Function at 0x64ba40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x8c
push ebx
mov ebx, dword [esp + 0x94]
push esi
push edi
xor edi, edi
mov dword [esp + 0x14], 0
mov esi, dword [ebx + 8]
mov dword [esp + 0x18], esi
mov dword [esp + 0x10], 0
test esi, esi
jne 0x64ba79
pop edi
pop esi
xor eax, eax
pop ebx
add esp, 0x8c
ret
push ebp
mov ebp, dword [esp + 0xa4]
mov edx, 0x65
test ebp, ebp
je 0x64ba8e
movzx edx, byte [ebp]
lea eax, [edx - 0x13]
mov dword [esp + 0x10], edx
cmp eax, 0x88
ja case.0x64baa7.21
movzx eax, byte [eax + 0x64c844]
jmp dword [eax*4 + 0x64c7d4]
movsx eax, word [ebp + 0x22]
mov edx, dword [ebp + 0x28]
lea ecx, [eax + eax*2]
cmp byte [edx], 0
mov eax, dword [edx + 0x1c]
lea eax, [eax + ecx*8]
jne 0x64bad1
mov eax, dword [eax + 0x10]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x8c
ret
cmp byte [edx + 1], 0
je case.0x64baa7.145
mov ebx, dword [esp + 0xa8]
push ebx
push dword [eax + 0xc]
push dword [edx + 8]
push 0x60
push esi
call fcn.0066bc10
add esp, 0x14
mov eax, ebx
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x8c
ret
mov ecx, dword [ebp + 0x1c]
test ecx, ecx
jns 0x64bb1d
mov ecx, dword [ebx + 0x38]
test ecx, ecx
jns 0x64bb1c
movsx eax, word [ebp + 0x20]
pop ebp
pop edi
pop esi
sub eax, ecx
pop ebx
add esp, 0x8c
ret
dec ecx
movzx eax, byte [ebp + 0x26]
push eax
push dword [esp + 0xac]
movsx eax, word [ebp + 0x20]
push ecx
push eax
push dword [ebp + 0x2c]
push ebx
call fcn.0064a710
add esp, 0x18
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x8c
ret
mov esi, dword [esp + 0xa8]
push esi
push 0
push ebp
push ebx
call fcn.00611830
add esp, 0x10
mov eax, esi
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x8c
ret
mov ebx, dword [esp + 0xa8]
push ebx
push 0
push dword [ebp + 8]
push esi
call fcn.006119d0
add esp, 0x10
mov eax, ebx
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x8c
ret
push dword [ebp + 8]
mov ebx, dword [esp + 0xac]
push ebx
push esi
call fcn.00673b40
add esp, 0xc
mov eax, ebx
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x8c
ret
mov ebx, dword [esp + 0xa8]
push ebx
push 0
push 0x46
push esi
call fcn.0066bba0
add esp, 0x10
mov eax, ebx
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x8c
ret
mov esi, dword [ebp + 8]
add esi, 2
push esi
call fcn.00667910
mov ebp, dword [esp + 0x20]
lea edi, [eax - 1]
push edi
push esi
push dword [ebp]
call fcn.00657a60
mov ebx, dword [esp + 0xb8]
push 0xfffffffffffffff9
push eax
mov eax, edi
cdq
push 0
sub eax, edx
push ebx
sar eax, 1
push eax
push 0x48
push ebp
call fcn.0066bc70
add esp, 0x2c
mov eax, ebx
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x8c
ret
mov edi, dword [esp + 0xa8]
movsx eax, word [ebp + 0x20]
push edi
push eax
push 0x49
push esi
call fcn.0066bba0
mov eax, dword [ebp + 8]
add esp, 0x10
