Function at 0x64b190
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xac]
cmp eax, dword [ecx + 8]
jbe 0x64d528
sub esp, 0x12c
mov ecx, dword [esp + 0x130]
mov edx, dword [ecx]
mov ebx, dword [ecx + 4]
mov ebp, dword [ecx + 8]
test edx, edx
jne 0x64d31f
lea edi, [esp + 0xd4]
xor eax, eax
call fcn.00464655
mov ecx, dword [esp + 0x130]
mov edx, dword [ecx + 0x44]
test edx, edx
je 0x64b3a9
nop
mov word [esp + 0x46], 0
mov edx, dword [esp + 0xd4]
test edx, edx
je 0x64b209
lea ebx, [esp + 0xd4]
jmp 0x64b356
mov edx, dword [esp + 0xec]
test edx, edx
jne 0x64d50f
mov edx, dword [esp + 0xe0]
add edx, 2
cmp edx, 2
jge 0x64b265
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7c63d4]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [esp + 0xe8]
test dl, dl
je 0x64b2cf
mov edx, dword [esp + 0xe0]
add edx, 2
lea ebx, [esp + 0xd4]
cmp dword [ebx + 0x10], edx
jge 0x64b2d6
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x7d4be3]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
mov ecx, dword [esp + 0x130]
lea ebx, [esp + 0xd4]
jmp 0x64b356
lea ebx, [esp + 0xd4]
mov edx, dword [esp + 0xe0]
lea ebp, [edx + 2]
mov esi, dword [esp + 0xe4]
mov edi, dword [esp + 0xdc]
cmp esi, ebp
jae 0x64b338
mov dword [esp + 0x50], edx
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x758ec0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0x50]
lea ebx, [esp + 0xd4]
movzx eax, word [esp + 0x46]
mov word [edi + edx], ax
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xe4], esi
mov dword [esp + 0xdc], edi
mov dword [esp + 0xb8], 0
mov dword [esp + 0xbc], 0
lea eax, [0x650160]
mov dword [esp + 0xb8], eax
mov dword [esp + 0xbc], ecx
mov dword [esp], ebx
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0xb8]
mov dword [esp + 0xc], eax
call fcn.005be4a0
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [ecx + 0x48]
test dl, dl
je 0x64b547
nop
mov word [esp + 0x44], 0
mov byte [esp + 0x45], 5
mov edx, dword [esp + 0xd4]
test edx, edx
je 0x64b3d9
lea ebx, [esp + 0xd4]
jmp 0x64b51f
mov edx, dword [esp + 0xec]
test edx, edx
jne 0x64d4f7
mov edx, dword [esp + 0xe0]
add edx, 2
cmp edx, 2
jge 0x64b435
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7c63d4]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [esp + 0xe8]
test dl, dl
je 0x64b498
mov edx, dword [esp + 0xe0]
add edx, 2
lea ebx, [esp + 0xd4]
cmp dword [ebx + 0x10], edx
jge 0x64b49f
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x7d4be3]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
lea ebx, [esp + 0xd4]
jmp 0x64b51f
lea ebx, [esp + 0xd4]
mov edx, dword [esp + 0xe0]
lea ebp, [edx + 2]
mov esi, dword [esp + 0xe4]
mov edi, dword [esp + 0xdc]
cmp esi, ebp
jae 0x64b501
mov dword [esp + 0x50], edx
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x758ec0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0x50]
lea ebx, [esp + 0xd4]
movzx eax, word [esp + 0x44]
mov word [edi + edx], ax
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xe4], esi
mov dword [esp + 0xdc], edi
mov dword [esp], ebx
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [0x7e0664]
mov dword [esp + 0xc], eax
call fcn.005be4a0
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [ecx + 0x50]
test edx, edx
je 0x64b716
nop
mov word [esp + 0x42], 0
mov byte [esp + 0x43], 0xa
mov edx, dword [esp + 0xd4]
test edx, edx
je 0x64b576
lea ebx, [esp + 0xd4]
jmp 0x64b6c3
mov edx, dword [esp + 0xec]
test edx, edx
jne 0x64d4df
mov edx, dword [esp + 0xe0]
add edx, 2
cmp edx, 2
jge 0x64b5d2
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7c63d4]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [esp + 0xe8]
test dl, dl
je 0x64b63c
mov edx, dword [esp + 0xe0]
add edx, 2
lea ebx, [esp + 0xd4]
cmp dword [ebx + 0x10], edx
jge 0x64b643
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x7d4be3]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
mov ecx, dword [esp + 0x130]
lea ebx, [esp + 0xd4]
jmp 0x64b6c3
