Function at 0x6486b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x8c8600]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x648e1a
sub esp, 0x6c
lea edi, [esp + 0x3c]
xor eax, eax
call fcn.004773d4
mov dword [esp + 0x48], 3
lea ecx, [0x702345]
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x70]
test ecx, ecx
je 0x648e01
mov eax, dword [ecx + 8]
mov dword [esp + 0x34], eax
cmp eax, 0xa28aa5f0
jne 0x648749
lea edx, [0x6fbca0]
cmp ecx, edx
jne 0x648e01
mov ebx, dword [esp + 0x74]
mov ebp, dword [ebx + 0x1c]
mov dword [esp + 0x3c], ebp
mov ebp, dword [ebx]
mov esi, dword [ebx + 4]
mov dword [esp + 0x48], esi
mov dword [esp + 0x44], ebp
mov ebp, dword [ebx + 0x14]
mov dword [esp + 0x4c], ebp
mov ebp, dword [ebx + 0x18]
mov dword [esp + 0x50], ebp
mov dword [esp + 0x40], 0xc8
movzx ebp, byte [ebx + 0x40]
xchg ebp, eax
mov byte [esp + 0x65], al
xchg ebp, eax
jmp 0x6487ca
cmp eax, 0xebf45122
jne 0x648e01
lea edx, [0x6ec6a0]
cmp ecx, edx
jne 0x648e01
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 0x1c]
mov dword [esp + 0x3c], ecx
mov edx, dword [eax + 8]
mov dword [esp + 0x40], edx
mov edx, dword [eax + 0x14]
mov dword [esp + 0x4c], edx
mov ebx, dword [eax + 0x18]
mov dword [esp + 0x50], ebx
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov byte [esp + 0xc], 1
call fcn.00649600
movzx eax, byte [esp + 0x10]
mov byte [esp + 0x65], al
mov eax, dword [esp + 0x74]
mov ecx, dword [eax + 0x44]
test ecx, ecx
je 0x6487b8
mov edx, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [esp + 0x48], ecx
mov dword [esp + 0x44], edx
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x70]
lea edx, [0x6fbca0]
mov ebx, dword [esp + 0x74]
mov ebp, dword [esp + 0x4c]
test ebp, ebp
jne 0x6487ea
mov ebp, dword [esp + 0x50]
test ebp, ebp
jne 0x6487ea
mov dword [esp + 0x4c], 1
mov dword [esp + 0x50], 1
lea eax, [esp + 0x3c]
mov dword [esp], eax
call fcn.00648f00
mov eax, dword [esp + 4]
test eax, eax
jne 0x648dee
mov eax, dword [esp + 0x34]
cmp eax, 0xa28aa5f0
setne cl
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x44]
mov ebp, dword [esp + 0x48]
mov esi, dword [esp + 0x3c]
movzx edi, byte [esp + 0x64]
mov byte [esp], cl
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
xchg edi, eax
mov byte [esp + 0x14], al
xchg edi, eax
call fcn.006491d0
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x648ddb
mov eax, dword [esp + 0x18]
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x2c], ecx
mov edx, dword [esp + 0x34]
cmp edx, 0xa28aa5f0
je 0x6488f1
cmp dword [esp + 0x48], 4
jne 0x6488f1
mov ebx, dword [esp + 0x44]
cmp dword [ebx], 0x44414548
jne 0x6488f1
mov eax, dword [esp + 0x3c]
lea ecx, [0x6f48c0]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [0x705131]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xe
call fcn.00411270
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.0064a530
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x6488de
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], ecx
jmp 0x6488f9
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x6c
ret
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], ecx
mov eax, dword [esp + 0x3c]
movzx ecx, byte [esp + 0x64]
mov dword [esp], eax
mov byte [esp + 4], cl
call fcn.00649740
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x68], ecx
test eax, eax
jne 0x648dcc
mov eax, dword [esp + 0x70]
cmp dword [eax + 8], 0xebf45122
jne 0x6489a8
lea ecx, [0x6ec6a0]
cmp eax, ecx
jne 0x6489ae