cmp byte [eax + 1], 0
je 0x64c7c5
movsx eax, word [ebp + 0x20]
mov esi, dword [ebx + 0x1a4]
push eax
push esi
call fcn.0066a500
push 0xffffffffffffffff
push eax
push dword [esp + 0x2c]
mov dword [esi], 0
call fcn.0066bf60
add esp, 0x14
mov eax, edi
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x8c
ret
mov eax, dword [ebp + 0x1c]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x8c
ret
mov esi, dword [esp + 0xa8]
push esi
push dword [ebp + 0xc]
push ebx
call fcn.0064ba40
mov edi, eax
add esp, 0xc
cmp edi, esi
je 0x64bca9
push esi
push edi
push 0x4c
push dword [esp + 0x28]
call fcn.0066bba0
add esp, 0x10
mov edi, esi
push 0
push dword [ebp + 8]
call fcn.0063f120
movsx eax, al
push eax
push esi
push 0x52
push dword [esp + 0x30]
call fcn.0066bba0
push 1
push edi
push ebx
call fcn.00649f80
add esp, 0x24
mov eax, edi
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x8c
ret
xor eax, eax
mov edi, pe_nt_image_headers32
cmp edx, 0x2d
sete al
lea edx, [eax + 0x34]
mov dword [esp + 0x10], edx
mov esi, dword [ebp + 0xc]
push esi
mov dword [esp + 0x28], esi
call fcn.0064d8f0
add esp, 4
test eax, eax
je 0x64bd25
push edi
mov edi, dword [esp + 0xac]
push edx
push edi
push ebp
push ebx
call fcn.006120b0
add esp, 0x14
mov eax, edi
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x8c
ret
lea eax, [esp + 0x18]
push eax
push esi
push ebx
call fcn.0064c8d0
mov esi, eax
lea eax, [esp + 0x20]
push eax
push dword [ebp + 0x10]
push ebx
call fcn.0064c8d0
or edi, 0x20
push edi
mov edi, dword [esp + 0xc4]
push edi
push eax
push esi
push dword [esp + 0x38]
push dword [ebp + 0x10]
push dword [esp + 0x54]
push ebx
call fcn.00610c90
add esp, 0x38
jmp 0x64beaf
lea eax, [esp + 0x18]
push eax
push dword [ebp + 0xc]
push ebx
call fcn.0064c8d0
mov esi, eax
lea eax, [esp + 0x20]
push eax
push dword [ebp + 0x10]
push ebx
call fcn.0064c8d0
mov edi, dword [esp + 0xc0]
push edi
push esi
push eax
push dword [esp + 0x34]
push dword [esp + 0x44]
call fcn.0066bc10
add esp, 0x2c
jmp 0x64beaf
mov eax, dword [ebp + 0xc]
mov cl, byte [eax]
cmp cl, 0x86
jne 0x64bdd0
mov ebp, dword [esp + 0xa8]
push ebp
push 1
push eax
push ebx
call fcn.00611830
add esp, 0x10
mov eax, ebp
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x8c
ret
cmp cl, 0x84
jne 0x64bdf8
mov ebx, dword [esp + 0xa8]
push ebx
push 1
push dword [eax + 8]
push esi
call fcn.006119d0
add esp, 0x10
mov eax, ebx
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x8c
ret
lea eax, [esp + 0x18]
mov byte [esp + 0x3c], 0x86
push eax
lea eax, [esp + 0x40]
mov dword [esp + 0x44], 0x4400
push eax
push ebx
mov dword [esp + 0x50], edi
call fcn.0064c8d0
mov esi, eax
lea eax, [esp + 0x20]
push eax
push dword [ebp + 0xc]
push ebx
call fcn.0064c8d0
mov edi, dword [esp + 0xc0]
push edi
push esi
push eax
