Function at 0x436a90
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x47c5c8
mov eax, dword fs:[0]
push eax
sub esp, 0x108
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4a15f0]
xor eax, esp
push eax
lea eax, [esp + 0x11c]
mov dword fs:[0], eax
mov esi, ecx
call fcn.004353a0
push 0
mov ecx, esi
mov dword [esi + 0x468], eax
call fcn.004352d0
mov ecx, esi
mov edi, eax
call fcn.00435140
mov ecx, esi
call fcn.00435190
call fcn.00435790
test edi, edi
mov ecx, esi
je 0x436af8
call fcn.004365a0
jmp 0x43746f
push 0xf
mov dword [esp + 0x1c], 0
call fcn.00435110
test eax, eax
jne 0x436b19
push 0x12
call fcn.00435110
cmp eax, 0xffffff
je 0x436b34
push 0xf
mov ecx, esi
call fcn.00435110
cmp eax, 0xffffff
jne 0x436ba6
push 0x12
call fcn.00435110
test eax, eax
jne 0x436ba6
push 0xd
mov ecx, esi
mov dword [esp + 0x1c], 1
call fcn.00435110
push 0xd
mov dword [esi + 0x1e8], eax
call fcn.00435110
push 0xe
mov dword [esi + 0x1fc], eax
call fcn.00435110
push 0x12
mov dword [esi + 0x220], eax
call fcn.00435110
push 0x12
mov dword [esi + 0x1ec], eax
call fcn.00435110
push 0xd
mov dword [esi + 0x200], eax
call fcn.00435110
push 0x12
mov dword [esi + 0x234], eax
call fcn.00435110
push 0x12
mov dword [esi + 0x218], eax
call fcn.00435110
mov dword [esi + 0x204], eax
cmp dword [esp + 0x18], 0
mov eax, 5
mov ecx, 0xd
mov ebp, 0x1e
mov dword [esp + 0x30], eax
mov dword [esp + 0x40], ecx
mov dword [esp + 0x44], eax
mov dword [esp + 0x50], ecx
mov ecx, 0x10
mov dword [esp + 0x54], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x84], eax
mov dword [esp + 0x94], eax
mov dword [esp + 0xc4], eax
mov eax, 0x5a
mov edx, 0x1f
mov ebx, 0x21
mov edi, 0x29
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x38], 0xa5
mov dword [esp + 0x3c], edx
mov dword [esp + 0x48], ebp
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x58], 0x32
mov dword [esp + 0x5c], edi
mov dword [esp + 0x60], 0xf
mov dword [esp + 0x68], 0x8f
mov dword [esp + 0x6c], 0x23
mov dword [esp + 0x70], 0x11
mov dword [esp + 0x78], 0x46
mov dword [esp + 0x7c], 0x26
mov dword [esp + 0x80], ecx
mov dword [esp + 0x88], 0x4b
mov dword [esp + 0x8c], 0x27
mov dword [esp + 0x90], ecx
mov dword [esp + 0x98], 0x46
mov dword [esp + 0x9c], 0x2b
mov dword [esp + 0xa0], 0x2e
mov dword [esp + 0xa4], ecx
mov dword [esp + 0xa8], 0x14
mov dword [esp + 0xac], 0x3d
mov dword [esp + 0xb0], 0x2e
mov dword [esp + 0xb4], ecx
mov dword [esp + 0xb8], 0xf
mov dword [esp + 0xbc], 0x28
mov dword [esp + 0xc0], ecx
mov dword [esp + 0xc8], eax
mov dword [esp + 0xcc], 0x2a
mov dword [esp + 0xd0], 0xf
mov dword [esp + 0xd4], ecx
mov dword [esp + 0xd8], eax
jne 0x436d6c
lea edi, [esp + 0x34]
mov dword [esp + 0x1c], 0xb
lea ebx, [ebx]
mov eax, dword [edi + 4]
mov ecx, dword [edi]
push eax
push ecx
mov ecx, esi
call fcn.00435110
mov edx, dword [edi - 4]
push eax
push edx
call fcn.00435110
push eax
call fcn.00435070
mov ecx, dword [edi - 8]
add edi, 0x10
sub dword [esp + 0x1c], 1
