx + 0xc]
jae 0x435e42
movzx ecx, word [eax]
mov eax, dword [edi]
mov edx, dword [eax + 0x20]
cmp cx, 0xffff
je 0x435cc7
mov dword [esp], ecx
mov ecx, edi
call edx
mov ebx, dword [ebp - 0x40]
sub esp, 4
mov word [ebp - 0x3a], ax
mov eax, dword [ebx + 8]
cmp eax, dword [ebx + 0xc]
jae 0x435e35
movzx eax, word [eax]
cmp ax, 0xffff
movzx edx, ax
mov eax, 0xffff
cmove edx, eax
mov eax, 0
cmovne eax, dword [ebp - 0x40]
mov dword [ebp - 0x40], eax
mov eax, dword [edi]
mov ecx, edi
mov dword [esp], edx
xor ebx, ebx
call dword [eax + 0x18]
sub esp, 4
mov word [ebp - 0x30], ax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x20], esi
mov esi, dword [ebp - 0x24]
add eax, eax
mov dword [ebp - 0x2c], eax
lea esi, cs:[esi]
nop
mov eax, dword [esi + ebx*4]
mov ecx, dword [ebp + 0x1c]
mov edx, dword [ecx + eax*4]
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x38]
cmp ecx, dword [eax + ebx*4]
jae 0x435b03
mov eax, dword [ebp - 0x2c]
add edx, eax
mov eax, dword [edi]
movzx ecx, word [edx]
mov dword [ebp - 0x28], edx
mov dword [esp], ecx
mov ecx, edi
call dword [eax + 0x20]
sub esp, 4
cmp ax, word [ebp - 0x3a]
je 0x435cb9
mov edx, dword [ebp - 0x28]
mov eax, dword [edi]
mov ecx, edi
movzx edx, word [edx]
mov dword [esp], edx
call dword [eax + 0x18]
sub esp, 4
cmp word [ebp - 0x30], ax
je 0x435cb9
mov eax, dword [ebp - 0x20]
add ebx, 1
cmp ebx, eax
jne 0x435ab0
mov byte [ebp - 0x20], 0
mov esi, eax
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x1c], edi
xor eax, eax
mov edi, dword [ebp - 0x38]
mov ebx, dword [ebp - 0x24]
jmp 0x435b3a
add eax, 1
cmp eax, esi
jae 0x435b61
mov edx, dword [ecx + eax*4]
cmp edi, edx
sete dl
cmp dl, byte [ebp - 0x20]
jne 0x435b30
sub esi, 1
lea edx, [esi*4]
mov dword [ebp - 0x44], edx
mov edx, dword [ebx + esi*4]
mov dword [ebx + eax*4], edx
mov edx, dword [ecx + esi*4]
mov dword [ecx + eax*4], edx
cmp eax, esi
jb 0x435b37
cmp byte [ebp - 0x20], 0
mov edi, dword [ebp - 0x1c]
je 0x435e06
mov ebx, dword [ebp - 0x34]
mov eax, dword [ebx]
cmp esi, 1
jbe 0x435bc6
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x4c]
add ebx, ecx
mov dword [ebp - 0x1c], edx
mov ecx, ebx
sub ecx, edx
and ecx, 4
je 0x435bb0
mov edx, dword [ebp - 0x4c]
mov edx, dword [edx]
cmp eax, edx
cmova eax, edx
mov edx, dword [ebp - 0x34]
lea ecx, [edx + 8]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x1c]
cmp ebx, ecx
je 0x435bc6
lea esi, cs:[esi]
nop
mov ecx, dword [edx]
cmp eax, ecx
cmova eax, ecx
mov ecx, dword [edx + 4]
cmp eax, ecx
cmova eax, ecx
add edx, 8
cmp ebx, edx
jne 0x435bb0
cmp dword [ebp - 0x38], eax
jae 0x435843
mov edx, dword [ebp - 0x40]
test edx, edx
je 0x435676
mov ebx, dword [ebp - 0x40]
mov eax, dword [ebx + 8]
cmp eax, dword [ebx + 0xc]
jb 0x43565f
mov ecx, dword [ebp - 0x40]
mov eax, dword [ecx]
call dword [eax + 0x24]
jmp 0x435662
mov dword [ebp - 0x40], 0
mov ebx, dword [ebp - 0x40]
mov eax, dword [ebx + 8]
cmp eax, dword [ebx + 0xc]
jb 0x43594b
mov ecx, dword [ebp - 0x40]
mov eax, dword [ecx]
call dword [eax + 0x28]
add dword [ebp - 0x38], 1
mov eax, dword [ebp - 0x38]
cmp eax, edi
jne 0x435960
mov eax, dword [ebp + 0x18]
mov esi, dword [ebp - 0x20]
mov edx, 0xffffffff
mov word [ebp - 0x1c], dx
