Function at 0x646636
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0x20
mov eax, 0x80b4eb
call fcn.00479cbf
mov esi, ecx
mov dword [ebp - 0x20], esi
xor ebx, ebx
mov eax, ebx
mov dword [ebp - 0x24], ebx
cmp dword [esi + 0x7c], eax
jbe 0x6466d0
mov edi, dword [esi + 8]
lea ecx, [eax]
mov eax, dword [esi + 0x78]
mov edx, dword [eax + ecx*4]
mov al, byte [esi + 0x60]
mov dword [ebp - 0x28], edx
test al, al
je 0x646674
mov dword [ebp - 0x2c], 1
mov ebx, dword [ebp - 0x2c]
jmp 0x646677
mov ebx, dword [edi + ecx*4]
test al, al
je 0x646680
mov edi, dword [edi + ecx*4]
jmp 0x646683
xor edi, edi
inc edi
lea eax, [edx + 0x70]
mov ecx, eax
mov dword [ebp - 0x2c], eax
call fcn.0064571f
test ebx, ebx
je 0x6466a6
mov esi, dword [ebp - 0x2c]
mov ecx, esi
call fcn.0063808f
sub ebx, 1
jne 0x646697
mov esi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x28]
lea ecx, [ebx + 0x7c]
call fcn.0064571f
test edi, edi
je 0x6466c2
lea ecx, [ebx + 0x7c]
call fcn.0063808f
sub edi, 1
jne 0x6466b5
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, dword [esi + 0x7c]
jb 0x646653
xor ebx, ebx
cmp dword [esi + 0x18], 0
mov edi, ebx
jbe 0x64681d
mov ecx, dword [esi + 0x14]
mov eax, dword [esi + 0x3c]
mov edx, dword [ecx + edi*8]
mov dword [ebp - 0x1c], edx
mov ecx, dword [ebp - 0x1c]
mov edx, dword [eax + edx*4]
mov eax, dword [esi + 0x30]
mov dword [ebp - 0x28], edx
sub ecx, dword [eax + edx*4]
mov al, byte [esi + 0x60]
mov dword [ebp - 0x1c], ecx
mov ecx, dword [esi + 0x14]
mov byte [ebp - 0xd], al
test al, al
je 0x646710
mov esi, dword [ecx + edi*8 + 4]
mov dword [ebp - 0x24], esi
jmp 0x646713
mov dword [ebp - 0x24], edx
test al, al
jne 0x64671e
mov edx, dword [ecx + edi*8 + 4]
mov dword [ebp - 0x28], edx
and dword [ebp - 0x2c], 0
mov cl, byte [ebp - 0xd]
mov eax, dword [ebp - 0x1c]
test cl, cl
mov esi, eax
cmovne esi, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], esi
xor esi, esi
test cl, cl
cmovne esi, eax
mov dword [ebp - 0x2c], esi
mov esi, dword [ebp - 0x20]
mov ecx, dword [esi + 0x78]
mov eax, dword [ecx + edx*4]
mov edx, dword [ebp - 0x2c]
mov eax, dword [eax + 0x7c]
mov edx, dword [eax + edx*4]
mov eax, dword [ebp - 0x24]
push edx
mov eax, dword [ecx + eax*4]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [eax + 0x70]
mov ecx, dword [eax + ecx*4]
mov eax, dword [esi + 0x6c]
push ecx
mov ecx, dword [eax + edi*4]
call fcn.00648328
mov dword [ebp - 0x18], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x14], ebx
mov ecx, dword [ebp - 0x24]
mov eax, dword [esi + 0x78]
mov byte [ebp - 4], 1
mov eax, dword [eax + ecx*4]
mov ecx, dword [eax + 0x18]
test ecx, ecx
jne 0x64678b
mov ecx, dword [eax + 0x1c]
mov eax, dword [ecx]
lea edx, [ebp - 0x18]
push edx
push 0x84a040
push ecx
call dword [eax]
mov ecx, dword [ebp - 0x28]
mov eax, dword [esi + 0x78]
mov eax, dword [eax + ecx*4]
mov ecx, dword [eax + 0x18]
test ecx, ecx
jne 0x6467ac
mov ecx, dword [eax + 0x1c]
mov eax, dword [ecx]
lea edx, [ebp - 0x14]
push edx
push 0x84a040
push ecx
call dword [eax]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
test eax, eax
je 0x6467ed
test ecx, ecx
je 0x6467ed
mov ecx, dword [eax]
push 0x80000
push dword [ebp - 0x1c]
push eax
call dword [ecx + 0xc]
mov eax, dword [ebp - 0x14]
push 0x80000
push dword [ebp - 0x2c]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x10]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov byte [ebp - 4], 2
test ecx, ecx
je 0x6467fe
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 4], 3
test eax, eax
je 0x64680f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
or dword [ebp - 4], 0xffffffff
inc edi
cmp edi, dword [esi + 0x18]
jb 0x6466dc
cmp byte [esi + 0x60], 0
mov ecx, dword [esi + 0x2c]
mov eax, dword [esi + 0x78]
mov edi, dword [ebp + 8]
mov ecx, dword [eax + ecx*4]
je 0x64683d
mov ecx, dword [ecx + 0x70]
push dword [edi]
mov ecx, dword [ecx]
call fcn.005fc9d4
jmp 0x64684c
mov eax, dword [ebp + 0xc]
mov ecx, dword [ecx + 0x7c]
push dword [eax]
mov ecx, dword [ecx]
call fcn.005fc9d4
cmp dword [esi + 0x24], ebx
jbe 0x6468a4
sub dword [ebp + 0xc], edi
mov eax, dword [esi + 0x20]
mov ecx, dword [eax + ebx*4]
mov eax, dword [esi + 0x3c]
mov edx, dword [eax + ecx*4]
mov eax, dword [esi + 0x30]
sub ecx, dword [eax + edx*4]
cmp byte [esi + 0x60], 0
mov eax, dword [esi + 0x78]
mov dword [ebp + 8], ecx
mov ecx, dword [eax + edx*4]
je 0x64688b
mov eax, dword [ebp + 0xc]
mov ecx, dword [ecx + 0x7c]
push dword [eax + edi]
mov eax, dword [ebp + 8]
mov ecx, dword [ecx + eax*4]
call fcn.005fc9d4
jmp 0x64689b
mov ecx, dword [ecx + 0x70]
mov eax, dword [ebp + 8]
push dword [edi]
mov ecx, dword [ecx + eax*4]
call fcn.005fc9d4
inc ebx
add edi, 4
cmp ebx, dword [esi + 0x24]
jb 0x646854
xor eax, eax
call fcn.00479c88
ret 8