Function at 0x64c860
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x9aee30]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x100]
cmp eax, dword [ecx + 8]
jbe 0x64df12
sub esp, 0x180
mov dword [esp + 0x1a0], 0
mov dword [esp + 0x1a4], 0
mov dword [esp + 0x1a8], 0
mov dword [esp + 0x1ac], 0
mov eax, dword [esp + 0x198]
mov dword [esp], eax
mov eax, dword [esp + 0x19c]
mov dword [esp + 4], eax
call fcn.0064e130
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0xc]
test eax, eax
jne 0x64cdf7
mov dword [esp + 0x70], edx
mov dword [esp + 0x78], ebx
mov dword [esp + 0xe8], ecx
lea edi, [esp + 0x168]
xor eax, eax
call fcn.0046cb2b
mov ecx, dword [esp + 0x188]
mov edx, dword [ecx + 0x10]
mov ebx, dword [esp + 0x18c]
mov dword [esp], ebx
call edx
movzx ecx, byte [esp + 0x18]
mov byte [esp + 0x37], cl
lea edi, [esp + 0x168]
lea esi, [esp + 4]
call fcn.0046d00e
lea edi, [esp + 0x104]
lea esi, [esp + 0x168]
call fcn.0046d00e
movzx ecx, byte [esp + 0x37]
test cl, cl
je 0x64c9cb
lea edi, [esp + 0xf0]
lea esi, [esp + 0x168]
call fcn.0046d00e
mov eax, dword [esp + 0xf4]
mov ecx, dword [esp + 0xf0]
test eax, 0x80000000
je 0x64c997
mov edx, ecx
shl ecx, 1
shl eax, 1
mov ebx, edx
shr edx, 0x1f
or eax, edx
mov edx, eax
shl eax, 1
shr ecx, 0x1f
or ecx, eax
shr edx, 0x1f
add ecx, 0xd7b17f80
adc edx, 0xd
jmp 0x64c9a9
mov eax, dword [esp + 0xf8]
mov edx, dword [esp + 0xfc]
mov ebx, ecx
mov ecx, eax
test ecx, ecx
sete al
test edx, edx
sete cl
and ecx, eax
test cl, cl
je 0x64c9c4
test ebx, 0x3fffffff
sete al
jmp 0x64c9c6
xor eax, eax
xor eax, 1
jmp 0x64c9cd
xor eax, eax
test al, al
je 0x64ca93
mov eax, dword [esp + 0x190]
mov ecx, dword [eax + 0x20]
mov dword [esp + 0x9c], ecx
mov edx, dword [esp + 0x194]
mov dword [esp], edx
lea edi, [esp + 4]
lea esi, [esp + 0x104]
call fcn.0046d00e
mov ecx, dword [esp + 0x9c]
call ecx
lea edi, [esp + 0x124]
lea esi, [0x96f420]
call fcn.0046d00e
mov eax, dword [esp + 0x190]
test byte [eax], al
lea edi, [esp + 0x148]
xor eax, eax
call fcn.0046cb28
lea eax, [0x64e0e0]
mov dword [esp + 0x148], eax
mov eax, dword [esp + 0x190]
mov dword [esp + 0x14c], eax
mov ecx, dword [esp + 0x194]
mov dword [esp + 0x150], ecx
lea edi, [esp + 0x154]
lea esi, [esp + 0x124]
call fcn.0046d00e
lea ecx, [esp + 0x148]
mov dword [esp + 0xc4], ecx
lea ecx, [esp + 0xb8]
mov dword [esp], ecx
call fcn.00438e60
test eax, eax
jne 0x64cdeb
mov eax, dword [esp + 0x188]
lea ecx, [0x74a5bc]
cmp eax, ecx
jne 0x64cace
mov dword [esp], eax
mov ecx, dword [esp + 0x18c]
mov dword [esp + 4], ecx
lea edx, [0x9aece0]
mov dword [esp + 8], edx
call fcn.00404cd0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x64cc27
lea eax, [0x68c860]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00405a60
mov eax, dword [esp + 8]
mov dword [esp + 0xec], eax
lea ecx, [0x68c6c0]
mov dword [esp], ecx
mov dword [esp + 4], 0
call fcn.00405a60
mov eax, dword [esp + 8]
mov dword [esp + 0x11c], eax
mov dword [esp + 0x138], 0
mov dword [esp + 0x13c], 0
mov dword [esp + 0x140], 0
mov dword [esp + 0x144], 0
lea ecx, [0x64e050]
mov dword [esp + 0x138], ecx
