Function at 0x596420
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x596ef3
sub esp, 0x70
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 4]
mov edx, dword [eax]
test ecx, ecx
je 0x59656f
nop
nop
lea ebx, [esp + 0x60]
mov dword [esp + 0x60], ebx
mov ebp, dword [esp + 0x68]
lea esi, [ecx + ebp]
mov dword [esp + 0x40], esi
mov edi, dword [esp + 0x6c]
mov eax, dword [esp + 0x64]
cmp edi, esi
jae 0x5964c9
mov dword [esp + 0x5c], edx
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x38], ecx
lea ecx, [0x68e6c0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], esi
call fcn.0044b870
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x3c]
mov dword [esp + 0x3c], edi
mov dword [esp + 0x58], eax
lea ebx, [eax + ebp]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00463a10
mov eax, dword [esp + 0x40]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x64], eax
nop
nop
mov eax, dword [esp + 0x60]
test eax, eax
je 0x596513
lea ecx, [esp + 0x60]
cmp eax, ecx
je 0x59651b
jmp 0x596eda
lea eax, [esp + 0x60]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x68]
lea ecx, [eax + 1]
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0x6c]
cmp ebx, ecx
jae 0x596560
lea ebp, [0x68e6c0]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.0044b870
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x64], edx
lea ecx, [eax + 1]
mov dword [esp + 0x68], ecx
mov byte [edx + eax], 0x3a
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 0xc]
mov edx, dword [eax + 8]
test ecx, ecx
je 0x596628
nop
mov ebx, dword [esp + 0x60]
test ebx, ebx
je 0x596593
lea ebp, [esp + 0x60]
cmp ebx, ebp
je 0x59659b
jmp 0x596ec2
lea ebx, [esp + 0x60]
mov dword [esp + 0x60], ebx
mov ebx, dword [esp + 0x68]
lea ebp, [ecx + ebx]
mov dword [esp + 0x40], ebp
mov esi, dword [esp + 0x6c]
mov edi, dword [esp + 0x64]
cmp esi, ebp
jae 0x5965f0
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x38], ecx
mov dword [esp + 0x5c], edx
lea eax, [0x68e6c0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.0044b870
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x5c]
mov ebx, dword [esp + 0x3c]
mov dword [esp + 0x3c], esi
mov dword [esp + 0x58], edi
lea eax, [edi + ebx]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00463a10
mov eax, dword [esp + 0x40]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x64], eax
jmp 0x596b35
mov ecx, dword [eax + 4]
test ecx, ecx
jne 0x596641
mov ecx, dword [eax + 0x18]
test ecx, ecx
jne 0x596641
mov ecx, dword [eax + 0x10]
test ecx, ecx
je 0x5968f9
movzx ecx, byte [eax + 0x2c]
test cl, cl
je 0x59665b
mov ecx, dword [eax + 0x18]
test ecx, ecx
jne 0x59665b
mov ecx, dword [eax + 0x10]
test ecx, ecx
je 0x5968f9
mov ecx, dword [eax + 0x18]
test ecx, ecx
jne 0x596670
mov ecx, dword [eax + 0x20]
test ecx, ecx
jne 0x596670
mov ecx, dword [eax + 0x10]
test ecx, ecx
je 0x5966ef
nop
nop
mov ecx, dword [esp + 0x60]
test ecx, ecx
je 0x596687
lea edx, [esp + 0x60]
cmp ecx, edx
je 0x59668f
jmp 0x596eaa
lea ecx, [esp + 0x60]
mov dword [esp + 0x60], ecx
mov ecx, dword [esp + 0x68]
lea edx, [ecx + 2]
mov ebx, dword [esp + 0x6c]
mov ebp, dword [esp + 0x64]
cmp ebx, edx
jae 0x5966dc
mov dword [esp + 0x40], edx
mov dword [esp + 0x3c], ecx
lea eax, [0x68e6c0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0044b870
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x40]
mov word [ebp + ecx], 0x2f2f
mov dword [esp + 0x68], edx
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x64], ebp
mov ecx, dword [eax + 0x10]
test ecx, ecx
je 0x596826
mov dword [esp], ecx
call fcn.005948a0
nop
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x60]
test edx, edx
je 0x596720
lea ebx, [esp + 0x60]
cmp edx, ebx
je 0x59672c
jmp 0x596e92
lea edx, [esp + 0x60]
mov dword [esp + 0x60], edx
lea ebx, [esp + 0x60]
mov edx, dword [esp + 0x68]
lea ebp, [eax + edx]
mov dword [esp + 0x40], ebp
mov esi, dword [esp + 0x6c]
mov edi, dword [esp + 0x64]
cmp esi, ebp
jae 0x596781
mov dword [esp + 0x3c], edx
mov dword [esp + 0x30], eax
mov dword [esp + 0x50], ecx
lea eax, [0x68e6c0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.0044b870
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x3c], esi
mov dword [esp + 0x58], edi
add edx, edi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00463a10
