Function at 0x6446e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xa4]
cmp eax, dword [ecx + 8]
jbe 0x6454b9
sub esp, 0x124
lea eax, [0x7ef880]
mov dword [esp], eax
mov ecx, dword [esp + 0x128]
mov dword [esp + 4], ecx
lea edx, [0x806bfe]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0xa
call fcn.00410c40
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 4]
test eax, eax
je 0x64544f
mov dword [esp + 0x60], eax
lea ecx, [0x7a9c80]
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], eax
call fcn.0044a490
mov eax, dword [esp + 0xc]
mov dword [esp + 0xa8], eax
lea ecx, [0x7ef880]
mov dword [esp], ecx
mov ecx, dword [esp + 0x128]
mov dword [esp + 4], ecx
lea ecx, [0x806bfe]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0xa
call fcn.00410c40
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
mov dword [esp + 0xa4], ecx
mov eax, dword [eax + 4]
mov dword [esp + 0x70], eax
mov edx, dword [esp + 0xa8]
mov ebx, dword [esp + 0x60]
xor ebp, ebp
xor esi, esi
jmp 0x64488f
dec edi
mov eax, edi
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edi, 1
add ecx, edi
mov edi, eax
mov eax, dword [esp + 0x70]
test edi, edi
jle 0x6447eb
movzx eax, byte [ecx]
cmp al, 0x20
je 0x6447b9
cmp al, 9
je 0x6447b9
cmp al, 0xa
je 0x6447b9
cmp al, 0xd
je 0x6447b9
mov dword [esp + 0x60], ebx
mov dword [esp + 0x5c], ebp
mov dword [esp + 0x90], edx
mov dword [esp + 0x6c], esi
jmp 0x644801
dec edi
test edi, edi
jle 0x64481e
movzx eax, byte [ecx + edi - 1]
cmp al, 0x20
je 0x644800
cmp al, 9
je 0x644800
cmp al, 0xa
je 0x644800
cmp al, 0xd
je 0x644800
nop
mov dword [esp], ecx
mov dword [esp + 4], edi
lea eax, [0x8016c2]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0xffffffff
call fcn.004ebd30
mov ecx, dword [esp + 0x1c]
mov edi, dword [esp + 0x18]
cmp ecx, 1
jne 0x6448b0
mov edx, dword [edi + 4]
test edx, edx
jne 0x6448b0
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x90]
mov edi, dword [esp + 0x6c]
lea esi, [edi + 1]
mov edi, dword [esp + 0x70]
mov ebx, dword [esp + 0xa4]
mov ebp, ecx
mov ebx, eax
mov eax, edi
mov ecx, dword [esp + 0xa4]
cmp eax, esi
jle 0x645433
lea edi, [ecx + esi*8]
mov ecx, dword [edi]
mov dword [esp + 0x84], ecx
mov edi, dword [edi + 4]
mov dword [esp + 0x48], edi
nop
jmp 0x6447d0
test ecx, ecx
jbe 0x6454b1
mov edx, dword [edi]
mov ebx, dword [edi + 4]
jmp 0x6448ce
dec ebx
mov ebp, ebx
neg ebx
sar ebx, 0x1f
and ebx, 1
add edx, ebx
mov ebx, ebp
test ebx, ebx
jle 0x6448f4
movzx ebp, byte [edx]
xchg ebp, eax
cmp al, 0x20
xchg ebp, eax
je 0x6448bf
xchg ebp, eax
cmp al, 9
xchg ebp, eax
je 0x6448bf
xchg ebp, eax
cmp al, 0xa
xchg ebp, eax
je 0x6448bf
xchg ebp, eax
cmp al, 0xd
xchg ebp, eax
je 0x6448bf
jmp 0x6448f4
dec ebx
test ebx, ebx
jle 0x644919
movzx ebp, byte [edx + ebx - 1]
xchg ebp, eax
cmp al, 0x20
xchg ebp, eax
je 0x6448f3
xchg ebp, eax
cmp al, 9
xchg ebp, eax