mov dword [esp + 0x13c], eax
lea ecx, [esp + 0x1a8]
mov dword [esp + 0x140], ecx
mov ecx, dword [esp + 0xec]
mov dword [esp + 0x144], ecx
lea edx, [esp + 0x138]
mov dword [esp + 0xac], edx
lea edx, [esp + 0xa0]
mov dword [esp], edx
call fcn.00438e60
test eax, eax
jne 0x64cddf
lea eax, [0x6ae8c0]
mov dword [esp], eax
call fcn.0040d2a0
mov eax, dword [esp + 4]
lea ecx, [0x64df20]
mov dword [eax], ecx
mov ecx, dword [esp + 0x188]
mov dword [eax + 4], ecx
mov edx, dword [0x9aef70]
test edx, edx
jne 0x64cbdd
mov edx, dword [esp + 0x18c]
mov ebx, dword [esp + 0x194]
mov ebp, dword [esp + 0xec]
mov esi, dword [esp + 0x11c]
jmp 0x64cc09
call fcn.0046c8c0
mov edx, dword [esp + 0x18c]
mov dword [edi], edx
mov ebx, dword [esp + 0x194]
mov dword [edi + 4], ebx
mov ebp, dword [esp + 0xec]
mov dword [edi + 8], ebp
mov esi, dword [esp + 0x11c]
mov dword [edi + 0xc], esi
mov dword [eax + 8], edx
mov ecx, dword [esp + 0x190]
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ebx
mov dword [eax + 0x14], ebp
mov dword [eax + 0x18], esi
mov dword [esp], eax
call fcn.004462e0
lea eax, [0x692a40]
mov dword [esp], eax
mov dword [esp + 4], 0
mov ecx, dword [esp + 0x78]
lea edx, [ecx + 6]
mov dword [esp + 0x84], edx
mov dword [esp + 8], edx
call fcn.004507f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x78]
cmp ecx, 0xfffffffa
je 0x64cc65
mov edx, dword [esp + 0x84]
jmp 0x64cc9b
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 0
mov dword [esp + 0xc], 1
lea eax, [0x692a40]
mov dword [esp + 0x10], eax
call fcn.004508b0
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x78]
mov byte [eax], 5
mov ebx, dword [esp + 0x184]
mov ebp, dword [ebx + 0x1c]
mov esi, dword [ebx + 0x18]
test ebp, ebp
je 0x64cd94
mov edi, dword [ebx + 0x24]
test edi, edi
je 0x64cd94
cmp ebp, 0xff
jg 0x64cd3c
mov dword [esp + 0x120], esi
mov dword [esp + 0x98], ebp
cmp edx, 2
jae 0x64cd20
mov dword [esp], eax
mov dword [esp + 4], 2
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x692a40]
mov dword [esp + 0x10], eax
call fcn.004508b0
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x78]
mov ebx, dword [esp + 0x184]
mov ebp, dword [esp + 0x98]
mov esi, dword [esp + 0x120]
xchg ebp, ebx
mov byte [eax + 1], bl
xchg ebp, ebx
xor edi, edi
mov edi, 2
mov dword [esp + 0x80], edi
xor edi, edi
jmp 0x64de9f
nop
lea eax, [0x69de40]
mov dword [esp], eax
call fcn.0040d2a0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1f
lea ecx, [0x6dbcc3]
mov dword [eax], ecx
mov dword [esp + 0x1a0], 0
mov dword [esp + 0x1a4], 0
lea ecx, [0x74924c]
mov dword [esp + 0x1a8], ecx
mov dword [esp + 0x1ac], eax
call fcn.00439380
add esp, 0x180
ret
cmp edx, 3
jae 0x64cdd2
mov dword [esp], eax
mov dword [esp + 4], 3
mov dword [esp + 8], edx
mov dword [esp + 0xc], 2
lea eax, [0x692a40]
mov dword [esp + 0x10], eax
call fcn.004508b0
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x78]
mov ebx, dword [esp + 0x184]
mov word [eax + 1], 1
mov ebp, 3
jmp 0x64ce2b
call fcn.00439380
add esp, 0x180
ret
call fcn.00439380
add esp, 0x180
ret
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1a0], 0
mov dword [esp + 0x1a4], 0
mov dword [esp + 0x1a8], eax
mov dword [esp + 0x1ac], ecx
call fcn.00439380
add esp, 0x180
ret
mov dword [esp + 0x80], ebp
mov dword [esp + 0x118], eax
mov dword [esp + 0x84], edx
mov ecx, dword [esp + 0x190]
mov ebx, dword [ecx + 0x2c]
mov esi, dword [esp + 0x194]
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edx
call ebx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1a8], eax
mov dword [esp + 0x1ac], ecx
test eax, eax
jne 0x64d36b
mov edx, dword [esp + 0x84]
cmp edx, 2
jb 0x64de7e
mov eax, dword [esp + 0x190]
test eax, eax
je 0x64cebb
mov ecx, dword [eax + 4]
lea edx, [0x965280]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.0040ac30
mov eax, dword [esp + 8]
mov edx, dword [esp + 0x84]
mov dword [esp], eax
mov eax, dword [esp + 0x194]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x118]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], 2
call fcn.0049a5a0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x1a8], eax
mov dword [esp + 0x1ac], ecx
test eax, eax
jne 0x64d35f
mov ebx, dword [esp + 0x80]
test ebx, ebx
jbe 0x64de75
mov ebp, dword [esp + 0x118]
movzx esi, byte [ebp]
xchg esi, eax
cmp al, 5
xchg esi, eax
jne 0x64d29b
cmp ebx, 1
jbe 0x64de69
movzx eax, byte [ebp + 1]
cmp eax, 0xff
je 0x64d243
mov ecx, dword [esp + 0x184]
mov ebx, dword [ecx + 0x24]
test ebx, ebx
je 0x64cff0
mov ebx, dword [esp + 0x190]
test ebx, ebx
je 0x64cf95
mov dword [esp + 0x94], eax
mov eax, dword [ebx + 4]
lea ecx, [0x965290]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040ac30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x184]
mov ebx, eax
mov eax, dword [esp + 0x94]
mov edx, dword [ecx + 0x24]
mov ebp, dword [edx]
mov esi, dword [esp + 0x188]
mov dword [esp], esi
mov esi, dword [esp + 0x18c]
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x194]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], eax
call ebp
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1a8], eax
mov dword [esp + 0x1ac], ecx
test eax, eax
jne 0x64d237
mov ecx, dword [esp + 0x184]
mov ebp, dword [esp + 0x118]
mov eax, dword [ecx]
mov ecx, dword [esp + 0x84]
cmp ecx, 3
jae 0x64d042
mov dword [esp + 0x90], eax
mov dword [esp], ebp
mov dword [esp + 4], 3
mov dword [esp + 8], 2
mov dword [esp + 0xc], 3
lea eax, [0x692a40]
mov dword [esp + 0x10], eax
call fcn.004508b0
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov ebp, eax
mov ecx, edx
mov eax, dword [esp + 0x90]
mov dword [esp + 0x118], ebp
mov dword [esp + 0x84], ecx
mov byte [ebp], 5
mov byte [ebp + 1], al
mov byte [ebp + 2], 0
mov eax, dword [esp + 0xe8]
mov dword [esp], eax
mov edx, dword [esp + 0x78]
mov dword [esp + 4], edx
call fcn.005a87d0
movzx eax, byte [esp + 0x18]
lea edi, [esp + 0x48]
lea esi, [esp + 8]
call fcn.0046d018
lea edi, [esp + 0x27]
lea esi, [esp + 0x48]
call fcn.0046d018
test al, al
je 0x64d0a0
lea eax, [esp + 0x27]
mov ecx, 0x10
jmp 0x64d0a4
xor eax, eax
xor ecx, ecx
test eax, eax
je 0x64d0c6
cmp ecx, 4
je 0x64d0bd
cmp ecx, 0x10
jne 0x64de2d
xor edx, edx
jmp 0x64de3b
mov edx, eax
