Function at 0x406ca9
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x7c
push ebx
push ebp
mov ebp, dword [esp + 0x88]
xor ebx, ebx
push esi
push edi
push 0x18
lea esi, [ebp + 0x37e864]
pop ecx
lea edi, [esp + 0x2c]
rep movsd dword es:[edi], dword [esi]
lea esi, [ebp + 0x10]
movsx eax, byte [esi]
mov edi, esi
add eax, 0xfffffff5
mov dword [esp + 0x1c], esi
mov dword [esp + 0x14], edi
cmp eax, 0x12
ja case.0x406ce4.12
jmp dword [eax*4 + 0x407625]
push ebp
push 8
lea eax, [esp + 0x18]
mov byte [esi], 0xb
push eax
call fcn.00407671
test eax, eax
jne case.0x406ce4.12
cmp dword [esp + 0x10], 0x17
jne 0x406d14
mov byte [esi], 1
push 4
jmp 0x406f46
cmp dword [esp + 0x10], 0x31
jne 0x406f44
mov dword [ebp + 0x2c], ebx
push ebp
push 8
lea eax, [esp + 0x18]
mov byte [esi], 0xd
push eax
call fcn.00407671
test eax, eax
jne case.0x406ce4.12
mov eax, dword [ebp + 0x2c]
shl eax, 8
or eax, dword [esp + 0x10]
mov dword [ebp + 0x2c], eax
push ebp
push 8
lea eax, [esp + 0x18]
mov byte [esi], 0xe
push eax
call fcn.00407671
test eax, eax
jne case.0x406ce4.12
mov eax, dword [ebp + 0x2c]
shl eax, 8
or eax, dword [esp + 0x10]
mov dword [ebp + 0x2c], eax
push ebp
push 8
lea eax, [esp + 0x18]
mov byte [esi], 0xf
push eax
call fcn.00407671
test eax, eax
jne case.0x406ce4.12
mov eax, dword [ebp + 0x2c]
shl eax, 8
or eax, dword [esp + 0x10]
mov dword [ebp + 0x2c], eax
jl 0x406f44
cmp eax, 0xdbbaa
jg 0x406f44
mov edi, ebx
jmp 0x406dd2
mov edi, dword [esp + 0x2c]
push ebp
push 1
lea eax, [esp + 0x18]
mov byte [esi], 0x10
push eax
call fcn.00407671
test eax, eax
jne case.0x406ce4.12
cmp dword [esp + 0x10], 1
sete al
mov byte [edi + ebp + 0x36fbbc], al
inc edi
mov dword [esp + 0x2c], edi
cmp edi, 0x10
jl 0x406daa
push 0x100
lea eax, [ebp + 0x36fabc]
push ebx
push eax
call fcn.00407848
add esp, 0xc
mov esi, ebx
jmp 0x406e36
mov edi, dword [esp + 0x30]
mov esi, dword [esp + 0x2c]
push ebp
push 1
lea eax, [esp + 0x18]
mov byte [ebp + 0x10], 0x11
push eax
call fcn.00407671
test eax, eax
jne case.0x406ce4.12
cmp dword [esp + 0x10], 1
jne 0x406e2b
mov eax, esi
shl eax, 4
add eax, edi
mov byte [eax + ebp + 0x36fabc], 1
inc edi
mov dword [esp + 0x30], edi
cmp edi, 0x10
jl 0x406dfc
inc esi
mov dword [esp + 0x2c], esi
cmp esi, 0x10
jge 0x406e4c
cmp byte [esi + ebp + 0x36fbbc], bl
je 0x406e35
mov edi, ebx
jmp 0x406e2c
mov dword [ebp + 0x36fab8], ebx
mov ecx, ebx
mov eax, dword [ebp + 0x36fab8]
cmp byte [ecx + ebp + 0x36fabc], bl
je 0x406e76
mov byte [eax + ebp + 0x36fbcc], cl
inc dword [ebp + 0x36fab8]
mov eax, dword [ebp + 0x36fab8]
inc ecx
cmp ecx, 0x100
jl 0x406e54
test eax, eax
je 0x406f44
mov edi, dword [esp + 0x14]
add eax, 2
mov dword [esp + 0x38], eax
push ebp
push 3
