Function at 0x6485f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x1f8
mov ebp, dword [r9]
lea r12, [rsp + 0x18f]
mov qword [rsp + 0x248], rdx
mov rdi, rcx
mov qword [rsp + 0x250], r8
and r12, 0xffffffffffffffc0
cmp ebp, 5
je 0x648633
cmp ebp, 0xa
jne 0x648830
mov ecx, dword [r9 + 4]
lea eax, [rcx - 0x400]
mov dword [rsp + 0x74], ecx
cmp eax, 0x7fc00
ja 0x648830
mov eax, dword [r9 + 8]
lea edx, [rax - 8]
cmp edx, 0x18
ja 0x648830
lea esi, [rcx - 1]
mov dword [rsp + 0xb8], esi
and esi, ecx
mov dword [rsp + 0xbc], esi
jne 0x648830
mov rbx, qword [r9 + 0x10]
mov rsi, qword [r9 + 0x18]
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
test rbx, rbx
jne 0x64869b
test rsi, rsi
jne 0x648830
mov r13d, eax
mov r15d, dword [rsp + 0x74]
mov rax, r13
shl rax, 7
mov qword [rsp + 0x88], rax
imul r15, rax
cmp ebp, 5
je 0x649440
lea r9, [rax + 0x40]
mov r8d, 0x8000
mov ebx, 0x1000
mov eax, 0x18000
mov edx, 0x18000
mov rcx, qword [rsp + 0x88]
mov dword [rsp + 0x140], edx
lea rdx, [rcx + r15]
add rdx, r9
lea r14, [rdx + rax]
cmp qword [rdi + 0x18], r14
jb 0x648b70
mov rsi, qword [rdi + 8]
mov rax, qword [rsp + 0x88]
add rax, rsi
cmp qword [rsp + 0x250], 0x50
lea r14, [rax + r15]
mov qword [rsp + 0x48], rax
lea rdi, [r14 + r9]
lea rax, [rdi + r8]
mov qword [rsp + 0x120], rdi
mov qword [rsp + 0x128], rax
je 0x649490
lea rax, [rsp + 0x100]
mov r8, qword [rsp + 0x250]
mov rdx, qword [rsp + 0x248]
mov rcx, rax
mov qword [rsp + 0xc8], rax
call fcn.005730d0
movsxd rax, dword [rsp + 0x268]
shl rax, 7
mov qword [rsp + 0xc0], rax
cmp ebp, 5
je 0x649550
mov qword [rsp + 0x138], 0
shl ebx, 4
movsxd rbx, ebx
add rdi, rbx
cmp qword [rsp + 0x98], 0
mov qword [rsp + 0x130], rdi
je 0x649528
mov qword [rsp + 0x30], pe_nt_image_headers64
mov rcx, qword [rsp + 0xc8]
mov edx, 0x20
mov qword [rsp + 0x28], rsi
mov r9, qword [rsp + 0xa0]
mov qword [rsp + 0x20], 1
mov r8, qword [rsp + 0x98]
call fcn.00596c60
vmovdqu xmm5, xmmword [rsi]
mov rax, qword [0x0071f5e0]
vmovups xmmword [rsp + 0x100], xmm5
mov rcx, rax
vmovdqu xmm5, xmmword [rsi + 0x10]
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0xc0]
vmovups xmmword [rsp + 0x110], xmm5
add rax, qword [rcx]
movzx eax, byte [rax]
test al, al
je 0x648858
xor eax, eax
jmp 0x648841
call qword [sym.imp.msvcrt.dll__errno]
mov dword [rax], 0x16
mov eax, 0xffffffff
add rsp, 0x1f8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov eax, dword [rsp + 0x74]
mov edx, 0xaaaaaaab
xor r9d, r9d
mov rbx, qword [rsp + 0x120]
mov edi, dword [rsp + 0x140]
mov r8d, 1
add eax, 2
lea r12, [rbx + 0x80]
mov rcx, rbx
imul rax, rdx
mov ebp, edi
mov rdx, r12
shr ebp, 7
mov dword [rsp + 0x78], ebp
shr rax, 0x21
add eax, 1
and eax, 0xfffffffe
mov dword [rsp + 0x98], eax
mov eax, dword [rsi]
mov dword [rbx + 0x80], eax
mov eax, dword [rsi + 4]
mov dword [rbx + 0x84], eax
mov eax, dword [rsi + 8]
mov dword [rbx + 0x88], eax
mov eax, dword [rsi + 0xc]
mov dword [rbx + 0x8c], eax
mov eax, dword [rsi + 0x10]
mov dword [rbx + 0x90], eax
mov eax, dword [rsi + 0x14]
mov dword [rbx + 0x94], eax
mov eax, dword [rsi + 0x18]
mov dword [rbx + 0x98], eax
mov eax, dword [rsi + 0x1c]
mov dword [rbx + 0x9c], eax
mov eax, dword [rsi + 0x20]
mov dword [rbx + 0xa0], eax
mov eax, dword [rsi + 0x24]
mov dword [rbx + 0xa4], eax
mov eax, dword [rsi + 0x28]
mov dword [rbx + 0xa8], eax
mov eax, dword [rsi + 0x2c]
mov dword [rbx + 0xac], eax
mov eax, dword [rsi + 0x30]
mov dword [rbx + 0xb0], eax
mov eax, dword [rsi + 0x34]
mov dword [rbx + 0xb4], eax
mov eax, dword [rsi + 0x38]
vmovdqu ymm3, ymmword [0x0071a160]
vpermd ymm1, ymm3, ymmword [rbx + 0x80]
mov dword [rbx + 0xb8], eax
mov eax, dword [rsi + 0x3c]
vmovdqu ymmword [rsp + 0x50], ymm3
mov dword [rbx + 0xbc], eax
vpermd ymm0, ymm3, ymmword [rbx + 0xa0]
vpblendd ymm2, ymm0, ymm1, 0x93
vpblendd ymm0, ymm0, ymm1, 0x6c
vmovdqu ymmword [rbx], ymm2
vmovdqu ymmword [rbx + 0x20], ymm0