mov ebx, ecx
jmp 0x64db82
mov eax, dword [esp + 0x78]
cmp eax, 0xff
jg 0x64d1df
mov ecx, dword [esp + 0x84]
cmp ecx, 4
jb 0x64d0ea
mov ebp, dword [esp + 0x118]
jmp 0x64d123
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x692a40]
mov dword [esp + 0x10], eax
call fcn.004508b0
mov ebp, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x78]
mov byte [ebp + 3], 3
cmp ecx, 5
jae 0x64d15e
mov dword [esp], ebp
mov dword [esp + 4], 5
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x692a40]
mov dword [esp + 0x10], eax
call fcn.004508b0
mov ebp, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x78]
mov byte [ebp + 4], al
lea edx, [eax + 5]
cmp ecx, edx
jae 0x64d196
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
lea ecx, [0x692a40]
mov dword [esp + 0x10], ecx
call fcn.004508b0
mov ebp, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x78]
mov dword [esp + 0x84], ecx
mov dword [esp + 0x80], edx
mov dword [esp + 0x118], ebp
lea ebx, [ebp + 5]
mov dword [esp], ebx
mov ebx, dword [esp + 0xe8]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
call fcn.0046d220
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x118]
jmp 0x64d377
nop
lea eax, [0x69de40]
mov dword [esp], eax
call fcn.0040d2a0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0xd
lea ecx, [0x6d2737]
mov dword [eax], ecx
mov dword [esp + 0x1a0], 0
mov dword [esp + 0x1a4], 0
lea ecx, [0x74924c]
mov dword [esp + 0x1a8], ecx
mov dword [esp + 0x1ac], eax
call fcn.00439380
add esp, 0x180
ret
call fcn.00439380
add esp, 0x180
ret
nop
lea eax, [0x69de40]
mov dword [esp], eax
call fcn.0040d2a0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x24
lea ecx, [0x6de171]
mov dword [eax], ecx
mov dword [esp + 0x1a0], 0
mov dword [esp + 0x1a4], 0
lea ecx, [0x74924c]
mov dword [esp + 0x1a8], ecx
mov dword [esp + 0x1ac], eax
call fcn.00439380
add esp, 0x180
ret
xchg esi, ebx
movzx eax, bl
xchg esi, ebx
mov ecx, eax
sar eax, 0x1f
nop
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
call fcn.00485330
mov dword [esp], 0
lea eax, [0x6da2c8]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x1c
call fcn.00454370
mov eax, dword [esp + 0x18]
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0xe4], ecx
lea edx, [0x69de40]
mov dword [esp], edx
call fcn.0040d2a0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x6c]
mov dword [eax + 4], ecx
mov ecx, dword [0x9aef70]
test ecx, ecx
jne 0x64d319
mov ecx, dword [esp + 0xe4]
jmp 0x64d327
call fcn.0046c890
mov ecx, dword [esp + 0xe4]
mov dword [edi], ecx
mov dword [eax], ecx
mov dword [esp + 0x1a0], 0
mov dword [esp + 0x1a4], 0
lea ecx, [0x74924c]
mov dword [esp + 0x1a8], ecx
mov dword [esp + 0x1ac], eax
call fcn.00439380
add esp, 0x180
ret
call fcn.00439380
add esp, 0x180
ret
call fcn.00439380
add esp, 0x180
ret
add ecx, 2
cmp eax, ecx
jae 0x64d3ac
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
lea eax, [0x692a40]
mov dword [esp + 0x10], eax
call fcn.004508b0
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x118], edx
mov dword [esp + 0x80], ecx
mov dword [esp + 0x84], eax
mov ebx, dword [esp + 0x70]