lea ebx, [esp + 0xd4]
mov edx, dword [esp + 0xe0]
lea ebp, [edx + 2]
mov esi, dword [esp + 0xe4]
mov edi, dword [esp + 0xdc]
cmp esi, ebp
jae 0x64b6a5
mov dword [esp + 0x50], edx
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x758ec0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0x50]
lea ebx, [esp + 0xd4]
movzx eax, word [esp + 0x42]
mov word [edi + edx], ax
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xe4], esi
mov dword [esp + 0xdc], edi
mov dword [esp + 0xb0], 0
mov dword [esp + 0xb4], 0
lea eax, [0x64fef0]
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], ecx
mov dword [esp], ebx
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0xb0]
mov dword [esp + 0xc], eax
call fcn.005be4a0
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [ecx + 0x5c]
test edx, edx
je 0x64b8e5
nop
mov word [esp + 0x40], 0
mov byte [esp + 0x41], 0xb
mov edx, dword [esp + 0xd4]
test edx, edx
je 0x64b745
lea ebx, [esp + 0xd4]
jmp 0x64b892
mov edx, dword [esp + 0xec]
test edx, edx
jne 0x64d4c7
mov edx, dword [esp + 0xe0]
add edx, 2
cmp edx, 2
jge 0x64b7a1
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7c63d4]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [esp + 0xe8]
test dl, dl
je 0x64b80b
mov edx, dword [esp + 0xe0]
add edx, 2
lea ebx, [esp + 0xd4]
cmp dword [ebx + 0x10], edx
jge 0x64b812
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x7d4be3]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
mov ecx, dword [esp + 0x130]
lea ebx, [esp + 0xd4]
jmp 0x64b892
lea ebx, [esp + 0xd4]
mov edx, dword [esp + 0xe0]
lea ebp, [edx + 2]
mov esi, dword [esp + 0xe4]
mov edi, dword [esp + 0xdc]
cmp esi, ebp
jae 0x64b874
mov dword [esp + 0x50], edx
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x758ec0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0x50]
lea ebx, [esp + 0xd4]
movzx eax, word [esp + 0x40]
mov word [edi + edx], ax
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xe4], esi
mov dword [esp + 0xdc], edi
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
lea eax, [0x64fcc0]
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], ecx
mov dword [esp], ebx
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0xa8]
mov dword [esp + 0xc], eax
call fcn.005be4a0
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [ecx + 0x64]
test dl, dl
je 0x64bab5
nop
mov word [esp + 0x3e], 0
mov byte [esp + 0x3f], 0x23
mov edx, dword [esp + 0xd4]
test edx, edx
je 0x64b915
lea ebx, [esp + 0xd4]
jmp 0x64ba62
mov edx, dword [esp + 0xec]
test edx, edx
jne 0x64d4af
mov edx, dword [esp + 0xe0]
add edx, 2
cmp edx, 2
jge 0x64b971
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7c63d4]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [esp + 0xe8]
test dl, dl
je 0x64b9db
mov edx, dword [esp + 0xe0]
add edx, 2
lea ebx, [esp + 0xd4]
cmp dword [ebx + 0x10], edx
jge 0x64b9e2
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x7d4be3]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
mov ecx, dword [esp + 0x130]
lea ebx, [esp + 0xd4]
jmp 0x64ba62
lea ebx, [esp + 0xd4]
mov edx, dword [esp + 0xe0]
lea ebp, [edx + 2]
mov esi, dword [esp + 0xe4]
mov edi, dword [esp + 0xdc]
cmp esi, ebp
jae 0x64ba44
mov dword [esp + 0x50], edx
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x758ec0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0x50]
lea ebx, [esp + 0xd4]
movzx eax, word [esp + 0x3e]
mov word [edi + edx], ax
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xe4], esi
mov dword [esp + 0xdc], edi
mov dword [esp + 0xa0], 0
mov dword [esp + 0xa4], 0
lea eax, [0x64fb00]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], ecx
mov dword [esp], ebx
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0xa0]
mov dword [esp + 0xc], eax
call fcn.005be4a0
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [ecx + 0x78]
test edx, edx
je 0x64bc84
nop
mov word [esp + 0x3c], 0
mov byte [esp + 0x3d], 0xd
mov edx, dword [esp + 0xd4]
