Function at 0x406e0b
Capabilities:
Check for software breakpoints

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x34
mov eax, dword [ebp + 8]
mov dword [ebp - 0x10], 0x7b8022aa
add eax, 8
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x28]
mov edi, dword [0x469140]
mov eax, dword [ebp - 0x10]
cmp eax, 0xbda43e7
jle 0x406e7e
cmp eax, 0x4c160be5
jg 0x406eef
cmp eax, 0x2446f50d
jg 0x406fe7
cmp eax, 0x189e39d4
jle 0x407143
cmp eax, 0x189e39d5
je 0x4073e4
cmp eax, 0x1c21fcf7
je 0x4074d9
cmp eax, 0x23ac2abd
jne 0x406e2d
mov dword [ebp - 0x10], 0x47e9e795
jmp 0x406e2d
cmp eax, 0xc678d0dc
jle 0x406f3e
cmp eax, 0xd5fb1412
jg 0x406f9b
cmp eax, 0xcc4f5483
jle 0x4070df
cmp eax, 0xcc4f5484
je 0x407389
cmp eax, 0xce6b169f
je 0x4074b5
cmp eax, 0xd4ab64b9
jne 0x406e2d
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 0xa9]
imul ecx, ecx
imul edx, ecx, 0x3303
dec edx
lea eax, [eax*4 + 0x2f5]
mov dword [ebp - 0x14], eax
mov eax, 0x1c21fcf7
cmp ecx, edx
jne 0x406fdd
jmp 0x40751a
cmp eax, 0x6a76d4f0
jg 0x407031
cmp eax, 0x55fd014c
jle 0x407196
cmp eax, 0x55fd014d
je 0x4070c4
cmp eax, 0x603d59e2
je 0x4074f5
cmp eax, 0x6618b897
jne 0x406e2d
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x10], 0x724c14bd
jmp 0x406e2d
cmp eax, 0xb6fbbeab
jle 0x407062
cmp eax, 0xbcd9c7d1
jle 0x40708f
cmp eax, 0xbcd9c7d2
je 0x4072f7
cmp eax, 0xc0978d42
je 0x40747d
cmp eax, 0xc39fc46d
jne 0x406e2d
mov dword [ebp - 0x20], 0
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x1c]
call fcn.0040bd29
add esp, 0xc
mov dword [ebp - 0x10], 0x86105693
jmp 0x406e2d
cmp eax, 0xe9980007
jle 0x407121
cmp eax, 0xe9980008
je 0x4073b2
cmp eax, 0xf309533b
je 0x4074c1
cmp eax, 0xfc9d8ce9
jne 0x406e2d
shr ebx, 1
and ebx, 0x3fffff
mov eax, 0xa3bcdac3
cmp ebx, 0x3f
jb 0x40751a
mov eax, 0x189e39d5
jmp 0x40751a
cmp eax, 0x348f878c
jle 0x4071e1
cmp eax, 0x348f878d
je 0x407402
cmp eax, 0x47e9e795
je 0x407522
cmp eax, 0x48b532de
jne 0x406e2d
push 0x45e102
push dword [ebp - 0x18]
call edi
push dword [ebp + 0xc]
push dword [ebp - 0x18]
call edi
mov dword [ebp - 0x10], 0xe9980008
jmp 0x406e2d
cmp eax, 0x724c14bc
jle 0x407215
cmp eax, 0x724c14bd
je 0x407425
cmp eax, 0x772238aa
je 0x407548
cmp eax, 0x7b8022aa
je 0x4074cd
jmp 0x406e2d
cmp eax, 0xa078f206
jg 0x40724c
cmp eax, 0x86105693
je 0x40728f
cmp eax, 0x8e29002a
jne 0x40755b
mov dword [ebp - 0x10], 0x772238aa
jmp 0x406e2d
cmp eax, 0xb6fbbeac
je 0x4072ae
cmp eax, 0xb927736c
jne 0x406e2d
mov eax, dword [ebp - 0x2c]
movzx eax, word [eax]
cmp eax, 0xf0b
je 0x4071ac
movzx eax, ax
cmp eax, 0xcd03
jne 0x407283
mov dword [ebp - 0x34], ebx
popal
jmp 0x4070c8
cmp eax, 0xc678d0dd
je 0x4072e0
