Function at 0x406da0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xb8
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x14], eax
mov esi, dword [ebp + 0x14]
mov edi, dword [ebp + 0x10]
mov ebx, dword [ebp + 0xc]
call sub.msvcrt.dll__errno
mov eax, dword [eax]
mov dword [esp + 0x7c], eax
mov eax, 0x6000
and eax, dword [ebp + 8]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], 0xffffffff
mov dword [esp + 0x30], 0xffffffff
mov dword [esp + 0x34], 0xfffffffd
mov word [esp + 0x38], 0
mov dword [esp + 0x3c], 0
mov word [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], edi
mov dword [esp + 0x4c], 0xffffffff
mov dword [esp + 0x74], eax
add eax, 0x200
mov dword [esp + 0x78], eax
jmp 0x406e43
movsx eax, al
mov dword [esp + 4], ecx
mov dword [esp], eax
call sub.msvcrt.dll_fputc
inc dword [esp + 0x44]
inc esi
movzx eax, byte [esi - 1]
test eax, eax
je 0x407974
cmp eax, 0x25
je 0x406e84
mov edx, dword [esp + 0x28]
test edx, 0x4000
jne 0x406e6b
mov ecx, dword [esp + 0x48]
cmp ecx, dword [esp + 0x44]
jle 0x406e7e
mov ecx, dword [esp + 0x24]
test edx, 0x2000
jne 0x406e30
mov edx, dword [esp + 0x44]
mov byte [ecx + edx], al
inc dword [esp + 0x44]
jmp 0x406e43
mov eax, dword [esp + 0x74]
mov dword [esp + 0x28], eax
mov dword [esp + 0x30], 0xffffffff
mov dword [esp + 0x2c], 0xffffffff
movzx ecx, byte [esi]
test cl, cl
je 0x407161
mov dword [esp + 0x1c], 0
lea eax, [esp + 0x2c]
mov dword [esp + 0x20], eax
mov edi, esi
xor edx, edx
nop dword [eax + eax]
lea eax, [edi + 1]
mov dword [esp + 0x10], eax
movsx ecx, cl
lea ebx, [ecx - 0x20]
cmp ebx, 0x5a
ja case.0x406edb.33
mov eax, 4
jmp dword [ebx*4 + 0x40dddc]
mov dword [esp + 0x1c], 0
jmp 0x407100
test edx, edx
jne 0x406fd1
or byte [esp + 0x28], 0x40
jmp 0x4070f1
test edx, edx
jne 0x406fd1
or byte [esp + 0x29], 8
jmp 0x4070f1
test edx, edx
jne 0x406fd1
or byte [esp + 0x29], 0x10
mov dword [esp + 0x60], 0
call sub.msvcrt.dll_localeconv
mov eax, dword [eax + 4]
lea ecx, [esp + 0x60]
mov dword [esp + 0xc], ecx
mov dword [esp + 4], eax
lea eax, [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 8], 0x10
call fcn.004095b0
test eax, eax
mov ebx, dword [esp + 0x10]
jle 0x406f62
movzx ecx, word [esp + 0x18]
mov word [esp + 0x40], cx
mov dword [esp + 0x3c], eax
xor eax, eax
jmp 0x407104
mov edi, dword [esp + 0x20]
test edi, edi
je 0x407055
test edx, 0xfffffffd
mov ebx, dword [esp + 0x10]
jne 0x407142
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
add ecx, 4
mov dword [edi], eax
test eax, eax
mov dword [esp + 0x14], ecx
jns 0x406fac
test edx, edx
je 0x40714c
mov dword [esp + 0x30], 0xffffffff
mov eax, edx
mov dword [esp + 0x20], 0
jmp 0x407104
test edx, edx
jne 0x406fd1
or byte [esp + 0x29], 1
jmp 0x4070f1
test edx, edx
je 0x4070e5
mov eax, edx
jmp 0x407100
cmp edx, 1
ja 0x407100
mov dword [esp + 0x30], 0
mov eax, 2
lea ecx, [esp + 0x30]
mov dword [esp + 0x20], ecx
jmp 0x407100
test edx, edx
je 0x4070ec
cmp edx, 3
ja 0x4071db
