Function at 0x64ea40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x2dc]
cmp eax, dword [ecx + 8]
jbe 0x64fd2f
sub esp, 0x35c
lea edi, [esp + 0x2d0]
xor eax, eax
call fcn.0046361b
mov ecx, dword [esp + 0x360]
jmp 0x64ea81
mov ecx, dword [esp + 0x360]
mov edx, dword [ecx + 0x6c]
test edx, edx
jle 0x64ea91
dec edx
mov dword [ecx + 0x6c], edx
jmp 0x64eb11
mov edx, dword [ecx + 0x2c]
lea edi, [esp + 0x348]
call fcn.0046361b
mov ecx, dword [edx + 0x30]
mov dword [esp], ecx
lea ecx, [esp + 0x348]
mov dword [esp + 4], ecx
call fcn.004054c0
lea edi, [esp + 0x1cc]
lea esi, [esp + 0x348]
call fcn.00463afe
mov ecx, dword [esp + 0x360]
lea edi, [ecx + 0x30]
mov edx, dword [0x9b1930]
test edx, edx
jne 0x64eaeb
lea esi, [esp + 0x1cc]
call fcn.00463afe
jmp 0x64eb08
lea eax, [0x6f8460]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x1cc]
mov dword [esp + 8], eax
call fcn.00410b70
xor eax, eax
mov ecx, dword [esp + 0x360]
mov edx, dword [ecx + 0x6c]
cmp edx, 3
jae 0x64fd22
lea edx, [edx + edx*4]
lea esi, [ecx + edx*4 + 0x30]
lea edi, [esp + 0x1e0]
call fcn.00463afe
lea edi, [esp + 0x2d0]
lea esi, [esp + 0x1e0]
call fcn.00463afe
cmp dword [esp + 0x2d0], 0x12
je 0x64ea7a
lea edi, [esp + 0x2e4]
lea esi, [esp + 0x1e0]
call fcn.00463afe
nop
mov eax, dword [esp + 0x360]
inc dword [eax + 0x6c]
lea edi, [esp + 0x30c]
lea esi, [esp + 0x2e4]
call fcn.00463afe
mov ecx, dword [esp + 0x310]
mov dword [esp + 0x3c], ecx
mov edx, dword [esp + 0x31c]
mov dword [esp + 0x40], edx
lea ebx, [0x702da0]
mov dword [esp], ebx
call fcn.0040b7f0
mov eax, dword [esp + 4]
mov ecx, dword [0x9b1930]
test ecx, ecx
jne 0x64ebc0
mov ecx, dword [esp + 0x360]
mov dword [eax + 8], ecx
jmp 0x64ebda
lea edi, [eax + 8]
mov ecx, eax
mov eax, dword [esp + 0x360]
call fcn.00463350
mov eax, ecx
mov ecx, dword [esp + 0x360]
mov dword [esp + 0x5c], eax
mov dword [eax], 0xe
mov edx, dword [esp + 0x3c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x40]
mov dword [eax + 0xc], edx
mov dword [eax + 0x18], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x14], 0
lea edx, [eax + 0x14]
mov dword [esp + 0x80], edx
jmp 0x64ec1e
mov eax, esi
mov ecx, ebp
mov edx, dword [esp + 0x80]
lea edi, [esp + 0x2a8]
mov ebx, eax
xor eax, eax
call fcn.0046361b
mov ecx, dword [esp + 0x360]
jmp 0x64f18a
lea edi, [esp + 0x2bc]
lea esi, [esp + 0x1b8]
call fcn.00463afe
nop
mov ecx, dword [esp + 0x360]
inc dword [ecx + 0x6c]
lea edi, [esp + 0x1f4]
lea esi, [esp + 0x2bc]
call fcn.00463afe
cmp dword [esp + 0x1f4], 0x15
jne 0x64f26f
nop
mov ebp, dword [esp + 0x360]
mov ecx, edx
mov edx, dword [ebp + 0x6c]
test edx, edx
jle 0x64ec93
dec edx
mov dword [ebp + 0x6c], edx
jmp 0x64ed26
mov ecx, dword [ebp + 0x2c]
mov dword [esp + 0x74], ecx
lea edi, [esp + 0x348]
call fcn.0046361b
mov ecx, dword [esp + 0x74]
mov ecx, dword [ecx + 0x30]
