Function at 0x406260
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4e7209
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xb0
mov al, byte [esp + 3]
push ebx
push ebp
push esi
mov esi, ecx
xor ebx, ebx
push edi
mov dword [esp + 0x4c], esi
mov byte [esp + 0x18], al
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
lea ecx, [esp + 0x34]
mov dword [esp + 0xc8], ebx
call fcn.004be1a0
lea ecx, [esp + 0x38]
mov byte [esp + 0xc8], 1
call fcn.004be1a0
mov cl, byte [esp + 0x13]
push ebx
mov byte [esp + 0x40], cl
lea ecx, [esp + 0x40]
mov byte [esp + 0xcc], 2
call fcn.00414090
lea edx, [esp + 0x30]
mov ecx, esi
push edx
mov byte [esp + 0xcc], 3
call fcn.00405ea0
cmp ax, 2
jne 0x40634b
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x50f9f4
call fcn.004be240
lea eax, [esp + 0x54]
push eax
call fcn.004cfca0
add esp, 8
mov ecx, dword [0x4f73d0]
mov byte [esp + 0xc8], 4
push ecx
push ebx
push eax
lea ecx, [esp + 0x48]
call fcn.00413e90
push 1
lea ecx, [esp + 0x54]
mov byte [esp + 0xcc], 3
call fcn.00414090
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x30]
push edx
push 1
push eax
jmp 0x4063ae
cmp ax, 1
jne 0x406af2
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x50f9ec
call fcn.004be240
lea ecx, [esp + 0x54]
push ecx
call fcn.004cfca0
add esp, 8
mov edx, dword [0x4f73d0]
lea ecx, [esp + 0x3c]
push edx
push ebx
push eax
mov byte [esp + 0xd4], 5
call fcn.00413e90
push 1
lea ecx, [esp + 0x54]
mov byte [esp + 0xcc], 3
call fcn.00414090
mov ecx, dword [esp + 0x20]
lea eax, [esp + 0x30]
push eax
push 1
push ecx
lea ecx, [esp + 0x24]
call fcn.00414b40
mov byte [esp + 0x13], bl
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x50f9e4
call fcn.004be240
mov ecx, dword [0x5200b4]
call fcn.004d0800
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x50f9dc
call fcn.004be240
mov ecx, dword [0x5200b4]
call fcn.004d0980
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x50f9d4
call fcn.004be240
mov ecx, dword [0x5200b4]
call fcn.004d0980
mov eax, dword [esp + 0x1c]
cmp eax, ebx
jne 0x406423
xor edx, edx
jmp 0x40643c
mov ecx, dword [esp + 0x20]
sub ecx, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx ebp, dx
xor edi, edi
cmp ebp, ebx
jle 0x4064c4
mov ecx, ebp
sub ecx, edi
lea esi, [ecx - 1]
lea ecx, [esp + 0x18]
push esi
call fcn.00413da0
push ecx
add eax, 8
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004be1b0
push esi
lea ecx, [esp + 0x20]
mov byte [esp + 0xd0], 0xc
call fcn.00413da0
sub esp, 0x10
add eax, 0xc
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.00413ad0
push esi
lea ecx, [esp + 0x30]
mov byte [esp + 0xe0], 0xd
call fcn.00413da0
push ecx
add eax, 4
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004be1b0
mov ecx, dword [0x5200b4]
mov byte [esp + 0xe0], 3
call fcn.004d0d40
inc edi
cmp edi, ebp
jl 0x406445
mov ecx, dword [0x5200b4]
call fcn.004d0f50
push 0xa
mov esi, eax
call fcn.004bb3e0
add esp, 4
cmp si, 1
je 0x406997
cmp si, bx
jne 0x406988
cmp byte [esp + 0x13], bl
je 0x40653c
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x50f634
call fcn.004be240
push ecx
mov byte [esp + 0xd8], 0x10
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x50f9cc
call fcn.004be240
mov ecx, 0x5200a8
mov byte [esp + 0xd8], 3
call fcn.004caf10
jmp 0x4063bb
mov ecx, dword [esp + 0x4c]
lea edx, [esp + 0x30]
push edx
call fcn.00405ea0
push 0x3c
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp si, 2
jne 0x406645
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x50f9f4
call fcn.004be240
lea eax, [esp + 0xb4]
push eax
call fcn.004cfca0
add esp, 8
mov ecx, dword [0x4f73d0]
mov byte [esp + 0xc8], 0x11
push ecx
push ebx
push eax
lea ecx, [esp + 0x48]
call fcn.00413e90
push 1
lea ecx, [esp + 0xb4]
mov byte [esp + 0xcc], 3
call fcn.00414090
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x50f9c4
call fcn.004be240