test edx, edx
je 0x64bae4
lea ebx, [esp + 0xd4]
jmp 0x64bc31
mov edx, dword [esp + 0xec]
test edx, edx
jne 0x64d497
mov edx, dword [esp + 0xe0]
add edx, 2
cmp edx, 2
jge 0x64bb40
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7c63d4]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [esp + 0xe8]
test dl, dl
je 0x64bbaa
mov edx, dword [esp + 0xe0]
add edx, 2
lea ebx, [esp + 0xd4]
cmp dword [ebx + 0x10], edx
jge 0x64bbb1
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x7d4be3]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
mov ecx, dword [esp + 0x130]
lea ebx, [esp + 0xd4]
jmp 0x64bc31
lea ebx, [esp + 0xd4]
mov edx, dword [esp + 0xe0]
lea ebp, [edx + 2]
mov esi, dword [esp + 0xe4]
mov edi, dword [esp + 0xdc]
cmp esi, ebp
jae 0x64bc13
mov dword [esp + 0x50], edx
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x758ec0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0x50]
lea ebx, [esp + 0xd4]
movzx eax, word [esp + 0x3c]
mov word [edi + edx], ax
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xe4], esi
mov dword [esp + 0xdc], edi
mov dword [esp + 0x98], 0
mov dword [esp + 0x9c], 0
lea eax, [0x64f890]
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], ecx
mov dword [esp], ebx
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x98]
mov dword [esp + 0xc], eax
call fcn.005be4a0
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [ecx + 0x84]
test edx, edx
je 0x64be56
nop
mov word [esp + 0x3a], 0
mov byte [esp + 0x3b], 0x32
mov edx, dword [esp + 0xd4]
test edx, edx
je 0x64bcb6
lea ebx, [esp + 0xd4]
jmp 0x64be03
mov edx, dword [esp + 0xec]
test edx, edx
jne 0x64d47f
mov edx, dword [esp + 0xe0]
add edx, 2
cmp edx, 2
jge 0x64bd12
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7c63d4]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [esp + 0xe8]
test dl, dl
je 0x64bd7c
mov edx, dword [esp + 0xe0]
add edx, 2
lea ebx, [esp + 0xd4]
cmp dword [ebx + 0x10], edx
jge 0x64bd83
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x7d4be3]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
mov ecx, dword [esp + 0x130]
lea ebx, [esp + 0xd4]
jmp 0x64be03
lea ebx, [esp + 0xd4]
mov edx, dword [esp + 0xe0]
lea ebp, [edx + 2]
mov esi, dword [esp + 0xe4]
mov edi, dword [esp + 0xdc]
cmp esi, ebp
jae 0x64bde5
mov dword [esp + 0x50], edx
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x758ec0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0x50]
lea ebx, [esp + 0xd4]
movzx eax, word [esp + 0x3a]
mov word [edi + edx], ax
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xe4], esi
mov dword [esp + 0xdc], edi
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 0
lea eax, [0x64f620]
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], ecx
mov dword [esp], ebx
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x90]
mov dword [esp + 0xc], eax
call fcn.005be4a0
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [ecx + 0x8c]
test dl, dl
je 0x64c02b
nop
mov word [esp + 0x38], 0
mov word [esp + 0x38], 0x1ff
mov edx, dword [esp + 0xd4]
test edx, edx
je 0x64be8b
lea ebx, [esp + 0xd4]
jmp 0x64bfd8
mov edx, dword [esp + 0xec]
test edx, edx
jne 0x64d467
mov edx, dword [esp + 0xe0]
add edx, 2
cmp edx, 2
jge 0x64bee7
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7c63d4]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [esp + 0xe8]
test dl, dl
je 0x64bf51
mov edx, dword [esp + 0xe0]
add edx, 2
lea ebx, [esp + 0xd4]
cmp dword [ebx + 0x10], edx
jge 0x64bf58
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x7d4be3]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
mov ecx, dword [esp + 0x130]
lea ebx, [esp + 0xd4]
jmp 0x64bfd8
lea ebx, [esp + 0xd4]
mov edx, dword [esp + 0xe0]
lea ebp, [edx + 2]
mov esi, dword [esp + 0xe4]
mov edi, dword [esp + 0xdc]
cmp esi, ebp
jae 0x64bfba
mov dword [esp + 0x50], edx
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x758ec0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0x50]