mov eax, dword [rsi + 0x40]
mov dword [rbx + 0x80], eax
mov eax, dword [rsi + 0x44]
mov dword [rbx + 0x84], eax
mov eax, dword [rsi + 0x48]
mov dword [rbx + 0x88], eax
mov eax, dword [rsi + 0x4c]
mov dword [rbx + 0x8c], eax
mov eax, dword [rsi + 0x50]
mov dword [rbx + 0x90], eax
mov eax, dword [rsi + 0x54]
mov dword [rbx + 0x94], eax
mov eax, dword [rsi + 0x58]
mov dword [rbx + 0x98], eax
mov eax, dword [rsi + 0x5c]
mov dword [rbx + 0x9c], eax
mov eax, dword [rsi + 0x60]
mov dword [rbx + 0xa0], eax
mov eax, dword [rsi + 0x64]
mov dword [rbx + 0xa4], eax
mov eax, dword [rsi + 0x68]
mov dword [rbx + 0xa8], eax
mov eax, dword [rsi + 0x6c]
vpermd ymm1, ymm3, ymmword [rbx + 0x80]
mov dword [rbx + 0xac], eax
mov eax, dword [rsi + 0x70]
mov dword [rbx + 0xb0], eax
mov eax, dword [rsi + 0x74]
mov dword [rbx + 0xb4], eax
mov eax, dword [rsi + 0x78]
mov dword [rbx + 0xb8], eax
mov eax, dword [rsi + 0x7c]
mov dword [rbx + 0xbc], eax
vpermd ymm0, ymm3, ymmword [rbx + 0xa0]
vpblendd ymm2, ymm0, ymm1, 0x93
vpblendd ymm0, ymm0, ymm1, 0x6c
vmovdqu ymmword [rbx + 0x40], ymm2
vmovdqu ymmword [rbx + 0x60], ymm0
vzeroupper
lea r15, [rbx + 0x100]
call fcn.00644d90
xor r9d, r9d
mov rdx, r15
mov rcx, r12
mov r8d, 1
call fcn.00644d90
mov eax, dword [rbx + 0x140]
cmp ebp, 2
jbe 0x648bf8
shr edi, 8
mov r10d, 2
lea ecx, [rbp - 1]
mov qword [rsp + 0xb0], rsi
mov dword [rsp + 0x80], edi
mov esi, r10d
mov dword [rsp + 0x90], ecx
mov qword [rsp + 0xa0], r13
mov qword [rsp + 0xa8], r14
cmp dword [rsp + 0x80], esi
ja 0x648b5f
mov r14d, dword [rsp + 0x90]
sub r14d, esi
cmp r14d, 1
jbe 0x648b43
lea r13d, [rsi - 1]
mov rbp, r15
mov edi, 1
nop dword [rax + rax]
and eax, r13d
lea r12, [rbp + 0x80]
mov rcx, rbp
mov qword [rsp + 0x20], 0
lea edx, [rdi + rax - 1]
mov r9d, 1
mov r8, r12
add rbp, 0x100
shl rdx, 7
add rdx, rbx
call fcn.006462a0
mov r9d, 1
mov r8, rbp
mov rcx, r12
mov qword [rsp + 0x20], 0
and eax, r13d
lea edx, [rax + rdi]
add edi, 2
shl rdx, 7
add rdx, rbx
call fcn.006462a0
cmp r14d, edi
ja 0x648ac0
lea edx, [r14 - 2]
mov ecx, 0x100
shr edx, 1
add rdx, 1
shl rdx, 8
cmp r14d, 1
cmovbe rdx, rcx
add r15, rdx
lea edx, [rsi + rsi]
cmp dword [rsp + 0x78], edx
jbe 0x649468
mov esi, edx
cmp dword [rsp + 0x80], esi
jbe 0x648a97
mov r14d, esi
jmp 0x648aac
mov rcx, qword [rdi]
test rcx, rcx
je 0x648b91
mov qword [rsp + 0x50], r8
mov qword [rsp + 0x48], r9
call sub.msvcrt.dll_free
mov r8, qword [rsp + 0x50]
mov r9, qword [rsp + 0x48]
mov qword [rdi], 0
vpxor xmm0, xmm0, xmm0
lea rcx, [r14 + 0x3f]
vmovups xmmword [rdi + 0x10], xmm0
mov qword [rsp + 0x50], r8
mov qword [rsp + 0x48], r9
call sub.msvcrt.dll_malloc
mov r9, qword [rsp + 0x48]
mov r8, qword [rsp + 0x50]
test rax, rax
je 0x649f5a
lea rsi, [rax + 0x3f]
vmovq xmm4, r14
mov qword [rdi], rax
and rsi, 0xffffffffffffffc0
vpunpcklqdq xmm0, xmm4, xmm4
mov qword [rdi + 8], rsi
vmovups xmmword [rdi + 0x10], xmm0
jne 0x648700
mov eax, 0xffffffff
jmp 0x648841
xor eax, eax
xor edi, edi
mov r10d, 1
mov ebp, dword [rsp + 0x78]
lea r12, [r15 + 0x80]
mov rcx, r15
mov qword [rsp + 0x20], 0
mov r8, r12
mov r9d, 1
sub ebp, r10d
lea edx, [rbp + rax - 2]
shl rdx, 7
add rdx, rbx
call fcn.006462a0
mov rcx, r12
mov r9d, 1
mov r8, r14
mov qword [rsp + 0x20], 0
and edi, eax
lea edx, [rbp + rdi - 1]
mov edi, 2
mov ebp, 1
shl rdx, 7
add rdx, rbx
lea rbx, [rsp + 0x120]
call fcn.006462a0
mov rax, qword [r14]
vmovdqu ymm5, ymmword [rsp + 0x50]
mov r9, rbx
mov qword [r14 + 0x80], rax
mov rax, qword [r14 + 8]
mov qword [r14 + 0x88], rax
mov rax, qword [r14 + 0x10]
mov qword [r14 + 0x90], rax
mov rax, qword [r14 + 0x18]
mov qword [r14 + 0x98], rax
mov rax, qword [r14 + 0x20]
vpermd ymm1, ymm5, ymmword [r14 + 0x80]
mov qword [r14 + 0xa0], rax
mov rax, qword [r14 + 0x28]
mov qword [r14 + 0xa8], rax
mov rax, qword [r14 + 0x30]
mov qword [r14 + 0xb0], rax
mov rax, qword [r14 + 0x38]
mov qword [r14 + 0xb8], rax
vpermd ymm0, ymm5, ymmword [r14 + 0xa0]