cmp eax, 0xcc1c5146
jne 0x406e2d
mov eax, dword [ebp - 0x14]
shr eax, 1
and eax, 0x7fffff
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x8273
dec edx
add eax, 0xd6
mov dword [ebp - 0x14], eax
mov eax, 0xcc4f5484
cmp edx, ecx
jne 0x40718c
jmp 0x40751a
cmp eax, 0xd5fb1413
je 0x407283
cmp eax, 0xd8a7ea13
jne 0x406e2d
mov dword [ebp - 0x10], 0xce6b169f
jmp 0x406e2d
cmp eax, 0xbda43e8
je 0x40731a
cmp eax, 0x11929371
jne 0x406e2d
imul ebx, ebx, 0x68
add ebx, 0xffffa708
push 0x59da
push ebx
call fcn.004046c1
add esp, 8
push ebx
push 0x43fb
call fcn.00405b5e
add esp, 8
mov eax, 0x348f878d
cmp ebx, 0x4a
jb 0x40751a
mov eax, 0xa3bcdac3
jmp 0x40751a
cmp eax, 0x4c160be6
je 0x407350
cmp eax, 0x4ea3cadb
jne 0x406e2d
mov eax, dword [ebp - 0x14]
lea ecx, [eax - 2]
imul ecx, ecx
imul edx, ecx, 0x5197
dec edx
imul eax, eax, 0x1420
add eax, 0xfffe08e0
mov dword [ebp - 0x14], eax
mov eax, 0x603d59e2
cmp ecx, edx
je 0x40751a
mov eax, 0x55fd014d
jmp 0x40751a
cmp eax, 0x2446f50e
je 0x407367
cmp eax, 0x255e754b
jne 0x406e2d
push 2
push 0x104
call fcn.00447c47
add esp, 8
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 0xcc1c5146
jmp 0x406e2d
cmp eax, 0x6a76d4f1
je 0x407373
cmp eax, 0x6a8d475c
jne 0x406e2d
mov eax, dword [ebp + 4]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
cmp byte [eax], 0xcc
mov eax, 0xa078f207
je 0x40751a
mov eax, 0xb927736c
jmp 0x40751a
cmp eax, 0xa078f207
je 0x407445
cmp eax, 0xa3bcdac3
jne 0x407568
mov eax, dword [ebp + 8]
push dword [eax + 4]
push dword [ebp - 0x1c]
call edi
push 0x45e148
push dword [ebp - 0x1c]
call edi
mov dword [ebp - 0x10], 0x348f878d
jmp 0x406e2d
mov dword [ebp - 0x10], 0x8e29002a
jmp 0x406e2d
mov eax, dword [ebp - 0x14]
lea eax, [eax*8 + 0x797]
shr eax, 0xd
and eax, 0xfffffffc
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x6618b897
jmp 0x406e2d
mov eax, dword [ebp - 0x14]
shr eax, 0xf
lea ecx, [eax - 0x3c]
imul ecx, ecx
imul edx, ecx, 0x359f
add eax, 0xffffff01
dec edx
mov dword [ebp - 0x14], eax
mov eax, 0xc0978d42
cmp ecx, edx
je 0x40751a
mov eax, 0x23ac2abd
jmp 0x40751a
push dword [ebp - 0x1c]
call fcn.00448680
add esp, 4
mov dword [ebp - 0x10], 0xd8a7ea13
jmp 0x406e2d
mov eax, dword [ebp - 0x14]
shr eax, 0xd
and eax, 0xfffffffc
imul eax, eax, 0x31c
add eax, 0xfffffe5e
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x48b532de
jmp 0x406e2d
mov eax, dword [ebp - 0x14]
mov ecx, eax
shr ecx, 7
imul ecx, ecx
imul edx, ecx, 0xf4b
shr eax, 0x16
dec edx
lea eax, [eax*8 - 8]
mov dword [ebp - 0x14], eax
mov eax, 0x724c14bd
cmp ecx, edx
je 0x40751a
mov eax, 0x4c160be6
jmp 0x40751a
push dword [ebp - 0x18]
call fcn.00448680
add esp, 4
mov dword [ebp - 0x10], 0xc678d0dd
jmp 0x406e2d
mov dword [ebp - 0x10], 0xc39fc46d
jmp 0x406e2d
mov eax, dword [ebp - 0x38]
push dword [eax]
push dword [ebp - 0x18]
call edi
mov dword [ebp - 0x10], 0xbcd9c7d2
jmp 0x406e2d
shr ebx, 9
imul ebx, ebx, 0x13800
or ebx, 0x400
push ebx
push 0x1e57
call fcn.00405422
add esp, 8
mov dword [ebp - 0x10], 0xf309533b
jmp 0x406e2d
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 0x52]
imul ecx, ecx
imul edx, ecx, 0x2909
dec edx
shl eax, 0xe
add eax, 0x5a4000
mov dword [ebp - 0x14], eax
mov eax, 0x6a76d4f1
cmp ecx, edx
je 0x40751a
mov eax, 0x6a8d475c
jmp 0x40751a
push 2
push 0x104
call fcn.00447c47
add esp, 8
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xb6fbbeac
jmp 0x406e2d
push dword [ebp + 0xc]
push dword [ebp - 0x1c]
call edi
push dword [ebp - 0x1c]
call fcn.0040c3bb
add esp, 4
mov ecx, 0x87e8736d
test eax, eax
je 0x407475
mov ecx, 0xd4ab64b9
jmp 0x407475
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push dword [ebp - 0x18]
push dword [ebp + 0x10]
call fcn.0041aa6b
add esp, 0x10
mov dword [ebp - 0x10], 0xbda43e8
jmp 0x406e2d
imul ecx, dword [ebp - 0x14], 0x46e0
mov eax, ecx
shr eax, 0xd
shr ecx, 0x10
imul eax, eax
add ecx, 0xffffff38
imul edx, eax, 0x4467
dec edx
mov dword [ebp - 0x14], ecx
mov ecx, 0xfc9d8ce9
cmp edx, eax
je 0x407475
mov ecx, 0x55fd014d
mov dword [ebp - 0x10], ecx
jmp 0x406e2d
imul esi, ebx, 0x1ac0
add esi, 0xffea0337
mov ebx, esi
shr ebx, 0xd
push 0x136a
push ebx
push 0x48b7
call fcn.00405600
add esp, 0xc
mov eax, 0x189e39d5
cmp esi, 0x16a000
jae 0x40751a
mov eax, 0x11929371
jmp 0x40751a
mov dword [ebp - 0x10], 0x87e8736d
jmp 0x406e2d
imul ebx, ebx, 0x51000
add ebx, 0xffffff56
mov dword [ebp - 0x10], 0x255e754b
jmp 0x406e2d
shl ebx, 0x12
call fcn.00404898
mov eax, 0xa1558864
and ebx, 0xfc000000
je 0x40751a
mov eax, 0x348f878d
jmp 0x40751a
lea eax, [ebx + ebx*8]
shl eax, 4
add eax, 0xc3
shr eax, 2
lea ebx, [eax + eax*2]
shl ebx, 3
sub ebx, eax
mov eax, 0x48b532de
cmp ebx, 0x15
jb 0x40751a
mov eax, 0x6a76d4f1
mov dword [ebp - 0x10], eax
jmp 0x406e2d
mov eax, dword [ebp + 8]
push dword [eax]
push dword [ebp - 0x18]
call edi
push 0x45e102
push dword [ebp - 0x18]
call edi
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 0x6a76d4f1
jmp 0x406e2d
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x10], 0x2446f50e
jmp 0x406e2d
cmp eax, 0x87e8736d
jne 0x406e2d
jmp 0x407596
cmp eax, 0xa1558864
jne 0x406e2d
lea eax, [ebx + ebx*2]
shl eax, 0x12
add eax, 0xffff4900
mov dword [ebp - 0x28], eax
push eax
push 0x4d0c
push 0x2d28
push 0x179a
call fcn.0040589c
mov dword [ebp - 0x28], ebx
add esp, 0x34
pop esi
pop edi
pop ebx
pop ebp
ret