Function at 0x645fd0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x6d9141
push eax
mov eax, 0x165c
mov dword fs:[0], esp
call fcn.006a72a0
push ebx
push ebp
mov ebx, ecx
push esi
push edi
mov dword [esp + 0x14], ebx
mov eax, dword [esp + 0x168c]
xor esi, esi
cmp eax, esi
mov dword [esp + 0x1674], esi
jne 0x64602c
lea ecx, [esp + 0x167c]
mov dword [esp + 0x1674], 0xffffffff
call fcn.00678730
or eax, 0xffffffff
jmp 0x646d66
lea ecx, [esp + 0x60]
call fcn.00644be0
mov eax, dword [ebx + 4]
lea ecx, [esp + 0x60]
push eax
mov byte [esp + 0x1678], 1
call fcn.00670550
test eax, eax
je 0x646d3c
mov ecx, dword [ebx + 0x1c]
push ecx
lea ecx, [esp + 0x64]
call fcn.0064ac60
test eax, eax
je 0x646d3c
mov eax, dword [esp + 0x1690]
mov ebp, dword [esp + 0x168c]
mov edx, dword [esp + 0x1688]
lea ecx, [esp + 0x34]
push eax
push ecx
lea ecx, [esp + 0x1684]
mov dword [esp + 0x60], ebp
mov dword [esp + 0x5c], edx
call fcn.006787f0
mov edi, 0x72ba88
or ecx, 0xffffffff
xor eax, eax
mov edx, dword [esp + 0x3c]
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov byte [esp + 0x1674], 2
push ecx
push 0x72ba88
push edx
push esi
lea ecx, [esp + 0x44]
call fcn.0041aa60
cmp eax, esi
jne 0x64610a
lea eax, [esp + 0xd0]
push 0x15
push eax
mov ecx, 0x72c070
call fcn.00644770
mov ecx, dword [0x6dd1fc]
mov byte [esp + 0x1674], 3
push ecx
push esi
push eax
lea ecx, [esp + 0x40]
call fcn.004136c0
push 1
lea ecx, [esp + 0xd4]
mov byte [esp + 0x1678], 2
call fcn.004138c0
mov eax, dword [esp + 0x54]
lea edx, [esp + 0x90]
push edx
push eax
lea ecx, [esp + 0x1684]
call fcn.006787b0
cmp dword [esp + 0x98], esi
jne 0x6469e6
push 4
lea ecx, [esp + 0x64]
call fcn.00644df0
cmp eax, esi
je 0x646bd0
cmp dword [esp + 0x1698], 0xffffffff
je 0x6461f3
mov eax, dword [esp + 0x16b8]
test eax, eax
jne 0x6461f3
lea ecx, [esp + 0x4dc]
call fcn.00660750
push 0xff
mov byte [esp + 0x1678], 5
call fcn.006a6832
mov ecx, dword [ebx + 4]
mov edx, dword [esp + 0x169c]
add esp, 4
mov ebp, eax
push ecx
push edx
lea ecx, [esp + 0x4e4]
call fcn.00660f10
mov edi, eax
xor esi, esi
test edi, edi
jle 0x6461b5
push esi
lea ecx, [esp + 0x4e0]
call fcn.00661050
inc esi
cmp esi, edi
jl 0x6461a3
mov ecx, dword [ebx + 0x1c]
push 0
push 0
push 1
push 0
push 0
push 1
lea eax, [esp + 0x4f4]
push ebp
push eax
call fcn.00653ef0
test ebp, ebp
je 0x6461df
push ebp
call fcn.006a64d0
add esp, 4
lea ecx, [esp + 0x4dc]
mov byte [esp + 0x1674], 2
call fcn.00660860
xor esi, esi
cmp dword [ebx + 0x18], esi
je 0x64666c
mov ecx, dword [ebx + 0x24]
mov eax, dword [ebx + 0x28]
lea edi, [ebx + 0x20]
push ecx
push eax
push eax
call fcn.006481d0
add esp, 0xc
mov esi, eax
mov eax, dword [edi + 8]
mov ecx, edi
push eax
push esi
call fcn.00641c50
lea ecx, [esp + 0x6c]
mov dword [edi + 8], esi
mov dword [esp + 0x5c], 0
call fcn.0062eab0
mov cl, byte [esp + 0x34]
sub esp, 0x10
mov esi, esp
mov dword [esp + 0x2c], esp
push 0
mov byte [esp + 0x1688], 6
