Function at 0x406b40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x8c
mov eax, dword [0x42d008]
xor eax, esp
mov dword [esp + 0x88], eax
mov edx, dword [esp + 0x9c]
xor eax, eax
push ebx
mov ebx, dword [esp + 0x98]
push ebp
mov ebp, dword [esp + 0xac]
push edi
mov edi, dword [esp + 0xac]
mov dword [esp + 0x40], ebx
mov dword [esp + 0x3c], edx
mov dword [esp + 0x48], edi
mov dword [esp + 0x20], ebp
cmp eax, 0x20
jae 0x406fe7
xor ecx, ecx
mov word [esp + eax + 0x54], cx
add eax, 2
cmp eax, 0x1e
jbe 0x406b85
push esi
mov esi, dword [esp + 0xa8]
test esi, esi
je 0x406bbe
nop dword [eax]
movzx eax, word [ebx + ecx*2]
inc ecx
inc word [esp + eax*2 + 0x58]
cmp ecx, esi
jb 0x406bb0
mov ecx, dword [edi]
lea eax, [esp + 0x72]
mov edi, 0xf
nop dword [eax]
cmp word [eax + 4], 0
jne 0x406c0f
cmp word [eax + 2], 0
jne 0x406c0e
cmp word [eax], 0
jne 0x406c09
cmp word [eax - 2], 0
jne 0x406c04
cmp word [eax - 4], 0
jne 0x406bff
sub edi, 5
sub eax, 0xa
cmp edi, 1
jae 0x406bd0
jmp 0x406c0f
sub edi, 4
jmp 0x406c0f
sub edi, 3
jmp 0x406c0f
sub edi, 2
jmp 0x406c0f
dec edi
cmp ecx, edi
cmova ecx, edi
test edi, edi
jne 0x406c57
mov ecx, dword [edx]
mov dword [esp + 0x10], 0x140
mov eax, dword [esp + 0x10]
mov dword [ecx], eax
add dword [edx], 4
mov ecx, dword [edx]
mov dword [ecx], eax
mov ecx, dword [esp + 0x4c]
add dword [edx], 4
mov dword [ecx], 1
xor eax, eax
mov ecx, dword [esp + 0x98]
pop esi
pop edi
pop ebp
pop ebx
xor ecx, esp
call fcn.00407420
add esp, 0x8c
ret
mov ebx, 1
mov dword [esp + 0x20], ebx
cmp edi, ebx
jbe 0x406c75
cmp word [esp + ebx*2 + 0x58], 0
jne 0x406c71
inc ebx
cmp ebx, edi
jb 0x406c64
mov dword [esp + 0x20], ebx
cmp ecx, ebx
mov edx, 1
cmovb ecx, ebx
mov dword [esp + 0x28], ecx
mov ecx, edx
movzx eax, word [esp + ecx*2 + 0x58]
add edx, edx
sub edx, eax
js 0x406fdf
inc ecx
cmp ecx, 0xf
jbe 0x406c85
test edx, edx
mov edx, dword [esp + 0xa0]
jle 0x406cb6
test edx, edx
je 0x406fdf
cmp edi, 1
jne 0x406fdf
xor eax, eax
mov ecx, 2
mov word [esp + 0x7a], ax
nop dword [eax]
nop word [eax + eax]
mov ax, word [esp + ecx + 0x78]
add ax, word [esp + ecx + 0x58]
mov word [esp + ecx + 0x7a], ax
add ecx, 2
cmp ecx, 0x1e
jb 0x406cd0
xor ecx, ecx
test esi, esi
je 0x406d16
mov ebx, dword [esp + 0x44]
movzx eax, word [ebx + ecx*2]
test ax, ax
je 0x406d0d
movzx eax, word [esp + eax*2 + 0x78]
mov word [ebp + eax*2], cx
movzx eax, word [ebx + ecx*2]
inc word [esp + eax*2 + 0x78]
inc ecx
cmp ecx, esi
jb 0x406cf1
mov ebx, dword [esp + 0x20]
mov eax, edx
sub eax, 0
je 0x406d62
sub eax, 1
je 0x406d3b
or eax, 0xffffffff
mov dword [esp + 0x34], 0x425318
mov dword [esp + 0x30], 0x425358
mov dword [esp + 0x2c], eax
jmp 0x406d72
mov eax, 0x425298
sub eax, 0x202
mov dword [esp + 0x34], eax
mov eax, 0x4252d8
sub eax, 0x202
mov dword [esp + 0x30], eax
mov eax, 0x100
mov dword [esp + 0x2c], eax
jmp 0x406d72
mov dword [esp + 0x30], ebp
mov dword [esp + 0x34], ebp
mov dword [esp + 0x2c], 0x13
mov ecx, dword [esp + 0x40]
mov edx, 1
mov dword [esp + 0x1c], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x48], 0xffffffff
mov eax, dword [ecx]
mov ecx, dword [esp + 0x28]
shl edx, cl
mov esi, edx
mov dword [esp + 0x18], eax
mov dword [esp + 0x38], edx
mov dword [esp + 0x3c], esi
lea eax, [esi - 1]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0xa0]
