Function at 0x640510
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x244]
cmp eax, dword [ecx + 8]
jbe 0x640f0f
sub esp, 0x2c4
lea edi, [esp + 0x2dc]
xor eax, eax
call fcn.00465feb
mov ecx, dword [esp + 0x2cc]
mov dword [esp], ecx
call fcn.004df790
lea edi, [esp + 0x1bc]
lea esi, [esp + 4]
call fcn.004664ce
mov ecx, dword [esp + 0x2d0]
mov edx, dword [esp + 0x2d4]
mov ebx, dword [esp + 0x2c8]
xor eax, eax
xor ebp, ebp
jmp 0x64058f
mov ecx, dword [esp + 0x1a4]
add ecx, 0x38
inc eax
mov ebx, dword [esp + 0x2c8]
mov edx, edi
cmp edx, eax
jle 0x640eb1
mov dword [esp + 0x1a4], ecx
lea edi, [esp + 0x154]
mov esi, ecx
call fcn.00466474
test eax, eax
jne 0x6405b7
mov ebp, dword [esp + 0x15c]
mov ecx, dword [esp + 0x154]
mov esi, ecx
mov ecx, dword [esp + 0x158]
mov edi, edx
mov edx, dword [ebx + 4]
mov ebx, dword [ebx + 8]
shr ecx, 0x10
cmp ebx, ecx
jle 0x64057b
mov ecx, dword [edx + ecx*4]
test ecx, ecx
je 0x64057b
mov dword [esp + 0x74], eax
mov dword [esp + 0x60], ebp
mov dword [esp], ecx
mov dword [esp + 4], esi
call fcn.005daee0
mov eax, dword [esp + 8]
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 8]
test eax, eax
je 0x640e97
lea edx, [0x785840]
cmp ecx, edx
jne 0x640e9d
lea edi, [esp + 0x200]
call fcn.004664ba
lea edi, [esp + 0x1a8]
xor eax, eax
call fcn.00465feb
mov ecx, dword [esp + 0x154]
mov dword [esp + 0x64], ecx
mov edx, dword [esp + 0x158]
lea edi, [esp + 0x1e4]
call fcn.00465fe9
mov ecx, dword [esp + 0x2c8]
mov ebx, dword [ecx + 0x204]
mov ebp, dword [0x787798]
mov dword [esp], ebp
mov dword [esp + 4], ebx
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x64]
mov dword [esp + 8], edx
call fcn.0040fcb0
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx]
movzx ecx, byte [esp + 0x14]
mov byte [esp + 0x53], cl
test cl, cl
je 0x640766
mov edx, dword [eax]
test byte [edx], al
nop
mov ebx, dword [0x1eaa9f0]
mov ebp, dword [eax + 4]
test ebx, ebx
jne 0x6406a4
mov dword [edx + 4], ebp
jmp 0x6406b2
lea edi, [edx + 4]
mov edx, eax
mov eax, ebp
call fcn.00465d80
mov eax, edx
mov edi, dword [eax + 4]
test byte [edi], al
mov edx, dword [0x1eaa9f0]
mov ebx, dword [eax]
test edx, edx
jne 0x6406c7
mov dword [edi], ebx
jmp 0x6406d2
mov edx, eax
mov eax, ebx
call fcn.00465d80
mov eax, edx
nop
mov edx, dword [0x1eaa9f0]
mov ebx, dword [esp + 0x2c8]
mov ebp, dword [ebx + 0x208]
test edx, edx
jne 0x6406ee
mov dword [eax], ebp
jmp 0x6406f9
mov edi, eax
mov eax, ebp
call fcn.00465d80
mov eax, edi
mov edx, dword [ebx + 0x208]
mov ebp, dword [0x1eaa9f0]
mov edi, dword [edx + 4]
test ebp, ebp
jne 0x640711
mov dword [eax + 4], edi
jmp 0x640725
lea edx, [eax + 4]
mov ebp, edi
mov edi, edx
mov esi, eax
mov eax, ebp
call fcn.00465d80
mov eax, esi
mov edi, ebp
test byte [edi], al
mov edx, dword [0x1eaa9f0]
test edx, edx
jne 0x640735
mov dword [edi], eax
jmp 0x64073a
call fcn.00465d80
mov edx, dword [eax]
test byte [edx], al
mov ebp, dword [0x1eaa9f0]
test ebp, ebp
jne 0x64074d