mov byte [esi], cl
mov ecx, esi
call fcn.004138c0
mov edx, dword [0x6dd1fc]
lea eax, [esp + 0x44]
push edx
push 0
push eax
mov ecx, esi
call fcn.004136c0
mov ecx, dword [0x72baf4]
call fcn.0062eb60
cmp word [esp + 0x58], 0
jle 0x6463ed
movsx ecx, word [esp + 0x58]
mov ebp, dword [esp + 0x54]
mov dword [esp + 0x30], 0
mov dword [esp + 0x1c], ecx
lea edx, [esp + 0x90]
lea ecx, [esp + 0x167c]
push edx
push ebp
call fcn.006787b0
mov eax, dword [ebx + 0xa0]
test eax, eax
je 0x646371
mov eax, dword [ebx + 0xc]
test eax, eax
je 0x6463ce
mov ecx, dword [ebx + 0x10]
sub ecx, eax
sar ecx, 2
mov dword [esp + 0x18], ecx
je 0x6463ce
mov eax, dword [esp + 0x14]
mov ebx, dword [eax + 0x10]
mov esi, dword [eax + 0xc]
mov ecx, ebx
sub ecx, esi
sar ecx, 2
test ecx, ecx
jle 0x64630d
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
cmp dword [esi + eax*4], ebp
lea edx, [esi + eax*4]
jae 0x646307
add edx, 4
mov esi, edx
or edx, 0xffffffff
sub edx, eax
add ecx, edx
jmp 0x646309
mov ecx, eax
test ecx, ecx
jg 0x6462ea
cmp esi, ebx
je 0x6463ce
cmp ebp, dword [esi]
jb 0x6463ce
cmp dword [esp + 0xa0], 0xffff
jae 0x6463ce
mov eax, dword [esp + 0x5c]
lea edx, [esp + 0x80]
movsx ecx, ax
inc eax
push edx
mov dword [esp + 0x60], eax
mov eax, dword [edi + 8]
mov dword [esp + 0x88], ecx
push 1
push eax
mov ecx, edi
mov dword [esp + 0x8c], ebp
call fcn.0062a0c0
mov ecx, dword [esp + 0x9c]
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x28], esp
push ecx
push eax
jmp 0x6463b7
cmp dword [esp + 0xa0], 0xffff
jae 0x6463ce
mov eax, dword [edi + 8]
mov edx, dword [esp + 0x30]
lea ecx, [esp + 0x80]
mov dword [esp + 0x80], ebp
push ecx
push 1
push eax
mov ecx, edi
mov dword [esp + 0x90], edx
call fcn.0062a0c0
mov eax, dword [esp + 0x9c]
sub esp, 0x10
mov edx, esp
mov dword [esp + 0x28], esp
push eax
push edx
lea ecx, [esp + 0x1694]
call fcn.006787f0
mov ecx, dword [0x72baf4]
call fcn.0062f090
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x1c]
mov ebx, dword [esp + 0x14]
inc edx
add ebp, 0x40
dec eax
mov dword [esp + 0x30], edx
mov dword [esp + 0x1c], eax
jne 0x646295
mov eax, dword [edi + 4]
test eax, eax
jne 0x6463f8
xor esi, esi
jmp 0x646400
mov esi, dword [edi + 8]
sub esi, eax
sar esi, 3
push esi
push 0
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x30], esp
push edi
call fcn.00647d60
mov ecx, dword [esp + 0x16a0]
mov edx, dword [ebx + 4]
mov eax, dword [ebx + 0x1c]
push ecx
push edx
push eax
lea ecx, [ebx + 0x30]
call fcn.006758a0
lea ecx, [esp + 0x6c]
push ecx
mov ecx, dword [0x72baf4]
call fcn.0062f1e0
test al, al
je 0x646925
mov dl, byte [esp + 0x13]
xor edi, edi
xor ebp, ebp
mov byte [esp + 0x20], dl
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], edi
cmp esi, edi
mov byte [esp + 0x1674], 7
jle 0x64649e
push edi
lea ecx, [esp + 0x70]
call fcn.0062f360
test al, al
je 0x646492
mov eax, dword [ebx + 0x24]
mov ebp, 1
movsx ecx, di
lea edx, [eax + ecx*8]