lea ebx, [esp + 0xd4]
movzx eax, word [esp + 0x38]
mov word [edi + edx], ax
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xe4], esi
mov dword [esp + 0xdc], edi
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 0
lea eax, [0x64f3f0]
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], ecx
mov dword [esp], ebx
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x88]
mov dword [esp + 0xc], eax
call fcn.005be4a0
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [ecx + 0xa0]
test edx, edx
je 0x64c1fd
nop
mov word [esp + 0x36], 0
mov byte [esp + 0x37], 0x10
mov edx, dword [esp + 0xd4]
test edx, edx
je 0x64c05d
lea ebx, [esp + 0xd4]
jmp 0x64c1aa
mov edx, dword [esp + 0xec]
test edx, edx
jne 0x64d44f
mov edx, dword [esp + 0xe0]
add edx, 2
cmp edx, 2
jge 0x64c0b9
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7c63d4]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [esp + 0xe8]
test dl, dl
je 0x64c123
mov edx, dword [esp + 0xe0]
add edx, 2
lea ebx, [esp + 0xd4]
cmp dword [ebx + 0x10], edx
jge 0x64c12a
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x7d4be3]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
mov ecx, dword [esp + 0x130]
lea ebx, [esp + 0xd4]
jmp 0x64c1aa
lea ebx, [esp + 0xd4]
mov edx, dword [esp + 0xe0]
lea ebp, [edx + 2]
mov esi, dword [esp + 0xe4]
mov edi, dword [esp + 0xdc]
cmp esi, ebp
jae 0x64c18c
mov dword [esp + 0x50], edx
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x758ec0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0x50]
lea ebx, [esp + 0xd4]
movzx eax, word [esp + 0x36]
mov word [edi + edx], ax
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xe4], esi
mov dword [esp + 0xdc], edi
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], 0
lea eax, [0x64f0f0]
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], ecx
mov dword [esp], ebx
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x80]
mov dword [esp + 0xc], eax
call fcn.005be4a0
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [ecx + 0xa8]
test dl, dl
je 0x64c4c5
nop
mov word [esp + 0x34], 0
mov byte [esp + 0x35], 0x12
mov edx, dword [esp + 0xd4]
test edx, edx
jne 0x64c36b
mov edx, dword [esp + 0xec]
test edx, edx
jne 0x64d437
mov edx, dword [esp + 0xe0]
add edx, 2
cmp edx, 2
jge 0x64c284
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7c63d4]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [esp + 0xe8]
test dl, dl
je 0x64c2e9
mov edx, dword [esp + 0xe0]
add edx, 2
lea ebx, [esp + 0xd4]
cmp dword [ebx + 0x10], edx
jge 0x64c2f0
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x7d4be3]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov ecx, dword [esp + 0x130]
jmp 0x64c36b
lea ebx, [esp + 0xd4]
mov edx, dword [esp + 0xe0]
lea ebp, [edx + 2]
mov esi, dword [esp + 0xe4]
mov ebx, dword [esp + 0xdc]
cmp esi, ebp
jae 0x64c34b
mov dword [esp + 0x50], edx
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x758ec0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0x50]
mov edi, esi
movzx esi, word [esp + 0x34]
mov word [ebx + edx], si
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xe4], edi
mov dword [esp + 0xdc], ebx
nop
mov word [esp + 0x32], 0
mov edx, dword [esp + 0xd4]
test edx, edx
jne 0x64c4c5
mov edx, dword [esp + 0xec]
test edx, edx
jne 0x64d41f
mov edx, dword [esp + 0xe0]
add edx, 2
cmp edx, 2
jge 0x64c3de
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7c63d4]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [esp + 0xe8]
test dl, dl
je 0x64c443
mov edx, dword [esp + 0xe0]
add edx, 2
lea ebx, [esp + 0xd4]
cmp dword [ebx + 0x10], edx
jge 0x64c44a
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x7d4be3]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov ecx, dword [esp + 0x130]
jmp 0x64c4c5
lea ebx, [esp + 0xd4]
mov edx, dword [esp + 0xe0]
lea ebp, [edx + 2]
mov esi, dword [esp + 0xe4]
mov ebx, dword [esp + 0xdc]
cmp esi, ebp
jae 0x64c4a5
