Function at 0x649d40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x16c
mov eax, dword [esp + 0x178]
mov ecx, dword [eax + 0x510]
push ebx
mov ebx, dword [esp + 0x180]
push ebp
mov ebp, dword [eax + 0x504]
push esi
mov esi, dword [esp + 0x180]
mov edx, dword [esi + 0x40]
mov eax, dword [edx + 4]
mov eax, dword [eax + 0x1c]
mov dword [esp + 0xc], ecx
mov ecx, dword [eax + 0xb20]
mov dword [esp + 0x30], eax
mov dword [esp + 0x2c], ecx
test ebx, ebx
je 0x64a2c6
push edi
xor edi, edi
test ebp, ebp
jle 0x649df3
jmp 0x649da0
mov edx, dword [esp + 0x10]
mov esi, dword [ebx + edi*4]
mov eax, dword [edx + 0x340]
mov ecx, esi
dec eax
and ecx, 0x7fff
cmp eax, 3
ja case.default.0x649dbb
jmp dword [eax*4 + 0x64a308]
sar ecx, 2
jmp case.default.0x649dbb
sar ecx, 3
jmp case.default.0x649dbb
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
jmp case.default.0x649dbb
sar ecx, 4
and esi, 0x8000
or esi, ecx
mov dword [ebx + edi*4], esi
inc edi
cmp edi, ebp
jl 0x649da0
cmp ebp, 2
mov ecx, dword [ebx]
mov edx, dword [ebx + 4]
mov dword [esp + 0x78], ecx
mov dword [esp + 0x7c], edx
jle 0x649f3c
mov edx, dword [esp + 0x10]
mov ecx, ebx
lea eax, [ecx + 8]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x188]
add eax, 0x30c
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x78]
add edx, 0x34c
sub eax, ecx
add ebp, 0xfffffffe
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], eax
mov dword [esp + 0x24], ebp
mov eax, dword [esp + 0x1c]
mov ebp, dword [eax + 0xfc]
mov ebx, dword [eax]
mov ecx, dword [esp + 0x10]
mov edi, dword [ecx + ebp*4 + 0x344]
mov eax, dword [esp + 0x18c]
mov esi, dword [eax + ebp*4]
mov ecx, dword [eax + ebx*4]
and esi, 0x7fff
and ecx, 0x7fff
sub ecx, esi
mov eax, ecx
cdq
xor eax, edx
sub eax, edx
mov edx, dword [esp + 0x14]
mov edx, dword [edx]
sub edx, edi
imul eax, edx
mov edx, dword [esp + 0x10]
mov edx, dword [edx + ebx*4 + 0x344]
sub edx, edi
mov edi, edx
cdq
idiv edi
test ecx, ecx
jge 0x649ea1
mov ecx, esi
sub ecx, eax
jmp 0x649ea4
lea ecx, [eax + esi]
mov edi, dword [esp + 0x20]
mov eax, dword [edi]
test eax, 0x8000
jne 0x649f0b
cmp ecx, eax
je 0x649f0b
mov edx, dword [esp + 0x188]
mov edx, dword [edx + 0x50c]
sub edx, ecx
cmp edx, ecx
jl 0x649eca
mov edx, ecx
sub eax, ecx
jns 0x649ee7
mov ecx, edx
neg ecx
cmp eax, ecx
jge 0x649edd
sub edx, eax
dec edx
mov eax, edx
jmp 0x649ef1
lea edx, [eax + eax]
or eax, 0xffffffff
sub eax, edx
jmp 0x649ef1
cmp eax, edx
jl 0x649eef
add eax, edx
jmp 0x649ef1
add eax, eax
mov ecx, dword [esp + 0x18]
mov dword [ecx + edi], eax
mov eax, dword [esp + 0x18c]
mov dword [eax + ebp*4], esi
and dword [eax + ebx*4], 0x7fff
jmp 0x649f1e
mov edx, dword [esp + 0x18]
or ecx, 0x8000
mov dword [edi], ecx
mov dword [edx + edi], 0
mov eax, 4
add dword [esp + 0x1c], eax
add dword [esp + 0x14], eax
add edi, eax
sub dword [esp + 0x24], 1