mov eax, ecx
add al, 0xd0
cmp al, 9
ja 0x4071db
cmp edx, 2
mov eax, edx
mov edi, 3
cmove eax, edi
test edx, edx
mov edx, 1
cmove eax, edx
mov edi, dword [esp + 0x20]
test edi, edi
je 0x407055
mov edx, dword [edi]
test edx, edx
mov ebx, dword [esp + 0x10]
js 0x407115
lea edx, [edx + edx*4]
lea ecx, [ecx + edx*2]
add ecx, 0xffffffd0
mov dword [edi], ecx
jmp 0x407104
mov dword [esp + 0x20], 0
jmp 0x407100
mov ebx, dword [esp + 0x10]
movzx ecx, byte [ebx]
cmp ecx, 0x33
je 0x40711c
cmp ecx, 0x36
jne 0x407138
lea eax, [edi + 3]
xor ecx, ecx
cmp byte [edi + 2], 0x34
sete cl
lea ecx, [ecx + ecx*2]
mov dword [esp + 0x1c], ecx
cmove ebx, eax
mov eax, 4
jmp 0x407104
or byte [esp + 0x28], 4
jmp 0x407100
lea ecx, [edi + 2]
xor edx, edx
cmp byte [edi + 1], 0x68
sete dl
lea edx, [edx*4 + 1]
mov dword [esp + 0x1c], edx
mov ebx, dword [esp + 0x10]
cmove ebx, ecx
jmp 0x407104
mov dword [esp + 0x1c], 3
jmp 0x407100
lea ecx, [edi + 2]
xor edx, edx
cmp byte [edi + 1], 0x6c
sete dl
mov ebx, dword [esp + 0x10]
cmove ebx, ecx
or edx, 2
mov dword [esp + 0x1c], edx
jmp 0x407104
or byte [esp + 0x29], 4
jmp 0x4070f1
or byte [esp + 0x29], 2
xor eax, eax
nop word cs:[eax + eax]
mov ebx, dword [esp + 0x10]
movzx ecx, byte [ebx]
mov edi, ebx
mov edx, eax
test cl, cl
jne 0x406ec0
jmp 0x407163
add ecx, 0xffffffd0
mov dword [edi], ecx
jmp 0x407104
lea eax, [edi + 3]
xor ecx, ecx
cmp byte [edi + 2], 0x32
sete cl
cmove ebx, eax
add ecx, ecx
mov dword [esp + 0x1c], ecx
mov eax, 4
jmp 0x407104
mov dword [esp + 0x1c], 0
jmp 0x407107
mov dword [esp + 0x20], 0
jmp 0x407104
or byte [esp + 0x29], 4
neg dword [esp + 0x2c]
xor eax, eax
mov dword [esp + 0x20], 0
jmp 0x407104
mov ebx, esi
mov esi, ebx
jmp 0x406e43
and byte [esp + 0x29], 0xfe
mov edi, dword [esp + 0x1c]
cmp edi, 2
je 0x407210
cmp edi, 3
mov edx, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
jne 0x40722e
movsd xmm0, qword [edx]
add edx, 8
movsd qword [esp + 0x50], xmm0
jmp 0x407788
or byte [esp + 0x28], 0x80
mov edi, dword [esp + 0x1c]
cmp edi, 2
je 0x4075a1
cmp edi, 3
mov edx, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
jne 0x4075c2
mov ecx, dword [edx]
mov eax, dword [edx + 4]
add edx, 8
mov dword [esp + 0x54], eax
mov dword [esp + 0x50], ecx
mov dword [esp + 0x14], edx
jmp 0x40785b
mov eax, dword [esp + 0x28]
test eax, 0x4000
jne 0x4071f0
mov ecx, dword [esp + 0x48]
cmp ecx, dword [esp + 0x44]
jle 0x407207
mov ecx, dword [esp + 0x24]
test eax, 0x2000
jne 0x4075f2
mov eax, dword [esp + 0x44]
mov byte [ecx + eax], 0x25
inc dword [esp + 0x44]
jmp 0x406e43
mov edx, dword [esp + 0x14]
mov eax, dword [edx]
add edx, 4
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], 0
mov esi, dword [esp + 0x10]
jmp 0x407788
mov eax, dword [edx]
add edx, 4
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], 0
cmp edi, 5
je 0x407779
cmp edi, 1
jne 0x407788
movzx eax, ax
jmp 0x40777c
mov eax, dword [esp + 0x28]
test eax, 0x4000
mov esi, dword [esp + 0x10]
jne 0x407272
