Function at 0x648770
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x648bb2
sub esp, 0x50
movzx ebx, byte [esp + 0x6c]
mov ebp, ebx
and ebx, 7
cmp bl, 7
jne 0x64879c
xor eax, eax
jmp 0x64879e
mov eax, ebx
add ebp, 0x58
xchg ebp, eax
shr al, 3
xchg ebp, eax
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x6487bf
mov ecx, 4
lea edx, [0x6ee1d9]
lea ebp, [0x733538]
jmp 0x6487ea
xchg ebp, eax
cmp al, 1
xchg ebp, eax
jne 0x6487d9
mov ecx, 0xa
lea edx, [0x6f04fa]
lea ebp, [0x733534]
jmp 0x6487ea
mov ecx, 0xb
lea edx, [0x6f1159]
lea ebp, [0x73353c]
mov byte [esp + 0x22], bl
mov byte [esp + 0x23], al
mov esi, dword [esp + 0x5c]
test esi, esi
je 0x648991
mov dword [esp + 0x24], ecx
mov dword [esp + 0x38], edx
mov dword [esp + 0x3c], ebp
cmp bl, 7
jne 0x6488bd
mov edi, dword [esp + 0x68]
cmp edi, 1
jb 0x648ba5
lea eax, [0x695e20]
mov dword [esp], eax
call fcn.0040be50
mov eax, dword [esp + 4]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0x38]
mov dword [esp], ecx
mov ecx, dword [esp + 0x24]
mov dword [esp + 4], ecx
call fcn.00409830
mov eax, dword [esp + 8]
lea ecx, [0x69bcc0]
mov edx, dword [esp + 0x4c]
mov dword [edx], ecx
mov ecx, dword [0x1eaa9f0]
test ecx, ecx
jne 0x648869
mov dword [edx + 4], eax
jmp 0x648871
lea edi, [edx + 4]
call fcn.00465d80
mov eax, dword [esp + 0x5c]
mov ecx, dword [eax]
mov ebx, dword [esp + 0x60]
mov dword [esp], ebx
mov dword [esp + 4], 1
mov ebp, dword [esp + 0x68]
mov dword [esp + 8], ebp
lea esi, [0x6ff4cf]
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], 0x28
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], 1
mov edx, eax
call ecx
jmp 0x64897f
mov edi, dword [esp + 0x68]
cmp edi, 1
jb 0x648b99
lea eax, [0x696560]
mov dword [esp], eax
call fcn.0040be50
mov eax, dword [esp + 4]
mov dword [esp + 0x48], eax
lea ecx, [0x69be80]
mov dword [eax], ecx
movzx ecx, byte [esp + 0x23]
movzx edx, cl
lea ebx, [0x934160]
lea edx, [ebx + edx*8]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x38]
mov dword [esp], edx
mov edx, dword [esp + 0x24]
mov dword [esp + 4], edx
call fcn.00409830
mov eax, dword [esp + 8]
lea ecx, [0x69bcc0]
mov edx, dword [esp + 0x48]
mov dword [edx + 8], ecx
mov ecx, dword [0x1eaa9f0]
test ecx, ecx
jne 0x648930
mov dword [edx + 0xc], eax
jmp 0x648938
lea edi, [edx + 0xc]
call fcn.00465d80
mov eax, dword [esp + 0x5c]
mov ecx, dword [eax]
mov ebx, dword [esp + 0x60]
mov dword [esp], ebx
mov dword [esp + 4], 1
mov ebp, dword [esp + 0x68]
mov dword [esp + 8], ebp
lea esi, [0x6fce97]
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], 0x21
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 2
mov dword [esp + 0x1c], 2
mov edx, eax
call ecx
movzx eax, byte [esp + 0x23]
movzx ebx, byte [esp + 0x22]
mov ebp, dword [esp + 0x3c]
mov esi, dword [esp + 0x5c]
mov edi, dword [esp + 0x64]
cmp edi, 1
jb 0x648b8d
mov eax, dword [esp + 0x68]
lea ecx, [eax - 1]
mov dword [esp + 0x34], ecx
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 1
mov esi, dword [esp + 0x60]
add ecx, esi
mov dword [esp + 0x44], ecx
mov esi, dword [ebp]
mov dword [esp], ecx
lea ecx, [edi - 1]
mov dword [esp + 0x30], ecx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov edx, ebp
call esi
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
test eax, eax
je 0x648b41
mov ebx, dword [esp + 0x5c]
test ebx, ebx
je 0x648a9e
mov edx, dword [esp + 0x34]
cmp eax, edx
ja 0x648b86
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x28], eax
lea eax, [0x695e20]
mov dword [esp], eax
call fcn.0040be50
mov eax, dword [esp + 4]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x2c]
mov dword [esp], ecx
call fcn.00409720
mov eax, dword [esp + 4]
lea ecx, [0x6998c0]
mov edx, dword [esp + 0x40]
mov dword [edx], ecx
mov ecx, dword [0x1eaa9f0]
test ecx, ecx
jne 0x648a47
mov dword [edx + 4], eax
jmp 0x648a4f
lea edi, [edx + 4]
call fcn.00465d80
mov eax, dword [esp + 0x5c]
mov ecx, dword [eax]
mov ebx, dword [esp + 0x44]
mov dword [esp], ebx
mov ebp, dword [esp + 0x28]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x34]
mov dword [esp + 8], esi
lea esi, [0x6eed80]
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], 7
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], 1
mov edx, eax
call ecx
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
cmp eax, edx
ja 0x648b7f
mov edx, dword [esp + 0x68]
sub edx, eax
dec edx
mov ebx, edx
neg edx
sar edx, 0x1f
and edx, eax
mov ebp, dword [esp + 0x64]
sub ebp, eax
mov eax, dword [esp + 0x44]
add eax, edx
mov edx, dword [esp + 0x54]
test edx, edx
je 0x648b0e
mov dword [esp + 0x34], ebx
mov dword [esp + 0x44], eax
mov dword [esp + 0x30], ebp
movzx eax, byte [esp + 0x22]
cmp al, 7
sete al
mov edx, dword [edx + 0x6c]
mov ebx, dword [esp + 0x58]
mov dword [esp], ebx
movzx ebx, byte [esp + 0x23]
mov byte [esp + 4], bl
mov byte [esp + 5], al
mov dword [esp + 8], ecx
call edx
mov eax, dword [esp + 0x44]
mov ebx, dword [esp + 0x34]
mov ebp, dword [esp + 0x30]
lea ecx, [0x733544]
mov dword [esp + 0x70], ecx
mov dword [esp + 0x74], eax
lea eax, [ebp - 1]
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], 0
add esp, 0x50
ret
mov eax, dword [0x1e84a08]
mov ecx, dword [0x1e84a0c]
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], ecx
add esp, 0x50
ret
mov ecx, edx
call fcn.00465e60
mov ecx, eax
call fcn.00465e40
mov eax, 1
xor ecx, ecx
call fcn.00465e60
mov ecx, 1
xor edx, edx
call fcn.00465e40
mov ecx, 1
xor edx, edx
call fcn.00465e40
nop
call fcn.004649b0
jmp fcn.00648770