push 0x59
push dword [esp + 0x44]
call fcn.0066bc10
add esp, 0x2c
jmp 0x64beaf
lea eax, [esp + 0x18]
push eax
push dword [ebp + 0xc]
push ebx
call fcn.0064c8d0
mov edi, dword [esp + 0xb4]
push edi
push eax
push dword [esp + 0x24]
push esi
call fcn.0066bba0
add esp, 0x1c
jmp 0x64beaf
mov edi, dword [esp + 0xa8]
push edi
push 1
push 0x43
push esi
call fcn.0066bba0
lea eax, [esp + 0x28]
push eax
push dword [ebp + 0xc]
push ebx
call fcn.0064c8d0
push eax
push dword [esp + 0x30]
push esi
call fcn.0066bb40
mov ebp, dword [esp + 0x44]
mov esi, eax
push edi
push 0
push 0x43
push ebp
call fcn.0066bba0
push esi
push ebp
call fcn.006736b0
add esp, 0x40
mov edx, dword [esp + 0x18]
test edx, edx
je 0x64beee
mov al, byte [ebx + 0x13]
mov byte [esp + 0x23], al
cmp al, 8
jae 0x64beee
movzx esi, byte [ebx + 0x19]
lea eax, [ebx + 0x94]
xor ecx, ecx
test esi, esi
jle 0x64bedf
cmp dword [eax + 0xc], edx
je 0x64bf49
inc ecx
add eax, 0x14
cmp ecx, esi
jl 0x64bed2
movzx eax, byte [esp + 0x23]
mov dword [ebx + eax*4 + 0x15c], edx
inc byte [ebx + 0x13]
mov edx, dword [esp + 0x14]
test edx, edx
je 0x64c7c5
mov al, byte [ebx + 0x13]
mov byte [esp + 0x23], al
cmp al, 8
jae 0x64c7c5
movzx esi, byte [ebx + 0x19]
lea eax, [ebx + 0x94]
xor ecx, ecx
test esi, esi
jle 0x64bf2d
lea esp, [esp]
cmp dword [eax + 0xc], edx
je 0x64bf4f
inc ecx
add eax, 0x14
cmp ecx, esi
jl 0x64bf20
movzx eax, byte [esp + 0x23]
pop ebp
mov dword [ebx + eax*4 + 0x15c], edx
mov eax, edi
inc byte [ebx + 0x13]
pop edi
pop esi
pop ebx
add esp, 0x8c
ret
mov byte [eax + 6], 1
jmp 0x64beee
pop ebp
mov byte [eax + 6], 1
mov eax, edi
pop edi
pop esi
pop ebx
add esp, 0x8c
ret
mov eax, dword [ebp + 0x28]
test eax, eax
jne 0x64bf8c
push dword [ebp + 8]
push str.misuse_of_aggregate:__s__
push ebx
call fcn.00649670
mov edi, dword [esp + 0xb4]
add esp, 0xc
mov eax, edi
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x8c
ret
movsx ecx, word [ebp + 0x22]
mov eax, dword [eax + 0x28]
add ecx, ecx
pop ebp
pop edi
pop esi
mov eax, dword [eax + ecx*8 + 8]
pop ebx
add esp, 0x8c
ret
cmp byte [ebx + 0x17], 0
mov edx, dword [ebx]
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], edx
mov dword [esp + 0x24], edi
mov al, byte [edx + 0x46]
mov byte [esp + 0x28], al
je 0x64bfe7
push ebp
call fcn.0064d740
add esp, 4
test eax, eax
je 0x64bfe3
push 0xffffffffffffffff
push ebp
push ebx
call fcn.0064a3b0
add esp, 0xc
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x8c
ret
mov edx, dword [esp + 0x30]
test dword [ebp + 4], 0x4000
je 0x64c0bf
mov dword [esp + 0x18], edi
xor eax, eax
mov ecx, dword [ebp + 8]
push 0
push dword [esp + 0x2c]
mov dword [esp + 0x18], eax
push eax
push ecx
push edx
mov dword [esp + 0x48], ecx
call fcn.0064e200
mov edi, eax
add esp, 0x14
mov dword [esp + 0x28], edi
test edi, edi