mov eax, dword [esp + 0x40]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x64], eax
nop
nop
mov eax, dword [esp + 0x60]
test eax, eax
je 0x5967ca
lea ecx, [esp + 0x60]
cmp eax, ecx
je 0x5967d2
jmp 0x596e7a
lea eax, [esp + 0x60]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x68]
lea ecx, [eax + 1]
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0x6c]
cmp ebx, ecx
jae 0x596817
lea ebp, [0x68e6c0]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.0044b870
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x64], edx
lea ecx, [eax + 1]
mov dword [esp + 0x68], ecx
mov byte [edx + eax], 0x40
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 0x18]
mov edx, dword [eax + 0x14]
test ecx, ecx
je 0x5968f9
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 3
call fcn.00594540
nop
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x60]
test edx, edx
je 0x596866
lea ebx, [esp + 0x60]
cmp edx, ebx
je 0x59686e
jmp 0x596e62
lea edx, [esp + 0x60]
mov dword [esp + 0x60], edx
mov edx, dword [esp + 0x68]
lea ebx, [edx + eax]
mov dword [esp + 0x40], ebx
mov ebp, dword [esp + 0x6c]
mov esi, dword [esp + 0x64]
cmp ebp, ebx
jae 0x5968c3
mov dword [esp + 0x3c], edx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x4c], ecx
lea eax, [0x68e6c0]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.0044b870
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x58], esi
add edx, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00463a10
mov eax, dword [esp + 0x40]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x74]
mov dword [esp], eax
call fcn.00595fe0
mov eax, dword [esp + 4]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x34], ecx
test ecx, ecx
je 0x5969b4
cmp byte [eax], 0x2f
je 0x5969ae
mov edx, dword [esp + 0x74]
mov ebx, dword [edx + 0x18]
test ebx, ebx
je 0x5969b8
nop
nop
mov ebx, dword [esp + 0x60]
test ebx, ebx
je 0x596948
lea ebp, [esp + 0x60]
cmp ebx, ebp
je 0x596950
jmp 0x596e4a
lea ebx, [esp + 0x60]
mov dword [esp + 0x60], ebx
mov ebx, dword [esp + 0x68]
lea ebp, [ebx + 1]
mov esi, dword [esp + 0x64]
mov edi, dword [esp + 0x6c]
cmp edi, ebp
jae 0x5969a1
lea eax, [0x68e6c0]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
call fcn.0044b870
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x64], esi
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x74]
lea ebp, [ebx + 1]
mov dword [esp + 0x68], ebp
mov byte [esi + ebx], 0x2f
jmp 0x5969b8
mov edx, dword [esp + 0x74]
jmp 0x5969b8
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0x68]
test ebx, ebx
jne 0x596a96
mov dword [esp], eax
mov dword [esp + 4], ecx
lea edx, [0x6c53fe]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
call fcn.004d6550
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x6c5401]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
call fcn.004d6110
mov eax, dword [esp + 0x10]
test eax, eax
jl 0x596a8a
nop
nop
mov eax, dword [esp + 0x60]
test eax, eax
je 0x596a27
lea ecx, [esp + 0x60]
cmp eax, ecx
je 0x596a2f
jmp 0x596e32
lea eax, [esp + 0x60]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x68]
lea ecx, [eax + 2]
mov edx, dword [esp + 0x6c]
mov ebx, dword [esp + 0x64]
cmp edx, ecx
jae 0x596a78
mov dword [esp + 0x40], eax
mov dword [esp + 0x3c], ecx
lea ebp, [0x68e6c0]
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.0044b870
mov ebx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
mov word [ebx + eax], 0x2f2e
mov dword [esp + 0x68], ecx
mov dword [esp + 0x6c], edx
mov dword [esp + 0x64], ebx
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x74]
nop
nop
mov ebx, dword [esp + 0x60]
test ebx, ebx
je 0x596aad
lea ebp, [esp + 0x60]
cmp ebx, ebp
je 0x596ab5
jmp 0x596e1a
lea ebx, [esp + 0x60]
mov dword [esp + 0x60], ebx
mov ebx, dword [esp + 0x68]
lea ebp, [ecx + ebx]
mov dword [esp + 0x40], ebp
mov esi, dword [esp + 0x6c]
mov edi, dword [esp + 0x64]
cmp esi, ebp
jae 0x596b02
mov dword [esp + 0x3c], ebx
lea eax, [0x68e6c0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.0044b870
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x34]
mov ebx, dword [esp + 0x3c]
mov dword [esp + 0x3c], esi
mov dword [esp + 0x58], edi
lea edx, [edi + ebx]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00463a10
mov eax, dword [esp + 0x40]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x74]
