Function at 0x6400a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xb0]
cmp eax, dword [ecx + 8]
jbe 0x640f8a
sub esp, 0x130
mov eax, dword [esp + 0x13c]
lea ecx, [0x73ea7c]
cmp eax, ecx
jne 0x64011f
mov eax, dword [esp + 0x140]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov edx, dword [esp + 0x134]
mov dword [esp], edx
mov edx, dword [esp + 0x138]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.006400a0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x144], eax
mov dword [esp + 0x148], ecx
add esp, 0x130
ret
mov eax, dword [esp + 0x134]
mov dword [esp], eax
mov ecx, dword [esp + 0x138]
mov dword [esp + 4], ecx
call fcn.00643e00
movzx eax, byte [esp + 8]
test al, al
jne 0x640d2d
mov ecx, dword [esp + 0x134]
test ecx, ecx
je 0x6401de
nop
movzx edx, byte [0x8f80d8]
test dl, dl
je 0x64019b
mov edx, dword [esp + 0x134]
mov dword [0x8f80dc], edx
mov ebx, dword [0x91eb10]
test ebx, ebx
jne 0x640187
mov eax, dword [esp + 0x138]
mov dword [0x8f80e0], eax
jmp 0x6401a9
lea edi, [0x8f80e0]
mov eax, dword [esp + 0x138]
call fcn.00462ed0
jmp 0x6401a9
mov eax, dword [esp + 0x138]
mov edx, dword [esp + 0x134]
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x70], eax
mov ebx, dword [esp + 0x6c]
test ebx, ebx
je 0x6401d4
nop
movzx ebp, byte [ebx + 0xf]
mov esi, ebp
and ebp, 0x1f
xchg esi, eax
test al, 0x20
xchg esi, eax
jne 0x6401d0
or ebp, 0x80
mov esi, eax
jmp 0x6401f2
mov esi, eax
xor ebp, ebp
xor ebx, ebx
xor eax, eax
jmp 0x6401f2
mov edx, dword [esp + 0x134]
mov esi, dword [esp + 0x138]
xor ebp, ebp
xor ebx, ebx
xor eax, eax
test ebp, ebp
je 0x640d10
mov dword [esp + 0x20], ebp
mov dword [esp + 0x4c], eax
mov dword [esp + 0x48], ebx
test ebp, 0x200
jne 0x640216
lea edi, [0x73f518]
jmp 0x640230
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
call fcn.004bc560
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov edi, eax
mov eax, dword [edi + 0x50]
mov dword [esp], ebx
call eax
cmp dword [esp + 4], 0x16
je 0x64024d
mov ebp, dword [esp + 0x20]
mov ebx, dword [esp + 0x48]
mov eax, dword [esp + 0x4c]
jmp 0x640275
mov eax, dword [esp + 0x48]
mov dword [esp], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 8], eax
call fcn.004b9ca0
mov ebx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
test ebp, ebp
je 0x640cf3
mov ecx, dword [esp + 0x13c]
lea edx, [0x73ea1c]
cmp ecx, edx
jne 0x640297
mov edx, dword [esp + 0x140]
jmp 0x64029c
mov edx, 0
jne 0x64036b
mov dword [esp + 0x5c], edx
mov dword [esp + 0x54], eax
mov dword [esp + 0x50], ebx
mov dword [esp + 0x24], ebp
test ebp, 0x200
jne 0x6402c2
lea ecx, [0x73f518]
jmp 0x6402dc
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
call fcn.004bc560
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov ecx, eax
mov eax, dword [ecx + 0x50]
mov dword [esp], ebx
call eax
cmp dword [esp + 4], 0x17
jne 0x640323
mov ecx, dword [esp + 0x5c]
mov edx, dword [ecx]
mov dword [esp + 0x30], edx
mov ecx, dword [ecx + 4]
mov dword [esp + 0x60], ecx
mov ebx, dword [esp + 0x50]
mov ebp, dword [esp + 0x54]
mov esi, dword [esp + 0x24]
xor eax, eax
xor edi, edi
xor eax, eax
mov dword [esp + 0x2c], eax
lea eax, [0x91e8c0]
mov dword [esp + 0x58], eax
xor eax, eax
jmp 0x640d71
mov eax, dword [esp + 0x5c]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov edx, dword [esp + 0x134]
mov dword [esp], edx
mov edx, dword [esp + 0x138]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.006400a0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x144], eax
