Function at 0x648460
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x78]
cmp eax, dword [ecx + 8]
jbe 0x649b87
sub esp, 0xf8
mov dword [esp + 0xb8], 0
mov dword [esp + 0xbc], 0
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0
mov eax, dword [esp + 0xfc]
mov dword [esp], eax
mov ecx, dword [esp + 0x100]
mov dword [esp + 4], ecx
lea edx, [0x6c709e]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
call fcn.004d5c90
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
movzx edx, byte [esp + 0x20]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
test dl, dl
je 0x64881b
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x78], ecx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x9c], eax
test ebx, ebx
jne 0x648510
xor edx, edx
jmp 0x648544
mov dword [esp], eax
mov dword [esp + 4], ebx
lea ecx, [0x6e5bf4]
mov dword [esp + 8], ecx
call fcn.004d4e00
mov eax, dword [esp + 0xc]
test eax, eax
setl al
mov ecx, dword [esp + 0x78]
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0x2c]
mov edx, eax
mov eax, dword [esp + 0x9c]
test dl, dl
je 0x6487fe
test ebp, ebp
jne 0x648554
xor edx, edx
jmp 0x648588
mov dword [esp], ecx
mov dword [esp + 4], ebp
lea eax, [0x6e5bf4]
mov dword [esp + 8], eax
call fcn.004d4e00
mov eax, dword [esp + 0xc]
test eax, eax
setl al
mov ecx, dword [esp + 0x78]
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0x2c]
mov edx, eax
mov eax, dword [esp + 0x9c]
test dl, dl
je 0x6487fe
mov dword [esp], eax
mov dword [esp + 4], ebx
call fcn.004d47c0
nop
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xb8]
test edx, edx
je 0x6485c0
lea ebx, [esp + 0xb8]
cmp edx, ebx
je 0x6485d5
jmp 0x649b6e
lea edx, [esp + 0xb8]
mov dword [esp + 0xb8], edx
lea ebx, [esp + 0xb8]
mov edx, dword [esp + 0xc0]
lea ebp, [edx + eax]
mov dword [esp + 0x70], ebp
mov esi, dword [esp + 0xc4]
mov edi, dword [esp + 0xbc]
cmp esi, ebp
jae 0x648639
mov dword [esp + 0x3c], eax
mov dword [esp + 0x94], ecx
mov dword [esp + 0x6c], edx
lea eax, [0x68d980]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.0044b5e0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0x6c]
mov dword [esp + 0x6c], esi
mov dword [esp + 0xb4], edi
add edx, edi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00463840
mov eax, dword [esp + 0x70]
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0xbc], eax
nop
nop
mov eax, dword [esp + 0xb8]
test eax, eax
je 0x648697
lea ecx, [esp + 0xb8]
cmp eax, ecx
je 0x6486ac
jmp 0x649b56
lea eax, [esp + 0xb8]
mov dword [esp + 0xb8], eax
lea ecx, [esp + 0xb8]
mov eax, dword [esp + 0xc0]
lea edx, [eax + 1]
mov ebx, dword [esp + 0xbc]
mov ebp, dword [esp + 0xc4]
cmp ebp, edx
jae 0x648700
lea ecx, [0x68d980]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.0044b5e0
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0xc4], ecx
mov dword [esp + 0xbc], ebx
lea ecx, [eax + 1]
mov dword [esp + 0xc0], ecx
mov byte [ebx + eax], 0x2f
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], eax
call fcn.004d47c0
nop
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xb8]
test edx, edx
je 0x648746
lea ebx, [esp + 0xb8]
