Function at 0x64acc0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xec]
cmp eax, dword [ecx + 8]
jbe 0x64b98d
sub esp, 0x16c
mov eax, dword [esp + 0x174]
test eax, eax
je 0x64b974
mov ecx, dword [esp + 0x178]
test ecx, ecx
je 0x64b95c
mov edx, dword [esp + 0x170]
movzx ebx, byte [edx + 0x56]
mov byte [ecx + 0xca], bl
movzx ebx, byte [edx + 0x56]
mov byte [ecx + 0x34], bl
movzx ebx, byte [edx + 0x56]
mov byte [eax + 0x190], bl
movzx ebx, byte [edx + 0x56]
mov byte [eax + 0x18], bl
nop
mov dword [esp], eax
call fcn.0065d8a0
nop
mov eax, dword [0x707868]
mov ecx, dword [esp + 0x174]
mov edx, dword [ecx + 0xcc]
mov ebx, dword [ecx + 0xc8]
cmp dword [0x70786c], edx
je 0x64ad59
xor eax, eax
jmp 0x64ad75
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.00403310
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x174]
mov edx, dword [esp + 0x170]
cmp byte [edx + 0x19], al
jne 0x64b933
call fcn.00495760
lea edi, [esp + 0x144]
lea esi, [esp]
call fcn.0045723e
lea edi, [esp + 0xcc]
lea esi, [esp + 0x144]
call fcn.0045723e
nop
mov eax, dword [esp + 0xcc]
mov ecx, dword [esp + 0xd0]
test ecx, 0x80000000
je 0x64addd
shl ecx, 1
mov edx, eax
shr eax, 0x1f
or ecx, eax
shl edx, 1
shl ecx, 1
shr edx, 0x1f
or edx, ecx
add edx, 0xd7b17f80
jmp 0x64ade4
mov edx, dword [esp + 0xd4]
mov eax, dword [0x901b40]
sub edx, eax
add edx, 0x886e0900
mov eax, dword [esp + 0x170]
lea ecx, [eax + 0x6c]
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.00401870
mov eax, dword [esp + 0x178]
movzx ecx, byte [eax + 0xc8]
mov byte [esp + 0x33], cl
mov dword [esp], eax
call fcn.0065e4c0
movzx eax, byte [esp + 0x33]
mov ecx, dword [esp + 0x178]
mov byte [ecx + 0xc8], al
mov edx, dword [esp + 0x174]
mov dword [esp], edx
call fcn.0065d8a0
mov eax, dword [esp + 0x170]
movzx ecx, byte [eax + 0x55]
mov edx, dword [esp + 0x174]
mov byte [edx + 0x11d], cl
mov ecx, dword [edx + 0x60]
mov ebx, dword [edx + 0x58]
mov ebp, dword [edx + 0x5c]
test ebp, ebp
jne 0x64af35
mov ebp, dword [eax + 0xc]
mov esi, dword [eax + 8]
test ebp, ebp
jne 0x64ae8e
mov edi, ebx
movzx ebx, byte [eax + 0x10]
test bl, bl
jne 0x64ae90
mov esi, dword [0x706f10]
mov ebp, dword [0x706f14]
jmp 0x64ae90
mov edi, ebx
test ebp, ebp
je 0x64af35
cmp ebp, ecx
ja 0x64aea0
mov ebx, ebp
jmp 0x64aedc
mov dword [esp + 0x68], esi
mov dword [esp + 0x3c], ebp
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
lea eax, [0x734860]
mov dword [esp + 0x10], eax
call fcn.00442820
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0x68]
mov edi, ebx
mov ebx, dword [esp + 0x3c]
mov dword [esp + 0x50], ecx
mov dword [esp + 0x78], edi
mov dword [esp + 0x4c], ebp
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
call fcn.00457450
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x174]
mov dword [ecx + 0x5c], eax
mov eax, dword [esp + 0x50]
mov dword [ecx + 0x60], eax
mov eax, dword [0x901e80]
test eax, eax
jne 0x64af20
mov ebx, dword [esp + 0x78]
mov dword [ecx + 0x58], ebx
jmp 0x64af2c
lea edi, [ecx + 0x58]
mov eax, dword [esp + 0x78]
call fcn.00456ac0
mov eax, dword [esp + 0x170]
mov edx, ecx
mov ecx, dword [eax + 0x64]
test ecx, ecx
jne 0x64b8ef
lea edi, [esp + 0x130]
xor eax, eax