mov dword [esp], ecx
lea ecx, [esp + 0x348]
mov dword [esp + 4], ecx
call fcn.004054c0
lea edi, [esp + 0x190]
lea esi, [esp + 0x348]
call fcn.00463afe
mov ecx, dword [esp + 0x360]
lea edi, [ecx + 0x30]
mov edx, dword [0x9b1930]
test edx, edx
jne 0x64ecf5
lea esi, [esp + 0x190]
call fcn.00463afe
jmp 0x64ed12
lea eax, [0x6f8460]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x190]
mov dword [esp + 8], eax
call fcn.00410b70
xor eax, eax
mov ecx, dword [esp + 0x80]
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x360]
mov edx, dword [ebp + 0x6c]
cmp edx, 3
jae 0x64fd0a
lea edi, [esp + 0x17c]
call fcn.0046361b
mov ecx, dword [ebp + 0x6c]
test ecx, ecx
jle 0x64ed69
lea edx, [ecx - 1]
cmp edx, 3
jae 0x64fcfe
lea ecx, [ecx + ecx*4]
lea esi, [ebp + ecx*4 + 0x1c]
lea edi, [esp + 0x17c]
call fcn.00463afe
jmp 0x64ee0f
mov dword [ebp + 0x6c], 1
mov ecx, dword [ebp + 0x2c]
mov dword [esp + 0x70], ecx
lea edi, [esp + 0x348]
call fcn.0046361b
mov ecx, dword [esp + 0x70]
mov ecx, dword [ecx + 0x30]
mov dword [esp], ecx
lea ecx, [esp + 0x348]
mov dword [esp + 4], ecx
call fcn.004054c0
lea edi, [esp + 0x168]
lea esi, [esp + 0x348]
call fcn.00463afe
mov ecx, dword [esp + 0x360]
lea edi, [ecx + 0x30]
mov edx, dword [0x9b1930]
test edx, edx
jne 0x64edd2
lea esi, [esp + 0x168]
call fcn.00463afe
jmp 0x64edef
lea eax, [0x6f8460]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x168]
mov dword [esp + 8], eax
call fcn.00410b70
lea edi, [esp + 0x17c]
lea esi, [esp + 0x168]
call fcn.00463afe
xor eax, eax
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x360]
lea edi, [esp + 0x208]
lea esi, [esp + 0x17c]
call fcn.00463afe
lea edi, [esp + 0x280]
call fcn.0046361b
jmp 0x64f510
lea edi, [esp + 0x294]
lea esi, [esp + 0x154]
call fcn.00463afe
nop
inc dword [ebp + 0x6c]
lea edi, [esp + 0x334]
lea esi, [esp + 0x294]
call fcn.00463afe
mov ecx, dword [esp + 0x334]
cmp ecx, 6
je 0x64f6fc
cmp ecx, 7
je 0x64f6f9
cmp ecx, 2
jne 0x64f5f1
mov ecx, dword [esp + 0x33c]
cmp dword [esp + 0x340], 1
jne 0x64f5f1
cmp byte [ecx], 0x2c
jne 0x64f5f1
lea edi, [esp + 0x258]
call fcn.0046361b
jmp 0x64fa36
mov eax, dword [esp + 0x1f8]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x1fc]
mov edx, dword [esp + 0x200]
mov dword [esp], ecx
mov dword [esp + 4], edx
lea ecx, [0x71681b]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0xffffffff
call fcn.004dfaf0
mov eax, dword [esp + 0x18]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x24], ecx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x2c], edx
lea ebx, [0x6fbfa0]
mov dword [esp], ebx
call fcn.0040b7f0
mov eax, dword [esp + 4]
mov ecx, dword [0x9b1930]
test ecx, ecx
jne 0x64ef35
mov ecx, dword [esp + 0x360]
mov dword [eax + 8], ecx
jmp 0x64ef4f
lea edi, [eax + 8]
mov ecx, eax
mov eax, dword [esp + 0x360]