cmp edx, ebx
je 0x648754
jmp 0x649b3e
lea edx, [esp + 0xb8]
mov dword [esp + 0xb8], edx
mov edx, dword [esp + 0xc0]
lea ebx, [edx + eax]
mov dword [esp + 0x70], ebx
mov ebp, dword [esp + 0xc4]
mov esi, dword [esp + 0xbc]
cmp ebp, ebx
jae 0x6487b8
mov dword [esp + 0x90], ecx
mov dword [esp + 0x38], eax
mov dword [esp + 0x6c], edx
lea eax, [0x68d980]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.0044b5e0
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x6c]
mov dword [esp + 0x6c], ebp
mov dword [esp + 0xb4], esi
add edx, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00463840
mov eax, dword [esp + 0x70]
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0xbc], eax
jmp 0x648944
mov dword [esp + 0x108], 0
mov dword [esp + 0x10c], 0
add esp, 0xf8
ret
mov eax, dword [esp + 0x100]
test eax, eax
je 0x6489bf
mov ecx, dword [esp + 0xfc]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea edx, [0x6e5bf4]
mov dword [esp + 8], edx
call fcn.004d4e00
mov eax, dword [esp + 0xc]
test eax, eax
jge 0x6489bf
mov eax, dword [esp + 0xfc]
mov dword [esp], eax
mov eax, dword [esp + 0x100]
mov dword [esp + 4], eax
call fcn.004d47c0
nop
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xb8]
test edx, edx
je 0x648891
lea ebx, [esp + 0xb8]
cmp edx, ebx
je 0x64889f
jmp 0x649b26
lea edx, [esp + 0xb8]
mov dword [esp + 0xb8], edx
mov edx, dword [esp + 0xc0]
lea ebx, [edx + eax]
mov dword [esp + 0x70], ebx
mov ebp, dword [esp + 0xc4]
mov esi, dword [esp + 0xbc]
cmp ebp, ebx
jae 0x648903
mov dword [esp + 0x40], eax
mov dword [esp + 0x98], ecx
mov dword [esp + 0x6c], edx
lea eax, [0x68d980]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.0044b5e0
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x98]
mov edx, dword [esp + 0x6c]
mov dword [esp + 0x6c], ebp
mov dword [esp + 0xb4], esi
add edx, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00463840
mov eax, dword [esp + 0x70]
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0xbc], eax
mov eax, dword [esp + 0x104]
test eax, eax
je 0x648953
mov ecx, dword [eax]
jmp 0x648955
xor ecx, ecx
mov dword [esp + 0x54], ecx
lea eax, [0x68d7c0]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], ecx
call fcn.0044b3e0
mov eax, dword [esp + 0xc]
mov dword [esp + 0xb0], eax
lea edi, [esp + 0xc8]
xor eax, eax
call fcn.00463144
lea eax, [0x6906c0]
mov dword [esp], eax
mov ecx, dword [esp + 0x104]
mov dword [esp + 4], ecx
lea edx, [esp + 0xc8]
mov dword [esp + 8], edx
call fcn.0040d450
xor eax, eax
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0xb0]
jmp 0x6489fa
mov dword [esp + 0x108], 0
mov dword [esp + 0x10c], 0
add esp, 0xf8
ret
lea eax, [esp + 0xc8]
mov dword [esp], eax
call fcn.0040d680
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0xa0]
mov dword [esp + 0x50], eax
mov ebx, dword [esp + 0xc8]
test ebx, ebx
je 0x648a97
mov ebp, dword [ebx]
mov ebx, dword [ebx + 4]
lea esi, [eax + 1]
cmp ecx, esi
jae 0x648a60
mov dword [esp + 0xa8], ebp
mov dword [esp + 0x5c], ebx
lea ebx, [0x68d7c0]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], esi
call fcn.0044b5e0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
lea esi, [eax + 1]
mov eax, dword [esp + 0x50]
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0xa8]
mov dword [esp + 0xa0], edx
mov dword [esp + 0x50], esi
mov dword [esp + 0x54], ecx
lea ecx, [edx + eax*8 + 4]
mov dword [ecx], ebx
mov ecx, dword [0x91eb10]
lea ebx, [edx + eax*8]
test ecx, ecx
jne 0x648a89
mov dword [ebx], ebp
jmp 0x6489dc
mov eax, ebp
mov edi, ebx
call fcn.00462ed0
jmp 0x6489dc
mov dword [esp + 0xac], edx
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00409220
mov eax, dword [esp + 0xc]
lea ecx, [0x73e8a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0048d920
xor eax, eax
jmp 0x648acf
mov ecx, dword [esp + 0x70]
lea eax, [ecx + 1]
mov ecx, dword [esp + 0x50]
cmp eax, ecx
jge 0x649173
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 0xac]
lea edx, [ecx + eax*8]
mov ebx, dword [edx + 4]
mov dword [esp + 0x58], ebx
mov edx, dword [edx]
mov dword [esp + 0xa4], edx
lea ebp, [0x6906c0]
mov dword [esp], ebp
mov esi, dword [esp + 0x104]
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call fcn.0040fa50
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
nop
mov edx, dword [esp + 0xb8]
test edx, edx
je 0x648b3f
lea ebx, [esp + 0xb8]
cmp edx, ebx
je 0x648b54
jmp 0x649b0e
lea edx, [esp + 0xb8]
mov dword [esp + 0xb8], edx
lea ebx, [esp + 0xb8]
mov dword [esp + 0x28], ecx
mov dword [esp + 0x74], eax
mov edx, dword [esp + 0xc0]
lea ebp, [edx + 1]
mov esi, dword [esp + 0xbc]
mov edi, dword [esp + 0xc4]
cmp edi, ebp
jae 0x648bbf
lea eax, [0x68d980]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
call fcn.0044b5e0
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xbc], esi
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x28]
lea ebx, [esp + 0xb8]
lea ebp, [edx + 1]
mov dword [esp + 0xc0], ebp
mov byte [esi + edx], 0x3b
nop
nop
mov edx, dword [esp + 0xb8]
test edx, edx
je 0x648be3
cmp edx, ebx
je 0x648bea
jmp 0x649af6
mov dword [esp + 0xb8], ebx
mov edx, dword [esp + 0xc0]
lea ebp, [edx + 1]
mov esi, dword [esp + 0xbc]
mov edi, dword [esp + 0xc4]
cmp edi, ebp
jae 0x648c4d
lea eax, [0x68d980]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
call fcn.0044b5e0
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xbc], esi
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x28]
lea ebx, [esp + 0xb8]
lea ebp, [edx + 1]
mov dword [esp + 0xc0], ebp
mov byte [esi + edx], 0x20
mov edx, dword [esp + 0x58]
test edx, edx
je 0x649156
mov eax, dword [esp + 0xa4]
mov dword [esp], eax
mov dword [esp + 4], edx
lea ecx, [0x6e5bf4]
mov dword [esp + 8], ecx
call fcn.004d4e00
mov eax, dword [esp + 0xc]
test eax, eax
jge 0x649156
mov eax, dword [esp + 0xa4]
mov dword [esp], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 4], eax
call fcn.004d47c0
nop
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xb8]
test edx, edx
je 0x648ccb
lea ebx, [esp + 0xb8]
cmp edx, ebx
je 0x648ce0
jmp 0x649ade
lea edx, [esp + 0xb8]
mov dword [esp + 0xb8], edx
lea ebx, [esp + 0xb8]
mov edx, dword [esp + 0xc0]
lea ebp, [edx + eax]
mov dword [esp + 0x6c], ebp
mov esi, dword [esp + 0xc4]