call fcn.00456d5b
mov ecx, dword [edx + 0x198]
test ecx, ecx
seta cl
mov ebx, dword [edx + 0x19c]
test ebx, ebx
sete bl
xchg ebp, ebx
setg bl
xchg ebp, ebx
and ebx, ecx
or ebp, ebx
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x64afd7
call fcn.00495760
lea edi, [esp + 0x144]
lea esi, [esp]
call fcn.0045723e
mov eax, dword [esp + 0x174]
mov ecx, dword [eax + 0x198]
mov dword [esp + 0x48], ecx
mov edx, dword [eax + 0x19c]
lea edi, [esp]
lea esi, [esp + 0x144]
call fcn.0045723e
mov dword [esp + 0x18], edx
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x14], ecx
call fcn.00494c00
lea edi, [esp + 0x130]
lea esi, [esp + 0x1c]
call fcn.0045723e
mov edx, dword [esp + 0x174]
mov eax, dword [edx + 0x198]
mov ecx, dword [edx + 0x19c]
nop
nop
movzx ebx, byte [edx + 2]
mov ebp, dword [esp + 0x170]
mov dword [esp], ebp
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov byte [esp + 0xc], bl
call fcn.0064b9f0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
test ecx, ecx
jne 0x64b8d2
mov dword [esp + 0x54], eax
mov ecx, dword [eax]
mov dword [esp + 0x40], ecx
mov edx, dword [eax + 4]
mov dword [esp + 0x6c], edx
mov ebx, dword [esp + 0x178]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0065cc90
lea edi, [esp + 0x108]
lea esi, [esp + 0x130]
call fcn.0045723e
mov eax, dword [esp + 0x170]
mov ecx, dword [eax + 0x48]
test ecx, ecx
seta cl
mov edx, dword [eax + 0x4c]
test edx, edx
sete dl
setg bl
and edx, ecx
or ebx, edx
test bl, bl
je 0x64b18b
call fcn.00495760
lea edi, [esp + 0x144]
lea esi, [esp]
call fcn.0045723e
mov eax, dword [esp + 0x170]
mov ecx, dword [eax + 0x48]
mov dword [esp + 0x48], ecx
mov edx, dword [eax + 0x4c]
lea edi, [esp]
lea esi, [esp + 0x144]
call fcn.0045723e
mov dword [esp + 0x18], edx
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x14], ecx
call fcn.00494c00
lea edi, [esp + 0x11c]
lea esi, [esp + 0x1c]
call fcn.0045723e
lea edi, [esp + 0xb8]
lea esi, [esp + 0x108]
call fcn.0045723e
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0xbc]
test ecx, 0x80000000
je 0x64b11f
shl ecx, 1
mov edx, eax
shr eax, 0x1f
or ecx, eax
mov eax, edx
shl edx, 1
mov ebx, ecx
shl ecx, 1
shr edx, 0x1f
or edx, ecx
shr ebx, 0x1f
add edx, 0xd7b17f80
adc ebx, 0xd
jmp 0x64b12d
mov edx, dword [esp + 0xc0]
mov ebx, dword [esp + 0xc4]
test ebx, ebx
sete cl
test edx, edx
sete dl
and edx, ecx
test dl, dl
je 0x64b144
test eax, 0x3fffffff
je 0x64b171
lea edi, [esp]
lea esi, [esp + 0x11c]
call fcn.0045723e
lea edi, [esp + 0x14]
lea esi, [esp + 0x108]
call fcn.0045723e
call fcn.004939e0
movzx eax, byte [esp + 0x28]
test al, al
je 0x64b184
lea edi, [esp + 0x108]
lea esi, [esp + 0x11c]
call fcn.0045723e
mov eax, dword [esp + 0x170]
lea edi, [esp + 0xa4]
lea esi, [esp + 0x108]
call fcn.0045723e
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp + 0xa8]
test edx, 0x80000000
je 0x64b1d8
shl edx, 1
mov ebx, ecx
shr ecx, 0x1f
or ecx, edx
mov edx, ebx
shl ebx, 1
mov ebp, ecx
shl ecx, 1
shr ebx, 0x1f
or ebx, ecx
shr ebp, 0x1f
add ebx, 0xd7b17f80
adc ebp, 0xd
jmp 0x64b1e8
mov ebx, dword [esp + 0xac]
mov ebp, dword [esp + 0xb0]
mov edx, ecx
test ebx, ebx
sete cl
test ebp, ebp
sete bl
and ebx, ecx
test bl, bl
