Function at 0x643ff0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x4c]
cmp eax, dword [ecx + 8]
jbe 0x645170
sub esp, 0xcc
mov eax, dword [esp + 0xd0]
mov dword [esp], eax
mov eax, dword [esp + 0xd4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xd8]
mov dword [esp + 8], eax
call fcn.00641520
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0xe0]
test ebx, ebx
je 0x6440d8
nop
mov ebp, edx
and edx, 0x1f
cmp edx, 0xc
ja 0x644082
cmp edx, 1
jne 0x644067
mov esi, 1
jmp 0x6440ab
lea esi, [edx - 2]
cmp esi, 4
ja 0x644076
mov esi, 3
jmp 0x6440ab
cmp edx, 7
jb 0x6440a9
mov esi, 6
jmp 0x6440ab
cmp edx, 0xe
ja 0x64408e
mov esi, 4
jmp 0x6440ab
lea esi, [edx - 0xf]
cmp esi, 1
ja 0x64409d
mov esi, 2
jmp 0x6440ab
cmp edx, 0x18
jne 0x6440a9
mov esi, 5
jmp 0x6440ab
xor esi, esi
mov dword [esp + 0x44], edx
mov dword [esp + 0x80], eax
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x40], ebp
mov dword [esp + 0x30], esi
mov edi, dword [esp + 0xdc]
xor edi, edi
mov dword [esp + 0x3c], edi
mov edi, dword [esp + 0xdc]
jmp 0x64410c
mov eax, dword [0x1108af0]
mov ecx, dword [0x1108af4]
mov byte [esp + 0xe8], 0
mov dword [esp + 0xec], eax
mov dword [esp + 0xf0], ecx
add esp, 0xcc
ret
mov ebp, dword [esp + 0x7c]
lea edi, [ebp + 0xc]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x7c], edi
mov eax, dword [edi + 4]
mov ecx, dword [edi + 8]
mov edx, dword [edi]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00641520
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xc]
nop
mov ebx, ecx
and ecx, 0x1f
cmp ecx, 0xc
ja 0x644166
cmp ecx, 1
jne 0x64414b
mov ebp, 1
jmp 0x64418f
lea ebp, [ecx - 2]
cmp ebp, 4
ja 0x64415a
mov ebp, 3
jmp 0x64418f
cmp ecx, 7
jb 0x64418d
mov ebp, 6
jmp 0x64418f
cmp ecx, 0xe
ja 0x644172
mov ebp, 4
jmp 0x64418f
lea ebp, [ecx - 0xf]
cmp ebp, 1
ja 0x644181
mov ebp, 2
jmp 0x64418f
cmp ecx, 0x18
jne 0x64418d
mov ebp, 5
jmp 0x64418f
xor ebp, ebp
mov dword [esp + 0x38], ecx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x68], eax
mov dword [esp + 0x78], edx
mov esi, dword [esp + 0x30]
cmp ebp, esi
je 0x644522
cmp esi, 3
jne 0x64430a
cmp ebp, 6
jne 0x64430a
mov edx, dword [esp + 0x44]
cmp edx, 3
ja 0x6441eb
cmp edx, 2
jne 0x6441d6
mov ebx, dword [esp + 0x6c]
mov ebp, dword [ebx]
sar ebp, 0x1f
jmp 0x64421c
cmp edx, 3
jne 0x645135
mov ebx, dword [esp + 0x6c]
movsx ebp, byte [ebx]
sar ebp, 0x1f
jmp 0x64421c
cmp edx, 4
jne 0x6441fc
mov ebx, dword [esp + 0x6c]
movsx ebp, word [ebx]
sar ebp, 0x1f
jmp 0x64421c
cmp edx, 5
jne 0x64420c
mov ebx, dword [esp + 0x6c]
mov ebp, dword [ebx]
sar ebp, 0x1f
jmp 0x64421c
cmp edx, 6
jne 0x645135
mov ebx, dword [esp + 0x6c]
mov ebp, dword [ebx + 4]
test ebp, ebp
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg edi, ebx
setg bl
xchg edi, ebx
and ebp, 1
or edi, ebp
xchg edi, eax
test al, al
xchg edi, eax
je 0x644303
cmp edx, 3
ja 0x644261
cmp edx, 2
jne 0x64424e
mov ebp, dword [ebx]
mov edi, ebp
sar ebp, 0x1f
jmp 0x64429a
cmp edx, 3
jne 0x6450fb
movsx ebp, byte [ebx]
mov edi, ebp
sar ebp, 0x1f
jmp 0x64429a
cmp edx, 4
jne 0x644270
movsx ebp, word [ebx]
mov edi, ebp
sar ebp, 0x1f
jmp 0x64429a
cmp edx, 5
jne 0x64427e
