Function at 0x5fe130
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x65bbd9
push eax
mov dword fs:[0], esp
sub esp, 0xc0
push esi
mov esi, ecx
push edi
mov eax, dword [esi + 0x10]
mov edx, dword [esi + 8]
sub eax, edx
cmp eax, 0x14
jl 0x5fed6a
mov ecx, dword [esi + 0xc]
mov edx, dword [esi + 4]
sub ecx, edx
cmp ecx, 0x50
jl 0x5fed6a
fld dword [esi + 0xe2]
fcomp dword [0x65f998]
fnstsw ax
test ah, 1
je 0x5fe18d
mov eax, 1
xor edi, edi
jmp 0x5fe191
xor edi, edi
xor eax, eax
mov dword [esi + 0xca], eax
mov eax, dword [esi + 0xa6]
cmp eax, edi
jne 0x5fed6a
fld dword [esi + 0x1b8]
fcomp dword [0x65f998]
push ebx
push ebp
mov dword [esp + 0x68], 0xffff
mov dword [esp + 0x6c], 0x808080
fnstsw ax
test ah, 1
jne 0x5fe1d7
cmp dword [esi + 0x1c0], 1
jae 0x5fe29d
mov edx, dword [esi + 0x156]
mov eax, dword [esi + 0x152]
mov ecx, dword [esi + 0x14e]
mov dword [esp + 0x10], edx
mov edx, dword [esi + 0x14a]
mov dword [esp + 0x14], edi
fild qword [esp + 0x10]
mov dword [esp + 0x10], eax
mov eax, dword [esi + 0x146]
mov dword [esp + 0x14], edi
mov dword [esi + 0x1b8], edi
fild qword [esp + 0x10]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edi
fild qword [esp + 0x10]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], edi
fild qword [esp + 0x10]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edi
fild qword [esp + 0x10]
fld st(0)
fmul dword [esi + 0x132]
fld st(2)
fmul dword [esi + 0x136]
faddp st(1)
fld st(3)
fmul dword [esi + 0x13a]
faddp st(1)
fld st(4)
fmul dword [esi + 0x13e]
faddp st(1)
fld st(5)
fmul dword [esi + 0x142]
faddp st(1)
fstp dword [esp + 0x10]
fadd st(1)
fadd st(2)
fadd st(3)
faddp st(4)
fstp st(0)
fstp st(0)
fstp st(0)
fcom dword [0x65f998]
fnstsw ax
test ah, 0x41
jne 0x5fe292
fld dword [esp + 0x10]
fdiv st(1)
fstp dword [esi + 0x1b8]
call fcn.00645030
mov dword [esi + 0x1c0], eax
fld dword [esi + 0x1b4]
fcomp dword [0x65f998]
fnstsw ax
test ah, 1
jne 0x5fe2bd
cmp dword [esi + 0x1bc], 1
jae 0x5fe383
mov ecx, dword [esi + 0x12e]
mov edx, dword [esi + 0x12a]
mov eax, dword [esi + 0x126]
mov dword [esp + 0x10], ecx
mov ecx, dword [esi + 0x122]
mov dword [esp + 0x14], edi
fild qword [esp + 0x10]
mov dword [esp + 0x10], edx
mov edx, dword [esi + 0x11e]
mov dword [esp + 0x14], edi
mov dword [esi + 0x1b4], edi
fild qword [esp + 0x10]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edi
fild qword [esp + 0x10]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edi
fild qword [esp + 0x10]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], edi
fild qword [esp + 0x10]
fld st(0)
fmul dword [esi + 0x10a]
fld st(2)
fmul dword [esi + 0x10e]
faddp st(1)
fld st(3)
fmul dword [esi + 0x112]
faddp st(1)
fld st(4)
fmul dword [esi + 0x116]
faddp st(1)
fld st(5)
fmul dword [esi + 0x11a]
