Function at 0x435bc0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x14]
cmp eax, dword [ecx + 8]
jbe 0x4369c1
sub esp, 0x94
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [esp + 0x70], eax
jmp 0x435bfa
mov eax, dword [esp + 0x70]
mov ecx, dword [eax + 0x58]
mov dword [esp + 0x90], ecx
lea edx, [0x58ab54]
mov dword [esp], edx
call fcn.004026b0
movzx eax, byte [esp + 4]
test al, al
je 0x435c26
call fcn.00435940
mov eax, dword [esp + 0x70]
jmp 0x435bfa
mov eax, dword [esp + 0x90]
test byte [eax], al
mov ecx, dword [eax + 0x1180]
test ecx, ecx
je 0x435c45
call fcn.00434140
mov eax, dword [esp + 0x90]
mov dword [esp], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0
call fcn.00437a90
movzx eax, byte [0x593de8]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x3c], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0x38], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x40], ebx
mov ebp, dword [esp + 0xc]
mov dword [esp + 0x44], ebp
mov esi, dword [esp + 0x10]
mov dword [esp + 0x48], esi
test al, al
jne 0x435c9b
movzx eax, byte [0x593de9]
test al, al
je 0x435cbf
call fcn.004480f0
mov eax, dword [esp]
test eax, eax
jne 0x43660e
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x40]
mov ebp, dword [esp + 0x44]
mov esi, dword [esp + 0x48]
mov eax, dword [0x5af7e0]
test eax, eax
je 0x435d0e
lea eax, [0x5b00e0]
mov dword [esp], eax
mov ecx, dword [esp + 0x90]
mov dword [esp + 4], ecx
mov dword [esp + 0xc], esi
mov dword [esp + 8], ebp
call fcn.0041b6e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
test eax, eax
jne 0x43694a
mov ebx, dword [esp + 0x40]
mov esi, edx
mov ebp, ecx
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
mov dword [esp + 0x48], esi
mov dword [esp + 0x44], ebp
mov eax, dword [esp + 0x90]
mov edi, dword [eax + 0xc]
imul edi, edi, 0xc10c9715
cmp edi, 0x4325c53
ja 0x435d88
mov edi, dword [0x58ab1c]
test edi, edi
jle 0x435d88
nop
lea eax, [0x58aad8]
mov dword [esp], eax
call fcn.00409100
mov eax, dword [esp + 0x90]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0043bf60
mov eax, dword [esp + 8]
mov dword [esp + 0x84], eax
nop
nop
lea ecx, [0x58aad8]
mov dword [esp], ecx
call fcn.00409300
mov eax, dword [esp + 0x84]
test eax, eax
jne 0x436666
lea eax, [0x5af7d0]
mov dword [esp], eax
call fcn.00402700
mov eax, dword [esp + 4]
and eax, 0xc
cmp eax, 0xc
jne 0x435dec
lea eax, [0x5af7d0]
mov dword [esp], eax
mov dword [esp + 4], 0xd
mov dword [esp + 8], 1
call fcn.00402720
movzx eax, byte [esp + 0xc]
test al, al
je 0x435dd1
mov eax, dword [0x58a144]
jmp 0x435dd3
xor eax, eax
test eax, eax
je 0x435dec
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 1
call fcn.00432a90
mov eax, dword [0x4cfcc8]
mov eax, dword [eax]
test eax, eax
je 0x435e08
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.004527a0
mov eax, dword [esp + 0x90]
mov dword [esp], eax
call fcn.0043ca20
mov eax, dword [esp + 4]
movzx ecx, byte [esp + 8]
test eax, eax
jne 0x43692d
mov eax, dword [0x58ab1c]
test eax, eax
je 0x435e82
nop
lea eax, [0x58aad8]
mov dword [esp], eax
call fcn.00409100
mov eax, dword [esp + 0x90]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0043bf60
mov eax, dword [esp + 8]
mov dword [esp + 0x80], eax
nop
nop
lea ecx, [0x58aad8]
mov dword [esp], ecx
call fcn.00409300
mov eax, dword [esp + 0x80]