mov edi, dword [esp + 0xbc]
cmp esi, ebp
jae 0x648d44
mov dword [esp + 0x34], eax
mov dword [esp + 0x68], edx
mov dword [esp + 0x8c], ecx
lea eax, [0x68d980]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.0044b5e0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x8c]
mov edx, dword [esp + 0x68]
mov dword [esp + 0x68], esi
mov dword [esp + 0xb4], edi
add edx, edi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00463840
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0xbc], eax
nop
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x74]
xor edx, edx
jmp 0x649198
cmp edx, eax
jge 0x648e44
nop
nop
mov ebx, dword [esp + 0xb8]
test ebx, ebx
je 0x648dba
lea ebp, [esp + 0xb8]
cmp ebx, ebp
je 0x648dcf
jmp 0x649ac6
lea ebx, [esp + 0xb8]
mov dword [esp + 0xb8], ebx
lea ebp, [esp + 0xb8]
mov ebx, dword [esp + 0xc0]
lea esi, [ebx + 1]
mov edi, dword [esp + 0xbc]
mov edx, dword [esp + 0xc4]
cmp edx, esi
jae 0x648e32
lea eax, [0x68d980]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], esi
call fcn.0044b5e0
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xbc], edi
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x74]
lea ebp, [esp + 0xb8]
lea edx, [ebx + 1]
mov dword [esp + 0xc0], edx
mov byte [edi + ebx], 0x2a
mov edx, dword [esp + 0x6c]
nop
nop
mov ebx, dword [esp + 0xb8]
test ebx, ebx
je 0x648e61
lea ebp, [esp + 0xb8]
cmp ebx, ebp
je 0x648e76
jmp 0x649aae
lea ebx, [esp + 0xb8]
mov dword [esp + 0xb8], ebx
lea ebp, [esp + 0xb8]
mov ebx, dword [esp + 0xc0]
lea esi, [ebx + 1]
mov edi, dword [esp + 0xbc]
mov ebp, dword [esp + 0xc4]
cmp ebp, esi
jae 0x648ed6
lea eax, [0x68d980]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.0044b5e0
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xbc], edi
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x6c]
lea ebp, [ebx + 1]
mov dword [esp + 0xc0], ebp
mov byte [edi + ebx], 0x3d
cmp edx, eax
jge 0x648fab
nop
mov edx, dword [esp + 0xb8]
test edx, edx
je 0x648f08
lea ebx, [esp + 0xb8]
cmp edx, ebx
je 0x648f1d
jmp 0x649a96
lea edx, [esp + 0xb8]
mov dword [esp + 0xb8], edx
lea ebx, [esp + 0xb8]
mov edx, dword [esp + 0xc0]
lea ebp, [edx + 7]
mov esi, dword [esp + 0xc4]
mov edi, dword [esp + 0xbc]
cmp esi, ebp
jae 0x648f7e
mov dword [esp + 0x6c], ebp
mov dword [esp + 0x68], edx
lea eax, [0x68d980]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.0044b5e0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x68]
lea ebx, [esp + 0xb8]
mov ebp, dword [esp + 0x6c]
mov dword [edi + edx], 0x2d667475
mov dword [edi + edx + 3], 0x2727382d
mov dword [esp + 0xc0], ebp
mov dword [esp + 0xc4], esi
mov dword [esp + 0xbc], edi
xor edx, edx
xor ebp, ebp
jmp 0x6495a4
test eax, eax
jne 0x648fb3
xor edx, edx
jmp 0x648fdc
mov dword [esp], ecx
mov dword [esp + 4], eax
lea edx, [0x6e5bf4]
mov dword [esp + 8], edx
call fcn.004d4e00
mov eax, dword [esp + 0xc]
test eax, eax
setl al
mov ecx, dword [esp + 0x74]
mov edx, eax
mov eax, dword [esp + 0x28]
test dl, dl
jne 0x64908f
nop
mov edx, dword [esp + 0xb8]
test edx, edx
je 0x649000
lea ebx, [esp + 0xb8]
cmp edx, ebx
je 0x649015
jmp 0x64958b
