Function at 0x6350f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x90eeac]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x635c5d
add esp, 0xffffff80
mov edx, dword [esp + 0x84]
test edx, edx
je 0x635482
movzx ebx, byte [edx]
cmp bl, 0x10
ja 0x63520b
cmp bl, 0xd
je 0x635463
cmp bl, 0xe
jb 0x635477
mov ebx, dword [edx + 8]
test ebx, ebx
jbe 0x635c53
mov eax, dword [edx + 4]
mov eax, dword [eax]
mov dword [esp], eax
call fcn.006350f0
mov eax, dword [esp + 4]
movzx ecx, byte [eax]
cmp cl, 2
jne 0x63515f
mov edx, eax
jmp 0x635200
mov edx, dword [esp + 0x84]
movzx ebx, byte [edx]
movzx ebp, word [edx + 2]
cmp cl, bl
jne 0x635186
mov esi, ebp
and ebp, 0x20
movzx edi, word [eax + 2]
and edi, 0x20
cmp di, bp
jne 0x635188
mov edx, eax
jmp 0x635200
mov esi, ebp
mov ebp, dword [edx + 8]
test ebp, ebp
jbe 0x635c4a
mov ecx, dword [edx + 4]
cmp dword [ecx], eax
je 0x635200
mov dword [esp + 0x58], eax
mov byte [esp + 0x23], bl
mov word [esp + 0x2e], si
lea eax, [0x6a5500]
mov dword [esp], eax
call fcn.0040bdb0
mov eax, dword [esp + 4]
movzx ecx, byte [esp + 0x23]
mov byte [eax], cl
movzx ecx, word [esp + 0x2e]
mov word [eax + 2], cx
mov ecx, dword [0x90f128]
lea edx, [eax + 0x10]
test ecx, ecx
jne 0x6351dc
mov ecx, dword [esp + 0x58]
jmp 0x6351ea
call fcn.00471470
mov ecx, dword [esp + 0x58]
mov dword [edi], ecx
mov dword [edi + 4], edx
mov dword [eax + 0x10], ecx
mov dword [eax + 8], 1
mov dword [eax + 0xc], 1
mov dword [eax + 4], edx
mov edx, eax
mov dword [esp + 0x88], edx
sub esp, 0xffffff80
ret
cmp bl, 0x11
jne 0x63545e
mov ebx, dword [edx + 0x28]
test ebx, ebx
jne 0x635242
mov ebx, dword [edx + 0x2c]
test ebx, ebx
jne 0x635242
lea eax, [0x6a5500]
mov dword [esp], eax
call fcn.0040bdb0
mov eax, dword [esp + 4]
mov byte [eax], 2
mov dword [esp + 0x88], eax
sub esp, 0xffffff80
ret
mov ebx, dword [edx + 8]
test ebx, ebx
jbe 0x635c41
mov eax, dword [edx + 4]
mov eax, dword [eax]
mov dword [esp], eax
call fcn.006350f0
mov eax, dword [esp + 0x84]
mov ecx, dword [eax + 0x2c]
mov edx, dword [esp + 4]
mov dword [esp + 0x54], edx
cmp ecx, 0xffffffff
jne 0x6353eb
mov ecx, dword [eax + 0x28]
test ecx, ecx
je 0x635360
cmp ecx, 1
je 0x6352d5
lea eax, [0x6a5500]
mov dword [esp], eax
call fcn.0040bdb0
mov eax, dword [esp + 4]
mov byte [eax], 0x12
mov dword [eax + 8], 0
mov dword [eax + 0xc], 1
mov ecx, dword [0x90f128]
lea edx, [eax + 0x10]
test ecx, ecx
je 0x6352bc
call fcn.00471460
mov dword [edi], edx
mov dword [esp + 0x6c], eax
mov dword [eax + 4], edx
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x84]
xor ebx, ebx
jmp 0x635a80
movzx ecx, byte [edx]
cmp cl, 2
jne 0x6352e1
mov eax, edx
jmp 0x635355
movzx eax, word [eax + 2]
mov word [esp + 0x2a], ax
cmp cl, 0xf
jne 0x635302
and eax, 0x20
movzx ebx, word [edx + 2]
and ebx, 0x20
cmp bx, ax
jne 0x635302
mov eax, edx
jmp 0x635355
lea eax, [0x6a5500]
mov dword [esp], eax
call fcn.0040bdb0
mov eax, dword [esp + 4]
mov byte [eax], 0xf
movzx ecx, word [esp + 0x2a]
mov word [eax + 2], cx
mov ecx, dword [0x90f128]
lea edx, [eax + 0x10]
test ecx, ecx
jne 0x635333
mov ecx, dword [esp + 0x54]
jmp 0x635341
call fcn.00471470
mov ecx, dword [esp + 0x54]
