Function at 0x650560
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xe0]
cmp eax, dword [ecx + 8]
jbe 0x6513c1
sub esp, 0x160
mov dword [esp + 0x16c], 0
mov dword [esp + 0x170], 0
mov dword [esp + 0x174], 0
mov edx, dword [0x8c8c98]
mov eax, dword [edx]
call eax
lea eax, [0x6a11e0]
mov dword [esp], eax
call fcn.0040bd30
mov eax, dword [esp + 4]
lea ecx, [0x6599b0]
mov dword [eax], ecx
mov ecx, dword [0x8f52e0]
test ecx, ecx
jne 0x6505de
mov ecx, dword [esp + 0x164]
mov dword [eax + 4], ecx
jmp 0x6505f8
lea edi, [eax + 4]
mov ecx, eax
mov eax, dword [esp + 0x164]
call fcn.004642e0
mov eax, ecx
mov ecx, dword [esp + 0x164]
mov edx, dword [ecx + 8]
mov ebx, dword [esp + 0x168]
mov ebp, dword [ebx + 0xc]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.00649270
movzx eax, byte [esp + 0xc]
test al, al
je 0x650d08
mov eax, dword [esp + 0x164]
lea ecx, [eax + 0x7c]
mov dword [esp + 0xd4], ecx
mov dword [esp], ecx
call fcn.0046b550
mov eax, dword [esp + 0x164]
inc dword [eax + 0x84]
mov ecx, dword [eax + 0x9c]
mov dword [esp + 0xb0], ecx
mov edx, dword [esp + 0xd4]
mov dword [esp], edx
call fcn.0046b8d0
mov edx, dword [esp + 0xb0]
test edx, edx
je 0x6506bf
mov eax, dword [esp + 0x168]
mov ecx, dword [eax + 4]
test ecx, ecx
jne 0x6506b5
call fcn.0040c810
mov eax, dword [0x8f52e0]
mov ecx, dword [esp]
test eax, eax
jne 0x65069b
mov eax, dword [esp + 0x168]
mov dword [eax + 4], ecx
jmp 0x6506ae
mov ebx, dword [esp + 0x168]
lea edi, [ebx + 4]
mov eax, ecx
call fcn.004642e0
mov eax, ebx
mov edx, dword [esp + 0xb0]
mov ecx, dword [edx]
mov ebx, dword [eax + 4]
mov dword [esp], ebx
call ecx
mov eax, dword [esp + 0x164]
mov ecx, dword [eax + 8]
movzx ecx, byte [ecx + 0x6d]
test cl, cl
je 0x6506d5
xor ecx, ecx
jmp 0x650746
mov eax, dword [esp + 0x168]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x1c]
mov dword [esp], ecx
lea ecx, [0x6d59c6]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xf
call fcn.005ffca0
mov eax, dword [esp + 0x10]
test eax, eax
je 0x65070e
mov eax, dword [esp + 0x164]
xor ecx, ecx
jmp 0x650746
mov eax, dword [esp + 0x168]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x1c]
mov dword [esp], ecx
lea ecx, [0x6d2b61]
mov dword [esp + 4], ecx
mov dword [esp + 8], 5
call fcn.005ffca0
mov eax, dword [esp + 0x10]
test eax, eax
sete al
mov ecx, eax
mov eax, dword [esp + 0x164]
test cl, cl
je 0x65087a
mov ecx, dword [esp + 0x168]
mov edx, dword [ecx]
mov ebx, dword [edx]
cmp dword [edx + 4], 4
jne 0x65076b
cmp dword [ebx], 0x44414548
je 0x650876
nop
mov edx, dword [ecx + 4]
test edx, edx
jne 0x6507a6
call fcn.0040c810
mov eax, dword [0x8f52e0]
mov ecx, dword [esp]
test eax, eax
jne 0x650791
mov eax, dword [esp + 0x168]
mov dword [eax + 4], ecx
jmp 0x6507a4
mov edx, dword [esp + 0x168]
lea edi, [edx + 4]
mov eax, ecx
call fcn.004642e0
mov eax, edx
mov ecx, eax
nop
mov eax, dword [ecx + 4]
mov dword [esp + 0x98], eax
lea edx, [0x6d59c6]
mov dword [esp], edx
mov dword [esp + 4], 0xf
call fcn.00601510
mov eax, dword [esp + 8]
mov dword [esp + 0xd0], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x30], ecx
lea edx, [0x693d40]
mov dword [esp], edx
call fcn.0040bd30
mov eax, dword [esp + 4]
mov dword [esp + 0xcc], eax
mov dword [eax + 4], 4