faddp st(1)
fstp dword [esp + 0x10]
fadd st(1)
fadd st(2)
fadd st(3)
faddp st(4)
fstp st(0)
fstp st(0)
fstp st(0)
fcom dword [0x65f998]
fnstsw ax
test ah, 0x41
jne 0x5fe378
fld dword [esp + 0x10]
fdiv st(1)
fstp dword [esi + 0x1b4]
call fcn.00645030
mov dword [esi + 0x1bc], eax
fld dword [esi + 0x1c4]
mov ebp, dword [esi + 0x3a]
mov eax, dword [esi + 0x42]
fsub dword [esi + 0x1c8]
mov dword [esp + 0x10], ebp
mov ecx, ebp
fild dword [esp + 0x10]
sub eax, ecx
mov dword [esp + 0x10], eax
fstp dword [esp + 0x1c]
fild dword [esp + 0x10]
fld dword [esi + 0x1c4]
fsub dword [esi + 0x132]
fmulp st(1)
fdiv st(1)
fadd dword [esp + 0x1c]
call fcn.00645030
fld dword [esi + 0x132]
fcomp dword [0x65f998]
mov dword [esp + 0x28], eax
fnstsw ax
test ah, 1
je 0x5fe3e1
mov dword [esp + 0x28], ebp
mov ecx, dword [esi + 0x42]
mov edx, dword [esi + 0x3a]
sub ecx, edx
mov dword [esp + 0x10], ecx
fild dword [esp + 0x10]
fld dword [esi + 0x1c4]
fsub dword [esi + 0x1b8]
fmulp st(1)
fdiv st(1)
fadd dword [esp + 0x1c]
call fcn.00645030
mov edi, dword [esi + 0x42]
mov dword [esp + 0x60], eax
mov eax, dword [esi + 0x3a]
mov dword [esp + 0x10], edi
fild dword [esp + 0x10]
mov edx, edi
sub edx, eax
fstp dword [esp + 0x2c]
mov dword [esp + 0x20], edx
fild dword [esp + 0x20]
fld dword [esi + 0x10a]
fsub dword [esi + 0x1c8]
fmulp st(1)
fdiv st(1)
fsubr dword [esp + 0x2c]
call fcn.00645030
fld dword [esi + 0x10a]
fcomp dword [0x65f998]
mov ebx, eax
mov dword [esp + 0x54], ebx
fnstsw ax
test ah, 1
je 0x5fe464
mov dword [esp + 0x54], edi
mov ebx, edi
mov eax, dword [esi + 0x42]
mov edx, dword [esi + 0x3a]
sub eax, edx
mov dword [esp + 0x20], eax
fild dword [esp + 0x20]
fld dword [esi + 0x1b4]
fsub dword [esi + 0x1c8]
fmulp st(1)
fdiv st(1)
fsubr dword [esp + 0x2c]
call fcn.00645030
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x38], eax
fstp st(0)
lea eax, [ecx + ebp]
mov ecx, dword [esp + 0x60]
cdq
sub eax, edx
sar eax, 1
cmp ecx, eax
jge 0x5fe4c9
fild dword [esp + 0x60]
fstp dword [esp + 0x58]
fild dword [esp + 0x28]
fst dword [esp + 0x50]
fsub dword [esp + 0x1c]
fstp dword [esp + 0x30]
fld dword [esp + 0x58]
fsub dword [esp + 0x1c]
jmp 0x5fe4ed
fild dword [esp + 0x28]
fstp dword [esp + 0x50]
fild dword [esp + 0x60]
fstp dword [esp + 0x58]
fld dword [esp + 0x50]
fsub dword [esp + 0x1c]
fstp dword [esp + 0x30]
fld dword [esp + 0x50]
fsub dword [esp + 0x58]
fdiv dword [esp + 0x30]
fsubr dword [0x663770]
fstp dword [esp + 0x40]
fld dword [esp + 0x40]
fld qword [0x677be0]
call fcn.00645242
mov eax, dword [esp + 0x28]
fstp dword [esp + 0x4c]
cmp eax, ebp
jne 0x5fe51e
mov dword [esp + 0x4c], 0
fild dword [esp + 0x38]
mov ecx, dword [esp + 0x38]
lea eax, [ebx + edi]
cdq
fstp dword [esp + 0x5c]
fild dword [esp + 0x54]
sub eax, edx
sar eax, 1