mov dword [edi], ecx
mov dword [edi + 4], edx
mov dword [eax + 0x10], ecx
mov dword [eax + 8], 1
mov dword [eax + 0xc], 1
mov dword [eax + 4], edx
mov dword [esp + 0x88], eax
sub esp, 0xffffff80
ret
movzx ecx, byte [edx]
cmp cl, 2
jne 0x63536c
mov eax, edx
jmp 0x6353e0
movzx eax, word [eax + 2]
mov word [esp + 0x2c], ax
cmp cl, 0xe
jne 0x63538d
and eax, 0x20
movzx ebx, word [edx + 2]
and ebx, 0x20
cmp bx, ax
jne 0x63538d
mov eax, edx
jmp 0x6353e0
lea eax, [0x6a5500]
mov dword [esp], eax
call fcn.0040bdb0
mov eax, dword [esp + 4]
mov byte [eax], 0xe
movzx ecx, word [esp + 0x2c]
mov word [eax + 2], cx
mov ecx, dword [0x90f128]
lea edx, [eax + 0x10]
test ecx, ecx
jne 0x6353be
mov ecx, dword [esp + 0x54]
jmp 0x6353cc
call fcn.00471470
mov ecx, dword [esp + 0x54]
mov dword [edi], ecx
mov dword [edi + 4], edx
mov dword [eax + 0x10], ecx
mov dword [eax + 8], 1
mov dword [eax + 0xc], 1
mov dword [eax + 4], edx
mov dword [esp + 0x88], eax
sub esp, 0xffffff80
ret
mov ebx, dword [eax + 0x28]
cmp ebx, 1
jne 0x635403
cmp ecx, 1
jne 0x635403
mov dword [esp + 0x88], edx
sub esp, 0xffffff80
ret
test ebx, ebx
jg 0x63540e
xor ecx, ecx
jmp 0x63579c
lea eax, [0x6a5500]
mov dword [esp], eax
call fcn.0040bdb0
mov eax, dword [esp + 4]
mov byte [eax], 0x12
mov dword [eax + 8], 0
mov dword [eax + 0xc], 1
mov ecx, dword [0x90f128]
lea edx, [eax + 0x10]
test ecx, ecx
je 0x635445
call fcn.00471460
mov dword [edi], edx
mov dword [esp + 0x60], eax
mov dword [eax + 4], edx
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x84]
xor ebx, ebx
jmp 0x6356e9
cmp bl, 0x13
ja 0x635477
mov eax, dword [edx + 8]
mov dword [esp + 0x48], eax
mov ecx, dword [edx + 4]
mov dword [esp + 0x7c], ecx
mov ebx, edx
xor ebp, ebp
jmp 0x6354a7
mov dword [esp + 0x88], edx
sub esp, 0xffffff80
ret
mov dword [esp + 0x88], 0
sub esp, 0xffffff80
ret
mov esi, dword [esp + 0x3c]
lea ebp, [esi + 1]
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x7c]
mov ebx, dword [esp + 0x84]
cmp ebp, eax
jge 0x6356d2
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x70], edx
mov eax, dword [ecx + ebp*4]
mov dword [esp + 0x5c], eax
mov dword [esp], eax
call fcn.006350f0
mov eax, dword [esp + 4]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x70]
cmp ecx, edx
jne 0x635634
mov ebx, dword [esp + 0x5c]
cmp eax, ebx
je 0x635634
lea eax, [0x6a5500]
mov dword [esp], eax
call fcn.0040bdb0
mov eax, dword [0x90f128]
mov edi, dword [esp + 4]
mov dword [esp + 0x70], edi
test eax, eax
je 0x63553a
mov eax, dword [edi + 0x14]
mov ecx, edi
call fcn.00471460
mov dword [edi], eax
lea eax, [0x6a5500]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x84]
mov dword [esp + 8], eax
call fcn.0040eab0
mov edi, dword [esp + 0x70]
mov esi, dword [esp + 0x84]
call fcn.00471b7a
mov eax, dword [esp + 0x70]
mov dword [eax + 0x18], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x14], 0
mov ecx, dword [esp + 0x84]
mov edx, dword [ecx + 0xc]
mov ebx, dword [ecx + 4]
mov ebp, dword [esp + 0x3c]
cmp ebp, edx
ja 0x6356dd
lea edx, [eax + 0x10]
cmp ebp, 1
ja 0x635589
mov esi, ebp
mov edi, 1
jmp 0x6355c5
mov dword [esp + 0x78], ebx
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], 1
mov dword [esp + 0xc], ebp
lea eax, [0x6a1a20]
mov dword [esp + 0x10], eax
call fcn.0046c350
mov edx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ebx, dword [esp + 0x78]
mov esi, dword [esp + 0x3c]
mov edi, eax
mov dword [esp + 0x78], edx
mov dword [esp + 0x44], edi
mov dword [esp + 0x40], ebp
lea eax, [0x6a1a20]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
call fcn.00469640
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x70]
mov dword [ecx + 8], eax
mov eax, dword [esp + 0x44]
mov dword [ecx + 0xc], eax
mov eax, dword [0x90f128]
test eax, eax
jne 0x635611
mov eax, dword [esp + 0x78]
jmp 0x635622
call fcn.00471470
mov eax, dword [esp + 0x78]
mov dword [edi], eax
mov edx, dword [ecx + 4]
mov dword [edi + 4], edx
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0x70]
cmp ecx, edx
je 0x635491
mov ebx, dword [edx + 0xc]
mov ebp, dword [edx + 8]
inc ebp
mov esi, dword [edx + 4]
cmp ebx, ebp
jae 0x6356ae
mov dword [esp + 0x74], edx
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x6a1a20]
mov dword [esp + 0x10], eax
call fcn.0046c350
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x74]
mov dword [ebx + 0xc], eax
mov eax, dword [0x90f128]
test eax, eax
je 0x63569a
call fcn.00471470
mov dword [edi], ecx
mov eax, dword [ebx + 4]
mov dword [edi + 4], eax
mov dword [ebx + 4], ecx
mov eax, dword [esp + 0x64]
mov ebp, edx
mov esi, ecx
mov ecx, dword [esp + 0x84]
mov edx, ebx
mov dword [edx + 8], ebp
mov ebx, dword [0x90f128]
test ebx, ebx
je 0x6356c9
call fcn.00471470
mov dword [edi], eax
mov ebx, dword [esi + ebp*4 - 4]
mov dword [edi + 4], ebx
mov dword [esi + ebp*4 - 4], eax
jmp 0x635491
mov dword [esp + 0x88], edx
sub esp, 0xffffff80
ret
mov ecx, ebp
call fcn.00471520
mov dword [edi + esi*4 - 4], ecx
inc ebx
cmp dword [edx + 0x28], ebx
jle 0x635794
mov ebp, dword [eax + 0xc]
mov esi, dword [eax + 8]
inc esi
mov edi, dword [eax + 4]
cmp ebp, esi
jae 0x635768
mov dword [esp + 0x34], ebx
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6a1a20]
mov dword [esp + 0x10], eax
call fcn.0046c350
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x60]
mov dword [ebx + 0xc], eax
mov eax, dword [0x90f128]
test eax, eax
je 0x635750
call fcn.00471470
mov dword [edi], ecx
mov eax, dword [ebx + 4]
mov dword [edi + 4], eax
mov dword [ebx + 4], ecx
mov eax, ebx
mov ebx, dword [esp + 0x34]
mov esi, edx
mov edi, ecx
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x84]
mov dword [eax + 8], esi
mov ebp, dword [0x90f128]
test ebp, ebp
je 0x6356e4
mov ebp, edi
call fcn.00471470
mov dword [edi], ecx
mov eax, dword [ebp + esi*4 - 4]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x60]
mov edi, ebp
jmp 0x6356e4
mov eax, edx
mov edx, ecx
mov ecx, dword [esp + 0x60]
mov ebx, dword [eax + 0x2c]
cmp dword [eax + 0x28], ebx
jge 0x635846
mov dword [esp + 0x60], ecx
movzx ebx, byte [edx]
cmp bl, 2
jne 0x6357bb
mov ebx, edx
jmp 0x635840
movzx ebp, word [eax + 2]
mov word [esp + 0x26], bp
cmp bl, 0x10
jne 0x6357dc
and ebp, 0x20
movzx esi, word [edx + 2]
and esi, 0x20
cmp si, bp
jne 0x6357dc
mov ebx, edx
jmp 0x635840
lea eax, [0x6a5500]
mov dword [esp], eax
call fcn.0040bdb0
mov eax, dword [esp + 4]
mov byte [eax], 0x10
movzx ecx, word [esp + 0x26]
mov word [eax + 2], cx
mov ecx, dword [0x90f128]
lea edx, [eax + 0x10]
test ecx, ecx
jne 0x63580d
mov ecx, dword [esp + 0x54]
jmp 0x63581b
call fcn.00471470
mov ecx, dword [esp + 0x54]
mov dword [edi], ecx
mov dword [edi + 4], edx
mov dword [eax + 0x10], ecx
mov dword [eax + 8], 1
mov dword [eax + 0xc], 1
mov dword [eax + 4], edx
mov ecx, dword [esp + 0x60]
mov ebx, dword [esp + 0x54]
mov edx, eax
mov eax, dword [esp + 0x84]
mov ebp, dword [eax + 0x28]
inc ebp
jmp 0x635888
test ecx, ecx
je 0x635855
mov dword [esp + 0x88], ecx
sub esp, 0xffffff80
ret
lea eax, [0x6a5500]
mov dword [esp], eax
call fcn.0040bdb0
mov eax, dword [esp + 4]
mov byte [eax], 1
mov dword [esp + 0x88], eax
sub esp, 0xffffff80
ret
mov esi, dword [esp + 0x30]
inc esi
mov eax, edx
mov ecx, dword [esp + 0x60]
mov ebx, dword [esp + 0x54]
mov edx, ebp
mov ebp, esi
mov dword [esp + 0x50], edx
cmp dword [eax + 0x2c], ebp
jle 0x6359dd
mov dword [esp + 0x30], ebp
lea eax, [0x6a5500]
mov dword [esp], eax
call fcn.0040bdb0
mov eax, dword [esp + 4]
mov dword [esp + 0x68], eax
mov byte [eax], 0x12
lea ecx, [eax + 0x10]
mov dword [esp], ecx
mov dword [esp + 4], 2
mov dword [esp + 8], 1
mov dword [esp + 0xc], 2
lea ecx, [0x6a1a20]
mov dword [esp + 0x10], ecx
call fcn.0046c350
mov eax, dword [0x90f128]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
test eax, eax
jne 0x6358ff
mov eax, dword [esp + 0x54]
mov ebx, dword [esp + 0x50]
mov ebp, dword [esp + 0x68]
jmp 0x635929
call fcn.004714b0
mov eax, dword [esp + 0x54]
mov dword [edi], eax
mov ebx, dword [ecx]
mov dword [edi + 4], ebx
mov ebx, dword [esp + 0x50]
mov dword [edi + 8], ebx
mov ebp, dword [ecx + 4]
mov dword [edi + 0xc], ebp
mov dword [edi + 0x10], ecx
mov ebp, dword [esp + 0x68]
mov esi, dword [ebp + 4]
mov dword [edi + 0x14], esi
mov dword [ecx], eax
mov dword [ecx + 4], ebx
mov dword [ebp + 8], 2
mov dword [ebp + 0xc], edx
mov dword [ebp + 4], ecx
movzx ecx, byte [ebp]
cmp cl, 2
jne 0x635950
mov edx, dword [esp + 0x84]
jmp 0x635875
mov edx, dword [esp + 0x84]
movzx ebx, word [edx + 2]
mov word [esp + 0x24], bx
cmp cl, 0x10
jne 0x635978
and ebx, 0x20
movzx esi, word [ebp + 2]
and esi, 0x20
cmp si, bx
je 0x635875
lea eax, [0x6a5500]
mov dword [esp], eax
call fcn.0040bdb0
mov eax, dword [esp + 4]
mov byte [eax], 0x10
movzx ecx, word [esp + 0x24]
mov word [eax + 2], cx
mov ecx, dword [0x90f128]
lea edx, [eax + 0x10]
test ecx, ecx
jne 0x6359a9
mov ecx, dword [esp + 0x68]
jmp 0x6359b7
call fcn.00471470
mov ecx, dword [esp + 0x68]
mov dword [edi], ecx
mov dword [edi + 4], edx
mov dword [eax + 0x10], ecx
mov dword [eax + 8], 1
mov dword [eax + 0xc], 1
mov dword [eax + 4], edx
mov edx, dword [esp + 0x84]
mov ebp, eax
mov eax, dword [esp + 0x54]
jmp 0x635875
test ecx, ecx
je 0x635a70
mov eax, dword [ecx + 0xc]
mov ebx, dword [ecx + 8]
inc ebx
mov ebp, dword [ecx + 4]
cmp eax, ebx
jae 0x635a4c
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x6a1a20]
mov dword [esp + 0x10], eax
call fcn.0046c350
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x60]
mov dword [ebx + 0xc], eax
mov eax, dword [0x90f128]
test eax, eax
je 0x635a3f
call fcn.00471470
mov dword [edi], ecx
mov eax, dword [ebx + 4]
mov dword [edi + 4], eax
mov dword [ebx + 4], ecx
mov ebp, ecx
mov ecx, ebx
mov ebx, edx
mov edx, dword [esp + 0x50]
mov dword [ecx + 8], ebx
mov eax, dword [0x90f128]
test eax, eax
je 0x635a67
call fcn.00471470
mov dword [edi], edx
mov eax, dword [ebp + ebx*4 - 4]
mov dword [edi + 4], eax
mov dword [ebp + ebx*4 - 4], edx
jmp 0x635846
mov dword [esp + 0x88], edx
sub esp, 0xffffff80
ret
mov dword [edi + esi*4 - 4], ecx
inc ebx
mov ebp, dword [edx + 0x28]
dec ebp
cmp ebx, ebp
jge 0x635b2e
mov ebp, dword [eax + 0xc]
mov esi, dword [eax + 8]
inc esi
mov edi, dword [eax + 4]
cmp ebp, esi
jae 0x635b02
mov dword [esp + 0x38], ebx
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6a1a20]
mov dword [esp + 0x10], eax
call fcn.0046c350
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x6c]
mov dword [ebx + 0xc], eax
mov eax, dword [0x90f128]
test eax, eax
je 0x635aea
call fcn.00471470
mov dword [edi], ecx
mov eax, dword [ebx + 4]
mov dword [edi + 4], eax
mov dword [ebx + 4], ecx
mov eax, ebx
mov ebx, dword [esp + 0x38]
mov esi, edx
mov edi, ecx
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x84]
mov dword [eax + 8], esi
mov ebp, dword [0x90f128]
test ebp, ebp
je 0x635a7b
mov ebp, edi
call fcn.00471470
mov dword [edi], ecx
mov eax, dword [ebp + esi*4 - 4]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x6c]
mov edi, ebp
jmp 0x635a7b
movzx ebx, byte [ecx]
cmp bl, 2
je 0x635bac
movzx edx, word [edx + 2]
mov word [esp + 0x28], dx
cmp bl, 0xf
jne 0x635b53
and edx, 0x20
movzx ebp, word [ecx + 2]
and ebp, 0x20
cmp bp, dx
je 0x635bac
lea eax, [0x6a5500]
mov dword [esp], eax
call fcn.0040bdb0
mov eax, dword [esp + 4]
mov byte [eax], 0xf
movzx ecx, word [esp + 0x28]
mov word [eax + 2], cx
mov ecx, dword [0x90f128]
lea edx, [eax + 0x10]
test ecx, ecx
jne 0x635b84
mov ecx, dword [esp + 0x54]
jmp 0x635b92
call fcn.00471470
mov ecx, dword [esp + 0x54]
mov dword [edi], ecx
mov dword [edi + 4], edx
mov dword [eax + 0x10], ecx
mov dword [eax + 8], 1
mov dword [eax + 0xc], 1
mov dword [eax + 4], edx
mov ecx, eax
mov eax, dword [esp + 0x6c]
mov edx, dword [eax + 0xc]
mov ebx, dword [eax + 8]
inc ebx
mov ebp, dword [eax + 4]
cmp edx, ebx
jae 0x635c17
mov dword [esp + 0x4c], ecx
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x6a1a20]
mov dword [esp + 0x10], eax
call fcn.0046c350
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x6c]
mov dword [ebx + 0xc], eax
mov eax, dword [0x90f128]
test eax, eax
je 0x635c0a
call fcn.00471470
mov dword [edi], ecx
mov eax, dword [ebx + 4]
mov dword [edi + 4], eax
mov dword [ebx + 4], ecx
mov eax, ebx
mov ebx, edx
mov ebp, ecx
mov ecx, dword [esp + 0x4c]
mov dword [eax + 8], ebx
mov edx, dword [0x90f128]
test edx, edx
je 0x635c32
call fcn.00471470
mov dword [edi], ecx
mov edx, dword [ebp + ebx*4 - 4]
mov dword [edi + 4], edx
mov dword [ebp + ebx*4 - 4], ecx
mov dword [esp + 0x88], eax
sub esp, 0xffffff80
ret
xor eax, eax
mov ecx, eax
call fcn.004714e0
xor eax, eax
mov ecx, eax
call fcn.004714e0
xor eax, eax
mov ecx, eax
call fcn.004714e0
nop
call fcn.00470060
jmp fcn.006350f0