mov dword [esp + 0x148], ecx
add esp, 0x130
ret
test ebp, 0x200
jne 0x64037b
lea eax, [0x73f518]
jmp 0x640393
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
call fcn.004bc560
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x10]
mov eax, dword [eax + 0x50]
mov dword [esp], ebx
call eax
mov eax, dword [esp + 0x134]
lea ecx, [0x68c000]
cmp eax, ecx
jne 0x6403b8
mov ecx, dword [esp + 0x138]
movzx ecx, byte [ecx]
jmp 0x6403bd
mov ecx, 0
je 0x640c3d
lea ecx, [0x68cf40]
cmp eax, ecx
jne 0x6403d8
mov edx, dword [esp + 0x138]
mov edx, dword [edx]
jmp 0x6403dd
mov edx, 0
jne 0x64063c
mov eax, dword [esp + 0x13c]
test eax, eax
je 0x640528
lea ebx, [0x6b6840]
cmp dword [eax + 4], ebx
jne 0x640528
mov eax, dword [esp + 0x140]
cmp dword [0x8f697c], eax
jne 0x640528
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp], edx
call fcn.00409090
mov eax, dword [esp + 4]
lea ecx, [0x68cf40]
mov dword [esp + 0x74], ecx
mov dword [esp + 0x78], eax
lea eax, [0x6c7499]
mov dword [esp], eax
mov dword [esp + 4], 4
lea eax, [esp + 0x74]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cb5c0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x38], ecx
lea edi, [esp + 0x104]
mov edx, eax
xor eax, eax
call fcn.0046314b
mov dword [esp + 0x110], edx
mov eax, dword [esp + 0x38]
mov dword [esp + 0x114], eax
lea eax, [0x6a69e0]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 8
lea ecx, [0x6c8592]
mov dword [eax], ecx
mov ecx, dword [0x91eb10]
mov edx, dword [esp + 0x10c]
test ecx, ecx
jne 0x6404d1
mov dword [eax + 8], edx
jmp 0x6404df
lea edi, [eax + 8]
mov ecx, eax
mov eax, edx
call fcn.00462ed0
mov eax, ecx
mov ecx, dword [esp + 0x110]
mov edx, dword [esp + 0x114]
mov dword [eax + 0x10], edx
mov edx, dword [0x91eb10]
test edx, edx
jne 0x6404ff
mov dword [eax + 0xc], ecx
jmp 0x64050d
lea edi, [eax + 0xc]
mov edx, eax
mov eax, ecx
call fcn.00462ed0
mov eax, edx
lea ecx, [0x73e68c]
mov dword [esp + 0x144], ecx
mov dword [esp + 0x148], eax
add esp, 0x130
ret
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp], edx
call fcn.00409090
mov eax, dword [esp + 4]
lea ecx, [0x68cf40]
mov dword [esp + 0x74], ecx
mov dword [esp + 0x78], eax
lea eax, [0x6c70bf]
mov dword [esp], eax
mov dword [esp + 4], 2
lea eax, [esp + 0x74]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cb5c0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x38], ecx
lea edi, [esp + 0xf0]
mov edx, eax
xor eax, eax
call fcn.0046314b
mov dword [esp + 0xfc], edx
mov eax, dword [esp + 0x38]
mov dword [esp + 0x100], eax
lea eax, [0x6a69e0]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 8
lea ecx, [0x6c8592]
mov dword [eax], ecx
mov ecx, dword [0x91eb10]
mov edx, dword [esp + 0xf8]
test ecx, ecx
jne 0x6405e5
mov dword [eax + 8], edx
jmp 0x6405f3
lea edi, [eax + 8]
mov ecx, eax
mov eax, edx
call fcn.00462ed0
mov eax, ecx
mov ecx, dword [esp + 0xfc]
mov edx, dword [esp + 0x100]
mov dword [eax + 0x10], edx
mov edx, dword [0x91eb10]
test edx, edx
jne 0x640613
mov dword [eax + 0xc], ecx
jmp 0x640621
lea edi, [eax + 0xc]
mov edx, eax
mov eax, ecx
call fcn.00462ed0
mov eax, edx
lea ecx, [0x73e68c]
mov dword [esp + 0x144], ecx
mov dword [esp + 0x148], eax
add esp, 0x130
ret
lea ecx, [0x68c480]
cmp eax, ecx
jne 0x640653
mov edx, dword [esp + 0x138]
movss xmm0, dword [edx]
jmp 0x640656
xorps xmm0, xmm0
je 0x640b1f
lea ecx, [0x68c4c0]
cmp eax, ecx
jne 0x640673
mov edx, dword [esp + 0x138]