fstp dword [esp + 0x48]
fld dword [esp + 0x2c]
fsub dword [esp + 0x48]
cmp ecx, eax
fstp dword [esp + 0x40]
jge 0x5fe554
fld dword [esp + 0x5c]
fsub dword [esp + 0x48]
jmp 0x5fe55c
fld dword [esp + 0x2c]
fsub dword [esp + 0x5c]
fdiv dword [esp + 0x40]
fsubr dword [0x663770]
fstp dword [esp + 0x18]
fld dword [esp + 0x18]
fld qword [0x677be0]
call fcn.00645242
fstp dword [esp + 0x18]
cmp edi, ebx
jne 0x5fe589
mov dword [esp + 0x18], 0
mov edx, dword [esi + 0x1c0]
mov ecx, dword [esp + 0x28]
xor eax, eax
mov dword [esp + 0x20], edx
mov dword [esp + 0x24], eax
cmp ecx, ebp
fild qword [esp + 0x20]
fdiv dword [esp + 0x30]
jne 0x5fe5b1
fstp st(0)
fld dword [0x663774]
mov ecx, dword [esi + 0x1bc]
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], ecx
cmp edi, ebx
fild qword [esp + 0x20]
fdiv dword [esp + 0x40]
jne 0x5fe5d3
fstp st(0)
fld dword [0x663774]
fld dword [esp + 0x4c]
fcomp dword [esp + 0x18]
fnstsw ax
test ah, 0x41
jne 0x5fe5e8
fld dword [esp + 0x4c]
jmp 0x5fe5ec
fld dword [esp + 0x18]
mov edx, dword [esi + 0x3e]
mov eax, dword [esi + 0x36]
sub edx, eax
mov dword [esp + 0x20], edx
fild dword [esp + 0x20]
fdiv st(1)
call fcn.00645030
fstp st(0)
fld st(1)
fcomp st(1)
mov ecx, eax
mov dword [esp + 0x40], ecx
fnstsw ax
test ah, 0x41
jne 0x5fe62d
fdiv st(1)
mov dword [esp + 0x30], ecx
fimul dword [esp + 0x40]
call fcn.00645030
fstp st(0)
mov dword [esp + 0x20], eax
jmp 0x5fe644
fxch st(1)
fdiv st(1)
mov dword [esp + 0x20], ecx
fimul dword [esp + 0x40]
call fcn.00645030
fstp st(0)
mov dword [esp + 0x30], eax
fild dword [esp + 0x30]
mov ecx, 6
xor eax, eax
lea edi, [esp + 0xa8]
fmul dword [esp + 0x4c]
rep stosd dword es:[edi], eax
mov edi, dword [esi + 0x36]
mov dword [esp + 0xa4], ebp
mov dword [esp + 0x40], edi
mov dword [esp + 0xa0], edi
fiadd dword [esp + 0x40]
call fcn.00645030
fld dword [esp + 0x58]
fsub dword [esp + 0x1c]
mov ebp, eax
mov dword [esp + 0xa8], ebp
fmul dword [esp + 0x4c]
fadd dword [esp + 0x1c]
call fcn.00645030
fld dword [esp + 0x50]
fsub dword [esp + 0x58]
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], ebp
fmul dword [esp + 0x4c]
fsubr dword [esp + 0x50]
call fcn.00645030
mov ebp, dword [esp + 0xe0]
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0xb8], edi
mov ecx, dword [ebp + 4]
mov dword [esp + 0xbc], eax
push ecx
call dword [0x65e134]
mov edx, dword [esp + 0xa4]
mov eax, dword [esp + 0xa0]
push edx
lea ecx, [esp + 0x44]
push eax
push ecx
mov ecx, ebp
call fcn.00644110
mov edx, dword [esp + 0xbc]
mov eax, dword [esp + 0xb8]
push edx
push eax
mov ecx, ebp
call fcn.0064410a
mov edx, dword [ebp + 4]
lea ecx, [esp + 0xa0]
push 4
push ecx
push edx
call dword [0x65e098]
mov eax, dword [ebp + 4]
push eax
call dword [0x65e138]
push 4
push ebp
mov ecx, 0x732bc0
