Function at 0x435903
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x46ba9b
mov eax, dword fs:[0]
push eax
sub esp, 0x6a0
mov eax, dword [0x4b4d60]
xor eax, esp
mov dword [esp + 0x698], eax
push ebx
push esi
push edi
mov eax, dword [0x4b4d60]
xor eax, esp
push eax
lea eax, [esp + 0x6b0]
mov dword fs:[0], eax
mov edi, ecx
mov esi, edx
xor ebx, ebx
mov dword [esp + 0x68], edi
mov dword [esp + 0x70], esi
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebx
call fcn.00441658
push eax
lea ecx, [esp + 0x24]
call fcn.004161e0
mov dword [esp + 0x6b8], ebx
call fcn.00441658
push eax
lea ecx, [esp + 0x14]
call fcn.004161e0
mov byte [esp + 0x6b8], 1
call fcn.00441658
push eax
lea ecx, [esp + 0x2c]
call fcn.004161e0
mov byte [esp + 0x6b8], 2
call fcn.00441658
push eax
lea ecx, [esp + 0x28]
call fcn.004161e0
mov byte [esp + 0x6b8], 3
call fcn.00441658
push eax
lea ecx, [esp + 0x34]
call fcn.004161e0
push 0x477330
xor ecx, ecx
mov byte [esp + 0x6bc], 4
call fcn.00408dad
xor ecx, ecx
cmp eax, 0xffffffff
setne cl
mov dword [esp + 0x48], ecx
cmp ecx, ebx
lea ecx, [esp + 0x20]
je 0x435a18
push 0x479bb8
call fcn.00402b56
push 0x49d330
lea ecx, [esp + 0x2c]
call fcn.00402b56
push 0x49d370
lea ecx, [esp + 0x28]
call fcn.00402b56
push 0x477310
jmp 0x435a43
push 0x479c08
call fcn.00402b56
push 0x49d3c0
lea ecx, [esp + 0x2c]
call fcn.00402b56
push 0x49d400
lea ecx, [esp + 0x28]
call fcn.00402b56
push 0x477320
lea ecx, [edi + 0x70]
call fcn.00402b56
mov dword [esp + 0x44], ebx
push 0x479cf4
lea ecx, [esp + 0x64]
call fcn.00402ae2
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x8c]
push eax
lea ebx, [esp + 0x68]
lea edi, [esp + 0x4c]
mov byte [esp + 0x6c0], 5
call fcn.00436467
pop ecx
pop ecx
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0x6bc], 6
call fcn.0040919a
mov ecx, dword [esp + 0x88]
add ecx, 0xfffffff0
call fcn.00402faf
mov byte [esp + 0x6b8], 4
mov ecx, dword [esp + 0x60]
add ecx, 0xfffffff0
call fcn.00402faf
mov edi, dword [esp + 0x30]
xor ebx, ebx
cmp dword [edi - 0xc], ebx
je 0x435ff0
mov dword [esp + 0x40], ebx
mov esi, 0x104
push esi
lea ecx, [esp + 0x14]
call fcn.00402e59
push eax
push dword [esp + 0x44]
push ebx
push edi
call fcn.004411ac
push 0xffffffffffffffff
lea ecx, [esp + 0x14]
mov dword [esp + 0x20], eax
call fcn.004090b0
cmp dword [esp + 0x1c], ebx
jne 0x435fe2
mov eax, dword [esp + 0x70]
push dword [eax]
lea ecx, [esp + 0x14]
call fcn.00408ee5
test eax, eax
jne 0x435fe2
or dword [esp + 0x44], 0xffffffff
mov edi, 0x206
push edi
mov word [esp + 0x298], ax
lea eax, [esp + 0x29a]
push ebx
push eax
call fcn.00452f30
add esp, 0xc
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x298]
push eax
push 0x479cf8
push dword [esp + 0x1c]
mov dword [esp + 0x3c], esi
call fcn.004411b2
cmp eax, ebx
jne 0x43605b
xor eax, eax
push edi
mov word [esp + 0x4a0], ax
lea eax, [esp + 0x4a2]
push ebx
push eax
call fcn.00452f30
add esp, 0xc
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x4a0]
push eax
push 0x49b2f4
push dword [esp + 0x1c]
mov dword [esp + 0x3c], esi
call fcn.004411b2
mov edi, eax
lea eax, [esp + 0x49c]
push eax
lea ecx, [esp + 0x40]
call fcn.00402ae2