test eax, eax
jne 0x43690f
lea eax, [0x5af80c]
mov dword [esp], eax
call fcn.00402700
mov eax, dword [esp + 4]
test eax, eax
jne 0x435e9c
xor ecx, ecx
jmp 0x435ed8
lea eax, [0x5af810]
mov dword [esp], eax
call fcn.00402700
mov eax, dword [esp + 4]
test eax, eax
ja 0x435eb6
xor ecx, ecx
jmp 0x435ed8
lea eax, [0x58aac8]
mov dword [esp], eax
call fcn.004027f0
mov eax, dword [esp + 4]
test eax, eax
setne al
mov ecx, dword [esp + 8]
test ecx, ecx
setne cl
or ecx, eax
test cl, cl
je 0x435f00
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.0042a910
mov eax, dword [esp + 8]
mov dword [esp + 0x50], eax
test eax, eax
jne 0x436889
mov eax, dword [esp + 0x70]
movzx ecx, byte [eax + 0x88]
test cl, cl
je 0x435f16
mov ecx, 1
jmp 0x435f55
lea eax, [0x58ab0c]
mov dword [esp], eax
call fcn.004027e0
mov eax, dword [esp + 4]
mov dword [esp + 0x2c], eax
lea ecx, [0x58ab08]
mov dword [esp], ecx
call fcn.004027e0
mov eax, dword [esp + 0x2c]
shl eax, 1
mov ecx, dword [0x5af7ec]
sub ecx, dword [esp + 4]
cmp ecx, eax
setg al
mov ecx, eax
mov eax, dword [esp + 0x70]
test cl, cl
jne 0x435f6e
mov esi, dword [esp + 0x40]
mov ebp, dword [esp + 0x38]
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
jmp 0x43602f
movzx ecx, byte [eax + 0x88]
test cl, cl
jne 0x435f81
mov dword [esp], eax
call fcn.00432a30
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x44]
mov dword [esp], eax
call fcn.00436ae0
mov eax, dword [esp + 8]
movzx ecx, byte [esp + 0x20]
movzx edx, byte [esp + 0xc]
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x10]
mov dword [esp + 0x44], esi
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
test eax, eax
jne 0x43686c
test cl, cl
je 0x435fd0
mov eax, dword [esp + 0x70]
jmp 0x435bfa
mov dword [esp + 0x48], edi
test ebp, ebp
setne al
test ebx, ebx
setne cl
or ecx, eax
test cl, cl
je 0x43601f
mov eax, dword [esp + 0x38]
test eax, eax
sete cl
mov edx, dword [esp + 0x3c]
test edx, edx
xchg edi, ebx
sete bl
xchg edi, ebx
and edi, ecx
xchg edi, eax
test al, al
xchg edi, eax
jne 0x436027
cmp eax, ebp
seta cl
cmp ebx, edx
sete dl
setl bl
and ecx, edx
or ecx, ebx
test cl, cl
jne 0x436027
mov esi, dword [esp + 0x40]
mov ebp, eax
jmp 0x436027
mov esi, dword [esp + 0x40]
mov ebp, dword [esp + 0x38]
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x38], ebp
mov dword [esp + 0x40], esi
mov dword [esp + 0x44], ecx
mov dword [esp + 0x48], eax
mov edx, dword [0x5af7e0]
test edx, edx
jne 0x43604d
xor edx, edx
jmp 0x43609e
mov eax, dword [esp + 0x90]
mov dword [esp], eax
call fcn.00415a60
movzx eax, byte [esp + 4]
test al, al
jne 0x436079
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
mov ebp, dword [esp + 0x38]
mov esi, dword [esp + 0x40]
xor edx, edx
jmp 0x43609e
lea eax, [0x5b00e0]
mov dword [esp], eax
call fcn.0041c9e0
movzx eax, byte [esp + 4]
mov ecx, dword [esp + 0x44]
mov ebp, dword [esp + 0x38]
mov esi, dword [esp + 0x40]
mov edx, eax
mov eax, dword [esp + 0x48]
test dl, dl
je 0x4360ca
lea eax, [0x5af890]
mov dword [esp], eax
call fcn.00408fb0
mov eax, dword [esp + 4]
test eax, eax
jne 0x4367f2
lea eax, [0x5b00e0]
mov dword [esp], eax
call fcn.0041ca90
mov eax, dword [0x58a370]
mov dword [esp + 0x8c], eax
mov ecx, dword [0x58a374]
mov dword [esp + 0x5c], ecx
mov edx, dword [0x58a378]
mov dword [esp + 0x60], edx
mov ebx, dword [0x58a3b0]