mov ebp, dword [ebx]
mov edi, ebp
sar ebp, 0x1f
jmp 0x64429a
cmp edx, 6
jne 0x6450fb
mov ebp, dword [ebx]
mov edi, dword [ebx + 4]
mov dword [esp + 0x50], eax
mov eax, ebp
mov ebp, edi
mov edi, eax
mov eax, dword [esp + 0x50]
cmp ecx, 9
ja 0x6442c6
cmp ecx, 7
jne 0x6442aa
mov eax, dword [eax]
xor ecx, ecx
jmp 0x6442f2
cmp ecx, 8
jne 0x6442b6
movzx eax, byte [eax]
xor ecx, ecx
jmp 0x6442f2
cmp ecx, 9
jne 0x6450c1
movzx eax, word [eax]
xor ecx, ecx
jmp 0x6442f2
cmp ecx, 0xa
jne 0x6442d1
mov eax, dword [eax]
xor ecx, ecx
jmp 0x6442f2
cmp ecx, 0xb
jne 0x6442e5
mov ecx, dword [eax]
mov ebx, dword [eax + 4]
mov eax, ecx
mov ecx, ebx
mov ebx, dword [esp + 0x6c]
jmp 0x6442f2
cmp ecx, 0xc
jne 0x6450c1
mov eax, dword [eax]
xor ecx, ecx
cmp edi, eax
sete al
cmp ebp, ecx
sete cl
and ecx, eax
jmp 0x644ac5
xor ecx, ecx
jmp 0x644ac5
cmp esi, 6
jne 0x644472
cmp ebp, 3
jne 0x644472
cmp ecx, 3
ja 0x64433e
cmp ecx, 2
jne 0x64432d
mov edx, dword [eax]
sar edx, 0x1f
jmp 0x644363
cmp ecx, 3
jne 0x645087
movsx edx, byte [eax]
sar edx, 0x1f
jmp 0x644363
cmp ecx, 4
jne 0x64434b
movsx edx, word [eax]
sar edx, 0x1f
jmp 0x644363
cmp ecx, 5
jne 0x644357
mov edx, dword [eax]
sar edx, 0x1f
jmp 0x644363
cmp ecx, 6
jne 0x645087
mov edx, dword [eax + 4]
test edx, edx
setg dl
sete bl
and ebx, 1
or ebx, edx
test bl, bl
je 0x644461
mov edx, dword [esp + 0x44]
cmp edx, 9
ja 0x6443c6
cmp edx, 7
jne 0x644396
mov ebx, dword [esp + 0x6c]
mov ebp, dword [ebx]
cmp ecx, 3
mov edi, 0
jmp 0x644405
cmp edx, 8
jne 0x6443ac
mov ebx, dword [esp + 0x6c]
movzx ebp, byte [ebx]
cmp ecx, 3
mov edi, 0
jmp 0x644405
cmp edx, 9
jne 0x64504d
mov ebx, dword [esp + 0x6c]
movzx ebp, word [ebx]
cmp ecx, 3
mov edi, 0
jmp 0x644405
cmp edx, 0xa
jne 0x6443db
mov ebx, dword [esp + 0x6c]
mov ebp, dword [ebx]
cmp ecx, 3
mov edi, 0
jmp 0x644405
cmp edx, 0xb
jne 0x6443ee
mov ebx, dword [esp + 0x6c]
mov ebp, dword [ebx]
mov edi, dword [ebx + 4]
cmp ecx, 3
jmp 0x644405
cmp edx, 0xc
jne 0x64504d
mov ebx, dword [esp + 0x6c]
mov ebp, dword [ebx]
cmp ecx, 3
mov edi, 0
ja 0x644428
cmp ecx, 2
jne 0x644415
mov eax, dword [eax]
mov ecx, eax
sar eax, 0x1f
jmp 0x644453
cmp ecx, 3
jne 0x645013
movsx eax, byte [eax]
mov ecx, eax
sar eax, 0x1f
jmp 0x644453
cmp ecx, 4
jne 0x644437
movsx eax, word [eax]
mov ecx, eax
sar eax, 0x1f
jmp 0x644453
cmp ecx, 5
jne 0x644445
mov eax, dword [eax]
mov ecx, eax
sar eax, 0x1f
jmp 0x644453
cmp ecx, 6
jne 0x645013
mov ecx, dword [eax]
mov eax, dword [eax + 4]
cmp ebp, ecx
sete cl
cmp edi, eax
sete al
and eax, ecx
jmp 0x64446b
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0x6c]
xor eax, eax
mov ecx, eax
jmp 0x644ac5
mov eax, dword [esp + 0x80]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x94], ecx
mov edx, dword [esp + 0x40]
mov dword [esp + 0x98], edx
lea ebx, [esp + 0x90]
mov dword [esp], ebx
lea ebx, [0x1108e60]
mov dword [esp + 4], ebx
mov dword [esp + 8], 0xc
call fcn.00402990
movzx eax, byte [esp + 0xc]
test al, al
jne 0x64450f
mov eax, dword [esp + 0x78]
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x8c], eax
lea eax, [esp + 0x84]
mov dword [esp], eax
lea eax, [0x1108e60]
mov dword [esp + 4], eax