mov edx, dword [esp + 0x28]
cmp edx, 0xffffffff
sete bl
mov ebp, dword [esp + 0x2c]
cmp ebp, 0xffffffff
xchg esi, ebx
sete bl
xchg esi, ebx
and esi, ebx
xchg esi, eax
test al, al
xchg esi, eax
je 0x6489b6
movzx ebx, byte [esp + 0x64]
test bl, bl
jne 0x6489b6
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.00648660
movzx eax, byte [esp + 4]
test al, al
je 0x648994
mov byte [esp + 0x65], 1
mov eax, dword [esp + 0x70]
lea ecx, [0x6ec6a0]
mov edx, dword [esp + 0x28]
mov ebp, dword [esp + 0x2c]
jmp 0x6489b6
mov eax, dword [esp + 0x70]
lea ecx, [0x6ec6a0]
mov edx, dword [esp + 0x28]
mov ebp, dword [esp + 0x2c]
jmp 0x6489b6
lea ecx, [0x6ec6a0]
mov edx, dword [esp + 0x28]
mov ebp, dword [esp + 0x2c]
movzx ebx, byte [esp + 0x64]
test bl, bl
je 0x648ac6
mov edx, dword [esp + 0x34]
cmp edx, 0xa28aa5f0
je 0x648a2c
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x48]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00647400
movzx eax, byte [esp + 8]
test al, al
je 0x6489f3
mov eax, 1
jmp 0x648a07
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.00648660
movzx eax, byte [esp + 4]
xor eax, 1
test al, al
je 0x648a2c
lea eax, [0x734c88]
mov dword [esp + 0x54], eax
lea eax, [0x8c84a0]
mov dword [esp + 0x58], eax
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x74]
jmp 0x648c19
lea eax, [0x734450]
mov dword [esp], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 4], eax
call fcn.0061e570
mov eax, dword [esp + 8]
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x38], ecx
lea edx, [0x6eefc0]
mov dword [esp], edx
call fcn.0040dea0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x30]
mov dword [eax], ecx
mov ecx, dword [0x8c88d8]
test ecx, ecx
jne 0x648a82
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x74]
mov ebx, dword [esp + 0x78]
jmp 0x648a9b
call fcn.00477300
mov ecx, dword [esp + 0x38]
mov dword [edi], ecx
mov edx, dword [esp + 0x74]
mov dword [edi + 4], edx
mov ebx, dword [esp + 0x78]
mov dword [edi + 8], ebx
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x70]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], ebx
movzx ebx, byte [esp + 0x65]
mov byte [eax + 0x14], bl
lea ebx, [0x734cb0]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], eax
jmp 0x648c19
test edx, edx
sete bl
test ebp, ebp
xchg esi, ebx
sete bl
xchg esi, ebx
and ebx, esi
test bl, bl
je 0x648af9
lea edx, [0x734c88]
mov dword [esp + 0x54], edx
lea edx, [0x8c84a0]
mov dword [esp + 0x58], edx
mov ecx, eax
mov edx, dword [esp + 0x74]
jmp 0x648c19
test edx, edx
seta bl
test ebp, ebp
xchg edi, ebx
setg bl
xchg edi, ebx
and ebx, esi
or edi, ebx
xchg edi, eax
test al, al
xchg edi, eax
jne 0x648b97
movzx edx, byte [esp + 0x65]
test dl, dl
jne 0x648b34
lea edx, [0x734c88]
mov dword [esp + 0x54], edx
lea edx, [0x8c84a0]
mov dword [esp + 0x58], edx
jmp 0x648b8c
lea eax, [0x6eefc0]
mov dword [esp], eax
call fcn.0040dea0
mov eax, dword [esp + 4]
lea ecx, [0x734450]
mov dword [eax], ecx
mov ecx, dword [0x8c88d8]
test ecx, ecx
jne 0x648b5e
mov ecx, dword [esp + 0x78]
jmp 0x648b69
call fcn.004772e0
mov ecx, dword [esp + 0x78]
mov dword [edi], ecx
mov dword [eax + 4], ecx
movzx ecx, byte [esp + 0x65]
mov byte [eax + 0x14], cl
lea ecx, [0x734cb0]
mov dword [esp + 0x54], ecx
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x70]
lea ecx, [0x6ec6a0]
mov ecx, eax
mov edx, dword [esp + 0x74]
jmp 0x648c19
lea eax, [0x734450]
mov dword [esp], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