mov dword [esp + 0x50], edx
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x758ec0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0x50]
mov edi, esi
movzx esi, word [esp + 0x32]
mov word [ebx + edx], si
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xe4], edi
mov dword [esp + 0xdc], ebx
mov edx, dword [ecx + 0xb0]
test edx, edx
je 0x64c688
nop
mov word [esp + 0x30], 0
mov byte [esp + 0x31], 0x2b
mov edx, dword [esp + 0xd4]
test edx, edx
je 0x64c4f7
lea ebx, [esp + 0xd4]
jmp 0x64c644
mov edx, dword [esp + 0xec]
test edx, edx
jne 0x64d407
mov edx, dword [esp + 0xe0]
add edx, 2
cmp edx, 2
jge 0x64c553
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7c63d4]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [esp + 0xe8]
test dl, dl
je 0x64c5bd
mov edx, dword [esp + 0xe0]
add edx, 2
lea ebx, [esp + 0xd4]
cmp dword [ebx + 0x10], edx
jge 0x64c5c4
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x7d4be3]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
mov ecx, dword [esp + 0x130]
lea ebx, [esp + 0xd4]
jmp 0x64c644
lea ebx, [esp + 0xd4]
mov edx, dword [esp + 0xe0]
lea ebp, [edx + 2]
mov esi, dword [esp + 0xe4]
mov edi, dword [esp + 0xdc]
cmp esi, ebp
jae 0x64c626
mov dword [esp + 0x50], edx
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x758ec0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0x50]
lea ebx, [esp + 0xd4]
movzx eax, word [esp + 0x30]
mov word [edi + edx], ax
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xe4], esi
mov dword [esp + 0xdc], edi
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
lea eax, [0x64ee80]
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], ecx
mov dword [esp], ebx
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x78]
mov dword [esp + 0xc], eax
call fcn.005be4a0
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [ecx + 0xbc]
test edx, edx
je 0x64c84b
nop
mov word [esp + 0x2e], 0
mov byte [esp + 0x2f], 0x2c
mov edx, dword [esp + 0xd4]
test edx, edx
je 0x64c6ba
lea ebx, [esp + 0xd4]
jmp 0x64c807
mov edx, dword [esp + 0xec]
test edx, edx
jne 0x64d3ef
mov edx, dword [esp + 0xe0]
add edx, 2
cmp edx, 2
jge 0x64c716
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7c63d4]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [esp + 0xe8]
test dl, dl
je 0x64c780
mov edx, dword [esp + 0xe0]
add edx, 2
lea ebx, [esp + 0xd4]
cmp dword [ebx + 0x10], edx
jge 0x64c787
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x7d4be3]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
mov ecx, dword [esp + 0x130]
lea ebx, [esp + 0xd4]
jmp 0x64c807
lea ebx, [esp + 0xd4]
mov edx, dword [esp + 0xe0]
lea ebp, [edx + 2]
mov esi, dword [esp + 0xe4]
mov edi, dword [esp + 0xdc]
cmp esi, ebp
jae 0x64c7e9
mov dword [esp + 0x50], edx
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x758ec0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0x50]
lea ebx, [esp + 0xd4]
movzx eax, word [esp + 0x2e]
mov word [edi + edx], ax
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xe4], esi
mov dword [esp + 0xdc], edi
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
lea eax, [0x64ec50]
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], ecx
mov dword [esp], ebx
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x70]
mov dword [esp + 0xc], eax
call fcn.005be4a0
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [ecx + 0xc8]
test edx, edx
je 0x64ca0e
nop
mov word [esp + 0x2c], 0
mov byte [esp + 0x2d], 0x33
mov edx, dword [esp + 0xd4]
test edx, edx
je 0x64c87d
lea ebx, [esp + 0xd4]
jmp 0x64c9ca
mov edx, dword [esp + 0xec]
test edx, edx
jne 0x64d3d7
mov edx, dword [esp + 0xe0]
add edx, 2
cmp edx, 2
jge 0x64c8d9
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7c63d4]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [esp + 0xe8]
test dl, dl
je 0x64c943
mov edx, dword [esp + 0xe0]
add edx, 2
lea ebx, [esp + 0xd4]
cmp dword [ebx + 0x10], edx
jge 0x64c94a