mov dword [eax], esi
jmp 0x4354ad
mov edx, dword [ebp - 0x40]
mov eax, dword [edx + 8]
cmp eax, dword [edx + 0xc]
jae 0x435dcb
movzx eax, word [eax]
movzx edx, ax
cmp ax, 0xffff
je 0x4358e7
mov eax, dword [esi]
mov ecx, esi
mov dword [esp], edx
call dword [eax + 0x20]
sub esp, 4
cmp ax, bx
je 0x43593c
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x38]
mov ecx, esi
mov eax, dword [esi]
movzx edx, word [ebx + edx*2]
mov dword [esp], edx
call dword [eax + 0x18]
mov edx, dword [ebp - 0x40]
mov ebx, eax
sub esp, 4
mov eax, dword [edx + 8]
cmp eax, dword [edx + 0xc]
jae 0x435df9
movzx eax, word [eax]
cmp ax, 0xffff
movzx edx, ax
mov eax, 0xffff
cmove edx, eax
mov eax, 0
cmovne eax, dword [ebp - 0x40]
mov dword [ebp - 0x40], eax
jmp 0x435926
mov esi, dword [ebp - 0x20]
mov byte [ebp - 0x20], 1
jmp 0x435b13
mov eax, dword [edi]
mov dword [esp], 0xffff
mov ecx, edi
call dword [eax + 0x20]
mov edx, 0xffff
sub esp, 4
mov word [ebp - 0x3a], ax
mov dword [ebp - 0x40], 0
jmp 0x435a86
mov ecx, dword [ebp - 0x48]
mov eax, dword [ecx]
call dword [eax + 0x24]
jmp 0x435822
mov ecx, dword [ebp - 0x40]
mov eax, dword [ecx]
call dword [eax + 0x24]
jmp 0x4356e0
mov ecx, dword [ebp - 0x40]
mov eax, dword [ecx]
call dword [eax + 0x24]
movzx ecx, ax
jmp 0x4356b1
mov ecx, dword [ebp - 0x48]
mov eax, dword [ecx + 8]
cmp eax, dword [ecx + 0xc]
jae 0x435e65
movzx eax, word [eax]
cmp ax, 0xffff
mov eax, 0
cmovne ebx, eax
mov eax, 0
cmovne eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
jmp 0x435a13
mov eax, dword [ebx + 8]
cmp eax, dword [ebx + 0xc]
jae 0x435e52
movzx eax, word [eax]
cmp ax, 0xffff
mov eax, 0
cmovne edx, eax
mov eax, 0
cmovne eax, ebx
mov dword [ebp - 0x40], eax
jmp 0x435485
mov eax, dword [edi + 8]
cmp eax, dword [edi + 0xc]
jae 0x435e79
movzx eax, word [eax]
cmp ax, 0xffff
mov eax, 0
cmovne ebx, eax
mov eax, 0
cmovne eax, edi
mov dword [ebp - 0x48], eax
jmp 0x4354a3
mov edi, dword [ebp - 0x40]
mov eax, dword [edi + 8]
cmp eax, dword [edi + 0xc]
jae 0x435ef1
movzx eax, word [eax]
xor edx, edx
cmp ax, 0xffff
cmovne edx, dword [ebp - 0x40]
mov dword [ebp - 0x40], edx
jmp 0x4354dc
mov ecx, dword [ebp - 0x40]
mov eax, dword [ecx]
call dword [eax + 0x28]
jmp 0x435870
mov ecx, dword [ebp - 0x40]
mov eax, dword [ecx]
call dword [eax + 0x24]
jmp 0x435c4b
mov ecx, dword [ebp - 0x48]
mov byte [ebp - 0x24], dl
mov eax, dword [ecx]
call dword [eax + 0x24]
movzx edx, byte [ebp - 0x24]
jmp 0x4359a8
mov ecx, dword [ebp - 0x40]
mov eax, dword [ecx]
call dword [eax + 0x24]
jmp 0x435972
mov ecx, dword [ebp - 0x40]
mov eax, dword [ecx]
call dword [eax + 0x24]
jmp 0x435c99
mov eax, edi
mov edi, esi
mov esi, eax
cmp edi, 2
je 0x435e8c
mov eax, 0xffffffff
mov word [ebp - 0x1c], ax
cmp edi, 1
jne 0x4354a7
jmp 0x435874
mov ecx, dword [ebp - 0x40]
mov eax, dword [ecx]
call dword [eax + 0x24]
jmp 0x4359eb
mov ecx, dword [ebp - 0x40]
mov eax, dword [ecx]
call dword [eax + 0x24]
jmp 0x435a6b
mov ecx, dword [ebp - 0x40]
mov eax, dword [ecx]
call dword [eax + 0x24]
movzx ecx, ax
jmp 0x435a3c
mov eax, dword [ebx]
mov byte [ebp - 0x2c], dl
mov ecx, ebx
call dword [eax + 0x24]
movzx edx, byte [ebp - 0x2c]
jmp 0x435d53
mov ecx, dword [ebp - 0x48]
