Function at 0x648c50
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x649068
sub esp, 0x6c
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0x70]
mov ebp, dword [esp + 0x80]
xor eax, eax
jmp 0x648c81
inc eax
mov edx, ecx
mov ebp, esi
cmp edx, eax
jle 0x648de7
jbe 0x649060
mov ecx, edx
imul edx, eax, 0x1c
mov esi, ebp
lea ebp, [ebx + edx]
mov edi, edx
mov edx, dword [edx + ebx]
cmp dword [ebp + 4], esi
jne 0x648c7c
mov dword [esp + 0x30], eax
mov dword [esp + 0x3c], edi
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], esi
call fcn.00403310
movzx eax, byte [esp + 0xc]
test al, al
jne 0x648cdd
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x74]
mov ebx, dword [esp + 0x70]
mov esi, dword [esp + 0x80]
jmp 0x648c7c
movzx eax, byte [esp + 0x8c]
test al, al
je 0x648cfe
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x70]
mov dword [edx + ecx + 0x10], 0
jmp 0x648dbe
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x3c]
lea ebx, [edx + ecx + 0xc]
mov dword [esp + 0x4c], ebx
mov ebp, dword [edx + ecx + 0x14]
mov esi, dword [edx + ecx + 0xc]
mov edi, dword [esp + 0x88]
cmp edi, ebp
jbe 0x648d4d
mov dword [esp], esi
mov dword [esp + 4], edi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edi
lea eax, [0x734860]
mov dword [esp + 0x10], eax
call fcn.00442820
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov edi, eax
mov dword [esp + 0x38], ebp
mov dword [esp + 0x34], edi
mov dword [esp + 0x48], esi
mov dword [esp], esi
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 8], eax
call fcn.00457450
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x70]
mov dword [edx + eax + 0x10], ecx
mov ecx, dword [esp + 0x38]
mov dword [edx + eax + 0x14], ecx
mov ecx, dword [0x901e80]
test ecx, ecx
jne 0x648da3
mov ecx, dword [esp + 0x48]
mov dword [edx + eax + 0xc], ecx
jmp 0x648db4
mov edi, dword [esp + 0x4c]
mov ecx, eax
mov eax, dword [esp + 0x48]
call fcn.00456ac0
mov eax, ecx
mov ecx, eax
movzx eax, byte [esp + 0x8c]
mov byte [edx + ecx + 0x18], al
mov eax, dword [esp + 0x70]
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x98], eax
add esp, 0x6c
ret
nop
mov eax, ebp
mov ebp, dword [esp + 0x78]
cmp ebp, edx
jle 0x648dfa
lea esi, [edx + 1]
jmp 0x648ea9
lea edi, [esp + 0x50]
xor eax, eax
call fcn.00456d59
lea ecx, [0x901b24]
mov dword [esp + 0x5c], ecx
lea ecx, [edx + 1]
cmp ebp, ecx
jae 0x648e4c
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x747e80]
mov dword [esp + 0x10], eax
call fcn.00442820
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, eax
mov ebp, edx
mov edx, dword [esp + 0x74]
mov dword [esp + 0x20], ecx
mov eax, edx
imul edx, ecx, 0x1c
lea edi, [edx + ebx - 0x1c]
mov edx, dword [0x901e80]
test edx, edx
jne 0x648e6e
lea esi, [esp + 0x50]
call fcn.0045722a
jmp 0x648e9c
mov dword [esp + 0x40], ebx
mov dword [esp + 0x24], ebp
lea eax, [0x747e80]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x50]
mov dword [esp + 8], eax
call fcn.0040fcb0
mov eax, dword [esp + 0x74]
mov ebx, dword [esp + 0x40]
mov ebp, dword [esp + 0x24]
mov edx, eax
mov esi, dword [esp + 0x20]
mov eax, dword [esp + 0x80]
cmp edx, esi
jae 0x649057
mov dword [esp + 0x28], esi
mov dword [esp + 0x44], ebx
mov dword [esp + 0x2c], ebp
imul ecx, edx, 0x1c
mov dword [esp + 0x3c], ecx
lea edx, [ebx + ecx]
mov dword [esp + 0x4c], edx
mov edi, dword [ebx + ecx + 8]
mov edx, dword [ecx + ebx]
cmp eax, edi
jbe 0x648f00
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], edi
mov dword [esp + 0xc], eax
lea ecx, [0x734860]
mov dword [esp + 0x10], ecx
call fcn.00442820
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
mov dword [esp + 0x38], edi
mov dword [esp + 0x34], eax
mov dword [esp + 0x48], edx
mov dword [esp], edx
mov ecx, dword [esp + 0x7c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x80]
mov dword [esp + 8], ecx
call fcn.00457450
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x44]
mov dword [edx + eax + 4], ecx
mov ecx, dword [esp + 0x38]
mov dword [edx + eax + 8], ecx
mov ecx, dword [0x901e80]
test ecx, ecx
jne 0x648f52
mov ecx, dword [esp + 0x48]
mov dword [edx + eax], ecx
jmp 0x648f63
mov edi, dword [esp + 0x4c]
mov ecx, eax
mov eax, dword [esp + 0x48]
call fcn.00456ac0
mov eax, ecx
movzx ecx, byte [esp + 0x8c]
test cl, cl
je 0x648f7c
mov dword [edx + eax + 0x10], 0
jmp 0x649032
lea ebx, [eax + edx + 0xc]
mov dword [esp + 0x4c], ebx
mov ebp, dword [eax + edx + 0x14]
mov esi, dword [eax + edx + 0xc]
mov edi, dword [esp + 0x88]
cmp edi, ebp
jbe 0x648fc3
mov dword [esp], esi
mov dword [esp + 4], edi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], edi
lea eax, [0x734860]
mov dword [esp + 0x10], eax
call fcn.00442820
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov edi, eax
mov dword [esp + 0x38], ebp
mov dword [esp + 0x34], edi
mov dword [esp + 0x48], esi
mov dword [esp], esi
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 8], eax
call fcn.00457450
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x44]
mov dword [edx + eax + 0x10], ecx
mov ecx, dword [esp + 0x38]
mov dword [edx + eax + 0x14], ecx
mov ecx, dword [0x901e80]
test ecx, ecx
jne 0x649019
mov ecx, dword [esp + 0x48]
mov dword [edx + eax + 0xc], ecx
jmp 0x64902a
mov edi, dword [esp + 0x4c]
mov ecx, eax
mov eax, dword [esp + 0x48]
call fcn.00456ac0
mov eax, ecx
movzx ecx, byte [esp + 0x8c]
mov byte [edx + eax + 0x18], cl
mov dword [esp + 0x90], edx
mov eax, dword [esp + 0x28]
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x98], eax
add esp, 0x6c
ret
mov eax, edx
mov ecx, esi
call fcn.00456b40
mov ecx, edx
call fcn.00456b40
nop
call fcn.00455690
jmp fcn.00648c50