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x7d4be3]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
mov ecx, dword [esp + 0x130]
lea ebx, [esp + 0xd4]
jmp 0x64c9ca
lea ebx, [esp + 0xd4]
mov edx, dword [esp + 0xe0]
lea ebp, [edx + 2]
mov esi, dword [esp + 0xe4]
mov edi, dword [esp + 0xdc]
cmp esi, ebp
jae 0x64c9ac
mov dword [esp + 0x50], edx
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x758ec0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0x50]
lea ebx, [esp + 0xd4]
movzx eax, word [esp + 0x2c]
mov word [edi + edx], ax
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xe4], esi
mov dword [esp + 0xdc], edi
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0
lea eax, [0x64e7c0]
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], ecx
mov dword [esp], ebx
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x68]
mov dword [esp + 0xc], eax
call fcn.005be4a0
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [ecx + 0xd0]
test dl, dl
je 0x64ccd6
nop
mov word [esp + 0x2a], 0
mov byte [esp + 0x2b], 0x2a
mov edx, dword [esp + 0xd4]
test edx, edx
jne 0x64cb7c
mov edx, dword [esp + 0xec]
test edx, edx
jne 0x64d3bf
mov edx, dword [esp + 0xe0]
add edx, 2
cmp edx, 2
jge 0x64ca95
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7c63d4]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [esp + 0xe8]
test dl, dl
je 0x64cafa
mov edx, dword [esp + 0xe0]
add edx, 2
lea ebx, [esp + 0xd4]
cmp dword [ebx + 0x10], edx
jge 0x64cb01
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x7d4be3]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov ecx, dword [esp + 0x130]
jmp 0x64cb7c
lea ebx, [esp + 0xd4]
mov edx, dword [esp + 0xe0]
lea ebp, [edx + 2]
mov esi, dword [esp + 0xe4]
mov ebx, dword [esp + 0xdc]
cmp esi, ebp
jae 0x64cb5c
mov dword [esp + 0x50], edx
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x758ec0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0x50]
mov edi, esi
movzx esi, word [esp + 0x2a]
mov word [ebx + edx], si
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xe4], edi
mov dword [esp + 0xdc], ebx
nop
mov word [esp + 0x28], 0
mov edx, dword [esp + 0xd4]
test edx, edx
jne 0x64ccd6
mov edx, dword [esp + 0xec]
test edx, edx
jne 0x64d3a7
mov edx, dword [esp + 0xe0]
add edx, 2
cmp edx, 2
jge 0x64cbef
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7c63d4]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [esp + 0xe8]
test dl, dl
je 0x64cc54
mov edx, dword [esp + 0xe0]
add edx, 2
lea ebx, [esp + 0xd4]
cmp dword [ebx + 0x10], edx
jge 0x64cc5b
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x7d4be3]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov ecx, dword [esp + 0x130]
jmp 0x64ccd6
lea ebx, [esp + 0xd4]
mov edx, dword [esp + 0xe0]
lea ebp, [edx + 2]
mov esi, dword [esp + 0xe4]
mov ebx, dword [esp + 0xdc]
cmp esi, ebp
jae 0x64ccb6
mov dword [esp + 0x50], edx
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x758ec0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0x50]
mov edi, esi
movzx esi, word [esp + 0x28]
mov word [ebx + edx], si
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xe4], edi
mov dword [esp + 0xdc], ebx
mov edx, dword [ecx + 0xd8]
test edx, edx
je 0x64ce99
nop
mov word [esp + 0x26], 0
mov byte [esp + 0x27], 0x2d
mov edx, dword [esp + 0xd4]
test edx, edx
je 0x64cd08
lea ebx, [esp + 0xd4]
jmp 0x64ce55
mov edx, dword [esp + 0xec]
test edx, edx
jne 0x64d38f
mov edx, dword [esp + 0xe0]
add edx, 2
cmp edx, 2
jge 0x64cd64
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7c63d4]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [esp + 0xe8]
test dl, dl
je 0x64cdce
mov edx, dword [esp + 0xe0]
add edx, 2
lea ebx, [esp + 0xd4]
cmp dword [ebx + 0x10], edx
jge 0x64cdd5
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x7d4be3]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
mov ecx, dword [esp + 0x130]
lea ebx, [esp + 0xd4]
jmp 0x64ce55
lea ebx, [esp + 0xd4]
