Function at 0x646f70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x140
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x60], edx
mov edx, dword [eax + 4]
mov ecx, dword [eax]
mov eax, dword [eax + 8]
mov dword [esp + 0x24], edx
mov dword [esp + 0x28], eax
cmp dword [ecx + 0x38], edx
jbe 0x64783e
mov ecx, dword [ecx + 0x34]
test ecx, ecx
je 0x64783e
imul esi, edx, 0xf0
mov edi, dword [ecx + esi]
xor edi, 3
or edi, dword [ecx + esi + 4]
je 0x64783e
add ecx, esi
cmp dword [ecx + 0xcc], eax
jne 0x64783e
movzx ebx, byte [ecx + 0x20]
mov dword [esp + 0x24], edx
mov dword [esp + 0x28], eax
cmp bl, 6
setb bh
cmp bl, 3
setne bl
and bl, bh
mov byte [esp + 5], bl
mov esi, dword [ecx]
xor esi, 3
or esi, dword [ecx + 4]
je 0x64783e
cmp dword [ecx + 0xcc], eax
jne 0x64783e
cmp byte [ecx + 0x20], 6
mov dword [esp + 0x24], edx
mov dword [esp + 0x28], eax
setb byte [esp + 6]
mov esi, dword [ecx]
xor esi, 3
or esi, dword [ecx + 4]
je 0x64783e
cmp dword [ecx + 0xcc], eax
jne 0x64783e
cmp dword [ecx + 0x64], 0
mov dword [esp + 0x24], edx
mov dword [esp + 0x28], eax
sete byte [esp + 7]
mov edx, dword [ecx]
xor edx, 3
or edx, dword [ecx + 4]
je 0x64783e
cmp dword [ecx + 0xcc], eax
jne 0x64783e
mov eax, dword [ecx + 0xcc]
mov dword [esp + 0x48], eax
mov eax, dword [0x94bccc]
test eax, eax
je 0x64712e
test bl, bl
je 0x64737a
mov eax, dword [0x94bccc]
test eax, eax
jne 0x6476b6
movzx eax, byte [0x94ac48]
test al, al
je 0x6476b6
movzx eax, al
cmp eax, 1
je 0x6470c2
cmp eax, 2
je 0x647106
mov ecx, 0x94ac40
call fcn.007d3740
test al, al
je 0x6476b6
movzx eax, al
cmp eax, 2
je 0x647106
mov eax, dword [0x94ac40]
mov ecx, dword [0x94bfb8]
cmp ecx, 2
jne 0x6476b6
cmp dword [0x94bcc0], 0
mov edx, dword [str.SetGlobalDefaultErrora_global_default_trace_dispatcher_has_already_been_set]
mov ecx, dword [0x94bcc8]
je 0x6470f6
mov esi, dword [ecx + 8]
dec esi
and esi, 0xfffffff8
lea edx, [esi + edx + 8]
push eax
push edx
call dword [ecx + 0x14]
add esp, 8
test al, al
je 0x6476b6
mov eax, dword [0x94ac40]
mov edx, dword [eax + 0x20]
test edx, edx
je 0x6478da
mov esi, dword [eax + 0x1c]
movsd xmm0, qword [eax + 0x24]
lea ecx, [eax + 0x1c]
mov dword [esp + 8], 0x8aa910
jmp 0x647506
movzx eax, byte [0x94ac24]
test al, al
je 0x647077
movzx eax, al
cmp eax, 1
je 0x647164
cmp eax, 2
je 0x6471a8
mov ecx, 0x94ac1c
call fcn.007d3740
test al, al
je 0x647077
movzx eax, al
cmp eax, 2
je 0x6471a8
mov eax, dword [0x94ac1c]
mov ecx, dword [0x94bfb8]
cmp ecx, 2
jne 0x647077
cmp dword [0x94bcc0], 0
mov edx, dword [str.SetGlobalDefaultErrora_global_default_trace_dispatcher_has_already_been_set]
mov ecx, dword [0x94bcc8]
je 0x647198
mov esi, dword [ecx + 8]
dec esi
and esi, 0xfffffff8
lea edx, [esi + edx + 8]
push eax
push edx
call dword [ecx + 0x14]
add esp, 8
test al, al
je 0x647077
mov eax, dword [0x94ac1c]
mov ecx, dword [eax + 0x20]
test ecx, ecx
je 0x6478c6
mov edx, dword [eax + 0x1c]
movsd xmm0, qword [eax + 0x24]
mov dword [esp + 0x64], edx
mov edx, dword [ebp + 0x10]
mov dword [esp + 0x68], ecx
movlps qword [esp + 0x6c], xmm0