mov dword [esi + ecx*4 + 0x16c], eax
jne 0x436d30
mov edi, 0x29
mov edx, 0x1f
fld dword [0x484aec]
mov ecx, 0x23
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x64], ecx
mov ecx, 0x25
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x74], ecx
mov ecx, 0x26
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x84], ecx
mov ecx, 0x27
mov dword [esp + 0x8c], ecx
mov dword [esp + 0x94], ecx
mov ecx, 0x2b
mov dword [esp + 0x9c], ecx
mov dword [esp + 0xa4], ecx
mov ecx, 0x3d
mov dword [esp + 0xac], ecx
mov dword [esp + 0xb4], ecx
mov ecx, 0x2d
mov eax, 0x64
mov dword [esp + 0xdc], ecx
mov dword [esp + 0xe4], ecx
mov ecx, 0x2e
mov dword [esp + 0x48], eax
mov dword [esp + 0x78], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0xb8], eax
mov eax, 0x28
mov dword [esp + 0xec], ecx
mov dword [esp + 0xf4], ecx
mov ecx, 0x2f
push ecx
mov dword [esp + 0xc0], eax
fstp dword [esp]
mov dword [esp + 0xc8], eax
mov eax, 0x2c
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd8], eax
mov eax, 0xb4
push 1
mov dword [esp + 0x104], ecx
mov dword [esp + 0x10c], ecx
push ebp
mov ecx, esi
mov dword [esp + 0x38], edx
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x40], edx
mov dword [esp + 0x44], 0x32
mov dword [esp + 0x48], 0x20
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x50], 0xd
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebp
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebp
mov dword [esp + 0x6c], edi
mov dword [esp + 0x74], 0x50
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x8c], ebp
mov dword [esp + 0x94], 0x55
mov dword [esp + 0x9c], ebp
mov dword [esp + 0xa4], 0x32
mov dword [esp + 0xac], edi
mov dword [esp + 0xbc], ebp
mov dword [esp + 0xcc], ebp
mov dword [esp + 0xd4], 0x50
mov dword [esp + 0xdc], edi
mov dword [esp + 0xe4], eax
mov dword [esp + 0xec], edx
mov dword [esp + 0xf4], eax
mov dword [esp + 0xfc], ebp
mov dword [esp + 0x104], eax
mov dword [esp + 0x10c], ebx
mov dword [esp + 0x114], eax
call fcn.00435110
push eax
push 0xf
call fcn.00435110
push eax
call fcn.00435ca0
test eax, eax
je 0x436f5e
fld dword [0x484aec]
push ecx
fstp dword [esp]
push ebp
mov ecx, esi
call fcn.00435110
push eax
push 0xf
call fcn.00435110
push eax
call fcn.00436360
mov dword [esi + 0x1e4], eax
lea ebx, [esp + 0x34]
mov dword [esp + 0x20], 0xe
lea ebx, [ebx]
fild dword [ebx + 4]
mov edi, dword [ebx]
push ecx
mov ecx, esi
fstp dword [esp + 0x20]
fld dword [esp + 0x20]
fstp dword [esp]
push 1
push edi
call fcn.00435110
push eax
mov eax, dword [ebx - 4]
push eax
call fcn.00435110
push eax
call fcn.00435ca0
test eax, eax
jne 0x436fc9
fld dword [esp + 0x1c]
push ecx
fstp dword [esp]
push edi
mov ecx, esi
call fcn.00435110
push eax
mov eax, dword [ebx - 4]
push eax
call fcn.00435110
push eax
call fcn.00435d40
mov edx, dword [ebx - 8]
mov dword [esi + edx*4 + 0x16c], eax
add ebx, 0x10
sub dword [esp + 0x20], 1
jne 0x436f70
fld dword [0x484ae8]
push ecx
fstp dword [esp]
push 1
push 0x23