lea ecx, [0x6d299f]
mov dword [eax], ecx
lea ecx, [0x6be900]
mov dword [esp], ecx
mov edx, dword [esp + 0x98]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xd0]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x30]
mov dword [esp + 0xc], edx
call fcn.00410910
mov edi, dword [esp + 0x10]
mov dword [edi + 4], 1
mov dword [edi + 8], 1
mov eax, dword [0x8f52e0]
test eax, eax
jne 0x650855
mov eax, dword [esp + 0xcc]
mov dword [edi], eax
jmp 0x650861
mov eax, dword [esp + 0xcc]
call fcn.004642e0
mov eax, dword [esp + 0x164]
mov ecx, dword [esp + 0x168]
mov edx, 1
jmp 0x650883
xor edx, edx
jmp 0x650883
mov ecx, dword [esp + 0x168]
xor edx, edx
mov byte [esp + 0x22], dl
mov ebx, dword [ecx]
mov ebp, dword [ebx + 0x14]
cmp ebp, 1
jg 0x650899
jne 0x650901
cmp dword [ebx + 0x18], 1
jl 0x6508fd
mov ebp, dword [ebx + 0x20]
test ebp, ebp
jne 0x6508a4
xor ebx, ebx
jmp 0x650903
mov dword [esp], ebx
call fcn.0063cf00
movzx eax, byte [esp + 4]
test al, al
jne 0x6508cc
mov eax, dword [esp + 0x164]
mov ecx, dword [esp + 0x168]
movzx edx, byte [esp + 0x22]
xor ebx, ebx
jmp 0x650903
lea eax, [0x691d00]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00404bb0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x168]
movzx edx, byte [esp + 0x22]
mov ebx, eax
mov eax, dword [esp + 0x164]
jmp 0x650903
xor ebx, ebx
jmp 0x650903
xor ebx, ebx
mov dword [esp + 0xc0], ebx
mov ebp, dword [eax + 8]
movzx ebp, byte [ebp + 0x6c]
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x65091b
xor ebp, ebp
jmp 0x650984
mov eax, dword [ecx]
mov dword [esp], eax
call fcn.0063cf90
movzx eax, byte [esp + 4]
test al, al
je 0x65094c
mov eax, dword [esp + 0x164]
mov ecx, dword [esp + 0x168]
movzx edx, byte [esp + 0x22]
mov ebx, dword [esp + 0xc0]
xor ebp, ebp
jmp 0x650984
mov eax, dword [esp + 0x168]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x1c]
mov dword [esp], ecx
call fcn.0063d920
movzx eax, byte [esp + 4]
xor eax, 1
mov ecx, dword [esp + 0x168]
movzx edx, byte [esp + 0x22]
mov ebx, dword [esp + 0xc0]
mov ebp, eax
mov eax, dword [esp + 0x164]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x650a84
nop
mov ebp, dword [ecx + 4]
test ebp, ebp
jne 0x6509c9
call fcn.0040c810
mov eax, dword [0x8f52e0]
mov ecx, dword [esp]
test eax, eax
jne 0x6509b4
mov eax, dword [esp + 0x168]
mov dword [eax + 4], ecx
jmp 0x6509c7
mov edx, dword [esp + 0x168]
lea edi, [edx + 4]
mov eax, ecx
call fcn.004642e0
mov eax, edx
mov ecx, eax
nop
mov eax, dword [ecx + 4]
mov dword [esp + 0x94], eax
lea edx, [0x6d3db7]
mov dword [esp], edx
mov dword [esp + 4], 0xa
call fcn.00601510
mov eax, dword [esp + 8]
mov dword [esp + 0xd0], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x30], ecx
lea edx, [0x693d40]
mov dword [esp], edx
call fcn.0040bd30
mov eax, dword [esp + 4]
mov dword [esp + 0xc8], eax
mov dword [eax + 4], 5
lea ecx, [0x6d2ba2]
mov dword [eax], ecx
lea ecx, [0x6be900]
mov dword [esp], ecx
mov ecx, dword [esp + 0x94]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xd0]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x30]
mov dword [esp + 0xc], ecx
call fcn.00410910
mov edi, dword [esp + 0x10]
mov dword [edi + 4], 1
mov dword [edi + 8], 1
mov eax, dword [0x8f52e0]
test eax, eax
jne 0x650a78