movsd xmm0, qword [edx]
jmp 0x640676
xorps xmm0, xmm0
je 0x6409f9
lea ecx, [0x68d7c0]
cmp eax, ecx
jne 0x640694
mov eax, dword [esp + 0x138]
mov edx, dword [eax]
mov eax, dword [eax + 4]
jmp 0x64069e
mov eax, 0
mov edx, 0
jne 0x6408e9
mov ebx, dword [esp + 0x13c]
lea ebp, [0x73e9bc]
cmp ebx, ebp
jne 0x6407d1
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.004091a0
mov eax, dword [esp + 8]
lea ecx, [0x68d7c0]
mov dword [esp + 0x74], ecx
mov dword [esp + 0x78], eax
lea eax, [0x6c70bf]
mov dword [esp], eax
mov dword [esp + 4], 2
lea eax, [esp + 0x74]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cb5c0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x38], ecx
lea edi, [esp + 0xb4]
mov edx, eax
xor eax, eax
call fcn.0046314b
mov dword [esp + 0xc0], edx
mov eax, dword [esp + 0x38]
mov dword [esp + 0xc4], eax
lea eax, [0x6a68e0]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 9
lea ecx, [0x6c8afc]
mov dword [eax], ecx
mov ecx, dword [0x91eb10]
mov edx, dword [esp + 0xbc]
test ecx, ecx
jne 0x64077a
mov dword [eax + 8], edx
jmp 0x640788
lea edi, [eax + 8]
mov ecx, eax
mov eax, edx
call fcn.00462ed0
mov eax, ecx
mov ecx, dword [esp + 0xc0]
mov edx, dword [esp + 0xc4]
mov dword [eax + 0x10], edx
mov edx, dword [0x91eb10]
test edx, edx
jne 0x6407a8
mov dword [eax + 0xc], ecx
jmp 0x6407b6
lea edi, [eax + 0xc]
mov edx, eax
mov eax, ecx
call fcn.00462ed0
mov eax, edx
lea ecx, [0x73e654]
mov dword [esp + 0x144], ecx
mov dword [esp + 0x148], eax
add esp, 0x130
ret
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.004091a0
mov eax, dword [esp + 8]
lea ecx, [0x68d7c0]
mov dword [esp + 0x74], ecx
mov dword [esp + 0x78], eax
lea eax, [0x6c70bf]
mov dword [esp], eax
mov dword [esp + 4], 2
lea eax, [esp + 0x74]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cb5c0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x38], ecx
lea edi, [esp + 0xa0]
mov edx, eax
xor eax, eax
call fcn.0046314b
mov dword [esp + 0xac], edx
mov eax, dword [esp + 0x38]
mov dword [esp + 0xb0], eax
lea eax, [0x6a6e60]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0xb
lea ecx, [0x6c99d5]
mov dword [eax], ecx
mov ecx, dword [0x91eb10]
mov edx, dword [esp + 0xa8]
test ecx, ecx
jne 0x640892
mov dword [eax + 8], edx
jmp 0x6408a0
lea edi, [eax + 8]
mov ecx, eax
mov eax, edx
call fcn.00462ed0
mov eax, ecx
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0xb0]
mov dword [eax + 0x10], edx
mov edx, dword [0x91eb10]
test edx, edx
jne 0x6408c0
mov dword [eax + 0xc], ecx
jmp 0x6408ce
lea edi, [eax + 0xc]
mov edx, eax
mov eax, ecx
call fcn.00462ed0
mov eax, edx
lea ecx, [0x73e734]
mov dword [esp + 0x144], ecx
mov dword [esp + 0x148], eax
add esp, 0x130
ret
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov eax, dword [esp + 0x134]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x138]
mov dword [esp + 0x78], eax
lea eax, [0x6c70bf]
mov dword [esp], eax
mov dword [esp + 4], 2
lea eax, [esp + 0x74]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cb5c0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x38], ecx
lea edi, [esp + 0x8c]
mov edx, eax
xor eax, eax
call fcn.0046314b
mov dword [esp + 0x98], edx
mov eax, dword [esp + 0x38]
mov dword [esp + 0x9c], eax
lea eax, [0x6a6e60]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0xb
lea ecx, [0x6c99d5]
mov dword [eax], ecx
mov ecx, dword [0x91eb10]
mov edx, dword [esp + 0x94]
test ecx, ecx
jne 0x6409a2
mov dword [eax + 8], edx