vpblendd ymm2, ymm0, ymm1, 0x39
vpblendd ymm0, ymm0, ymm1, 0xc6
vmovdqu ymmword [rsi], ymm2
vmovdqu ymmword [rsi + 0x20], ymm0
mov rax, qword [r14 + 0x40]
mov qword [r14 + 0x80], rax
mov rax, qword [r14 + 0x48]
mov qword [r14 + 0x88], rax
mov rax, qword [r14 + 0x50]
mov qword [r14 + 0x90], rax
mov rax, qword [r14 + 0x58]
mov qword [r14 + 0x98], rax
mov rax, qword [r14 + 0x60]
mov qword [r14 + 0xa0], rax
mov rax, qword [r14 + 0x68]
mov qword [r14 + 0xa8], rax
mov rax, qword [r14 + 0x70]
vpermd ymm1, ymm5, ymmword [r14 + 0x80]
mov r15, qword [rsp + 0x48]
mov qword [r14 + 0xb0], rax
mov rax, qword [r14 + 0x78]
mov r12, qword [rsp + 0x88]
mov qword [r14 + 0xb8], rax
lea rax, [r13 + r13]
vpermd ymm0, ymm5, ymmword [r14 + 0xa0]
mov qword [rsp + 0xa8], rax
mov eax, dword [rsi]
add r12, r15
vpblendd ymm2, ymm0, ymm1, 0x39
vpblendd ymm0, ymm0, ymm1, 0xc6
vmovdqu ymmword [rsi + 0x40], ymm2
vmovdqu ymmword [rsi + 0x60], ymm0
mov dword [r12], eax
mov eax, dword [rsi + 4]
mov dword [r12 + 4], eax
mov eax, dword [rsi + 8]
mov dword [r12 + 8], eax
mov eax, dword [rsi + 0xc]
mov dword [r12 + 0xc], eax
mov eax, dword [rsi + 0x10]
mov dword [r12 + 0x10], eax
mov eax, dword [rsi + 0x14]
mov dword [r12 + 0x14], eax
mov eax, dword [rsi + 0x18]
mov dword [r12 + 0x18], eax
mov eax, dword [rsi + 0x1c]
mov dword [r12 + 0x1c], eax
mov eax, dword [rsi + 0x20]
mov dword [r12 + 0x20], eax
mov eax, dword [rsi + 0x24]
mov dword [r12 + 0x24], eax
mov eax, dword [rsi + 0x28]
mov dword [r12 + 0x28], eax
mov eax, dword [rsi + 0x2c]
vpermd ymm1, ymm5, ymmword [r12]
mov dword [r12 + 0x2c], eax
mov eax, dword [rsi + 0x30]
mov dword [r12 + 0x30], eax
mov eax, dword [rsi + 0x34]
mov dword [r12 + 0x34], eax
mov eax, dword [rsi + 0x38]
mov dword [r12 + 0x38], eax
mov eax, dword [rsi + 0x3c]
mov dword [r12 + 0x3c], eax
vpermd ymm0, ymm5, ymmword [r12 + 0x20]
vpblendd ymm2, ymm0, ymm1, 0x93
vpblendd ymm0, ymm0, ymm1, 0x6c
vmovdqu ymmword [r15], ymm2
vmovdqu ymmword [r15 + 0x20], ymm0
mov eax, dword [rsi + 0x40]
mov dword [r12], eax
mov eax, dword [rsi + 0x44]
mov dword [r12 + 4], eax
mov eax, dword [rsi + 0x48]
mov dword [r12 + 8], eax
mov eax, dword [rsi + 0x4c]
mov dword [r12 + 0xc], eax
mov eax, dword [rsi + 0x50]
mov dword [r12 + 0x10], eax
mov eax, dword [rsi + 0x54]
mov dword [r12 + 0x14], eax
mov eax, dword [rsi + 0x58]
mov dword [r12 + 0x18], eax
mov eax, dword [rsi + 0x5c]
mov dword [r12 + 0x1c], eax
mov eax, dword [rsi + 0x60]
mov dword [r12 + 0x20], eax
mov eax, dword [rsi + 0x64]
vpermd ymm1, ymm5, ymmword [r12]
mov dword [r12 + 0x24], eax
mov eax, dword [rsi + 0x68]
mov dword [r12 + 0x28], eax
mov eax, dword [rsi + 0x6c]
mov dword [r12 + 0x2c], eax
mov eax, dword [rsi + 0x70]
mov dword [r12 + 0x30], eax
mov eax, dword [rsi + 0x74]
mov dword [r12 + 0x34], eax
mov eax, dword [rsi + 0x78]
mov dword [r12 + 0x38], eax
mov eax, dword [rsi + 0x7c]
mov dword [r12 + 0x3c], eax
vpermd ymm0, ymm5, ymmword [r12 + 0x20]
vpblendd ymm2, ymm0, ymm1, 0x93
vpblendd ymm0, ymm0, ymm1, 0x6c
vmovdqu ymmword [r15 + 0x40], ymm2
vmovdqu ymmword [r15 + 0x60], ymm0
vzeroupper
nop dword [rax + rax]
mov edx, edi
lea ecx, [rdi - 2]
mov r8d, 1
add edi, 2
shl rdx, 6
shl rcx, 6
add rdx, r15
add rcx, r15
call fcn.00644d90
lea eax, [rbp + 1]
mov rbp, rax
cmp r13, rax
ja 0x648ee0
mov rcx, qword [rsp + 0x48]
mov r8, r13
mov rdx, r12
mov rbx, r9
call fcn.00644d90
mov rbp, qword [rsp + 0x88]
mov rcx, r12
mov r8, r13
lea rdi, [r12 + rbp]
mov rdx, rdi
mov qword [rsp + 0x80], rdi
call fcn.00644d90
mov ecx, dword [rsp + 0x74]
lea rax, [rbp - 0x40]
mov r11d, 2
mov qword [rsp + 0xe0], rax
mov r15d, r11d
mov eax, dword [rdi + rbp - 0x40]
shr ecx, 1
mov qword [rsp + 0xb0], r14
mov dword [rsp + 0xa0], ecx
mov rcx, r13
shl rcx, 8
mov qword [rsp + 0xd8], rsi
mov qword [rsp + 0x78], rcx
cmp dword [rsp + 0xa0], r15d
ja 0x649072
nop dword [rax]
mov r10d, dword [rsp + 0xb8]