call fcn.00463350
mov eax, ecx
mov ecx, dword [esp + 0x360]
mov dword [eax], 0x12
mov edx, dword [esp + 0x34]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x24]
mov dword [eax + 0x10], edx
mov edx, dword [esp + 0x2c]
mov dword [eax + 0x14], edx
mov edx, dword [0x9b1930]
test edx, edx
jne 0x64ef7d
mov edx, dword [esp + 0x4c]
mov dword [eax + 0xc], edx
jmp 0x64ef8d
lea edi, [eax + 0xc]
mov edx, eax
mov eax, dword [esp + 0x4c]
call fcn.00463350
mov eax, edx
mov edx, dword [esp + 0x5c]
mov ebx, dword [edx + 0x18]
lea ebp, [ebx + 1]
mov esi, ecx
mov ecx, dword [edx + 0x14]
mov edi, edx
mov edx, dword [edx + 0x1c]
cmp edx, ebp
jae 0x64f00d
mov dword [esp + 0x54], eax
lea eax, [0x6fd440]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
call fcn.0044baf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x5c]
mov dword [ebx + 0x1c], edx
mov edx, dword [0x9b1930]
test edx, edx
jne 0x64eff0
mov dword [ebx + 0x14], eax
mov edi, dword [esp + 0x80]
jmp 0x64effc
mov edi, dword [esp + 0x80]
call fcn.00463350
mov esi, dword [esp + 0x360]
mov edi, ebx
mov ebx, ecx
mov ecx, eax
mov eax, dword [esp + 0x54]
lea edx, [ebx + 1]
mov dword [edi + 0x18], edx
mov edx, dword [0x9b1930]
lea ebp, [ecx + ebx*4]
test edx, edx
jne 0x64f025
mov dword [ecx + ebx*4], eax
jmp 0x64f030
mov ecx, edi
mov edi, ebp
call fcn.00463350
mov edi, ecx
mov ecx, dword [esi + 0x74]
mov dword [esp + 0x48], ecx
lea edx, [ecx + 1]
mov ebx, dword [esi + 0x70]
mov ebp, dword [esi + 0x78]
mov eax, dword [esp + 0x1fc]
mov ecx, dword [esp + 0x200]
cmp ebp, edx
jb 0x64f058
mov edx, dword [esp + 0x48]
jmp 0x64f0c1
mov dword [esp + 0x44], ecx
mov dword [esp + 0x7c], eax
lea eax, [0x6cd520]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov ecx, dword [esp + 0x48]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.0044baf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x360]
mov dword [ebx + 0x78], edx
mov edx, dword [0x9b1930]
test edx, edx
jne 0x64f0a7
mov dword [ebx + 0x70], eax
jmp 0x64f0af
lea edi, [ebx + 0x70]
call fcn.00463350
mov esi, ebx
mov edi, dword [esp + 0x5c]
mov edx, ecx
mov ebx, eax
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x44]
lea ebp, [edx + 1]
mov dword [esi + 0x74], ebp
lea ebp, [ebx + edx*8 + 4]
mov dword [ebp], ecx
mov ecx, dword [0x9b1930]
lea edx, [ebx + edx*8]
test ecx, ecx
jne 0x64f0df
mov dword [edx], eax
jmp 0x64f0ea
mov ecx, edi
mov edi, edx
call fcn.00463350
mov edi, ecx
mov ecx, dword [esp + 0x368]
cmp ecx, 5
jne 0x64fb17
mov edx, dword [esp + 0x364]
cmp dword [edx], 0x676e6172
jne 0x64fb1e
cmp byte [edx + 4], 0x65
jne 0x64fb1e
cmp dword [edi + 0x18], 2
jge 0x64fb1e
xor eax, eax
mov ebx, edi
lea edi, [esp + 0x230]
call fcn.0046361b
jmp 0x64fba8
lea edi, [esp + 0x244]
lea esi, [esp + 0xc8]
call fcn.00463afe
nop
inc dword [ebp + 0x6c]