lea edx, [esp + 0x94]
push edx
call fcn.004cfca0
add esp, 8
mov edi, eax
mov esi, dword [esp + 0x1c]
mov byte [esp + 0xc8], 0x12
cmp esi, ebx
jne 0x4065ea
xor edx, edx
jmp 0x406603
mov ecx, dword [esp + 0x20]
mov eax, 0x92492493
sub ecx, esi
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov ecx, dword [0x4f73d0]
lea eax, [edx*8]
sub eax, edx
push ecx
push ebx
push edi
lea ecx, [esi + eax*4 - 0x10]
call fcn.00413e90
push 1
lea ecx, [esp + 0x94]
mov byte [esp + 0xcc], 3
call fcn.00414090
mov edx, dword [esp + 0x20]
lea ecx, [esp + 0x30]
push ecx
push 1
push edx
jmp 0x406975
cmp si, 1
jne 0x406845
mov esi, dword [esp + 0x1c]
cmp esi, ebx
je 0x4067a9
mov ecx, dword [esp + 0x20]
mov eax, 0x92492493
sub ecx, esi
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
je 0x4067a9
lea ecx, [edx*8]
sub ecx, edx
lea edx, [esi + ecx*4 - 0x18]
lea ecx, [esp + 0x34]
push edx
call fcn.004be580
test al, al
jne 0x4063bb
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x50f9ec
call fcn.004be240
lea eax, [esp + 0xa4]
push eax
call fcn.004cfca0
add esp, 8
mov ecx, dword [0x4f73d0]
mov byte [esp + 0xc8], 0x13
push ecx
push ebx
push eax
lea ecx, [esp + 0x48]
call fcn.00413e90
push 1
lea ecx, [esp + 0xa4]
mov byte [esp + 0xcc], 3
call fcn.00414090
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x50f9c4
call fcn.004be240
lea edx, [esp + 0x64]
push edx
call fcn.004cfca0
add esp, 8
mov edi, eax
mov esi, dword [esp + 0x1c]
mov byte [esp + 0xc8], 0x14
cmp esi, ebx
jne 0x406722
xor edx, edx
jmp 0x40673b
mov ecx, dword [esp + 0x20]
mov eax, 0x92492493
sub ecx, esi
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov ecx, dword [0x4f73d0]
lea eax, [edx*8]
sub eax, edx
push ecx
push ebx
push edi
lea ecx, [esi + eax*4 - 0x10]
call fcn.00413e90
mov eax, dword [esp + 0x64]
mov byte [esp + 0xc8], 3
cmp eax, ebx
je 0x406783
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x40677a
cmp al, 0xff
je 0x40677a
dec al
mov byte [ecx], al
jmp 0x406783
push ecx
call fcn.004de1a0
add esp, 4
mov edx, dword [esp + 0x20]
lea ecx, [esp + 0x30]
push ecx
push 1
push edx
lea ecx, [esp + 0x24]
mov dword [esp + 0x70], ebx
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], ebx
call fcn.00414b40
jmp 0x4063bb
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x50f9ec
call fcn.004be240
lea eax, [esp + 0x84]
push eax
call fcn.004cfca0
add esp, 8
mov ecx, dword [0x4f73d0]
mov byte [esp + 0xc8], 0x15
push ecx
push ebx
push eax
lea ecx, [esp + 0x48]
call fcn.00413e90
mov eax, dword [esp + 0x84]
mov byte [esp + 0xc8], 3
cmp eax, ebx
je 0x406816
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x40680d
cmp al, 0xff
je 0x40680d
dec al
mov byte [ecx], al
jmp 0x406816
push ecx
call fcn.004de1a0
add esp, 4
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x30]
push edx
push 1
push eax
lea ecx, [esp + 0x24]
mov dword [esp + 0x90], ebx
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], ebx
call fcn.00414b40
jmp 0x4063bb
cmp si, bx
jne 0x4069fa
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x50f9f4
call fcn.004be240
lea ecx, [esp + 0x74]
push ecx
call fcn.004cfca0
add esp, 8
mov edx, dword [0x4f73d0]
lea ecx, [esp + 0x3c]
push edx
push ebx
push eax
mov byte [esp + 0xd4], 0x16
call fcn.00413e90
mov eax, dword [esp + 0x74]
mov byte [esp + 0xc8], 3
cmp eax, ebx
je 0x4068b5
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x4068ac
cmp al, 0xff
je 0x4068ac
dec al
mov byte [ecx], al
jmp 0x4068b5
push ecx
call fcn.004de1a0
add esp, 4
push ecx
mov dword [esp + 0x78], ebx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x50f9c4
mov dword [esp + 0x84], ebx
mov dword [esp + 0x88], ebx
call fcn.004be240
lea eax, [esp + 0x54]
push eax
call fcn.004cfca0
add esp, 8
mov edi, eax
mov esi, dword [esp + 0x1c]
mov byte [esp + 0xc8], 0x17
cmp esi, ebx
jne 0x4068fd
xor edx, edx
jmp 0x406916
mov ecx, dword [esp + 0x20]