mov dword [esp + 0x74], 0
mov esi, dword [edx + 4]
mov ecx, dword [edx]
mov edx, dword [edx + 8]
mov dword [esp + 0x24], esi
mov dword [esp + 0x28], edx
cmp dword [ecx + 0x38], esi
jbe 0x64783e
mov ecx, dword [ecx + 0x34]
test ecx, ecx
je 0x64783e
imul esi, esi, 0xf0
mov edi, dword [ecx + esi]
xor edi, 3
or edi, dword [ecx + esi + 4]
je 0x64783e
add ecx, esi
cmp dword [ecx + 0xcc], edx
jne 0x64783e
lea esi, [esp + 0x60]
lea edx, [eax + 0x1c]
lea edi, [esp + 0x80]
mov dword [esp + 0x24], 0x8aa7ec
mov dword [esp + 0x28], 8
mov dword [esp + 0x34], 0
add ecx, 0x20
mov dword [esp + 0x80], esi
lea esi, [ebp + 8]
mov dword [esp + 0x84], fcn.004845c0
mov dword [esp + 0x2c], edi
lea edi, [esp + 0x24]
mov dword [esp + 0x30], 7
mov dword [esp + 0x88], esi
lea esi, [esp + 0x48]
mov dword [esp + 0x8c], 0x647920
mov dword [esp + 0x90], esi
lea esi, [esp + 5]
mov dword [esp + 0x94], 0x646ce0
mov dword [esp + 0x98], esi
lea esi, [esp + 6]
mov dword [esp + 0x9c], 0x408c80
mov dword [esp + 0xa0], esi
lea esi, [esp + 7]
mov dword [esp + 0xa4], 0x408c80
mov dword [esp + 0xa8], esi
lea esi, [esp + 0x64]
mov dword [esp + 0xac], 0x408c80
mov dword [esp + 0xb0], ecx
mov dword [esp + 0xb4], 0x647950
mov dword [esp + 0x4c], esi
lea esi, [esp + 0x4c]
mov dword [esp + 0x50], edi
mov dword [esp + 0x54], 0x8a682c
mov dword [esp + 0x3c], esi
mov dword [esp + 0x40], 1
mov dword [esp + 0x44], edx
lea edx, [esp + 0x3c]
mov dword [esp + 0x18], edx
mov dword [esp + 0x1c], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 1
mov eax, dword [0x94bfb8]
cmp eax, 2
jne 0x647370
cmp dword [0x94bcc0], 0
mov edi, dword [str.SetGlobalDefaultErrora_global_default_trace_dispatcher_has_already_been_set]
mov esi, dword [0x94bcc8]
je 0x647358
mov eax, dword [esi + 8]
dec eax
and eax, 0xfffffff8
lea edi, [eax + edi + 8]
lea ebx, [esp + 8]
push ebx
push edi
call dword [esi + 0x28]
add esp, 8
test al, al
je 0x647370
push ebx
push edi
call dword [esi + 0x2c]
add esp, 8
movzx ebx, byte [esp + 5]
jmp 0x647077
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 4]
mov edx, dword [eax]
mov eax, dword [eax + 8]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], eax
cmp dword [edx + 0x38], ecx
jbe 0x647896
mov esi, dword [edx + 0x34]
test esi, esi
je 0x647896
imul ecx, ecx, 0xf0
mov edx, dword [esi + ecx]
xor edx, 3
or edx, dword [esi + ecx + 4]
je 0x647896
add esi, ecx
cmp dword [esi + 0xcc], eax
jne 0x647896
movzx eax, byte [esi + 0x20]
mov edx, dword [esp + 0x48]
mov edi, dword [esp + 0x60]
movzx ebx, byte [ebp + 8]
mov ecx, eax
add cl, 0xfa
cmp cl, 6
jb 0x647439
mov ecx, eax
add cl, 0xfd
cmp cl, 2
ja 0x6473ee
cmp cl, 1
jne 0x647439
movzx eax, al
test eax, eax
je 0x647439
cmp eax, 1
jne 0x647417
mov ecx, dword [esi + 0x28]
lea eax, [esi + 0x34]
push dword [esi + 0x30]
push dword [esi + 0x2c]
push eax
mov dword [esp + 0x64], edx
call dword [ecx + 0xc]
mov edx, dword [esp + 0x64]
add esp, 0xc
jmp 0x647439
test dword [esi + 0x24], 0x7fffffff
je 0x647439
push dword [esi + 0x28]
push 0
push dword [0x94bf18]
mov dword [esp + 0x64], edx