mov byte [ebp - 0x20], dl
mov eax, dword [ecx]
call dword [eax + 0x24]
movzx edx, byte [ebp - 0x20]
jmp 0x435d27
mov eax, dword [edi]
mov byte [ebp - 0x28], dl
mov ecx, edi
call dword [eax + 0x24]
movzx edx, byte [ebp - 0x28]
jmp 0x435d7e
mov eax, dword [ebp - 0x54]
test al, 1
jne 0x4357f8
mov ebx, dword [ebp - 0x24]
shr eax, 1
mov ecx, eax
mov edi, dword [ebx]
mov eax, dword [ebx + 4]
mov dword [ebp - 0x20], edi
cmp edi, ecx
jae 0x435ec4
lea edx, [edi + ecx]
cmp edx, eax
jne 0x4357f8
jmp 0x43587c
xor eax, eax
mov dword [ebp - 0x38], eax
jmp 0x435852
mov edx, dword [ebp - 0x20]
sub edx, ecx
mov ecx, 0xffffffff
mov word [ebp - 0x1c], cx
cmp edx, eax
jne 0x4354a7
mov edi, dword [ebp - 0x24]
mov ebx, dword [ebp - 0x34]
mov dword [edi], edx
mov eax, dword [ebx + 4]
mov dword [ebx], eax
mov eax, dword [edi]
mov dword [ebp - 0x20], eax
jmp 0x43587c
mov ecx, dword [ebp - 0x40]
mov eax, dword [ecx]
call dword [eax + 0x24]
jmp 0x435dac
call fcn.004d9d30
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push ebp
push edi
push esi
push ebx
sub esp, 0x11c
mov eax, dword [esp + 0x130]
mov ebp, dword [esp + 0x140]
mov dword [esp + 0x3c], ecx
mov ecx, 0x4e36a0
mov ebx, dword [esp + 0x134]
mov esi, dword [esp + 0x138]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x13c]
mov dword [esp + 0x38], eax
call fcn.00427ee0
mov edx, dword [ebp + 0x6c]
mov ecx, dword [edx + 4]
cmp eax, dword [edx + 8]
jae 0x4362e1
mov eax, dword [ecx + eax*4]
test eax, eax
je 0x4362e1
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x4ec100
mov dword [esp + 4], 0x4ebd10
mov dword [esp], eax
call fcn.004d8230
test eax, eax
je 0x4362e1
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0x6c]
mov edx, dword [eax + 0x64]
mov dword [esp + 0x44], ecx
mov ecx, dword [eax + 0x70]
mov dword [esp + 0x58], edx
mov edx, dword [eax + 0x68]
mov dword [esp + 0x54], ecx
mov ecx, dword [eax + 0x74]
mov dword [esp + 0x50], edx
mov edx, dword [eax + 0xa0]
mov dword [esp + 0x48], ecx
mov ecx, dword [eax + 0x78]
mov dword [esp + 0x7c], edx
mov dword [esp + 0x60], ecx
mov ecx, dword [eax + 0x7c]
mov dword [esp + 0x64], ecx
mov ecx, dword [eax + 0x80]
mov dword [esp + 0x68], ecx
mov ecx, dword [eax + 0x84]
mov dword [esp + 0x6c], ecx
mov ecx, dword [eax + 0x88]
mov dword [esp + 0x70], ecx
mov ecx, dword [eax + 0x8c]
mov dword [esp + 0x74], ecx
mov ecx, dword [eax + 0x90]
mov dword [esp + 0x5c], ecx
mov ecx, dword [eax + 0x98]
mov dword [esp + 0x4c], ecx
mov ecx, dword [eax + 0x9c]
mov dword [esp + 0x78], ecx
mov ecx, dword [eax + 0xa4]
mov dword [esp + 0x80], ecx
mov edi, dword [eax + 0xb0]
mov ecx, dword [eax + 0xa8]
mov edx, dword [eax + 0xac]
mov dword [esp + 0x84], edi
mov edi, dword [eax + 0xb4]
mov dword [esp + 0xc4], ecx
mov dword [esp + 0x88], edi
mov edi, dword [eax + 0xb8]
mov dword [esp + 0xc8], edx
mov dword [esp + 0x8c], edi
mov edi, dword [eax + 0xbc]
mov dword [esp + 0x90], edi
mov edi, dword [eax + 0xc0]
mov eax, dword [eax + 0x94]
mov dword [esp + 0x94], edi
mov edi, dword [esp + 0x84]
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 0xcc], edi
mov edi, dword [esp + 0x88]
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0xd0], edi
mov edi, dword [esp + 0x8c]