mov ebp, ebx
sar ebx, 8
mov byte [ecx + edx - 2], bl
xchg ebp, eax
mov byte [ecx + edx - 1], al
xchg ebp, eax
mov ebx, dword [esp + 0x190]
mov ebp, dword [ebx + 0x2c]
mov esi, dword [esp + 0x194]
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call ebp
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1a8], eax
mov dword [esp + 0x1ac], ecx
test eax, eax
jne 0x64db2a
mov edx, dword [esp + 0x84]
cmp edx, 4
jb 0x64db78
mov eax, dword [esp + 0x190]
test eax, eax
je 0x64d44f
mov ecx, dword [eax + 4]
lea edx, [0x9652a0]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.0040ac30
mov eax, dword [esp + 8]
mov edx, dword [esp + 0x84]
mov dword [esp], eax
mov eax, dword [esp + 0x194]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x118]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], 4
call fcn.0049a5a0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x1a8], eax
mov dword [esp + 0x1ac], ecx
test eax, eax
jne 0x64db1e
mov edx, dword [esp + 0x80]
test edx, edx
jbe 0x64db6f
mov ebx, dword [esp + 0x118]
movzx ebp, byte [ebx]
xchg ebp, eax
cmp al, 5
xchg ebp, eax
jne 0x64da5a
cmp edx, 1
jbe 0x64db63
movzx ebp, byte [ebx + 1]
test ebp, ebp
jne 0x64d99f
cmp edx, 2
jbe 0x64db57
movzx eax, byte [ebx + 2]
test al, al
jne 0x64d947
lea eax, [0x6a9c00]
mov dword [esp], eax
call fcn.0040d2a0
mov eax, dword [esp + 0x80]
cmp eax, 3
jbe 0x64db4b
mov eax, dword [esp + 0x118]
movzx ecx, byte [eax + 3]
mov edx, dword [esp + 4]
mov dword [esp + 0x17c], edx
cmp cl, 1
je 0x64d707
cmp cl, 3
jne 0x64d5e0
mov ecx, dword [esp + 0x190]
test ecx, ecx
je 0x64d560
mov eax, dword [ecx + 4]
lea edx, [0x9652b0]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0040ac30
mov eax, dword [esp + 8]
mov ecx, eax
mov eax, dword [esp + 0x118]
mov dword [esp], ecx
mov ecx, dword [esp + 0x194]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov edx, dword [esp + 0x84]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], 1
call fcn.0049a5a0
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x64d5ac
mov eax, dword [esp + 0x118]
movzx ebx, byte [eax]
add ebx, 2
jmp 0x64d764
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x1a0], 0
mov dword [esp + 0x1a4], 0
mov dword [esp + 0x1a8], eax
mov dword [esp + 0x1ac], ecx
call fcn.00439380
add esp, 0x180
ret
cmp cl, 4
jne 0x64d647
lea eax, [0x692a40]
mov dword [esp], eax
mov dword [esp + 4], 0x10
mov dword [esp + 8], 0x10
call fcn.004507f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x17c]
mov dword [ecx + 0xc], 0x10
mov dword [ecx + 0x10], 0x10
mov edx, dword [0x9aef70]
test edx, edx
je 0x64d633
call fcn.0046c8a0
mov dword [edi], eax
mov ebx, dword [ecx + 8]
mov dword [edi + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [esp + 0x118]
mov ebx, 0x12
jmp 0x64d764
movzx eax, cl
mov ecx, eax
sar eax, 0x1f
nop
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
call fcn.00485330
mov dword [esp], 0
lea eax, [0x6d62b9]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x15
call fcn.00454370
mov eax, dword [esp + 0x18]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0xd8], ecx