mov eax, dword [esp + 0x28]
push edx
push ebp
push eax
lea ecx, [esp + 0x2c]
call fcn.0062a0c0
inc edi
movsx ecx, di
cmp ecx, esi
jl 0x646466
test ebp, ebp
jne 0x6464c9
xor edi, edi
test esi, esi
jle 0x6464c9
xor eax, eax
mov edx, dword [esp + 0x14]
mov ecx, dword [edx + 0x24]
lea eax, [ecx + eax*8]
mov ecx, dword [esp + 0x28]
push eax
push 1
push ecx
lea ecx, [esp + 0x2c]
call fcn.0062a0c0
inc edi
movsx eax, di
cmp eax, esi
jl 0x6464a6
push 0
push 0
sub esp, 0x10
mov ecx, 0x72c070
mov edx, esp
mov dword [esp + 0x30], esp
push 0x17
push edx
call fcn.00644770
sub esp, 0x10
mov ecx, 0x72c070
mov eax, esp
mov dword [esp + 0x44], esp
push 7
push eax
mov byte [esp + 0x16a4], 8
call fcn.00644770
mov ecx, 0x72bae0
mov byte [esp + 0x169c], 7
call fcn.0061eec0
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 0x1c]
mov ecx, 1
mov dword [eax + 0x2018], ecx
mov eax, dword [esp + 0xc4]
cmp eax, ecx
jne 0x64659e
mov dl, byte [esp + 0x20]
sub esp, 0x10
mov ebx, esp
mov dword [esp + 0x28], esp
mov byte [ebx], dl
mov ecx, dword [esp + 0x34]
test ecx, ecx
jne 0x64654b
xor eax, eax
jmp 0x646554
mov eax, dword [esp + 0x38]
sub eax, ecx
sar eax, 3
test eax, eax
jge 0x64655a
xor eax, eax
shl eax, 3
push eax
call fcn.006a6832
mov dword [ebx + 4], eax
mov ecx, dword [esp + 0x3c]
mov edi, dword [esp + 0x38]
add esp, 4
cmp edi, ecx
mov ebp, ecx
mov esi, eax
je 0x64658d
push edi
push esi
call fcn.006484b0
add edi, 8
add esp, 8
add esi, 8
cmp edi, ebp
jne 0x646579
mov ecx, dword [esp + 0x24]
mov dword [ebx + 8], esi
mov dword [ebx + 0xc], esi
call fcn.00647500
jmp 0x64660e
mov cl, byte [esp + 0x20]
sub esp, 0x10
mov ebx, esp
mov dword [esp + 0x28], esp
mov byte [ebx], cl
mov ecx, dword [esp + 0x34]
test ecx, ecx
jne 0x6465b9
xor eax, eax
jmp 0x6465c2
mov eax, dword [esp + 0x38]
sub eax, ecx
sar eax, 3
test eax, eax
jge 0x6465c8
xor eax, eax
lea edx, [eax*8]
push edx
call fcn.006a6832
mov dword [ebx + 4], eax
mov ecx, dword [esp + 0x3c]
mov edi, dword [esp + 0x38]
add esp, 4
cmp edi, ecx
mov ebp, ecx
mov esi, eax
je 0x6465ff
push edi
push esi
call fcn.006484b0
add edi, 8
add esp, 8
add esi, 8
cmp edi, ebp
jne 0x6465eb
mov ecx, dword [esp + 0x24]
mov dword [ebx + 8], esi
mov dword [ebx + 0xc], esi
call fcn.00646d90
mov ecx, dword [esp + 0x14]
xor esi, esi
cmp eax, 0xb
mov ecx, dword [ecx + 0x1c]
mov dword [ecx + 0x2018], esi
je 0x64687c
cmp eax, esi
je 0x646831
cmp eax, 0xaa
je 0x6468aa
mov edx, dword [esp + 0x24]
push edx
call fcn.006a64d0
add esp, 4
lea ecx, [esp + 0x6c]
mov dword [esp + 0x24], esi
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], esi
mov byte [esp + 0x1674], 2
call fcn.0061d8c0
mov ebx, dword [esp + 0x14]
jmp 0x6461f5
mov edx, dword [ebx + 0x28]
mov ecx, dword [ebx + 0x24]
cmp edx, edx
mov eax, edx
je 0x64668c
mov edi, dword [eax]
add eax, 8
mov dword [ecx], edi
mov edi, dword [eax - 4]
mov dword [ecx + 4], edi
add ecx, 8
cmp eax, edx
jne 0x646678
mov eax, dword [ebx + 0x28]