mov dword [esp + 8], 0xc
call fcn.00402990
movzx eax, byte [esp + 0xc]
test al, al
je 0x644ae6
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0x6c]
mov esi, dword [esp + 0x30]
xor ecx, ecx
jmp 0x644ac5
cmp esi, 3
jg 0x64472d
cmp esi, 1
jne 0x6445bd
mov ebp, dword [esp + 0x44]
cmp ebp, 1
je 0x644574
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov ecx, dword [esp + 0x6c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x40]
mov dword [esp + 8], edx
call fcn.004b8310
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x78]
mov ebx, dword [esp + 0x34]
mov ebp, dword [esp + 0x44]
mov esi, dword [esp + 0x30]
mov edi, dword [esp + 0x6c]
movzx edi, byte [edi]
cmp ecx, 1
je 0x6445a7
xchg edi, eax
mov byte [esp + 0x1e], al
xchg edi, eax
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004b8310
mov eax, dword [esp + 0x68]
mov ebp, dword [esp + 0x44]
mov esi, dword [esp + 0x30]
movzx edi, byte [esp + 0x1e]
xchg edi, ebx
cmp byte [eax], bl
xchg edi, ebx
sete al
mov edx, ebp
mov ebx, dword [esp + 0x6c]
mov ecx, eax
jmp 0x644ac5
cmp esi, 2
jne 0x644649
mov edx, dword [esp + 0x44]
cmp edx, 0xf
jne 0x6445e6
mov ebx, dword [esp + 0x6c]
movss xmm0, dword [ebx]
cvtss2sd xmm0, xmm0
movss xmm1, dword [ebx + 4]
cvtss2sd xmm1, xmm1
jmp 0x6445fc
cmp edx, 0x10
jne 0x644fd9
mov ebx, dword [esp + 0x6c]
movsd xmm0, qword [ebx]
movsd xmm1, qword [ebx + 8]
cmp ecx, 0xf
jne 0x644614
movss xmm2, dword [eax]
cvtss2sd xmm2, xmm2
movss xmm3, dword [eax + 4]
cvtss2sd xmm3, xmm3
jmp 0x644626
cmp ecx, 0x10
jne 0x644f9f
movsd xmm2, qword [eax]
movsd xmm3, qword [eax + 8]
ucomisd xmm0, xmm2
sete cl
setnp al
and ecx, eax
ucomisd xmm1, xmm3
xchg ebp, ebx
sete bl
xchg ebp, ebx
setnp al
and ebp, eax
and ecx, ebp
jmp 0x644ac5
cmp esi, 3
jne 0x644927
mov edx, dword [esp + 0x44]
cmp edx, 3
ja 0x644684
cmp edx, 2
jne 0x64466d
mov ebx, dword [esp + 0x6c]
mov ebp, dword [ebx]
mov edi, ebp
sar ebp, 0x1f
jmp 0x6446c9
cmp edx, 3
jne 0x644f65
mov ebx, dword [esp + 0x6c]
movsx ebp, byte [ebx]
mov edi, ebp
sar ebp, 0x1f
jmp 0x6446c9
cmp edx, 4
jne 0x644697
mov ebx, dword [esp + 0x6c]
movsx ebp, word [ebx]
mov edi, ebp
sar ebp, 0x1f
jmp 0x6446c9
cmp edx, 5
jne 0x6446a9
mov ebx, dword [esp + 0x6c]
mov ebp, dword [ebx]
mov edi, ebp
sar ebp, 0x1f
jmp 0x6446c9
cmp edx, 6
jne 0x644f65
mov ebx, dword [esp + 0x6c]
mov ebp, dword [ebx]
mov edi, dword [ebx + 4]
mov dword [esp + 0x48], eax
mov eax, ebp
mov ebp, edi
mov edi, eax
mov eax, dword [esp + 0x48]
cmp ecx, 3
ja 0x6446ef
cmp ecx, 2
jne 0x6446dc
mov eax, dword [eax]
mov ecx, eax
sar eax, 0x1f
jmp 0x64471a
cmp ecx, 3
jne 0x644f2b
movsx eax, byte [eax]
mov ecx, eax
sar eax, 0x1f
jmp 0x64471a
cmp ecx, 4
jne 0x6446fe
movsx eax, word [eax]
mov ecx, eax
sar eax, 0x1f
jmp 0x64471a
cmp ecx, 5
jne 0x64470c
mov eax, dword [eax]
mov ecx, eax
sar eax, 0x1f
jmp 0x64471a
cmp ecx, 6
jne 0x644f2b
mov ecx, dword [eax]
mov eax, dword [eax + 4]
cmp edi, ecx
sete cl
cmp ebp, eax
sete al
and eax, ecx
mov ecx, eax
jmp 0x644ac5
cmp esi, 4
jne 0x644787
mov edx, dword [esp + 0x44]
cmp edx, 0xd
jne 0x644749
mov ebx, dword [esp + 0x6c]
movss xmm0, dword [ebx]
cvtss2sd xmm0, xmm0