lea edi, [esp + 0xdc]
lea esi, [esp + 0x244]
call fcn.00463afe
mov ecx, dword [esp + 0xdc]
mov esi, ebx
lea ebx, [ecx - 0x10]
cmp ebx, 1
jbe 0x64ec13
cmp ecx, 0x15
je 0x64ec13
jmp 0x64fc95
mov ecx, dword [esp + 0x360]
mov ebp, dword [ecx + 0x6c]
test ebp, ebp
jle 0x64f19a
dec ebp
mov dword [ecx + 0x6c], ebp
jmp 0x64f225
mov edx, dword [ecx + 0x2c]
lea edi, [esp + 0x348]
call fcn.0046361b
mov ecx, dword [edx + 0x30]
mov dword [esp], ecx
lea ecx, [esp + 0x348]
mov dword [esp + 4], ecx
call fcn.004054c0
lea edi, [esp + 0x1a4]
lea esi, [esp + 0x348]
call fcn.00463afe
mov ecx, dword [esp + 0x360]
lea edi, [ecx + 0x30]
mov edx, dword [0x9b1930]
test edx, edx
jne 0x64f1f4
lea esi, [esp + 0x1a4]
call fcn.00463afe
jmp 0x64f211
lea eax, [0x6f8460]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x1a4]
mov dword [esp + 8], eax
call fcn.00410b70
xor eax, eax
mov ecx, dword [esp + 0x360]
mov edx, dword [esp + 0x80]
mov ebx, dword [esp + 0x5c]
mov ebp, dword [ecx + 0x6c]
cmp ebp, 3
jae 0x64fd16
lea ebp, [ebp + ebp*4]
lea esi, [ecx + ebp*4 + 0x30]
lea edi, [esp + 0x1b8]
call fcn.00463afe
lea edi, [esp + 0x2a8]
lea esi, [esp + 0x1b8]
call fcn.00463afe
cmp dword [esp + 0x2a8], 0x12
je 0x64f183
jmp 0x64ec3a
xor eax, eax
mov ebx, ecx
lea edi, [esp + 0x21c]
call fcn.0046361b
mov ecx, dword [esp + 0x360]
jmp 0x64f3f4
lea edi, [esp + 0x2f8]
lea esi, [esp + 0xa0]
call fcn.00463afe
mov ecx, dword [esp + 0x2f8]
mov edx, dword [esp + 0x36c]
cmp edx, ecx
je 0x64f4c9
cmp ecx, 0xd
jg 0x64f2e0
cmp ecx, 3
jg 0x64f2c9
cmp ecx, 1
je 0x64f307
cmp ecx, 3
je 0x64f307
jmp 0x64f3af
cmp ecx, 5
je 0x64f307
lea ebp, [ecx - 9]
cmp ebp, 1
jbe 0x64f307
cmp ecx, 0xc
jge 0x64f307
jmp 0x64f3af
cmp ecx, 0x13
jg 0x64f2f4
cmp ecx, 0xf
je 0x64f307
cmp ecx, 0x13
je 0x64f307
jmp 0x64f3af
cmp ecx, 0x15
je 0x64f307
cmp ecx, 0x1a
je 0x64f307
cmp ecx, 0x1f
jne 0x64f3af
nop
mov eax, dword [esp + 0x360]
inc dword [eax + 0x6c]
mov dword [esp], eax
call fcn.00651420
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x5c]
mov edx, dword [ecx + 0x24]
mov ebx, dword [ecx + 0x20]
mov ebp, dword [ecx + 0x28]
lea esi, [edx + 1]
cmp ebp, esi
jae 0x64f38a
mov dword [esp + 0x78], eax
lea eax, [0x700b20]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.0044baf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x5c]
mov dword [ebx + 0x28], edx
mov edx, dword [0x9b1930]
test edx, edx
jne 0x64f376
mov dword [ebx + 0x20], eax
jmp 0x64f37e
lea edi, [ebx + 0x20]
call fcn.00463350
mov edx, ecx
mov ebx, eax
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x5c]
lea ebp, [edx + 1]
mov dword [ecx + 0x24], ebp
mov ebp, dword [0x9b1930]
lea edi, [ebx + edx*4]
test ebp, ebp
jne 0x64f3a5
mov dword [ebx + edx*4], eax
jmp 0x64f26b
call fcn.00463350
jmp 0x64f26b
mov eax, dword [esp + 0x360]
mov dword [esp], eax