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0xd4], edi
mov edi, dword [esp + 0x90]
mov dword [esp + 0xbc], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0xd8], edi
mov dword [esp + 0xc0], eax
mov edi, dword [esp + 0x94]
lea eax, [esp + 0xac]
mov edx, dword [esp + 0x58]
mov dword [esp + 0x20], eax
lea eax, [esp + 0xb0]
mov dword [esp + 0x14], eax
lea eax, [esp + 0xa8]
mov dword [esp + 0xe0], edx
mov edx, dword [esp + 0x50]
mov dword [esp + 0xdc], edi
mov dword [esp + 0xe4], edx
mov edx, dword [esp + 0x44]
mov dword [esp + 0x1c], ebp
mov dword [esp + 0xe8], edx
mov edx, dword [esp + 0x54]
mov dword [esp + 0x10], eax
mov dword [esp + 0xec], edx
mov edx, dword [esp + 0x48]
mov dword [esp + 0xac], 0
mov dword [esp + 0xf0], edx
mov edx, dword [esp + 0x60]
mov dword [esp + 0x18], 0xc
mov dword [esp + 0xf4], edx
mov edx, dword [esp + 0x64]
mov dword [esp + 0xf8], edx
mov edx, dword [esp + 0x68]
mov dword [esp + 0xfc], edx
mov edx, dword [esp + 0x6c]
mov dword [esp + 0x100], edx
mov edx, dword [esp + 0x70]
mov dword [esp + 0x104], edx
mov edx, dword [esp + 0x74]
mov dword [esp + 0x108], edx
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x10c], edx
mov dword [esp + 8], esi
mov eax, dword [esp + 0x38]
mov dword [esp + 4], ebx
mov ecx, dword [esp + 0x3c]
xor bx, bx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.00438570
sub esp, 0x24
mov ebp, eax
movzx ecx, dx
mov eax, edx
mov dword [esp + 0x9c], edx
mov edx, ebx
mov edi, ebp
or edx, ecx
mov ecx, dword [esp + 0xac]
mov dword [esp + 0x98], ebp
test ecx, ecx
je 0x436260
mov ebx, dword [esp + 0x144]
or dword [ebx], 4
cmp ax, 0xffff
sete bl
test ebp, ebp
setne al
and al, bl
mov byte [esp + 0x3c], al
jne 0x436278
cmp word [esp + 0x38], 0xffff
sete al
mov ecx, eax
test esi, esi
je 0x43623c
test al, al
jne 0x4362a0
cmp cl, bl
jne 0x43624a
mov eax, dword [esp + 0x144]
or dword [eax], 2
add esp, 0x11c
mov eax, edi
pop ebx
pop esi
pop edi
pop ebp
ret 0x1c
mov ecx, dword [esp + 0x148]
mov ebx, dword [esp + 0xa8]
mov dword [ecx + 0x10], ebx
jmp 0x436215
mov eax, dword [ebp + 8]
cmp eax, dword [ebp + 0xc]
jae 0x4362b8
movzx eax, word [eax]
xor ebx, ebx
cmp ax, 0xffff
movzx eax, byte [esp + 0x3c]
mov edi, 0
cmovne edi, ebp
cmove ebx, eax
jmp 0x436229
mov eax, dword [esi + 8]
cmp eax, dword [esi + 0xc]
jae 0x4362d0
movzx eax, word [eax]
cmp ax, 0xffff
sete cl
jmp 0x43623c
mov eax, dword [ebp]
mov dword [esp + 0x40], edx
mov ecx, ebp
call dword [eax + 0x24]
mov edx, dword [esp + 0x40]
jmp 0x436283
mov eax, dword [esi]
mov dword [esp + 0x38], edx
mov ecx, esi
call dword [eax + 0x24]
mov edx, dword [esp + 0x38]
jmp 0x4362ab
call fcn.004d9d30
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
sub esp, 0x4c
lea eax, [esp + 0x34]
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x34], 0
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x54]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 4], edx
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0x38], 0
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0x3c], 0
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x50]
mov dword [esp], eax
call fcn.00436360
sub esp, 0x24
add esp, 0x4c
ret 0x20