jmp 0x64475a
cmp edx, 0xe
jne 0x644ef1
mov ebx, dword [esp + 0x6c]
movsd xmm0, qword [ebx]
cmp ecx, 0xd
jne 0x644769
movss xmm1, dword [eax]
cvtss2sd xmm1, xmm1
jmp 0x644776
cmp ecx, 0xe
jne 0x644eb7
movsd xmm1, qword [eax]
ucomisd xmm1, xmm0
sete cl
setnp al
and ecx, eax
jmp 0x644ac5
cmp esi, 5
jne 0x644847
mov ebp, dword [esp + 0x44]
cmp ebp, 0x18
jne 0x6447a4
mov edi, dword [esp + 0x6c]
mov ebp, dword [edi]
mov edi, dword [edi + 4]
jmp 0x6447df
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov ecx, dword [esp + 0x6c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x40]
mov dword [esp + 8], edx
call fcn.004bd2d0
mov ebp, dword [esp + 0xc]
mov edi, dword [esp + 0x10]
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x78]
mov ebx, dword [esp + 0x34]
mov esi, dword [esp + 0x30]
cmp ecx, 0x18
jne 0x6447eb
mov ecx, dword [eax]
mov eax, dword [eax + 4]
jmp 0x644817
mov dword [esp + 0x58], ebp
mov dword [esp + 0x20], edi
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004bd2d0
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov ebp, dword [esp + 0x58]
mov esi, dword [esp + 0x30]
mov edi, dword [esp + 0x20]
cmp edi, eax
je 0x64481f
xor eax, eax
jmp 0x644838
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.00402990
movzx eax, byte [esp + 0xc]
mov esi, dword [esp + 0x30]
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0x6c]
mov ecx, eax
jmp 0x644ac5
cmp esi, 6
jne 0x644927
mov edx, dword [esp + 0x44]
cmp edx, 9
ja 0x64488c
cmp edx, 7
jne 0x644868
mov ebx, dword [esp + 0x6c]
mov ebp, dword [ebx]
xor edi, edi
jmp 0x6448bc
cmp edx, 8
jne 0x644878
mov ebx, dword [esp + 0x6c]
movzx ebp, byte [ebx]
xor edi, edi
jmp 0x6448bc
cmp edx, 9
jne 0x644e7d
mov ebx, dword [esp + 0x6c]
movzx ebp, word [ebx]
xor edi, edi
jmp 0x6448bc
cmp edx, 0xa
jne 0x64489b
mov ebx, dword [esp + 0x6c]
mov ebp, dword [ebx]
xor edi, edi
jmp 0x6448bc
cmp edx, 0xb
jne 0x6448ab
mov ebx, dword [esp + 0x6c]
mov ebp, dword [ebx]
mov edi, dword [ebx + 4]
jmp 0x6448bc
cmp edx, 0xc
jne 0x644e7d
mov ebx, dword [esp + 0x6c]
mov ebp, dword [ebx]
xor edi, edi
cmp ecx, 9
ja 0x6448e8
cmp ecx, 7
jne 0x6448cc
mov eax, dword [eax]
xor ecx, ecx
jmp 0x644914
cmp ecx, 8
jne 0x6448d8
movzx eax, byte [eax]
xor ecx, ecx
jmp 0x644914
cmp ecx, 9
jne 0x644e43
movzx eax, word [eax]
xor ecx, ecx
jmp 0x644914
cmp ecx, 0xa
jne 0x6448f3
mov eax, dword [eax]
xor ecx, ecx
jmp 0x644914
cmp ecx, 0xb
jne 0x644907
mov ecx, dword [eax]
mov ebx, dword [eax + 4]
mov eax, ecx
mov ecx, ebx
mov ebx, dword [esp + 0x6c]
jmp 0x644914
cmp ecx, 0xc
jne 0x644e43
mov eax, dword [eax]
xor ecx, ecx
cmp ebp, eax
sete al
cmp edi, ecx
sete cl
and eax, ecx
mov ecx, eax
jmp 0x644ac5
mov ebp, dword [esp + 0x44]
cmp ecx, ebp
je 0x64493b
test ebp, ebp
je 0x64493b
test ecx, ecx
jne 0x644c82
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov ecx, dword [esp + 0x6c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x40]
mov dword [esp + 8], edx
call fcn.00643ec0
movzx eax, byte [esp + 0xc]
test al, al
je 0x64496a
mov eax, 1
jmp 0x64498b
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x34]
mov dword [esp + 8], edx