lea edi, [esp + 4]
lea esi, [esp + 0x2f8]
call fcn.00463afe
mov ecx, dword [esp + 0x364]
mov dword [esp + 0x18], ecx
mov edx, dword [esp + 0x368]
mov dword [esp + 0x1c], edx
call fcn.0064c100
mov ecx, dword [esp + 0x5c]
jmp 0x64f26b
mov ecx, dword [esp + 0x360]
mov edx, dword [ecx + 0x6c]
test edx, edx
jle 0x64f404
dec edx
mov dword [ecx + 0x6c], edx
jmp 0x64f488
mov edx, dword [ecx + 0x2c]
lea edi, [esp + 0x348]
call fcn.0046361b
mov ecx, dword [edx + 0x30]
mov dword [esp], ecx
lea ecx, [esp + 0x348]
mov dword [esp + 4], ecx
call fcn.004054c0
lea edi, [esp + 0x8c]
lea esi, [esp + 0x348]
call fcn.00463afe
mov ecx, dword [esp + 0x360]
lea edi, [ecx + 0x30]
mov edx, dword [0x9b1930]
test edx, edx
jne 0x64f45e
lea esi, [esp + 0x8c]
call fcn.00463afe
jmp 0x64f47b
lea eax, [0x6f8460]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x8c]
mov dword [esp + 8], eax
call fcn.00410b70
xor eax, eax
mov ecx, dword [esp + 0x360]
mov ebx, dword [esp + 0x5c]
mov edx, dword [ecx + 0x6c]
cmp edx, 3
jae 0x64f504
lea edx, [edx + edx*4]
lea esi, [ecx + edx*4 + 0x30]
lea edi, [esp + 0xa0]
call fcn.00463afe
lea edi, [esp + 0x21c]
lea esi, [esp + 0xa0]
call fcn.00463afe
cmp dword [esp + 0x21c], 0x12
je 0x64f3ed
jmp 0x64f287
mov eax, dword [esp + 0x360]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov eax, dword [esp + 0x364]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x368]
mov dword [esp + 0xc], eax
call fcn.0064fd40
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x370], eax
add esp, 0x35c
ret
mov eax, edx
mov ecx, 3
call fcn.004633d0
mov edx, dword [ebp + 0x6c]
test edx, edx
jle 0x64f520
dec edx
mov dword [ebp + 0x6c], edx
jmp 0x64f5ac
mov ecx, dword [ebp + 0x2c]
mov dword [esp + 0x6c], ecx
lea edi, [esp + 0x348]
call fcn.0046361b
mov ecx, dword [esp + 0x6c]
mov ecx, dword [ecx + 0x30]
mov dword [esp], ecx
lea ecx, [esp + 0x348]
mov dword [esp + 4], ecx
call fcn.004054c0
lea edi, [esp + 0x140]
lea esi, [esp + 0x348]
call fcn.00463afe
mov ecx, dword [esp + 0x360]
lea edi, [ecx + 0x30]
mov edx, dword [0x9b1930]
test edx, edx
jne 0x64f582
lea esi, [esp + 0x140]
call fcn.00463afe
jmp 0x64f59f
lea eax, [0x6f8460]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x140]
mov dword [esp + 8], eax
call fcn.00410b70
xor eax, eax
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x360]
mov edx, dword [ebp + 0x6c]
cmp edx, 3
jae 0x64fcf2
lea ecx, [edx + edx*4]
lea esi, [ebp + ecx*4 + 0x30]
lea edi, [esp + 0x154]
call fcn.00463afe
lea edi, [esp + 0x280]
lea esi, [esp + 0x154]
call fcn.00463afe
cmp dword [esp + 0x280], 0x12
je 0x64f510
jmp 0x64ee33
cmp dword [esp + 0x208], 0x12
jne 0x64f6a8
lea edi, [esp + 0x320]
lea esi, [esp + 0x1f4]
call fcn.00463afe
lea edi, [ebp + 0x44]
mov ecx, dword [0x9b1930]
test ecx, ecx
jne 0x64f62d
lea esi, [esp + 0x208]