mov dword [edx + 4], eax
jmp 0x640755
lea edi, [edx + 4]
call fcn.00465d80
lea esi, [eax + 0x10]
lea edi, [esp + 0x1e4]
call fcn.004664ba
jmp 0x64077b
lea edi, [esp + 0x1e4]
xor eax, eax
call fcn.00465fe9
mov ebx, dword [esp + 0x2c8]
lea edi, [esp + 0x21c]
lea esi, [esp + 0x1e4]
call fcn.004664ba
movzx eax, byte [esp + 0x53]
test al, al
jne 0x640932
movzx eax, byte [esp + 0x20c]
cmp al, 1
je 0x6407b0
add eax, 0xfffffffe
cmp al, 2
jbe 0x6407c4
mov eax, dword [esp + 0x74]
mov ebp, dword [esp + 0x60]
mov edi, dword [esp + 0x2d4]
jmp 0x64057b
mov eax, dword [esp + 0x200]
mov dword [esp + 0x190], eax
mov ecx, dword [esp + 0x204]
mov dword [esp + 0x78], ecx
mov edx, dword [esp + 0x208]
mov dword [esp + 0x7c], edx
lea ebx, [0x6bb3c0]
mov dword [esp], ebx
call fcn.0040be50
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x78]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x7c]
mov dword [edi + 8], eax
mov eax, dword [0x1eaa9f0]
test eax, eax
jne 0x64081d
mov eax, dword [esp + 0x190]
mov dword [edi], eax
jmp 0x640829
mov eax, dword [esp + 0x190]
call fcn.00465d80
mov dword [edi + 0xc], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xffffffff
lea eax, [0x7850e8]
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.004ba700
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x18c], ecx
mov edx, dword [esp + 8]
mov dword [esp + 0x70], edx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0063b370
lea edi, [esp + 0x1a8]
lea esi, [esp + 8]
call fcn.004664ce
mov eax, dword [esp + 0x70]
mov eax, dword [eax + 0x14]
mov ecx, dword [esp + 0x18c]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 0xc]
sub eax, dword [esp + 4]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0x10]
sub ecx, dword [esp + 8]
mov dword [esp + 0x68], ecx
lea edi, [esp + 0x238]
mov edx, eax
xor eax, eax
call fcn.00465fe9
lea edi, [esp + 0x238]
lea esi, [esp + 0x1a8]
call fcn.004664ce
mov dword [esp + 0x24c], edx
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x250], ecx
mov ebx, dword [esp + 0x2c8]
lea ebp, [ebx + 0x204]
mov esi, dword [esp + 0x154]
mov edi, dword [esp + 0x158]
mov dword [esp], ebp
lea ebp, [0x787780]
mov dword [esp + 4], ebp
mov dword [esp + 0xc], edi
mov dword [esp + 8], esi
lea edi, [esp + 0x10]
lea esi, [esp + 0x238]
call fcn.004664ba
call fcn.00643ce0
mov ecx, dword [esp + 0x68]
mov eax, dword [esp + 0x54]
jmp 0x640953
lea edi, [esp + 0x1a8]
lea esi, [esp + 0x21c]
call fcn.004664ce
mov eax, dword [esp + 0x230]
mov ecx, dword [esp + 0x234]
mov dword [esp + 0x68], ecx
mov dword [esp + 0x6c], eax
mov edx, dword [esp + 0x15c]
mov ebx, dword [esp + 0x60]
sub edx, ebx
sub edx, dword [esp + 0x170]
mov dword [esp], edx
call fcn.0044e7d0
mov eax, dword [esp + 4]
mov dword [esp], eax
mov dword [esp + 4], 0x42800000
call fcn.0044e470
mov eax, dword [esp + 0x174]
add eax, dword [esp + 0x17c]
mov ecx, dword [esp + 8]
mov dword [esp + 0xa8], ecx
mov dword [esp], eax
call fcn.0044e7d0