je 0x6448f3
xchg ebp, eax
cmp al, 0xa
xchg ebp, eax
je 0x6448f3
xchg ebp, eax
cmp al, 0xd
xchg ebp, eax
je 0x6448f3
mov dword [esp + 0x4c], ecx
mov dword [esp + 0xa0], edi
mov dword [edi + 4], ebx
mov ebp, dword [0xaec8c0]
test ebp, ebp
jne 0x645427
mov dword [edi], edx
mov dword [esp], edx
mov dword [esp + 4], ebx
lea eax, [0x8016c4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
call fcn.004ee3f0
mov ecx, dword [esp + 0x10]
test ecx, ecx
jge 0x644971
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x90]
jmp 0x644870
mov ebx, dword [esp + 0xa0]
mov edx, dword [ebx + 4]
mov ebp, dword [ebx]
cmp ecx, edx
ja 0x6454ac
lea eax, [ecx + 1]
cmp eax, edx
ja 0x6454a5
mov dword [esp + 0x44], ecx
mov dword [esp + 0x88], ebp
sub edx, ecx
lea esi, [edx - 1]
mov edi, esi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, eax
add esi, ebp
test ecx, ecx
jne 0x6453ce
xor eax, eax
test al, al
je 0x6453ba
cmp edi, 1
jle 0x6453b6
cmp byte [esi], 0x22
jne 0x6453b2
mov eax, ebx
lea ebx, [edx + esi - 2]
cmp byte [ebx], 0x22
jne 0x6453ab
add edx, 0xfffffffd
mov ebx, edx
neg edx
sar edx, 0x1f
and edx, 1
add esi, edx
xor edx, edx
jmp 0x6449fd
inc edx
mov ebp, dword [esp + 0x88]
cmp ebx, edx
jle 0x64539d
jbe 0x64549c
movzx edi, byte [edx + esi]
lea ebp, [edi - 0x20]
xchg ebp, eax
cmp al, 0x5f
xchg ebp, eax
jae 0x644a2e
xchg edi, eax
cmp al, 0x22
xchg edi, eax
je 0x644a2e
xchg edi, eax
cmp al, 0x3b
xchg edi, eax
je 0x644a2e
xchg edi, eax
cmp al, 0x5c
xchg edi, eax
jne 0x6449f5
xor edx, edx
xor ebx, ebx
xor ebp, ebp
test dl, dl
jne 0x644a4c
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x90]
jmp 0x644870
mov dword [esp + 0x38], ebp
mov dword [esp + 0x74], ebx
lea eax, [0x7e72e0]
mov dword [esp], eax
call fcn.0040c160
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x44]
mov dword [eax + 4], ecx
mov ecx, dword [0xaec8c0]
test ecx, ecx
jne 0x645388
mov edx, dword [esp + 0x88]
mov dword [eax], edx
mov edx, dword [esp + 0x38]
mov dword [eax + 0xc], edx
mov edx, dword [0xaec8c0]
test edx, edx
jne 0x645373
mov edx, dword [esp + 0x74]
mov dword [eax + 8], edx
mov edx, dword [esp + 0x48]
mov dword [eax + 0x4c], edx
mov edx, dword [0xaec8c0]
test edx, edx
jne 0x64535b
mov edx, dword [esp + 0x84]
mov dword [eax + 0x48], edx
mov dword [esp + 0x94], eax
mov edx, dword [esp + 0xa0]
mov ecx, dword [esp + 0x4c]
mov ebx, 1
jmp 0x644b57
dec esi
mov edx, esi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, 1
add ebp, esi
mov esi, edx
mov edx, dword [esp + 0xa0]
test esi, esi
jle 0x644b11
movzx edx, byte [ebp]
cmp dl, 0x20
je 0x644ad8
cmp dl, 9
je 0x644ad8
cmp dl, 0xa
je 0x644ad8
cmp dl, 0xd
je 0x644ad8
jmp 0x644b11
dec esi
test esi, esi
jle 0x644b2e
movzx edx, byte [ebp + esi - 1]
cmp dl, 0x20
je 0x644b10
cmp dl, 9
je 0x644b10
cmp dl, 0xa
je 0x644b10
cmp dl, 0xd
je 0x644b10
mov edx, dword [esp + 0xa0]