je 0x64c2be
cmp dword [edi + 0x10], 0
jne 0x64c2be
movzx eax, word [edi + 2]
test eax, 0x200
je 0x64c0d5
push esi
call fcn.00673b60
mov ebp, dword [esp + 0x1c]
mov edi, dword [esp + 0xac]
push edi
mov dword [esp + 0x30], eax
push dword [ebp + 4]
push ebx
call fcn.0064a2d0
mov eax, dword [esp + 0x20]
add esp, 0x10
cmp eax, 1
jle 0x64c0a5
add ebp, 0x1c
dec eax
mov dword [esp + 0x24], eax
push dword [esp + 0x28]
push edi
push 0x33
push esi
call fcn.0066bba0
push 1
push edi
push ebx
call fcn.00649f80
inc dword [ebx + 0x3c]
push edi
push dword [ebp]
push ebx
call fcn.0064a2d0
push ebx
call fcn.00649ee0
add esp, 0x2c
lea ebp, [ebp + 0x18]
dec dword [esp + 0x24]
jne 0x64c070
push dword [esp + 0x28]
push esi
call fcn.00675920
add esp, 8
mov eax, edi
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x8c
ret
mov ecx, dword [ebp + 0x14]
mov dword [esp + 0x18], ecx
test ecx, ecx
je 0x64bff8
mov eax, dword [ecx]
jmp 0x64bffa
test eax, 0x400
je 0x64c0fe
mov ebp, dword [esp + 0x18]
push dword [esp + 0xa8]
push dword [ebp + 4]
push ebx
call fcn.0064ba40
add esp, 0xc
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x8c
ret
mov ecx, dword [esp + 0x10]
xor eax, eax
mov dword [esp + 0x14], eax
test ecx, ecx
jle 0x64c180
mov esi, dword [esp + 0x18]
lea edi, [eax + 1]
mov ebp, dword [esp + 0x28]
add esi, 4
lea ebx, [ebx]
cmp eax, 0x20
jge 0x64c13f
push dword [esi]
call fcn.0064d6f0
mov ecx, dword [esp + 0x14]
add esp, 4
test eax, eax
mov eax, dword [esp + 0x14]
je 0x64c13f
or dword [esp + 0x2c], edi
test byte [ebp + 2], 0x20
je 0x64c163
cmp dword [esp + 0x24], 0
jne 0x64c163
push dword [esi]
push ebx
call fcn.0064c970
mov ecx, dword [esp + 0x18]
add esp, 8
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x14]
inc eax
rol edi, 1
add esi, 0x18
mov dword [esp + 0x14], eax
cmp eax, ecx
jl 0x64c120
mov ebp, dword [esp + 0xa4]
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x28]
mov edx, dword [esp + 0x18]
test edx, edx
je 0x64c1fc
cmp dword [esp + 0x2c], 0
je 0x64c1a8
mov eax, dword [ebx + 0x2c]
lea esi, [eax + 1]
add eax, ecx
mov dword [esp + 0x14], esi
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov dword [ebx + 0x2c], eax
jmp 0x64c1bc
push ecx
push ebx
call fcn.00656df0
mov edx, dword [esp + 0x20]
mov ecx, eax
add esp, 8
mov dword [esp + 0x14], ecx
test byte [edi + 2], 0xc0
je 0x64c1de
mov eax, dword [edx + 4]
mov al, byte [eax]
cmp al, 0x91
je 0x64c1cf
cmp al, 0x93
jne 0x64c1de
mov esi, dword [edx + 4]
mov al, byte [edi + 2]
and al, 0xc0
mov byte [esi + 0x26], al
mov esi, dword [esp + 0x1c]
inc dword [ebx + 0x3c]
push 3
push 0
push ecx
push edx
push ebx
call fcn.0064a4c0
push ebx
call fcn.00649ee0
mov edx, dword [esp + 0x30]
add esp, 0x18
jmp 0x64c204
mov dword [esp + 0x14], 0
mov eax, dword [esp + 0x10]
cmp eax, 2
jl 0x64c229