mov dword [esp + 0x74], ebx
mov ebp, dword [0x58a3b4]
mov dword [esp + 0x54], ebp
mov esi, dword [0x58a3b8]
mov dword [esp + 0x58], esi
mov edi, dword [0x58a3d0]
mov dword [esp + 0x64], edi
mov edi, dword [0x58a3d4]
mov dword [esp + 0x30], edi
mov edi, dword [0x58a3d8]
mov dword [esp + 0x34], edi
nop
lea edi, [0x58aad8]
mov dword [esp], edi
call fcn.00409100
lea eax, [0x58ab54]
mov dword [esp], eax
call fcn.004026b0
movzx eax, byte [esp + 4]
test al, al
jne 0x43615e
mov eax, dword [esp + 0x90]
mov ecx, dword [eax + 0x1180]
test ecx, ecx
je 0x436177
nop
nop
lea eax, [0x58aad8]
mov dword [esp], eax
call fcn.00409300
mov eax, dword [esp + 0x70]
jmp 0x435bfa
mov ecx, dword [0x58ab1c]
test ecx, ecx
jne 0x4367a8
mov ecx, dword [esp + 0x70]
movzx edx, byte [ecx + 0x88]
test dl, dl
je 0x436198
xor edx, edx
jmp 0x4361bb
lea eax, [0x58ab10]
mov dword [esp], eax
call fcn.00402700
cmp dword [esp + 4], 1
sete al
mov ecx, dword [esp + 0x70]
mov edx, eax
mov eax, dword [esp + 0x90]
test dl, dl
je 0x4361e0
mov dword [esp], ecx
call fcn.00432a30
nop
nop
lea eax, [0x58aad8]
mov dword [esp], eax
call fcn.00409300
mov eax, dword [esp + 0x70]
jmp 0x435bfa
call fcn.0043afd0
mov eax, dword [esp + 0x90]
cmp dword [esp], eax
jne 0x4369aa
mov dword [esp], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 4], eax
call fcn.0043c200
nop
nop
lea eax, [0x58aad8]
mov dword [esp], eax
call fcn.00409300
mov eax, dword [esp + 0x70]
movzx ecx, byte [eax + 0x88]
mov byte [esp + 0x29], cl
test cl, cl
jne 0x43623d
mov esi, dword [esp + 0x40]
mov ebp, dword [esp + 0x38]
jmp 0x436325
mov byte [eax + 0x88], 0
lea ecx, [0x58ab0c]
mov dword [esp], ecx
mov dword [esp + 4], 0xffffffff
call fcn.00402800
mov eax, dword [esp + 8]
test eax, eax
jl 0x436994
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
mov ecx, dword [esp + 0x5c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x60]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0x74]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x54]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x58]
mov dword [esp + 0x14], ebx
call fcn.00437000
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4362c2
mov dword [esp], eax
call fcn.0043af00
mov eax, dword [esp + 0x70]
mov dword [esp], eax
call fcn.00432a30
mov eax, dword [esp + 0x70]
jmp 0x435bfa
call fcn.00437240
mov eax, dword [esp]
mov ecx, dword [esp + 4]
test eax, eax
jne 0x436724
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x18], eax
call fcn.00437110
mov ebp, dword [esp + 0x20]
mov esi, dword [esp + 0x24]
mov dword [esp + 0x38], ebp
mov dword [esp + 0x40], esi
lea eax, [0x5af80c]
mov dword [esp], eax
call fcn.00402700
mov eax, dword [esp + 4]
test eax, eax
jne 0x43634f
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x40]
xor ecx, ecx
jmp 0x4363bb
lea eax, [0x5af810]
mov dword [esp], eax
call fcn.00402700
mov eax, dword [esp + 4]
test eax, eax
ja 0x43637d
mov eax, dword [esp + 0x38]
test eax, eax
setne cl
mov edx, dword [esp + 0x40]
test edx, edx
setne bl
or ebx, ecx
test bl, bl
je 0x4363b9
lea eax, [0x58aac8]
mov dword [esp], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0
call fcn.004028e0
mov eax, dword [esp + 0xc]
test eax, eax
setne al
mov ecx, dword [esp + 0x10]
test ecx, ecx
setne cl
or ecx, eax
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x40]