mov byte [esp + 0x6b8], 8
cmp edi, ebx
jne 0x43609e
mov eax, dword [esp + 0x3c]
cmp dword [eax - 0xc], ebx
je 0x43609e
lea eax, [esp + 0x10]
push eax
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x40]
push eax
call fcn.00402825
add esp, 0xc
mov byte [esp + 0x6b8], 0xa
call fcn.00441658
push eax
lea ecx, [esp + 0x38]
call fcn.004161e0
lea eax, [esp + 0x34]
push eax
push 0x49d544
mov byte [esp + 0x6c0], 0xb
push dword [esp + 0x40]
push 0x80000002
call fcn.0043666a
mov edi, dword [esp + 0x78]
add esp, 0x10
lea eax, [esp + 0x3c]
lea ecx, [edi + 0x54]
push eax
mov dword [esp + 0x78], ecx
call fcn.0040919a
lea eax, [esp + 0x10]
lea ecx, [edi + 0x50]
push eax
call fcn.0040919a
lea eax, [edi + 0x78]
push eax
push 0x49e84c
push dword [esp + 0x40]
push 0x80000002
call fcn.0043666a
lea eax, [edi + 0x7c]
push eax
push 0x49e86c
push dword [esp + 0x50]
push 0x80000002
call fcn.0043666a
add esp, 0x20
cmp dword [0x4b97b4], ebx
je 0x435cc3
lea eax, [edi + 0x58]
mov dword [esp + 0x18], eax
mov eax, dword [eax]
cmp dword [eax - 0xc], ebx
je 0x435cc3
push 0x49f7f8
lea ecx, [esp + 0x68]
call fcn.00402ae2
push ebx
lea eax, [esp + 0x68]
push eax
push 2
mov byte [esp + 0x6c4], 0xc
call fcn.004131f3
mov byte [esp + 0x6c4], 0xb
mov ecx, dword [esp + 0x70]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.00402faf
jmp 0x435d7a
xor eax, eax
push 0x206
mov word [esp + 0x90], ax
lea eax, [esp + 0x92]
push ebx
push eax
mov dword [esp + 0x38], esi
call fcn.00452f30
add esp, 0xc
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x90]
push eax
push 0x49e9f0
push dword [esp + 0x1c]
call fcn.004411b2
cmp eax, ebx
jne 0x435d22
lea eax, [esp + 0x8c]
push eax
call dword [fcn.004723bc]
test eax, eax
je 0x435d22
lea eax, [esp + 0x8c]
push eax
jmp 0x435d6e
push 0x49ea20
lea ecx, [esp + 0x50]
call fcn.00402ae2
push ebx
lea eax, [esp + 0x50]
push eax
push 2
mov byte [esp + 0x6c4], 0xd
call fcn.004131f3
mov byte [esp + 0x6c4], 0xb
mov ecx, dword [esp + 0x58]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.00402faf
cmp dword [esp + 0x48], ebx
je 0x435d69
push 0x47b9a8
jmp 0x435d6e
push 0x49ea68
lea ecx, [edi + 0x58]
mov dword [esp + 0x1c], ecx
call fcn.00402b56
mov eax, dword [esp + 0x34]
cmp dword [eax - 0xc], ebx
jne 0x435dcc
lea eax, [esp + 0x294]
push eax
lea ecx, [esp + 0x84]
call fcn.00402ae2
push 0x4796d8
push eax
lea eax, [esp + 0x8c]
mov byte [esp + 0x6c0], 0xe
or dword [esp + 0x1c], 1
push eax
call fcn.00408e3f
add esp, 0xc
mov dword [esp + 0x6b8], 0xf
or dword [esp + 0x14], 2
jmp 0x435dd0
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x80]
push eax
call fcn.00402825
add esp, 0xc
lea esi, [edi + 0x64]
push eax
mov ecx, esi
mov dword [esp + 0x6bc], 0x10
mov dword [esp + 0x80], esi
call fcn.0040919a
mov ecx, dword [esp + 0x78]
add ecx, 0xfffffff0
call fcn.00402faf
test byte [esp + 0x14], 2
je 0x435e2a
mov ecx, dword [esp + 0x84]
and dword [esp + 0x14], 0xfffffffd
add ecx, 0xfffffff0
call fcn.00402faf
mov dword [esp + 0x6b8], 0xb
test byte [esp + 0x14], 1
je 0x435e50
mov ecx, dword [esp + 0x80]
and dword [esp + 0x14], 0xfffffffe
add ecx, 0xfffffff0
call fcn.00402faf
push 0x49d558