test byte [ebp + 4], 0x80
je 0x64c229
push dword [edx + 0x1c]
push eax
push edi
mov edi, dword [esp + 0x3c]
push edi
call fcn.00677720
add esp, 0x10
mov ebp, eax
jmp 0x64c23a
test eax, eax
jle 0x64c232
push dword [edx + 4]
jmp 0x64c216
mov ebp, dword [esp + 0x28]
mov edi, dword [esp + 0x30]
test byte [ebp + 2], 0x20
je 0x64c25f
mov eax, dword [esp + 0x24]
test eax, eax
jne 0x64c24b
mov eax, dword [edi + 8]
push 0xfffffffffffffffe
push eax
push 0
push 0
push 0
push 0x4f
push esi
call fcn.0066bc70
add esp, 0x1c
mov eax, dword [ebx + 0x38]
mov edi, dword [esp + 0x2c]
neg eax
push 0xfffffffffffffff8
push ebp
mov ebp, dword [esp + 0xb0]
sbb eax, eax
push ebp
push dword [esp + 0x20]
add eax, 0xa2
push edi
push eax
push esi
call fcn.0066bc70
mov eax, dword [esp + 0x2c]
movzx eax, al
push eax
push esi
call fcn.0066c160
mov eax, dword [esp + 0x34]
add esp, 0x24
test eax, eax
je 0x64c2b1
test edi, edi
jne 0x64c2b1
push eax
push dword [esp + 0x18]
push ebx
call fcn.00662180
add esp, 0xc
mov eax, ebp
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x8c
ret
push dword [esp + 0x34]
push str.unknown_function:__s__
push ebx
call fcn.00649670
mov edi, dword [esp + 0xb4]
add esp, 0xc
mov eax, edi
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x8c
ret
cmp edx, 0x77
jne 0x64c31a
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
mov eax, dword [eax]
cmp eax, 1
je 0x64c31a
push 1
push eax
push str.sub_select_returns__d_columns___expected__d
push ebx
call fcn.00649670
mov edi, dword [esp + 0xb8]
add esp, 0x10
mov eax, edi
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x8c
ret
push 0
push 0
push ebp
push ebx
call fcn.00645590
add esp, 0x10
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x8c
ret
mov eax, dword [ebp + 0xc]
cmp dword [eax + 0x1c], edi
jne 0x64c34f
push 0
push 0
push eax
push ebx
call fcn.00645590
mov ecx, dword [ebp + 0xc]
add esp, 0x10
mov dword [ecx + 0x1c], eax
mov edx, dword [ebp + 0x1c]
test edx, edx
je 0x64c375
push dword [ebp + 0xc]
call fcn.0064e090
add esp, 4
cmp edx, eax
je 0x64c375
push eax
push edx
push str._d_columns_assigned__d_values
push ebx
call fcn.00649670
add esp, 0x10
mov eax, dword [ebp + 0xc]
movsx ecx, word [ebp + 0x20]
pop ebp
pop edi
add ecx, dword [eax + 0x1c]
pop esi
mov eax, ecx
pop ebx
add esp, 0x8c
ret
push esi
call fcn.00673b60
push dword [esp + 0x20]
mov esi, eax
call fcn.00673b60
push dword [esp + 0xb0]
mov edi, eax
push 0
push 0x46
push dword [esp + 0x30]
call fcn.0066bba0
push edi
push esi
push ebp
push ebx
call fcn.0064a910
mov ebx, dword [esp + 0xd0]
mov ebp, dword [esp + 0x44]
push ebx
push 1
push 0x43
push ebp
call fcn.0066bba0
push esi
push ebp
call fcn.00675920
add esp, 0x40
push 0
push ebx
push 0x50
push ebp
call fcn.0066bba0
push edi
push ebp
call fcn.00675920