sub r10d, r15d
cmp r10d, 1
jbe 0x649057
mov esi, 1
mov rdi, qword [rsp + 0x80]
mov dword [rsp + 0x90], r15d
lea r14d, [r15 - 1]
mov r15, r13
mov r13d, esi
mov esi, r10d
nop
and eax, r14d
mov qword [rsp + 0x20], rbx
lea r12, [rdi + rbp]
mov rcx, rdi
lea edx, [r13 + rax - 1]
mov r9, r15
mov r8, r12
imul rdx, rbp
add rdx, qword [rsp + 0x48]
call fcn.006462a0
mov qword [rsp + 0x20], rbx
mov r9, r15
mov rcx, r12
and eax, r14d
add rdi, qword [rsp + 0x78]
lea edx, [rax + r13]
mov r8, rdi
add r13d, 2
imul rdx, rbp
add rdx, qword [rsp + 0x48]
call fcn.006462a0
cmp r13d, esi
jb 0x648fd0
lea edx, [rsi - 2]
mov r13, r15
mov r15d, dword [rsp + 0x90]
shr edx, 1
add rdx, 1
cmp esi, 1
mov esi, 1
cmovbe rdx, rsi
imul rdx, qword [rsp + 0x78]
add qword [rsp + 0x80], rdx
lea edx, [r15 + r15]
cmp dword [rsp + 0x74], edx
jbe 0x649080
mov r15d, edx
cmp dword [rsp + 0xa0], r15d
jbe 0x648f98
mov r10d, r15d
jmp 0x648fad
mov edi, dword [rsp + 0x74]
lea ebp, [r15 - 1]
mov qword [rsp + 0x20], rbx
mov r9, r13
mov rcx, qword [rsp + 0x80]
and eax, ebp
mov r14, qword [rsp + 0xb0]
sub edi, r15d
mov r15, qword [rsp + 0x88]
mov rsi, qword [rsp + 0xd8]
mov r12, rcx
lea edx, [rax + rdi - 2]
add r12, r15
imul rdx, r15
add rdx, qword [rsp + 0x48]
mov r8, r12
call fcn.006462a0
mov qword [rsp + 0x20], rbx
mov r9, r13
mov rcx, r12
and ebp, eax
mov r8, r14
lea edx, [rdi + rbp - 1]
lea rdi, [r14 + r15]
imul rdx, r15
add rdx, qword [rsp + 0x48]
call fcn.006462a0
mov r9, qword [rsp + 0xa8]
xor ecx, ecx
xor eax, eax
nop word [rax + rax]
shl rax, 6
lea rdx, [r14 + rax]
add rax, rsi
mov r8d, dword [rdx]
mov dword [rdi], r8d
mov r8d, dword [rdx + 4]
mov dword [rdi + 4], r8d
mov r8d, dword [rdx + 8]
mov dword [rdi + 8], r8d
mov r8d, dword [rdx + 0xc]
mov dword [rdi + 0xc], r8d
mov r8d, dword [rdx + 0x10]
mov dword [rdi + 0x10], r8d
mov r8d, dword [rdx + 0x14]
mov dword [rdi + 0x14], r8d
mov r8d, dword [rdx + 0x18]
mov dword [rdi + 0x18], r8d
mov r8d, dword [rdx + 0x1c]
mov dword [rdi + 0x1c], r8d
mov r8d, dword [rdx + 0x20]
mov dword [rdi + 0x20], r8d
mov r8d, dword [rdx + 0x24]
mov dword [rdi + 0x24], r8d
mov r8d, dword [rdx + 0x28]
mov dword [rdi + 0x28], r8d
mov r8d, dword [rdx + 0x2c]
mov dword [rdi + 0x2c], r8d
mov r8d, dword [rdx + 0x30]
mov dword [rdi + 0x30], r8d
mov r8d, dword [rdx + 0x34]
mov dword [rdi + 0x34], r8d
mov r8d, dword [rdx + 0x38]
mov dword [rdi + 0x38], r8d
mov edx, dword [rdx + 0x3c]
mov dword [rdi + 0x3c], edx
vmovdqu ymm4, ymmword [rsp + 0x50]
vpermd ymm1, ymm4, ymmword [rdi]
vpermd ymm0, ymm4, ymmword [rdi + 0x20]
vpblendd ymm2, ymm0, ymm1, 0x39
vpblendd ymm0, ymm0, ymm1, 0xc6
vmovdqu ymmword [rax], ymm2
vmovdqu ymmword [rax + 0x20], ymm0
lea eax, [rcx + 1]
mov rcx, rax
cmp r9, rax
ja 0x649108
mov ecx, dword [rsp + 0xbc]
mov r9, qword [rsp + 0xa8]
xor edx, edx
nop dword [rax]
mov eax, ecx
shl rdx, 6
shl eax, 6
add rdx, r14
add rax, rsi
mov r8d, dword [rax]
mov dword [rdi], r8d
mov r8d, dword [rax + 4]
mov dword [rdi + 4], r8d
mov r8d, dword [rax + 8]
mov dword [rdi + 8], r8d
mov r8d, dword [rax + 0xc]
mov dword [rdi + 0xc], r8d
mov r8d, dword [rax + 0x10]
mov dword [rdi + 0x10], r8d
mov r8d, dword [rax + 0x14]
mov dword [rdi + 0x14], r8d
mov r8d, dword [rax + 0x18]
mov dword [rdi + 0x18], r8d
mov r8d, dword [rax + 0x1c]
mov dword [rdi + 0x1c], r8d
mov r8d, dword [rax + 0x20]
mov dword [rdi + 0x20], r8d
mov r8d, dword [rax + 0x24]
mov dword [rdi + 0x24], r8d
mov r8d, dword [rax + 0x28]
mov dword [rdi + 0x28], r8d
mov r8d, dword [rax + 0x2c]
mov dword [rdi + 0x2c], r8d
mov r8d, dword [rax + 0x30]
mov dword [rdi + 0x30], r8d
mov r8d, dword [rax + 0x34]
mov dword [rdi + 0x34], r8d
mov r8d, dword [rax + 0x38]
mov dword [rdi + 0x38], r8d
mov eax, dword [rax + 0x3c]
mov dword [rdi + 0x3c], eax
vmovdqu ymm5, ymmword [rsp + 0x50]
vpermd ymm1, ymm5, ymmword [rdi]
vpermd ymm0, ymm5, ymmword [rdi + 0x20]
vpblendd ymm2, ymm0, ymm1, 0x93
vpblendd ymm0, ymm0, ymm1, 0x6c
vmovdqu ymmword [rdx], ymm2
vmovdqu ymmword [rdx + 0x20], ymm0
lea edx, [rcx + 1]
mov rcx, rdx
cmp rdx, r9
jb 0x6491d8
mov rcx, qword [rsp + 0x88]
mov r15, qword [rsp + 0x48]
mov qword [rsp + 0x48], rsi
mov r9, rbx
mov r12d, dword [rsp + 0xb8]
mov ebp, dword [rsp + 0x98]
mov eax, dword [r14 + rcx - 0x40]
mov rsi, qword [rsp + 0xa8]
mov rbx, rcx
and eax, r12d
vzeroupper
nop word [rax + rax]
mov edx, eax
mov r8, r13
mov rcx, r14
imul rdx, rsi
shl rdx, 6
add rdx, r15
call fcn.00646d50
mov r8, r13
mov edx, eax
and edx, r12d
imul rdx, rbx
add rdx, r15
call fcn.00646d50
and eax, r12d
sub ebp, 2
jne 0x6492d8
mov rsi, qword [rsp + 0x48]
mov r9, qword [rsp + 0xa8]
mov ecx, ebp
xor eax, eax
nop dword [rax]
shl rax, 6
lea rdx, [r14 + rax]
add rax, rsi
mov r8d, dword [rdx]
mov dword [rdi], r8d
mov r8d, dword [rdx + 4]
mov dword [rdi + 4], r8d
mov r8d, dword [rdx + 8]
mov dword [rdi + 8], r8d
mov r8d, dword [rdx + 0xc]
mov dword [rdi + 0xc], r8d
mov r8d, dword [rdx + 0x10]
mov dword [rdi + 0x10], r8d
mov r8d, dword [rdx + 0x14]
mov dword [rdi + 0x14], r8d
mov r8d, dword [rdx + 0x18]
mov dword [rdi + 0x18], r8d
mov r8d, dword [rdx + 0x1c]
mov dword [rdi + 0x1c], r8d
mov r8d, dword [rdx + 0x20]
mov dword [rdi + 0x20], r8d
mov r8d, dword [rdx + 0x24]
mov dword [rdi + 0x24], r8d
mov r8d, dword [rdx + 0x28]
mov dword [rdi + 0x28], r8d
mov r8d, dword [rdx + 0x2c]
mov dword [rdi + 0x2c], r8d
mov r8d, dword [rdx + 0x30]
mov dword [rdi + 0x30], r8d
mov r8d, dword [rdx + 0x34]
mov dword [rdi + 0x34], r8d
mov r8d, dword [rdx + 0x38]
mov dword [rdi + 0x38], r8d
mov edx, dword [rdx + 0x3c]
mov dword [rdi + 0x3c], edx
vmovdqu ymm4, ymmword [rsp + 0x50]
vpermd ymm1, ymm4, ymmword [rdi]
vpermd ymm0, ymm4, ymmword [rdi + 0x20]
vpblendd ymm2, ymm0, ymm1, 0x39
vpblendd ymm0, ymm0, ymm1, 0xc6
vmovdqu ymmword [rax], ymm2
vmovdqu ymmword [rax + 0x20], ymm0
lea eax, [rcx + 1]
mov rcx, rax
cmp rax, r9
jb 0x649320
mov rbx, qword [rsp + 0xd0]
mov rax, qword [rsp + 0xc0]
add rax, qword [rbx]
movzx eax, byte [rax]
test al, al
jne 0x6498b0
mov rcx, qword [rsp + 0xe0]
mov rax, qword [rsp + 0x260]
mov edx, 0x40
mov r9d, 0x20
mov r8, qword [rsp + 0xc8]
add rcx, rsi
mov qword [rsp + 0x20], rax
vzeroupper
call fcn.00596b70
mov eax, 1
jmp 0x648841
mov r9, r13
mov r8d, 0x1000
mov ebx, 0x200
mov eax, 0x2000
shl r9, 8
mov edx, 0x2000
jmp 0x6486d8
mov r10d, esi
mov r13, qword [rsp + 0xa0]
mov r14, qword [rsp + 0xa8]
lea edi, [r10 - 1]
mov rsi, qword [rsp + 0xb0]
and eax, edi
jmp 0x648c02
mov rcx, qword [0x0071e9a0]
call sub.libgcc_s_seh_1.dll___emutls_get_address
mov rcx, r12
mov r8d, 0x10
vmovdqu xmm5, xmmword [rax]
vmovdqu xmm4, xmmword [rax + 0x10]
vmovdqu xmm2, xmmword [rax + 0x20]
vmovups xmmword [r12], xmm5
vmovdqu xmm5, xmmword [rax + 0x30]
vmovups xmmword [r12 + 0x10], xmm4
vmovdqu xmm4, xmmword [rax + 0x40]
vmovups xmmword [r12 + 0x20], xmm2
vmovdqu xmm2, xmmword [rax + 0x50]
mov rax, qword [rax + 0x60]
vmovups xmmword [r12 + 0x30], xmm5
mov qword [r12 + 0x60], rax
mov rax, qword [rsp + 0x248]
vmovups xmmword [r12 + 0x40], xmm4
lea rdx, [rax + 0x40]
vmovups xmmword [r12 + 0x50], xmm2
call fcn.00572d10
lea rax, [rsp + 0x100]
mov rcx, r12
mov rdx, rax
mov qword [rsp + 0xc8], rax
call fcn.00572f00
jmp 0x648763
mov rax, qword [rsp + 0x248]
mov qword [rsp + 0xa0], 0
mov qword [rsp + 0x98], rax
jmp 0x6487ac
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x28], rsi
mov edx, 0x20
mov r9, qword [rsp + 0x250]
mov r8, qword [rsp + 0x248]
mov qword [rsp + 0x20], 1
mov qword [rsp + 0x30], rax
mov rcx, qword [rsp + 0xc8]
call fcn.00596c60
mov rax, qword [0x0071f5e0]
mov rbx, rax
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0xc0]
add rax, qword [rbx]
movzx eax, byte [rax]
test al, al
jne 0x648824
mov eax, dword [rsp + 0x74]
mov edx, 0xaaaaaaab
vmovdqu xmm2, xmmword [rsi]
xor r9d, r9d
mov rbx, qword [rsp + 0x120]
mov edi, dword [rsp + 0x140]
mov r8d, 1
vmovups xmmword [rsp + 0x100], xmm2
add eax, 2
vmovdqu xmm2, xmmword [rsi + 0x10]
imul rax, rdx
mov ebp, edi
lea r12, [rbx + 0x80]
mov rcx, rbx
vmovups xmmword [rsp + 0x110], xmm2
shr ebp, 7
mov dword [rsp + 0x78], ebp
shr rax, 0x21
lea edx, [rax + 1]
and eax, 0xfffffffe
mov dword [rsp + 0xe0], eax
mov eax, dword [rsi]
and edx, 0xfffffffe
mov dword [rsp + 0xd8], edx
mov rdx, r12
mov dword [rbx + 0x80], eax
mov eax, dword [rsi + 4]
mov dword [rbx + 0x84], eax
mov eax, dword [rsi + 8]
mov dword [rbx + 0x88], eax
mov eax, dword [rsi + 0xc]
mov dword [rbx + 0x8c], eax
mov eax, dword [rsi + 0x10]
mov dword [rbx + 0x90], eax
mov eax, dword [rsi + 0x14]
mov dword [rbx + 0x94], eax
mov eax, dword [rsi + 0x18]
mov dword [rbx + 0x98], eax
mov eax, dword [rsi + 0x1c]
mov dword [rbx + 0x9c], eax
mov eax, dword [rsi + 0x20]
mov dword [rbx + 0xa0], eax
mov eax, dword [rsi + 0x24]
mov dword [rbx + 0xa4], eax
mov eax, dword [rsi + 0x28]
mov dword [rbx + 0xa8], eax
mov eax, dword [rsi + 0x2c]
vmovdqu ymm5, ymmword [0x0071a160]
vpermd ymm1, ymm5, ymmword [rbx + 0x80]
mov dword [rbx + 0xac], eax
mov eax, dword [rsi + 0x30]
vmovdqu ymmword [rsp + 0x50], ymm5
mov dword [rbx + 0xb0], eax
mov eax, dword [rsi + 0x34]
mov dword [rbx + 0xb4], eax
mov eax, dword [rsi + 0x38]
mov dword [rbx + 0xb8], eax
mov eax, dword [rsi + 0x3c]
mov dword [rbx + 0xbc], eax
vpermd ymm0, ymm5, ymmword [rbx + 0xa0]
vpblendd ymm2, ymm0, ymm1, 0x93
vpblendd ymm0, ymm0, ymm1, 0x6c
vmovdqu ymmword [rbx], ymm2
vmovdqu ymmword [rbx + 0x20], ymm0
mov eax, dword [rsi + 0x40]
mov dword [rbx + 0x80], eax
mov eax, dword [rsi + 0x44]
mov dword [rbx + 0x84], eax
mov eax, dword [rsi + 0x48]
mov dword [rbx + 0x88], eax
mov eax, dword [rsi + 0x4c]
mov dword [rbx + 0x8c], eax
mov eax, dword [rsi + 0x50]
mov dword [rbx + 0x90], eax
mov eax, dword [rsi + 0x54]
mov dword [rbx + 0x94], eax
mov eax, dword [rsi + 0x58]
mov dword [rbx + 0x98], eax
mov eax, dword [rsi + 0x5c]
mov dword [rbx + 0x9c], eax
mov eax, dword [rsi + 0x60]
vpermd ymm1, ymm5, ymmword [rbx + 0x80]
mov dword [rbx + 0xa0], eax
mov eax, dword [rsi + 0x64]
mov dword [rbx + 0xa4], eax
mov eax, dword [rsi + 0x68]
mov dword [rbx + 0xa8], eax
mov eax, dword [rsi + 0x6c]
mov dword [rbx + 0xac], eax
mov eax, dword [rsi + 0x70]
mov dword [rbx + 0xb0], eax
mov eax, dword [rsi + 0x74]
mov dword [rbx + 0xb4], eax
mov eax, dword [rsi + 0x78]
mov dword [rbx + 0xb8], eax
mov eax, dword [rsi + 0x7c]
mov dword [rbx + 0xbc], eax
vpermd ymm0, ymm5, ymmword [rbx + 0xa0]
vpblendd ymm2, ymm0, ymm1, 0x93
vpblendd ymm0, ymm0, ymm1, 0x6c
vmovdqu ymmword [rbx + 0x40], ymm2
vmovdqu ymmword [rbx + 0x60], ymm0
vzeroupper
lea r15, [rbx + 0x100]
call fcn.00643cd0
xor r9d, r9d
mov rdx, r15
mov rcx, r12
mov r8d, 1
call fcn.00643cd0
mov eax, dword [rbx + 0x140]
cmp ebp, 2
jbe 0x649f25
mov ecx, edi
lea edi, [rbp - 1]
mov qword [rsp + 0x80], r13
mov r12d, 2
shr ecx, 8
mov qword [rsp + 0x90], r14
mov r14d, edi
mov qword [rsp + 0xa8], rsi
mov r13d, ecx
mov esi, ebp
nop dword [rax]
cmp r13d, r12d
ja 0x6498a8
mov ebp, r14d
sub ebp, r12d
cmp ebp, 1
jbe 0x649894
lea edi, [r12 - 1]
mov r10, r15
mov r9d, 1
nop word [rax + rax]
and eax, edi
lea r11, [r10 + 0x80]
mov rcx, r10
lea edx, [r9 + rax - 1]
mov r8, r11
shl rdx, 7
add rdx, rbx
call fcn.006485e0
and eax, edi
add r10, 0x100
mov rcx, r11
lea edx, [r9 + rax]
mov r8, r10
shl rdx, 7
add rdx, rbx
call fcn.006485e0
add r9d, 2
cmp r9d, ebp
jb 0x649830
lea edx, [rbp - 2]
mov ecx, 0x100
shr edx, 1
add rdx, 1
shl rdx, 8
cmp ebp, 1
cmovbe rdx, rcx
add r15, rdx
lea edx, [r12 + r12]
cmp esi, edx
jbe 0x6498c0
mov r12d, edx
jmp 0x649808
mov ebp, r12d
jmp 0x64981c
vzeroupper
xor eax, eax
jmp 0x648841
lea r11d, [r12 - 1]
mov r13, qword [rsp + 0x80]
mov r14, qword [rsp + 0x90]
mov rsi, qword [rsp + 0xa8]
and eax, r11d
mov r9d, dword [rsp + 0x78]
lea r10, [r15 + 0x80]
mov rcx, r15
mov r8, r10
sub r9d, r12d
lea edx, [r9 + rax - 2]
shl rdx, 7
add rdx, rbx
call fcn.006485e0
mov r8, r14
and r11d, eax
mov rcx, r10
lea edx, [r9 + r11 - 1]
shl rdx, 7
add rdx, rbx
call fcn.006485e0
mov rax, qword [r14]
vmovdqu ymm4, ymmword [rsp + 0x50]
xor ecx, ecx
lea r10, [r13 + r13]
xor edx, edx
mov qword [r14 + 0x80], rax
mov rax, qword [r14 + 8]
mov qword [r14 + 0x88], rax
mov rax, qword [r14 + 0x10]
mov qword [r14 + 0x90], rax
mov rax, qword [r14 + 0x18]
mov qword [r14 + 0x98], rax
mov rax, qword [r14 + 0x20]
vpermd ymm1, ymm4, ymmword [r14 + 0x80]
mov qword [r14 + 0xa0], rax
mov rax, qword [r14 + 0x28]
mov qword [r14 + 0xa8], rax
mov rax, qword [r14 + 0x30]
mov qword [r14 + 0xb0], rax
mov rax, qword [r14 + 0x38]
mov qword [r14 + 0xb8], rax
vpermd ymm0, ymm4, ymmword [r14 + 0xa0]
vpblendd ymm2, ymm0, ymm1, 0x39
vpblendd ymm0, ymm0, ymm1, 0xc6
vmovdqu ymmword [rsi], ymm2
vmovdqu ymmword [rsi + 0x20], ymm0
mov rax, qword [r14 + 0x40]
mov qword [r14 + 0x80], rax
mov rax, qword [r14 + 0x48]
mov qword [r14 + 0x88], rax
mov rax, qword [r14 + 0x50]
mov qword [r14 + 0x90], rax
mov rax, qword [r14 + 0x58]
mov qword [r14 + 0x98], rax
mov rax, qword [r14 + 0x60]
mov qword [r14 + 0xa0], rax
mov rax, qword [r14 + 0x68]
mov qword [r14 + 0xa8], rax
mov rax, qword [r14 + 0x70]
vpermd ymm1, ymm4, ymmword [r14 + 0x80]
mov r9, qword [rsp + 0x48]
mov qword [rsp + 0xe8], r10
mov qword [r14 + 0xb0], rax
mov rax, qword [r14 + 0x78]
mov r12, qword [rsp + 0x88]
mov qword [r14 + 0xb8], rax
vpermd ymm0, ymm4, ymmword [r14 + 0xa0]
add r12, r9
vpblendd ymm2, ymm0, ymm1, 0x39
vpblendd ymm0, ymm0, ymm1, 0xc6
vmovdqu ymmword [rsi + 0x40], ymm2
vmovdqu ymmword [rsi + 0x60], ymm0
nop dword [rax]
mov eax, ecx
shl rdx, 6
shl eax, 6
add rdx, r9
add rax, rsi
mov r8d, dword [rax]
mov dword [r12], r8d
mov r8d, dword [rax + 4]
mov dword [r12 + 4], r8d
mov r8d, dword [rax + 8]
mov dword [r12 + 8], r8d
mov r8d, dword [rax + 0xc]
mov dword [r12 + 0xc], r8d
mov r8d, dword [rax + 0x10]
mov dword [r12 + 0x10], r8d
mov r8d, dword [rax + 0x14]
mov dword [r12 + 0x14], r8d
mov r8d, dword [rax + 0x18]
mov dword [r12 + 0x18], r8d
mov r8d, dword [rax + 0x1c]
mov dword [r12 + 0x1c], r8d
mov r8d, dword [rax + 0x20]
mov dword [r12 + 0x20], r8d
mov r8d, dword [rax + 0x24]
mov dword [r12 + 0x24], r8d
mov r8d, dword [rax + 0x28]
mov dword [r12 + 0x28], r8d
mov r8d, dword [rax + 0x2c]
mov dword [r12 + 0x2c], r8d
mov r8d, dword [rax + 0x30]
mov dword [r12 + 0x30], r8d
mov r8d, dword [rax + 0x34]
mov dword [r12 + 0x34], r8d
mov r8d, dword [rax + 0x38]
mov dword [r12 + 0x38], r8d
mov eax, dword [rax + 0x3c]
mov dword [r12 + 0x3c], eax
vmovdqu ymm5, ymmword [rsp + 0x50]
vpermd ymm1, ymm5, ymmword [r12]
vpermd ymm0, ymm5, ymmword [r12 + 0x20]
vpblendd ymm2, ymm0, ymm1, 0x93
vpblendd ymm0, ymm0, ymm1, 0x6c
vmovdqu ymmword [rdx], ymm2
vmovdqu ymmword [rdx + 0x20], ymm0
lea edx, [rcx + 1]
mov rcx, rdx
cmp r10, rdx
ja 0x649a48
mov rbp, qword [rsp + 0x48]
lea rbx, [rsp + 0x120]
mov r8, r13
mov rdx, r12
mov r9, rbx
mov rcx, rbp
vzeroupper
call fcn.00643cd0
mov rcx, r12
mov r9, rbx
mov r15, qword [rsp + 0x88]
mov r8, r13
lea rax, [r12 + r15]
mov r12, rbp
mov rdx, rax
mov rdi, rax
mov qword [rsp + 0xa8], rax
call fcn.00643cd0
mov edx, dword [rsp + 0x74]
mov rax, rdi
mov qword [rsp + 0xf0], r14
mov qword [rsp + 0xf8], rsi
mov eax, dword [rax + r15 - 0x40]
mov rdi, r15
mov dword [rsp + 0x90], 2
shr edx, 1
mov ecx, dword [rsp + 0x90]
mov dword [rsp + 0xb0], edx
mov rdx, r13
shl rdx, 8
mov qword [rsp + 0x80], rdx
cmp dword [rsp + 0xb0], ecx
ja 0x649c90
mov esi, dword [rsp + 0xb8]
sub esi, ecx
mov dword [rsp + 0x78], esi
cmp esi, 1
jbe 0x649c6e
mov esi, dword [rsp + 0x90]
mov r15, qword [rsp + 0xa8]
lea ebp, [rsi - 1]
mov esi, 1
nop word [rax + rax]
and eax, ebp
mov qword [rsp + 0x20], rbx
lea r14, [rdi + r15]
mov rcx, r15
lea edx, [rsi + rax - 1]
mov r9, r13
mov r8, r14
imul rdx, rdi
add rdx, r12