lea eax, [esp + 0x70]
push esi
push eax
call fcn.00408e3f
add esp, 0xc
lea esi, [edi + 0x68]
push esi
mov byte [esp + 0x6bc], 0x11
mov eax, dword [eax]
push 0x49d5e8
push eax
push 0x80000002
call fcn.0043666a
mov byte [esp + 0x6c8], 0xb
mov ecx, dword [esp + 0x7c]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.00402faf
lea eax, [esp + 0x294]
push eax
call fcn.00452f17
pop ecx
cmp eax, 0xc
jb 0x435ebb
cmp dword [esp + 0x48], ebx
jne 0x435ebb
mov dword [edi + 0xa0], 1
push 0x49ec28
lea ecx, [esp + 0x5c]
call fcn.00402ae2
push ebx
push dword [esp + 0x1c]
lea eax, [esp + 0x60]
push eax
push 2
pop edi
push edi
mov byte [esp + 0x6c8], 0x12
call fcn.00412d23
mov byte [esp + 0x6c8], 0xb
mov ecx, dword [esp + 0x68]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.00402faf
push 0x49ec60
lea ecx, [esp + 0x54]
call fcn.00402ae2
push ebx
push dword [esp + 0x78]
lea eax, [esp + 0x58]
push eax
push edi
mov byte [esp + 0x6c8], 0x13
call fcn.00412d23
mov byte [esp + 0x6c8], 0xb
mov ecx, dword [esp + 0x60]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.00402faf
push 0x49ed38
lea ecx, [esp + 0x58]
call fcn.00402ae2
push ebx
push dword [esp + 0x80]
lea eax, [esp + 0x5c]
push eax
push edi
mov byte [esp + 0x6c8], 0x14
call fcn.00412d23
mov byte [esp + 0x6c8], 0xb
mov ecx, dword [esp + 0x64]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.00402faf
push 0x49ed5c
lea ecx, [esp + 0x60]
call fcn.00402ae2
push ebx
push esi
lea eax, [esp + 0x64]
push eax
push edi
mov byte [esp + 0x6c8], 0x15
call fcn.00412d23
mov ecx, dword [esp + 0x6c]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.00402faf
mov ecx, dword [esp + 0x34]
add ecx, 0xfffffff0
mov dword [esp + 0x18], 1
call fcn.00402faf
mov ecx, dword [esp + 0x38]
add ecx, 0xfffffff0
call fcn.00402faf
mov byte [esp + 0x6b8], 4
mov ecx, dword [esp + 0x3c]
add ecx, 0xfffffff0
call fcn.00402faf
mov edi, dword [esp + 0x30]
inc dword [esp + 0x40]
cmp dword [esp + 0x1c], ebx
je 0x435ac9
cmp dword [esp + 0x44], 0xffffffff
jne 0x435a4f
lea ecx, [edi - 0x10]
call fcn.00402faf
mov ecx, dword [esp + 0x24]
add ecx, 0xfffffff0
call fcn.00402faf
mov ecx, dword [esp + 0x28]
add ecx, 0xfffffff0
call fcn.00402faf
mov ecx, dword [esp + 0x10]
add ecx, 0xfffffff0
call fcn.00402faf
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.00402faf
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x6b0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x698]
xor ecx, esp
call fcn.0045220b
mov esp, ebp
pop ebp
ret
push 0x49d570
lea ecx, [esp + 0x20]
call fcn.00402ae2
push ebx
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x24]
push eax
push 1
mov byte [esp + 0x6c8], 7
call fcn.00412d23
mov ecx, dword [esp + 0x2c]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.00402faf
mov ecx, dword [esp + 0x30]
add ecx, 0xfffffff0
jmp 0x435ffe
push 0x49e8f8
lea ecx, [esp + 0x20]
call fcn.00402ae2
push ebx
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x24]
push eax
push 1
mov byte [esp + 0x6c8], 9
call fcn.00412d23
mov ecx, dword [esp + 0x2c]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.00402faf
mov ecx, dword [esp + 0x3c]
jmp 0x43608a