add esp, 0x18
mov eax, ebx
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x8c
ret
mov esi, dword [esp + 0xa8]
push 0
push 0
push esi
push ebp
push ebx
call fcn.00617e60
add esp, 0x14
mov eax, esi
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x8c
ret
push dword [esp + 0xa8]
push dword [ebp + 0xc]
push ebx
call fcn.0064ba40
add esp, 0xc
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x8c
ret
mov ebx, dword [ebp + 0x2c]
movsx eax, word [ebp + 0x20]
mov edi, dword [esp + 0xa8]
inc eax
push edi
movsx ecx, word [ebx + 0x2a]
inc ecx
imul ecx, dword [ebp + 0x1c]
add eax, ecx
push eax
push 0x90
push esi
call fcn.0066bba0
movzx eax, word [ebp + 0x20]
add esp, 0x10
test ax, ax
js 0x64c7c5
movsx ecx, ax
mov eax, dword [ebx + 4]
add ecx, ecx
cmp byte [eax + ecx*8 + 0xd], 0x45
jne 0x64c7c5
push edi
push 0x51
push esi
call fcn.0066bb40
add esp, 0xc
mov eax, edi
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x8c
ret
push str.row_value_misused
push ebx
call fcn.00649670
mov edi, dword [esp + 0xb0]
add esp, 8
mov eax, edi
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x8c
ret
push dword [ebp + 0x1c]
push 0x17
push esi
call fcn.0066bb40
push dword [esp + 0xb4]
inc dword [ebx + 0x3c]
mov esi, eax
push dword [ebp + 0xc]
push ebx
call fcn.0064ba40
push ebx
mov edi, eax
call fcn.00649ee0
mov ebx, dword [esp + 0x38]
push esi
push ebx
call fcn.006736b0
push edi
push esi
push ebx
call fcn.0066c090
add esp, 0x30
mov eax, edi
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x8c
ret
cmp dword [ebx + 0x7c], edi
jne 0x64c52f
push str.RAISE___may_only_be_used_within_a_trigger_program
push ebx
call fcn.00649670
add esp, 8
xor eax, eax
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x8c
ret
cmp byte [ebp + 1], 2
jne 0x64c53e
push ebx
call fcn.0065b370
add esp, 4
mov al, byte [ebp + 1]
push 0
cmp al, 4
jne 0x64c56f
push dword [ebp + 8]
push 0
push 4
push 0
push 0x42
push esi
call fcn.0066bc70
mov edi, dword [esp + 0xc4]
add esp, 0x1c
mov eax, edi
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x8c
ret
push 0
push dword [ebp + 8]
movsx eax, al
push eax
push 0x713
push ebx
call fcn.00657790
mov edi, dword [esp + 0xc0]
add esp, 0x18
mov eax, edi
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x8c
ret
mov ecx, dword [ebp + 0x14]
push esi
mov dword [esp + 0x30], edi
mov dword [esp + 0x3c], ecx
lea eax, [ecx + 4]
mov dword [esp + 0x28], eax
mov eax, dword [ecx]
mov dword [esp + 0x14], eax
call fcn.00673b60
mov ecx, dword [ebp + 0xc]
add esp, 4
mov dword [esp + 0x30], eax
mov dword [esp + 0x28], ecx
test ecx, ecx
je 0x64c635
mov esi, dword [esp + 0x28]
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x40]
mov ecx, 0xc
push eax
lea edi, [esp + 0x44]
rep movsd dword es:[edi], dword [esi]
push ebx
call fcn.00617fc0