call fcn.00463afe
jmp 0x64f657
lea eax, [0x6f8460]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x208]
mov dword [esp + 8], eax
call fcn.00410b70
xor eax, eax
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x360]
lea edi, [ebp + 0x58]
mov ecx, dword [0x9b1930]
test ecx, ecx
jne 0x64f672
lea esi, [esp + 0x320]
call fcn.00463afe
jmp 0x64f69c
lea eax, [0x6f8460]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x320]
mov dword [esp + 8], eax
call fcn.00410b70
xor eax, eax
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x360]
mov dword [ebp + 0x6c], 3
jmp 0x64f26f
lea edi, [ebp + 0x44]
mov ecx, dword [0x9b1930]
test ecx, ecx
jne 0x64f6c3
lea esi, [esp + 0x1f4]
call fcn.00463afe
jmp 0x64f6ed
lea eax, [0x6f8460]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x1f4]
mov dword [esp + 8], eax
call fcn.00410b70
xor eax, eax
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x360]
mov dword [ebp + 0x6c], 2
jmp 0x64f26f
cmp ecx, 6
sete cl
mov byte [ebx + 0x10], cl
lea edi, [esp + 0x26c]
call fcn.0046361b
mov edx, dword [ebp + 0x6c]
test edx, edx
jle 0x64f71e
dec edx
mov dword [ebp + 0x6c], edx
jmp 0x64f7aa
mov ecx, dword [ebp + 0x2c]
mov dword [esp + 0x68], ecx
lea edi, [esp + 0x348]
call fcn.0046361b
mov ecx, dword [esp + 0x68]
mov ecx, dword [ecx + 0x30]
mov dword [esp], ecx
lea ecx, [esp + 0x348]
mov dword [esp + 4], ecx
call fcn.004054c0
lea edi, [esp + 0x118]
lea esi, [esp + 0x348]
call fcn.00463afe
mov ecx, dword [esp + 0x360]
lea edi, [ecx + 0x30]
mov edx, dword [0x9b1930]
test edx, edx
jne 0x64f780
lea esi, [esp + 0x118]
call fcn.00463afe
jmp 0x64f79d
lea eax, [0x6f8460]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x118]
mov dword [esp + 8], eax
call fcn.00410b70
xor eax, eax
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x360]
mov edx, dword [ebp + 0x6c]
cmp edx, 3
jae 0x64fa2a
lea ecx, [edx + edx*4]
lea esi, [ebp + ecx*4 + 0x30]
lea edi, [esp + 0x12c]
call fcn.00463afe
lea edi, [esp + 0x26c]
lea esi, [esp + 0x12c]
call fcn.00463afe
cmp dword [esp + 0x26c], 0x12
je 0x64f70e
mov eax, dword [esp + 0x1f8]
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 0x1fc]
mov edx, dword [esp + 0x200]
mov dword [esp], ecx
mov dword [esp + 4], edx
lea ecx, [0x71681b]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0xffffffff
call fcn.004dfaf0
mov eax, dword [esp + 0x18]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x28], ecx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x30], edx
lea ebx, [0x6fbfa0]
mov dword [esp], ebx
call fcn.0040b7f0
mov eax, dword [esp + 4]
mov ecx, dword [0x9b1930]
test ecx, ecx
jne 0x64f871
mov ecx, dword [esp + 0x360]
mov dword [eax + 8], ecx
jmp 0x64f88b
lea edi, [eax + 8]
mov ecx, eax
mov eax, dword [esp + 0x360]
call fcn.00463350
mov eax, ecx
mov ecx, dword [esp + 0x360]
mov dword [eax], 0x12
mov edx, dword [esp + 0x38]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x28]
mov dword [eax + 0x10], edx
mov edx, dword [esp + 0x30]
mov dword [eax + 0x14], edx
mov edx, dword [0x9b1930]
test edx, edx
jne 0x64f8b9
mov edx, dword [esp + 0x50]
mov dword [eax + 0xc], edx
jmp 0x64f8c9
lea edi, [eax + 0xc]
mov edx, eax
mov eax, dword [esp + 0x50]
call fcn.00463350
mov eax, edx
mov edx, dword [esp + 0x5c]
mov ebx, dword [edx + 0x18]
lea ebp, [ebx + 1]
mov esi, ecx
mov ecx, dword [edx + 0x14]
mov edi, edx
mov edx, dword [edx + 0x1c]
cmp edx, ebp
jae 0x64f942
mov dword [esp + 0x58], eax
lea eax, [0x6fd440]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
call fcn.0044baf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x5c]
mov dword [ebx + 0x1c], edx
mov edx, dword [0x9b1930]
test edx, edx
jne 0x64f925
mov dword [ebx + 0x14], eax
jmp 0x64f931
mov edi, dword [esp + 0x80]
call fcn.00463350
mov esi, dword [esp + 0x360]
mov edi, ebx
mov ebx, ecx
mov ecx, eax
mov eax, dword [esp + 0x58]
lea edx, [ebx + 1]
mov dword [edi + 0x18], edx
mov edx, dword [0x9b1930]
lea ebp, [ecx + ebx*4]
test edx, edx
jne 0x64f95a
mov dword [ecx + ebx*4], eax
jmp 0x64f965
mov ecx, edi
mov edi, ebp
call fcn.00463350
mov edi, ecx
mov ecx, dword [esi + 0x74]
mov dword [esp + 0x48], ecx
lea edx, [ecx + 1]
mov ebx, dword [esi + 0x70]
mov ebp, dword [esi + 0x78]
mov eax, dword [esp + 0x1fc]
mov ecx, dword [esp + 0x200]
cmp ebp, edx
jb 0x64f98d
mov edx, dword [esp + 0x48]
jmp 0x64f9f6
mov dword [esp + 0x7c], eax
mov dword [esp + 0x44], ecx
lea eax, [0x6cd520]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov eax, dword [esp + 0x48]
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.0044baf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x360]
mov dword [ebx + 0x78], edx
mov edx, dword [0x9b1930]
test edx, edx
jne 0x64f9dc
mov dword [ebx + 0x70], eax
jmp 0x64f9e4
lea edi, [ebx + 0x70]
call fcn.00463350
mov esi, ebx
mov edi, dword [esp + 0x5c]
mov edx, ecx
mov ebx, eax
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x44]
lea ebp, [edx + 1]
mov dword [esi + 0x74], ebp
lea ebp, [ebx + edx*8 + 4]
mov dword [ebp], ecx
mov ecx, dword [0x9b1930]
lea edx, [ebx + edx*8]
test ecx, ecx
jne 0x64fa14
mov dword [edx], eax
jmp 0x64fa1f
mov ecx, edi
mov edi, edx
call fcn.00463350
mov edi, ecx
xor eax, eax
mov ebx, edi
mov ebp, esi
jmp 0x64f26f
mov eax, edx
mov ecx, 3
call fcn.004633d0
mov edx, dword [ebp + 0x6c]
test edx, edx
jle 0x64fa46
dec edx
mov dword [ebp + 0x6c], edx
jmp 0x64fad2
mov ecx, dword [ebp + 0x2c]
mov dword [esp + 0x64], ecx
lea edi, [esp + 0x348]
call fcn.0046361b
mov ecx, dword [esp + 0x64]
mov ecx, dword [ecx + 0x30]
mov dword [esp], ecx
lea ecx, [esp + 0x348]
mov dword [esp + 4], ecx
call fcn.004054c0
lea edi, [esp + 0xf0]
lea esi, [esp + 0x348]
