Function at 0x6408a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x40]
cmp eax, dword [ecx + 8]
jbe 0x64147d
sub esp, 0xc0
nop
mov eax, dword [esp + 0xc4]
mov ecx, dword [esp + 0xc8]
mov edx, ecx
mov ebx, eax
jmp 0x6408e4
dec ecx
mov ebp, ecx
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, 1
add eax, ebp
test ecx, ecx
je 0x64090a
movzx ebp, byte [eax]
xchg ebp, eax
cmp al, 0x20
xchg ebp, eax
je 0x6408d3
xchg ebp, eax
cmp al, 9
xchg ebp, eax
je 0x6408d3
xchg ebp, eax
cmp al, 0xa
xchg ebp, eax
je 0x6408d3
xchg ebp, eax
cmp al, 0xd
xchg ebp, eax
je 0x6408d3
jmp 0x64090a
dec ecx
test ecx, ecx
je 0x64092f
movzx ebp, byte [eax + ecx - 1]
xchg ebp, eax
cmp al, 0x20
xchg ebp, eax
je 0x640909
xchg ebp, eax
cmp al, 9
xchg ebp, eax
je 0x640909
xchg ebp, eax
cmp al, 0xa
xchg ebp, eax
je 0x640909
xchg ebp, eax
cmp al, 0xd
xchg ebp, eax
je 0x640909
nop
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x788688]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0xffffffff
call fcn.004cf8a0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
cmp eax, 1
jne 0x64099e
mov edx, dword [ecx + 4]
test edx, edx
jne 0x64099e
mov eax, dword [0x9135f8]
mov ecx, dword [0x9135fc]
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], ecx
add esp, 0xc0
ret
test eax, eax
jbe 0x641473
mov edx, dword [ecx]
mov ebx, dword [ecx + 4]
jmp 0x6409be
dec ebx
mov ebp, ebx
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, 1
add edx, ebp
test ebx, ebx
je 0x6409e4
movzx ebp, byte [edx]
xchg ebp, eax
cmp al, 0x20
xchg ebp, eax
je 0x6409ad
xchg ebp, eax
cmp al, 9
xchg ebp, eax
je 0x6409ad
xchg ebp, eax
cmp al, 0xa
xchg ebp, eax
je 0x6409ad
xchg ebp, eax
cmp al, 0xd
xchg ebp, eax
je 0x6409ad
jmp 0x6409e4
dec ebx
test ebx, ebx
je 0x640a09
movzx ebp, byte [ebx + edx - 1]
xchg ebp, eax
cmp al, 0x20
xchg ebp, eax
je 0x6409e3
xchg ebp, eax
cmp al, 9
xchg ebp, eax
je 0x6409e3
xchg ebp, eax
cmp al, 0xa
xchg ebp, eax
je 0x6409e3
xchg ebp, eax
cmp al, 0xd
xchg ebp, eax
je 0x6409e3
mov dword [esp + 0x30], eax
mov dword [ecx + 4], ebx
mov ebp, dword [0x93f150]
test ebp, ebp
je 0x640a26
call fcn.00471840
mov dword [edi], edx
mov ebp, dword [ecx]
mov dword [edi + 4], ebp
mov dword [esp + 0x58], ecx
mov dword [ecx], edx
nop
mov dword [esp], edx
mov dword [esp + 4], ebx
lea eax, [0x71b1fa]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
call fcn.00476ba0
movzx eax, byte [esp + 0x20]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
test al, al
je 0x640a67
nop
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
jmp 0x640aa4
mov eax, dword [0x913600]
mov ecx, dword [0x913604]
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], ecx
add esp, 0xc0
ret
dec ebx
mov ebp, ebx
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, 1
add eax, ebp
test ebx, ebx
je 0x640aca
movzx ebp, byte [eax]
xchg ebp, eax
cmp al, 0x20
xchg ebp, eax
je 0x640a93
xchg ebp, eax
cmp al, 9
xchg ebp, eax
je 0x640a93
xchg ebp, eax
cmp al, 0xa
xchg ebp, eax
je 0x640a93
xchg ebp, eax
cmp al, 0xd
