Function at 0x64a240
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x95eda0]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x64]
cmp eax, dword [ecx + 8]
jbe 0x64b164
sub esp, 0xe4
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
mov eax, dword [esp + 0xf0]
mov eax, dword [eax + 0x14]
test eax, eax
je 0x64a331
lea eax, [0x6b7ee0]
mov dword [esp], eax
call fcn.0040c000
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xec]
mov dword [eax + 4], ecx
mov ecx, dword [0x95f020]
test ecx, ecx
jne 0x64a2cb
mov ecx, dword [esp + 0xe8]
jmp 0x64a2d9
call fcn.004717c0
mov ecx, dword [esp + 0xe8]
mov dword [edi], ecx
mov dword [esp + 0x8c], eax
mov dword [eax], ecx
lea ecx, [0x764218]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.006491f0
lea eax, [0x764218]
mov dword [esp + 0xfc], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x100], eax
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
call fcn.00435c40
add esp, 0xe4
ret
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc8], 0
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 0
lea eax, [0x64b170]
mov dword [esp + 0xd4], eax
lea eax, [esp + 0xc4]
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0xf4]
mov ecx, dword [esp + 0xf8]
mov dword [esp + 0xdc], eax
mov dword [esp + 0xe0], ecx
lea eax, [esp + 0xd4]
mov dword [esp + 0x64], eax
lea eax, [esp + 0x58]
mov dword [esp], eax
call fcn.00435720
test eax, eax
jne 0x64aebd
mov eax, dword [esp + 0xf4]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0xf8]
mov dword [esp + 0x7c], ecx
mov edx, dword [eax + 0x54]
mov dword [esp], ecx
call edx
mov eax, dword [esp + 4]
cmp eax, 0x10
ja 0x64a5f0
cmp eax, 6
ja 0x64a4b7
cmp eax, 1
jne 0x64a44d
mov eax, dword [0x95ed58]
test eax, eax
jne 0x64a3fc
xor ecx, ecx
xor eax, eax
jmp 0x64a41d
jl 0x64a409
lea ecx, [0x93f560]
cmp dword [ecx + 4], eax
jg 0x64a40f
xor ecx, ecx
xor eax, eax
jmp 0x64a41d
mov ecx, dword [0x93f560]
lea eax, [ecx + eax*8]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0xfc], ecx
mov dword [esp + 0x100], eax
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
call fcn.00435c40
add esp, 0xe4
ret
cmp eax, 2
jb 0x64aac3
mov eax, dword [0x95ed5c]
test eax, eax
jne 0x64a466
xor ecx, ecx
xor eax, eax
jmp 0x64a487
jl 0x64a473
lea ecx, [0x93f560]
cmp dword [ecx + 4], eax
jg 0x64a479
xor ecx, ecx
xor eax, eax
jmp 0x64a487
mov ecx, dword [0x93f560]
lea eax, [ecx + eax*8]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0xfc], ecx
mov dword [esp + 0x100], eax
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
call fcn.00435c40
add esp, 0xe4
ret
cmp eax, 0xc
ja 0x64a51d
mov eax, dword [0x95ed60]
test eax, eax
jne 0x64a4cc
xor ecx, ecx
xor eax, eax
jmp 0x64a4ed
jl 0x64a4d9
lea ecx, [0x93f560]
cmp dword [ecx + 4], eax
jg 0x64a4df
xor ecx, ecx
xor eax, eax
jmp 0x64a4ed
mov ecx, dword [0x93f560]
lea eax, [ecx + eax*8]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0xfc], ecx
mov dword [esp + 0x100], eax
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
call fcn.00435c40
add esp, 0xe4
ret
lea ecx, [eax - 0xd]
cmp ecx, 1
ja 0x64a586
mov eax, dword [0x95ed64]
test eax, eax
jne 0x64a535
xor ecx, ecx
xor eax, eax
jmp 0x64a556
jl 0x64a542
lea ecx, [0x93f560]
cmp dword [ecx + 4], eax
jg 0x64a548
xor ecx, ecx
xor eax, eax
jmp 0x64a556
mov ecx, dword [0x93f560]
lea eax, [ecx + eax*8]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0xfc], ecx
