Function at 0x64a3d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x58]
cmp eax, dword [ecx + 8]
jbe 0x64b023
sub esp, 0xd8
lea eax, [0x6c33e0]
mov dword [esp], eax
mov eax, dword [esp + 0xe0]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0xe4]
mov dword [esp + 8], ecx
call fcn.0040ab90
movzx eax, byte [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
test al, al
je 0x64aef0
mov dword [esp + 0x6c], edx
mov dword [esp + 0x70], ecx
mov eax, dword [esp + 0xdc]
mov dword [eax + 0x5c], 0
mov ebx, dword [0x884700]
lea ebp, [eax + 0x60]
test ebx, ebx
jne 0x64aecc
mov dword [eax + 0x60], 0
mov ebx, dword [eax + 0x60]
mov ebp, dword [eax + 0x5c]
test ebp, ebp
jne 0x64a53c
lea ebx, [0x6bec60]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.0040a990
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xdc]
mov dword [esp], eax
lea ecx, [0x7073ed]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xc
mov byte [esp + 0x14], 1
call fcn.006499a0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0xdc]
mov ebx, dword [edx + 0x60]
mov ebp, dword [edx + 0x5c]
test ebp, ebp
jne 0x64ae58
test eax, eax
sete bl
cmp ecx, 4
xchg ebp, ebx
setbe bl
xchg ebp, ebx
and ebp, ebx
test eax, eax
setb al
or ebp, eax
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x64a773
cmp ecx, 2
xchg ebp, ebx
setbe bl
xchg ebp, ebx
and ebp, ebx
or ebp, eax
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x64a671
cmp ecx, 1
sete al
and eax, ebx
test al, al
jne 0x64a5cc
cmp ecx, 2
sete al
and ebx, eax
test bl, bl
jne 0x64a551
mov eax, edx
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x6c]
mov ebx, dword [eax + 0x60]
mov ebp, dword [eax + 0x5c]
test ebp, ebp
je 0x64a465
mov dword [esp + 0xe8], ebp
mov dword [esp + 0xec], ebx
add esp, 0xd8
ret
lea eax, [0x6bec60]
mov dword [esp], eax
mov ecx, dword [esp + 0x6c]
mov dword [esp + 4], ecx
mov ebx, dword [esp + 0x70]
mov dword [esp + 8], ebx
call fcn.0040a990
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xdc]
mov dword [esp], eax
lea ecx, [0x706e3a]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xb
call fcn.00649e50
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xdc]
mov ebx, dword [edx + 0x5c]
test ebx, ebx
jne 0x64a524
mov ebx, dword [edx]
or ebx, 4
mov dword [edx], ebx
mov dword [edx + 0xc], ecx
mov dword [edx + 0x10], eax
jmp 0x64a524
mov dword [esp], edx
lea eax, [0x705cbb]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0xc], ecx
mov ebx, dword [esp + 0x70]
mov dword [esp + 0x10], ebx
call fcn.0064a010
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0xdc]
mov ebp, dword [ebx + 0x5c]
test ebp, ebp
je 0x64a617
mov edx, ebx
jmp 0x64a524
mov dword [esp], 0
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
call fcn.0043a9c0
mov eax, dword [esp + 0xdc]
mov ecx, dword [eax]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
or ecx, 2
mov dword [eax], ecx
mov dword [eax + 8], ebx
mov ecx, dword [0x884700]
lea ebx, [eax + 4]
test ecx, ecx
jne 0x64a65c
mov dword [eax + 4], edx
mov ebx, eax
jmp 0x64a610
mov dword [esp], ebx
mov dword [esp + 4], edx
call fcn.0040d5a0
mov eax, dword [esp + 0xdc]
jmp 0x64a658
cmp ecx, 3
sete al
and ebx, eax
test bl, bl
je 0x64a6f8
lea eax, [0x6bec60]
mov dword [esp], eax
mov ecx, dword [esp + 0x6c]
mov dword [esp + 4], ecx
mov ebx, dword [esp + 0x70]
mov dword [esp + 8], ebx
call fcn.0040a990
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xdc]
mov dword [esp], eax
lea ecx, [0x707b17]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xd
call fcn.00649e50
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xdc]
mov ebx, dword [edx + 0x5c]
test ebx, ebx
jne 0x64a524
mov ebx, dword [edx]
or ebx, 8
mov dword [edx], ebx
mov dword [edx + 0x1c], ecx
mov dword [edx + 0x20], eax
jmp 0x64a524
lea eax, [0x6bec60]
mov dword [esp], eax
mov ecx, dword [esp + 0x6c]
mov dword [esp + 4], ecx
mov ebx, dword [esp + 0x70]
mov dword [esp + 8], ebx
call fcn.0040a990
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov eax, dword [esp + 0xdc]
mov dword [esp], eax
lea ecx, [0x7058e5]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
call fcn.00649de0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xdc]
mov ebx, dword [edx + 0x5c]
test ebx, ebx
jne 0x64a524
mov ebx, dword [edx]
or ebx, 0x10
mov dword [edx], ebx
mov dword [edx + 0x24], ecx
mov dword [edx + 0x28], eax
jmp 0x64a524
cmp ecx, 6
xchg ebp, ebx
setbe bl
xchg ebp, ebx
and ebp, ebx
or eax, ebp
test al, al
jne 0x64ab3a
cmp ecx, 7
sete al
and eax, ebx
test al, al
jne 0x64a828
cmp ecx, 9
sete al
and ebx, eax
test bl, bl
jne 0x64a7aa
jmp 0x64a524
lea eax, [0x6bec60]
mov dword [esp], eax
mov ecx, dword [esp + 0x6c]
mov dword [esp + 4], ecx
mov ebx, dword [esp + 0x70]
mov dword [esp + 8], ebx
call fcn.0040a990
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov eax, dword [esp + 0xdc]
mov dword [esp], eax
lea ecx, [0x708d4e]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x10
call fcn.00649e50
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xdc]
mov ebx, dword [edx + 0x5c]
test ebx, ebx
jne 0x64a524
mov ebx, dword [edx]
or ebx, 0x200
mov dword [edx], ebx
mov dword [edx + 0x14], ecx
mov dword [edx + 0x18], eax
jmp 0x64a524
lea eax, [0x6bec60]
mov dword [esp], eax
mov ecx, dword [esp + 0x6c]
mov dword [esp + 4], ecx
mov ebx, dword [esp + 0x70]
mov dword [esp + 8], ebx
call fcn.0040a990
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov eax, dword [esp + 0xdc]
mov dword [esp], eax
lea ecx, [0x708479]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xf
call fcn.0064a350
mov eax, dword [esp + 0x14]
mov dword [esp + 0x38], eax
lea ecx, [0x6bec60]
mov dword [esp], ecx
mov edx, dword [esp + 0x6c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x70]
mov dword [esp + 8], ebx
call fcn.0040a990
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov eax, dword [esp + 0xdc]
mov dword [esp], eax
lea ecx, [0x707977]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xd
call fcn.00649e50
mov eax, dword [esp + 0x18]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x28], ecx
lea edx, [0x6bec60]
mov dword [esp], edx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x70]
mov dword [esp + 8], ebp
call fcn.0040a990
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov eax, dword [esp + 0xdc]
mov dword [esp], eax
lea ecx, [0x707eba]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xe
call fcn.00649e50
mov eax, dword [esp + 0x18]
mov dword [esp + 0x24], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x20], ecx
mov edx, dword [esp + 0xdc]
mov dword [esp], edx
lea ebx, [0x707eac]
mov dword [esp + 4], ebx
mov dword [esp + 8], 0xe
mov ebp, dword [esp + 0x6c]
mov dword [esp + 0xc], ebp
mov esi, dword [esp + 0x70]
mov dword [esp + 0x10], esi
call fcn.0064a010
mov eax, dword [esp + 0x14]
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x44], ecx
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x48], edx
mov ebx, dword [esp + 0xdc]
mov dword [esp], ebx
lea ebp, [0x707e9e]
mov dword [esp + 4], ebp
mov dword [esp + 8], 0xe
mov esi, dword [esp + 0x6c]
mov dword [esp + 0xc], esi
mov edi, dword [esp + 0x70]
mov dword [esp + 0x10], edi
call fcn.0064a010
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x4c], ecx
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0xdc]
mov ebp, dword [ebx + 0x5c]
test ebp, ebp
je 0x64a9dc
mov edx, ebx
jmp 0x64a524
mov ebp, dword [ebx]
or ebp, 0x80
mov dword [ebx], ebp
lea edi, [esp + 0x80]
lea esi, [0x731700]
call fcn.0044a822
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x80], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x84], ecx
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x88], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x8c], ecx
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x90], ecx
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x94], ecx
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x98], ecx
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x9c], ecx
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], edx
mov eax, dword [ebx + 0x38]
mov ecx, dword [ebx + 0x3c]
mov edx, dword [ebx + 0x40]
lea ebp, [ebx + 0x38]
mov dword [esp + 0x7c], ebp
lea ebp, [ecx + 1]
cmp ebp, edx
jg 0x64aad0
lea edx, [ecx + 1]
mov dword [ebx + 0x3c], edx
mov edx, dword [0x884700]
imul ecx, ecx, 0x2c
lea edi, [eax + ecx]
test edx, edx
jne 0x64aaa7
lea esi, [esp + 0x80]
call fcn.0044a822
jmp 0x64a9d5
lea eax, [0x6dc7a0]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x80]
mov dword [esp + 8], eax
call fcn.0040d6b0
mov ebx, dword [esp + 0xdc]
jmp 0x64a9d5
lea edi, [0x6dc7a0]
mov dword [esp], edi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
call fcn.00437660
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x58], ecx
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0xdc]
mov dword [ebx + 0x40], edx
mov edx, dword [0x884700]
test edx, edx
jne 0x64ab1d
mov dword [ebx + 0x38], eax
mov eax, dword [ebx + 0x38]
jmp 0x64aa80
mov edx, dword [esp + 0x7c]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0040d5a0
mov ecx, dword [esp + 0x58]
mov ebx, dword [esp + 0xdc]
jmp 0x64ab15
cmp ecx, 5
sete al
and ebx, eax
test bl, bl
je 0x64acdd
lea eax, [0x6bec60]
mov dword [esp], eax
mov ecx, dword [esp + 0x6c]
mov dword [esp + 4], ecx
mov ebx, dword [esp + 0x70]
mov dword [esp + 8], ebx
call fcn.0040a990
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov eax, dword [esp + 0xdc]
mov dword [esp], eax
lea ecx, [0x707f1c]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xe
call fcn.0064a350
mov eax, dword [esp + 0x14]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0xdc]
mov dword [esp], ecx
lea edx, [0x7079ec]
mov dword [esp + 4], edx
mov dword [esp + 8], 0xd
mov ebx, dword [esp + 0x6c]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0x70]
mov dword [esp + 0x10], ebp
call fcn.0064a010
mov eax, dword [esp + 0x14]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x50], ecx
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x54], edx
mov ebx, dword [esp + 0xdc]
mov ebp, dword [ebx + 0x5c]
test ebp, ebp
je 0x64abff
mov edx, ebx
jmp 0x64a524
mov ebp, dword [ebx]
or ebp, 0x20
mov dword [ebx], ebp
mov ebp, dword [ebx + 0x2c]
mov esi, dword [ebx + 0x30]
mov edi, dword [ebx + 0x34]
lea eax, [ebx + 0x2c]
mov dword [esp + 0x78], eax
lea eax, [esi + 1]
cmp eax, edi
jg 0x64ac67
lea eax, [esi + 1]
mov dword [ebx + 0x30], eax
shl esi, 4
mov eax, dword [esp + 0x40]
mov dword [ebp + esi], eax
mov dword [ebp + esi + 8], ecx
mov dword [ebp + esi + 0xc], edx
lea eax, [ebp + esi + 4]
mov ecx, dword [0x884700]
test ecx, ecx
jne 0x64ac4e
mov eax, dword [esp + 0x60]
mov dword [ebp + esi + 4], eax
jmp 0x64abf8
mov dword [esp], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 4], eax
call fcn.0040d5a0
mov ebx, dword [esp + 0xdc]
jmp 0x64abf8
lea edx, [0x6c8a60]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], eax
call fcn.00437660
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x58], ecx
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0xdc]
mov dword [ebx + 0x34], edx
mov edx, dword [0x884700]
test edx, edx
jne 0x64acc0
mov dword [ebx + 0x2c], eax
mov ebp, dword [ebx + 0x2c]
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x54]
mov esi, dword [esp + 0x58]
jmp 0x64ac1d
mov edx, dword [esp + 0x78]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0040d5a0
mov ecx, dword [esp + 0x58]
mov ebx, dword [esp + 0xdc]
jmp 0x64acac
lea eax, [0x6bec60]
mov dword [esp], eax
mov ecx, dword [esp + 0x6c]
mov dword [esp + 4], ecx
mov ebx, dword [esp + 0x70]
mov dword [esp + 8], ebx
call fcn.0040a990
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov eax, dword [esp + 0xdc]
mov dword [esp], eax
lea ecx, [0x70852d]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xf
call fcn.0064a350
mov eax, dword [esp + 0x14]
mov dword [esp + 0x3c], eax
lea ecx, [0x6bec60]
mov dword [esp], ecx
mov edx, dword [esp + 0x6c]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x70]
mov dword [esp + 8], ebx
call fcn.0040a990
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov eax, dword [esp + 0xdc]
mov dword [esp], eax
lea ecx, [0x707a06]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xd
call fcn.00649e50
mov eax, dword [esp + 0x18]
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x2c], ecx
mov edx, dword [esp + 0xdc]
mov ebx, dword [edx + 0x5c]
test ebx, ebx
jne 0x64a524
mov ebx, dword [edx]
or ebx, 0x40
mov dword [edx], ebx
mov ebx, dword [edx + 0x44]
mov ebp, dword [edx + 0x48]
mov esi, dword [edx + 0x4c]
lea edi, [edx + 0x44]
mov dword [esp + 0x74], edi
lea edi, [ebp + 1]
cmp edi, esi
jg 0x64ade1
lea esi, [ebp + 1]
mov dword [edx + 0x48], esi
lea ebp, [ebp + ebp*2]
mov esi, dword [esp + 0x3c]
mov dword [ebx + ebp*4], esi
mov dword [ebx + ebp*4 + 4], ecx
mov dword [ebx + ebp*4 + 8], eax
jmp 0x64a524
lea eax, [0x6c8ac0]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edi
call fcn.00437660
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x58], ecx
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0xdc]
mov dword [ebx + 0x4c], edx
mov edx, dword [0x884700]
test edx, edx
jne 0x64ae3b
mov dword [ebx + 0x44], eax
mov esi, dword [ebx + 0x44]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, ebx
mov ebp, dword [esp + 0x58]
mov ebx, esi
jmp 0x64adc3
mov edx, dword [esp + 0x74]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0040d5a0
mov ecx, dword [esp + 0x58]
mov ebx, dword [esp + 0xdc]
jmp 0x64ae26
mov eax, dword [0x8729e0]
cmp ebp, eax
je 0x64ae7d
mov eax, dword [edx + 0x60]
mov ecx, dword [edx + 0x5c]
mov dword [esp + 0xe8], ecx
mov dword [esp + 0xec], eax
add esp, 0xd8
ret
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov eax, dword [0x8729e4]
mov ecx, dword [0x8729e0]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.004022c0
movzx eax, byte [esp + 0x10]
test al, al
jne 0x64aeaf
mov edx, dword [esp + 0xdc]
jmp 0x64ae62
mov dword [esp + 0xe8], 0
mov dword [esp + 0xec], 0
add esp, 0xd8
ret
mov dword [esp], ebp
mov dword [esp + 4], 0
call fcn.0040d5a0
mov eax, dword [esp + 0xdc]
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x6c]
jmp 0x64a457
mov eax, dword [esp + 0xe0]
test eax, eax
je 0x64b01c
mov ecx, dword [eax + 4]
lea edx, [0x6f77c0]
cmp edx, ecx
jne 0x64b012
mov ecx, dword [esp + 0xe4]
jne 0x64af2f
mov edx, dword [ecx + 4]
cmp edx, 0x1000
jl 0x64af2f
lea edx, [0x849540]
jmp 0x64a429
lea ecx, [0x6e3f00]
mov dword [esp], ecx
call fcn.0040cd70
mov eax, dword [esp + 4]
mov dword [esp + 0x64], eax
lea ecx, [0x6b4b60]
mov dword [esp], ecx
mov dword [esp + 4], 0x1000
mov dword [esp + 8], 0x1000
call fcn.00437440
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x68], ecx
mov edx, dword [esp + 0x14]
lea edi, [esp + 0xac]
mov ebx, eax
xor eax, eax
call fcn.0044a375
mov eax, dword [esp + 0x68]
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xb4], edx
mov eax, dword [esp + 0xe0]
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0xe4]
mov dword [esp + 0xbc], eax
mov dword [esp + 0xd0], 0xffffffff
mov dword [esp + 0xd4], 0xffffffff
mov edi, dword [esp + 0x64]
test byte [edi], al
mov eax, dword [0x884700]
test eax, eax
jne 0x64aff3
lea esi, [esp + 0xac]
call fcn.0044a822
mov ecx, dword [esp + 0x64]
jmp 0x64af24
lea eax, [0x6e3f00]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xac]
mov dword [esp + 8], eax
call fcn.0040d6b0
jmp 0x64afea
mov ecx, 0
jmp 0x64af17
mov ecx, eax
jmp 0x64af02
call fcn.004486b0
jmp fcn.0064a3d0