mov ecx, dword [esp + 0x48]
cmp ecx, dword [esp + 0x44]
jle 0x407289
mov ecx, dword [esp + 0x24]
test eax, 0x2000
jne 0x4077ac
mov eax, dword [esp + 0x44]
mov byte [ecx + eax], 0x25
inc dword [esp + 0x44]
jmp 0x406e43
mov eax, dword [esp + 0x28]
jmp 0x4072d4
mov dword [esp + 0x30], 0xffffffff
jmp 0x40735c
mov eax, dword [esp + 0x28]
jmp 0x40738d
mov eax, dword [esp + 0x28]
jmp 0x4073b2
mov eax, dword [esp + 0x28]
jmp 0x4073d7
mov eax, dword [esp + 0x30]
jmp 0x4074c1
mov eax, dword [esp + 0x28]
or eax, 0x20
mov dword [esp + 0x28], eax
test al, 4
mov ebx, dword [esp + 0x14]
jne 0x4074ee
movsd xmm0, qword [ebx]
add ebx, 8
movsd qword [esp + 0xa8], xmm0
fld qword [esp + 0xa8]
fld st(0)
fstp xword [esp + 0x80]
fxam
wait
fnstsw ax
fstp st(0)
and eax, 0x4500
cmp eax, 0x100
mov dword [esp + 0x14], ebx
jne 0x407628
mov dword [esp + 0x30], 0xffffffff
mov eax, dword [esp + 0x28]
test eax, 0x100
jne 0x40775a
test al, 0x40
je 0x40754a
mov byte [esp + 0x18], 0x20
jmp 0x40775f
mov dword [esp + 0x30], 0xffffffff
mov eax, dword [esp + 0x1c]
and eax, 0xfffffffe
cmp eax, 2
jne 0x4076a2
mov esi, dword [esp + 0x14]
movzx eax, word [esi]
mov word [esp + 0x60], ax
lea eax, [esp + 0x24]
mov dword [esp], eax
lea ecx, [esp + 0x60]
mov edx, 1
call fcn.00407980
jmp 0x4076c2
mov eax, dword [esp + 0x28]
or eax, 0x20
mov dword [esp + 0x28], eax
test al, 4
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
jne 0x407553
fld qword [eax]
add eax, 8
jmp 0x407558
mov eax, dword [esp + 0x28]
or eax, 0x20
mov dword [esp + 0x28], eax
test al, 4
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
jne 0x40756d
fld qword [eax]
add eax, 8
jmp 0x407572
mov eax, dword [esp + 0x28]
or eax, 0x20
mov dword [esp + 0x28], eax
test al, 4
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
jne 0x407587
fld qword [eax]
add eax, 8
jmp 0x40758c
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call sub.msvcrt.dll_strerror
test eax, eax
mov esi, str._null_
cmovne esi, eax
mov eax, dword [esp + 0x30]
test eax, eax
js 0x4077c5
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.00409820
jmp 0x4077cd
mov eax, dword [esp + 0x1c]
dec eax
cmp eax, 4
ja case.0x40742e.2
jmp dword [eax*4 + 0x40df48]
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x14]
mov ecx, dword [edx]
mov dword [ecx], eax
jmp 0x4078ae
test edx, edx
jne 0x407464
mov eax, dword [esp + 0x74]
cmp dword [esp + 0x28], eax
jne 0x407464
mov eax, dword [esp + 0x78]
mov dword [esp + 0x28], eax
mov dword [esp + 0x30], 8
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
add ecx, 4
mov dword [esp + 0x14], ecx
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x58], 0
movups xmm0, xmmword [esp + 0x50]
movups xmmword [esp], xmm0
lea edx, [esp + 0x24]
mov ecx, pe_nt_image_headers32
call fcn.00407fa0
mov esi, dword [esp + 0x10]
jmp 0x406e43
mov ecx, dword [esp + 0x1c]
and ecx, 0xfffffffe
mov eax, dword [esp + 0x30]
cmp ecx, 2
jne 0x4076d2