call fcn.00463afe
mov ecx, dword [esp + 0x360]
lea edi, [ecx + 0x30]
mov edx, dword [0x9b1930]
test edx, edx
jne 0x64faa8
lea esi, [esp + 0xf0]
call fcn.00463afe
jmp 0x64fac5
lea eax, [0x6f8460]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xf0]
mov dword [esp + 8], eax
call fcn.00410b70
xor eax, eax
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x360]
mov edx, dword [ebp + 0x6c]
cmp edx, 3
jae 0x64fce6
lea ecx, [edx + edx*4]
lea esi, [ebp + ecx*4 + 0x30]
lea edi, [esp + 0x104]
call fcn.00463afe
lea edi, [esp + 0x258]
lea esi, [esp + 0x104]
call fcn.00463afe
cmp dword [esp + 0x258], 0x12
je 0x64fa36
jmp 0x64eeae
mov edx, dword [esp + 0x364]
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.004091d0
mov eax, dword [esp + 8]
lea ecx, [0x6cd520]
mov dword [esp + 0x84], ecx
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x360]
mov dword [esp], eax
lea ecx, [0x724c0d]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1b
lea ecx, [esp + 0x84]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
call fcn.0064bcd0
xor eax, eax
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x360]
jmp 0x64f26f
mov esi, ebp
mov ebp, dword [esi + 0x6c]
test ebp, ebp
jle 0x64fbb8
dec ebp
mov dword [esi + 0x6c], ebp
jmp 0x64fc4b
mov ecx, dword [esi + 0x2c]
mov dword [esp + 0x60], ecx
lea edi, [esp + 0x348]
call fcn.0046361b
mov ecx, dword [esp + 0x60]
mov ecx, dword [ecx + 0x30]
mov dword [esp], ecx
lea ecx, [esp + 0x348]
mov dword [esp + 4], ecx
call fcn.004054c0
lea edi, [esp + 0xb4]
lea esi, [esp + 0x348]
call fcn.00463afe
mov ecx, dword [esp + 0x360]
lea edi, [ecx + 0x30]
mov edx, dword [0x9b1930]
test edx, edx
jne 0x64fc1a
lea esi, [esp + 0xb4]
call fcn.00463afe
jmp 0x64fc37
lea eax, [0x6f8460]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xb4]
mov dword [esp + 8], eax
call fcn.00410b70
xor eax, eax
mov edx, dword [esp + 0x364]
mov ebx, dword [esp + 0x5c]
mov esi, dword [esp + 0x360]
mov ebp, dword [esi + 0x6c]
cmp ebp, 3
jae 0x64fcda
lea ecx, [ebp + ebp*4]
lea ecx, [esi + ecx*4 + 0x30]
lea edi, [esp + 0xc8]
mov ebp, esi
mov esi, ecx
call fcn.00463afe
lea edi, [esp + 0x230]
lea esi, [esp + 0xc8]
call fcn.00463afe
cmp dword [esp + 0x230], 0x12
je 0x64fba6
jmp 0x64f136
mov dword [esp], ebp
lea eax, [0x728c90]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x23
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call fcn.0064bcd0
mov ecx, dword [esp + 0x368]
mov edx, dword [esp + 0x364]
jmp 0x64fb1e
mov eax, ebp
mov ecx, 3
call fcn.004633d0
mov eax, edx
mov ecx, 3
call fcn.004633d0
mov eax, edx
mov ecx, 3
call fcn.004633d0
mov eax, edx
mov ecx, 3
call fcn.004633d0
mov eax, edx
mov ecx, 3
call fcn.004633d0
mov eax, ebp
mov ecx, 3
call fcn.004633d0
mov eax, edx
mov ecx, 3
call fcn.004633d0
nop
call fcn.00461f40
jmp fcn.0064ea40