mov dword [esp + 0x100], eax
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
call fcn.00435c40
add esp, 0xe4
ret
cmp eax, 0xf
jb 0x64aac3
mov eax, dword [0x95ed70]
test eax, eax
jne 0x64a59f
xor ecx, ecx
xor eax, eax
jmp 0x64a5c0
jl 0x64a5ac
lea ecx, [0x93f560]
cmp dword [ecx + 4], eax
jg 0x64a5b2
xor ecx, ecx
xor eax, eax
jmp 0x64a5c0
mov ecx, dword [0x93f560]
lea eax, [ecx + eax*8]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0xfc], ecx
mov dword [esp + 0x100], eax
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
call fcn.00435c40
add esp, 0xe4
ret
cmp eax, 0x15
ja 0x64aa4b
cmp eax, 0x11
je 0x64a89b
cmp eax, 0x14
jne 0x64a668
mov eax, dword [0x95ed74]
test eax, eax
jne 0x64a617
xor ecx, ecx
xor eax, eax
jmp 0x64a638
jl 0x64a624
lea ecx, [0x93f560]
cmp dword [ecx + 4], eax
jg 0x64a62a
xor ecx, ecx
xor eax, eax
jmp 0x64a638
mov ecx, dword [0x93f560]
lea eax, [ecx + eax*8]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0xfc], ecx
mov dword [esp + 0x100], eax
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
call fcn.00435c40
add esp, 0xe4
ret
cmp eax, 0x15
jne 0x64aac3
nop
lea eax, [0x6ca180]
mov dword [esp], eax
call fcn.0040c000
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xec]
mov dword [eax + 4], ecx
mov ecx, dword [0x95f020]
test ecx, ecx
jne 0x64a6a1
mov ecx, dword [esp + 0xe8]
jmp 0x64a6af
call fcn.004717c0
mov ecx, dword [esp + 0xe8]
mov dword [edi], ecx
mov dword [esp + 0x84], eax
mov dword [eax], ecx
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov ecx, dword [0x93eee0]
lea edx, [0x6ad2e0]
mov dword [esp], edx
mov dword [esp + 4], ecx
lea ecx, [esp + 0xf4]
mov dword [esp + 8], ecx
call fcn.004675f0
mov eax, dword [esp + 0xc]
lea ecx, [0x764258]
mov dword [eax], ecx
mov edx, dword [0x95f020]
test edx, edx
jne 0x64a708
mov edx, dword [esp + 0x84]
jmp 0x64a71c
call fcn.004717d0
mov edx, dword [esp + 0x84]
mov dword [edi], edx
mov ebx, dword [eax + 4]
mov dword [edi + 4], ebx
mov dword [eax + 4], edx
mov eax, dword [esp + 0x44]
mov ecx, dword [eax + 0x50]
mov ebx, dword [esp + 0x7c]
mov dword [esp], ebx
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.0064b300
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc8], ecx
test eax, eax
jne 0x64a86b
mov dword [esp + 0x74], ebx
mov dword [esp + 0x3c], edx
mov eax, dword [esp + 0x44]
mov eax, dword [eax + 0x2c]
mov ecx, dword [esp + 0x7c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.0064b300
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc8], ecx
test eax, eax
je 0x64a807
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], eax
mov dword [esp + 0x108], ecx
call fcn.00435c40
add esp, 0xe4
ret
mov eax, dword [esp + 0x84]
mov dword [esp], eax
mov ecx, dword [esp + 0x3c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x74]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.00649ab0
lea eax, [0x764258]
mov dword [esp + 0xfc], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 0x100], eax
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
call fcn.00435c40
add esp, 0xe4
ret
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], eax
mov dword [esp + 0x108], ecx
call fcn.00435c40
add esp, 0xe4
ret
nop
lea eax, [0x6ca100]
mov dword [esp], eax
call fcn.0040c000
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xec]
mov dword [eax + 4], ecx
mov ecx, dword [0x95f020]
test ecx, ecx
jne 0x64a8cb
mov ecx, dword [esp + 0xe8]