call fcn.00643ec0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x644a67
mov eax, dword [esp + 0x34]
test eax, eax
je 0x6449ae
test eax, 0x200
jne 0x6449ae
lea ecx, [0x72be58]
mov edx, dword [esp + 0x78]
jmp 0x6449d0
mov ecx, dword [esp + 0x78]
mov dword [esp], ecx
mov edx, dword [esp + 0x68]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004bd3b0
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ecx, eax
mov eax, dword [ecx + 0x20]
mov dword [esp], edx
call eax
movzx eax, byte [esp + 4]
test al, al
je 0x644b0f
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov ecx, dword [esp + 0x6c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x40]
mov dword [esp + 8], edx
mov byte [esp + 0xc], 1
call fcn.004bb6e0
mov eax, dword [esp + 0x14]
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x74], ecx
mov edx, dword [esp + 0x78]
mov dword [esp], edx
mov edx, dword [esp + 0x68]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x34]
mov dword [esp + 8], edx
mov byte [esp + 0xc], 1
call fcn.004bb6e0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x74]
cmp dword [esp + 0x10], ecx
je 0x644a4c
xor eax, eax
jmp 0x644ab7
mov dword [esp], ecx
mov ecx, dword [esp + 0x70]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004036b0
movzx eax, byte [esp + 0xc]
jmp 0x644ab7
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 8], eax
call fcn.00643ec0
movzx eax, byte [esp + 0xc]
mov byte [esp + 0x1f], al
mov ecx, dword [esp + 0x80]
mov dword [esp], ecx
mov edx, dword [esp + 0x6c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x40]
mov dword [esp + 8], ebx
call fcn.00643ec0
movzx eax, byte [esp + 0x1f]
cmp byte [esp + 0xc], al
sete al
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0x6c]
mov esi, dword [esp + 0x30]
mov ecx, eax
test cl, cl
jne 0x644c5d
mov eax, dword [esp + 0x3c]
inc eax
mov ecx, dword [esp + 0xe0]
cmp ecx, eax
jg 0x644101
jmp 0x644c38
mov eax, dword [0x1108ae0]
mov ecx, dword [0x1108ae4]
mov byte [esp + 0xe8], 0
mov dword [esp + 0xec], eax
mov dword [esp + 0xf0], ecx
add esp, 0xcc
ret
mov eax, dword [esp + 0x78]
mov dword [esp + 0x84], eax
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x88], ecx
mov edx, dword [esp + 0x34]
mov dword [esp + 0x8c], edx
test edx, edx
je 0x644b48
test edx, 0x200
jne 0x644b48
lea eax, [0x72be58]
mov edx, dword [esp + 0x78]
jmp 0x644b60
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.004bd3b0
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x24], eax
mov dword [esp + 0x5c], edx
mov dword [esp + 0x9c], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa8], 0
lea ecx, [0x6b0340]
mov dword [esp], ecx
lea ebx, [esp + 0x84]
mov dword [esp + 4], ebx
call fcn.00408f80
mov eax, dword [esp + 8]
lea ecx, [0x6b0340]
mov dword [esp + 0x9c], ecx
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x24]
test eax, eax
je 0x644bd0
mov eax, dword [eax + 4]
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0xa8], eax
lea eax, [0x6be0d1]
mov dword [esp], eax
mov dword [esp + 4], 0x1a
lea eax, [esp + 0x9c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c9b40
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov byte [esp + 0xe8], 0