mov eax, 0x92492493
sub ecx, esi
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov eax, dword [0x4f73d0]
lea ecx, [edx*8]
sub ecx, edx
push eax
push ebx
push edi
lea ecx, [esi + ecx*4 - 0x10]
call fcn.00413e90
mov eax, dword [esp + 0x54]
mov byte [esp + 0xc8], 3
cmp eax, ebx
je 0x40695d
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x406954
cmp al, 0xff
je 0x406954
dec al
mov byte [ecx], al
jmp 0x40695d
push ecx
call fcn.004de1a0
add esp, 4
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x30]
push edx
push 1
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
push eax
lea ecx, [esp + 0x24]
call fcn.00414b40
mov byte [esp + 0x13], 1
jmp 0x4063bb
push 0xa
call fcn.004bb3e0
add esp, 4
jmp 0x4063bb
push 1
lea ecx, [esp + 0x40]
mov byte [esp + 0xcc], 0xf
call fcn.00414090
lea ecx, [esp + 0x38]
mov byte [esp + 0xc8], 0xe
call fcn.004be2e0
lea ecx, [esp + 0x34]
mov byte [esp + 0xc8], bl
call fcn.004be2e0
mov edi, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
cmp esi, edi
mov dword [esp + 0xc8], 0xffffffff
je 0x406c40
push ebx
mov ecx, esi
call fcn.004159f0
add esi, 0x1c
cmp esi, edi
jne 0x4069e6
jmp 0x406c3c
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x50f76c
call fcn.004be240
push ecx
mov byte [esp + 0xd8], 0x18
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x50f970
call fcn.004be240
mov ecx, 0x5200a8
mov byte [esp + 0xd8], 3
call fcn.004caf10
mov eax, dword [esp + 0x40]
mov byte [esp + 0xc8], 0x19
cmp eax, ebx
je 0x406a6a
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x406a61
cmp al, 0xff
je 0x406a61
dec al
mov byte [ecx], al
jmp 0x406a6a
push ecx
call fcn.004de1a0
add esp, 4
lea ecx, [esp + 0x38]
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], ebx
call fcn.004be2e0
lea ecx, [esp + 0x34]
mov byte [esp + 0xc8], bl
call fcn.004be2e0
mov edi, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
or ebp, 0xffffffff
cmp esi, edi
mov dword [esp + 0xc8], ebp
mov dword [esp + 0x4c], esi
je 0x406c40
mov bl, 0x1a
push 1
lea ecx, [esi + 0xc]
mov dword [esp + 0xcc], 0x1b
call fcn.00414090
lea ecx, [esi + 8]
mov byte [esp + 0xc8], bl
call fcn.004be2e0
lea ecx, [esi + 4]
mov dword [esp + 0xc8], ebp
call fcn.004be2e0
add esi, 0x1c
cmp esi, edi
mov dword [esp + 0x4c], esi
jne 0x406aaf
jmp 0x406c3c
push ebx
push 1
push ecx
cmp ax, bx
mov ecx, esp
jne 0x406ba3
mov dword [esp + 0x20], esp
push 6
push 0x50f634
call fcn.004be240
push ecx
mov byte [esp + 0xd8], 6
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x50f9bc
call fcn.004be240
mov ecx, 0x5200a8
mov byte [esp + 0xd8], 3
call fcn.004caf10
push 1
lea ecx, [esp + 0x40]
mov byte [esp + 0xcc], 8
call fcn.00414090
lea ecx, [esp + 0x38]
mov byte [esp + 0xc8], 7
call fcn.004be2e0
lea ecx, [esp + 0x34]
mov byte [esp + 0xc8], bl
call fcn.004be2e0
mov eax, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
cmp esi, eax
mov dword [esp + 0xc8], 0xffffffff
mov edi, eax
je 0x406c40
push ebx
mov ecx, esi
call fcn.004159f0
add esi, 0x1c
cmp esi, edi
jne 0x406b8f
jmp 0x406c3c
mov dword [esp + 0x20], esp
push 6
push 0x50f76c
call fcn.004be240
push ecx
mov byte [esp + 0xd8], 9
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x50f970
call fcn.004be240
mov ecx, 0x5200a8
mov byte [esp + 0xd8], 3
call fcn.004caf10
push 1
lea ecx, [esp + 0x40]
mov byte [esp + 0xcc], 0xb
call fcn.00414090
lea ecx, [esp + 0x38]
mov byte [esp + 0xc8], 0xa
call fcn.004be2e0
lea ecx, [esp + 0x34]
mov byte [esp + 0xc8], bl
call fcn.004be2e0
mov eax, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
cmp esi, eax
mov dword [esp + 0xc8], 0xffffffff
mov edi, eax
je 0x406c40
push ebx
mov ecx, esi
call fcn.004159f0
add esi, 0x1c
cmp esi, edi
jne 0x406c2d
mov esi, dword [esp + 0x1c]
push esi
call fcn.004de1a0
mov ecx, dword [esp + 0xc4]
add esp, 4
mov ax, 1
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xbc
ret