Function at 0x649fd0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x16c
mov eax, dword [esp + 0x174]
push ebx
mov ebx, dword [eax + 0x510]
push ebp
mov ebp, dword [eax + 0x504]
push esi
mov esi, dword [esp + 0x17c]
mov eax, dword [esi + 0x40]
mov ecx, dword [eax + 4]
mov eax, dword [ecx + 0x1c]
mov edx, dword [eax + 0xb20]
mov dword [esp + 0x24], edx
mov edx, dword [esp + 0x184]
test edx, edx
mov dword [esp + 0x18], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x30], eax
je 0x64a4de
push edi
xor edi, edi
test ebp, ebp
jle 0x64a095
jmp 0x64a030
mov esi, dword [edx + edi*4]
mov eax, dword [ebx + 0x340]
mov ecx, esi
add eax, 0xffffffff
and ecx, 0x7fff
cmp eax, 3
ja case.default.0x64a049
jmp dword [eax*4 + 0x64a520]
sar ecx, 2
jmp case.default.0x64a049
sar ecx, 3
jmp case.default.0x64a049
mov ebp, dword [esp + 0x10]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [esp + 0x188]
mov ecx, eax
jmp case.default.0x64a049
sar ecx, 4
and esi, 0x8000
or esi, ecx
mov dword [edx + edi*4], esi
add edi, 1
cmp edi, ebp
jl 0x64a030
mov esi, dword [esp + 0x180]
cmp ebp, 2
mov ecx, dword [edx]
mov eax, dword [edx + 4]
mov dword [esp + 0x78], ecx
mov dword [esp + 0x7c], eax
jle 0x64a1c3
mov eax, dword [esp + 0x184]
lea ecx, [esp + 0x78]
sub ecx, edx
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x10]
add ebx, 0x34c
add eax, 0x30c
add ecx, 0xfffffffe
lea ebp, [edx + 8]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], ecx
jmp 0x64a0e4
mov eax, dword [esp + 0x18]
mov ebx, dword [eax + 0xfc]
mov esi, dword [eax]
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax + esi*4 + 0x344]
mov edx, dword [esp + 0x188]
mov eax, dword [eax + ebx*4 + 0x344]
mov edi, dword [edx + ebx*4]
push ecx
mov ecx, dword [esp + 0x18]
mov ecx, dword [ecx]
push eax
mov eax, dword [edx + esi*4]
mov edx, edi
call fcn.00649280
mov ecx, dword [ebp]
add esp, 8
test ecx, 0x8000
jne 0x64a18b
cmp eax, ecx
je 0x64a18b
mov edx, dword [esp + 0x184]
mov edx, dword [edx + 0x50c]
sub edx, eax
cmp edx, eax
jl 0x64a141
mov edx, eax
sub ecx, eax
jns 0x64a161
mov eax, edx
neg eax
cmp ecx, eax
jge 0x64a156
sub edx, ecx
sub edx, 1
mov ecx, edx
jmp 0x64a16b
add ecx, ecx
or edx, 0xffffffff
sub edx, ecx
mov ecx, edx
jmp 0x64a16b
cmp ecx, edx
jl 0x64a169
add ecx, edx
jmp 0x64a16b
add ecx, ecx
mov eax, dword [esp + 0x20]
mov dword [eax + ebp], ecx
mov eax, dword [esp + 0x188]
and edi, 0x7fff
mov dword [eax + ebx*4], edi
and dword [eax + esi*4], 0x7fff
jmp 0x64a19e
mov ecx, dword [esp + 0x20]
or eax, 0x8000
mov dword [ebp], eax
mov dword [ecx + ebp], 0
mov eax, 4
add dword [esp + 0x18], eax
add dword [esp + 0x14], eax
add ebp, eax
sub dword [esp + 0x10], 1
jne 0x64a0e0
mov ebx, dword [esp + 0x1c]
mov esi, dword [esp + 0x180]
push 1
lea edi, [esi + 4]
push 1
push edi
mov dword [esp + 0x38], edi
call fcn.0064b890
mov esi, dword [esp + 0x190]
mov ecx, dword [esi + 0x50c]
add dword [esi + 0x51c], 1
sub ecx, 1
call fcn.00648c20
push eax
lea edx, [eax + eax]
mov eax, dword [esp + 0x88]
add dword [esi + 0x518], edx
push eax
push edi
call fcn.0064b890
mov ecx, dword [esi + 0x50c]
sub ecx, 1
call fcn.00648c20
mov ecx, dword [esp + 0x94]
push eax
push ecx
push edi
call fcn.0064b890
add esp, 0x24
cmp dword [ebx], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x14], 2
jle 0x64a3fc
lea edx, [ebx + 4]
mov dword [esp + 0x10], edx
jmp 0x64a250
mov eax, dword [esp + 0x10]
mov edi, dword [eax]
mov ecx, dword [ebx + edi*4 + 0x80]
mov ebp, dword [ebx + edi*4 + 0xc0]
mov dword [esp + 0x18], ecx
mov ecx, ebp
mov esi, 1
shl esi, cl
xor ecx, ecx
cmp ebp, ecx
mov dword [esp + 0x1c], edi
mov dword [esp + 0x38], ecx
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x40], ecx
mov dword [esp + 0x44], ecx
mov dword [esp + 0x48], ecx
