Function at 0x406d20
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x8c
mov eax, dword [0x42c008]
xor eax, esp
mov dword [esp + 0x88], eax
mov edx, dword [esp + 0x9c]
xor eax, eax
push ebx
mov ebx, dword [esp + 0x98]
push ebp
mov ebp, dword [esp + 0xac]
push edi
mov edi, dword [esp + 0xac]
mov dword [esp + 0x40], ebx
mov dword [esp + 0x3c], edx
mov dword [esp + 0x48], edi
mov dword [esp + 0x20], ebp
cmp eax, 0x20
jae 0x4071c7
xor ecx, ecx
mov word [esp + eax + 0x54], cx
add eax, 2
cmp eax, 0x1e
jbe 0x406d65
push esi
mov esi, dword [esp + 0xa8]
test esi, esi
je 0x406d9e
nop dword [eax]
movzx eax, word [ebx + ecx*2]
inc ecx
inc word [esp + eax*2 + 0x58]
cmp ecx, esi
jb 0x406d90
mov ecx, dword [edi]
lea eax, [esp + 0x72]
mov edi, 0xf
nop dword [eax]
cmp word [eax + 4], 0
jne 0x406def
cmp word [eax + 2], 0
jne 0x406dee
cmp word [eax], 0
jne 0x406de9
cmp word [eax - 2], 0
jne 0x406de4
cmp word [eax - 4], 0
jne 0x406ddf
sub edi, 5
sub eax, 0xa
cmp edi, 1
jae 0x406db0
jmp 0x406def
sub edi, 4
jmp 0x406def
sub edi, 3
jmp 0x406def
sub edi, 2
jmp 0x406def
dec edi
cmp ecx, edi
cmova ecx, edi
test edi, edi
jne 0x406e37
mov ecx, dword [edx]
mov dword [esp + 0x10], 0x140
mov eax, dword [esp + 0x10]
mov dword [ecx], eax
add dword [edx], 4
mov ecx, dword [edx]
mov dword [ecx], eax
mov ecx, dword [esp + 0x4c]
add dword [edx], 4
mov dword [ecx], 1
xor eax, eax
mov ecx, dword [esp + 0x98]
pop esi
pop edi
pop ebp
pop ebx
xor ecx, esp
call fcn.00407600
add esp, 0x8c
ret
mov ebx, 1
mov dword [esp + 0x20], ebx
cmp edi, ebx
jbe 0x406e55
cmp word [esp + ebx*2 + 0x58], 0
jne 0x406e51
inc ebx
cmp ebx, edi
jb 0x406e44
mov dword [esp + 0x20], ebx
cmp ecx, ebx
mov edx, 1
cmovb ecx, ebx
mov dword [esp + 0x28], ecx
mov ecx, edx
movzx eax, word [esp + ecx*2 + 0x58]
add edx, edx
sub edx, eax
js 0x4071bf
inc ecx
cmp ecx, 0xf
jbe 0x406e65
test edx, edx
mov edx, dword [esp + 0xa0]
jle 0x406e96
test edx, edx
je 0x4071bf
cmp edi, 1
jne 0x4071bf
xor eax, eax
mov ecx, 2
mov word [esp + 0x7a], ax
nop dword [eax]
nop word [eax + eax]
mov ax, word [esp + ecx + 0x78]
add ax, word [esp + ecx + 0x58]
mov word [esp + ecx + 0x7a], ax
add ecx, 2
cmp ecx, 0x1e
jb 0x406eb0
xor ecx, ecx
test esi, esi
je 0x406ef6
mov ebx, dword [esp + 0x44]
movzx eax, word [ebx + ecx*2]
test ax, ax
je 0x406eed
movzx eax, word [esp + eax*2 + 0x78]
mov word [ebp + eax*2], cx
movzx eax, word [ebx + ecx*2]
inc word [esp + eax*2 + 0x78]
inc ecx
cmp ecx, esi
jb 0x406ed1
mov ebx, dword [esp + 0x20]
mov eax, edx
sub eax, 0
je 0x406f42
sub eax, 1
je 0x406f1b
or eax, 0xffffffff
mov dword [esp + 0x34], 0x424338
mov dword [esp + 0x30], 0x424378
mov dword [esp + 0x2c], eax
jmp 0x406f52
mov eax, 0x4242b8
sub eax, 0x202
mov dword [esp + 0x34], eax
mov eax, 0x4242f8
sub eax, 0x202
mov dword [esp + 0x30], eax
mov eax, 0x100
mov dword [esp + 0x2c], eax
jmp 0x406f52
mov dword [esp + 0x30], ebp
mov dword [esp + 0x34], ebp
mov dword [esp + 0x2c], 0x13
mov ecx, dword [esp + 0x40]
mov edx, 1
mov dword [esp + 0x1c], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x48], 0xffffffff
mov eax, dword [ecx]
mov ecx, dword [esp + 0x28]
shl edx, cl
mov esi, edx
mov dword [esp + 0x18], eax
mov dword [esp + 0x38], edx
mov dword [esp + 0x3c], esi
lea eax, [esi - 1]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0xa0]
cmp eax, 1
jne 0x406fa6
cmp esi, 0x354
ja 0x406fb3
jmp 0x406fd0
cmp eax, 2
jne 0x406fd0
cmp esi, 0x250
jbe 0x406fd0
mov eax, 1
jmp 0x406e1e
mov edx, dword [esp + 0x38]
jmp 0x406fd0
mov ebp, dword [esp + 0x24]
nop word [eax + eax]
mov al, bl
sub al, byte [esp + 0x14]
mov byte [esp + 0x11], al
movzx eax, word [ebp]
mov ebp, dword [esp + 0x2c]
mov ecx, eax
cmp ecx, ebp
jge 0x406fef
mov byte [esp + 0x10], 0
jmp 0x40700d
jle 0x407006
mov eax, dword [esp + 0x30]
mov al, byte [eax + ecx*2]
mov byte [esp + 0x10], al
mov eax, dword [esp + 0x34]
mov ax, word [eax + ecx*2]
jmp 0x40700d
mov byte [esp + 0x10], 0x60
xor eax, eax
mov word [esp + 0x12], ax
mov ecx, ebx
sub ecx, dword [esp + 0x14]
mov esi, 1
mov eax, dword [esp + 0x1c]
shl esi, cl
mov ecx, dword [esp + 0x14]
shr eax, cl
mov ecx, dword [esp + 0x18]
add eax, edx
mov dword [esp + 0x54], edx
lea ebp, [esi*4]
lea ecx, [ecx + eax*4]
mov eax, dword [esp + 0x10]
sub ecx, ebp
mov dword [ecx], eax
sub edx, esi
jne 0x407041
lea ecx, [ebx - 1]
mov edx, 1
shl edx, cl
mov ecx, dword [esp + 0x1c]
test ecx, edx
je 0x407066
nop dword [eax + eax]
shr edx, 1
test ecx, edx
jne 0x407060
test edx, edx
je 0x407073
lea eax, [edx - 1]
and eax, ecx
add edx, eax
jmp 0x407075
xor edx, edx
mov ebp, dword [esp + 0x24]
mov eax, 0xffff
add ebp, 2
mov dword [esp + 0x1c], edx
add word [esp + ebx*2 + 0x58], ax
mov dword [esp + 0x24], ebp
jne 0x4070a8
cmp ebx, edi
je 0x407180
movzx eax, word [ebp]
mov ecx, dword [esp + 0x44]
movzx ebx, word [ecx + eax*2]
mov dword [esp + 0x20], ebx
mov eax, dword [esp + 0x28]
cmp ebx, eax
jbe 0x406fc0
mov ebp, dword [esp + 0x50]
and ebp, edx
mov edx, dword [esp + 0x38]
cmp ebp, dword [esp + 0x48]
je 0x406fc6
mov edx, dword [esp + 0x14]
test edx, edx
mov ecx, dword [esp + 0x18]
cmove edx, eax
mov eax, dword [esp + 0x54]
sub ebx, edx
mov dword [esp + 0x14], edx
add edx, ebx
lea ecx, [ecx + eax*4]
mov eax, 1
mov dword [esp + 0x18], ecx
mov ecx, ebx
shl eax, cl
cmp edx, edi
jae 0x407114
lea esi, [esp + 0x58]
lea esi, [esi + edx*2]
nop dword [eax]
movzx ecx, word [esi]
sub eax, ecx
test eax, eax
jle 0x407114
inc edx
inc ebx
add esi, 2
add eax, eax
cmp edx, edi
jb 0x407100
mov esi, dword [esp + 0x3c]
mov edx, 1
mov eax, dword [esp + 0xa0]
mov ecx, ebx
shl edx, cl
add esi, edx
mov dword [esp + 0x38], edx
mov dword [esp + 0x3c], esi
cmp eax, 1
jne 0x40713f
cmp esi, 0x354
jmp 0x40714a
cmp eax, 2
jne 0x407150
cmp esi, 0x250
ja 0x406fb3
mov esi, dword [esp + 0x40]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x48], ebp
mov eax, dword [esi]
mov byte [eax + ebp*4], bl
mov eax, dword [esi]
mov ebx, dword [esp + 0x20]
mov byte [eax + ebp*4 + 1], cl
mov ecx, dword [esi]
mov eax, dword [esp + 0x18]
sub eax, ecx
sar eax, 2
mov word [ecx + ebp*4 + 2], ax
jmp 0x406fc6
test edx, edx
je 0x4071a3
sub bl, byte [esp + 0x14]
xor eax, eax
mov ecx, dword [esp + 0x18]
mov byte [esp + 0x10], 0x40
mov byte [esp + 0x11], bl
mov word [esp + 0x12], ax
mov eax, dword [esp + 0x10]
mov dword [ecx + edx*4], eax
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x3c]
shl eax, 2
add dword [ecx], eax
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0x28]
mov dword [ecx], eax
jmp 0x406e1c
or eax, 0xffffffff
jmp 0x406e1e
call fcn.00407a4d
int3