call dword [sym.imp.kernel32.dll_HeapFree]
mov edx, dword [esp + 0x58]
mov byte [esi + 0x20], 0
mov byte [esi + 0x21], bl
mov dword [esi + 0x24], edx
mov dword [esi + 0x28], edi
cmp byte [esp + 6], 0
je 0x6475f1
cmp byte [esp + 7], 0
je 0x6475f1
mov eax, dword [0x94bccc]
test eax, eax
jne 0x6476b6
movzx eax, byte [0x94ac3c]
test al, al
je 0x6476b6
movzx eax, al
cmp eax, 1
je 0x64749f
cmp eax, 2
je 0x6474e3
mov ecx, 0x94ac34
call fcn.007d3740
test al, al
je 0x6476b6
movzx eax, al
cmp eax, 2
je 0x6474e3
mov eax, dword [0x94ac34]
mov ecx, dword [0x94bfb8]
cmp ecx, 2
jne 0x6476b6
cmp dword [0x94bcc0], 0
mov edx, dword [str.SetGlobalDefaultErrora_global_default_trace_dispatcher_has_already_been_set]
mov ecx, dword [0x94bcc8]
je 0x6474d3
mov esi, dword [ecx + 8]
dec esi
and esi, 0xfffffff8
lea edx, [esi + edx + 8]
push eax
push edx
call dword [ecx + 0x14]
add esp, 8
test al, al
je 0x6476b6
mov eax, dword [0x94ac34]
mov edx, dword [eax + 0x20]
test edx, edx
je 0x6478ee
mov esi, dword [eax + 0x1c]
movsd xmm0, qword [eax + 0x24]
lea ecx, [eax + 0x1c]
mov dword [esp + 8], 0x8aa8c0
mov dword [esp + 0x24], esi
lea esi, [esp + 0x48]
mov dword [esp + 0x28], edx
movlps qword [esp + 0x2c], xmm0
mov dword [esp + 0x34], 0
mov dword [esp + 0x4c], esi
mov dword [esp + 0x50], 0x646ce0
lea edx, [esp + 0x4c]
mov dword [esp + 0xc], 2
mov dword [esp + 0x18], 0
mov dword [esp + 0x10], edx
lea edx, [esp + 0x24]
mov dword [esp + 0x14], 1
mov dword [esp + 0x3c], edx
lea edx, [esp + 8]
mov dword [esp + 0x40], edx
lea edx, [esp + 0x3c]
mov dword [esp + 0x44], 0x8a682c
mov dword [esp + 0x64], edx
lea edx, [esp + 0x64]
mov dword [esp + 0x68], 1
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x90], edx
mov dword [esp + 0x94], eax
mov dword [esp + 0x84], 0
mov dword [esp + 0x80], 1
mov eax, dword [0x94bfb8]
cmp eax, 2
jne 0x6476b6
cmp dword [0x94bcc0], 0
mov edi, dword [str.SetGlobalDefaultErrora_global_default_trace_dispatcher_has_already_been_set]
mov esi, dword [0x94bcc8]
je 0x6475cd
mov eax, dword [esi + 8]
dec eax
and eax, 0xfffffff8
lea edi, [eax + edi + 8]
lea ebx, [esp + 0x80]
push ebx
push edi
call dword [esi + 0x28]
add esp, 8
test al, al
je 0x6476b6
push ebx
push edi
call dword [esi + 0x2c]
add esp, 8
jmp 0x6476b6
mov edi, dword [esp + 0x5c]
mov edx, dword [ebp + 0xc]
mov esi, dword [ebp + 0x10]
add edi, 8
mov ecx, edi
push esi
call fcn.00646040
add esp, 4
mov edx, dword [esi + 4]
mov eax, dword [esi + 8]
mov ecx, dword [esi]
mov dword [esp + 0x24], edx
mov dword [esp + 0x28], eax
cmp dword [ecx + 0x38], edx
jbe 0x64783e
mov ecx, dword [ecx + 0x34]
test ecx, ecx
je 0x64783e
imul edx, edx, 0xf0
mov esi, dword [ecx + edx]
xor esi, 3
or esi, dword [ecx + edx + 4]
je 0x64783e
add ecx, edx
cmp dword [ecx + 0xcc], eax
jne 0x64783e
mov ebx, dword [ecx + 0xcc]
mov esi, dword [esp + 0x60]
mov dword [esp + 0x78], ebx
mov dword [esp + 0x7c], esi
mov eax, dword [0x94bccc]
mov dword [esp + 0x5c], edi
test eax, eax
je 0x6476be
mov dword [esp + 0x84], ebx
mov dword [esp + 0x88], esi
mov esi, dword [esp + 0x5c]