mov eax, dword [esp + 0xc8]
mov dword [edi], eax
jmp 0x650a84
mov eax, dword [esp + 0xc8]
call fcn.004642e0
lea eax, [0x691d00]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00404bb0
mov eax, dword [esp + 8]
mov dword [esp + 0xb4], eax
mov dword [esp + 0xd8], 0
mov dword [esp + 0xdc], 0
lea ecx, [0x651460]
mov dword [esp + 0xd8], ecx
mov dword [esp + 0xdc], eax
lea ecx, [esp + 0xd8]
mov dword [esp + 0x7c], ecx
lea ecx, [esp + 0x70]
mov dword [esp], ecx
call fcn.00435300
test eax, eax
jne 0x650cfc
mov dword [esp + 0x108], 0
mov dword [esp + 0x10c], 0
mov dword [esp + 0x110], 0
mov dword [esp + 0x114], 0
lea eax, [0x651410]
mov dword [esp + 0x108], eax
lea eax, [esp + 0x170]
mov dword [esp + 0x10c], eax
mov eax, dword [esp + 0x164]
mov dword [esp + 0x110], eax
mov ecx, dword [esp + 0x168]
mov dword [esp + 0x114], ecx
lea edx, [esp + 0x108]
mov dword [esp + 0x58], edx
lea edx, [esp + 0x4c]
mov dword [esp], edx
call fcn.00435300
test eax, eax
jne 0x650cf0
mov eax, dword [esp + 0x164]
mov ecx, dword [eax + 0x3c]
mov dword [esp + 0x24], ecx
mov edx, dword [eax + 0x40]
mov dword [esp + 0x28], edx
lea ebx, [0x6919c0]
mov dword [esp], ebx
mov dword [esp + 4], 1
call fcn.00404bb0
mov eax, dword [esp + 8]
mov dword [esp + 0x9c], eax
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
mov ecx, dword [esp + 0x168]
mov dword [esp + 0xfc], ecx
mov dword [esp + 0x100], eax
mov edx, dword [esp + 0xc0]
mov dword [esp + 0x104], edx
mov ebx, dword [esp + 0x164]
mov ebp, dword [ebx + 0x48]
mov dword [esp], ebp
lea ebp, [esp + 0xfc]
mov dword [esp + 4], ebp
call fcn.00404d80
lea eax, [0x691c80]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00404bb0
mov eax, dword [esp + 8]
mov dword [esp + 0xa8], eax
lea edi, [esp + 0x118]
xor eax, eax
call fcn.0046457a
mov ecx, dword [esp + 0x168]
mov edx, dword [ecx]
mov dword [esp + 0x118], edx
mov edx, dword [ecx + 0xc]
mov dword [esp + 0x11c], edx
mov edx, dword [esp + 0xa8]
mov dword [esp + 0x120], edx
movzx ebx, byte [esp + 0x22]
mov byte [esp + 0x124], bl
mov ebx, dword [esp + 0xc0]
mov dword [esp + 0x128], ebx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 0x12c], ebx
mov ebx, dword [esp + 0x164]
mov ebp, dword [ebx + 0x44]
mov dword [esp], ebp
lea ebp, [esp + 0x118]
mov dword [esp + 4], ebp
call fcn.00404d80
mov eax, dword [esp + 0x168]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x70]
mov dword [esp + 0xc4], edx
mov ebx, dword [ecx + 0x78]
mov ecx, dword [ecx + 0x7c]
test ebx, ebx
jne 0x650ccd
nop
mov ecx, dword [0x8ce17c]
lea ebx, [0x73d13c]
mov eax, dword [ebx + 0x14]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x164]
mov edx, dword [ecx + 0x4c]
xor ebx, ebx
xor ebp, ebp
mov esi, dword [esp + 0xc4]
jmp 0x650d57
call fcn.004358d0
add esp, 0x160
ret
call fcn.004358d0
add esp, 0x160
ret
mov eax, dword [esp + 0x164]
mov ecx, dword [eax + 8]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00647b50
mov dword [esp + 0x16c], 0
mov eax, dword [0x8cebb8]
mov ecx, dword [0x8cebbc]
mov dword [esp + 0x170], eax
mov dword [esp + 0x174], ecx
call fcn.004358d0
add esp, 0x160
ret
mov esi, ecx
mov edi, edx
mov edx, eax
mov eax, edi
mov byte [esp + 0x23], bl
mov dword [esp + 0xbc], eax
mov dword [esp + 0xc4], esi
mov dword [esp + 0xa4], ebp