lea edx, [esp + 0xb8]
mov dword [esp + 0xb8], edx
lea ebx, [esp + 0xb8]
mov edx, dword [esp + 0xc0]
lea ebp, [edx + 1]
mov esi, dword [esp + 0xbc]
mov edi, dword [esp + 0xc4]
cmp edi, ebp
jae 0x649078
lea eax, [0x68d980]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
call fcn.0044b5e0
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xbc], esi
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x74]
lea ebx, [esp + 0xb8]
lea ebp, [edx + 1]
mov dword [esp + 0xc0], ebp
mov byte [esi + edx], 0x22
xor edx, edx
xor ebp, ebp
jmp 0x649204
nop
nop
mov edx, dword [esp + 0xb8]
test edx, edx
je 0x6490ac
lea ebx, [esp + 0xb8]
cmp edx, ebx
je 0x6490ba
jmp 0x6491eb
lea edx, [esp + 0xb8]
mov dword [esp + 0xb8], edx
mov edx, dword [esp + 0xc0]
lea ebx, [eax + edx]
mov dword [esp + 0x6c], ebx
mov ebp, dword [esp + 0xc4]
mov esi, dword [esp + 0xbc]
cmp ebp, ebx
jae 0x649110
mov dword [esp + 0x68], edx
lea eax, [0x68d980]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.0044b5e0
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x68]
mov dword [esp + 0x68], ebp
mov dword [esp + 0xb4], esi
add edx, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00463840
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0xbc], eax
jmp 0x648ac8
mov dword [esp + 0x108], 0
mov dword [esp + 0x10c], 0
add esp, 0xf8
ret
mov eax, dword [esp + 0xbc]
mov ecx, dword [esp + 0xc0]
mov dword [esp + 0x108], eax
mov dword [esp + 0x10c], ecx
add esp, 0xf8
ret
mov edx, ebp
mov dword [esp + 0x6c], edx
cmp edx, eax
jge 0x648d97
movzx ebx, byte [ecx + edx]
cmp ebx, 0x80
jge 0x6491b5
lea ebp, [edx + 1]
jmp 0x6491d9
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.0045d0c0
mov ebx, dword [esp + 0xc]
mov ebp, dword [esp + 0x10]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x6c]
lea esi, [ebx - 0x20]
cmp esi, 0x5e
jbe 0x649196
cmp ebx, 9
je 0x649196
jmp 0x648d95
lea eax, [0x68d7c0]
mov dword [esp], eax
lea eax, [0x73d0b8]
mov dword [esp + 4], eax
call fcn.00436cf0
inc edx
cmp edx, eax
jge 0x6493b0
jae 0x649582
movzx esi, byte [edx + ecx]
xchg esi, eax
cmp al, 0x22
xchg esi, eax
je 0x649224
xchg esi, eax
cmp al, 0x5c
xchg esi, eax
jne 0x649203
cmp ebp, edx
ja 0x649579
mov esi, edx
sub edx, ebp
mov edi, edx
neg edx
sar edx, 0x1f
and ebp, edx
lea edx, [ebp + ecx]
nop
mov ebp, dword [esp + 0xb8]
test ebp, ebp
je 0x649252
cmp ebp, ebx
je 0x649259
jmp 0x649561
mov dword [esp + 0xb8], ebx
mov dword [esp + 0x6c], esi
mov ebp, dword [esp + 0xc0]
lea ecx, [edi + ebp]
mov dword [esp + 0x68], ecx
mov eax, dword [esp + 0xc4]
mov esi, dword [esp + 0xbc]
cmp eax, ecx
jae 0x6492c1
mov dword [esp + 0x64], ebp
mov dword [esp + 0x60], edi
mov dword [esp + 0x80], edx
lea edx, [0x68d980]
mov dword [esp], edx
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044b5e0
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x80]
mov ebp, dword [esp + 0x64]
mov edi, dword [esp + 0x60]
mov dword [esp + 0x64], eax
mov dword [esp + 0xb4], esi
lea ecx, [esi + ebp]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], edi
call fcn.00463840
mov eax, dword [esp + 0x68]