mov dword [ebx + 0x28], ecx
mov cl, byte [esp + 0x13]
mov dword [esp + 0x18], eax
mov byte [esp + 0x44], cl
mov dword [esp + 0x48], esi
mov dword [esp + 0x4c], esi
mov dword [esp + 0x50], esi
cmp word [esp + 0x58], si
mov byte [esp + 0x1674], 0xa
jle 0x646792
movsx edx, word [esp + 0x58]
mov edi, dword [esp + 0x54]
mov dword [esp + 0x30], 0
mov dword [esp + 0x1c], edx
lea eax, [esp + 0x90]
lea ecx, [esp + 0x167c]
push eax
push edi
call fcn.006787b0
mov eax, dword [ebx + 0xc]
test eax, eax
je 0x646746
mov ecx, dword [ebx + 0x10]
sub ecx, eax
sar ecx, 2
mov dword [esp + 0x18], ecx
je 0x646746
mov ebp, dword [ebx + 0x10]
mov esi, eax
mov ecx, ebp
sub ecx, esi
sar ecx, 2
test ecx, ecx
jle 0x64672f
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
cmp dword [esi + eax*4], edi
lea edx, [esi + eax*4]
jae 0x646729
add edx, 4
mov esi, edx
or edx, 0xffffffff
sub edx, eax
add ecx, edx
jmp 0x64672b
mov ecx, eax
test ecx, ecx
jg 0x64670c
cmp esi, ebp
je 0x646777
cmp edi, dword [esi]
jb 0x646777
cmp dword [esp + 0xa0], 0xffff
jae 0x646777
jmp 0x646753
cmp dword [esp + 0xa0], 0xffff
jae 0x646777
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x30]
lea ecx, [esp + 0x78]
mov dword [esp + 0x78], edi
push ecx
push 1
push edx
lea ecx, [esp + 0x50]
mov dword [esp + 0x88], eax
call fcn.0062a0c0
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x1c]
inc edx
add edi, 0x40
dec eax
mov dword [esp + 0x30], edx
mov dword [esp + 0x1c], eax
jne 0x6466d2
mov al, byte [esp + 0x44]
sub esp, 0x10
mov esi, esp
xor edi, edi
mov dword [esp + 0x28], esp
mov byte [esi], al
mov ecx, dword [esp + 0x58]
cmp ecx, edi
jne 0x6467af
xor eax, eax
jmp 0x6467b8
mov eax, dword [esp + 0x5c]
sub eax, ecx
sar eax, 3
cmp eax, edi
jge 0x6467be
xor eax, eax
lea ecx, [eax*8]
push ecx
call fcn.006a6832
mov dword [esi + 4], eax
mov edx, dword [esp + 0x60]
mov ecx, dword [esp + 0x5c]
add esp, 4
cmp ecx, edx
je 0x6467f5
cmp eax, edi
je 0x6467eb
mov ebp, dword [ecx]
mov dword [eax], ebp
mov ebp, dword [ecx + 4]
mov dword [eax + 4], ebp
add ecx, 8
add eax, 8
cmp ecx, edx
jne 0x6467dd
mov ecx, ebx
mov dword [esi + 8], eax
mov dword [esi + 0xc], eax
call fcn.00646d90
cmp eax, 0xb
je 0x64697c
mov edx, dword [esp + 0x48]
mov byte [esp + 0x1674], 2
push edx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0x48], edi
mov dword [esp + 0x4c], edi
mov dword [esp + 0x50], edi
jmp 0x6461f3
push esi
push 1
sub esp, 0x10
mov ecx, 0x72c070
mov eax, esp
mov dword [esp + 0x30], esp
push 1
push eax
call fcn.00644770
sub esp, 0x10
lea edx, [esp + 0x3b]
mov ecx, esp
mov dword [esp + 0x44], esp
push edx
push str.Read_data_stream_error_
mov byte [esp + 0x16a4], 9
call fcn.00413180
mov ecx, 0x72bae0
mov byte [esp + 0x169c], 7
call fcn.0061eec0
mov ecx, dword [esp + 0x90]
lea eax, [esp + 0x1684]
push eax
push ecx
lea ecx, [esp + 0x1684]
call fcn.006787b0
push 4
lea ecx, [esp + 0x64]
call fcn.00644e00
mov edx, dword [esp + 0x24]