mov dword [esp + 0xac], edx
mov ecx, dword [0x8c8cac]
mov edi, dword [ecx]
mov edx, ecx
call edi
mov dword [esp + 0xe8], 0
mov dword [esp + 0xec], 0
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 0
lea edi, [esp + 0x130]
xor eax, eax
call fcn.00464574
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0x158], ecx
lea ebx, [esp + 0xe8]
mov dword [esp + 0x15c], ebx
mov ebx, dword [esp + 0xac]
mov dword [esp + 0x150], ebx
mov ebp, dword [esp + 0xa4]
mov dword [esp + 0x148], ebp
mov esi, dword [esp + 0xa8]
mov dword [esp + 0x140], esi
lea edi, [esp + 0xf0]
mov dword [esp + 0x144], edi
mov edi, dword [esp + 0xc4]
mov dword [esp + 0x138], edi
mov esi, dword [esp + 0xbc]
mov dword [esp + 0x130], esi
lea ecx, [esp + 0x130]
mov dword [esp], ecx
lea ecx, [esp + 0x34]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 6
mov byte [esp + 0x14], 1
call fcn.00447dd0
mov eax, dword [esp + 0x18]
test eax, eax
je 0x651045
cmp eax, 1
je 0x650ff0
cmp eax, 2
je 0x651276
cmp eax, 3
je 0x651222
cmp eax, 4
je 0x650f8d
mov eax, dword [esp + 0xe8]
mov ecx, dword [esp + 0xec]
test eax, eax
jne 0x6510c5
mov eax, dword [esp + 0x164]
mov ecx, dword [eax + 8]
mov ebx, dword [ecx + 0x88]
test ebx, ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg esi, ebx
setg bl
xchg esi, ebx
mov ecx, dword [ecx + 0x84]
test ecx, ecx
xchg edi, ebx
seta bl
xchg edi, ebx
and ebp, edi
or esi, ebp
xchg esi, eax
test al, al
xchg esi, eax
jne 0x650ef4
mov ebp, dword [esp + 0xa4]
jmp 0x650f6e
mov dword [esp + 4], ebx
mov dword [esp], ecx
call fcn.00510950
mov eax, dword [esp + 8]
mov dword [esp + 0xa0], eax
lea ecx, [0x6a1d20]
mov dword [esp], ecx
call fcn.0040bd30
mov eax, dword [esp + 4]
lea ecx, [0x6513d0]
mov dword [eax], ecx
mov edx, dword [0x8f52e0]
test edx, edx
jne 0x650f3b
mov edx, dword [esp + 0xa0]
mov dword [eax + 4], edx
jmp 0x650f4e
lea edi, [eax + 4]
mov edx, eax
mov eax, dword [esp + 0xa0]
call fcn.004642e0
mov eax, edx
mov dword [esp], eax
call fcn.00435220
test eax, eax
jne 0x6510b9
mov eax, dword [esp + 0xa0]
mov ebp, dword [eax]
mov eax, dword [esp + 0x164]
mov eax, dword [esp + 0xac]
movzx ebx, byte [esp + 0x23]
mov ecx, dword [esp + 0xc4]
mov edx, dword [esp + 0xbc]
jmp 0x650d4f
movzx eax, byte [esp + 0x23]
test al, al
jne 0x6511b7
mov eax, dword [esp + 0x164]
mov ecx, dword [eax + 8]
mov edx, dword [esp + 0x168]
mov ebx, dword [edx + 0xc]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], 0
call fcn.00649270
movzx eax, byte [esp + 0xc]
test al, al
jne 0x6511b7
xor eax, eax
movzx ebx, byte [esp + 0x23]
mov ebp, dword [esp + 0xa4]
mov ecx, dword [esp + 0xc4]
mov edx, dword [esp + 0xbc]
jmp 0x650d4f
mov eax, dword [esp + 0x164]
mov ecx, dword [eax + 8]
mov edx, dword [0x8cebb8]
mov ebx, dword [0x8cebbc]
mov ebp, dword [esp + 0x168]
mov esi, dword [ebp + 0xc]
mov dword [esp], ecx
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call fcn.006476f0
movzx ebx, byte [esp + 0x10]
mov eax, dword [esp + 0xac]
mov ebp, dword [esp + 0xa4]
xor ecx, ecx
mov edx, dword [esp + 0xbc]
jmp 0x650d4f
mov eax, dword [esp + 0x168]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x78]
mov ecx, dword [ecx + 0x7c]
test edx, edx
jne 0x651065
nop
mov ecx, dword [0x8ce17c]
lea edx, [0x73d13c]