jmp 0x6409b0
lea edi, [eax + 8]
mov ecx, eax
mov eax, edx
call fcn.00462ed0
mov eax, ecx
mov ecx, dword [esp + 0x98]
mov edx, dword [esp + 0x9c]
mov dword [eax + 0x10], edx
mov edx, dword [0x91eb10]
test edx, edx
jne 0x6409d0
mov dword [eax + 0xc], ecx
jmp 0x6409de
lea edi, [eax + 0xc]
mov edx, eax
mov eax, ecx
call fcn.00462ed0
mov eax, edx
lea ecx, [0x73e734]
mov dword [esp + 0x144], ecx
mov dword [esp + 0x148], eax
add esp, 0x130
ret
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
movsd qword [esp + 0x40], xmm0
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.004090f0
mov eax, dword [esp + 8]
lea ecx, [0x68c4c0]
mov dword [esp + 0x74], ecx
mov dword [esp + 0x78], eax
lea eax, [0x6c70bf]
mov dword [esp], eax
mov dword [esp + 4], 2
lea eax, [esp + 0x74]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cb5c0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x38], ecx
lea edi, [esp + 0xc8]
mov edx, eax
xor eax, eax
call fcn.0046314b
mov dword [esp + 0xd4], edx
mov eax, dword [esp + 0x38]
mov dword [esp + 0xd8], eax
lea eax, [0x6a6960]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0xa
lea ecx, [0x6c9153]
mov dword [eax], ecx
mov ecx, dword [0x91eb10]
mov edx, dword [esp + 0xd0]
test ecx, ecx
jne 0x640ac8
mov dword [eax + 8], edx
jmp 0x640ad6
lea edi, [eax + 8]
mov ecx, eax
mov eax, edx
call fcn.00462ed0
mov eax, ecx
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0xd8]
mov dword [eax + 0x10], edx
mov edx, dword [0x91eb10]
test edx, edx
jne 0x640af6
mov dword [eax + 0xc], ecx
jmp 0x640b04
lea edi, [eax + 0xc]
mov edx, eax
mov eax, ecx
call fcn.00462ed0
mov eax, edx
lea ecx, [0x73e670]
mov dword [esp + 0x144], ecx
mov dword [esp + 0x148], eax
add esp, 0x130
ret
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
movss dword [esp + 0x3c], xmm0
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call fcn.00409090
mov eax, dword [esp + 4]
lea ecx, [0x68c480]
mov dword [esp + 0x74], ecx
mov dword [esp + 0x78], eax
lea eax, [0x6c70bf]
mov dword [esp], eax
mov dword [esp + 4], 2
lea eax, [esp + 0x74]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cb5c0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x38], ecx
lea edi, [esp + 0xdc]
mov edx, eax
xor eax, eax
call fcn.0046314b
mov dword [esp + 0xe8], edx
mov eax, dword [esp + 0x38]
mov dword [esp + 0xec], eax
lea eax, [0x6a6960]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0xa
lea ecx, [0x6c9153]
mov dword [eax], ecx
mov ecx, dword [0x91eb10]
mov edx, dword [esp + 0xe4]
test ecx, ecx
jne 0x640be6
mov dword [eax + 8], edx
jmp 0x640bf4
lea edi, [eax + 8]
mov ecx, eax
mov eax, edx
call fcn.00462ed0
mov eax, ecx
mov ecx, dword [esp + 0xe8]
mov edx, dword [esp + 0xec]
mov dword [eax + 0x10], edx
mov edx, dword [0x91eb10]
test edx, edx
jne 0x640c14
mov dword [eax + 0xc], ecx
jmp 0x640c22
lea edi, [eax + 0xc]
mov edx, eax
mov eax, ecx
call fcn.00462ed0
mov eax, edx
lea ecx, [0x73e670]
mov dword [esp + 0x144], ecx
mov dword [esp + 0x148], eax
add esp, 0x130
ret
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], 0
mov byte [esp + 0x88], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], 0
mov byte [esp + 0x88], cl
lea eax, [0x6a67e0]
mov dword [esp], eax
call fcn.0040b7c0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0xc
lea ecx, [0x6ca087]
mov dword [eax], ecx
mov ecx, dword [0x91eb10]
mov edx, dword [esp + 0x84]
test ecx, ecx
jne 0x640cbf
mov dword [eax + 8], edx
jmp 0x640ccd
lea edi, [eax + 8]
mov ecx, eax
mov eax, edx
call fcn.00462ed0
mov eax, ecx
movzx ecx, byte [esp + 0x88]
mov byte [eax + 0xc], cl
lea ecx, [0x73e638]
mov dword [esp + 0x144], ecx
mov dword [esp + 0x148], eax
add esp, 0x130
ret
mov dword [esp + 0x144], 0
mov dword [esp + 0x148], 0
add esp, 0x130
ret
mov dword [esp + 0x144], 0
mov dword [esp + 0x148], 0
add esp, 0x130
ret
mov dword [esp + 0x144], 0
mov dword [esp + 0x148], 0
add esp, 0x130
ret
mov ecx, dword [esp + 0x34]
inc ecx
mov ebx, dword [esp + 0x50]
mov ebp, dword [esp + 0x54]
mov edx, dword [esp + 0x24]
mov edx, dword [esp + 0x30]
mov dword [esp + 0x2c], esi
mov dword [esp + 0x58], eax
mov esi, dword [esp + 0x24]
mov eax, ecx
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x28], edi
mov dword [esp + 0x34], eax
and esi, 0x1f
cmp esi, 0x17
jne 0x640d86
mov esi, dword [ebp + 4]
jmp 0x640db6
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov eax, dword [esp + 0x24]
mov dword [esp + 8], eax
call fcn.004ba740
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x50]
mov ebp, dword [esp + 0x54]
mov edi, dword [esp + 0x28]
cmp eax, esi
jge 0x640ecf
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov ecx, dword [esp + 0x24]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.004ba3a0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov byte [esp + 0xc], 1
call fcn.004ba550
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x30]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x60]
mov dword [esp + 0xc], ecx
call fcn.006400a0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
test eax, eax
je 0x640ebe
mov ebx, dword [esp + 0x28]
lea ebp, [ebx + 1]
mov esi, dword [esp + 0x2c]
cmp esi, ebp
jb 0x640e44
mov eax, dword [esp + 0x58]
jmp 0x640e8b
mov dword [esp + 0x68], edx
mov dword [esp + 0x64], ecx
lea eax, [0x69d580]
mov dword [esp], eax
mov ecx, dword [esp + 0x58]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.0044b5e0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
lea ebp, [ecx + 1]
mov ecx, dword [esp + 0x64]
mov ebx, dword [esp + 0x28]
mov esi, edx
mov edx, dword [esp + 0x68]
mov edi, ebp
lea ebp, [eax + ebx*8]
mov dword [ebp], edx
mov edx, dword [0x91eb10]
lea ebx, [eax + ebx*8 + 4]
test edx, edx
jne 0x640ea8
mov dword [ebx], ecx
jmp 0x640d4a
mov edx, edi
mov edi, ebx
mov ebp, eax
mov eax, ecx
call fcn.00462ed0
mov eax, ebp
mov edi, edx
jmp 0x640d4a
mov edi, dword [esp + 0x28]
mov esi, dword [esp + 0x2c]
mov eax, dword [esp + 0x58]
jmp 0x640d4a
xor eax, eax
lea edi, [esp + 0x118]
call fcn.0046314a
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x124], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x128], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x12c], ecx
lea ecx, [0x6a6ae0]
mov dword [esp], ecx
call fcn.0040b7c0
mov ecx, dword [esp + 4]
mov dword [ecx + 4], 9
lea edx, [0x6c8b5f]
mov dword [ecx], edx
mov edx, dword [0x91eb10]
mov eax, dword [esp + 0x120]
test edx, edx
jne 0x640f35
mov dword [ecx + 8], eax
jmp 0x640f3d
lea edi, [ecx + 8]
call fcn.00462ed0
mov eax, dword [esp + 0x124]
mov edx, dword [esp + 0x128]
mov ebx, dword [esp + 0x12c]
mov dword [ecx + 0x10], edx
mov dword [ecx + 0x14], ebx
mov edx, dword [0x91eb10]
test edx, edx
jne 0x640f67
mov dword [ecx + 0xc], eax
jmp 0x640f6f
lea edi, [ecx + 0xc]
call fcn.00462ed0
lea eax, [0x73e6c4]
mov dword [esp + 0x144], eax
mov dword [esp + 0x148], ecx
add esp, 0x130
ret
call fcn.00461ac0
jmp fcn.006400a0