Function at 0x406c40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x8c
mov eax, dword [0x42d008]
xor eax, esp
mov dword [esp + 0x88], eax
mov edx, dword [esp + 0x9c]
xor eax, eax
push ebx
mov ebx, dword [esp + 0x98]
push ebp
mov ebp, dword [esp + 0xac]
push edi
mov edi, dword [esp + 0xac]
mov dword [esp + 0x40], ebx
mov dword [esp + 0x3c], edx
mov dword [esp + 0x48], edi
mov dword [esp + 0x20], ebp
cmp eax, 0x20
jae 0x4070e7
xor ecx, ecx
mov word [esp + eax + 0x54], cx
add eax, 2
cmp eax, 0x1e
jbe 0x406c85
push esi
mov esi, dword [esp + 0xa8]
test esi, esi
je 0x406cbe
nop dword [eax]
movzx eax, word [ebx + ecx*2]
inc ecx
inc word [esp + eax*2 + 0x58]
cmp ecx, esi
jb 0x406cb0
mov ecx, dword [edi]
lea eax, [esp + 0x72]
mov edi, 0xf
nop dword [eax]
cmp word [eax + 4], 0
jne 0x406d0f
cmp word [eax + 2], 0
jne 0x406d0e
cmp word [eax], 0
jne 0x406d09
cmp word [eax - 2], 0
jne 0x406d04
cmp word [eax - 4], 0
jne 0x406cff
sub edi, 5
sub eax, 0xa
cmp edi, 1
jae 0x406cd0
jmp 0x406d0f
sub edi, 4
jmp 0x406d0f
sub edi, 3
jmp 0x406d0f
sub edi, 2
jmp 0x406d0f
dec edi
cmp ecx, edi
cmova ecx, edi
test edi, edi
jne 0x406d57
mov ecx, dword [edx]
mov dword [esp + 0x10], 0x140
mov eax, dword [esp + 0x10]
mov dword [ecx], eax
add dword [edx], 4
mov ecx, dword [edx]
mov dword [ecx], eax
mov ecx, dword [esp + 0x4c]
add dword [edx], 4
mov dword [ecx], 1
xor eax, eax
mov ecx, dword [esp + 0x98]
pop esi
pop edi
pop ebp
pop ebx
xor ecx, esp
call fcn.00407520
add esp, 0x8c
ret
mov ebx, 1
mov dword [esp + 0x20], ebx
cmp edi, ebx
jbe 0x406d75
cmp word [esp + ebx*2 + 0x58], 0
jne 0x406d71
inc ebx
cmp ebx, edi
jb 0x406d64
mov dword [esp + 0x20], ebx
cmp ecx, ebx
mov edx, 1
cmovb ecx, ebx
mov dword [esp + 0x28], ecx
mov ecx, edx
movzx eax, word [esp + ecx*2 + 0x58]
add edx, edx
sub edx, eax
js 0x4070df
inc ecx
cmp ecx, 0xf
jbe 0x406d85
test edx, edx
mov edx, dword [esp + 0xa0]
jle 0x406db6
test edx, edx
je 0x4070df
cmp edi, 1
jne 0x4070df
xor eax, eax
mov ecx, 2
mov word [esp + 0x7a], ax
nop dword [eax]
nop word [eax + eax]
mov ax, word [esp + ecx + 0x78]
add ax, word [esp + ecx + 0x58]
mov word [esp + ecx + 0x7a], ax
add ecx, 2
cmp ecx, 0x1e
jb 0x406dd0
xor ecx, ecx
test esi, esi
je 0x406e16
mov ebx, dword [esp + 0x44]
movzx eax, word [ebx + ecx*2]
test ax, ax
je 0x406e0d
movzx eax, word [esp + eax*2 + 0x78]
mov word [ebp + eax*2], cx
movzx eax, word [ebx + ecx*2]
inc word [esp + eax*2 + 0x78]
inc ecx
cmp ecx, esi
jb 0x406df1
mov ebx, dword [esp + 0x20]
mov eax, edx
sub eax, 0
je 0x406e62
sub eax, 1
je 0x406e3b
or eax, 0xffffffff
mov dword [esp + 0x34], 0x4253a0
mov dword [esp + 0x30], 0x4253e0
mov dword [esp + 0x2c], eax
jmp 0x406e72
mov eax, 0x425320
sub eax, 0x202
mov dword [esp + 0x34], eax
mov eax, 0x425360
sub eax, 0x202
mov dword [esp + 0x30], eax
mov eax, 0x100
mov dword [esp + 0x2c], eax
jmp 0x406e72
mov dword [esp + 0x30], ebp
mov dword [esp + 0x34], ebp
mov dword [esp + 0x2c], 0x13
mov ecx, dword [esp + 0x40]
mov edx, 1
mov dword [esp + 0x1c], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x48], 0xffffffff
mov eax, dword [ecx]
mov ecx, dword [esp + 0x28]
shl edx, cl
mov esi, edx
mov dword [esp + 0x18], eax
mov dword [esp + 0x38], edx
mov dword [esp + 0x3c], esi
lea eax, [esi - 1]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0xa0]