mov eax, dword [edx + 0x18]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 0x164]
mov ecx, dword [eax + 8]
mov edx, dword [esp + 0x168]
mov ebx, dword [edx + 0xc]
mov ebp, dword [esp + 4]
mov esi, dword [esp + 8]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
call fcn.006476f0
movzx ebx, byte [esp + 0x10]
mov eax, dword [esp + 0xac]
mov ebp, dword [esp + 0xa4]
xor ecx, ecx
xor edx, edx
jmp 0x650d4f
call fcn.004358d0
add esp, 0x160
ret
mov dword [esp + 0x2c], eax
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
je 0x6510e6
mov edx, dword [eax + 4]
jmp 0x6510e8
mov edx, eax
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xe0], edx
mov dword [esp + 0xe4], ecx
lea eax, [0x6d5e94]
mov dword [esp], eax
mov dword [esp + 4], 0xf
lea eax, [esp + 0xe0]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.005242a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x164]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.006514f0
mov eax, dword [esp + 0x164]
mov dword [esp], eax
mov eax, dword [esp + 0x168]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x14], eax
call fcn.0064e1d0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x16c], 0
mov dword [esp + 0x170], eax
mov dword [esp + 0x174], ecx
call fcn.004358d0
add esp, 0x160
ret
mov eax, dword [esp + 0x164]
mov ecx, dword [eax + 0x88]
mov edx, dword [eax + 0x8c]
mov dword [esp], eax
mov eax, dword [esp + 0x168]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 8], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.0064e1d0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x16c], 0
mov dword [esp + 0x170], eax
mov dword [esp + 0x174], ecx
call fcn.004358d0
add esp, 0x160
ret
mov eax, dword [0x8c9120]
mov ecx, dword [0x8c9124]
mov edx, dword [esp + 0x164]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.006514f0
mov eax, dword [0x8c9120]
mov ecx, dword [0x8c9124]
mov dword [esp + 0x16c], 0
mov dword [esp + 0x170], eax
mov dword [esp + 0x174], ecx
call fcn.004358d0
add esp, 0x160
ret
mov eax, dword [esp + 0xf0]
test eax, eax
setne cl
mov edx, dword [esp + 0xf4]
test edx, edx
setne bl
mov ebp, dword [esp + 0xf8]
xor ecx, 1
xor ebx, 1
cmp bl, cl
je 0x65132f
test edx, edx
je 0x651306
mov eax, dword [esp + 0x164]
mov dword [esp], eax
mov eax, dword [esp + 0x168]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 8], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ebp
call fcn.0064e1d0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x16c], 0
mov dword [esp + 0x170], eax
mov dword [esp + 0x174], ecx
call fcn.004358d0
add esp, 0x160
ret
mov dword [esp + 0x16c], eax
mov dword [esp + 0x170], 0
mov dword [esp + 0x174], 0
call fcn.004358d0
add esp, 0x160
ret
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
lea eax, [0x697420]
mov dword [esp + 0xe0], eax
movzx eax, cl
lea ecx, [0x8aa8e0]
lea eax, [ecx + eax*8]
mov dword [esp + 0xe4], eax
lea eax, [0x6e6b50]
mov dword [esp], eax
mov dword [esp + 4], 0x3f
lea eax, [esp + 0xe0]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.00526f10
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409670
mov eax, dword [esp + 8]
lea ecx, [0x698ba0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436320
nop
call fcn.00462ed0
jmp fcn.00650560