jmp 0x4363bb
xor ecx, ecx
test cl, cl
jne 0x436452
test eax, eax
setne cl
test edx, edx
setne bl
or ebx, ecx
test bl, bl
jne 0x4363d7
xor ecx, ecx
jmp 0x4363f8
lea eax, [0x5af80c]
mov dword [esp], eax
call fcn.00402700
mov eax, dword [esp + 4]
test eax, eax
setne al
mov edx, dword [esp + 0x40]
mov ecx, eax
mov eax, dword [esp + 0x38]
test cl, cl
je 0x436716
nop
lea eax, [0x58aad0]
mov dword [esp], eax
call fcn.004027f0
mov eax, dword [esp + 4]
test eax, eax
sete cl
mov edx, dword [esp + 8]
test edx, edx
sete bl
and ebx, ecx
test bl, bl
jne 0x436448
mov ecx, dword [esp + 0x38]
cmp ecx, eax
setb al
mov ecx, dword [esp + 0x40]
cmp ecx, edx
sete cl
setl dl
and eax, ecx
or eax, edx
test al, al
je 0x436716
call fcn.0042a860
jmp 0x436716
nop
lea ecx, [0x58aad0]
mov dword [esp], ecx
mov dword [esp + 8], edx
mov dword [esp + 4], eax
call fcn.004027b0
mov eax, dword [esp + 0x70]
mov ecx, dword [eax + 0x58]
test ecx, ecx
jne 0x43697e
movzx ecx, byte [eax + 0x88]
test cl, cl
jne 0x436968
mov eax, dword [esp + 0x38]
test eax, eax
setne cl
mov byte [esp + 0x2b], cl
mov edx, dword [esp + 0x40]
test edx, edx
setne bl
mov byte [esp + 0x2a], bl
nop
call fcn.004539e0
movzx eax, byte [esp + 0x2a]
movzx ecx, byte [esp + 0x2b]
or eax, ecx
mov ecx, dword [esp + 4]
mov edx, dword [esp + 4]
mov ebx, dword [esp]
test al, al
je 0x4364d8
mov eax, dword [esp + 0x38]
sub eax, ebx
mov ebp, dword [esp + 0x40]
sbb ebp, ecx
test ebp, ebp
jge 0x4364e2
xor ebp, ebp
xor eax, eax
jmp 0x4364e2
mov ebp, 0xffffffff
mov eax, 0xffffffff
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], edx
mov ecx, dword [0x5af888]
test ecx, ecx
setne cl
mov esi, dword [0x5af88c]
test esi, esi
xchg esi, ebx
setne bl
xchg esi, ebx
or esi, ecx
xchg esi, eax
test al, al
xchg esi, eax
je 0x436510
xor ebp, ebp
xor eax, eax
mov dword [esp + 4], ebp
mov dword [esp], eax
call fcn.0042a910
mov eax, dword [esp + 8]
mov dword [esp + 0x4c], eax
nop
lea eax, [0x58aad0]
mov dword [esp], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0
call fcn.004027b0
nop
lea eax, [0x58aac8]
mov dword [esp], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x44]
mov dword [esp + 4], ecx
call fcn.004027b0
mov eax, dword [0x5af888]
test eax, eax
setne al
mov ecx, dword [0x5af88c]
test ecx, ecx
setne cl
or ecx, eax
test cl, cl
je 0x436594
mov eax, dword [esp + 0x4c]
test eax, eax
jne 0x436594
call fcn.00434e80
mov eax, dword [esp + 0x70]
jmp 0x435bfa
nop
nop
lea eax, [0x58aad8]
mov dword [esp], eax
call fcn.00409100
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x44]
mov dword [esp], eax
call fcn.0043c380
mov eax, dword [esp + 8]
mov dword [esp + 0x68], eax
nop
nop
lea ecx, [0x58aad8]
mov dword [esp], ecx
call fcn.00409300
mov eax, dword [esp + 0x68]
test eax, eax
je 0x43670a
mov dword [esp], eax
call fcn.0043af00
mov eax, dword [esp + 0x4c]
test eax, eax
jne 0x436684
movzx eax, byte [esp + 0x29]
test al, al
je 0x435bf6
mov eax, dword [esp + 0x70]
mov dword [esp], eax
call fcn.00432a30
jmp 0x435bf6
mov dword [esp + 0x88], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.00432da0
mov eax, dword [esp + 0x88]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00449990
mov eax, dword [esp + 0x88]
mov dword [esp + 0x98], eax
mov byte [esp + 0x9c], 0
mov byte [esp + 0x9d], 1
add esp, 0x94
ret