mov dword [esp + 0x20], edi
jne 0x649e41
mov edi, dword [esp + 0x180]
push 1
push 1
push edi
call fcn.00648c30
mov esi, dword [esp + 0x194]
mov eax, dword [esi + 0x50c]
inc dword [esi + 0x51c]
lea edx, [eax - 1]
mov eax, edx
add esp, 0xc
xor ecx, ecx
test eax, eax
je 0x649f75
mov edi, edi
inc ecx
shr eax, 1
jne 0x649f70
lea eax, [ecx + ecx]
add dword [esi + 0x518], eax
xor eax, eax
test edx, edx
je 0x649f89
inc eax
shr edx, 1
jne 0x649f84
mov ecx, dword [esp + 0x78]
push eax
push ecx
push edi
call fcn.00648c30
mov esi, dword [esi + 0x50c]
add esp, 0xc
sub esi, 1
mov eax, 0
je 0x649fad
inc eax
shr esi, 1
jne 0x649fa8
mov edx, dword [esp + 0x7c]
push eax
push edx
push edi
call fcn.00648c30
mov eax, dword [esp + 0x1c]
add esp, 0xc
cmp dword [eax], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x14], 2
jle 0x64a1e6
mov ecx, eax
add ecx, 4
mov dword [esp + 0x18], ecx
mov edx, dword [esp + 0x18]
mov eax, dword [edx]
mov ecx, dword [esp + 0x10]
mov ebp, dword [ecx + eax*4 + 0xc0]
mov edx, dword [ecx + eax*4 + 0x80]
xor edi, edi
mov esi, 1
mov ecx, ebp
shl esi, cl
xor ebx, ebx
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], edx
mov dword [esp + 0x38], edi
mov dword [esp + 0x3c], edi
mov dword [esp + 0x40], edi
mov dword [esp + 0x44], edi
mov dword [esp + 0x48], edi
mov dword [esp + 0x4c], edi
mov dword [esp + 0x50], edi
mov dword [esp + 0x54], edi
mov dword [esp + 0x2c], edi
cmp ebp, edi
je 0x64a127
xor eax, eax
cmp esi, edi
jle 0x64a07b
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x34]
add edx, 0xa
shl edx, 5
add edx, dword [esp + 0x10]
mov edi, dword [edx]
test edi, edi
jge 0x64a063
mov dword [esp + eax*4 + 0x58], 1
jmp 0x64a071
mov edi, dword [ecx + edi*4 + 0x720]
mov edi, dword [edi + 4]
mov dword [esp + eax*4 + 0x58], edi
inc eax
add edx, 4
cmp eax, esi
jl 0x64a053
xor edi, edi
xor edx, edx
cmp dword [esp + 0x1c], edi
jle 0x64a0cd
mov eax, dword [esp + 0x14]
lea ecx, [esp + eax*4 + 0x78]
mov dword [esp + 0x24], ecx
nop
xor eax, eax
cmp esi, edi
jle 0x64a0b1
mov ecx, dword [esp + 0x24]
mov ecx, dword [ecx]
lea esp, [esp]
cmp ecx, dword [esp + eax*4 + 0x58]
jl 0x64a0ad
inc eax
cmp eax, esi
jl 0x64a0a0
jmp 0x64a0b1
mov dword [esp + edx*4 + 0x38], eax
mov eax, dword [esp + edx*4 + 0x38]
mov ecx, dword [esp + 0x2c]
add dword [esp + 0x2c], ebp
add dword [esp + 0x24], 4
shl eax, cl
inc edx
or ebx, eax
cmp edx, dword [esp + 0x1c]
jl 0x64a090
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x20]
mov esi, dword [ecx + edx*4 + 0x100]
imul esi, esi, 0x2c
add esi, dword [esp + 0x30]
cmp ebx, edi
jl 0x64a118
mov eax, dword [esi + 0xc]
cmp ebx, dword [eax + 4]
jge 0x64a118
mov eax, dword [eax + 8]
mov ecx, dword [eax + ebx*4]
mov edx, dword [esi + 0x14]
mov eax, dword [edx + ebx*4]
push ecx
mov ecx, dword [esp + 0x184]
push eax
push ecx
call fcn.00648c30
mov edx, dword [esi + 0xc]
