Function at 0x64cd80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xdc]
cmp eax, dword [ecx + 8]
jbe 0x64d5c0
sub esp, 0x15c
lea edi, [esp + 0x10c]
xor eax, eax
call fcn.0046361b
mov ecx, dword [esp + 0x160]
mov edx, dword [ecx + 0x6c]
test edx, edx
jle 0x64cde3
lea ebx, [edx - 1]
cmp ebx, 3
jae 0x64d5b3
lea edx, [edx + edx*4]
lea esi, [ecx + edx*4 + 0x1c]
lea edi, [esp + 0x10c]
call fcn.00463afe
jmp 0x64ce74
mov dword [ecx + 0x6c], 1
mov edx, dword [ecx + 0x2c]
lea edi, [esp + 0x148]
call fcn.0046361b
mov ecx, dword [edx + 0x30]
mov dword [esp], ecx
lea ecx, [esp + 0x148]
mov dword [esp + 4], ecx
call fcn.004054c0
lea edi, [esp + 0xf8]
lea esi, [esp + 0x148]
call fcn.00463afe
mov ecx, dword [esp + 0x160]
lea edi, [ecx + 0x30]
mov edx, dword [0x9b1930]
test edx, edx
jne 0x64ce44
lea esi, [esp + 0xf8]
call fcn.00463afe
jmp 0x64ce61
lea eax, [0x6f8460]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xf8]
mov dword [esp + 8], eax
call fcn.00410b70
lea edi, [esp + 0x10c]
lea esi, [esp + 0xf8]
call fcn.00463afe
mov eax, dword [esp + 0x110]
mov dword [esp + 0x20], eax
lea ecx, [0x6fbe60]
mov dword [esp], ecx
call fcn.0040b7f0
mov eax, dword [esp + 4]
mov ecx, dword [0x9b1930]
test ecx, ecx
jne 0x64cea7
mov ecx, dword [esp + 0x160]
mov dword [eax + 8], ecx
jmp 0x64cec1
lea edi, [eax + 8]
mov ecx, eax
mov eax, dword [esp + 0x160]
call fcn.00463350
mov eax, ecx
mov ecx, dword [esp + 0x160]
mov dword [eax], 0xb
mov edx, dword [esp + 0x20]
mov dword [eax + 4], edx
mov edx, dword [0x9b1930]
test edx, edx
jne 0x64cedd
mov dword [ecx + 0x10], eax
jmp 0x64cee9
lea edi, [ecx + 0x10]
call fcn.00463350
jmp 0x64cee9
mov ecx, eax
lea edi, [esp + 0xe4]
xor eax, eax
call fcn.0046361b
mov ecx, dword [esp + 0x160]
mov edx, dword [ecx + 0x6c]
test edx, edx
jle 0x64cf29
lea ebx, [edx - 1]
cmp ebx, 3
jae 0x64d5a7
lea edx, [edx + edx*4]
lea esi, [ecx + edx*4 + 0x1c]
lea edi, [esp + 0xe4]
call fcn.00463afe
jmp 0x64cfbc
mov dword [ecx + 0x6c], 1
mov edx, dword [ecx + 0x2c]
lea edi, [esp + 0x148]
call fcn.0046361b
mov ecx, dword [edx + 0x30]
mov dword [esp], ecx
lea ecx, [esp + 0x148]
mov dword [esp + 4], ecx
call fcn.004054c0
lea edi, [esp + 0xd0]
lea esi, [esp + 0x148]
call fcn.00463afe
mov ecx, dword [esp + 0x160]
lea edi, [ecx + 0x30]
mov edx, dword [0x9b1930]
test edx, edx
jne 0x64cf8a
lea esi, [esp + 0xd0]
call fcn.00463afe
jmp 0x64cfa7
lea eax, [0x6f8460]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xd0]
mov dword [esp + 8], eax
call fcn.00410b70
lea edi, [esp + 0xe4]
lea esi, [esp + 0xd0]
call fcn.00463afe
xor eax, eax
cmp dword [esp + 0xe4], 8
je 0x64d2f0
lea edi, [esp + 0xbc]
call fcn.0046361b
mov ecx, dword [esp + 0x160]
mov edx, dword [ecx + 0x6c]
test edx, edx
jle 0x64d008
lea ebx, [edx - 1]
cmp ebx, 3
jae 0x64d59b
lea edx, [edx + edx*4]
lea esi, [ecx + edx*4 + 0x1c]
lea edi, [esp + 0xbc]
call fcn.00463afe
jmp 0x64d09b
mov dword [ecx + 0x6c], 1
mov edx, dword [ecx + 0x2c]
lea edi, [esp + 0x148]
call fcn.0046361b
mov ecx, dword [edx + 0x30]
mov dword [esp], ecx
lea ecx, [esp + 0x148]
mov dword [esp + 4], ecx
call fcn.004054c0
lea edi, [esp + 0xa8]
lea esi, [esp + 0x148]
call fcn.00463afe
mov ecx, dword [esp + 0x160]
lea edi, [ecx + 0x30]
mov edx, dword [0x9b1930]
test edx, edx
jne 0x64d069
lea esi, [esp + 0xa8]
call fcn.00463afe
jmp 0x64d086
lea eax, [0x6f8460]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0xa8]
mov dword [esp + 8], eax
call fcn.00410b70
lea edi, [esp + 0xbc]
lea esi, [esp + 0xa8]
call fcn.00463afe
xor eax, eax
cmp dword [esp + 0xbc], 0xb
jne 0x64d18b
mov edx, dword [esp + 0x160]
mov ebx, dword [edx + 0x6c]
test ebx, ebx
jle 0x64d0c0
dec ebx
mov dword [edx + 0x6c], ebx
jmp 0x64d148
mov ecx, dword [edx + 0x2c]
mov dword [esp + 0x3c], ecx
lea edi, [esp + 0x148]
call fcn.0046361b
mov ecx, dword [esp + 0x3c]
mov ecx, dword [ecx + 0x30]
mov dword [esp], ecx
lea ecx, [esp + 0x148]
mov dword [esp + 4], ecx
call fcn.004054c0
lea edi, [esp + 0x80]
lea esi, [esp + 0x148]
call fcn.00463afe
mov ecx, dword [esp + 0x160]
lea edi, [ecx + 0x30]
mov edx, dword [0x9b1930]
test edx, edx
jne 0x64d122
lea esi, [esp + 0x80]
call fcn.00463afe
jmp 0x64d13f
lea eax, [0x6f8460]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x80]
mov dword [esp + 8], eax
call fcn.00410b70
xor eax, eax
mov edx, dword [esp + 0x160]
mov ebx, dword [edx + 0x6c]
cmp ebx, 3
jae 0x64d58f
lea ecx, [ebx + ebx*4]
lea esi, [edx + ecx*4 + 0x30]
lea edi, [esp + 0x94]
call fcn.00463afe
lea edi, [esp + 0x134]
lea esi, [esp + 0x94]
call fcn.00463afe
lea edi, [esp + 0x120]
call fcn.0046361b
jmp 0x64d2f7
mov eax, dword [esp + 0x160]
mov dword [esp], eax
call fcn.0064dcc0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x34], ecx
mov eax, dword [eax + 0x1c]
mov edx, dword [esp + 4]
mov dword [esp + 0x4c], edx
mov ebx, dword [esp + 4]
mov dword [esp + 0x48], ebx
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
add eax, 0xfffffffa
cmp eax, 1
jbe 0x64d280
mov ecx, dword [esp + 0x160]
mov edx, dword [ecx + 0x10]
mov ebx, dword [edx + 0x10]
mov ebp, dword [edx + 0xc]
mov eax, ecx
mov ecx, dword [edx + 0x14]
mov esi, edx
lea edx, [ebx + 1]
cmp ecx, edx
jae 0x64d245
mov dword [esp + 0x44], esi
lea eax, [0x6f1b60]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
call fcn.0044baf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x44]
mov dword [ebx + 0x14], edx
mov edx, dword [0x9b1930]
test edx, edx
jne 0x64d230
mov dword [ebx + 0xc], eax
jmp 0x64d238
lea edi, [ebx + 0xc]
call fcn.00463350
mov esi, ebx
mov ebx, ecx
mov ebp, eax
mov eax, dword [esp + 0x160]
lea ecx, [ebx + 1]
mov dword [esi + 0x10], ecx
lea ecx, [ebp + ebx*8]
mov edx, dword [esp + 0x48]
mov dword [ecx], edx
mov ecx, dword [0x9b1930]
lea edi, [ebp + ebx*8 + 4]
test ecx, ecx
jne 0x64d26e
mov ecx, dword [esp + 0x34]
mov dword [edi], ecx
jmp 0x64cee7
mov ecx, eax
mov eax, dword [esp + 0x34]
call fcn.00463350
mov eax, ecx
jmp 0x64cee7
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x64d29d
mov edx, dword [eax + 4]
jmp 0x64d29f
mov edx, eax
mov dword [esp + 0x50], edx
mov eax, dword [esp + 0x34]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x160]
mov dword [esp], eax
lea ecx, [0x71bdd1]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xd
lea edx, [esp + 0x50]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
call fcn.0064bcd0
mov eax, dword [esp + 0x160]
jmp 0x64cee7
add esp, 0x15c
ret
mov ebx, dword [edx + 0x6c]
test ebx, ebx
jle 0x64d304
dec ebx
mov dword [edx + 0x6c], ebx
jmp 0x64d383
mov ecx, dword [edx + 0x2c]
mov dword [esp + 0x38], ecx
lea edi, [esp + 0x148]
call fcn.0046361b
mov ecx, dword [esp + 0x38]
mov ecx, dword [ecx + 0x30]
mov dword [esp], ecx
lea ecx, [esp + 0x148]
mov dword [esp + 4], ecx
call fcn.004054c0
lea edi, [esp + 0x58]
lea esi, [esp + 0x148]
call fcn.00463afe
mov ecx, dword [esp + 0x160]
lea edi, [ecx + 0x30]
mov edx, dword [0x9b1930]
test edx, edx
jne 0x64d360
lea esi, [esp + 0x58]
call fcn.00463afe
jmp 0x64d37a
lea eax, [0x6f8460]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x58]
mov dword [esp + 8], eax
call fcn.00410b70
xor eax, eax
mov edx, dword [esp + 0x160]
mov ebx, dword [edx + 0x6c]
cmp ebx, 3
jae 0x64d583
lea ecx, [ebx + ebx*4]
lea esi, [edx + ecx*4 + 0x30]
lea edi, [esp + 0x6c]
call fcn.00463afe
lea edi, [esp + 0x120]
lea esi, [esp + 0x6c]
call fcn.00463afe
mov ecx, dword [esp + 0x120]
cmp ecx, 0x12
je 0x64d2f7
cmp ecx, 0x1b
je 0x64d411
lea edi, [edx + 0x44]
mov ecx, dword [0x9b1930]
test ecx, ecx
jne 0x64d3df
lea esi, [esp + 0x134]
call fcn.00463afe
jmp 0x64d405
lea eax, [0x6f8460]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x134]
mov dword [esp + 8], eax
call fcn.00410b70
xor eax, eax
mov edx, dword [esp + 0x160]
mov dword [edx + 0x6c], 2
jmp 0x64d18b
lea eax, [0x706860]
mov dword [esp], eax
call fcn.0040b7f0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0xa
lea ecx, [0x719943]
mov dword [eax], ecx
mov dword [eax + 0x24], 0
mov dword [eax + 0x28], 0
mov dword [eax + 0x20], 0
mov edx, dword [esp + 0x160]
mov ebx, dword [edx + 0x18]
mov ebp, dword [edx + 0x1c]
mov dword [eax + 0x1c], ebp
mov ebp, dword [0x9b1930]
test ebp, ebp
jne 0x64d466
mov dword [eax + 0x18], ebx
jmp 0x64d474
lea edi, [eax + 0x18]
mov ebp, eax
mov eax, ebx
call fcn.00463350
mov eax, ebp
mov ebx, dword [edx + 0x14]
mov dword [eax + 0x14], ebx
mov ebx, dword [edx + 8]
mov ebp, dword [edx + 0xc]
mov dword [eax + 0xc], ebp
mov ebp, dword [0x9b1930]
test ebp, ebp
jne 0x64d492
mov dword [eax + 8], ebx
jmp 0x64d4a0
lea edi, [eax + 8]
mov ebp, eax
mov eax, ebx
call fcn.00463350
mov eax, ebp
mov dword [esp + 0x2c], eax
mov ebx, dword [edx + 0x20]
mov dword [esp + 0x40], ebx
mov ebp, dword [edx + 0x24]
mov dword [esp + 0x24], ebp
mov esi, dword [edx + 0x28]
mov dword [esp + 0x28], esi
mov ecx, dword [edx + 0x2c]
mov edx, dword [edx + 0x7c]
mov dword [esp + 0x30], edx
mov dword [eax + 0x10], 0
mov edx, dword [0x9b1930]
test edx, edx
jne 0x64d4d9
mov dword [eax + 0x2c], ecx
jmp 0x64d4e5
lea edx, [eax + 0x2c]
mov edi, edx
mov eax, ecx
call fcn.00463350
lea eax, [0x6c6800]
mov dword [esp], eax
call fcn.0040b7f0
mov eax, dword [esp + 4]
mov dword [eax + 4], 1
lea ecx, str.___14_AEHLNPTUXabditxy
mov dword [eax], ecx
mov edx, dword [esp + 0x2c]
mov dword [edx + 0x74], 1
mov dword [edx + 0x78], 1
mov ebx, dword [0x9b1930]
test ebx, ebx
jne 0x64d527
mov dword [edx + 0x70], eax
jmp 0x64d52f
lea edi, [edx + 0x70]
call fcn.00463350
mov ebx, dword [esp + 0x24]
mov dword [edx + 0x24], ebx
mov ebx, dword [esp + 0x28]
mov dword [edx + 0x28], ebx
mov ebx, dword [0x9b1930]
test ebx, ebx
jne 0x64d557
mov eax, dword [esp + 0x40]
mov dword [edx + 0x20], eax
mov eax, dword [esp + 0x30]
mov dword [edx + 0x7c], eax
jmp 0x64d56f
lea edi, [edx + 0x20]
mov eax, dword [esp + 0x40]
call fcn.00463350
lea edi, [edx + 0x7c]
mov eax, dword [esp + 0x30]
call fcn.00463350
mov dword [esp], edx
call fcn.0064d5d0
mov eax, dword [esp + 0x160]
jmp 0x64cee7
mov eax, ebx
mov ecx, 3
call fcn.004633d0
mov eax, ebx
mov ecx, 3
call fcn.004633d0
mov eax, ebx
mov ecx, 3
call fcn.004633d0
mov eax, ebx
mov ecx, 3
call fcn.004633d0
mov eax, ebx
mov ecx, 3
call fcn.004633d0
nop
call fcn.00461f40
jmp fcn.0064cd80