je 0x64b200
test edx, 0x3fffffff
je 0x64b243
mov eax, dword [esp + 0x40]
mov ecx, dword [eax + 0x28]
mov dword [esp + 0x44], ecx
mov edx, dword [esp + 0x6c]
mov dword [esp], edx
lea edi, [esp + 4]
lea esi, [esp + 0x108]
call fcn.0045723e
mov ecx, dword [esp + 0x44]
call ecx
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
test eax, eax
jne 0x64b88e
mov eax, dword [esp + 0x170]
mov ecx, dword [eax + 0x28]
test ecx, ecx
setg dl
mov ebx, dword [eax + 0x24]
test ebx, ebx
seta bl
test ecx, ecx
sete cl
and ecx, ebx
or ecx, edx
test cl, cl
jne 0x64b264
xor ecx, ecx
jmp 0x64b2b8
mov eax, dword [esp + 0x54]
lea esi, [eax + 8]
lea edi, [esp + 0x158]
call fcn.0045723e
lea edi, [esp]
lea esi, [esp + 0x158]
call fcn.0045723e
call fcn.004950b0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x170]
cmp dword [ecx + 0x24], eax
setb al
mov edx, dword [esp + 0x18]
mov ebx, dword [ecx + 0x28]
cmp edx, ebx
sete dl
setg bl
and eax, edx
or eax, ebx
mov ecx, eax
mov eax, dword [esp + 0x170]
test cl, cl
je 0x64b2dd
nop
nop
mov ecx, dword [esp + 0x174]
movzx edx, byte [ecx + 2]
test dl, dl
je 0x64b2d1
xor edx, edx
jmp 0x64b2df
nop
mov byte [ecx + 2], 1
mov edx, 1
jmp 0x64b2df
xor edx, edx
mov byte [esp + 0x34], dl
mov dword [esp], eax
mov ecx, dword [esp + 0x40]
mov dword [esp + 4], ecx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 8], ebx
call fcn.0064d120
mov eax, dword [esp + 0xc]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x174]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0065ef90
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
movzx edx, byte [esp + 0x34]
test dl, dl
je 0x64b34b
mov dword [esp + 0x60], ecx
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x174]
mov dword [esp], eax
call fcn.0064fb60
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x60]
movzx edx, byte [esp + 0x34]
test eax, eax
jne 0x64b363
mov eax, dword [esp + 0x64]
mov dword [esp], eax
call fcn.004ea0d0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x60], ecx
mov dword [esp + 0x38], eax
mov edx, dword [esp + 0x170]
mov dword [esp], edx
mov ebx, dword [esp + 0x64]
mov dword [esp + 4], ebx
call fcn.0064d480
lea eax, [0x735900]
mov dword [esp], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x60]
mov dword [esp + 8], ecx
call fcn.004092b0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
jne 0x64b3b6
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x60]
jmp 0x64b3dd
mov eax, dword [eax + 0x10]
mov dword [esp], ecx
call eax
movzx eax, byte [esp + 4]
test al, al
je 0x64b3d5
mov ecx, dword [0x7065bc]
lea eax, [0x7ca788]
jmp 0x64b3dd
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x60], ecx
mov dword [esp + 0x38], eax
mov dword [esp], eax
mov dword [esp + 4], ecx
lea edx, [0x7caee0]
mov dword [esp + 8], edx
lea edx, [0x7c9be8]
mov dword [esp + 0xc], edx
call fcn.0045f290
movzx eax, byte [esp + 0x10]
mov ecx, dword [esp + 0x38]
test ecx, ecx
je 0x64b452
test al, al
jne 0x64b452
mov eax, dword [esp + 0x170]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.0064c850
mov byte [esp + 0x17c], 1
mov eax, dword [esp + 0x38]
mov dword [esp + 0x180], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0x184], eax