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x10]
mov ecx, dword [edi]
test ecx, ecx
mov esi, 0x40df5c
cmovne esi, ecx
test eax, eax
js 0x40760b
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.00409860
jmp 0x407613
fld xword [ebx]
add ebx, 0xc
fld st(0)
fstp xword [esp + 0x90]
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x94]
fld st(0)
fstp xword [esp + 0x60]
fxam
wait
fnstsw ax
and eax, 0x4500
cmp eax, 0x100
mov dword [esp + 0x14], ebx
jne 0x4076ff
fstp st(0)
mov dword [esp + 0x30], 0xffffffff
mov eax, dword [esp + 0x28]
test eax, 0x100
jne 0x40775a
test al, 0x40
jne 0x40733a
lea edx, [esp + 0x18]
jmp 0x407763
fld xword [eax]
add eax, 0xc
mov dword [esp + 0x14], eax
fstp xword [esp]
lea ecx, [esp + 0x24]
call fcn.00408300
jmp 0x406e43
fld xword [eax]
add eax, 0xc
mov dword [esp + 0x14], eax
fstp xword [esp]
lea ecx, [esp + 0x24]
call fcn.004084a0
jmp 0x406e43
fld xword [eax]
add eax, 0xc
mov dword [esp + 0x14], eax
fstp xword [esp]
lea ecx, [esp + 0x24]
call fcn.00408680
jmp 0x406e43
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
add ecx, 4
mov dword [esp + 0x14], ecx
mov dword [esp + 0x50], eax
sar eax, 0x1f
mov dword [esp + 0x54], eax
mov esi, dword [esp + 0x10]
jmp 0x40785b
mov ecx, dword [edx]
add edx, 4
mov eax, ecx
sar eax, 0x1f
mov dword [esp + 0x50], ecx
mov dword [esp + 0x54], eax
cmp edi, 5
mov dword [esp + 0x14], edx
je 0x40784d
cmp edi, 1
jne 0x40785b
movsx eax, cx
jmp 0x407850
mov dword [esp + 4], ecx
mov dword [esp], 0x25
call sub.msvcrt.dll_fputc
inc dword [esp + 0x44]
jmp 0x406e43
mov dword [esp], esi
call sub.msvcrt.dll_wcslen
mov edx, eax
lea eax, [esp + 0x24]
mov dword [esp], eax
mov ecx, esi
call fcn.00407980
jmp 0x4078d6
mov edx, dword [esp + 0x80]
mov esi, dword [esp + 0x84]
movsx ecx, word [esp + 0x88]
mov edi, ecx
sar edi, 0x1f
jns 0x40764a
or byte [esp + 0x28], 0x80
movsd qword [esp + 0xa0], xmm0
fld qword [esp + 0xa0]
fxam
wait
fnstsw ax
fstp st(0)
and eax, 0x4500
cmp eax, 0x500
jne 0x4077e8
mov dword [esp + 0x30], 0xffffffff
test edi, edi
js 0x4078e4
mov eax, dword [esp + 0x28]
test eax, 0x100
jne 0x4078ef
test al, 0x40
je 0x407751
mov byte [esp + 0x18], 0x20
jmp 0x4078f4
mov esi, dword [esp + 0x14]
movzx eax, byte [esi]
mov byte [esp + 0x50], al
lea eax, [esp + 0x24]
mov dword [esp], eax
lea ecx, [esp + 0x50]
mov edx, 1
call fcn.00407b00
add esi, 4
mov dword [esp + 0x14], esi
mov esi, dword [esp + 0x10]
jmp 0x406e43
mov edi, dword [esp + 0x14]
mov ecx, dword [edi]
test ecx, ecx
mov esi, str._null_
cmovne esi, ecx
test eax, eax
mov ebx, dword [esp + 0x10]
js 0x4078be
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.00409820
jmp 0x4078c6
movsx esi, word [esp + 0x98]
mov edi, esi
sar edi, 0x1f
jns 0x407713
or byte [esp + 0x28], 0x80
fxam
wait
fnstsw ax
fstp st(0)
and eax, 0x4500
cmp eax, 0x500
jne 0x407830
mov dword [esp + 0x30], 0xffffffff
test edi, edi
js 0x4078e4
mov eax, dword [esp + 0x28]
test eax, 0x100
jne 0x4078ef
test al, 0x40
jne 0x407698