jmp 0x64a8d9
call fcn.004717c0
mov ecx, dword [esp + 0xe8]
mov dword [edi], ecx
mov dword [esp + 0xcc], eax
mov dword [eax], ecx
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov ecx, dword [0x93eee0]
lea edx, [0x6ad2e0]
mov dword [esp], edx
mov dword [esp + 4], ecx
lea ecx, [esp + 0xf4]
mov dword [esp + 8], ecx
call fcn.004675f0
mov eax, dword [esp + 0xc]
lea ecx, [0x764238]
mov dword [eax], ecx
mov edx, dword [0x95f020]
test edx, edx
jne 0x64a932
mov edx, dword [esp + 0xcc]
jmp 0x64a946
call fcn.004717d0
mov edx, dword [esp + 0xcc]
mov dword [edi], edx
mov ebx, dword [eax + 4]
mov dword [edi + 4], ebx
mov dword [eax + 4], edx
mov eax, dword [esp + 0x44]
mov ecx, dword [eax + 0x2c]
mov ebx, dword [esp + 0x7c]
mov dword [esp], ebx
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.0064b300
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc8], ecx
test eax, eax
je 0x64a9cf
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], eax
mov dword [esp + 0x108], ecx
call fcn.00435c40
add esp, 0xe4
ret
mov dword [esp + 0x74], ebx
mov dword [esp + 0x3c], edx
mov eax, dword [esp + 0x44]
mov eax, dword [eax + 0x58]
mov ecx, dword [esp + 0x7c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xcc]
mov dword [esp], ecx
mov edx, dword [esp + 0x3c]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x74]
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
call fcn.00649810
lea eax, [0x764238]
mov dword [esp + 0xfc], eax
mov eax, dword [esp + 0xcc]
mov dword [esp + 0x100], eax
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
call fcn.00435c40
add esp, 0xe4
ret
cmp eax, 0x17
je 0x64ac8d
cmp eax, 0x18
jne 0x64aaba
mov eax, dword [0x95ed6c]
test eax, eax
jne 0x64aa69
xor ecx, ecx
xor eax, eax
jmp 0x64aa8a
jl 0x64aa76
lea ecx, [0x93f560]
cmp dword [ecx + 4], eax
jg 0x64aa7c
xor ecx, ecx
xor eax, eax
jmp 0x64aa8a
mov ecx, dword [0x93f560]
lea eax, [ecx + eax*8]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0xfc], ecx
mov dword [esp + 0x100], eax
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
call fcn.00435c40
add esp, 0xe4
ret
cmp eax, 0x19
je 0x64ab86
mov eax, dword [esp + 0xf4]
mov ecx, dword [esp + 0xf8]
mov eax, dword [eax + 0x94]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x708226]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x25
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.00450a00
mov eax, dword [esp + 0x18]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x78], ecx
lea edx, [0x6b6b60]
mov dword [esp], edx
call fcn.0040c000
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x40]
mov dword [eax + 4], ecx
mov ecx, dword [0x95f020]
test ecx, ecx
jne 0x64ab43
mov ecx, dword [esp + 0x78]
jmp 0x64ab4e
call fcn.004717c0
mov ecx, dword [esp + 0x78]
mov dword [edi], ecx
mov dword [eax], ecx
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
lea ecx, [0x762e24]
mov dword [esp + 0x104], ecx
mov dword [esp + 0x108], eax
call fcn.00435c40
add esp, 0xe4
ret
nop
lea eax, [0x6c0a80]
mov dword [esp], eax
call fcn.0040c000
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xec]
mov dword [eax + 4], ecx
mov ecx, dword [0x95f020]
test ecx, ecx
jne 0x64abb6
mov ecx, dword [esp + 0xe8]
jmp 0x64abc4
call fcn.004717c0
mov ecx, dword [esp + 0xe8]
mov dword [edi], ecx
mov dword [esp + 0x80], eax
mov dword [eax], ecx
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax + 0xc], 0
lea ecx, [0x764298]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.006491f0
mov eax, dword [0x93eee0]
lea ecx, [0x6ad2e0]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [esp + 0xf4]
mov dword [esp + 8], eax
call fcn.004675f0
mov eax, dword [esp + 0xc]
lea ecx, [0x764298]
mov dword [eax], ecx
mov edx, dword [0x95f020]
test edx, edx
jne 0x64ac36
mov edx, dword [esp + 0x80]
jmp 0x64ac4a
call fcn.004717d0
mov edx, dword [esp + 0x80]
mov dword [edi], edx
mov ebx, dword [eax + 4]
mov dword [edi + 4], ebx
mov dword [eax + 4], edx
mov ebx, dword [0x93f564]
mov eax, dword [edx + 8]
cmp eax, ebx
jae 0x64b15c
mov ebx, dword [0x93f560]
lea ebp, [ebx + eax*8]
mov dword [ebp], ecx
mov ebp, dword [0x95f020]
lea eax, [ebx + eax*8 + 4]
test ebp, ebp
je 0x64ac84
call fcn.004717d0
mov dword [edi], edx
mov ebx, dword [eax]
mov dword [edi + 4], ebx
mov dword [eax], edx
xor eax, eax
jmp 0x64aed0
mov eax, dword [esp + 0x44]
mov ecx, dword [eax + 0x2c]
mov edx, dword [esp + 0x7c]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x54]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
jne 0x64ad15
mov eax, dword [0x95ed68]
test eax, eax
jne 0x64acc4
xor ecx, ecx
xor eax, eax
jmp 0x64ace5
jl 0x64acd1
lea ecx, [0x93f560]
cmp dword [ecx + 4], eax
jg 0x64acd7
xor ecx, ecx
xor eax, eax
jmp 0x64ace5
mov ecx, dword [0x93f560]
lea eax, [ecx + eax*8]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0xfc], ecx
mov dword [esp + 0x100], eax
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
call fcn.00435c40
add esp, 0xe4
ret
nop
lea eax, [0x6c09c0]
mov dword [esp], eax
call fcn.0040c000
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xec]
mov dword [eax + 4], ecx
mov ecx, dword [0x95f020]
test ecx, ecx
jne 0x64ad45
mov ecx, dword [esp + 0xe8]
jmp 0x64ad53
call fcn.004717c0
mov ecx, dword [esp + 0xe8]
mov dword [edi], ecx
mov dword [esp + 0x70], eax
mov dword [eax], ecx
mov dword [eax + 0xc], 0
mov ecx, dword [0x93eee0]
lea edx, [0x6ad2e0]
mov dword [esp], edx
mov dword [esp + 4], ecx
lea ecx, [esp + 0xf4]
mov dword [esp + 8], ecx
call fcn.004675f0
mov eax, dword [esp + 0xc]
lea ecx, [0x764278]
mov dword [eax], ecx
mov edx, dword [0x95f020]
test edx, edx
jne 0x64ad9f
mov edx, dword [esp + 0x70]
jmp 0x64adb0
call fcn.004717d0
mov edx, dword [esp + 0x70]
mov dword [edi], edx
mov ebx, dword [eax + 4]
mov dword [edi + 4], ebx
mov dword [eax + 4], edx
mov eax, dword [esp + 0x44]
mov ecx, dword [eax + 0x2c]
mov ebx, dword [esp + 0x7c]
mov dword [esp], ebx
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x64]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov dword [esp + 0xd0], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 0x44]
mov edx, dword [edx + 0x2c]
mov ebx, dword [esp + 0x7c]
mov dword [esp], ebx
call edx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xd0]
mov dword [esp], edx
mov edx, dword [esp + 0x54]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.0064b300
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc8], ecx
test eax, eax
je 0x64ae6f
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], eax
mov dword [esp + 0x108], ecx
call fcn.00435c40
add esp, 0xe4
ret
mov eax, dword [esp + 0x70]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.00649d50
lea eax, [0x764278]
mov dword [esp + 0xfc], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0x100], eax
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
call fcn.00435c40