lea edx, [edx + ebx*8 + 4]
mov dword [edx], esi
mov edx, dword [0xaec8c0]
test edx, edx
jne 0x6452ce
mov dword [edi], ebp
test esi, esi
jne 0x644b6f
inc ebx
mov edx, dword [esp + 0xa0]
cmp ecx, ebx
jle 0x6452e0
jbe 0x645495
lea edi, [edx + ebx*8]
mov ebp, dword [edi]
mov esi, dword [edi + 4]
jmp 0x644af2
mov dword [esp + 0x9c], edi
mov dword [esp + 0x3c], esi
mov dword [esp + 0x80], ebp
mov dword [esp + 0x50], ebx
mov dword [esp], ebp
mov dword [esp + 4], esi
lea eax, [0x8016c4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
call fcn.004ee3f0
mov ecx, dword [esp + 0x10]
test ecx, ecx
jl 0x6452ba
mov edx, dword [esp + 0x3c]
cmp ecx, edx
ja 0x645490
lea eax, [ecx + 1]
cmp eax, edx
ja 0x645489
sub edx, ecx
dec edx
mov ebx, edx
neg edx
sar edx, 0x1f
and edx, eax
mov eax, dword [esp + 0x80]
add edx, eax
mov dword [esp + 0x34], ebx
mov dword [esp + 0x78], edx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004ed270
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x34]
mov ebx, dword [esp + 0x78]
xor ebp, ebp
jmp 0x644c06
inc ebp
mov ebx, edi
cmp edx, ebp
jle 0x6452aa
jbe 0x645480
movzx esi, byte [ebp + ebx]
mov edi, ebx
lea ebx, [esi - 0x20]
cmp bl, 0x5f
jae 0x644c38
xchg esi, eax
cmp al, 0x22
xchg esi, eax
je 0x644c38
xchg esi, eax
cmp al, 0x3b
xchg esi, eax
je 0x644c38
xchg esi, eax
cmp al, 0x5c
xchg esi, eax
jne 0x644c03
xor edx, edx
xor ebx, ebx
xor ebp, ebp
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x6451de
cmp eax, 6
jg 0x644ddf
cmp eax, 4
jne 0x644d62
cmp dword [ecx], 0x68746170
jne 0x644c96
mov eax, dword [esp + 0x94]
mov dword [eax + 0x14], ebx
mov ebx, dword [0xaec8c0]
test ebx, ebx
jne 0x644c86
mov dword [eax + 0x10], edx
mov ecx, dword [esp + 0x4c]
mov ebx, dword [esp + 0x50]
jmp 0x644b4f
lea edi, [eax + 0x10]
mov ecx, eax
mov eax, edx
call fcn.00466130
mov eax, ecx
jmp 0x644c79
mov eax, dword [esp + 0x94]
mov edx, dword [eax + 0x54]
mov ebx, dword [eax + 0x50]
mov ebp, dword [eax + 0x58]
lea esi, [edx + 1]
mov ecx, edx
mov edx, dword [esp + 0x9c]
mov edi, ebx
mov ebx, dword [edx]
mov edx, dword [edx + 4]
cmp ebp, esi
jb 0x644cf3
lea ebp, [ecx + 1]
mov dword [eax + 0x54], ebp
lea ebp, [edi + ecx*8 + 4]
mov dword [ebp], edx
mov edx, dword [0xaec8c0]
lea edi, [edi + ecx*8]
test edx, edx
jne 0x644ce6
mov dword [edi], ebx
mov ecx, dword [esp + 0x4c]
mov ebx, dword [esp + 0x50]
jmp 0x644b4f
mov ecx, eax
mov eax, ebx
call fcn.00466130
mov eax, ecx
jmp 0x644cd9
mov dword [esp + 0x98], ebx
mov dword [esp + 0x68], edx
lea eax, [0x79f7e0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.0044a600
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x94]
mov dword [ebx + 0x58], edx
mov edx, dword [0xaec8c0]
test edx, edx
jne 0x644d58
mov dword [ebx + 0x50], eax
mov edx, dword [esp + 0x68]
mov ebx, dword [esp + 0x98]
mov edi, eax
mov eax, dword [esp + 0x94]