lea edx, [esp + 0x18]
jmp 0x4078f8
mov byte [esp + 0x18], 0x2b
lea edx, [esp + 0x19]
and al, 0x20
mov ecx, eax
or cl, 0x4e
mov byte [edx], cl
or al, 0x41
mov byte [edx + 1], al
mov byte [edx + 2], cl
jmp 0x40790e
movzx eax, al
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], 0
mov dword [esp + 0x14], edx
cmp cl, 0x75
je 0x407866
movups xmm0, xmmword [esp + 0x50]
movups xmmword [esp], xmm0
lea edx, [esp + 0x24]
call fcn.00407fa0
jmp 0x406e43
mov dword [esp + 4], ecx
mov dword [esp], 0x25
call sub.msvcrt.dll_fputc
inc dword [esp + 0x44]
jmp 0x406e43
mov dword [esp], esi
call sub.msvcrt.dll_strlen
mov edi, dword [esp + 0x10]
lea ecx, [esp + 0x24]
mov dword [esp], ecx
mov ecx, esi
mov edx, eax
call fcn.00407b00
mov esi, edi
jmp 0x406e43
and ecx, 0x7fff
mov eax, ecx
dec eax
movzx eax, ax
cmp eax, 0x3bff
ja 0x407817
movzx eax, cx
mov ecx, 0x3c01
sub ecx, eax
shrd edx, esi, cl
shr esi, cl
xor edi, edi
test cl, 0x20
cmovne edx, esi
cmovne esi, edi
add ecx, eax
mov word [esp + 0x68], cx
test cx, cx
je 0x40792c
add ecx, 0xffffc004
jmp 0x407936
and si, 0x7fff
mov word [esp + 0x68], si
je 0x40794c
movzx eax, si
add eax, 0xffffc001
jmp 0x407954
movsx eax, cl
mov dword [esp + 0x50], eax
sar eax, 0x1f
mov dword [esp + 0x54], eax
sar eax, 0x1f
mov dword [esp + 0x5c], eax
mov dword [esp + 0x58], eax
movups xmm0, xmmword [esp + 0x50]
movups xmmword [esp], xmm0
lea ecx, [esp + 0x24]
call fcn.00407c20
jmp 0x406e43
movzx eax, word [esp + 0x44]
mov edx, dword [esp + 0x14]
mov ecx, dword [edx]
mov word [ecx], ax
jmp 0x4078ae
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x14]
mov ecx, dword [edx]
mov dword [ecx], eax
sar eax, 0x1f
mov dword [ecx + 4], eax
jmp 0x4078ae
movzx eax, byte [esp + 0x44]
mov edx, dword [esp + 0x14]
mov ecx, dword [edx]
mov byte [ecx], al
add edx, 4
mov dword [esp + 0x14], edx
mov esi, dword [esp + 0x10]
jmp 0x406e43
mov dword [esp], esi
call sub.msvcrt.dll_strlen
mov edx, eax
lea eax, [esp + 0x24]
mov dword [esp], eax
mov ecx, esi
call fcn.00407b00
add edi, 4
mov dword [esp + 0x14], edi
mov esi, ebx
jmp 0x406e43
mov byte [esp + 0x18], 0x2d
mov eax, dword [esp + 0x28]
jmp 0x4078f4
mov byte [esp + 0x18], 0x2b
lea edx, [esp + 0x19]
and al, 0x20
mov ecx, eax
or cl, 0x49
mov byte [edx], cl
mov ecx, eax
or cl, 0x4e
mov byte [edx + 1], cl
or al, 0x46
mov byte [edx + 2], al
lea ecx, [esp + 0x18]
sub edx, ecx
add edx, 3
lea eax, [esp + 0x24]
mov dword [esp], eax
call fcn.00407b00
mov esi, dword [esp + 0x10]
jmp 0x406e43
mov cx, 0xfc05
mov eax, edx
or eax, esi
je 0x40793b
mov word [esp + 0x68], cx
shrd edx, esi, 3
shr esi, 3
mov dword [esp + 0x64], esi
mov dword [esp + 0x60], edx
jmp 0x407959
mov ax, 0xc002
or ecx, edx
je 0x407959
mov word [esp + 0x68], ax
movups xmm0, xmmword [esp + 0x60]
movups xmmword [esp], xmm0
lea ecx, [esp + 0x24]
call fcn.00409010
mov esi, dword [esp + 0x10]
jmp 0x406e43
mov eax, dword [esp + 0x44]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret