Function at 0x649090
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x87de16
mov eax, dword fs:[0]
push eax
sub esp, 0x4c
push ebx
push ebp
push esi
push edi
mov eax, dword [0x8ce6f4]
xor eax, esp
push eax
lea eax, [esp + 0x60]
mov dword fs:[0], eax
mov dword [esp + 0x34], ecx
mov ecx, dword [esp + 0x74]
xor edi, edi
mov dword [esp + 0x68], edi
cmp dword [ecx - 0xc], edi
jl 0x6490f3
push 0x442dcc
push ecx
call fcn.0080292f
mov ecx, dword [esp + 0x7c]
add esp, 8
cmp eax, edi
je 0x6490ee
sub eax, ecx
sar eax, 1
jne 0x6490ee
lea eax, [ecx - 0x10]
jmp 0x649e63
cmp dword [ecx - 0xc], edi
jge 0x6490fd
push 0x80070057
call fcn.004a8210
cmp word [ecx], 0x2f
push 0x442dc4
sete bl
push 0x442dc4
lea ecx, [esp + 0x7c]
mov byte [esp + 0x1f], bl
call fcn.004f7060
mov ecx, eax
call fcn.00535c60
mov ecx, dword [esp + 0x74]
cmp dword [ecx - 0xc], edi
jle 0x649146
push 0x20
push ecx
call fcn.0080308d
mov ecx, dword [esp + 0x7c]
add esp, 8
cmp eax, edi
je 0x649146
sub eax, ecx
sar eax, 1
mov esi, eax
jns 0x649149
mov esi, dword [ecx - 0xc]
push esi
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x7c]
call fcn.004ac570
mov ecx, eax
mov byte [esp + 0x68], 1
call fcn.004b1130
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.004a9b50
add eax, 0x10
add esp, 4
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov byte [esp + 0x68], 3
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x64919e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push esi
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x7c]
call fcn.004aa4c0
mov ecx, eax
mov byte [esp + 0x68], 4
call fcn.004aa620
mov ecx, eax
call fcn.004aa3a0
push eax
lea ecx, [esp + 0x78]
call fcn.004aa540
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
mov byte [esp + 0x68], 3
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x6491ef
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x50], edi
mov dword [esp + 0x54], edi
mov dword [esp + 0x58], edi
mov dword [esp + 0x5c], edi
mov dword [esp + 0x40], edi
mov dword [esp + 0x44], edi
mov dword [esp + 0x48], edi
mov dword [esp + 0x4c], edi
mov byte [esp + 0x68], 6
jmp 0x649224
mov bl, byte [esp + 0x17]
mov eax, dword [esp + 0x74]
cmp dword [eax - 0xc], 0
jle 0x6497f9
push 0x3d
push eax
call fcn.0080308d
add esp, 8
test eax, eax
je 0x6497f9
sub eax, dword [esp + 0x74]
sar eax, 1
mov ebp, eax
test ebp, ebp
jle 0x6497f9
push ebp
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x7c]
call fcn.004ac570
mov ecx, eax
mov byte [esp + 0x68], 7
call fcn.004aa620
mov ecx, eax
call fcn.004aa3a0
mov edi, eax
mov eax, dword [edi]
mov esi, dword [eax - 0xc]
test esi, esi
js 0x6490f3
mov ecx, 1
sub ecx, dword [eax - 4]
mov eax, dword [eax - 8]
sub eax, esi
or eax, ecx
jge 0x64929f
push esi
mov ecx, edi
call fcn.004a8a90
mov eax, dword [edi]
lea edx, [esi + 1]
push edx
push eax
call fcn.00803997
mov eax, dword [edi]
add esp, 8
cmp esi, dword [eax - 8]
jg 0x6490f3
mov ebx, dword [esp + 0x54]
mov dword [eax - 0xc], esi
mov eax, dword [edi]
xor ecx, ecx
mov word [eax + esi*2], cx
mov esi, ebx
mov dword [esp + 0x38], esi
cmp ebx, dword [esp + 0x58]
jb 0x6492eb
inc ebx
push ebx
lea ecx, [esp + 0x54]
call fcn.00673910
test al, al
je 0x6497ea
mov ebx, dword [esp + 0x54]
mov edx, dword [esp + 0x50]
lea esi, [edx + esi*4]
mov dword [esp + 0x3c], esi
mov byte [esp + 0x68], 8
test esi, esi
je 0x649312
mov edi, dword [edi]
sub edi, 0x10
push edi
call fcn.004a9b50
add esp, 4
add eax, 0x10
mov dword [esi], eax
mov eax, dword [esp + 0x20]
inc ebx
add eax, 0xfffffff0
mov dword [esp + 0x54], ebx
mov byte [esp + 0x68], 6
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x64933c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
inc ebp
push ebp
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x7c]
call fcn.004aa4c0
mov ecx, dword [eax]
mov esi, dword [esp + 0x74]
lea eax, [ecx - 0x10]
add esi, 0xfffffff0
mov byte [esp + 0x68], 9
cmp eax, esi
je 0x6493a8
cmp dword [esi + 0xc], 0
lea edi, [esi + 0xc]
jl 0x64939a
mov edx, dword [eax]
cmp edx, dword [esi]
jne 0x64939a
push eax
call fcn.004a9b50
mov ebp, eax
add esp, 4
or eax, 0xffffffff
lock xadd dword [edi], eax
dec eax
test eax, eax
jg 0x649391
mov ecx, dword [esi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push esi
call eax
add ebp, 0x10
mov dword [esp + 0x74], ebp
jmp 0x6493a8
mov eax, dword [ecx - 0xc]
push eax
push ecx
lea ecx, [esp + 0x7c]
call fcn.004a8db0
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov byte [esp + 0x68], 6
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x6493cd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor esi, esi
nop
test esi, esi
js 0x6490f3
mov eax, dword [esp + 0x74]
cmp esi, dword [eax - 0xc]
jg 0x6490f3
movzx eax, word [eax + esi*2]
push eax
call fcn.00802791
add esp, 4
test eax, eax
je 0x6493f9
inc esi
jmp 0x6493d0
push esi
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x7c]
call fcn.004aa4c0
mov eax, dword [eax]
mov ebp, dword [esp + 0x74]
lea esi, [eax - 0x10]
add ebp, 0xfffffff0
mov byte [esp + 0x68], 0xa
cmp esi, ebp
je 0x6494bf
cmp dword [ebp + 0xc], 0
lea ebx, [ebp + 0xc]
jl 0x6494b1
mov ecx, dword [esi]
cmp ecx, dword [ebp]
jne 0x6494b1
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
call eax
cmp dword [esi + 0xc], 0
lea ecx, [esi + 0xc]
jl 0x649456
cmp eax, dword [esi]
jne 0x649456
mov edi, esi
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x649491
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x6497f4
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.0080217f
add esp, 0x10
or ecx, 0xffffffff
lock xadd dword [ebx], ecx
dec ecx
test ecx, ecx
jg 0x6494a8
mov ecx, dword [ebp]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push ebp
call eax
add edi, 0x10
mov dword [esp + 0x74], edi
jmp 0x6494bf
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x7c]
call fcn.004a8db0
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
mov byte [esp + 0x68], 6
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x6494e4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x74]
mov eax, dword [ecx - 0xc]
test eax, eax
js 0x6490f3
cmp word [ecx], 0x22
jne 0x64959c
push 1
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0x7c]
call fcn.004aa4c0
mov ecx, dword [eax]
mov esi, dword [esp + 0x74]
lea eax, [ecx - 0x10]
add esi, 0xfffffff0
mov byte [esp + 0x68], 0xb
cmp eax, esi
je 0x649569
cmp dword [esi + 0xc], 0
lea edi, [esi + 0xc]
jl 0x64955b
mov edx, dword [eax]
cmp edx, dword [esi]
jne 0x64955b
push eax
call fcn.004a9b50
mov ebp, eax
add esp, 4
or eax, 0xffffffff
lock xadd dword [edi], eax
dec eax
test eax, eax
jg 0x649552
mov ecx, dword [esi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push esi
call eax
add ebp, 0x10
mov dword [esp + 0x74], ebp
jmp 0x649569
mov eax, dword [ecx - 0xc]
push eax
push ecx
lea ecx, [esp + 0x7c]
call fcn.004a8db0
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
mov byte [esp + 0x68], 6
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x64958e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x74]
cmp dword [ecx - 0xc], 0
jle 0x6495bd
push 0x22
jmp 0x6495a2
test eax, eax
jle 0x6495bd
push 0x20
push ecx
call fcn.0080308d
mov ecx, dword [esp + 0x7c]
add esp, 8
test eax, eax
je 0x6495bd
sub eax, ecx
sar eax, 1
mov ebx, eax
test ebx, ebx
jns 0x6495c0
mov ebx, dword [ecx - 0xc]
push ebx
lea ecx, [esp + 0x30]
push ecx
lea ecx, [esp + 0x7c]
call fcn.004ac570
mov ecx, eax
mov byte [esp + 0x68], 0xc
call fcn.004aa620
mov ecx, eax
call fcn.004aa3a0
mov edi, eax
mov eax, dword [edi]
mov esi, dword [eax - 0xc]
test esi, esi
js 0x6490f3
mov ecx, 1
sub ecx, dword [eax - 4]
mov eax, dword [eax - 8]
sub eax, esi
or eax, ecx
jge 0x64960a
push esi
mov ecx, edi
call fcn.004a8a90
mov eax, dword [edi]
lea edx, [esi + 1]
push edx
push eax
call fcn.00803997
mov eax, dword [edi]
add esp, 8
cmp esi, dword [eax - 8]
jg 0x6490f3
mov dword [eax - 0xc], esi
mov eax, dword [edi]
xor ecx, ecx
mov word [eax + esi*2], cx
mov esi, dword [esp + 0x44]
mov dword [esp + 0x3c], esi
cmp esi, dword [esp + 0x48]
jb 0x649652
lea edx, [esi + 1]
push edx
lea ecx, [esp + 0x44]
call fcn.00673910
test al, al
je 0x6497ea
mov eax, dword [esp + 0x40]
lea ebp, [eax + esi*4]
mov dword [esp + 0x38], ebp
mov byte [esp + 0x68], 0xd
test ebp, ebp
je 0x6496cc
mov esi, dword [edi]
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
call eax
cmp dword [esi - 4], 0
lea ecx, [esi - 4]
jl 0x64968e
cmp eax, dword [esi - 0x10]
jne 0x64968e
lea edi, [esi - 0x10]
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x6496c6
mov ecx, dword [esi - 0xc]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x6497f4
mov eax, dword [esi - 0xc]
mov dword [edi + 4], eax
mov eax, dword [esi - 0xc]
lea ecx, [eax + eax + 2]
push ecx
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.0080217f
add esp, 0x10
add edi, 0x10
mov dword [ebp], edi
mov eax, dword [esp + 0x2c]
inc dword [esp + 0x44]
add eax, 0xfffffff0
mov byte [esp + 0x68], 6
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x6496f5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
inc ebx
push ebx
lea ecx, [esp + 0x34]
push ecx
lea ecx, [esp + 0x7c]
call fcn.004aa4c0
mov eax, dword [eax]
mov ebp, dword [esp + 0x74]
lea esi, [eax - 0x10]
add ebp, 0xfffffff0
mov byte [esp + 0x68], 0xe
cmp esi, ebp
je 0x6497bc
cmp dword [ebp + 0xc], 0
lea ebx, [ebp + 0xc]
jl 0x6497ae
mov ecx, dword [esi]
cmp ecx, dword [ebp]
jne 0x6497ae
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
call eax
cmp dword [esi + 0xc], 0
lea ecx, [esi + 0xc]
jl 0x649753
cmp eax, dword [esi]
jne 0x649753
mov edi, esi
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x64978e
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x6497f4
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.0080217f
add esp, 0x10
or ecx, 0xffffffff
lock xadd dword [ebx], ecx
dec ecx
test ecx, ecx
jg 0x6497a5
mov ecx, dword [ebp]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push ebp
call eax
add edi, 0x10
mov dword [esp + 0x74], edi
jmp 0x6497bc
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x7c]
call fcn.004a8db0
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
mov byte [esp + 0x68], 6
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x649220
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x649220
push 0x8007000e
call fcn.004a8210
call fcn.004a8580
mov ebp, dword [esp + 0x18]
mov ecx, 0x442db8
mov eax, ebp
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x64982a
test dx, dx
je 0x649826
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x64982a
add eax, 4
add ecx, 4
test dx, dx
jne 0x649804
xor eax, eax
jmp 0x64982f
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete al
test al, al
jne 0x649e03
mov ecx, 0x442db4
mov eax, ebp
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x649869
test dx, dx
je 0x649865
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x649869
add eax, 4
add ecx, 4
test dx, dx
jne 0x649843
xor eax, eax
jmp 0x64986e
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete al
test al, al
jne 0x649dea
mov ecx, 0x442da4
mov eax, ebp
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x6498a8
test dx, dx
je 0x6498a4
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x6498a8
add eax, 4
add ecx, 4
test dx, dx
jne 0x649882
xor eax, eax
jmp 0x6498ad
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete al
test al, al
jne 0x649dea
lea ecx, [esp + 0x18]
push 0x41c824
push ecx
call fcn.004afd20
add esp, 8
test al, al
jne 0x649dc7
lea edx, [esp + 0x18]
push 0x442d9c
push edx
call fcn.004afd20
add esp, 8
test al, al
jne 0x649dc7
lea eax, [esp + 0x18]
push 0x442d98
push eax
call fcn.004afd20
add esp, 8
test al, al
je 0x64992d
test bl, bl
jne 0x649919
mov edx, dword [esp + 0x78]
mov eax, 1
mov byte [edx + 0x7d], al
jmp 0x649e03
mov ecx, dword [esp + 0x7c]
movzx eax, byte [ecx + 0x7d]
mov edx, dword [esp + 0x78]
mov byte [edx + 0x7d], al
jmp 0x649e03
lea eax, [esp + 0x18]
push 0x442d94
push eax
call fcn.004afd20
add esp, 8
test al, al
jne 0x649da4
lea ecx, [esp + 0x18]
push 0x442d84
push ecx
call fcn.004afd20
add esp, 8
test al, al
jne 0x649da4
lea edx, [esp + 0x18]
push 0x442d7c
push edx
call fcn.004afd20
add esp, 8
test al, al
jne 0x649da4
lea eax, [esp + 0x18]
push 0x4417d4
push eax
call fcn.004afd20
add esp, 8
test al, al
je 0x649cfd
test bl, bl
jne 0x649cc6
xor esi, esi
cmp dword [esp + 0x54], esi
jbe 0x649e03
mov edi, dword [esp + 0x78]
lea ecx, [ecx]
push esi
lea ecx, [esp + 0x44]
call fcn.004ed3f0
mov ecx, dword [eax]