mov cl, byte [esp + 0x48]
and dword [esp + 0x4c], 0xffffefff
push 0x30
mov dword [esp + 0x68], eax
lea eax, [esp + 0x7c]
push 0
push eax
mov byte [esp + 0x7a], cl
mov byte [esp + 0x54], 0x96
call sub.MSVCRT.dll_memset
mov esi, dword [esp + 0x34]
lea eax, [esp + 0x54]
mov ecx, dword [esp + 0x40]
lea edx, [esp + 0x84]
add esp, 0x18
mov byte [esp + 0x6c], 0x35
mov dword [esp + 0x78], eax
mov dword [esp + 0x2c], edx
jmp 0x64c637
xor edx, edx
mov eax, dword [esp + 0x10]
mov edi, dword [esp + 0xa8]
dec eax
test eax, eax
jle 0x64c774
mov ebp, dword [esp + 0x24]
dec eax
shr eax, 1
inc eax
mov dword [esp + 0x14], eax
inc dword [ebx + 0x3c]
test ecx, ecx
je 0x64c667
mov eax, dword [ebp]
mov dword [esp + 0x7c], eax
jmp 0x64c66e
mov edx, dword [ebp]
mov dword [esp + 0x2c], edx
mov ebp, dword [esi + 0xc]
mov ecx, dword [ebp + 0x44]
mov dword [esp + 0x34], ecx
lea eax, [ecx + 1]
mov dword [ebp + 0x44], eax
lea eax, [ecx - 1]
test ecx, eax
jne 0x64c6a8
push 0
lea eax, [ecx*8 + 4]
push eax
push dword [ebp + 0x48]
push dword [ebp]
call fcn.00647a80
mov ecx, dword [esp + 0x44]
add esp, 0x10
mov edx, dword [esp + 0x2c]
mov dword [ebp + 0x48], eax
mov eax, dword [ebp + 0x48]
test eax, eax
je 0x64c6b6
mov dword [eax + ecx*4], 0xffffffff
or eax, 0xffffffff
sub eax, ecx
push 0x10
push eax
push edx
push ebx
mov dword [esp + 0x44], eax
call fcn.0064cff0
mov ebp, dword [esp + 0x34]
push edi
push dword [ebp + 0x18]
push ebx
call fcn.0064a2d0
mov eax, dword [esi + 0xc]
add esp, 0x1c
mov ecx, dword [esi + 0x88]
cmp dword [eax + 0x30], ecx
jg 0x64c6fd
push 0
push dword [esp + 0x34]
push 0
push 0xd
push esi
call fcn.0062e2b0
add esp, 0x14
jmp 0x64c733
mov edx, dword [esp + 0x30]
lea eax, [ecx + 1]
mov dword [esi + 0x88], eax
lea ecx, [ecx + ecx*4]
mov eax, dword [esi + 0x58]
mov dword [eax + ecx*4], 0xd
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
push ebx
call fcn.00649ee0
mov eax, dword [esi + 0xc]
add esp, 4
mov ecx, dword [eax + 0x48]
test ecx, ecx
je 0x64c75b
mov eax, dword [esp + 0x34]
lea eax, [eax*4 + 4]
sub ecx, eax
mov eax, dword [esi + 0x88]
mov dword [ecx], eax
mov edx, dword [esp + 0x2c]
add ebp, 0x30
dec dword [esp + 0x14]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x24], ebp
jne 0x64c657
mov eax, dword [esp + 0x10]
push edi
test al, 1
je 0x64c799
mov ecx, dword [esp + 0x3c]
lea eax, [eax + eax*2]
inc dword [ebx + 0x3c]
push dword [ecx + eax*8 - 0x14]
push ebx
call fcn.0064a2d0
push ebx
call fcn.00649ee0
jmp 0x64c7a3
push 0
push 0x46
push esi
call fcn.0066bba0
mov eax, dword [esi + 0xc]
add esp, 0x10
mov ecx, dword [eax + 0x48]
test ecx, ecx
je 0x64c7c5
mov eax, dword [esp + 0x30]
lea eax, [eax*4 + 4]
sub ecx, eax
mov eax, dword [esi + 0x88]
mov dword [ecx], eax
pop ebp
mov eax, edi
pop edi
pop esi
pop ebx
add esp, 0x8c
ret