cmp eax, 1
jne 0x406dc6
cmp esi, 0x354
ja 0x406dd3
jmp 0x406df0
cmp eax, 2
jne 0x406df0
cmp esi, 0x250
jbe 0x406df0
mov eax, 1
jmp 0x406c3e
mov edx, dword [esp + 0x38]
jmp 0x406df0
mov ebp, dword [esp + 0x24]
nop word [eax + eax]
mov al, bl
sub al, byte [esp + 0x14]
mov byte [esp + 0x11], al
movzx eax, word [ebp]
mov ebp, dword [esp + 0x2c]
mov ecx, eax
cmp ecx, ebp
jge 0x406e0f
mov byte [esp + 0x10], 0
jmp 0x406e2d
jle 0x406e26
mov eax, dword [esp + 0x30]
mov al, byte [eax + ecx*2]
mov byte [esp + 0x10], al
mov eax, dword [esp + 0x34]
mov ax, word [eax + ecx*2]
jmp 0x406e2d
mov byte [esp + 0x10], 0x60
xor eax, eax
mov word [esp + 0x12], ax
mov ecx, ebx
sub ecx, dword [esp + 0x14]
mov esi, 1
mov eax, dword [esp + 0x1c]
shl esi, cl
mov ecx, dword [esp + 0x14]
shr eax, cl
mov ecx, dword [esp + 0x18]
add eax, edx
mov dword [esp + 0x54], edx
lea ebp, [esi*4]
lea ecx, [ecx + eax*4]
mov eax, dword [esp + 0x10]
sub ecx, ebp
mov dword [ecx], eax
sub edx, esi
jne 0x406e61
lea ecx, [ebx - 1]
mov edx, 1
shl edx, cl
mov ecx, dword [esp + 0x1c]
test ecx, edx
je 0x406e86
nop dword [eax + eax]
shr edx, 1
test ecx, edx
jne 0x406e80
test edx, edx
je 0x406e93
lea eax, [edx - 1]
and eax, ecx
add edx, eax
jmp 0x406e95
xor edx, edx
mov ebp, dword [esp + 0x24]
mov eax, 0xffff
add ebp, 2
mov dword [esp + 0x1c], edx
add word [esp + ebx*2 + 0x58], ax
mov dword [esp + 0x24], ebp
jne 0x406ec8
cmp ebx, edi
je 0x406fa0
movzx eax, word [ebp]
mov ecx, dword [esp + 0x44]
movzx ebx, word [ecx + eax*2]
mov dword [esp + 0x20], ebx
mov eax, dword [esp + 0x28]
cmp ebx, eax
jbe 0x406de0
mov ebp, dword [esp + 0x50]
and ebp, edx
mov edx, dword [esp + 0x38]
cmp ebp, dword [esp + 0x48]
je 0x406de6
mov edx, dword [esp + 0x14]
test edx, edx
mov ecx, dword [esp + 0x18]
cmove edx, eax
mov eax, dword [esp + 0x54]
sub ebx, edx
mov dword [esp + 0x14], edx
add edx, ebx
lea ecx, [ecx + eax*4]
mov eax, 1
mov dword [esp + 0x18], ecx
mov ecx, ebx
shl eax, cl
cmp edx, edi
jae 0x406f34
lea esi, [esp + 0x58]
lea esi, [esi + edx*2]
nop dword [eax]
movzx ecx, word [esi]
sub eax, ecx
test eax, eax
jle 0x406f34
inc edx
inc ebx
add esi, 2
add eax, eax
cmp edx, edi
jb 0x406f20
mov esi, dword [esp + 0x3c]
mov edx, 1
mov eax, dword [esp + 0xa0]
mov ecx, ebx
shl edx, cl
add esi, edx
mov dword [esp + 0x38], edx
mov dword [esp + 0x3c], esi
cmp eax, 1
jne 0x406f5f
cmp esi, 0x354
jmp 0x406f6a
cmp eax, 2
jne 0x406f70
cmp esi, 0x250
ja 0x406dd3
mov esi, dword [esp + 0x40]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x48], ebp
mov eax, dword [esi]
mov byte [eax + ebp*4], bl
mov eax, dword [esi]
mov ebx, dword [esp + 0x20]
mov byte [eax + ebp*4 + 1], cl
mov ecx, dword [esi]
mov eax, dword [esp + 0x18]
sub eax, ecx
sar eax, 2
mov word [ecx + ebp*4 + 2], ax
jmp 0x406de6
test edx, edx
je 0x406fc3
sub bl, byte [esp + 0x14]
xor eax, eax
mov ecx, dword [esp + 0x18]
mov byte [esp + 0x10], 0x40
mov byte [esp + 0x11], bl
mov word [esp + 0x12], ax
mov eax, dword [esp + 0x10]
mov dword [ecx + edx*4], eax
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x3c]
shl eax, 2
add dword [ecx], eax
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0x28]
mov dword [ecx], eax
jmp 0x406c3c
or eax, 0xffffffff
jmp 0x406c3e
call fcn.0040787d
int3