mov edx, dword [esp + 0xe0]
lea ebp, [edx + 2]
mov esi, dword [esp + 0xe4]
mov edi, dword [esp + 0xdc]
cmp esi, ebp
jae 0x64ce37
mov dword [esp + 0x50], edx
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x758ec0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0x50]
lea ebx, [esp + 0xd4]
movzx eax, word [esp + 0x26]
mov word [edi + edx], ax
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xe4], esi
mov dword [esp + 0xdc], edi
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0
lea eax, [0x64e590]
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], ecx
mov dword [esp], ebx
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x60]
mov dword [esp + 0xc], eax
call fcn.005be4a0
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [ecx + 0xe4]
test edx, edx
je 0x64d05c
nop
mov word [esp + 0x24], 0
mov byte [esp + 0x25], 0x29
mov edx, dword [esp + 0xd4]
test edx, edx
je 0x64cecb
lea ebx, [esp + 0xd4]
jmp 0x64d018
mov edx, dword [esp + 0xec]
test edx, edx
jne 0x64d377
mov edx, dword [esp + 0xe0]
add edx, 2
cmp edx, 2
jge 0x64cf27
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1b
lea ecx, [0x7c63d4]
mov dword [eax], ecx
lea ecx, [0x844124]
mov dword [esp + 0xd4], ecx
mov dword [esp + 0xd8], eax
xor eax, eax
mov ecx, dword [esp + 0x130]
movzx edx, byte [esp + 0xe8]
test dl, dl
je 0x64cf91
mov edx, dword [esp + 0xe0]
add edx, 2
lea ebx, [esp + 0xd4]
cmp dword [ebx + 0x10], edx
jge 0x64cf98
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x7d4be3]
mov dword [eax], ecx
lea edx, [0x844124]
mov dword [esp + 0xd4], edx
mov dword [esp + 0xd8], eax
mov ecx, dword [esp + 0x130]
lea ebx, [esp + 0xd4]
jmp 0x64d018
lea ebx, [esp + 0xd4]
mov edx, dword [esp + 0xe0]
lea ebp, [edx + 2]
mov esi, dword [esp + 0xe4]
mov edi, dword [esp + 0xdc]
cmp esi, ebp
jae 0x64cffa
mov dword [esp + 0x50], edx
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov dword [esp + 0xc], 2
lea eax, [0x758ec0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0x50]
lea ebx, [esp + 0xd4]
movzx eax, word [esp + 0x24]
mov word [edi + edx], ax
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xe4], esi
mov dword [esp + 0xdc], edi
mov dword [esp + 0x58], 0
mov dword [esp + 0x5c], 0
lea eax, [0x64dfc0]
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], ecx
mov dword [esp], ebx
mov dword [esp + 4], 2
mov byte [esp + 8], 0
lea eax, [esp + 0x58]
mov dword [esp + 0xc], eax
call fcn.005be4a0
xor eax, eax
mov ecx, dword [esp + 0x130]
mov edx, dword [esp + 0xd4]
mov ebx, dword [esp + 0xd8]
test edx, edx
je 0x64d07a
xor edi, edi
xor ebp, ebp
mov esi, ebx
mov ebx, edx
xor edx, edx
jmp 0x64d0b6
mov edx, dword [esp + 0xe0]
mov ebx, dword [esp + 0xdc]
mov ebp, dword [esp + 0xe4]
mov esi, dword [esp + 0xf0]
cmp esi, edx
ja 0x64d36e
sub ebp, esi
sub edx, esi
mov edi, ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and esi, ebp
lea ebp, [esi + ebx]
xor ebx, ebx
xor esi, esi
test ebx, ebx
jne 0x64d2e9
mov ebx, edi
lea edi, [esp + 0x100]
call fcn.00464655
nop
mov ecx, dword [esp + 0x118]
mov byte [esp + 0x23], 0
mov byte [esp + 0x23], 1
test ecx, ecx
jne 0x64d356
mov dword [esp + 0x50], ebx
mov dword [esp + 0x48], edx
mov dword [esp + 0x54], ebp
movzx ecx, byte [esp + 0x114]
test cl, cl
je 0x64d152
mov ecx, dword [esp + 0x10c]
inc ecx
lea esi, [esp + 0x100]
cmp dword [esi + 0x10], ecx
jge 0x64d159
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x36
lea ecx, [0x7d4be3]
mov dword [eax], ecx
lea ecx, [0x844124]
mov dword [esp + 0x100], ecx
mov dword [esp + 0x104], eax
xor eax, eax
mov edi, dword [esp + 0x50]
jmp 0x64d1d6
lea esi, [esp + 0x100]
mov ecx, dword [esp + 0x10c]
lea esi, [ecx + 1]
mov edi, ebx
mov ebx, dword [esp + 0x110]
mov edx, dword [esp + 0x108]
cmp ebx, esi
jae 0x64d1b7
mov dword [esp + 0x4c], ecx
mov dword [esp], edx
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x758ec0]
mov dword [esp + 0x10], eax
call fcn.0044b1b0