lea eax, [esp + 0x44]
mov byte [edi], 0x12
push eax
call fcn.00407671
test eax, eax
jne case.0x406ce4.12
cmp dword [esp + 0x3c], 2
jl 0x406f44
cmp dword [esp + 0x3c], 6
jg 0x406f44
push ebp
push 0xf
lea eax, [esp + 0x48]
mov byte [edi], 0x13
push eax
call fcn.00407671
test eax, eax
jne case.0x406ce4.12
mov ecx, dword [esp + 0x40]
cmp ecx, 1
jl 0x406f44
mov esi, dword [esp + 0x14]
mov edi, ebx
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x1c], esi
mov dword [esp + 0x18], eax
jmp 0x406f2b
mov eax, dword [esp + 0x3c]
mov edi, dword [esp + 0x2c]
mov dword [esp + 0x18], eax
push ebp
push 1
lea eax, [esp + 0x18]
mov byte [esi], 0x14
push eax
call fcn.00407671
test eax, eax
jne case.0x406ce4.12
mov eax, dword [esp + 0x30]
cmp dword [esp + 0x10], ebx
jne 0x406f39
mov ecx, dword [esp + 0x40]
mov byte [edi + ebp + 0x37535e], al
inc edi
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x2c], edi
cmp edi, ecx
jge 0x406f62
mov dword [esp + 0x30], ebx
jmp 0x406efd
inc eax
mov dword [esp + 0x30], eax
cmp eax, dword [esp + 0x3c]
jl 0x406efd
push 0xfffffffffffffffc
pop ebx
push 0x18
pop ecx
lea edi, [ebp + 0x37e864]
mov eax, ebx
lea esi, [esp + 0x2c]
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x7c
ret 4
mov dl, bl
test eax, eax
jle 0x406f77
mov edi, ebx
mov byte [esp + edi + 0x24], dl
inc dl
movzx edi, dl
cmp edi, eax
jl 0x406f6a
mov dword [esp + 0x2c], ebx
test ecx, ecx
jle 0x406fc3
lea eax, [ebp + 0x370d0c]
mov dword [esp + 0x2c], ecx
mov ebp, eax
mov dl, byte [ebp + 0x4652]
lea edi, [esp + 0x24]
movzx eax, dl
add edi, eax
mov ah, byte [edi]
test dl, dl
je 0x406fab
mov al, byte [edi - 1]
mov byte [edi], al
dec edi
sub dl, 1
jne 0x406fa0
mov byte [ebp], ah
inc ebp
mov byte [esp + 0x24], ah
sub ecx, 1
jne 0x406f8b
mov ebp, dword [esp + 0x90]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
mov edi, ebx
jmp 0x407096
mov edi, dword [esp + 0x34]
jmp 0x40703c
mov edi, dword [esp + 0x34]
jmp 0x40701e
push ebp
push 5
lea eax, [esp + 0x6c]
mov byte [esi], 0x15
push eax
call fcn.00407671
test eax, eax
jne case.0x406ce4.12
mov edi, dword [esp + 0x34]
mov edx, ebx
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x2c], edx
cmp edx, ecx
jge 0x40708d
mov eax, dword [esp + 0x64]
cmp eax, 1
jl 0x406f44
cmp eax, 0x14
jg 0x406f44
push ebp
push 1
lea eax, [esp + 0x18]
mov byte [esi], 0x16
push eax
call fcn.00407671
test eax, eax
jne case.0x406ce4.12
cmp dword [esp + 0x10], ebx
je 0x407070
mov esi, dword [esp + 0x14]
lea eax, [esp + 0x10]
push ebp
push 1
push eax
mov byte [esi], 0x17
call fcn.00407671
test eax, eax
jne case.0x406ce4.12
mov eax, dword [esp + 0x64]
cmp dword [esp + 0x10], ebx
jne 0x40706d
inc eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x1c], esi
jmp 0x40700c
dec eax
jmp 0x407063
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x64]
imul eax, edi, 0x102
add eax, edx
inc edx
mov byte [eax + ebp + 0x3799b0], cl
jmp 0x406ff8
mov eax, dword [esp + 0x3c]
inc edi
mov dword [esp + 0x18], eax
mov dword [esp + 0x34], edi
cmp edi, eax
jl case.0x406ce4.21
mov dword [esp + 0x34], ebx
test eax, eax
jle 0x407145
lea edx, [ebp + 0x37e84c]
mov dword [esp + 0x34], eax
mov dword [esp + 0x20], edx
lea esi, [ebp + 0x3799b0]
lea edx, [ebp + 0x37b7ec]
mov dword [esp + 0x10], edx
mov ebp, edx
mov edx, ebx
push 0x20
pop edi
test ecx, ecx
jle 0x4070fe
mov ebx, esi
mov ebp, ecx
mov ecx, edi
mov eax, edx
movzx edi, byte [ebx]
cmp edi, eax
mov edx, edi
cmovle edx, eax
cmp edi, ecx
cmovge edi, ecx
inc ebx
sub ebp, 1
jne 0x4070db
mov ecx, dword [esp + 0x38]
xor ebx, ebx
mov ebp, dword [esp + 0x10]
push ecx
push edx
push edi
push esi
lea eax, [ebp + 0x1830]
push eax
push ebp
lea eax, [ebp - 0x1830]
push eax
call fcn.0040774f
mov eax, dword [esp + 0x20]
add ebp, 0x408
mov ecx, dword [esp + 0x38]
add esi, 0x102
mov dword [esp + 0x10], ebp
mov dword [eax], edi
add eax, 4
sub dword [esp + 0x18], 1
mov dword [esp + 0x20], eax
jne 0x4070ce
mov ebp, dword [esp + 0x90]
mov eax, dword [ebp + 0x36fab8]
lea edi, [ebp + 0x30]
or dword [esp + 0x48], 0xffffffff
lea esi, [ebp + 0x370d08]
inc eax
mov dword [esp + 0x54], 0xdbba0
mov edx, 0x100
mov dword [esp + 0x44], eax
mov ecx, edx
mov dword [esp + 0x2c], edx
xor eax, eax
mov dword [esp + 0x4c], ebx
rep stosd dword es:[edi], eax
push 0xf
pop ecx
mov edx, 0x1000
mov ah, cl
lea edi, [ebp + 0x36fccb]
push 0xf
shl ah, 4
add edi, edx
pop ebx
sub edx, 0x10
mov al, bl
add al, ah
mov byte [edi], al
dec edi
sub ebx, 1
jns 0x407194
mov dword [esi], edx
sub esi, 4
sub ecx, 1
jns 0x407181
push ebp
lea eax, [esp + 0x30]
xor ebx, ebx
push eax
mov dword [esp + 0x60], ebx
call fcn.004076d9
mov esi, dword [esp + 0x1c]
test eax, eax
jne 0x406f44
push ebp
push dword [esp + 0x70]
lea eax, [esp + 0x78]
mov byte [esi], 0x18
push eax
call fcn.00407671
test eax, eax
jne case.0x406ce4.12
mov edx, dword [esp + 0x70]
jmp 0x40720e
push ebp
push 1
lea eax, [esp + 0x7c]
mov byte [esi], 0x19
push eax
call fcn.00407671
test eax, eax
jne case.0x406ce4.12
mov eax, dword [esp + 0x70]
lea edx, [eax + eax]
or edx, dword [esp + 0x74]
mov dword [esp + 0x70], edx
mov ecx, dword [esp + 0x6c]
cmp ecx, 0x14
jg 0x406f44
mov eax, dword [esp + 0x80]
cmp edx, dword [eax + ecx*4]
jle 0x40722e
inc ecx
mov dword [esp + 0x6c], ecx
jmp case.0x406ce4.25
mov eax, dword [esp + 0x84]
sub edx, dword [eax + ecx*4]
js 0x406f44
cmp edx, 0x102
jge 0x406f44
mov eax, dword [esp + 0x88]
mov esi, dword [esp + 0x58]
mov edx, dword [eax + edx*4]
mov dword [esp + 0x50], edx
jmp 0x407358
push ebp
push dword [esp + 0x70]
lea eax, [esp + 0x78]
mov byte [edi], 0x1a
push eax
mov esi, edi
call fcn.00407671
test eax, eax
jne case.0x406ce4.12
mov edx, dword [esp + 0x70]
mov ecx, dword [esp + 0x6c]
cmp ecx, 0x14
jg 0x406f44
mov eax, dword [esp + 0x80]
cmp edx, dword [eax + ecx*4]
jle 0x4072c8
inc ecx
mov dword [esp + 0x6c], ecx
push ebp
push 1
lea eax, [esp + 0x7c]
mov byte [esi], 0x1b
push eax
call fcn.00407671
test eax, eax
jne case.0x406ce4.12
mov eax, dword [esp + 0x70]
lea edx, [eax + eax]
or edx, dword [esp + 0x74]
mov dword [esp + 0x70], edx
jmp 0x407281
mov eax, dword [esp + 0x84]
sub edx, dword [eax + ecx*4]
js 0x406f44
cmp edx, 0x102
jge 0x406f44
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x5c]
mov esi, dword [esp + 0x58]
mov edx, dword [eax + edx*4]
mov eax, dword [esp + 0x60]
mov dword [esp + 0x50], edx
test edx, edx
je 0x407544
cmp edx, 1
je 0x40754a
mov eax, dword [ebp + 0x370ccc]
inc ecx
mov dword [esp + 0x5c], ecx
movzx eax, byte [eax + ebp + 0x36fccc]
movzx edi, byte [eax + ebp + 0x36fbcc]
add dword [ebp + edi*4 + 0x30], ecx
test ecx, ecx
jle 0x407358
lea eax, [esi*4 + 0xc38]
add eax, ebp
cmp esi, dword [esp + 0x54]
jge 0x406f44
inc esi
mov dword [eax], edi
add eax, 4
mov dword [esp + 0x58], esi
dec ecx
mov dword [esp + 0x5c], ecx
test ecx, ecx
jg 0x40733b
cmp edx, dword [esp + 0x44]
je 0x407573
test edx, edx
je 0x40752d
cmp edx, 1
je 0x40752d
cmp esi, dword [esp + 0x54]
jge 0x406f44
lea ecx, [edx - 1]
cmp ecx, 0x10
jae 0x4073bb
mov edi, dword [ebp + 0x370ccc]
lea edx, [ecx + 0x36fccc]
add edx, edi
add edx, ebp
movzx eax, byte [edx]
mov dword [esp + 0x10], eax
test ecx, ecx
je 0x4073af
mov al, byte [edx - 1]
mov byte [edx], al
dec edx
sub ecx, 1
jne 0x4073a0
mov eax, dword [esp + 0x10]
mov byte [edi + ebp + 0x36fccc], al
jmp 0x407488
mov edi, ecx
lea eax, [ebp + 0x36fccc]
shr edi, 4
and ecx, 0xf
lea edx, [edi*4 + 0x370ccc]
add edx, ebp
add ecx, dword [edx]
add eax, ecx
mov dword [esp + 0x20], eax
movzx eax, byte [eax]
mov dword [esp + 0x10], eax
mov eax, dword [edx]
cmp ecx, eax
jle 0x407402
mov ebp, dword [esp + 0x20]
mov al, byte [ebp - 1]
dec ecx
mov byte [ebp], al
dec ebp
cmp ecx, dword [edx]
jg 0x4073eb
mov ebp, dword [esp + 0x90]
xor ebx, ebx
mov eax, dword [edx]
inc eax
mov dword [edx], eax
test edi, edi
je 0x407426
dec dword [edx]
dec edi
mov eax, dword [edx - 4]
mov ecx, dword [edx]
lea edx, [edx - 4]
mov al, byte [eax + ebp + 0x36fcdb]
mov byte [ecx + ebp + 0x36fccc], al
test edi, edi
jg 0x407409
dec dword [ebp + 0x370ccc]
mov eax, dword [ebp + 0x370ccc]
mov ecx, dword [esp + 0x10]
mov byte [eax + ebp + 0x36fccc], cl
cmp dword [ebp + 0x370ccc], ebx
jne 0x407484
push 0xf
pop edi
mov edx, 0x1000
lea ecx, [ebp + 0x370d08]
lea esi, [ebp + 0x36fccb]
push 0xf
add esi, edx
sub edx, 0x10
pop ebx
mov eax, dword [ecx]
add eax, ebx
mov al, byte [eax + ebp + 0x36fccc]
mov byte [esi], al
dec esi
sub ebx, 1
jns 0x407461
mov dword [ecx], edx
sub ecx, 4
sub edi, 1
jns 0x407453
mov esi, dword [esp + 0x58]
xor ebx, ebx
mov eax, dword [esp + 0x10]
movzx eax, byte [eax + ebp + 0x36fbcc]
push ebp
inc dword [ebp + eax*4 + 0x30]
mov eax, dword [esp + 0x14]
movzx eax, byte [eax + ebp + 0x36fbcc]
mov dword [ebp + esi*4 + 0xc38], eax
lea eax, [esp + 0x30]
inc esi
push eax
mov dword [esp + 0x60], esi
call fcn.004076d9
test eax, eax
jne 0x406f44
mov edi, dword [esp + 0x14]
push ebp
push dword [esp + 0x70]
lea eax, [esp + 0x78]
mov byte [ebp + 0x10], 0x1c
push eax
call fcn.00407671
test eax, eax
jne case.0x406ce4.12
mov edx, dword [esp + 0x70]
mov ecx, dword [esp + 0x6c]
cmp ecx, 0x14
jg 0x406f44
mov eax, dword [esp + 0x80]
cmp edx, dword [eax + ecx*4]
jle 0x40722e
inc ecx
mov dword [esp + 0x6c], ecx
push ebp
push 1
lea eax, [esp + 0x7c]
mov byte [edi], 0x1d
push eax
call fcn.00407671
test eax, eax
jne case.0x406ce4.12
mov eax, dword [esp + 0x70]
lea edx, [eax + eax]
or edx, dword [esp + 0x74]
mov dword [esp + 0x70], edx
jmp 0x4074e2
mov edi, dword [esp + 0x14]
or ecx, 0xffffffff
xor eax, eax
mov dword [esp + 0x5c], ecx
inc eax
mov dword [esp + 0x60], eax
jmp 0x4072fe
add ecx, eax
mov dword [esp + 0x5c], ecx
add eax, eax
mov dword [esp + 0x60], eax
cmp edx, 1
jne 0x40755b
add ecx, eax
mov dword [esp + 0x5c], ecx
push ebp
lea eax, [esp + 0x30]
push eax
call fcn.004076d9
test eax, eax
je case.0x406ce4.26
jmp 0x406f44
cmp dword [ebp + 0x2c], 0
jl 0x406f44
cmp dword [ebp + 0x2c], esi
jge 0x406f44
mov dword [ebp + 0x14], ebx
lea ecx, [ebp + 0x30]
mov word [ebp + 0x10], 2
mov esi, 0x100
mov dword [ebp + 0x430], ebx
mov eax, dword [ecx + 0x400]
add eax, dword [ecx]
lea ecx, [ecx + 4]
mov dword [ecx + 0x400], eax
sub esi, 1
jne 0x40759d
mov esi, dword [esp + 0x58]
mov edi, ebx
mov dword [esp + 0x2c], edi
test esi, esi
jle 0x4075f2
lea ebx, [ebp + 0xc38]
movzx edx, byte [ebx]
mov eax, edi
shl eax, 8
lea ebx, [ebx + 4]
mov ecx, dword [ebp + edx*4 + 0x430]
or dword [ebp + ecx*4 + 0xc38], eax
inc dword [ebp + edx*4 + 0x430]
inc edi
cmp edi, esi
jl 0x4075c7
mov dword [esp + 0x2c], edi
xor ebx, ebx
mov eax, dword [ebp + 0x2c]
mov eax, dword [ebp + eax*4 + 0xc38]
shr eax, 8
mov dword [ebp + 0x20], eax
mov dword [ebp + 0x18], ebx
mov ecx, dword [ebp + eax*4 + 0xc38]
movzx eax, cl
shr ecx, 8
mov dword [ebp + 0x1c], eax
mov dword [ebp + 0x20], ecx
mov dword [ebp + 0x18], 1
jmp case.0x406ce4.12