Function at 0x651ce0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x99504c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x14]
cmp eax, dword [ecx + 8]
jbe 0x6524c4
sub esp, 0x94
mov edx, dword [esp + 0x98]
mov dword [edx + 0x40], 0
movzx ebx, byte [edx + 0x30]
test bl, bl
je 0x651df4
mov byte [edx + 0x30], 0
mov ebx, dword [edx + 0x28]
cmp dword [edx + 0x20], ebx
jbe 0x6521c5
mov dword [esp + 0x4c], ebx
mov eax, dword [edx + 0x40]
mov dword [esp + 0x64], eax
mov ebp, dword [edx + 0x44]
mov ecx, dword [edx + 0x3c]
cmp ebx, 0x1f
xchg esi, ebx
setb bl
xchg esi, ebx
and esi, 1
xchg esi, eax
test al, al
xchg esi, eax
je 0x651d99
lea esi, [eax + 1]
cmp ebp, esi
jae 0x651d90
mov dword [esp], ecx
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6f4820]
mov dword [esp + 0x10], eax
call fcn.0044e6e0
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x98]
mov ebx, dword [esp + 0x4c]
mov byte [esi + ecx - 1], bl
jmp 0x652489
lea esi, [eax + 1]
cmp ebp, esi
jae 0x651ddd
mov dword [esp], ecx
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6f4820]
mov dword [esp + 0x10], eax
call fcn.0044e6e0
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x98]
mov ebx, dword [esp + 0x4c]
mov byte [esi + ecx - 1], 0x1f
add ebx, 0xffffffe1
mov edi, edx
mov edx, 0xffffffff
adc edx, 0
jmp 0x6523dc
mov dword [esp], edx
lea edi, [esp + 4]
lea esi, [esp + 0x9c]
call fcn.004695de
call fcn.006524d0
movzx eax, byte [esp + 0x20]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x68], ecx
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x40], edx
test al, al
je 0x651eeb
mov ebx, dword [esp + 0x98]
mov eax, dword [ebx + 0x40]
mov dword [esp + 0x5c], eax
mov ebp, dword [ebx + 0x44]
mov esi, dword [ebx + 0x3c]
test edx, edx
xchg edi, ebx
sete bl
xchg edi, ebx
cmp ecx, 0x7f
setb bl
and edi, ebx
xchg edi, eax
test al, al
xchg edi, eax
jne 0x651ea5
lea ebx, [eax + 1]
cmp ebp, ebx
jae 0x651e95
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6f4820]
mov dword [esp + 0x10], eax
call fcn.0044e6e0
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x40]
mov byte [ebx + esi - 1], 0x7f
add ecx, 0xffffff81
adc edx, 0xffffffff
jmp 0x65211c
lea edx, [eax + 1]
cmp ebp, edx
jae 0x651ee2
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6f4820]
mov dword [esp + 0x10], eax
call fcn.0044e6e0
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x68]
mov byte [edx + esi - 1], cl
jmp 0x6520af
lea edi, [esp + 0x80]
lea esi, [esp + 0x9c]
call fcn.004695de
movzx eax, byte [esp + 0x90]
test al, al
je 0x651f15
mov ecx, dword [esp + 0x98]
xor eax, eax
jmp 0x651f3d
lea edi, [esp + 0x6c]
lea esi, [esp + 0x9c]
call fcn.004695de
mov eax, dword [esp + 0x70]
add eax, dword [esp + 0x78]
add eax, 0x20
mov ecx, dword [esp + 0x98]
cmp dword [ecx + 0x20], eax
setae al
test al, al
je 0x651f6d
mov byte [esp + 0x3b], al
mov dword [esp], ecx
lea edi, [esp + 4]
lea esi, [esp + 0x9c]
call fcn.004695de
call fcn.00653220
movzx eax, byte [esp + 0x3b]
mov ecx, dword [esp + 0x98]
mov edx, dword [esp + 0x40]
test edx, edx
sete bl
mov ebp, dword [esp + 0x68]
test ebp, ebp
xchg esi, ebx
sete bl
xchg esi, ebx
and ebx, esi
test bl, bl
je 0x651fe7
mov edx, dword [ecx + 0x3c]
mov ebx, dword [ecx + 0x40]
mov ebp, dword [ecx + 0x44]
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
lea edi, [esp + 0xc]
lea esi, [esp + 0x9c]