lea edx, [0x69de40]
mov dword [esp], edx
call fcn.0040d2a0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x60]
mov dword [eax + 4], ecx
mov ecx, dword [0x9aef70]
test ecx, ecx
jne 0x64d6c1
mov ecx, dword [esp + 0xd8]
jmp 0x64d6cf
call fcn.0046c890
mov ecx, dword [esp + 0xd8]
mov dword [edi], ecx
mov dword [eax], ecx
mov dword [esp + 0x1a0], 0
mov dword [esp + 0x1a4], 0
lea ecx, [0x74924c]
mov dword [esp + 0x1a8], ecx
mov dword [esp + 0x1ac], eax
call fcn.00439380
add esp, 0x180
ret
lea eax, [0x692a40]
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 4
call fcn.004507f0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x17c]
mov dword [ecx + 0xc], 4
mov dword [ecx + 0x10], 4
mov edx, dword [0x9aef70]
test edx, edx
je 0x64d755
call fcn.0046c8a0
mov dword [edi], eax
mov ebx, dword [ecx + 8]
mov dword [edi + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [esp + 0x118]
mov ebx, 6
mov dword [esp + 0x74], ebx
mov edx, dword [esp + 0x84]
cmp ebx, edx
jg 0x64d784
ja 0x64db44
mov ecx, dword [esp + 0x190]
test ecx, ecx
jmp 0x64d7b1
lea eax, [0x692a40]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ebx
call fcn.004507f0
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0x190]
test eax, eax
mov ecx, eax
mov ebx, dword [esp + 0x74]
mov eax, edx
mov edx, ebx
mov dword [esp + 0x84], edx
mov dword [esp + 0x118], eax
je 0x64d7ee
mov eax, dword [ecx + 4]
lea ecx, [0x9652c0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040ac30
mov eax, dword [esp + 8]
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0x74]
mov ecx, eax
mov eax, dword [esp + 0x118]
mov dword [esp], ecx
mov ecx, dword [esp + 0x194]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ebx
call fcn.0049a5a0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x1a8], eax
mov dword [esp + 0x1ac], ecx
test eax, eax
jne 0x64d93b
mov ebx, dword [esp + 0x17c]
mov ebp, dword [ebx + 8]
test ebp, ebp
je 0x64d883
mov edx, dword [ebx + 0xc]
mov ecx, dword [esp + 0x74]
cmp ecx, edx
jge 0x64d84c
mov eax, ecx
jmp 0x64d850
mov eax, ecx
mov ecx, edx
mov edx, dword [esp + 0x118]
cmp edx, ebp
je 0x64d8eb
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.0046d220
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0x118]
mov ebx, dword [esp + 0x17c]
jmp 0x64d8eb
mov eax, dword [esp + 0x74]
lea ecx, [eax - 2]
mov edx, dword [esp + 0x84]
cmp edx, ecx
jb 0x64db3f
mov dword [esp], 0
mov eax, dword [esp + 0x118]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00454610
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x17c]
mov dword [edx + 4], eax
mov eax, dword [0x9aef70]
test eax, eax
je 0x64d8dc
call fcn.0046c8a0
mov dword [edi], ecx
mov ebx, dword [edx]
mov dword [edi + 4], ebx
mov dword [edx], ecx
mov eax, dword [esp + 0x74]
mov ebx, edx
mov edx, dword [esp + 0x118]
lea ebp, [eax - 2]
cmp eax, ebp
jbe 0x64db36
movzx eax, word [eax + edx - 2]
rol ax, 8
movzx eax, ax
mov dword [ebx + 0x14], eax
lea eax, [0x749c98]
mov dword [esp + 0x1a0], eax
mov dword [esp + 0x1a4], ebx
mov dword [esp + 0x1a8], 0
mov dword [esp + 0x1ac], 0
call fcn.00439380