add esp, 0x16c
ret
mov byte [esp + 0x32], al
lea edi, [esp + 0xe0]
lea esi, [esp + 0x130]
call fcn.0045723e
mov ecx, dword [esp + 0x170]
mov edx, dword [ecx + 0x44]
test edx, edx
setg bl
mov ebp, dword [ecx + 0x40]
test ebp, ebp
xchg ebp, ebx
seta bl
xchg ebp, ebx
test edx, edx
sete dl
and edx, ebp
or edx, ebx
test dl, dl
je 0x64b5a8
call fcn.00495760
lea edi, [esp + 0x144]
lea esi, [esp]
call fcn.0045723e
mov eax, dword [esp + 0x170]
mov ecx, dword [eax + 0x40]
mov dword [esp + 0x48], ecx
mov edx, dword [eax + 0x44]
lea edi, [esp]
lea esi, [esp + 0x144]
call fcn.0045723e
mov dword [esp + 0x18], edx
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x14], ecx
call fcn.00494c00
lea edi, [esp + 0xf4]
lea esi, [esp + 0x1c]
call fcn.0045723e
lea edi, [esp + 0x90]
lea esi, [esp + 0xe0]
call fcn.0045723e
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0x94]
test ecx, 0x80000000
je 0x64b537
shl ecx, 1
mov edx, eax
shr eax, 0x1f
or ecx, eax
mov eax, edx
shl edx, 1
mov ebx, ecx
shl ecx, 1
shr edx, 0x1f
or edx, ecx
shr ebx, 0x1f
add edx, 0xd7b17f80
adc ebx, 0xd
jmp 0x64b545
mov edx, dword [esp + 0x98]
mov ebx, dword [esp + 0x9c]
test edx, edx
sete cl
test ebx, ebx
sete dl
and edx, ecx
test dl, dl
je 0x64b55c
test eax, 0x3fffffff
je 0x64b589
lea edi, [esp]
lea esi, [esp + 0xf4]
call fcn.0045723e
lea edi, [esp + 0x14]
lea esi, [esp + 0xe0]
call fcn.0045723e
call fcn.004939e0
movzx eax, byte [esp + 0x28]
test al, al
je 0x64b59c
lea edi, [esp + 0xe0]
lea esi, [esp + 0xf4]
call fcn.0045723e
movzx eax, byte [esp + 0x32]
mov ecx, dword [esp + 0x170]
lea edi, [esp + 0x7c]
lea esi, [esp + 0xe0]
call fcn.0045723e
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x80]
test edx, 0x80000000
je 0x64b5ef
shl edx, 1
mov ebx, ecx
shr ecx, 0x1f
or edx, ecx
mov ecx, ebx
shl ebx, 1
mov ebp, edx
shl edx, 1
shr ebx, 0x1f
or ebx, edx
shr ebp, 0x1f
add ebx, 0xd7b17f80
adc ebp, 0xd
jmp 0x64b5fd
mov ebx, dword [esp + 0x84]
mov ebp, dword [esp + 0x88]
test ebx, ebx
sete dl
test ebp, ebp
sete bl
and ebx, edx
test bl, bl
je 0x64b615
test ecx, 0x3fffffff
je 0x64b656
mov eax, dword [esp + 0x40]
mov ecx, dword [eax + 0x24]
mov dword [esp + 0x44], ecx
mov edx, dword [esp + 0x6c]
mov dword [esp], edx
lea edi, [esp + 4]
lea esi, [esp + 0xe0]
call fcn.0045723e
mov ecx, dword [esp + 0x44]
call ecx
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
test eax, eax
jne 0x64b84a
movzx eax, byte [esp + 0x32]
movzx ecx, byte [esp + 0x33]
test cl, cl
je 0x64b668
mov ecx, dword [esp + 0x174]
jmp 0x64b69b
mov ecx, dword [esp + 0x174]
mov edx, dword [ecx + 0x20]
mov ebx, dword [ecx + 0x1c]
test edx, edx
jne 0x64b68e
mov word [esp + 0x35], 0x4547
mov byte [esp + 0x37], 0x54
mov edx, 3
lea ebx, [esp + 0x35]
cmp edx, 4
jne 0x64b6ab
cmp dword [ebx], 0x44414548
jne 0x64b6ab
mov edx, dword [esp + 0x178]
mov byte [edx + 0xc8], 1
jmp 0x64b6b2
mov edx, dword [esp + 0x178]
mov ebx, dword [esp + 0x170]
movzx ebp, byte [ebx + 0x54]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x64b6c7
nop
mov byte [edx], 1
mov dword [esp], ebx
mov eax, dword [esp + 0x40]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 8], eax