mov eax, dword [edx + 8]
mov ebx, dword [eax + ebx*4]
add esp, 0xc
jmp 0x64a11a
xor ebx, ebx
mov eax, dword [esp + 0x188]
add dword [eax + 0x514], ebx
xor ebx, ebx
cmp dword [esp + 0x1c], edi
jle 0x64a1c4
mov ecx, dword [esp + 0x20]
mov ebp, dword [esp + 0x14]
lea edx, [ecx*8 + 0x50]
mov dword [esp + 0x20], edx
lea ebp, [esp + ebp*4 + 0x78]
lea ebx, [ebx]
mov eax, dword [esp + ebx*4 + 0x38]
add eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx + eax*4]
test eax, eax
jl 0x64a1ba
mov edx, dword [esp + 0x30]
imul eax, eax, 0x2c
mov esi, dword [ebp]
cmp esi, dword [eax + edx + 4]
lea edi, [eax + edx]
jge 0x64a1ba
test esi, esi
jl 0x64a1ab
mov eax, dword [edi + 0xc]
cmp esi, dword [eax + 4]
jge 0x64a1ab
mov eax, dword [eax + 8]
mov ecx, dword [eax + esi*4]
mov edx, dword [edi + 0x14]
mov eax, dword [edx + esi*4]
push ecx
mov ecx, dword [esp + 0x184]
push eax
push ecx
call fcn.00648c30
mov edx, dword [edi + 0xc]
mov eax, dword [edx + 8]
mov esi, dword [eax + esi*4]
add esp, 0xc
jmp 0x64a1ad
xor esi, esi
mov eax, dword [esp + 0x188]
add dword [eax + 0x518], esi
inc ebx
add ebp, 4
cmp ebx, dword [esp + 0x1c]
jl 0x64a150
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
add dword [esp + 0x14], ecx
add dword [esp + 0x18], 4
inc eax
cmp eax, dword [edx]
mov dword [esp + 0x28], eax
jl 0x649fe2
mov ebp, dword [esp + 0x10]
mov eax, dword [esp + 0x18c]
mov ecx, dword [ebp + 0x340]
imul ecx, dword [eax]
mov eax, dword [esp + 0x188]
mov edx, 1
xor edi, edi
xor ebx, ebx
cmp dword [eax + 0x504], edx
mov dword [esp + 0x14], edx
jle 0x64a280
add eax, 0x108
mov dword [esp + 0x18], eax
nop
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x18c]
mov edx, dword [edx]
mov esi, dword [eax + edx*4]
mov eax, esi
and eax, 0x7fff
cmp eax, esi
jne 0x64a263
mov esi, dword [ebp + 0x340]
mov edi, dword [ebp + edx*4 + 0x344]
imul esi, eax
mov edx, dword [esp + 0x190]
push edx
push edi
push ebx
mov eax, esi
call fcn.00649880
add esp, 0xc
mov ebx, edi
mov ecx, esi
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x188]
add dword [esp + 0x18], 4
inc eax
cmp eax, dword [edx + 0x504]
mov dword [esp + 0x14], eax
jl 0x64a220
mov ebx, dword [esp + 0x184]
mov eax, dword [ebx + 0x24]
cdq
sub eax, edx
sar eax, 1
cmp edi, eax
mov esi, edi
jge 0x64a2b0
mov edi, dword [esp + 0x190]
lea esp, [esp]
mov dword [edi + esi*4], ecx
mov eax, dword [ebx + 0x24]
cdq
sub eax, edx
inc esi
sar eax, 1
cmp esi, eax
jl 0x64a2a0
pop edi
pop esi
mov eax, 1
add dword [0xf62690], eax
pop ebp
pop ebx
add esp, 0x16c
ret
mov eax, dword [esp + 0x17c]
push 1
push 0
push eax
call fcn.00648c30
mov eax, dword [esi + 0x24]
mov ecx, dword [esp + 0x198]
cdq
sub eax, edx
sar eax, 1
add eax, eax
add eax, eax
push eax
push 0
push ecx
call fcn.00631280
inc dword [0xf62690]
add esp, 0x18
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x16c
ret