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0xbc], eax
nop
mov eax, dword [esp + 0xb8]
test eax, eax
je 0x64931f
lea edx, [esp + 0xb8]
cmp eax, edx
je 0x64932d
jmp 0x649549
lea edx, [esp + 0xb8]
mov dword [esp + 0xb8], edx
mov ebx, dword [esp + 0xc0]
lea ebp, [ebx + 1]
mov esi, dword [esp + 0xbc]
mov edi, dword [esp + 0xc4]
cmp edi, ebp
jae 0x649388
lea eax, [0x68d980]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
call fcn.0044b5e0
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xbc], esi
lea edx, [esp + 0xb8]
lea ebp, [ebx + 1]
mov dword [esp + 0xc0], ebp
mov byte [esi + ebx], 0x5c
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x6c]
lea ebx, [esp + 0xb8]
mov ebp, edx
jmp 0x649203
cmp ebp, eax
ja 0x649540
sub eax, ebp
mov edx, eax
neg eax
sar eax, 0x1f
and ebp, eax
lea eax, [ebp + ecx]
nop
mov ecx, dword [esp + 0xb8]
test ecx, ecx
je 0x6493dc
cmp ecx, ebx
je 0x6493e3
jmp 0x649528
mov dword [esp + 0xb8], ebx
mov ecx, dword [esp + 0xc0]
lea ebp, [edx + ecx]
mov dword [esp + 0x6c], ebp
mov esi, dword [esp + 0xc4]
mov edi, dword [esp + 0xbc]
cmp esi, ebp
jae 0x649441
mov dword [esp + 0x68], ecx
mov dword [esp + 0x64], edx
mov dword [esp + 0x7c], eax
lea eax, [0x68d980]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.0044b5e0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x64]
mov dword [esp + 0x68], esi
mov dword [esp + 0xb4], edi
add ecx, edi
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.00463840
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0xbc], eax
nop
mov eax, dword [esp + 0xb8]
test eax, eax
je 0x64949b
lea ecx, [esp + 0xb8]
cmp eax, ecx
je 0x6494a9
jmp 0x649510
lea eax, [esp + 0xb8]
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0xc0]
lea ecx, [eax + 1]
mov edx, dword [esp + 0xbc]
mov ebx, dword [esp + 0xc4]
cmp ebx, ecx
jae 0x6494fd
lea ebp, [0x68d980]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ecx
call fcn.0044b5e0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0xc4], ecx
mov dword [esp + 0xbc], edx
lea ecx, [eax + 1]
mov dword [esp + 0xc0], ecx
mov byte [edx + eax], 0x22
jmp 0x648ac8
lea eax, [0x68d7c0]
mov dword [esp], eax
lea eax, [0x73d0b8]
mov dword [esp + 4], eax
call fcn.00436cf0
lea eax, [0x68d7c0]
mov dword [esp], eax
lea eax, [0x73d0b8]
mov dword [esp + 4], eax
call fcn.00436cf0
mov ecx, eax
mov eax, ebp
call fcn.00462fb0
lea eax, [0x68d7c0]
mov dword [esp], eax
lea eax, [0x73d0b8]
mov dword [esp + 4], eax
call fcn.00436cf0
lea eax, [0x68d7c0]
mov dword [esp], eax
lea eax, [0x73d0b8]
mov dword [esp + 4], eax
call fcn.00436cf0
mov eax, ebp
mov ecx, edx
call fcn.00462fb0
mov ecx, eax
mov eax, edx
call fcn.00462f50
lea eax, [0x68d7c0]
mov dword [esp], eax
lea eax, [0x73d0b8]
mov dword [esp + 4], eax
call fcn.00436cf0
inc edx
cmp edx, eax
jge 0x649927
jae 0x649a8d
mov dword [esp + 0x4c], edx
movzx esi, byte [ecx + edx]
xchg esi, eax
mov byte [esp + 0x25], al
xchg esi, eax
lea edi, [esi - 0x21]
xchg edi, eax
cmp al, 0x5e
xchg edi, eax
jb 0x6495d1
mov edi, 1
jmp 0x649645
xchg esi, eax
cmp al, 0x2a
xchg esi, eax
jne 0x6495df
mov edi, 1
jmp 0x649645
xchg esi, eax