push edx
jmp 0x6468fb
mov ecx, dword [esp + 0x90]
lea eax, [esp + 0x1684]
push eax
push ecx
lea ecx, [esp + 0x1684]
call fcn.006787b0
push 4
lea ecx, [esp + 0x64]
call fcn.00644e00
mov eax, dword [esp + 0x1684]
cmp eax, 0xffffffff
je 0x646c1d
lea edx, [esp + 0x1684]
lea ecx, [esp + 0x167c]
push edx
push eax
call fcn.006787b0
mov eax, dword [esp + 0x24]
push eax
call fcn.006a64d0
add esp, 4
lea ecx, [esp + 0x6c]
mov dword [esp + 0x24], esi
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], esi
mov byte [esp + 0x1674], 2
call fcn.0061d8c0
jmp 0x646b8b
mov edx, dword [esp + 0x90]
lea ecx, [esp + 0x1684]
push ecx
push edx
lea ecx, [esp + 0x1684]
call fcn.006787b0
mov eax, dword [esp + 0x1684]
cmp eax, 0xffffffff
je 0x646c5f
lea ecx, [esp + 0x1684]
push ecx
push eax
lea ecx, [esp + 0x1684]
call fcn.006787b0
lea ecx, [esp + 0x6c]
mov byte [esp + 0x1674], 2
call fcn.0061d8c0
jmp 0x646b8f
mov eax, dword [esp + 0x90]
lea edx, [esp + 0x1684]
push edx
push eax
lea ecx, [esp + 0x1684]
call fcn.006787b0
mov eax, dword [esp + 0x1684]
cmp eax, 0xffffffff
je 0x646cb2
lea ecx, [esp + 0x1684]
push ecx
push eax
lea ecx, [esp + 0x1684]
call fcn.006787b0
push 4
lea ecx, [esp + 0x64]
call fcn.00644e00
mov edx, dword [esp + 0x48]
push edx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0x48], edi
mov dword [esp + 0x4c], edi
mov dword [esp + 0x50], edi
jmp 0x646b91
mov dword [esp + 0x88], 0x6dd1f4
mov word [esp + 0x8c], 0xffff
mov word [esp + 0x8e], si
mov al, byte [esp + 0x34]
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x28], esp
mov byte [esp + 0x1684], 0xb
mov byte [ecx], al
mov dword [ecx + 4], esi
mov dword [ecx + 8], esi
mov dword [ecx + 0xc], esi
mov edx, dword [0x6dd1fc]
lea eax, [esp + 0x44]
push edx
push esi
push eax
call fcn.004136c0
mov ecx, dword [0x72bae0]
call fcn.0062a550
cmp bp, si
jle 0x646b0a
movsx edx, word [esp + 0x58]
mov ebx, dword [esp + 0x54]
lea ecx, [esp + 0xe0]
xor ebp, ebp
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x5c], edx
lea eax, [esp + 0x90]
lea ecx, [esp + 0x167c]
push eax
push ebx
call fcn.006787b0
mov eax, dword [esp + 0xa0]
cmp eax, 0xffff
jb 0x646a8b
cmp eax, 0xffffffff
jne 0x646af7
sub esp, 0x40
mov ecx, 0x10
lea esi, [esp + 0xd0]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
sub esp, 8
lea edx, [esp + 0x16c4]
mov ecx, esp
mov dword [esp + 0x60], esp
push edx
call fcn.00645f90
mov ecx, dword [esp + 0x5c]
call fcn.00647be0
test eax, eax
je 0x646af7
mov ecx, dword [esp + 0x9c]
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x28], esp
push ecx
push eax
lea ecx, [esp + 0x1694]
call fcn.006787f0
mov ecx, dword [0x72bae0]
call fcn.0062a730
mov eax, dword [esp + 0x1c]
mov dword [eax], ebp
add eax, 4
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x5c]
inc ebp
add ebx, 0x40
dec eax
mov dword [esp + 0x5c], eax
jne 0x646a63
mov ecx, dword [0x72bae0]
lea edx, [esp + 0x88]
push edx
call fcn.0062a950