mov dword [esp + 0x98], eax
mov byte [esp + 0x9c], 0
mov byte [esp + 0x9d], 0
add esp, 0x94
ret
nop
nop
mov dword [esp + 0x90], eax
test eax, eax
je 0x436698
mov ecx, dword [eax + 0x58]
mov dword [esp + 0x4c], ecx
lea eax, [esp + 0x4c]
mov dword [esp], eax
call fcn.00437570
mov eax, dword [esp + 0x90]
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.00432da0
movzx eax, byte [0x593de8]
test al, al
je 0x4366e5
mov eax, dword [esp + 0x90]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00449990
mov eax, dword [esp + 0x90]
mov dword [esp + 0x98], eax
mov byte [esp + 0x9c], 0
mov byte [esp + 0x9d], 0
add esp, 0x94
ret
lea eax, [esp + 0x4c]
mov dword [esp], eax
call fcn.00437570
call fcn.00434e80
mov eax, dword [esp + 0x70]
jmp 0x435bfa
mov dword [esp + 0x6c], eax
mov dword [esp + 0x78], ecx
call fcn.0043af00
mov eax, dword [esp + 0x70]
mov dword [esp], eax
call fcn.00432a30
mov eax, dword [esp + 0x6c]
mov dword [eax + 0x950], 3
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.00432da0
movzx eax, byte [0x593de8]
test al, al
je 0x436786
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00449990
mov eax, dword [esp + 0x78]
mov dword [esp + 0x98], eax
mov byte [esp + 0x9c], 0
mov byte [esp + 0x9d], 0
add esp, 0x94
ret
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0043bf60
mov eax, dword [esp + 8]
mov dword [esp + 0x7c], eax
nop
nop
lea ecx, [0x58aad8]
mov dword [esp], ecx
call fcn.00409300
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x98], eax
mov byte [esp + 0x9c], 0
mov byte [esp + 0x9d], 0
add esp, 0x94
ret
mov ecx, dword [esp + 0x90]
mov dword [ecx + 0x950], 3
mov eax, dword [eax + 0xc]
mov dword [esp + 0x90], eax
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.00432da0
movzx eax, byte [0x593de8]
test al, al
je 0x436847
mov eax, dword [esp + 0x90]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00449990
mov eax, dword [esp + 0x90]
mov dword [esp + 0x98], eax
mov byte [esp + 0x9c], 0
mov byte [esp + 0x9d], 0
add esp, 0x94
ret
mov dword [esp + 0x98], eax
mov byte [esp + 0x9c], dl
mov byte [esp + 0x9d], 0
add esp, 0x94
ret
nop
nop
mov dword [esp + 0x90], eax
test eax, eax
je 0x43689d
mov ecx, dword [eax + 0x58]
mov dword [esp + 0x50], ecx
lea eax, [esp + 0x50]
mov dword [esp], eax
call fcn.00437570
mov eax, dword [esp + 0x90]
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 1
call fcn.00432da0
movzx eax, byte [0x593de8]
test al, al
je 0x4368ea
mov eax, dword [esp + 0x90]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00449990
mov eax, dword [esp + 0x90]
mov dword [esp + 0x98], eax
mov byte [esp + 0x9c], 0
mov byte [esp + 0x9d], 0
add esp, 0x94
ret
mov dword [esp + 0x98], eax
mov byte [esp + 0x9c], 0
mov byte [esp + 0x9d], 0
add esp, 0x94
ret
mov dword [esp + 0x98], eax
mov byte [esp + 0x9c], cl
mov byte [esp + 0x9d], 0
add esp, 0x94
ret
mov dword [esp + 0x98], eax
mov byte [esp + 0x9c], 0
mov byte [esp + 0x9d], 1
add esp, 0x94
ret
lea eax, [0x501fd4]
mov dword [esp], eax
mov dword [esp + 4], 0x23
call fcn.0042f840
lea eax, [0x500692]
mov dword [esp], eax
mov dword [esp + 4], 0x1c
call fcn.0042f840
lea eax, [0x501941]
mov dword [esp], eax
mov dword [esp + 4], 0x21
call fcn.0042f840
lea eax, [0x4fdecd]
mov dword [esp], eax
mov dword [esp + 4], 0x15
call fcn.0042f840
nop
call fcn.00451710
jmp fcn.00435bc0