mov dword [esp + 0xec], eax
mov dword [esp + 0xf0], ecx
add esp, 0xcc
ret
mov byte [esp + 0xe8], 0
mov dword [esp + 0xec], 0
mov dword [esp + 0xf0], 0
add esp, 0xcc
ret
mov byte [esp + 0xe8], 1
mov dword [esp + 0xec], 0
mov dword [esp + 0xf0], 0
add esp, 0xcc
ret
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x90], ecx
mov ebp, dword [esp + 0x6c]
mov dword [esp + 0x94], ebp
mov esi, dword [esp + 0x40]
mov dword [esp + 0x98], esi
test esi, esi
je 0x644cba
test esi, 0x200
jne 0x644cba
lea ebp, [0x72be58]
jmp 0x644ce0
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004bd3b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x78]
mov ebx, dword [esp + 0x34]
mov ebp, eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x64], ecx
mov dword [esp + 0x2c], ebp
test ebx, ebx
je 0x644cfe
test ebx, 0x200
jne 0x644cfe
mov esi, edx
lea edi, [0x72be58]
jmp 0x644d24
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.004bd3b0
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x34]
mov esi, dword [esp + 0x78]
mov edi, eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x60], edx
mov dword [esp + 0x28], edi
mov dword [esp + 0x84], esi
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], ebx
xor eax, eax
lea edi, [esp + 0xac]
call fcn.004630e8
lea ecx, [0x6b0340]
mov dword [esp], ecx
lea ebx, [esp + 0x90]
mov dword [esp + 4], ebx
call fcn.00408f80
mov ecx, dword [esp + 8]
lea edx, [0x6b0340]
mov dword [esp + 0xac], edx
mov dword [esp + 0xb0], ecx
mov ecx, dword [esp + 0x2c]
test ecx, ecx
je 0x644d8d
mov ebp, dword [ecx + 4]
jmp 0x644d8f
mov ebp, ecx
mov dword [esp + 0xb4], ebp
mov eax, dword [esp + 0x64]
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0x28]
test eax, eax
je 0x644dae
mov edi, dword [eax + 4]
jmp 0x644db0
mov edi, eax
mov dword [esp + 0xbc], edi
mov eax, dword [esp + 0x60]
mov dword [esp + 0xc0], eax
mov dword [esp], edx
lea eax, [esp + 0x84]
mov dword [esp + 4], eax
call fcn.00408f80
mov eax, dword [esp + 8]
lea ecx, [0x6b0340]
mov dword [esp + 0xc4], ecx
mov dword [esp + 0xc8], eax
lea eax, [0x6c2488]
mov dword [esp], eax
mov dword [esp + 4], 0x23
lea eax, [esp + 0xac]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 4
call fcn.004c9b40
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov byte [esp + 0xe8], 0
mov dword [esp + 0xec], eax
mov dword [esp + 0xf0], ecx
add esp, 0xcc
ret
lea eax, [0x688f60]
mov dword [esp], eax
call fcn.0040b7f0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x12
lea ecx, [0x6b9008]
mov dword [eax], ecx
mov ecx, dword [esp + 0x38]
mov dword [eax + 8], ecx
lea ecx, [0x67fa20]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436fb0
lea eax, [0x688f60]
mov dword [esp], eax
call fcn.0040b7f0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x12
lea ecx, [0x6b9008]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x67fa20]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436fb0
lea eax, [0x688f60]
mov dword [esp], eax
call fcn.0040b7f0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x6b9bee]
mov dword [eax], ecx
mov ecx, dword [esp + 0x38]
mov dword [eax + 8], ecx