call fcn.00495cc0
mov ecx, dword [ebp + 4]
push ecx
call dword [0x65e13c]
mov eax, dword [esp + 0x60]
lea edx, [esp + 0x68]
push 3
push edx
push eax
push 2
push ebp
mov ecx, 0x732bc0
call fcn.00496af0
mov ecx, 6
xor eax, eax
lea edi, [esp + 0x88]
rep stosd dword es:[edi], eax
mov edi, dword [esi + 0x36]
mov dword [esp + 0x40], edi
fild dword [esp + 0x20]
mov dword [esp + 0x80], edi
mov dword [esp + 0x84], ebx
fmul dword [esp + 0x18]
fiadd dword [esp + 0x40]
call fcn.00645030
fld dword [esp + 0x5c]
fsub dword [esp + 0x48]
mov ebx, eax
mov dword [esp + 0x88], ebx
fmul dword [esp + 0x18]
fadd dword [esp + 0x48]
call fcn.00645030
fld dword [esp + 0x2c]
fsub dword [esp + 0x5c]
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], ebx
fmul dword [esp + 0x18]
fsubr dword [esp + 0x2c]
call fcn.00645030
mov edx, dword [ebp + 4]
mov ecx, dword [esp + 0x10]
push edx
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], edi
mov dword [esp + 0xa0], ecx
call dword [0x65e134]
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x80]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
mov ecx, ebp
call fcn.00644110
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0x98]
push eax
push ecx
mov ecx, ebp
call fcn.0064410a
mov eax, dword [ebp + 4]
lea edx, [esp + 0x80]
push 4
push edx
push eax
call dword [0x65e098]
mov ecx, dword [ebp + 4]
push ecx
call dword [0x65e138]
push 2
push ebp
mov ecx, 0x732bc0
call fcn.00495cc0
mov edx, dword [ebp + 4]
push edx
call dword [0x65e13c]
mov ecx, dword [esp + 0x38]
lea eax, [esp + 0x68]
push 3
push eax
push ecx
push 2
push ebp
mov ecx, 0x732bc0
call fcn.00496af0
fld dword [esi + 0x19c]
fcomp dword [0x65f998]
lea edi, [esi + 0x19c]
mov ecx, 4
fnstsw ax
test ah, 1
je 0x5fe8bd
mov edx, edi
test ecx, ecx
jle 0x5fe8bd
mov eax, dword [edx - 4]
dec ecx
mov dword [edx], eax
sub edx, 4
fld dword [edx]
fcomp dword [0x65f998]
fnstsw ax
test ah, 1
jne 0x5fe8a1
fld dword [esi + ecx*4 + 0x18c]
fst dword [edi]
fcomp dword [0x65f998]
fnstsw ax
test ah, 1
je 0x5fe916
fld dword [esi + 0x142]
fcomp dword [0x65f998]
mov edx, 4
fnstsw ax
test ah, 1
je 0x5fe90d
lea ecx, [esi + 0x142]
test edx, edx
jle 0x5fe90d
mov eax, dword [ecx - 4]
dec edx
mov dword [ecx], eax
sub ecx, 4
fld dword [ecx]
fcomp dword [0x65f998]
fnstsw ax
test ah, 1
jne 0x5fe8f1
mov ecx, dword [esi + edx*4 + 0x132]
mov dword [edi], ecx
fld dword [esi + 0x174]
fcomp dword [0x65f998]
lea ecx, [esi + 0x174]
mov edx, 4
fnstsw ax
test ah, 1
je 0x5fe950
test edx, edx
jle 0x5fe950
mov eax, dword [ecx - 4]
dec edx
mov dword [ecx], eax
sub ecx, 4
fld dword [ecx]
fcomp dword [0x65f998]
fnstsw ax
test ah, 1
jne 0x5fe934
fld dword [esi + edx*4 + 0x164]
fst dword [esi + 0x174]
fcomp dword [0x65f998]
fnstsw ax
test ah, 1
je 0x5fe9b1
fld dword [esi + 0x11a]