call fcn.006454b0
mov qword [rsp + 0x20], rbx
mov r9, r13
mov rcx, r14
and eax, ebp
add r15, qword [rsp + 0x80]
lea edx, [rax + rsi]
mov r8, r15
add esi, 2
imul rdx, rdi
add rdx, r12
call fcn.006454b0
cmp esi, dword [rsp + 0x78]
jb 0x649bf0
mov esi, dword [rsp + 0x78]
lea edx, [rsi - 2]
shr edx, 1
add rdx, 1
cmp esi, 1
mov esi, 1
cmovbe rdx, rsi
imul rdx, qword [rsp + 0x80]
add qword [rsp + 0xa8], rdx
mov ecx, dword [rsp + 0x90]
lea edx, [rcx + rcx]
cmp dword [rsp + 0x74], edx
jbe 0x649ca0
mov dword [rsp + 0x90], edx
mov ecx, edx
jmp 0x649bb0
mov dword [rsp + 0x78], ecx
jmp 0x649bd3
mov edi, dword [rsp + 0x74]
lea ebp, [rcx - 1]
mov qword [rsp + 0x20], rbx
mov r9, r13
mov r15, qword [rsp + 0x88]
and eax, ebp
mov r14, qword [rsp + 0xf0]
sub edi, ecx
mov rcx, qword [rsp + 0xa8]
mov rsi, qword [rsp + 0xf8]
lea edx, [rax + rdi - 2]
mov r12, rcx
imul rdx, r15
add rdx, qword [rsp + 0x48]
add r12, r15
mov r8, r12
call fcn.006454b0
mov qword [rsp + 0x20], rbx
mov r8, r14
mov r9, r13
and ebp, eax
mov rcx, r12
lea edx, [rdi + rbp - 1]
imul rdx, r15
add rdx, qword [rsp + 0x48]
call fcn.006454b0
mov r10, qword [rsp + 0xe8]
lea rdx, [r14 + r15]
xor eax, eax
mov r8d, dword [rsp + 0xbc]
nop word cs:[rax + rax]
shl rax, 6
lea rcx, [r14 + rax]
add rax, rsi
mov r9d, dword [rcx]
mov dword [rdx], r9d
mov r9d, dword [rcx + 4]
mov dword [rdx + 4], r9d
mov r9d, dword [rcx + 8]
mov dword [rdx + 8], r9d
mov r9d, dword [rcx + 0xc]
mov dword [rdx + 0xc], r9d
mov r9d, dword [rcx + 0x10]
mov dword [rdx + 0x10], r9d
mov r9d, dword [rcx + 0x14]
mov dword [rdx + 0x14], r9d
mov r9d, dword [rcx + 0x18]
mov dword [rdx + 0x18], r9d
mov r9d, dword [rcx + 0x1c]
mov dword [rdx + 0x1c], r9d
mov r9d, dword [rcx + 0x20]
mov dword [rdx + 0x20], r9d
mov r9d, dword [rcx + 0x24]
mov dword [rdx + 0x24], r9d
mov r9d, dword [rcx + 0x28]
mov dword [rdx + 0x28], r9d
mov r9d, dword [rcx + 0x2c]
mov dword [rdx + 0x2c], r9d
mov r9d, dword [rcx + 0x30]
mov dword [rdx + 0x30], r9d
mov r9d, dword [rcx + 0x34]
mov dword [rdx + 0x34], r9d
mov r9d, dword [rcx + 0x38]
mov dword [rdx + 0x38], r9d
mov ecx, dword [rcx + 0x3c]
mov dword [rdx + 0x3c], ecx
vmovdqu ymm2, ymmword [rsp + 0x50]
vpermd ymm1, ymm2, ymmword [rdx]
vpermd ymm0, ymm2, ymmword [rdx + 0x20]
vpblendd ymm2, ymm0, ymm1, 0x39
vpblendd ymm0, ymm0, ymm1, 0xc6
vmovdqu ymmword [rax], ymm2
vmovdqu ymmword [rax + 0x20], ymm0
lea eax, [r8 + 1]
mov r8, rax
cmp r10, rax
ja 0x649d30
mov rax, qword [rsp + 0x48]
mov r8d, dword [rsp + 0x74]
mov rdx, r13
mov rcx, rsi
mov edi, dword [rsp + 0xe0]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], r14
mov r9d, edi
mov qword [rsp + 0x20], rax
vzeroupper
call fcn.00648310
cmp dword [rsp + 0xd8], edi
ja 0x649ef6
mov rdi, qword [rsp + 0xd0]
mov rbx, qword [rsp + 0xc0]
mov rax, qword [rdi]
add rax, rbx
movzx eax, byte [rax]
test al, al
jne 0x648824
mov rax, qword [rsp + 0x260]
mov r8, rsi
mov qword [rsp + 0x30], 0x20
mov edx, 0x20
mov r9, qword [rsp + 0x88]
mov rcx, qword [rsp + 0xc8]
mov qword [rsp + 0x20], 1
mov qword [rsp + 0x28], rax
call fcn.00596c60
mov rax, qword [rdi]
add rax, rbx
movzx eax, byte [rax]
test al, al
jne 0x648824
cmp qword [rsp + 0x98], 0
je 0x649f35
mov rbx, qword [rsp + 0xc8]
mov r9, qword [rsp + 0xa0]
mov edx, 0x20
mov r8, qword [rsp + 0x98]
mov rcx, qword [rsp + 0x260]
mov qword [rsp + 0x20], rbx
call fcn.00596b70
mov r8, qword [rsp + 0x260]
mov edx, 0x20
mov rcx, rbx
call fcn.00596750
mov eax, 1
jmp 0x648841
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x30], rbx
mov rdx, r13
mov rcx, rsi
mov qword [rsp + 0x28], r14
mov r8d, dword [rsp + 0x74]
mov r9d, 2
mov qword [rsp + 0x20], rax
call fcn.00648310
jmp 0x649e2b
xor eax, eax
xor r11d, r11d
mov r12d, 1
jmp 0x6498e0
mov rax, qword [rsp + 0x250]
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0x248]
mov qword [rsp + 0x98], rax
jmp 0x649ea8
mov qword [rdi + 8], 0
or eax, 0xffffffff
jmp 0x648841