Function at 0x406e80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x8c
mov eax, dword [0x42c008]
xor eax, esp
mov dword [esp + 0x88], eax
mov edx, dword [esp + 0x9c]
xor eax, eax
push ebx
mov ebx, dword [esp + 0x98]
push ebp
mov ebp, dword [esp + 0xac]
push edi
mov edi, dword [esp + 0xac]
mov dword [esp + 0x40], ebx
mov dword [esp + 0x3c], edx
mov dword [esp + 0x48], edi
mov dword [esp + 0x20], ebp
cmp eax, 0x20
jae 0x407327
xor ecx, ecx
mov word [esp + eax + 0x54], cx
add eax, 2
cmp eax, 0x1e
jbe 0x406ec5
push esi
mov esi, dword [esp + 0xa8]
test esi, esi
je 0x406efe
nop dword [eax]
movzx eax, word [ebx + ecx*2]
inc ecx
inc word [esp + eax*2 + 0x58]
cmp ecx, esi
jb 0x406ef0
mov ecx, dword [edi]
lea eax, [esp + 0x72]
mov edi, 0xf
nop dword [eax]
cmp word [eax + 4], 0
jne 0x406f4f
cmp word [eax + 2], 0
jne 0x406f4e
cmp word [eax], 0
jne 0x406f49
cmp word [eax - 2], 0
jne 0x406f44
cmp word [eax - 4], 0
jne 0x406f3f
sub edi, 5
sub eax, 0xa
cmp edi, 1
jae 0x406f10
jmp 0x406f4f
sub edi, 4
jmp 0x406f4f
sub edi, 3
jmp 0x406f4f
sub edi, 2
jmp 0x406f4f
dec edi
cmp ecx, edi
cmova ecx, edi
test edi, edi
jne 0x406f97
mov ecx, dword [edx]
mov dword [esp + 0x10], 0x140
mov eax, dword [esp + 0x10]
mov dword [ecx], eax
add dword [edx], 4
mov ecx, dword [edx]
mov dword [ecx], eax
mov ecx, dword [esp + 0x4c]
add dword [edx], 4
mov dword [ecx], 1
xor eax, eax
mov ecx, dword [esp + 0x98]
pop esi
pop edi
pop ebp
pop ebx
xor ecx, esp
call fcn.00407760
add esp, 0x8c
ret
mov ebx, 1
mov dword [esp + 0x20], ebx
cmp edi, ebx
jbe 0x406fb5
cmp word [esp + ebx*2 + 0x58], 0
jne 0x406fb1
inc ebx
cmp ebx, edi
jb 0x406fa4
mov dword [esp + 0x20], ebx
cmp ecx, ebx
mov edx, 1
cmovb ecx, ebx
mov dword [esp + 0x28], ecx
mov ecx, edx
movzx eax, word [esp + ecx*2 + 0x58]
add edx, edx
sub edx, eax
js 0x40731f
inc ecx
cmp ecx, 0xf
jbe 0x406fc5
test edx, edx
mov edx, dword [esp + 0xa0]
jle 0x406ff6
test edx, edx
je 0x40731f
cmp edi, 1
jne 0x40731f
xor eax, eax
mov ecx, 2
mov word [esp + 0x7a], ax
nop dword [eax]
nop word [eax + eax]
mov ax, word [esp + ecx + 0x78]
add ax, word [esp + ecx + 0x58]
mov word [esp + ecx + 0x7a], ax
add ecx, 2
cmp ecx, 0x1e
jb 0x407010
xor ecx, ecx
test esi, esi
je 0x407056
mov ebx, dword [esp + 0x44]
movzx eax, word [ebx + ecx*2]
test ax, ax
je 0x40704d
movzx eax, word [esp + eax*2 + 0x78]
mov word [ebp + eax*2], cx
movzx eax, word [ebx + ecx*2]
inc word [esp + eax*2 + 0x78]
inc ecx
cmp ecx, esi
jb 0x407031
mov ebx, dword [esp + 0x20]
mov eax, edx
sub eax, 0
je 0x4070a2
sub eax, 1
je 0x40707b
or eax, 0xffffffff
mov dword [esp + 0x34], 0x4243c8
mov dword [esp + 0x30], 0x424408
mov dword [esp + 0x2c], eax
jmp 0x4070b2
mov eax, 0x424348
sub eax, 0x202
mov dword [esp + 0x34], eax
mov eax, 0x424388
sub eax, 0x202
mov dword [esp + 0x30], eax
mov eax, 0x100
mov dword [esp + 0x2c], eax
jmp 0x4070b2
mov dword [esp + 0x30], ebp
mov dword [esp + 0x34], ebp
mov dword [esp + 0x2c], 0x13
mov ecx, dword [esp + 0x40]
mov edx, 1
mov dword [esp + 0x1c], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x48], 0xffffffff
mov eax, dword [ecx]
mov ecx, dword [esp + 0x28]
shl edx, cl
mov esi, edx
mov dword [esp + 0x18], eax
mov dword [esp + 0x38], edx
mov dword [esp + 0x3c], esi
lea eax, [esi - 1]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0xa0]
cmp eax, 1
jne 0x407106
cmp esi, 0x354
ja 0x407113
jmp 0x407130
cmp eax, 2
jne 0x407130
cmp esi, 0x250
jbe 0x407130
mov eax, 1
jmp 0x406f7e
mov edx, dword [esp + 0x38]
jmp 0x407130
mov ebp, dword [esp + 0x24]
nop word [eax + eax]
mov al, bl
sub al, byte [esp + 0x14]
mov byte [esp + 0x11], al
movzx eax, word [ebp]
mov ebp, dword [esp + 0x2c]
mov ecx, eax
cmp ecx, ebp
jge 0x40714f
mov byte [esp + 0x10], 0
jmp 0x40716d
jle 0x407166
mov eax, dword [esp + 0x30]
mov al, byte [eax + ecx*2]
mov byte [esp + 0x10], al
mov eax, dword [esp + 0x34]
mov ax, word [eax + ecx*2]
jmp 0x40716d
mov byte [esp + 0x10], 0x60
xor eax, eax
mov word [esp + 0x12], ax
mov ecx, ebx
sub ecx, dword [esp + 0x14]
mov esi, 1
mov eax, dword [esp + 0x1c]
shl esi, cl
mov ecx, dword [esp + 0x14]
shr eax, cl
mov ecx, dword [esp + 0x18]
add eax, edx
mov dword [esp + 0x54], edx
lea ebp, [esi*4]
lea ecx, [ecx + eax*4]
mov eax, dword [esp + 0x10]
sub ecx, ebp
mov dword [ecx], eax
sub edx, esi
jne 0x4071a1
lea ecx, [ebx - 1]
mov edx, 1
shl edx, cl
mov ecx, dword [esp + 0x1c]
test ecx, edx
je 0x4071c6
nop dword [eax + eax]
shr edx, 1
test ecx, edx
jne 0x4071c0
test edx, edx
je 0x4071d3
lea eax, [edx - 1]
and eax, ecx
add edx, eax
jmp 0x4071d5
xor edx, edx
mov ebp, dword [esp + 0x24]
mov eax, 0xffff
add ebp, 2
mov dword [esp + 0x1c], edx
add word [esp + ebx*2 + 0x58], ax
mov dword [esp + 0x24], ebp
jne 0x407208
cmp ebx, edi
je 0x4072e0
movzx eax, word [ebp]
mov ecx, dword [esp + 0x44]
movzx ebx, word [ecx + eax*2]
mov dword [esp + 0x20], ebx
mov eax, dword [esp + 0x28]
cmp ebx, eax
jbe 0x407120
mov ebp, dword [esp + 0x50]
and ebp, edx
mov edx, dword [esp + 0x38]
cmp ebp, dword [esp + 0x48]
je 0x407126
mov edx, dword [esp + 0x14]
test edx, edx
mov ecx, dword [esp + 0x18]
cmove edx, eax
mov eax, dword [esp + 0x54]
sub ebx, edx
mov dword [esp + 0x14], edx
add edx, ebx
lea ecx, [ecx + eax*4]
mov eax, 1
mov dword [esp + 0x18], ecx
mov ecx, ebx
shl eax, cl
cmp edx, edi
jae 0x407274
lea esi, [esp + 0x58]
lea esi, [esi + edx*2]
nop dword [eax]
movzx ecx, word [esi]
sub eax, ecx
test eax, eax
jle 0x407274
inc edx
inc ebx
add esi, 2
add eax, eax
cmp edx, edi
jb 0x407260
mov esi, dword [esp + 0x3c]
mov edx, 1
mov eax, dword [esp + 0xa0]
mov ecx, ebx
shl edx, cl
add esi, edx
mov dword [esp + 0x38], edx
mov dword [esp + 0x3c], esi
cmp eax, 1
jne 0x40729f
cmp esi, 0x354
jmp 0x4072aa
cmp eax, 2
jne 0x4072b0
cmp esi, 0x250
ja 0x407113
mov esi, dword [esp + 0x40]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x48], ebp
mov eax, dword [esi]
mov byte [eax + ebp*4], bl
mov eax, dword [esi]
mov ebx, dword [esp + 0x20]
mov byte [eax + ebp*4 + 1], cl
mov ecx, dword [esi]
mov eax, dword [esp + 0x18]
sub eax, ecx
sar eax, 2
mov word [ecx + ebp*4 + 2], ax
jmp 0x407126
test edx, edx
je 0x407303
sub bl, byte [esp + 0x14]
xor eax, eax
mov ecx, dword [esp + 0x18]
mov byte [esp + 0x10], 0x40
mov byte [esp + 0x11], bl
mov word [esp + 0x12], ax
mov eax, dword [esp + 0x10]
mov dword [ecx + edx*4], eax
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x3c]
shl eax, 2
add dword [ecx], eax
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0x28]
mov dword [ecx], eax
jmp 0x406f7c
or eax, 0xffffffff
jmp 0x406f7e
call fcn.00407bad
int3