fcomp dword [0x65f998]
mov edx, 4
fnstsw ax
test ah, 1
je 0x5fe9a4
lea ecx, [esi + 0x11a]
test edx, edx
jle 0x5fe9a4
mov eax, dword [ecx - 4]
dec edx
mov dword [ecx], eax
sub ecx, 4
fld dword [ecx]
fcomp dword [0x65f998]
fnstsw ax
test ah, 1
jne 0x5fe988
mov ecx, dword [esi + edx*4 + 0x10a]
mov dword [esi + 0x174], ecx
mov edx, dword [esi + 0x42]
mov eax, dword [esi + 0x3a]
fld dword [esi + 0x1c4]
fsub dword [esi + 0x1c8]
sub edx, eax
mov dword [esp + 0x10], edx
fild dword [esp + 0x10]
fld dword [esi + 0x1c4]
fsub dword [edi]
fmulp st(1)
fdiv st(1)
fadd dword [esp + 0x1c]
call fcn.00645030
fld dword [edi]
fcomp dword [0x65f998]
mov ebx, eax
fnstsw ax
test ah, 1
je 0x5fe9f7
mov ebx, dword [esp + 0x54]
mov eax, dword [esi + 0x42]
mov ecx, dword [esi + 0x3a]
sub eax, ecx
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fld dword [esi + 0x174]
fsub dword [esi + 0x1c8]
fmulp st(1)
fdiv st(1)
fsubr dword [esp + 0x2c]
call fcn.00645030
fstp st(0)
fld dword [esi + 0x174]
fcomp dword [0x65f998]
mov dword [esp + 0x38], eax
fnstsw ax
test ah, 1
je 0x5fea41
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x38], ecx
mov ecx, dword [esi + 0x3e]
mov edx, dword [esi + 0x36]
sub ecx, edx
mov eax, 0x55555556
imul ecx
mov eax, edx
lea ecx, [esp + 0x70]
shr eax, 0x1f
add edx, eax
mov dword [esp + 0x10], edx
call fcn.0064414c
xor eax, eax
mov dword [esp + 0x30], 0x661a18
mov dword [esp + 0xd8], eax
mov dword [esp + 0x34], eax
cmp ebp, eax
mov byte [esp + 0xd8], 1
je 0x5fea88
mov eax, dword [ebp + 4]
push eax
call dword [fcn.0065e0d0]
push eax
lea ecx, [esp + 0x74]
call fcn.00644146
mov edi, dword [esp + 0x38]
mov ecx, dword [esp + 0x10]
mov edx, dword [ebp + 4]
sub edi, ebx
push edi
push ecx
push edx
call dword [fcn.0065e0c8]
push eax
lea ecx, [esp + 0x34]
call fcn.006440f8
mov ecx, dword [esp + 0x34]
lea eax, [esp + 0x30]
neg eax
sbb eax, eax
and eax, ecx
push eax
mov eax, dword [esp + 0x78]
push eax
call fcn.00644140
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x20], eax
xor eax, eax
lea edx, [esp + 0xc0]
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], eax
push 5
lea eax, [esp + 0x74]
mov dword [esp + 0xcc], ecx
push edx
push eax
mov ecx, 0x732bc0
mov dword [esp + 0xd8], edi
call fcn.004962d0
push 1
lea ecx, [esp + 0x74]
call fcn.0064412e
mov ecx, dword [esi + 0x10]
mov edx, dword [esi + 8]
mov eax, dword [esi + 4]
sub ecx, edx
mov edx, dword [esi + 0xc]
mov edi, dword [esp + 0x74]
sub edx, eax
lea eax, [esp + 0x70]
neg eax
sbb eax, eax
push 0x660046
and eax, edi
push 0
push 0
push eax
push ecx
mov ecx, dword [ebp + 4]
push edx
push ebx
push 0
push ecx
call dword [fcn.0065e0cc]
mov eax, dword [esp + 0x20]
test eax, eax
je 0x5feb5e
mov eax, dword [eax + 4]
mov edx, dword [esp + 0x74]