call fcn.004a0f20
mov eax, dword [esp + 0x10]
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x38], ecx
lea edx, [0x6eefc0]
mov dword [esp], edx
call fcn.0040dea0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x30]
mov dword [eax], ecx
mov ecx, dword [0x8c88d8]
test ecx, ecx
jne 0x648bed
mov ecx, dword [esp + 0x38]
jmp 0x648bf8
call fcn.004772e0
mov ecx, dword [esp + 0x38]
mov dword [edi], ecx
mov dword [eax + 4], ecx
movzx ecx, byte [esp + 0x65]
mov byte [eax + 0x14], cl
lea ecx, [0x734cb0]
mov dword [esp + 0x54], ecx
mov dword [esp + 0x58], eax
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x74]
mov eax, dword [ecx + 8]
cmp eax, 0xa28aa5f0
jne 0x648ceb
lea eax, [0x6fbca0]
cmp ecx, eax
jne 0x648db5
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x58]
mov dword [edx + 0x20], eax
mov eax, dword [0x8c88d8]
test eax, eax
je 0x648c57
call fcn.004772f0
mov dword [edi], ecx
mov eax, dword [edx + 0x24]
mov dword [edi + 4], eax
mov dword [edx + 0x24], ecx
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x60]
mov dword [edx + 0x2c], eax
mov dword [edx + 0x30], ecx
movzx eax, byte [esp + 0x64]
test al, al
je 0x648cc0
lea eax, [0x6bc600]
mov dword [esp], eax
call fcn.0040dea0
mov eax, dword [esp + 4]
mov dword [eax + 4], 7
lea ecx, [0x702c15]
mov dword [eax], ecx
mov ecx, dword [esp + 0x74]
mov dword [ecx + 0x38], 1
mov dword [ecx + 0x3c], 1
mov edx, dword [0x8c88d8]
test edx, edx
je 0x648cbb
call fcn.004772f0
mov dword [edi], eax
mov edx, dword [ecx + 0x34]
mov dword [edi + 4], edx
mov dword [ecx + 0x34], eax
mov edx, ecx
movzx eax, byte [esp + 0x65]
mov byte [edx + 0x40], al
mov eax, dword [0x8c88d8]
mov ecx, dword [esp + 0x68]
test eax, eax
je 0x648ce3
call fcn.004772f0
mov dword [edi], ecx
mov eax, dword [edx + 0x58]
mov dword [edi + 4], eax
mov dword [edx + 0x58], ecx
jmp 0x648db5
cmp eax, 0xebf45122
jne 0x648db5
lea eax, [0x6ec6a0]
cmp ecx, eax
jne 0x648db5
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x58]
mov dword [edx + 0x20], eax
mov eax, dword [0x8c88d8]
test eax, eax
je 0x648d26
call fcn.004772f0
mov dword [edi], ecx
mov eax, dword [edx + 0x24]
mov dword [edi + 4], eax
mov dword [edx + 0x24], ecx
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x60]
mov dword [edx + 0x28], eax
mov dword [edx + 0x2c], ecx
movzx eax, byte [esp + 0x64]
test al, al
je 0x648d8f
lea eax, [0x6bc600]
mov dword [esp], eax
call fcn.0040dea0
mov eax, dword [esp + 4]
mov dword [eax + 4], 7
lea ecx, [0x702c15]
mov dword [eax], ecx
mov ecx, dword [esp + 0x74]
mov dword [ecx + 0x34], 1
mov dword [ecx + 0x38], 1
mov edx, dword [0x8c88d8]
test edx, edx
je 0x648d8a
call fcn.004772f0
mov dword [edi], eax
mov edx, dword [ecx + 0x30]
mov dword [edi + 4], edx
mov dword [ecx + 0x30], eax
mov edx, ecx
movzx eax, byte [esp + 0x65]
mov byte [edx + 0x3c], al
mov eax, dword [0x8c88d8]
mov ecx, dword [esp + 0x68]
test eax, eax
je 0x648db2
call fcn.004772f0
mov dword [edi], ecx
mov eax, dword [edx + 0x40]
mov dword [edi + 4], eax
mov dword [edx + 0x40], ecx
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
add esp, 0x6c
ret
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], edx
add esp, 0x6c
ret
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x6c
ret
mov ecx, dword [esp + 8]
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x6c
ret
lea eax, [0x6c0080]
mov dword [esp], eax
lea eax, [0x7336f8]
mov dword [esp + 4], eax
call fcn.00470a40
nop
call fcn.00475ee0
jmp fcn.006486b0