jmp 0x644cbd
lea edi, [ebx + 0x50]
call fcn.00466130
jmp 0x644d3f
cmp eax, 6
jne 0x644c96
cmp dword [ecx], 0x616d6f64
jne 0x644daf
cmp word [ecx + 4], 0x6e69
jne 0x644daf
mov eax, dword [esp + 0x94]
mov dword [eax + 0x1c], ebx
mov ebx, dword [0xaec8c0]
test ebx, ebx
jne 0x644d9f
mov dword [eax + 0x18], edx
mov ecx, dword [esp + 0x4c]
mov ebx, dword [esp + 0x50]
jmp 0x644b4f
lea edi, [eax + 0x18]
mov ecx, eax
mov eax, edx
call fcn.00466130
mov eax, ecx
jmp 0x644d92
cmp dword [ecx], 0x75636573
jne 0x644c96
cmp word [ecx + 4], 0x6572
jne 0x644c96
mov eax, dword [esp + 0x94]
mov byte [eax + 0x40], 1
mov ecx, dword [esp + 0x4c]
mov ebx, dword [esp + 0x50]
jmp 0x644b4f
cmp eax, 7
jne 0x645100
mov dword [esp + 0x40], ebx
mov dword [esp + 0x7c], edx
cmp dword [ecx], 0x69707865
jne 0x644e06
cmp word [ecx + 4], 0x6572
jne 0x644e06
cmp byte [ecx + 6], 0x73
je 0x644e83
cmp dword [ecx], 0x2d78616d
jne 0x644c96
cmp word [ecx + 4], 0x6761
jne 0x644c96
cmp byte [ecx + 6], 0x65
jne 0x644c96
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.00472bc0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
test ecx, ecx
jne 0x644c96
test eax, eax
je 0x644e63
mov ecx, dword [esp + 0x40]
test ecx, ecx
jbe 0x645479
mov edx, dword [esp + 0x7c]
cmp byte [edx], 0x30
je 0x644c96
test eax, eax
jg 0x644e6a
mov eax, 0xffffffff
mov edx, dword [esp + 0x94]
mov dword [edx + 0x3c], eax
mov eax, edx
mov ecx, dword [esp + 0x4c]
mov ebx, dword [esp + 0x50]
jmp 0x644b4f
mov ecx, dword [esp + 0x94]
mov dword [ecx + 0x38], ebx
mov ebp, dword [0xaec8c0]
test ebp, ebp
jne 0x6450f1
mov dword [ecx + 0x34], edx
lea edi, [esp + 0xfc]
xor eax, eax
call fcn.004663db
lea edi, [esp + 0xe8]
call fcn.004663db
mov ecx, dword [0xac4640]
mov ebp, dword [0xac463c]
lea esi, [0x81245f]
mov dword [esp], esi
mov dword [esp + 4], 0x1d
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], ebp
call fcn.004b69e0
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x58], ecx
lea edi, [esp + 0xe8]
lea esi, [esp + 0x18]
call fcn.004668be
lea edi, [esp + 0xfc]
lea esi, [esp + 0xe8]
call fcn.004668be
lea edi, [esp + 0xd4]
lea esi, [esp + 0xfc]
call fcn.004668be
mov ecx, dword [esp + 0x58]
test ecx, ecx
jne 0x64501c
lea edi, [esp + 0xc0]
lea esi, [esp + 0xd4]
call fcn.004668be
nop
nop
mov ecx, dword [esp + 0xc0]
mov edx, dword [esp + 0xc4]
test edx, 0x80000000
je 0x644fab
shl edx, 1
mov ebx, ecx
shr ecx, 0x1f
or ecx, edx
shl ebx, 1
mov edx, ecx
shl ecx, 1
shr ebx, 0x1f
or ebx, ecx
mov ecx, ebx
add ebx, 0xd7b17f80
mov dword [esp + 0xc8], ebx
shr edx, 0x1f
add ecx, 0xd7b17f80
adc edx, 0xd
mov dword [esp + 0xcc], edx
and dword [esp + 0xc0], 0x3fffffff
mov dword [esp + 0xc4], 0
mov dword [esp + 0xd0], 0
lea edi, [esp + 0xac]
lea esi, [esp + 0xc0]
call fcn.004668be
mov eax, dword [esp + 0x94]
lea edi, [eax + 0x20]
mov ecx, dword [0xaec8c0]
test ecx, ecx
jne 0x644ff6