cmp dword [ecx - 0xc], 0
je 0x649cb6
push 0x442d70
push esi
lea ecx, [esp + 0x58]
call fcn.004ed3f0
push eax
call fcn.004afd20
add esp, 8
test al, al
je 0x6499fa
push esi
lea ecx, [esp + 0x44]
call fcn.004ed3f0
lea ecx, [edi + 0x50]
push eax
call fcn.004aa540
jmp 0x649cb6
push 0x4417bc
push esi
lea ecx, [esp + 0x58]
call fcn.004ed3f0
push eax
call fcn.004afd20
add esp, 8
test al, al
je 0x649adb
push esi
lea ecx, [esp + 0x44]
call fcn.004ed3f0
mov eax, dword [eax]
cmp dword [eax - 0xc], 0
jl 0x6490f3
cmp word [eax], 0x2b
push esi
lea ecx, [esp + 0x44]
jne 0x649a68
call fcn.004ed3f0
mov eax, dword [eax]
push 0xa
push 0
push eax
call fcn.00803f42
mov dword [esp + 0x84], eax
fild dword [esp + 0x84]
add esp, 0xc
fadd qword [edi + 0x58]
fstp qword [edi + 0x58]
jmp 0x649cb6
call fcn.004ed3f0
mov eax, dword [eax]
cmp dword [eax - 0xc], 0
jl 0x6490f3
cmp word [eax], 0x2d
push esi
lea ecx, [esp + 0x44]
jne 0x649ab1
call fcn.004ed3f0
mov eax, dword [eax]
push 0xa
push 0
push eax
call fcn.00803f42
mov dword [esp + 0x84], eax
fild dword [esp + 0x84]
add esp, 0xc
fsubr qword [edi + 0x58]
fstp qword [edi + 0x58]
jmp 0x649cb6
call fcn.004ed3f0
mov eax, dword [eax]
push 0xa
push 0
push eax
call fcn.00803f42
mov dword [esp + 0x84], eax
fild dword [esp + 0x84]
add esp, 0xc
fstp qword [edi + 0x58]
jmp 0x649cb6
push 0x442d64
push esi
lea ecx, [esp + 0x58]
call fcn.004ed3f0
push eax
call fcn.004afd20
add esp, 8
test al, al
je 0x649b8b
xor ebx, ebx
push 0x23
push esi
lea ecx, [esp + 0x48]
call fcn.004ed3f0
mov eax, dword [eax]
push ecx
sub eax, 0x10
mov dword [esp + 0x80], esp
mov ebp, esp
push eax
call fcn.004a9b50
lea edx, [esp + 0x88]
add esp, 4
add eax, 0x10
push edx
mov dword [ebp], eax
call fcn.0065c6d0
add esp, 8
mov ecx, eax
mov byte [esp + 0x6c], 0xf
call fcn.004f6090
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.004a9b50
lea ebp, [eax + 0x10]
add esp, 4
lea ecx, [esp + 0x7c]
mov dword [esp + 0x78], ebp
mov byte [esp + 0x68], 6
call fcn.004a8c20
lea eax, [esp + 0x30]
push eax
push ebp
mov ecx, 0x8d79f8
call fcn.00636200
test al, al
je 0x649c70
mov ecx, dword [esp + 0x30]
mov dword [edi + ebx*4 + 0x38], ecx
jmp 0x649c8d
push 0x442d48
push esi
lea ecx, [esp + 0x58]
call fcn.004ed3f0
push eax
call fcn.004afd20
add esp, 8
test al, al
je 0x649bb1
mov ebx, 2
jmp 0x649afd
push 0x442d2c
push esi
lea ecx, [esp + 0x58]
call fcn.004ed3f0
push eax
call fcn.004afd20
add esp, 8
test al, al
je 0x649bff
push esi
lea ecx, [esp + 0x44]
call fcn.004ed3f0
mov eax, dword [eax]
push 0xa
push 0
push eax
call fcn.00803f42
mov dword [esp + 0x84], eax
fild dword [esp + 0x84]
add esp, 0xc
fst qword [edi + 0x20]
fstp qword [edi + 0x18]
jmp 0x649cb6
push 0x442d10
push esi
lea ecx, [esp + 0x58]
call fcn.004ed3f0
push eax
call fcn.004afd20
add esp, 8
test al, al
je 0x649c25
mov ebx, 3
jmp 0x649afd
push 0x442cf4
push esi
lea ecx, [esp + 0x58]
call fcn.004ed3f0
push eax
call fcn.004afd20
add esp, 8
test al, al
je 0x649cb6
push esi
lea ecx, [esp + 0x44]
call fcn.004ed3f0
mov eax, dword [eax]
push 0xa
push 0
push eax
call fcn.00803f42
mov dword [esp + 0x84], eax
fild dword [esp + 0x84]
add esp, 0xc
fst qword [edi + 0x30]
fstp qword [edi + 0x28]
jmp 0x649cb6
push 0x10
push 0
push ebp
call fcn.00803f42
add esp, 0xc
mov dword [edi + ebx*4 + 0x38], eax
test eax, eax
jne 0x649c8d
mov dword [edi + ebx*4 + 0x38], 0xffffff
mov eax, dword [edi + ebx*4 + 0x38]
movzx ecx, byte [edi + ebx*4 + 0x3a]
movzx edx, al
shl edx, 0x10
or edx, ecx
and eax, 0xff00
or edx, eax
lea ecx, [esp + 0x78]
mov dword [edi + ebx*4 + 0x38], edx
call fcn.004a8c20
mov ebp, dword [esp + 0x18]
inc esi
cmp esi, dword [esp + 0x54]
jb 0x6499b0
jmp 0x649e03
mov edi, dword [esp + 0x7c]
mov esi, dword [esp + 0x78]
lea edx, [edi + 0x50]
lea ecx, [esi + 0x50]
push edx
call fcn.004aa540
fld qword [edi + 0x58]
fstp qword [esi + 0x58]
mov edx, dword [edi + 0x38]
mov dword [esi + 0x38], edx
mov edx, dword [edi + 0x3c]
mov dword [esi + 0x3c], edx
mov edx, dword [edi + 0x40]
mov dword [esi + 0x40], edx
mov eax, dword [edi + 0x44]
mov dword [esi + 0x44], eax
jmp 0x649e03
lea ecx, [esp + 0x18]
push 0x442cf0
push ecx
call fcn.004afd20
add esp, 8
test al, al
je 0x649d79
mov edi, 1
cmp dword [esp + 0x54], edi
jne 0x649d79
mov edx, dword [esp + 0x50]
push 0x442cec
push edx
call fcn.004afd20
add esp, 8
test al, al
je 0x649d79
cmp dword [esp + 0x44], 0
mov esi, dword [esp + 0x34]
mov eax, dword [esi + 0x130]
mov dword [esi + 0x128], edi
mov dword [esi + 0x12c], eax
ja 0x649d5b
push 0x80070057
call fcn.004a8210
mov ecx, dword [esp + 0x40]
mov eax, dword [ecx]
push 0xa
push 0
push eax
call fcn.00803f42
add esp, 0xc
add dword [esi + 0x130], eax
jmp 0x649e03
lea ecx, [esp + 0x40]
call fcn.004f5ef0
lea ecx, [esp + 0x50]
call fcn.004f5ef0
lea ecx, [esp + 0x18]
call fcn.004a8c20
lea ecx, [esp + 0x74]
call fcn.004a8c20
xor al, al
jmp 0x649e82
test bl, bl
jne 0x649db6
mov ecx, dword [esp + 0x78]
mov eax, 1
mov byte [ecx + 0x7e], al
jmp 0x649e03
mov edx, dword [esp + 0x7c]
movzx eax, byte [edx + 0x7e]
mov ecx, dword [esp + 0x78]
mov byte [ecx + 0x7e], al
jmp 0x649e03
test bl, bl
jne 0x649dd9
mov ecx, dword [esp + 0x78]
mov eax, 1
mov byte [ecx + 0x7c], al
jmp 0x649e03
mov edx, dword [esp + 0x7c]
movzx eax, byte [edx + 0x7c]
mov ecx, dword [esp + 0x78]
mov byte [ecx + 0x7c], al
jmp 0x649e03
test bl, bl
jne 0x649df5
mov eax, 0x2bc
jmp 0x649dfc
mov edx, dword [esp + 0x7c]
mov eax, dword [edx + 0x78]
mov ecx, dword [esp + 0x78]
mov dword [ecx + 0x78], eax
mov esi, dword [esp + 0x40]
test esi, esi
je 0x649e1f
mov edx, dword [esp + 0x44]
push edx
push esi
call fcn.0055f520
push esi
call fcn.00803053
add esp, 0xc
mov esi, dword [esp + 0x50]
test esi, esi
je 0x649e3b
mov eax, dword [esp + 0x54]
push eax
push esi
call fcn.0055f520
push esi
call fcn.00803053
add esp, 0xc
lea eax, [ebp - 0x10]
mov byte [esp + 0x68], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x649e5c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x74]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov dword [esp + 0x68], edx
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x649e80
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov al, 1
mov ecx, dword [esp + 0x60]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x58
ret 0x10