lea ecx, [0x67fa20]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436fb0
lea eax, [0x688f60]
mov dword [esp], eax
call fcn.0040b7f0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x13
lea ecx, [0x6b9bee]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x67fa20]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436fb0
lea eax, [0x688f60]
mov dword [esp], eax
call fcn.0040b7f0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x11
lea ecx, [0x6b861b]
mov dword [eax], ecx
mov ecx, dword [esp + 0x38]
mov dword [eax + 8], ecx
lea ecx, [0x67fa20]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436fb0
lea eax, [0x688f60]
mov dword [esp], eax
call fcn.0040b7f0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x11
lea ecx, [0x6b861b]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x67fa20]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436fb0
lea eax, [0x688f60]
mov dword [esp], eax
call fcn.0040b7f0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x15
lea ecx, [0x6bb013]
mov dword [eax], ecx
mov ecx, dword [esp + 0x38]
mov dword [eax + 8], ecx
lea ecx, [0x67fa20]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436fb0
lea eax, [0x688f60]
mov dword [esp], eax
call fcn.0040b7f0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x15
lea ecx, [0x6bb013]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x67fa20]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436fb0
lea eax, [0x688f60]
mov dword [esp], eax
call fcn.0040b7f0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x11
lea ecx, [0x6b861b]
mov dword [eax], ecx
mov ecx, dword [esp + 0x38]
mov dword [eax + 8], ecx
lea ecx, [0x67fa20]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436fb0
lea eax, [0x688f60]
mov dword [esp], eax
call fcn.0040b7f0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x12
lea ecx, [0x6b9008]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x67fa20]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436fb0
lea eax, [0x688f60]
mov dword [esp], eax
call fcn.0040b7f0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x11
lea ecx, [0x6b861b]
mov dword [eax], ecx
mov ecx, dword [esp + 0x38]
mov dword [eax + 8], ecx
lea ecx, [0x67fa20]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436fb0
lea eax, [0x688f60]
mov dword [esp], eax
call fcn.0040b7f0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x12
lea ecx, [0x6b9008]
mov dword [eax], ecx
mov ecx, dword [esp + 0x38]
mov dword [eax + 8], ecx
lea ecx, [0x67fa20]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436fb0
lea eax, [0x688f60]
mov dword [esp], eax
call fcn.0040b7f0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x11
lea ecx, [0x6b861b]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x67fa20]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436fb0
lea eax, [0x688f60]
mov dword [esp], eax
call fcn.0040b7f0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x11
lea ecx, [0x6b861b]
mov dword [eax], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 8], ecx
lea ecx, [0x67fa20]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436fb0
nop
call fcn.00461a60
jmp fcn.00643ff0