xchg ebp, eax
je 0x640a93
jmp 0x640aca
dec ebx
test ebx, ebx
je 0x640af1
movzx ebp, byte [ebx + eax - 1]
xchg ebp, eax
cmp al, 0x20
xchg ebp, eax
je 0x640ac9
xchg ebp, eax
cmp al, 9
xchg ebp, eax
je 0x640ac9
xchg ebp, eax
cmp al, 0xa
xchg ebp, eax
je 0x640ac9
xchg ebp, eax
cmp al, 0xd
xchg ebp, eax
je 0x640ac9
test ebx, ebx
je 0x640c21
mov dword [esp + 0x50], edx
mov dword [esp + 0x9c], ecx
mov dword [esp + 0x78], eax
mov dword [esp + 0x3c], ebx
mov dword [esp], eax
mov dword [esp + 4], ebx
lea ecx, [0x7384a0]
mov dword [esp + 8], ecx
call fcn.004d0880
mov eax, dword [esp + 0xc]
test eax, eax
jge 0x640c21
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov byte [esp + 8], 1
call fcn.00641f30
movzx eax, byte [esp + 0x15]
movzx ecx, byte [esp + 0x14]
mov edx, dword [esp + 0x10]
test al, al
je 0x640bf5
mov byte [esp + 0x2f], cl
mov dword [esp + 0x34], edx
mov eax, dword [esp + 0xc]
mov dword [esp + 0x5c], eax
lea ecx, [0x70b520]
mov dword [esp], ecx
call fcn.0040bb90
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x3c]
mov dword [eax + 4], ecx
mov ecx, dword [0x93f150]
test ecx, ecx
jne 0x640ba2
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x5c]
mov ebx, dword [esp + 0xc4]
jmp 0x640bbe
call fcn.00471850
mov ecx, dword [esp + 0x78]
mov dword [edi], ecx
mov edx, dword [esp + 0x5c]
mov dword [edi + 4], edx
mov ebx, dword [esp + 0xc4]
mov dword [edi + 8], ebx
mov dword [esp + 0x94], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0x34]
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
movzx ecx, byte [esp + 0x2f]
mov byte [eax + 0x10], cl
mov ecx, dword [esp + 0xc8]
mov dword [eax + 0x54], ecx
mov dword [eax + 0x50], ebx
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x30]
mov ebx, 1
jmp 0x640c55
mov eax, dword [0x913610]
mov ecx, dword [0x913614]
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], ecx
add esp, 0xc0
ret
mov eax, dword [0x913608]
mov ecx, dword [0x91360c]
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], ecx
add esp, 0xc0
ret
inc ebx
mov eax, dword [esp + 0x94]
cmp ebx, edx
jge 0x6413e4
lea ebp, [ecx + ebx*8]
mov esi, dword [ebp]
mov edi, dword [ebp + 4]
jmp 0x64141c
mov eax, dword [esp + 0x94]
jmp 0x641444
lea eax, [ecx + ebx*8 + 4]
mov dword [eax], edi
mov eax, dword [0x93f150]
test eax, eax
jne 0x640c8b
test edi, edi
jmp 0x640ca2
mov eax, edi
call fcn.00471840
mov dword [edi], esi
mov ecx, dword [ebp]
mov dword [edi + 4], ecx
test eax, eax
mov ecx, dword [esp + 0x58]
mov edi, eax
mov dword [ebp], esi
je 0x640c4d
mov dword [esp + 0x44], ebx
mov dword [esp + 0xa8], ebp
nop
mov dword [esp], esi
mov dword [esp + 4], edi
lea eax, [0x71b1fa]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
call fcn.00476ba0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x98], edx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x4c], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0061ca90
movzx eax, byte [esp + 0x10]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
test al, al
jne 0x640d1a
