Function at 0x646756
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0x20
mov eax, 0x80c9fb
call fcn.00479ddf
mov esi, ecx
mov dword [ebp - 0x20], esi
xor ebx, ebx
mov eax, ebx
mov dword [ebp - 0x24], ebx
cmp dword [esi + 0x7c], eax
jbe 0x6467f0
mov edi, dword [esi + 8]
lea ecx, [eax]
mov eax, dword [esi + 0x78]
mov edx, dword [eax + ecx*4]
mov al, byte [esi + 0x60]
mov dword [ebp - 0x28], edx
test al, al
je 0x646794
mov dword [ebp - 0x2c], 1
mov ebx, dword [ebp - 0x2c]
jmp 0x646797
mov ebx, dword [edi + ecx*4]
test al, al
je 0x6467a0
mov edi, dword [edi + ecx*4]
jmp 0x6467a3
xor edi, edi
inc edi
lea eax, [edx + 0x70]
mov ecx, eax
mov dword [ebp - 0x2c], eax
call fcn.0064583f
test ebx, ebx
je 0x6467c6
mov esi, dword [ebp - 0x2c]
mov ecx, esi
call fcn.006381af
sub ebx, 1
jne 0x6467b7
mov esi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x28]
lea ecx, [ebx + 0x7c]
call fcn.0064583f
test edi, edi
je 0x6467e2
lea ecx, [ebx + 0x7c]
call fcn.006381af
sub edi, 1
jne 0x6467d5
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, dword [esi + 0x7c]
jb 0x646773
xor ebx, ebx
cmp dword [esi + 0x18], 0
mov edi, ebx
jbe 0x64693d
mov ecx, dword [esi + 0x14]
mov eax, dword [esi + 0x3c]
mov edx, dword [ecx + edi*8]
mov dword [ebp - 0x1c], edx
mov ecx, dword [ebp - 0x1c]
mov edx, dword [eax + edx*4]
mov eax, dword [esi + 0x30]
mov dword [ebp - 0x28], edx
sub ecx, dword [eax + edx*4]
mov al, byte [esi + 0x60]
mov dword [ebp - 0x1c], ecx
mov ecx, dword [esi + 0x14]
mov byte [ebp - 0xd], al
test al, al
je 0x646830
mov esi, dword [ecx + edi*8 + 4]
mov dword [ebp - 0x24], esi
jmp 0x646833
mov dword [ebp - 0x24], edx
test al, al
jne 0x64683e
mov edx, dword [ecx + edi*8 + 4]
mov dword [ebp - 0x28], edx
and dword [ebp - 0x2c], 0
mov cl, byte [ebp - 0xd]
mov eax, dword [ebp - 0x1c]
test cl, cl
mov esi, eax
cmovne esi, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], esi
xor esi, esi
test cl, cl
cmovne esi, eax
mov dword [ebp - 0x2c], esi
mov esi, dword [ebp - 0x20]
mov ecx, dword [esi + 0x78]
mov eax, dword [ecx + edx*4]
mov edx, dword [ebp - 0x2c]
mov eax, dword [eax + 0x7c]
mov edx, dword [eax + edx*4]
mov eax, dword [ebp - 0x24]
push edx
mov eax, dword [ecx + eax*4]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [eax + 0x70]
mov ecx, dword [eax + ecx*4]
mov eax, dword [esi + 0x6c]
push ecx
mov ecx, dword [eax + edi*4]
call fcn.00648448
mov dword [ebp - 0x18], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x14], ebx
mov ecx, dword [ebp - 0x24]
mov eax, dword [esi + 0x78]
mov byte [ebp - 4], 1
mov eax, dword [eax + ecx*4]
mov ecx, dword [eax + 0x18]
test ecx, ecx
jne 0x6468ab
mov ecx, dword [eax + 0x1c]
mov eax, dword [ecx]
lea edx, [ebp - 0x18]
push edx
push 0x84b040
push ecx
call dword [eax]
mov ecx, dword [ebp - 0x28]
mov eax, dword [esi + 0x78]
mov eax, dword [eax + ecx*4]
mov ecx, dword [eax + 0x18]
test ecx, ecx
jne 0x6468cc
mov ecx, dword [eax + 0x1c]
mov eax, dword [ecx]
lea edx, [ebp - 0x14]
push edx
push 0x84b040
push ecx
call dword [eax]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
test eax, eax
je 0x64690d
test ecx, ecx
je 0x64690d
mov ecx, dword [eax]
push 0x80000
push dword [ebp - 0x1c]
push eax
call dword [ecx + 0xc]
mov eax, dword [ebp - 0x14]
push 0x80000
push dword [ebp - 0x2c]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x10]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov byte [ebp - 4], 2
test ecx, ecx
je 0x64691e
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 4], 3
test eax, eax
je 0x64692f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
or dword [ebp - 4], 0xffffffff
inc edi
cmp edi, dword [esi + 0x18]
jb 0x6467fc
cmp byte [esi + 0x60], 0
mov ecx, dword [esi + 0x2c]
mov eax, dword [esi + 0x78]
mov edi, dword [ebp + 8]
mov ecx, dword [eax + ecx*4]
je 0x64695d
mov ecx, dword [ecx + 0x70]
push dword [edi]
mov ecx, dword [ecx]
call fcn.005fcaf4
jmp 0x64696c
mov eax, dword [ebp + 0xc]
mov ecx, dword [ecx + 0x7c]
push dword [eax]
mov ecx, dword [ecx]
call fcn.005fcaf4
cmp dword [esi + 0x24], ebx
jbe 0x6469c4
sub dword [ebp + 0xc], edi
mov eax, dword [esi + 0x20]
mov ecx, dword [eax + ebx*4]
mov eax, dword [esi + 0x3c]
mov edx, dword [eax + ecx*4]
mov eax, dword [esi + 0x30]
sub ecx, dword [eax + edx*4]
cmp byte [esi + 0x60], 0
mov eax, dword [esi + 0x78]
mov dword [ebp + 8], ecx
mov ecx, dword [eax + edx*4]
je 0x6469ab
mov eax, dword [ebp + 0xc]
mov ecx, dword [ecx + 0x7c]
push dword [eax + edi]
mov eax, dword [ebp + 8]
mov ecx, dword [ecx + eax*4]
call fcn.005fcaf4
jmp 0x6469bb
mov ecx, dword [ecx + 0x70]
mov eax, dword [ebp + 8]
push dword [edi]
mov ecx, dword [ecx + eax*4]
call fcn.005fcaf4
inc ebx
add edi, 4
cmp ebx, dword [esi + 0x24]
jb 0x646974
xor eax, eax
call fcn.00479da8
ret 8