mov eax, dword [ebp + 0x18]
mov edi, dword [ebp + 0x14]
mov byte [esp + 0x80], 8
lea edx, [esp + 0x80]
mov ecx, esi
push eax
mov ebx, dword [ebp + 0x10]
push ebx
push dword [ebp + 0xc]
call fcn.006479f0
add esp, 0xc
mov ecx, esi
mov edx, ebx
push edi
call fcn.00488b40
add esp, 4
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
movzx eax, byte [0x94ac30]
test al, al
je 0x647670
movzx eax, al
cmp eax, 1
je 0x6476ec
cmp eax, 2
je 0x647730
mov ecx, 0x94ac28
call fcn.007d3740
test al, al
je 0x647670
movzx eax, al
cmp eax, 2
je 0x647730
mov eax, dword [0x94ac28]
mov ecx, dword [0x94bfb8]
cmp ecx, 2
jne 0x647670
cmp dword [0x94bcc0], 0
mov edx, dword [str.SetGlobalDefaultErrora_global_default_trace_dispatcher_has_already_been_set]
mov ecx, dword [0x94bcc8]
je 0x647720
mov edi, dword [ecx + 8]
dec edi
and edi, 0xfffffff8
lea edx, [edi + edx + 8]
push eax
push edx
call dword [ecx + 0x14]
add esp, 8
test al, al
je 0x647670
mov eax, dword [0x94ac28]
mov edx, dword [eax + 0x20]
test edx, edx
je 0x647902
mov esi, dword [eax + 0x1c]
movsd xmm0, qword [eax + 0x24]
mov dword [esp + 8], 0x8aa85c
mov dword [esp + 0xc], 1
mov dword [esp + 0x18], 0
lea ecx, [eax + 0x1c]
mov dword [esp + 0x24], esi
mov dword [esp + 0x28], edx
lea edx, [esp + 0x78]
movlps qword [esp + 0x2c], xmm0
mov dword [esp + 0x34], 0
mov dword [esp + 0x4c], edx
lea edx, [esp + 0x4c]
mov dword [esp + 0x50], 0x647e00
mov dword [esp + 0x10], edx
lea edx, [esp + 0x24]
mov dword [esp + 0x14], 1
mov dword [esp + 0x3c], edx
lea edx, [esp + 8]
mov dword [esp + 0x40], edx
lea edx, [esp + 0x3c]
mov dword [esp + 0x44], 0x8a682c
mov dword [esp + 0x64], edx
lea edx, [esp + 0x64]
mov dword [esp + 0x68], 1
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x90], edx
mov dword [esp + 0x94], eax
mov dword [esp + 0x84], 0
mov dword [esp + 0x80], 1
mov eax, dword [0x94bfb8]
cmp eax, 2
jne 0x647831
cmp dword [0x94bcc0], 0
mov edi, dword [str.SetGlobalDefaultErrora_global_default_trace_dispatcher_has_already_been_set]
mov esi, dword [0x94bcc8]
je 0x647816
mov eax, dword [esi + 8]
dec eax
and eax, 0xfffffff8
lea edi, [eax + edi + 8]
lea ebx, [esp + 0x80]
push ebx
push edi
call dword [esi + 0x28]
add esp, 8
test al, al
je 0x647831
push ebx
push edi
call dword [esi + 0x2c]
add esp, 8
mov ebx, dword [esp + 0x78]
mov esi, dword [esp + 0x7c]
jmp 0x647670
lea ecx, [esp + 8]
lea eax, [esp + 0x28]
mov dword [esp + 0x80], 0x828150
mov dword [esp + 0x84], 1
mov dword [esp + 0x90], 0
mov edx, 0x828158
mov dword [esp + 0x88], ecx
lea ecx, [esp + 0x80]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x47c5e0
mov dword [esp + 0x8c], 1
call fcn.007c1b50
lea ecx, [esp + 8]
lea eax, [esp + 0x28]
mov dword [esp + 0x80], 0x828150
mov dword [esp + 0x84], 1
mov dword [esp + 0x90], 0
mov edx, 0x828168
jmp 0x64786c
mov ecx, 0x8a6758
mov edx, 0x22
push 0x8aa774
call fcn.007c2000
mov ecx, 0x8a6758
mov edx, 0x22
push 0x8aa8d0
call fcn.007c2000
mov ecx, 0x8a6758
mov edx, 0x22
push 0x8aa864
call fcn.007c2000
mov ecx, 0x8a6758
mov edx, 0x22
push 0x8aa82c
call fcn.007c2000
int3