mov edx, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x54]
mov edi, dword [esp + 0x50]
movzx ebp, byte [esp + 0x23]
xchg ebp, eax
mov byte [edx + ecx], al
xchg ebp, eax
mov dword [esp + 0x10c], esi
mov dword [esp + 0x110], ebx
mov dword [esp + 0x108], edx
lea edi, [esp + 0xc0]
call fcn.0046465b
lea ecx, [0x64d540]
mov dword [esp + 0xc0], ecx
mov ecx, dword [esp + 0x130]
mov dword [esp + 0xc4], ecx
mov edx, dword [esp + 0x54]
mov dword [esp + 0xc8], edx
mov edx, dword [esp + 0x48]
mov dword [esp + 0xcc], edx
mov edx, dword [esp + 0x50]
mov dword [esp + 0xd0], edx
lea edx, [esp + 0x100]
mov dword [esp], edx
mov dword [esp + 4], 3
mov byte [esp + 8], 0
lea edx, [esp + 0xc0]
mov dword [esp + 0xc], edx
call fcn.005be4a0
mov ecx, dword [esp + 0x100]
mov edx, dword [esp + 0x104]
test ecx, ecx
je 0x64d261
xor ebx, ebx
xor ebp, ebp
mov eax, ecx
xor ecx, ecx
jmp 0x64d299
mov ecx, dword [esp + 0x10c]
mov edx, dword [esp + 0x108]
mov ebx, dword [esp + 0x110]
mov eax, dword [esp + 0x11c]
cmp eax, ecx
ja 0x64d351
sub ebx, eax
sub ecx, eax
mov ebp, ebx
neg ebx
sar ebx, 0x1f
and eax, ebx
lea ebx, [eax + edx]
xor eax, eax
xor edx, edx
mov edi, dword [esp + 0x130]
mov dword [edi + 4], ecx
mov dword [edi + 8], ebp
mov esi, dword [0xaab020]
test esi, esi
jne 0x64d2b4
mov dword [edi], ebx
jmp 0x64d2bf
mov esi, eax
mov eax, ebx
call fcn.004643b0
mov eax, esi
mov dword [esp + 0x134], ebx
mov dword [esp + 0x138], ecx
mov dword [esp + 0x13c], ebp
mov dword [esp + 0x140], eax
mov dword [esp + 0x144], edx
add esp, 0x12c
ret
mov dword [esp + 0x134], 0
mov dword [esp + 0x138], 0
mov dword [esp + 0x13c], 0
mov dword [esp + 0x140], ebx
mov dword [esp + 0x144], esi
add esp, 0x12c
ret
mov dword [esp + 0x134], edx
mov dword [esp + 0x138], ebx
mov dword [esp + 0x13c], ebp
mov dword [esp + 0x140], 0
mov dword [esp + 0x144], 0
add esp, 0x12c
ret
call fcn.00464490
lea eax, [0x758c80]
mov dword [esp], eax
lea eax, [0x84358c]
mov dword [esp + 4], eax
call fcn.00436340
mov eax, esi
mov ecx, edx
call fcn.00464490
lea eax, [0x758c80]
mov dword [esp], eax
lea eax, [0x84358c]
mov dword [esp + 4], eax
call fcn.00436340
lea eax, [0x758c80]
mov dword [esp], eax
lea eax, [0x84358c]
mov dword [esp + 4], eax
call fcn.00436340
lea eax, [0x758c80]
mov dword [esp], eax
lea eax, [0x84358c]
mov dword [esp + 4], eax
call fcn.00436340
lea eax, [0x758c80]
mov dword [esp], eax
lea eax, [0x84358c]
mov dword [esp + 4], eax
call fcn.00436340
lea eax, [0x758c80]
mov dword [esp], eax
lea eax, [0x84358c]
mov dword [esp + 4], eax
call fcn.00436340
lea eax, [0x758c80]
mov dword [esp], eax
lea eax, [0x84358c]
mov dword [esp + 4], eax
call fcn.00436340
lea eax, [0x758c80]
mov dword [esp], eax
lea eax, [0x84358c]
mov dword [esp + 4], eax
call fcn.00436340
lea eax, [0x758c80]
mov dword [esp], eax
lea eax, [0x84358c]
mov dword [esp + 4], eax
call fcn.00436340
lea eax, [0x758c80]
mov dword [esp], eax
lea eax, [0x84358c]
mov dword [esp + 4], eax
call fcn.00436340
lea eax, [0x758c80]
mov dword [esp], eax
lea eax, [0x84358c]
mov dword [esp + 4], eax
call fcn.00436340
lea eax, [0x758c80]
mov dword [esp], eax
lea eax, [0x84358c]
mov dword [esp + 4], eax
call fcn.00436340
lea eax, [0x758c80]
mov dword [esp], eax
lea eax, [0x84358c]
mov dword [esp + 4], eax
call fcn.00436340
lea eax, [0x758c80]
mov dword [esp], eax
lea eax, [0x84358c]
mov dword [esp + 4], eax
call fcn.00436340
lea eax, [0x758c80]
mov dword [esp], eax
lea eax, [0x84358c]
mov dword [esp + 4], eax
call fcn.00436340
lea eax, [0x758c80]
mov dword [esp], eax
lea eax, [0x84358c]
mov dword [esp + 4], eax
call fcn.00436340
lea eax, [0x758c80]
mov dword [esp], eax
lea eax, [0x84358c]
mov dword [esp + 4], eax
call fcn.00436340
lea eax, [0x758c80]
mov dword [esp], eax
lea eax, [0x84358c]
mov dword [esp + 4], eax
call fcn.00436340
lea eax, [0x758c80]
mov dword [esp], eax
lea eax, [0x84358c]
mov dword [esp + 4], eax
call fcn.00436340
nop
call fcn.00462fa0
jmp fcn.0064b190