mov ecx, esi
call fcn.00435110
push eax
push 0x29
call fcn.00435110
push eax
call fcn.00435ca0
test eax, eax
je 0x437021
fld dword [0x484ae8]
push ecx
fstp dword [esp]
push 0x23
mov ecx, esi
call fcn.00435110
push eax
push 0x29
call fcn.00435110
push eax
call fcn.00436360
mov dword [esi + 0x1f8], eax
cmp dword [esp + 0x18], 0
jne 0x43719a
push ebp
mov ecx, esi
call fcn.00435110
shr eax, 0x10
movzx ecx, al
imul ecx, ecx, 0x32
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
push 5
mov ecx, esi
mov ebx, eax
call fcn.00435110
shr eax, 0x10
movzx eax, al
lea edi, [eax + eax*4]
add edi, edi
add edi, edi
add edi, edi
mov eax, 0x51eb851f
imul edi
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
add bl, cl
push 0xd
mov ecx, esi
call fcn.00435110
shr eax, 0x10
movzx eax, al
lea edi, [eax + eax*4]
add edi, edi
mov eax, 0x51eb851f
imul edi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
add bl, al
xor eax, eax
mov ah, bl
push ebp
mov dword [esp + 0x24], eax
call fcn.00435110
movzx edi, ah
imul edi, edi, 0x32
mov eax, 0x51eb851f
imul edi
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov ebx, ecx
push 5
mov ecx, esi
call fcn.00435110
movzx eax, ah
lea edi, [eax + eax*4]
add edi, edi
add edi, edi
add edi, edi
mov eax, 0x51eb851f
imul edi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
push 0xd
add bl, al
call fcn.00435110
movzx eax, ah
lea edi, [eax + eax*4]
add edi, edi
mov eax, 0x51eb851f
imul edi
sar edx, 5
mov ecx, edx
mov eax, dword [esp + 0x20]
shr ecx, 0x1f
add ecx, edx
add bl, cl
mov al, bl
push ebp
mov ecx, esi
shl eax, 8
mov dword [esp + 0x24], eax
call fcn.00435110
movzx edi, al
imul edi, edi, 0x32
mov eax, 0x51eb851f
imul edi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
push 5
mov ebx, eax
call fcn.00435110
movzx eax, al
lea edi, [eax + eax*4]
add edi, edi
add edi, edi
add edi, edi
mov eax, 0x51eb851f
imul edi
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
add bl, cl
push 0xd
mov ecx, esi
call fcn.00435110
movzx eax, al
lea edi, [eax + eax*4]
add edi, edi
mov eax, 0x51eb851f
imul edi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
add bl, al
movzx ecx, bl
mov ebx, dword [esp + 0x20]
or ebx, ecx
mov dword [esi + 0x1fc], ebx
push 0xf
mov ecx, esi
call fcn.00435110
movzx edi, al
movzx ebx, ah
mov dword [esp + 0x18], eax
shr eax, 0x10
cmp edi, ebx
movzx edx, al
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], edx
mov eax, edi
jg 0x4371c7
mov eax, ebx
cmp eax, edx
jle 0x4371d3
cmp edi, ebx
jg 0x4371d5
mov edi, ebx
jmp 0x4371d5
mov edi, edx
test edi, edi
jne 0x4371e5
mov dword [esi + 0x22c], 0x232323
jmp 0x437238
mov eax, 0xff
sub eax, edi
cmp eax, 0x23
mov ecx, 0x23
jg 0x4371f8
mov ecx, eax
add ecx, edi
mov eax, ecx
imul eax, edx
cdq
idiv edi
xor edx, edx
mov dh, al
mov eax, ecx
imul eax, ebx
mov dword [esp + 0x1c], edx
cdq
idiv edi
mov edx, dword [esp + 0x1c]
mov dl, al
mov eax, ecx
imul eax, dword [esp + 0x20]
shl edx, 8
mov dword [esp + 0x1c], edx