call fcn.0064d4f0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x58], eax
mov ecx, dword [esp + 0x170]
mov edx, dword [ecx + 0x50]
mov ebx, dword [esp + 0x178]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.0065e5b0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x74], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x5c], edx
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x70], ebx
mov ebp, dword [esp + 0x10]
mov dword [esp + 0x60], ebp
mov esi, dword [esp + 0x170]
mov dword [esp], esi
mov edi, dword [esp + 0x58]
mov dword [esp + 4], edi
call fcn.0064d930
mov eax, dword [esp + 0x38]
test eax, eax
jne 0x64b7da
movzx eax, byte [esp + 0x34]
test al, al
jne 0x64b785
nop
mov eax, dword [esp + 0x174]
movzx eax, byte [eax + 2]
test al, al
jne 0x64b785
nop
mov eax, dword [esp + 0x178]
movzx eax, byte [eax + 2]
test al, al
jne 0x64b785
movzx eax, byte [esp + 0x32]
test al, al
je 0x64b79e
mov eax, dword [esp + 0x170]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.0064c850
jmp 0x64b7b5
mov eax, dword [esp + 0x170]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.0064cd00
mov byte [esp + 0x17c], 0
mov dword [esp + 0x180], 0
mov dword [esp + 0x184], 0
add esp, 0x16c
ret
mov eax, dword [esp + 0x170]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.0064c850
mov eax, dword [0x706ebc]
mov ecx, dword [esp + 0x74]
cmp dword [0x706eb8], ecx
je 0x64b80a
mov eax, 1
jmp 0x64b826
mov dword [esp], ecx
mov ecx, dword [esp + 0x5c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00404110
movzx eax, byte [esp + 0xc]
xor eax, 1
mov byte [esp + 0x17c], al
mov eax, dword [esp + 0x70]
mov dword [esp + 0x180], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0x184], eax
add esp, 0x16c
ret
mov dword [esp + 0x70], ecx
mov dword [esp + 0x60], edx
mov eax, dword [esp + 0x170]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.0064c850
mov byte [esp + 0x17c], 1
mov eax, dword [esp + 0x70]
mov dword [esp + 0x180], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0x184], eax
add esp, 0x16c
ret
mov dword [esp + 0x60], edx
mov dword [esp + 0x70], ecx
mov eax, dword [esp + 0x170]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.0064c850
mov byte [esp + 0x17c], 1
mov eax, dword [esp + 0x70]
mov dword [esp + 0x180], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0x184], eax
add esp, 0x16c
ret
mov byte [esp + 0x17c], 0
mov dword [esp + 0x180], edx
mov dword [esp + 0x184], ebx
add esp, 0x16c
ret
mov eax, dword [ecx]
mov dword [esp], edx
mov ebx, dword [esp + 0x178]
mov dword [esp + 4], ebx
mov edx, ecx
call eax
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov ebx, dword [esp + 8]
test ebx, ebx
setne bl
xor ebx, 1
mov byte [esp + 0x17c], bl
mov dword [esp + 0x180], eax
mov dword [esp + 0x184], ecx
add esp, 0x16c
ret
mov eax, dword [0x706eb0]
mov ecx, dword [0x706eb4]
mov byte [esp + 0x17c], 0
mov dword [esp + 0x180], eax
mov dword [esp + 0x184], ecx
add esp, 0x16c
ret
lea eax, [0x7346e0]
mov dword [esp], eax
lea eax, [0x7ca01c]
mov dword [esp + 4], eax
call fcn.00430590
lea eax, [0x7346e0]
mov dword [esp], eax
lea eax, [0x7ca014]
mov dword [esp + 4], eax
call fcn.00430590
nop
call fcn.00455690
jmp fcn.0064acc0