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x44]
jmp 0x640c4d
mov dword [esp + 0x40], edx
mov dword [esp + 0x7c], ecx
mov eax, dword [esp + 0x98]
mov dword [esp], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 4], eax
mov byte [esp + 8], 0
call fcn.00641f30
movzx eax, byte [esp + 0x15]
test al, al
je 0x641320
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x40]
cmp ebx, 6
jg 0x640e30
cmp ebx, 4
jne 0x640daa
mov eax, dword [esp + 0x7c]
cmp dword [eax], 0x68746170
jne 0x641255
mov eax, dword [esp + 0x94]
mov dword [eax + 0x18], edx
mov edx, dword [0x93f150]
test edx, edx
je 0x640d96
call fcn.00471840
mov dword [edi], ecx
mov edx, dword [eax + 0x14]
mov dword [edi + 4], edx
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x44]
jmp 0x640c4d
cmp ebx, 6
jne 0x641255
mov eax, dword [esp + 0x7c]
cmp dword [eax], 0x616d6f64
jne 0x640dfc
cmp word [eax + 4], 0x6e69
jne 0x640dfc
mov eax, dword [esp + 0x94]
mov dword [eax + 0x20], edx
mov edx, dword [0x93f150]
test edx, edx
je 0x640de8
call fcn.00471840
mov dword [edi], ecx
mov edx, dword [eax + 0x1c]
mov dword [edi + 4], edx
mov dword [eax + 0x1c], ecx
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x44]
jmp 0x640c4d
cmp dword [eax], 0x75636573
jne 0x641255
cmp word [eax + 4], 0x6572
jne 0x641255
mov eax, dword [esp + 0x94]
mov byte [eax + 0x44], 1
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x44]
jmp 0x640c4d
cmp ebx, 7
jne 0x6410f7
mov dword [esp + 0x38], edx
mov dword [esp + 0x60], ecx
mov ebx, dword [esp + 0x7c]
cmp dword [ebx], 0x69707865
jne 0x641074
cmp word [ebx + 4], 0x6572
jne 0x641074
cmp byte [ebx + 6], 0x73
jne 0x641074
mov ebx, dword [esp + 0x94]
mov dword [ebx + 0x3c], edx
mov ebp, dword [0x93f150]
test ebp, ebp
je 0x640e88
call fcn.00471840
mov dword [edi], ecx
mov ebp, dword [ebx + 0x38]
mov dword [edi + 4], ebp
mov dword [ebx + 0x38], ecx
lea edi, [esp + 0xac]
xor eax, eax
call fcn.00471acb
lea ecx, [0x72627a]
mov dword [esp], ecx
mov dword [esp + 4], 0x1d
mov ebp, dword [esp + 0x60]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edx
call fcn.004aa6b0
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x48], ecx
lea edi, [esp + 0xac]
lea esi, [esp + 0x10]
call fcn.00471fae
lea edi, [esp + 0x80]
lea esi, [esp + 0xac]
call fcn.00471fae
mov ecx, dword [esp + 0x48]
test ecx, ecx
je 0x640fa0
lea edi, [esp + 0xac]
xor eax, eax
call fcn.00471acb
lea ecx, [0x726297]
mov dword [esp], ecx
mov dword [esp + 4], 0x1d
mov edx, dword [esp + 0x60]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x38]
mov dword [esp + 0xc], edx
call fcn.004aa6b0
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x48], ecx
lea edi, [esp + 0xac]
lea esi, [esp + 0x10]
call fcn.00471fae
lea edi, [esp + 0x80]
lea esi, [esp + 0xac]
call fcn.00471fae
mov ecx, dword [esp + 0x48]
test ecx, ecx
je 0x640fa0
mov ecx, dword [0x93f150]
mov edx, dword [esp + 0x94]
lea edi, [edx + 0x24]
test ecx, ecx
je 0x640f94
mov dword [esp + 0xa4], edi
lea eax, [0x718660]
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.0040eaf0
mov edx, dword [esp + 0x94]
mov edi, dword [esp + 0xa4]
xor eax, eax
call fcn.00471acb
jmp 0x64125c
lea edi, [esp + 0x64]
lea esi, [esp + 0x80]
call fcn.00471fae
mov eax, dword [esp + 0x68]
nop
nop
test eax, 0x80000000
je 0x640ff9
mov ecx, dword [esp + 0x64]
shl eax, 1
mov edx, ecx
shl ecx, 1
shr edx, 0x1f
or edx, eax
mov eax, edx
shl edx, 1
shr eax, 0x1f
shr ecx, 0x1f
or ecx, edx
add ecx, 0xd7b17f80
mov dword [esp + 0x6c], ecx
adc eax, 0xd
mov dword [esp + 0x70], eax
and dword [esp + 0x64], 0x3fffffff
mov dword [esp + 0x68], 0
mov dword [esp + 0x74], 0
lea edi, [esp + 0xac]
lea esi, [esp + 0x64]
call fcn.00471fae
mov eax, dword [0x93f150]
mov ecx, dword [esp + 0x94]
lea edi, [ecx + 0x24]
test eax, eax
je 0x641057
mov dword [esp + 0xa4], edi
lea eax, [0x718660]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xac]
mov dword [esp + 8], eax
call fcn.0040eb20
mov ecx, dword [esp + 0x94]
mov edi, dword [esp + 0xa4]
lea esi, [esp + 0xac]
call fcn.00471fae
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x44]
jmp 0x640c4d
cmp dword [ebx], 0x2d78616d
jne 0x641255
cmp word [ebx + 4], 0x6761
jne 0x641255
cmp byte [ebx + 6], 0x65
jne 0x641255
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.0047d4c0
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x6410c7
mov edx, dword [esp + 8]
test edx, edx
je 0x6410d7
mov ebx, dword [esp + 0x38]
test ebx, ebx
jbe 0x64146a
mov eax, dword [esp + 0x60]
cmp byte [eax], 0x30
jne 0x6410d3
mov edx, dword [esp + 0x94]
jmp 0x64125c
test edx, edx
jg 0x6410dc
mov edx, 0xffffffff
mov eax, dword [esp + 0x94]
mov dword [eax + 0x40], edx
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x44]
jmp 0x640c4d
cmp ebx, 8
jne 0x64120d
mov eax, dword [esp + 0x7c]
cmp dword [eax], 0x70747468
jne 0x641131
cmp dword [eax + 4], 0x796c6e6f
jne 0x641131
mov eax, dword [esp + 0x94]
mov byte [eax + 0x45], 1
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x44]
jmp 0x640c4d
cmp dword [eax], 0x656d6173
jne 0x641255
cmp dword [eax + 4], 0x65746973
jne 0x641255
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.0061ca90
movzx eax, byte [esp + 0x10]
test al, al
je 0x6411ee
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
cmp eax, 3
jne 0x64118d
cmp word [ecx], 0x616c
jne 0x6411cf
cmp byte [ecx + 2], 0x78
jne 0x6411cf
mov eax, dword [esp + 0x94]
mov dword [eax + 0x48], 2
jmp 0x6411dd
cmp eax, 4
jne 0x6411aa
cmp dword [ecx], 0x656e6f6e
jne 0x6411cf
mov eax, dword [esp + 0x94]
mov dword [eax + 0x48], 4
jmp 0x6411dd
cmp eax, 6
jne 0x6411cf
cmp dword [ecx], 0x69727473
jne 0x6411cf
cmp word [ecx + 4], 0x7463
jne 0x6411cf
mov eax, dword [esp + 0x94]
mov dword [eax + 0x48], 3
jmp 0x6411dd
mov eax, dword [esp + 0x94]
mov dword [eax + 0x48], 1
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x44]
jmp 0x640c4d
mov eax, dword [esp + 0x94]
mov dword [eax + 0x48], 1
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x44]
jmp 0x640c4d
cmp ebx, 0xb
jne 0x641255
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