add esp, 0xe4
ret
call fcn.00435c40
add esp, 0xe4
ret
mov ecx, dword [esp + 0x48]
inc ecx
mov eax, ecx
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0x44]
mov edx, dword [ecx + 0x68]
mov ebx, dword [esp + 0x7c]
mov dword [esp], ebx
call edx
mov eax, dword [esp + 0x48]
cmp dword [esp + 4], eax
jle 0x64b11f
mov ecx, dword [esp + 0x44]
mov edx, dword [ecx + 0x30]
mov ebx, dword [esp + 0x7c]
mov dword [esp], ebx
mov dword [esp + 4], eax
call edx
lea edi, [esp + 0x90]
lea esi, [esp + 8]
call fcn.00471eee
lea eax, [esp + 0x90]
mov dword [esp], eax
call fcn.0064b230
movzx eax, byte [esp + 4]
test al, al
jne 0x64af37
mov eax, dword [esp + 0x80]
jmp 0x64aec9
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0xa4]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00649170
mov eax, dword [esp + 8]
mov ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x64]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
test eax, eax
jne 0x64afa6
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0xa4]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00649170
mov eax, dword [esp + 8]
mov ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
mov eax, dword [eax + 0x94]
mov dword [esp], ecx
call eax
mov ecx, dword [esp + 4]
mov eax, dword [esp + 8]
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0xa4]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call fcn.0064b300
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x64b0eb
mov eax, dword [esp + 0x10]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x88], ecx
mov edx, dword [eax + 0xc]
mov dword [esp], ecx
call edx
mov eax, dword [esp + 4]
test eax, eax
jne 0x64b00e
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
mov ecx, dword [esp + 0x88]
mov dword [esp + 4], ecx
call fcn.006491f0
mov eax, dword [esp + 0x4c]
mov eax, dword [eax + 0xc]
mov ecx, dword [esp + 0x88]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 0x80]
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0x10]
inc edx
mov ebx, dword [eax + 0xc]
mov ebp, dword [esp + 0x90]
mov esi, dword [esp + 0x94]
mov edi, dword [esp + 4]
cmp ecx, edx
jae 0x64b0bc
mov dword [esp + 0x50], edi
mov dword [esp + 0xd0], ebp
mov dword [esp + 0x54], esi
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
lea eax, [0x6c0a20]
mov dword [esp + 0x10], eax
call fcn.0046c6b0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x80]
mov dword [ebx + 0x14], eax
mov eax, dword [0x95f020]
test eax, eax
je 0x64b0a6
call fcn.004717d0
mov dword [edi], ecx
mov eax, dword [ebx + 0xc]
mov dword [edi + 4], eax
mov dword [ebx + 0xc], ecx
mov eax, ebx
mov ebp, dword [esp + 0xd0]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x50]
mov ebx, ecx
mov dword [eax + 0x10], edx
lea ecx, [edx + edx*2]
mov dword [ebx + ecx*4 - 8], esi
mov dword [ebx + ecx*4 - 4], edi
mov edx, dword [0x95f020]
test edx, edx
je 0x64b0e2
call fcn.004717d0
mov dword [edi], ebp
mov edx, dword [ebx + ecx*4 - 0xc]
mov dword [edi + 4], edx
mov dword [ebx + ecx*4 - 0xc], ebp
jmp 0x64aec9
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], eax
mov dword [esp + 0x108], ecx
call fcn.00435c40
add esp, 0xe4
ret
lea eax, [0x764298]
mov dword [esp + 0xfc], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x100], eax
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
call fcn.00435c40
add esp, 0xe4
ret
mov ecx, ebx
call fcn.00471840
nop
call fcn.004703c0
jmp fcn.0064a240