movzx ecx, byte [eax + 0x2d]
test cl, cl
jne 0x596b4c
mov ecx, dword [eax + 0x34]
test ecx, ecx
je 0x596c6f
nop
mov ecx, dword [esp + 0x60]
test ecx, ecx
je 0x596b62
lea edx, [esp + 0x60]
cmp ecx, edx
je 0x596b6e
jmp 0x596e02
lea ecx, [esp + 0x60]
mov dword [esp + 0x60], ecx
lea edx, [esp + 0x60]
mov ecx, dword [esp + 0x68]
lea ebx, [ecx + 1]
mov ebp, dword [esp + 0x64]
mov esi, dword [esp + 0x6c]
cmp esi, ebx
jae 0x596bbb
lea eax, [0x68e6c0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.0044b870
mov ebp, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x64], ebp
mov eax, dword [esp + 0x74]
lea edx, [esp + 0x60]
lea ebx, [ecx + 1]
mov dword [esp + 0x68], ebx
mov byte [ebp + ecx], 0x3f
mov ecx, dword [eax + 0x34]
mov ebx, dword [eax + 0x30]
nop
mov ebp, dword [esp + 0x60]
test ebp, ebp
je 0x596bdf
cmp ebp, edx
je 0x596be3
jmp 0x596dea
mov dword [esp + 0x60], edx
mov edx, dword [esp + 0x68]
lea ebp, [edx + ecx]
mov dword [esp + 0x40], ebp
mov esi, dword [esp + 0x6c]
mov edi, dword [esp + 0x64]
cmp esi, ebp
jae 0x596c38
mov dword [esp + 0x3c], edx
mov dword [esp + 0x28], ecx
mov dword [esp + 0x48], ebx
lea eax, [0x68e6c0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.0044b870
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x3c]
mov ebx, dword [esp + 0x48]
mov dword [esp + 0x3c], esi
mov dword [esp + 0x58], edi
lea eax, [edi + edx]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.00463a10
mov eax, dword [esp + 0x40]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
je 0x596da6
nop
mov ecx, dword [esp + 0x60]
test ecx, ecx
je 0x596c90
lea edx, [esp + 0x60]
cmp ecx, edx
je 0x596c9c
jmp 0x596dd2
lea ecx, [esp + 0x60]
mov dword [esp + 0x60], ecx
lea edx, [esp + 0x60]
mov ecx, dword [esp + 0x68]
lea ebx, [ecx + 1]
mov ebp, dword [esp + 0x64]
mov esi, dword [esp + 0x6c]
cmp esi, ebx
jae 0x596ce5
lea eax, [0x68e6c0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.0044b870
mov ebp, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x64], ebp
mov eax, dword [esp + 0x74]
lea edx, [ecx + 1]
mov dword [esp + 0x68], edx
mov byte [ebp + ecx], 0x23
mov dword [esp], eax
call fcn.00596320
nop
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x60]
test edx, edx
je 0x596d17
lea ebx, [esp + 0x60]
cmp edx, ebx
je 0x596d1f
jmp 0x596dba
lea edx, [esp + 0x60]
mov dword [esp + 0x60], edx
mov edx, dword [esp + 0x68]
lea ebx, [eax + edx]
mov dword [esp + 0x40], ebx
mov ebp, dword [esp + 0x6c]
mov esi, dword [esp + 0x64]
cmp ebp, ebx
jae 0x596d74
mov dword [esp + 0x3c], edx
mov dword [esp + 0x24], eax
mov dword [esp + 0x44], ecx
lea eax, [0x68e6c0]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.0044b870
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x58], esi
add edx, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00463a10
mov eax, dword [esp + 0x40]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], ecx
add esp, 0x70
ret
lea eax, [0x68e4c0]
mov dword [esp], eax
lea eax, [0x738d40]
mov dword [esp + 4], eax
call fcn.00436f70
lea eax, [0x68e4c0]
mov dword [esp], eax
lea eax, [0x738d40]
mov dword [esp + 4], eax
call fcn.00436f70
lea eax, [0x68e4c0]
mov dword [esp], eax
lea eax, [0x738d40]
mov dword [esp + 4], eax
call fcn.00436f70
lea eax, [0x68e4c0]
mov dword [esp], eax
lea eax, [0x738d40]
mov dword [esp + 4], eax
call fcn.00436f70
lea eax, [0x68e4c0]
mov dword [esp], eax
lea eax, [0x738d40]
mov dword [esp + 4], eax
call fcn.00436f70
lea eax, [0x68e4c0]
mov dword [esp], eax
lea eax, [0x738d40]
mov dword [esp + 4], eax
call fcn.00436f70
lea eax, [0x68e4c0]
mov dword [esp], eax
lea eax, [0x738d40]
mov dword [esp + 4], eax
call fcn.00436f70
lea eax, [0x68e4c0]
mov dword [esp], eax
lea eax, [0x738d40]
mov dword [esp + 4], eax
call fcn.00436f70
lea eax, [0x68e4c0]
mov dword [esp], eax
lea eax, [0x738d40]
mov dword [esp + 4], eax
call fcn.00436f70
lea eax, [0x68e4c0]
mov dword [esp], eax
lea eax, [0x738d40]
mov dword [esp + 4], eax
call fcn.00436f70
lea eax, [0x68e4c0]
mov dword [esp], eax
lea eax, [0x738d40]
mov dword [esp + 4], eax
call fcn.00436f70
lea eax, [0x68e4c0]
mov dword [esp], eax
lea eax, [0x738d40]
mov dword [esp + 4], eax
call fcn.00436f70
lea eax, [0x68e4c0]
mov dword [esp], eax
lea eax, [0x738d40]
mov dword [esp + 4], eax
call fcn.00436f70
nop
call fcn.00461c70
jmp fcn.00596420