lea eax, [0x71cb2b]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xb
call fcn.00402d90
movzx eax, byte [esp + 0xc]
test al, al
je 0x641255
mov eax, dword [esp + 0x94]
mov byte [eax + 0x4c], 1
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x44]
jmp 0x640c4d
mov edx, dword [esp + 0x94]
mov eax, dword [edx + 0x60]
mov ecx, dword [edx + 0x5c]
inc ecx
mov ebx, dword [edx + 0x58]
mov ebp, dword [esp + 0xa8]
mov esi, dword [ebp]
mov ebp, dword [ebp + 4]
cmp eax, ecx
jae 0x6412ea
mov dword [esp + 0xa0], esi
mov dword [esp + 0x54], ebp
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x6db180]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x94]
mov dword [ebx + 0x60], eax
mov eax, dword [0x93f150]
test eax, eax
je 0x6412d1
call fcn.00471840
mov dword [edi], ecx
mov eax, dword [ebx + 0x58]
mov dword [edi + 4], eax
mov dword [ebx + 0x58], ecx
mov ebp, dword [esp + 0x54]
mov esi, dword [esp + 0xa0]
mov ebx, ecx
mov ecx, edx
mov edx, dword [esp + 0x94]
mov dword [edx + 0x5c], ecx
lea eax, [ebx + ecx*8 - 4]
mov dword [eax], ebp
mov eax, dword [0x93f150]
lea ecx, [ebx + ecx*8 - 8]
test eax, eax
je 0x64130d
call fcn.00471840
mov dword [edi], esi
mov eax, dword [ecx]
mov dword [edi + 4], eax
mov dword [ecx], esi
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x44]
jmp 0x640c4d
mov eax, dword [esp + 0x94]
mov ecx, dword [eax + 0x60]
mov edx, dword [eax + 0x5c]
inc edx
mov ebx, dword [eax + 0x58]
mov ebp, dword [esp + 0xa8]
mov esi, dword [ebp]
mov ebp, dword [ebp + 4]
cmp ecx, edx
jae 0x6413ae
mov dword [esp + 0x54], ebp
mov dword [esp + 0xa0], esi
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x6db180]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x94]
mov dword [ebx + 0x60], eax
mov eax, dword [0x93f150]
test eax, eax
je 0x64139c
call fcn.00471840
mov dword [edi], ecx
mov eax, dword [ebx + 0x58]
mov dword [edi + 4], eax
mov dword [ebx + 0x58], ecx
mov eax, ebx
mov ebp, dword [esp + 0x54]
mov esi, dword [esp + 0xa0]
mov ebx, ecx
mov dword [eax + 0x5c], edx
lea ecx, [ebx + edx*8 - 4]
mov dword [ecx], ebp
mov ecx, dword [0x93f150]
lea edx, [ebx + edx*8 - 8]
test ecx, ecx
je 0x6413d1
call fcn.00471840
mov dword [edi], esi
mov ecx, dword [edx]
mov dword [edi + 4], ecx
mov dword [edx], esi
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x44]
jmp 0x640c4d
mov dword [esp + 0xcc], eax
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0
add esp, 0xc0
ret
dec edi
mov eax, edi
neg eax
sar eax, 0x1f
and eax, 1
add esi, eax
mov eax, dword [esp + 0x94]
test edi, edi
je 0x641444
movzx eax, byte [esi]
cmp al, 0x20
je 0x641408
cmp al, 9
je 0x641408
cmp al, 0xa
je 0x641408
cmp al, 0xd
je 0x641408
jmp 0x640c6b
dec edi
mov eax, dword [esp + 0x94]
test edi, edi
je 0x640c77
movzx eax, byte [edi + esi - 1]
cmp al, 0x20
je 0x64143c
cmp al, 9
je 0x64143c
cmp al, 0xa
je 0x64143c
cmp al, 0xd
je 0x64143c
jmp 0x640c77
xor eax, eax
mov ecx, eax
call fcn.004718b0
xor eax, eax
mov ecx, eax
call fcn.004718b0
nop
call fcn.00470430
jmp fcn.006408a0