cmp al, 0x27
xchg esi, eax
jne 0x6495ed
mov edi, 1
jmp 0x649645
xchg esi, eax
cmp al, 0x25
xchg esi, eax
jne 0x6495fb
mov edi, 1
jmp 0x649645
mov dword [esp + 0x44], ebp
lea eax, [0x6cbe8d]
mov dword [esp], eax
mov dword [esp + 4], 0xf
xchg esi, eax
movzx ecx, al
xchg esi, eax
mov dword [esp + 8], ecx
call fcn.004d34e0
mov eax, dword [esp + 0xc]
test eax, eax
setge al
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0x4c]
lea ebx, [esp + 0xb8]
mov ebp, dword [esp + 0x44]
movzx esi, byte [esp + 0x25]
mov edi, eax
mov eax, dword [esp + 0x28]
xchg edi, eax
test al, al
xchg edi, eax
je 0x6495a3
cmp ebp, edx
ja 0x649a84
mov edi, edx
sub edx, ebp
mov dword [esp + 0x30], edx
neg edx
sar edx, 0x1f
and ebp, edx
lea edx, [ecx + ebp]
nop
mov ebp, dword [esp + 0xb8]
test ebp, ebp
je 0x64967e
cmp ebp, ebx
je 0x649685
jmp 0x649a6c
mov dword [esp + 0xb8], ebx
mov ebp, dword [esp + 0xc0]
mov ecx, dword [esp + 0x30]
lea eax, [ebp + ecx]
mov dword [esp + 0x6c], eax
mov edi, dword [esp + 0xc4]
mov esi, dword [esp + 0xbc]
cmp edi, eax
jae 0x6496ea
mov dword [esp + 0x88], edx
mov dword [esp + 0x68], ebp
lea ecx, [0x68d980]
mov dword [esp], ecx
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], eax
call fcn.0044b5e0
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x88]
mov ebp, dword [esp + 0x68]
mov dword [esp + 0x68], edi
mov dword [esp + 0xb4], esi
lea eax, [esi + ebp]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00463840
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0xbc], eax
nop
nop
mov eax, dword [esp + 0xb8]
test eax, eax
je 0x649749
lea edx, [esp + 0xb8]
cmp eax, edx
je 0x649757
jmp 0x649a54
lea edx, [esp + 0xb8]
mov dword [esp + 0xb8], edx
mov ebx, dword [esp + 0xc0]
lea ebp, [ebx + 1]
mov esi, dword [esp + 0xbc]
mov edi, dword [esp + 0xc4]
cmp edi, ebp
jae 0x6497b2
lea eax, [0x68d980]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ebp
call fcn.0044b5e0
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xbc], esi
lea edx, [esp + 0xb8]
lea ebp, [ebx + 1]
mov dword [esp + 0xc0], ebp
mov byte [esi + ebx], 0x25
movzx ebx, byte [esp + 0x25]
mov ebp, ebx
shr bl, 4
movzx ebx, bl
lea esi, [0x6cc670]
movzx ebx, byte [esi + ebx]
nop
mov edi, dword [esp + 0xb8]
test edi, edi
je 0x6497ec
cmp edi, edx
je 0x6497f3
jmp 0x649a3c
mov dword [esp + 0xb8], edx
mov edi, dword [esp + 0xc0]
lea edx, [edi + 1]
mov esi, dword [esp + 0xbc]
mov eax, ebp
mov ebp, dword [esp + 0xc4]
cmp ebp, edx
jae 0x649857
mov byte [esp + 0x27], bl
lea eax, [0x68d980]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edi
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.0044b5e0
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xbc], esi
movzx eax, byte [esp + 0x25]
movzx ebx, byte [esp + 0x27]
lea edx, [edi + 1]
mov dword [esp + 0xc0], edx
mov byte [esi + edi], bl
and eax, 0xf
lea edx, [0x6cc670]
movzx edx, byte [eax + edx]
nop
mov ebx, dword [esp + 0xb8]
test ebx, ebx
je 0x64988d
lea ebp, [esp + 0xb8]
cmp ebx, ebp
je 0x6498a2
jmp 0x649a24
lea ebx, [esp + 0xb8]
mov dword [esp + 0xb8], ebx
lea ebp, [esp + 0xb8]
mov ebx, dword [esp + 0xc0]