lea esi, [esp + 0xac]
call fcn.004668be
mov ecx, dword [esp + 0x4c]
mov ebx, dword [esp + 0x50]
jmp 0x644b4f
lea eax, [0x7fdd00]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xac]
mov dword [esp + 8], eax
call fcn.00411e00
mov eax, dword [esp + 0x94]
jmp 0x644fe9
lea edi, [esp + 0x110]
xor eax, eax
call fcn.004663db
lea edi, [esp + 0xe8]
call fcn.004663db
mov ecx, dword [0xac4640]
mov edx, dword [0xac463c]
lea ebx, [0x81247c]
mov dword [esp], ebx
mov dword [esp + 4], 0x1d
mov ebp, dword [esp + 0x7c]
mov dword [esp + 8], ebp
mov ebp, dword [esp + 0x40]
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.004b69e0
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x54], ecx
lea edi, [esp + 0xe8]
lea esi, [esp + 0x18]
call fcn.004668be
lea edi, [esp + 0x110]
lea esi, [esp + 0xe8]
call fcn.004668be
lea edi, [esp + 0xd4]
lea esi, [esp + 0x110]
call fcn.004668be
mov ecx, dword [esp + 0x54]
test ecx, ecx
je 0x644f34
mov ecx, dword [esp + 0x94]
lea edi, [ecx + 0x20]
mov edx, dword [0xaec8c0]
test edx, edx
jne 0x6450da
xor eax, eax
call fcn.004663db
jmp 0x644c96
lea eax, [0x7fdd00]
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.00412000
jmp 0x644c96
lea edi, [ecx + 0x34]
mov eax, edx
call fcn.00466130
jmp 0x644e9e
cmp eax, 8
jne 0x644c96
cmp dword [ecx], 0x70747468
jne 0x645132
cmp dword [ecx + 4], 0x796c6e6f
jne 0x645132
mov eax, dword [esp + 0x94]
mov byte [eax + 0x41], 1
mov ecx, dword [esp + 0x4c]
mov ebx, dword [esp + 0x50]
jmp 0x644b4f
cmp dword [ecx], 0x656d6173
jne 0x644c96
cmp dword [ecx + 4], 0x65746973
jne 0x644c96
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.004ed270
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
cmp eax, 3
jne 0x64519c
cmp word [ecx], 0x616c
jne 0x64518c
cmp byte [ecx + 2], 0x78
jne 0x64518c
mov eax, dword [esp + 0x94]
mov dword [eax + 0x44], 2
mov ecx, dword [esp + 0x4c]
mov ebx, dword [esp + 0x50]
jmp 0x644b4f
mov eax, dword [esp + 0x94]
mov dword [eax + 0x44], 1
jmp 0x64517f
cmp eax, 4
jne 0x6451b9
cmp dword [ecx], 0x656e6f6e
jne 0x64518c
mov eax, dword [esp + 0x94]
mov dword [eax + 0x44], 4
jmp 0x64517f
cmp eax, 6
jne 0x64518c
cmp dword [ecx], 0x69727473
jne 0x64518c
cmp word [ecx + 4], 0x7463
jne 0x64518c
mov eax, dword [esp + 0x94]
mov dword [eax + 0x44], 3
jmp 0x64517f
mov eax, dword [esp + 0x94]
mov edx, dword [eax + 0x54]
mov ebx, dword [eax + 0x50]
mov ebp, dword [eax + 0x58]
lea esi, [edx + 1]
mov ecx, edx
mov edx, dword [esp + 0x9c]
mov edi, ebx
mov ebx, dword [edx]
mov edx, dword [edx + 4]
cmp esi, ebp
ja 0x64523b
lea ebp, [ecx + 1]
mov dword [eax + 0x54], ebp
lea ebp, [edi + ecx*8 + 4]
mov dword [ebp], edx
mov edx, dword [0xaec8c0]
lea edi, [edi + ecx*8]
test edx, edx
jne 0x64522e
mov dword [edi], ebx
mov ecx, dword [esp + 0x4c]
mov ebx, dword [esp + 0x50]
jmp 0x644b4f
mov ecx, eax
mov eax, ebx
call fcn.00466130
mov eax, ecx
jmp 0x645221
mov dword [esp + 0x68], edx
mov dword [esp + 0x98], ebx
lea eax, [0x79f7e0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.0044a600
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x94]
mov dword [ebx + 0x58], edx
mov edx, dword [0xaec8c0]
test edx, edx
jne 0x6452a0
mov dword [ebx + 0x50], eax
mov edx, dword [esp + 0x68]
mov ebx, dword [esp + 0x98]
mov edi, eax
mov eax, dword [esp + 0x94]
jmp 0x645205
lea edi, [ebx + 0x50]
call fcn.00466130
jmp 0x645287
mov edx, ebx
mov ebx, dword [esp + 0x34]
mov ebp, 1
jmp 0x644c3e
mov eax, dword [esp + 0x80]
xor ebx, ebx
xor edx, edx
mov ecx, dword [esp + 0x3c]
jmp 0x644bdb
mov edx, eax
mov eax, ebp
call fcn.00466130
test esi, esi
mov eax, edx
jmp 0x644b4d
mov ecx, dword [esp + 0x5c]
lea edx, [ecx + 1]
mov ebx, dword [esp + 0x60]
cmp ebx, edx
jb 0x64531a
mov ebp, dword [esp + 0x90]
mov esi, dword [0xaec8c0]
lea edi, [ebp + ecx*4]
test esi, esi
jne 0x645313
mov dword [ebp + ecx*4], eax
mov eax, ebx
mov ecx, edx
mov edx, ebp
jmp 0x644870
call fcn.00466130
jmp 0x645308
lea eax, [0x7a9c80]
mov dword [esp], eax
mov ebp, dword [esp + 0x90]
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0044a600
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
lea edx, [eax + 1]
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x5c]
jmp 0x6452f6
lea edi, [eax + 0x48]
mov ecx, eax
mov eax, dword [esp + 0x84]
call fcn.00466130
mov eax, ecx
jmp 0x644abf
lea edi, [eax + 8]
mov ecx, eax
mov eax, dword [esp + 0x74]
call fcn.00466130
mov eax, ecx
jmp 0x644aa0
mov edi, eax
mov eax, dword [esp + 0x88]
call fcn.00466130
mov eax, edi
jmp 0x644a84
mov edx, 1
mov ebp, ebx
mov ebx, esi
jmp 0x644a34
mov ebx, edi
jmp 0x6449f1
mov eax, ebx
jmp 0x6453ab
mov eax, ebx
jmp 0x6453ab
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x90]
jmp 0x644870
mov dword [esp + 0x68], edi
mov dword [esp + 0x8c], esi
mov dword [esp + 0x64], edx
mov dword [esp], ebp
mov dword [esp + 4], ecx
lea eax, [0x848068]
mov dword [esp + 8], eax
mov byte [esp + 0xc], 1
call fcn.004ed630
mov eax, dword [esp + 0x10]
test eax, eax
setl al
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0xa0]
mov ebp, dword [esp + 0x88]
mov esi, dword [esp + 0x8c]
mov edi, dword [esp + 0x68]
jmp 0x6449b9
mov eax, edx
call fcn.00466130
jmp 0x644937
mov dword [esp + 0x12c], edx
mov dword [esp + 0x130], ebp
mov dword [esp + 0x134], ebx
add esp, 0x124
ret
lea eax, [0xaec640]
mov dword [esp + 0x12c], eax
mov dword [esp + 0x130], 0
mov dword [esp + 0x134], 0
add esp, 0x124
ret
xor eax, eax
call fcn.004661b0
mov eax, ebp
mov ecx, edx
call fcn.004661b0
mov ecx, edx
call fcn.00466210
call fcn.004661d0
mov eax, ebx
call fcn.004661b0
mov eax, edx
mov ecx, ebx
call fcn.004661b0
mov ecx, edx
call fcn.00466210
call fcn.004661d0
xor eax, eax
call fcn.004661b0
nop
call fcn.00464bd0
jmp fcn.006446e0