push eax
push edx
call fcn.00644140
lea ecx, [esp + 0x30]
call fcn.0064406e
lea ecx, [esp + 0x70]
call fcn.00644134
lea eax, [esp + 0x6c]
push 1
push eax
push ebx
push 1
push ebp
mov ecx, 0x732bc0
call fcn.00496af0
mov edx, dword [esp + 0x38]
lea ecx, [esp + 0x6c]
push 1
push ecx
push edx
push 1
push ebp
mov ecx, 0x732bc0
call fcn.00496af0
mov eax, dword [esi + 0x42]
mov ecx, dword [esi + 0x3a]
sub eax, ecx
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fld dword [esi + 0x1c4]
fsub dword [esi + 0xd2]
fmulp st(1)
fld dword [esi + 0x1c4]
fsub dword [esi + 0x1c8]
fdivp st(1)
fadd dword [esp + 0x1c]
call fcn.00645030
push 4
push ebp
mov ecx, 0x732bc0
mov edi, eax
call fcn.00495c80
push 6
push ebp
mov ecx, 0x732bc0
mov dword [esp + 0x28], eax
call fcn.00495d00
mov ecx, dword [esi + 0x3e]
mov edx, dword [esi + 0x36]
sub ecx, edx
push edi
push ecx
xor ebx, ebx
push edi
push ebx
push ebp
mov ecx, 0x732bc0
mov dword [esp + 0x24], eax
call fcn.00495d40
cmp dword [esi + 0x48], ebx
je 0x5fed13
mov edx, dword [esi + 0x1c0]
mov eax, dword [esi + 0x1bc]
add edx, eax
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x38], edx
fild qword [esp + 0x38]
fcomp dword [0x65f998]
fnstsw ax
test ah, 0x41
jne 0x5fed13
lea ecx, [esp + 0x38]
call fcn.00643d62
mov eax, dword [esi + 0x1bc]
mov ecx, dword [esi + 0x1c0]
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], ebx
fild qword [esp + 0x60]
add ecx, eax
mov dword [esp + 0x64], ebx
mov dword [esp + 0x60], ecx
mov edx, dword [esi + 0x48]
fmul qword [0x663768]
fild qword [esp + 0x60]
sub esp, 8
add edx, 0x18
lea eax, [esp + 0x40]
mov byte [esp + 0xe0], 2
fdivp st(1)
fstp qword [esp]
push edx
push 0x6c12c4
push eax
call fcn.00643d50
mov ecx, dword [esp + 0x4c]
mov edx, dword [esi + 0x36]
add esp, 0x14
mov eax, 0x55555556
add edi, 0xfffffff1
push ecx
mov ecx, dword [esi + 0x3e]
sub ecx, edx
shl ecx, 1
imul ecx
mov eax, edx
shr eax, 0x1f
lea ecx, [edx + eax - 2]
mov edx, dword [0x73a974]
push ecx
mov ecx, dword [esi + 0x3e]
push edx
mov edx, dword [esi + 0x36]
sub ecx, edx
mov eax, 0x55555556
imul ecx
mov eax, edx
push edi
shr eax, 0x1f
add edx, eax
lea ecx, [esp + 0x70]
push edx
push ebp
push ecx
push 0x732bc0
call fcn.00496440
add esp, 0x20
lea ecx, [esp + 0x38]
mov byte [esp + 0xd8], 1
call fcn.00643d26
mov edx, dword [esp + 0x10]
mov ecx, 0x732bc0
push edx
push ebp
call fcn.00495d20
mov eax, dword [esp + 0x20]
mov ecx, 0x732bc0
push eax
push ebp
call fcn.00495ca0
mov dword [esp + 0x30], 0x661578
lea ecx, [esp + 0x30]
mov byte [esp + 0xd8], 3
call fcn.0064406e
lea ecx, [esp + 0x70]
mov dword [esp + 0x30], 0x6602dc
mov dword [esp + 0xd8], 0xffffffff
call fcn.0064411c
pop ebp
pop ebx
mov ecx, dword [esp + 0xc8]
pop edi
pop esi
mov dword fs:[0], ecx
add esp, 0xcc
ret 4