mov eax, dword [esp + 4]
mov dword [esp], eax
mov dword [esp + 4], 0x42800000
call fcn.0044e470
mov eax, dword [esp + 8]
mov dword [esp + 0xa4], eax
lea edi, [esp + 0x124]
xor eax, eax
call fcn.00465fea
lea edi, [esp + 0xdc]
call fcn.00465fea
mov ecx, dword [esp + 0x124]
mov dword [esp + 0xdc], ecx
mov ecx, dword [esp + 0x128]
mov dword [esp + 0xe0], ecx
mov ecx, dword [esp + 0x12c]
mov dword [esp], ecx
mov ecx, dword [esp + 0xa8]
mov dword [esp + 4], ecx
call fcn.0044e350
mov eax, dword [esp + 8]
mov dword [esp + 0xe4], eax
mov eax, dword [esp + 0x130]
mov dword [esp + 0xe8], eax
mov eax, dword [esp + 0x134]
mov dword [esp + 0xec], eax
mov eax, dword [esp + 0x138]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
call fcn.0044e350
mov eax, dword [esp + 8]
mov dword [esp + 0xf0], eax
lea edi, [esp + 0x10c]
lea esi, [esp + 0xdc]
call fcn.004664c4
lea edi, [esp + 0xc4]
xor eax, eax
call fcn.00465fea
lea edi, [esp + 0xc4]
lea esi, [esp + 0x10c]
call fcn.004664c4
lea edi, [esp]
lea esi, [esp + 0xc4]
call fcn.004664c4
mov ecx, dword [esp + 0x2cc]
mov dword [esp + 0x18], ecx
call fcn.004dfbe0
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xa4], ecx
mov edx, dword [esp + 0x24]
mov dword [esp + 0xa0], edx
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x1a0], ebx
lea edi, [esp + 0x254]
xor eax, eax
call fcn.00465fe3
mov byte [esp + 0x27c], 2
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x274], ecx
mov esi, dword [esp + 0x68]
mov dword [esp + 0x278], esi
lea edi, [esp + 0x288]
call fcn.00465fe1
mov byte [esp + 0x2bc], 1
lea edi, [esp + 0x288]
lea esi, [esp + 0x254]
call fcn.0046647e
lea edi, [esp]
lea esi, [esp + 0x288]
call fcn.0046646a
mov ecx, dword [esp + 0x2cc]
mov dword [esp + 0x3c], ecx
call fcn.004f74e0
mov eax, dword [esp + 0x178]
mov ecx, dword [esp + 0x17c]
mov dword [esp + 0x5c], ecx
mov edx, dword [esp + 0x180]
mov ebx, dword [esp + 0x184]
mov dword [esp + 0x58], ebx
nop
mov ebp, dword [esp + 0x40]
mov dword [esp + 0x19c], ebp
mov esi, dword [esp + 0x44]
mov dword [esp + 0x9c], esi
mov edi, dword [esp + 0x48]
mov dword [esp + 0x98], edi
mov edi, dword [esp + 0x4c]
mov dword [esp + 0x94], edi
add eax, 0x20
sar eax, 6
add edx, 0x20
sar edx, 6
sub edx, eax
mov dword [esp], edx
call fcn.0044e7d0
mov eax, dword [esp + 4]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x6c]
mov dword [esp], ecx
call fcn.0044e7d0
mov eax, dword [esp + 0x90]
mov dword [esp], eax
call fcn.0044e470
mov eax, dword [esp + 8]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x5c]
add ecx, 0x20
sar ecx, 6
mov edx, dword [esp + 0x58]
add edx, 0x20
sar edx, 6
sub edx, ecx
mov dword [esp], edx
call fcn.0044e7d0
mov eax, dword [esp + 4]
mov dword [esp + 0x8c], eax
mov ecx, dword [esp + 0x68]
mov dword [esp], ecx
call fcn.0044e7d0
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
call fcn.0044e470
mov eax, dword [esp + 8]
mov dword [esp + 0x8c], eax
lea edi, [esp]