cdq
idiv edi
movzx edx, al
mov eax, dword [esp + 0x1c]
or eax, edx
mov dword [esi + 0x22c], eax
push 0x10
mov ecx, esi
call fcn.00435110
movzx edi, al
movzx ebx, ah
shr eax, 0x10
cmp edi, ebx
movzx edx, al
mov dword [esp + 0x14], edi
mov eax, edi
jg 0x437259
mov eax, ebx
cmp eax, edx
jle 0x437265
cmp edi, ebx
jg 0x437267
mov edi, ebx
jmp 0x437267
mov edi, edx
cmp dword [esp + 0x18], 0
jne 0x43727a
mov dword [esi + 0x230], 0x7f7f7f
jmp 0x4372cd
test edi, edi
jne 0x437286
mov dword [esi + 0x230], edi
jmp 0x4372cd
xor ecx, ecx
lea eax, [edi - 0x2b]
test eax, eax
setl cl
sub ecx, 1
and ecx, eax
mov eax, ecx
imul eax, edx
cdq
idiv edi
xor edx, edx
mov dh, al
mov eax, ecx
imul eax, ebx
mov dword [esp + 0x1c], edx
cdq
idiv edi
mov edx, dword [esp + 0x1c]
mov dl, al
mov eax, ecx
imul eax, dword [esp + 0x14]
shl edx, 8
mov ecx, edx
cdq
idiv edi
movzx eax, al
or ecx, eax
mov dword [esi + 0x230], ecx
mov ecx, dword [esi + 0x1e8]
fnstcw word [esp + 0x18]
mov edx, ecx
shr edx, 0x10
movzx eax, dl
mov dword [esp + 0x14], eax
movzx eax, word [esp + 0x18]
fild dword [esp + 0x14]
fld qword [0x484ae0]
or eax, 0xc00
mov dword [esp + 0x14], eax
fmul st(1), st(0)
movzx eax, ch
fxch st(1)
fldcw word [esp + 0x14]
xor ebx, ebx
fistp dword [esp + 0x14]
movzx edx, byte [esp + 0x14]
mov dword [esp + 0x14], eax
mov bh, dl
fldcw word [esp + 0x18]
fild dword [esp + 0x14]
fnstcw word [esp + 0x18]
fmul st(1)
movzx eax, word [esp + 0x18]
or eax, 0xc00
mov dword [esp + 0x14], eax
movzx eax, cl
fldcw word [esp + 0x14]
fistp dword [esp + 0x14]
movzx edx, byte [esp + 0x14]
mov dword [esp + 0x14], eax
mov bl, dl
fldcw word [esp + 0x18]
fild dword [esp + 0x14]
fnstcw word [esp + 0x18]
shl ebx, 8
fmulp st(1)
movzx eax, word [esp + 0x18]
or eax, 0xc00
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x20]
add eax, 0xf
fldcw word [esp + 0x14]
fistp dword [esp + 0x14]
mov cl, byte [esp + 0x14]
movzx edx, cl
or ebx, edx
cmp eax, 0xff
fldcw word [esp + 0x18]
mov dword [esi + 0x1f4], ebx
jl 0x437396
mov eax, 0xff
mov edx, dword [esp + 0x24]
add edx, 0xf
cmp edx, 0xff
jl 0x4373aa
mov edx, 0xff
mov ecx, dword [esp + 0x28]
add ecx, 0xf
cmp ecx, 0xff
jl 0x4373be
mov ecx, 0xff
xor ebx, ebx
mov bh, cl
movzx eax, al
push ebp
mov ecx, esi
mov bl, dl
shl ebx, 8
or ebx, eax
mov dword [esi + 0x1c4], ebx
call fcn.00435110
push 0x28
mov dword [esi + 0x240], eax
call fcn.00435110
mov ecx, dword [esi + 0x20c]
mov dword [esi + 0x25c], ecx
mov ecx, esi
mov dword [esi + 0x254], eax
call fcn.004365a0
push 1
lea ecx, [esp + 0x110]
call fcn.00449e10
push 0x484ac8
push 0
lea ecx, [esp + 0x114]
mov dword [esp + 0x12c], 0
call fcn.0044a1d0
lea ecx, [esp + 0x10c]
call fcn.0044a090
test eax, eax
je 0x437458
add esi, 0x250
push esi
push 0xed9
push 0
push 0
lea ecx, [esp + 0x11c]
call fcn.00449fd0
lea ecx, [esp + 0x10c]
mov dword [esp + 0x124], 0xffffffff
call fcn.0044a270
mov ecx, dword [esp + 0x11c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x114
ret