add esp, 0x180
ret
call fcn.00439380
add esp, 0x180
ret
nop
lea eax, [0x69de40]
mov dword [esp], eax
call fcn.0040d2a0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x17
lea ecx, [0x6d741b]
mov dword [eax], ecx
mov dword [esp + 0x1a0], 0
mov dword [esp + 0x1a4], 0
lea ecx, [0x74924c]
mov dword [esp + 0x1a8], ecx
mov dword [esp + 0x1ac], eax
call fcn.00439380
add esp, 0x180
ret
mov dword [esp], ebp
call fcn.0064e2e0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x6d2d77]
mov dword [esp + 4], edx
mov dword [esp + 8], 0xe
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.00454370
mov eax, dword [esp + 0x18]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0xdc], ecx
lea edx, [0x69de40]
mov dword [esp], edx
call fcn.0040d2a0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x64]
mov dword [eax + 4], ecx
mov ecx, dword [0x9aef70]
test ecx, ecx
jne 0x64da14
mov ecx, dword [esp + 0xdc]
jmp 0x64da22
call fcn.0046c890
mov ecx, dword [esp + 0xdc]
mov dword [edi], ecx
mov dword [eax], ecx
mov dword [esp + 0x1a0], 0
mov dword [esp + 0x1a4], 0
lea ecx, [0x74924c]
mov dword [esp + 0x1a8], ecx
mov dword [esp + 0x1ac], eax
call fcn.00439380
add esp, 0x180
ret
xchg ebp, ebx
movzx eax, bl
xchg ebp, ebx
mov ecx, eax
sar eax, 0x1f
nop
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0xa
call fcn.00485330
mov dword [esp], 0
lea eax, [0x6da2c8]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x1c
call fcn.00454370
mov eax, dword [esp + 0x18]
mov dword [esp + 0x68], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0xe0], ecx
lea edx, [0x69de40]
mov dword [esp], edx
call fcn.0040d2a0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x68]
mov dword [eax + 4], ecx
mov ecx, dword [0x9aef70]
test ecx, ecx
jne 0x64dad8
mov ecx, dword [esp + 0xe0]
jmp 0x64dae6
call fcn.0046c890
mov ecx, dword [esp + 0xe0]
mov dword [edi], ecx
mov dword [eax], ecx
mov dword [esp + 0x1a0], 0
mov dword [esp + 0x1a4], 0
lea ecx, [0x74924c]
mov dword [esp + 0x1a8], ecx
mov dword [esp + 0x1ac], eax
call fcn.00439380
add esp, 0x180
ret
call fcn.00439380
add esp, 0x180
ret
call fcn.00439380
add esp, 0x180
ret
mov ecx, eax
mov eax, ebp
call fcn.0046c910
call fcn.0046c950
mov ecx, ebx
call fcn.0046c950
mov eax, 3
mov ecx, eax
call fcn.0046c910
mov eax, 2
mov ecx, eax
call fcn.0046c910
mov eax, 1
mov ecx, eax
call fcn.0046c910
xor eax, eax
mov ecx, eax
call fcn.0046c910
mov ecx, 4
call fcn.0046c950
test eax, eax
je 0x64dc6e
mov dword [esp + 0x5c], ecx
mov dword [esp + 0xd4], eax
mov edx, dword [esp + 0x84]
cmp edx, 4
jb 0x64dbaa
mov ebp, dword [esp + 0x118]
jmp 0x64dbec
mov eax, dword [esp + 0x118]
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x692a40]
mov dword [esp + 0x10], eax
call fcn.004508b0
mov ebp, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0xd4]
mov edx, ecx
mov ecx, dword [esp + 0x5c]
mov byte [ebp + 3], 1
lea ebx, [ecx + 4]
cmp edx, ebx
jae 0x64dc2c
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
lea eax, [0x692a40]
mov dword [esp + 0x10], eax
call fcn.004508b0
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x118], ebp