call fcn.004695de
mov byte [esp + 0x20], al
call fcn.00652630
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x98]
mov dword [ebx + 0x40], eax
mov dword [ebx + 0x44], ecx
mov eax, dword [0x995310]
test eax, eax
je 0x651fe2
call fcn.00468e70
mov dword [edi], edx
mov eax, dword [ebx + 0x3c]
mov dword [edi + 4], eax
mov dword [ebx + 0x3c], edx
jmp 0x65204f
mov ebx, dword [ecx + 0x3c]
mov esi, dword [ecx + 0x40]
mov edi, dword [ecx + 0x44]
mov dword [esp], ebx
mov dword [esp + 4], esi
mov dword [esp + 8], edi
lea edi, [esp + 0xc]
lea esi, [esp + 0x9c]
call fcn.004695de
mov dword [esp + 0x24], edx
mov dword [esp + 0x20], ebp
mov byte [esp + 0x28], al
call fcn.00652730
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x98]
mov dword [ebx + 0x40], eax
mov dword [ebx + 0x44], ecx
mov eax, dword [0x995310]
test eax, eax
je 0x65204c
call fcn.00468e70
mov dword [edi], edx
mov eax, dword [ebx + 0x3c]
mov dword [edi + 4], eax
mov dword [ebx + 0x3c], edx
mov eax, dword [ebx + 0x34]
mov ecx, dword [ebx + 0x38]
mov eax, dword [eax + 0x10]
mov edx, dword [ebx + 0x3c]
mov ebp, dword [ebx + 0x40]
mov esi, dword [ebx + 0x44]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], esi
call eax
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
test eax, eax
jne 0x65209a
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x98]
cmp dword [ebx + 0x40], edx
je 0x65209a
mov eax, dword [0x966ff8]
mov ecx, dword [0x966ffc]
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], ecx
add esp, 0x94
ret
cmp edx, eax
jbe 0x6520eb
movzx ecx, byte [esi + eax]
or ecx, 0xffffff80
mov byte [esi + eax], cl
mov eax, dword [esp + 0x98]
mov dword [eax + 0x40], edx
mov dword [eax + 0x44], ebp
mov ecx, dword [0x995310]
test ecx, ecx
je 0x6520e1
call fcn.00468e70
mov dword [edi], esi
mov ecx, dword [eax + 0x3c]
mov dword [edi + 4], ecx
mov dword [eax + 0x3c], esi
mov ebx, eax
jmp 0x65204f
mov ecx, edx
call fcn.00468ed0
mov edi, ecx
shr edi, 7
mov eax, edi
mov edi, dword [esp + 0x50]
mov ebx, edi
shl edi, 0x19
and ecx, 0x7f
or ecx, 0x80
mov byte [edx + esi - 1], cl
or eax, edi
shr ebx, 7
mov ecx, eax
mov edi, edx
mov edx, ebx
mov ebx, edi
mov dword [esp + 0x44], ecx
mov dword [esp + 0x50], edx
test edx, edx
xchg edi, ebx
sete bl
xchg edi, ebx
seta al
cmp ecx, 0x80
setae dl
and edx, edi
or edx, eax
test dl, dl
je 0x65217f
lea edx, [ebx + 1]
cmp ebp, edx
jae 0x6520f2
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6f4820]
mov dword [esp + 0x10], eax
call fcn.0044e6e0
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov ecx, dword [esp + 0x44]
jmp 0x6520f2
lea edx, [ebx + 1]
cmp ebp, edx
jae 0x6521b8
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6f4820]
mov dword [esp + 0x10], eax
call fcn.0044e6e0
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov ecx, dword [esp + 0x44]
mov byte [edx + esi - 1], cl
mov eax, dword [esp + 0x5c]
jmp 0x6520af
mov dword [edx + 0x28], 0xffffffff
mov ebx, dword [edx + 0x20]
mov dword [esp + 0x3c], ebx
mov eax, dword [edx + 0x40]
mov dword [esp + 0x60], eax
mov ebp, dword [edx + 0x44]
mov ecx, dword [edx + 0x3c]
cmp ebx, 0x1f
xchg esi, ebx
setb bl
xchg esi, ebx
and esi, 1
xchg esi, eax
test al, al
xchg esi, eax
jne 0x65224e
lea esi, [eax + 1]
cmp ebp, esi
jae 0x652237
mov dword [esp], ecx
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6f4820]
mov dword [esp + 0x10], eax
call fcn.0044e6e0
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x60]
mov edx, dword [esp + 0x98]
mov ebx, dword [esp + 0x3c]
mov byte [esi + ecx - 1], 0x1f
add ebx, 0xffffffe1
mov edi, edx
mov edx, 0xffffffff
adc edx, 0
jmp 0x6522fd
lea esi, [eax + 1]
cmp ebp, esi
jae 0x652292
mov dword [esp], ecx
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6f4820]
mov dword [esp + 0x10], eax
call fcn.0044e6e0
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x60]
mov edx, dword [esp + 0x98]
mov ebx, dword [esp + 0x3c]
mov byte [esi + ecx - 1], bl
cmp esi, eax
jbe 0x6522c9
movzx ebx, byte [ecx + eax]
or ebx, 0x20
mov byte [ecx + eax], bl
mov dword [edx + 0x40], esi
mov dword [edx + 0x44], ebp
mov eax, dword [0x995310]
test eax, eax
je 0x6522c1
call fcn.00468e70
mov dword [edi], ecx
mov eax, dword [edx + 0x3c]
mov dword [edi + 4], eax
mov dword [edx + 0x3c], ecx
jmp 0x651df4
mov ecx, esi
call fcn.00468ed0
mov eax, ebx
shr eax, 7
mov esi, dword [esp + 0x54]
mov edi, esi
shl esi, 0x19
and ebx, 0x7f
or ebx, 0x80
mov byte [edx + ecx - 1], bl
or esi, eax
shr edi, 7
mov ebx, esi
mov esi, edx
mov edx, edi
mov edi, dword [esp + 0x98]
mov dword [esp + 0x48], ebx
mov dword [esp + 0x54], edx
test edx, edx
xchg edi, ebx
sete bl
xchg edi, ebx
seta al
cmp ebx, 0x80
setae dl
and edx, edi
or eax, edx
test al, al
je 0x652360
lea edx, [esi + 1]
cmp ebp, edx
jae 0x6522d0
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6f4820]
mov dword [esp + 0x10], eax
call fcn.0044e6e0
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov ebx, dword [esp + 0x48]
jmp 0x6522d0
lea edx, [esi + 1]
cmp ebp, edx
jae 0x652399
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6f4820]
mov dword [esp + 0x10], eax
call fcn.0044e6e0
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov ebx, dword [esp + 0x48]
mov byte [edx + ecx - 1], bl
mov eax, dword [esp + 0x60]
mov esi, edx
mov edx, dword [esp + 0x98]
jmp 0x652296
mov eax, ebx
shr eax, 7
mov esi, dword [esp + 0x58]
mov edi, esi
shl esi, 0x19
and ebx, 0x7f
or ebx, 0x80
mov byte [edx + ecx - 1], bl
or esi, eax
shr edi, 7
mov ebx, esi
mov esi, edx
mov edx, edi
mov edi, dword [esp + 0x98]
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x58], edx
test edx, edx
xchg edi, ebx
sete bl
xchg edi, ebx
seta al
cmp ebx, 0x80
setae dl
and edx, edi
or eax, edx
test al, al
je 0x65243f
lea edx, [esi + 1]
cmp ebp, edx
jae 0x6523af
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6f4820]
mov dword [esp + 0x10], eax
call fcn.0044e6e0
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov ebx, dword [esp + 0x4c]
jmp 0x6523af
lea edx, [esi + 1]
cmp ebp, edx
jae 0x652478
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x6f4820]
mov dword [esp + 0x10], eax
call fcn.0044e6e0
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov ebx, dword [esp + 0x4c]
mov byte [edx + ecx - 1], bl
mov eax, dword [esp + 0x64]
mov esi, edx
mov edx, dword [esp + 0x98]
cmp esi, eax
jbe 0x6524bc
movzx ebx, byte [ecx + eax]
or ebx, 0x20
mov byte [ecx + eax], bl
mov dword [edx + 0x40], esi
mov dword [edx + 0x44], ebp
mov ebx, dword [0x995310]
test ebx, ebx
je 0x6524b4
call fcn.00468e70
mov dword [edi], ecx
mov ebx, dword [edx + 0x3c]
mov dword [edi + 4], ebx
mov dword [edx + 0x3c], ecx
jmp 0x6521c5
mov ecx, esi
call fcn.00468ed0
nop
call fcn.00467a60
jmp fcn.00651ce0