movsx eax, ax
cmp eax, 0xffffffff
je 0x646b3f
mov eax, dword [esp + eax*4 + 0xe0]
mov edx, dword [esp + 0x54]
lea ecx, [esp + 0x1684]
shl eax, 6
push ecx
add eax, edx
jmp 0x646b73
mov eax, dword [esp + 0x90]
lea edx, [esp + 0x1684]
push edx
push eax
lea ecx, [esp + 0x1684]
call fcn.006787b0
mov eax, dword [esp + 0x1684]
cmp eax, 0xffffffff
je 0x646cfe
lea ecx, [esp + 0x1684]
push ecx
push eax
lea ecx, [esp + 0x1684]
call fcn.006787b0
mov dword [esp + 0x88], 0x6dd1f4
mov ebx, dword [esp + 0x14]
xor edi, edi
mov ecx, dword [esp + 0x38]
mov byte [esp + 0x1674], 1
cmp ecx, edi
je 0x646bbd
mov al, byte [ecx - 1]
test al, al
je 0x646bb3
cmp al, 0xff
je 0x646bb3
dec al
mov byte [ecx - 1], al
jmp 0x646bbd
dec ecx
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0x38], edi
mov dword [esp + 0x3c], edi
mov dword [esp + 0x40], edi
xor esi, esi
jmp 0x646067
push esi
push 1
sub esp, 0x10
mov ecx, 0x72c070
mov edx, esp
mov dword [esp + 0x30], esp
push 1
push edx
call fcn.00644770
sub esp, 0x10
lea eax, [esp + 0x3b]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
push str.Not_support_
mov byte [esp + 0x16a4], 4
call fcn.00413180
mov ecx, 0x72bae0
mov byte [esp + 0x169c], 2
call fcn.0061eec0
jmp 0x646c47
mov ecx, dword [esp + 0x24]
push ecx
call fcn.006a64d0
add esp, 4
lea ecx, [esp + 0x6c]
mov dword [esp + 0x24], esi
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], esi
mov byte [esp + 0x1674], 2
call fcn.0061d8c0
push 1
lea ecx, [esp + 0x38]
mov byte [esp + 0x1678], 1
call fcn.004138c0
jmp 0x646d3c
lea ecx, [esp + 0x6c]
mov byte [esp + 0x1674], 2
call fcn.0061d8c0
mov eax, dword [esp + 0x38]
test eax, eax
je 0x646c95
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x646c8c
cmp al, 0xff
je 0x646c8c
dec al
mov byte [ecx], al
jmp 0x646c95
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], 0
jmp 0x646d3c
mov edx, dword [esp + 0x48]
push edx
call fcn.006a64d0
mov eax, dword [esp + 0x3c]
add esp, 4
cmp eax, edi
mov dword [esp + 0x48], edi
mov dword [esp + 0x4c], edi
mov dword [esp + 0x50], edi
je 0x646cf0
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x646ce7
cmp al, 0xff
je 0x646ce7
dec al
mov byte [ecx], al
jmp 0x646cf0
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0x38], edi
mov dword [esp + 0x3c], edi
mov dword [esp + 0x40], edi
jmp 0x646d3c
mov eax, dword [esp + 0x38]
xor esi, esi
cmp eax, esi
mov dword [esp + 0x88], 0x6dd1f4
je 0x646d30
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x646d27
cmp al, 0xff
je 0x646d27
dec al
mov byte [ecx], al
jmp 0x646d30
push ecx
call fcn.006a64d0
add esp, 4
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], esi
mov dword [esp + 0x40], esi
lea ecx, [esp + 0x60]
mov byte [esp + 0x1674], 0
call fcn.00644c20
lea ecx, [esp + 0x167c]
mov dword [esp + 0x1674], 0xffffffff
call fcn.00678730
xor eax, eax
mov ecx, dword [esp + 0x166c]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x1668
ret 0x4c