mov dword [esp + 0x84], edx
mov dword [esp + 0x80], ebx
lea esi, [ebp + 4]
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0046d220
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x118]
jmp 0x64d377
cmp ebx, 4
jne 0x64dce0
mov eax, dword [edx]
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov ecx, dword [0x965c44]
cmp ecx, 0x10
jl 0x64dca5
mov ecx, 0x10
mov edx, dword [0x965c40]
lea ebx, [esp + 0x38]
cmp edx, ebx
je 0x64dcd1
mov dword [esp + 0x8c], eax
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.0046d220
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x44], eax
lea edx, [esp + 0x38]
mov ebx, 0x10
jmp 0x64dce9
cmp ebx, 0x10
je 0x64dce9
xor edx, edx
xor ebx, ebx
test edx, edx
je 0x64ddd5
mov dword [esp + 0x58], ebx
mov dword [esp + 0xd0], edx
mov eax, dword [esp + 0x84]
cmp eax, 4
jb 0x64dd11
mov ebp, dword [esp + 0x118]
jmp 0x64dd53
mov ecx, dword [esp + 0x118]
mov dword [esp], ecx
mov dword [esp + 4], 4
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x692a40]
mov dword [esp + 0x10], eax
call fcn.004508b0
mov ebp, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0xd0]
mov ebx, dword [esp + 0x58]
mov eax, ecx
mov byte [ebp + 3], 4
lea ecx, [ebx + 4]
cmp eax, ecx
jae 0x64dd93
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
lea eax, [0x692a40]
mov dword [esp + 0x10], eax
call fcn.004508b0
mov ebp, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0xd0]
mov ebx, dword [esp + 0x58]
mov dword [esp + 0x84], eax
mov dword [esp + 0x80], ecx
mov dword [esp + 0x118], ebp
lea esi, [ebp + 4]
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.0046d220
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x118]
jmp 0x64d377
nop
lea eax, [0x69de40]
mov dword [esp], eax
call fcn.0040d2a0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x14
lea ecx, [0x6d5aa5]
mov dword [eax], ecx
mov dword [esp + 0x1a0], 0
mov dword [esp + 0x1a4], 0
lea ecx, [0x74924c]
mov dword [esp + 0x1a8], ecx
mov dword [esp + 0x1ac], eax
call fcn.00439380
add esp, 0x180
ret
mov edx, eax
mov ebx, ecx
xor eax, eax
xor ecx, ecx
jmp 0x64db82
inc edx
cmp edx, 0xa
jge 0x64de4a
movzx ebx, byte [eax + edx]
test bl, bl
je 0x64de3a
jmp 0x64de2d
cmp byte [eax + 0xa], 0xff
jne 0x64de2d
cmp byte [eax + 0xb], 0xff
jne 0x64de2d
lea ebp, [eax + 0xc]
mov edx, eax
mov ebx, ecx
mov eax, ebp
mov ecx, 4
jmp 0x64db82
mov eax, 1
mov ecx, eax
call fcn.0046c910
xor eax, eax
mov ecx, eax
call fcn.0046c910
mov ecx, 2
call fcn.0046c950
mov byte [ecx + eax - 1], bl
inc edi
mov ebx, dword [esp + 0x184]
mov dword [esp + 0x80], ecx
mov ecx, dword [esp + 0x78]
cmp edi, ebp
jge 0x64df06
mov ecx, dword [esp + 0x80]
inc ecx
mov ebx, dword [esi + edi*4]
cmp edx, ecx
jae 0x64de88
mov dword [esp + 0x88], edi
mov dword [esp + 0x7c], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x692a40]
mov dword [esp + 0x10], eax
call fcn.004508b0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x98]
mov esi, dword [esp + 0x120]
mov edi, dword [esp + 0x88]
jmp 0x64de88
mov ebp, dword [esp + 0x80]
jmp 0x64ce2b
call fcn.0046b490
jmp fcn.0064c860