xor eax, eax
call fcn.00465fea
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov ecx, dword [esp + 0x90]
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x24], ecx
call fcn.004ca540
lea edi, [esp + 0x13c]
lea esi, [esp + 0x28]
call fcn.004664c4
lea edi, [esp + 0xf4]
lea esi, [esp + 0x13c]
call fcn.004664c4
lea edi, [esp + 0xac]
xor eax, eax
call fcn.00465fea
lea edi, [esp + 0xac]
lea esi, [esp + 0xf4]
call fcn.004664c4
lea edi, [esp]
lea esi, [esp + 0xac]
call fcn.004664c4
mov ecx, dword [esp + 0x2cc]
mov dword [esp + 0x18], ecx
call fcn.004dfbe0
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x8c], ecx
mov edx, dword [esp + 0x24]
mov dword [esp + 0x88], edx
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x198], ebx
lea edi, [esp]
lea esi, [esp + 0x1a8]
call fcn.004664ce
mov ecx, dword [esp + 0x2cc]
mov dword [esp + 0x14], ecx
call fcn.0063b5d0
nop
mov eax, dword [esp + 0x2cc]
movzx ecx, byte [eax + 0x2c]
test cl, cl
jne 0x640ef6
mov ecx, dword [eax + 8]
inc ecx
mov edx, dword [eax + 0xc]
mov ebx, dword [eax + 4]
cmp edx, ecx
jae 0x640d72
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x69be80]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov ebx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x84], edx
mov dword [esp + 0x80], ecx
mov dword [esp + 0x194], ebx
lea eax, [ecx + ebx - 1]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00466510
mov ecx, dword [esp + 0x80]
mov eax, dword [esp + 0x2cc]
mov dword [eax + 8], ecx
mov edx, dword [esp + 0x84]
mov dword [eax + 0xc], edx
mov ebx, dword [0x1eaa9f0]
test ebx, ebx
jne 0x640dcc
mov ebx, dword [esp + 0x194]
mov dword [eax + 4], ebx
jmp 0x640de4
lea edi, [eax + 4]
mov eax, dword [esp + 0x194]
call fcn.00465d80
mov ebx, eax
mov eax, dword [esp + 0x2cc]
lea ebp, [ecx - 1]
cmp ecx, ebp
jb 0x640eef
sub edx, ecx
lea eax, [edx + 1]
neg eax
sar eax, 0x1f
and ebp, eax
mov byte [ebx + ebp], 0xd0
mov eax, dword [esp + 0x90]
mov dword [esp], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x198]
mov dword [esp + 0xc], eax
call fcn.004dfe50
mov eax, dword [esp + 0x19c]
mov dword [esp], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x98]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0xc], eax
call fcn.004f7c70
mov eax, dword [esp + 0xa8]
mov dword [esp], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x1a0]
mov dword [esp + 0xc], eax
call fcn.004dfe50
lea edx, [0x785840]
jmp 0x640e9d
lea edx, [0x785840]
mov eax, dword [esp + 0x74]
mov ebp, dword [esp + 0x60]
mov edi, dword [esp + 0x2d4]
jmp 0x64057b
lea edi, [esp]
lea esi, [esp + 0x1bc]
call fcn.004664ce
call fcn.004df8f0
lea edi, [esp + 0x1d0]
lea esi, [esp + 0x14]
call fcn.004664ce
lea edi, [esp + 0x2dc]
lea esi, [esp + 0x1d0]
call fcn.004664ce
add esp, 0x2c4
ret
mov eax, ebp
call fcn.00465e60
lea eax, [0x69bcc0]
mov dword [esp], eax
lea eax, [0x78498c]
mov dword [esp + 4], eax
call fcn.00436d20
nop
call fcn.004649b0
jmp fcn.00640510