lea esi, [ebx + 1]
mov edi, dword [esp + 0xbc]
mov ebp, dword [esp + 0xc4]
cmp ebp, esi
jae 0x6498ff
mov byte [esp + 0x26], dl
lea eax, [0x68d980]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.0044b5e0
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xbc], edi
movzx edx, byte [esp + 0x26]
lea esi, [ebx + 1]
mov dword [esp + 0xc0], esi
mov byte [edi + ebx], dl
mov edx, dword [esp + 0x4c]
lea ebp, [edx + 1]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x74]
lea ebx, [esp + 0xb8]
jmp 0x6495a3
cmp ebp, eax
ja 0x649a1b
sub eax, ebp
mov edx, eax
neg eax
sar eax, 0x1f
and ebp, eax
lea eax, [ecx + ebp]
nop
mov ecx, dword [esp + 0xb8]
test ecx, ecx
je 0x649952
cmp ecx, ebx
je 0x649959
jmp 0x649a03
mov dword [esp + 0xb8], ebx
mov ecx, dword [esp + 0xc0]
lea ebx, [edx + ecx]
mov dword [esp + 0x6c], ebx
mov ebp, dword [esp + 0xc4]
mov esi, dword [esp + 0xbc]
cmp ebp, ebx
jae 0x6499bd
mov dword [esp + 0x68], ecx
mov dword [esp + 0x64], edx
mov dword [esp + 0x84], eax
lea eax, [0x68d980]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.0044b5e0
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x64]
mov dword [esp + 0x68], ebp
mov dword [esp + 0xb4], esi
add ecx, esi
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.00463840
mov eax, dword [esp + 0x6c]
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0xbc], eax
jmp 0x648ac8
lea eax, [0x68d7c0]
mov dword [esp], eax
lea eax, [0x73d0b8]
mov dword [esp + 4], eax
call fcn.00436cf0
mov ecx, eax
mov eax, ebp
call fcn.00462fb0
lea eax, [0x68d7c0]
mov dword [esp], eax
lea eax, [0x73d0b8]
mov dword [esp + 4], eax
call fcn.00436cf0
lea eax, [0x68d7c0]
mov dword [esp], eax
lea eax, [0x73d0b8]
mov dword [esp + 4], eax
call fcn.00436cf0
lea eax, [0x68d7c0]
mov dword [esp], eax
lea eax, [0x73d0b8]
mov dword [esp + 4], eax
call fcn.00436cf0
lea eax, [0x68d7c0]
mov dword [esp], eax
lea eax, [0x73d0b8]
mov dword [esp + 4], eax
call fcn.00436cf0
mov eax, ebp
mov ecx, edx
call fcn.00462fb0
mov ecx, eax
mov eax, edx
call fcn.00462f50
lea eax, [0x68d7c0]
mov dword [esp], eax
lea eax, [0x73d0b8]
mov dword [esp + 4], eax
call fcn.00436cf0
lea eax, [0x68d7c0]
mov dword [esp], eax
lea eax, [0x73d0b8]
mov dword [esp + 4], eax
call fcn.00436cf0
lea eax, [0x68d7c0]
mov dword [esp], eax
lea eax, [0x73d0b8]
mov dword [esp + 4], eax
call fcn.00436cf0
lea eax, [0x68d7c0]
mov dword [esp], eax
lea eax, [0x73d0b8]
mov dword [esp + 4], eax
call fcn.00436cf0
lea eax, [0x68d7c0]
mov dword [esp], eax
lea eax, [0x73d0b8]
mov dword [esp + 4], eax
call fcn.00436cf0
lea eax, [0x68d7c0]
mov dword [esp], eax
lea eax, [0x73d0b8]
mov dword [esp + 4], eax
call fcn.00436cf0
lea eax, [0x68d7c0]
mov dword [esp], eax
lea eax, [0x73d0b8]
mov dword [esp + 4], eax
call fcn.00436cf0
lea eax, [0x68d7c0]
mov dword [esp], eax
lea eax, [0x73d0b8]
mov dword [esp + 4], eax
call fcn.00436cf0
lea eax, [0x68d7c0]
mov dword [esp], eax
lea eax, [0x73d0b8]
mov dword [esp + 4], eax
call fcn.00436cf0
lea eax, [0x68d7c0]
mov dword [esp], eax
lea eax, [0x73d0b8]
mov dword [esp + 4], eax
call fcn.00436cf0
nop
call fcn.00461ac0
jmp fcn.00648460