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x50], ecx
mov dword [esp + 0x54], ecx
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], ecx
je 0x64a373
xor eax, eax
cmp esi, ecx
jle 0x64a2e7
lea edx, [edi + 0xa]
shl edx, 5
add edx, ebx
mov edi, dword [edx]
cmp edi, ecx
jge 0x64a2c5
mov dword [esp + eax*4 + 0x58], 1
jmp 0x64a2d9
mov ecx, dword [esp + 0x34]
mov ecx, dword [ecx + edi*4 + 0x720]
mov ecx, dword [ecx + 4]
mov dword [esp + eax*4 + 0x58], ecx
xor ecx, ecx
add eax, 1
add edx, 4
cmp eax, esi
jl 0x64a2b5
mov edi, dword [esp + 0x1c]
xor edx, edx
cmp dword [esp + 0x18], ecx
jle 0x64a343
mov eax, dword [esp + 0x14]
lea eax, [esp + eax*4 + 0x78]
mov dword [esp + 0x1c], eax
jmp 0x64a302
xor ecx, ecx
xor eax, eax
cmp esi, ecx
jle 0x64a323
mov ecx, dword [esp + 0x1c]
mov ecx, dword [ecx]
mov edi, edi
cmp ecx, dword [esp + eax*4 + 0x58]
jl 0x64a31f
add eax, 1
cmp eax, esi
jl 0x64a310
jmp 0x64a323
mov dword [esp + edx*4 + 0x38], eax
mov eax, dword [esp + edx*4 + 0x38]
mov ecx, dword [esp + 0x24]
add dword [esp + 0x24], ebp
add dword [esp + 0x1c], 4
shl eax, cl
add edx, 1
or dword [esp + 0x20], eax
cmp edx, dword [esp + 0x18]
jl 0x64a300
mov eax, dword [ebx + edi*4 + 0x100]
mov ecx, dword [esp + 0x2c]
imul eax, eax, 0x2c
mov edx, dword [esp + 0x20]
add eax, dword [esp + 0x28]
push ecx
push edx
push eax
call fcn.00642000
mov ebp, dword [esp + 0x190]
add esp, 0xc
add dword [ebp + 0x514], eax
jmp 0x64a37a
mov ebp, dword [esp + 0x184]
xor esi, esi
cmp dword [esp + 0x18], esi
jle 0x64a3d5
lea ecx, [edi*8 + 0x50]
mov edi, dword [esp + 0x14]
mov dword [esp + 0x20], ecx
lea edi, [esp + edi*4 + 0x78]
mov edx, dword [esp + esi*4 + 0x38]
add edx, dword [esp + 0x20]
mov eax, dword [ebx + edx*4]
test eax, eax
jl 0x64a3c9
mov edx, dword [esp + 0x28]
imul eax, eax, 0x2c
mov ecx, dword [edi]
add eax, edx
cmp ecx, dword [eax + 4]
jge 0x64a3c9
mov edx, dword [esp + 0x2c]
push edx
push ecx
push eax
call fcn.00642000
add esp, 0xc
add dword [ebp + 0x518], eax
add esi, 1
add edi, 4
cmp esi, dword [esp + 0x18]
jl 0x64a395
mov eax, dword [esp + 0x18]
add dword [esp + 0x14], eax
mov eax, dword [esp + 0x30]
add dword [esp + 0x10], 4
add eax, 1
cmp eax, dword [ebx]
mov dword [esp + 0x30], eax
jl 0x64a250
mov esi, dword [esp + 0x184]
mov ecx, dword [ebx + 0x340]
mov edx, dword [esp + 0x188]
imul ecx, dword [edx]
mov eax, 1
xor edi, edi
xor ebp, ebp
cmp dword [esi + 0x504], eax
mov dword [esp + 0x14], eax
jle 0x64a492
add esi, 0x108
mov dword [esp + 0x10], esi
jmp 0x64a430
mov eax, dword [esp + 0x10]
mov edx, dword [eax]
mov eax, dword [esp + 0x188]
mov esi, dword [eax + edx*4]
mov eax, esi
and eax, 0x7fff
cmp eax, esi
jne 0x64a473
mov esi, dword [ebx + 0x340]
mov edi, dword [ebx + edx*4 + 0x344]
imul esi, eax
mov edx, dword [esp + 0x18c]
push edx
push edi
push ebp
mov eax, esi
call fcn.00649470
add esp, 0xc
mov ebp, edi
mov ecx, esi
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x184]
add dword [esp + 0x10], 4
add eax, 1
cmp eax, dword [edx + 0x504]
mov dword [esp + 0x14], eax
jl 0x64a430
mov ebx, dword [esp + 0x180]
mov eax, dword [ebx + 0x24]
cdq
sub eax, edx
sar eax, 1
mov esi, edi
cmp edi, eax
pop edi
jge 0x64a4c9
jmp 0x64a4b0
mov eax, dword [esp + 0x188]
mov dword [eax + esi*4], ecx
mov eax, dword [ebx + 0x24]
cdq
sub eax, edx
add esi, 1
sar eax, 1
cmp esi, eax
jl 0x64a4b0
pop esi
mov eax, 1
add dword [0x84a968], eax
pop ebp
pop ebx
add esp, 0x16c
ret
push 1
lea ecx, [esi + 4]
push 0
push ecx
call fcn.0064b890
mov eax, dword [esi + 0x24]
cdq
sub eax, edx
mov edx, dword [esp + 0x194]
sar eax, 1
add eax, eax
add eax, eax
push eax
push 0
push edx
call fcn.005af530
add dword [0x84a968], 1
add esp, 0x18
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x16c
ret