cmp eax, 1
jne 0x406ec6
cmp esi, 0x354
ja 0x406ed3
jmp 0x406ef0
cmp eax, 2
jne 0x406ef0
cmp esi, 0x250
jbe 0x406ef0
mov eax, 1
jmp 0x406d3e
mov edx, dword [esp + 0x38]
jmp 0x406ef0
mov ebp, dword [esp + 0x24]
nop word [eax + eax]
mov al, bl
sub al, byte [esp + 0x14]
mov byte [esp + 0x11], al
movzx eax, word [ebp]
mov ebp, dword [esp + 0x2c]
mov ecx, eax
cmp ecx, ebp
jge 0x406f0f
mov byte [esp + 0x10], 0
jmp 0x406f2d
jle 0x406f26
mov eax, dword [esp + 0x30]
mov al, byte [eax + ecx*2]
mov byte [esp + 0x10], al
mov eax, dword [esp + 0x34]
mov ax, word [eax + ecx*2]
jmp 0x406f2d
mov byte [esp + 0x10], 0x60
xor eax, eax
mov word [esp + 0x12], ax
mov ecx, ebx
sub ecx, dword [esp + 0x14]
mov esi, 1
mov eax, dword [esp + 0x1c]
shl esi, cl
mov ecx, dword [esp + 0x14]
shr eax, cl
mov ecx, dword [esp + 0x18]
add eax, edx
mov dword [esp + 0x54], edx
lea ebp, [esi*4]
lea ecx, [ecx + eax*4]
mov eax, dword [esp + 0x10]
sub ecx, ebp
mov dword [ecx], eax
sub edx, esi
jne 0x406f61
lea ecx, [ebx - 1]
mov edx, 1
shl edx, cl
mov ecx, dword [esp + 0x1c]
test ecx, edx
je 0x406f86
nop dword [eax + eax]
shr edx, 1
test ecx, edx
jne 0x406f80
test edx, edx
je 0x406f93
lea eax, [edx - 1]
and eax, ecx
add edx, eax
jmp 0x406f95
xor edx, edx
mov ebp, dword [esp + 0x24]
mov eax, 0xffff
add ebp, 2
mov dword [esp + 0x1c], edx
add word [esp + ebx*2 + 0x58], ax
mov dword [esp + 0x24], ebp
jne 0x406fc8
cmp ebx, edi
je 0x4070a0
movzx eax, word [ebp]
mov ecx, dword [esp + 0x44]
movzx ebx, word [ecx + eax*2]
mov dword [esp + 0x20], ebx
mov eax, dword [esp + 0x28]
cmp ebx, eax
jbe 0x406ee0
mov ebp, dword [esp + 0x50]
and ebp, edx
mov edx, dword [esp + 0x38]
cmp ebp, dword [esp + 0x48]
je 0x406ee6
mov edx, dword [esp + 0x14]
test edx, edx
mov ecx, dword [esp + 0x18]
cmove edx, eax
mov eax, dword [esp + 0x54]
sub ebx, edx
mov dword [esp + 0x14], edx
add edx, ebx
lea ecx, [ecx + eax*4]
mov eax, 1
mov dword [esp + 0x18], ecx
mov ecx, ebx
shl eax, cl
cmp edx, edi
jae 0x407034
lea esi, [esp + 0x58]
lea esi, [esi + edx*2]
nop dword [eax]
movzx ecx, word [esi]
sub eax, ecx
test eax, eax
jle 0x407034
inc edx
inc ebx
add esi, 2
add eax, eax
cmp edx, edi
jb 0x407020
mov esi, dword [esp + 0x3c]
mov edx, 1
mov eax, dword [esp + 0xa0]
mov ecx, ebx
shl edx, cl
add esi, edx
mov dword [esp + 0x38], edx
mov dword [esp + 0x3c], esi
cmp eax, 1
jne 0x40705f
cmp esi, 0x354
jmp 0x40706a
cmp eax, 2
jne 0x407070
cmp esi, 0x250
ja 0x406ed3
mov esi, dword [esp + 0x40]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x48], ebp
mov eax, dword [esi]
mov byte [eax + ebp*4], bl
mov eax, dword [esi]
mov ebx, dword [esp + 0x20]
mov byte [eax + ebp*4 + 1], cl
mov ecx, dword [esi]
mov eax, dword [esp + 0x18]
sub eax, ecx
sar eax, 2
mov word [ecx + ebp*4 + 2], ax
jmp 0x406ee6
test edx, edx
je 0x4070c3
sub bl, byte [esp + 0x14]
xor eax, eax
mov ecx, dword [esp + 0x18]
mov byte [esp + 0x10], 0x40
mov byte [esp + 0x11], bl
mov word [esp + 0x12], ax
mov eax, dword [esp + 0x10]
mov dword [ecx + edx*4], eax
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x3c]
shl eax, 2
add dword [ecx], eax
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0x28]
mov dword [ecx], eax
jmp 0x406d3c
or eax, 0xffffffff
jmp 0x406d3e
call fcn.0040797d
int3