Function at 0x406250
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xc0
mov edi, dword [ebp + 0x24]
mov esi, dword [ebp + 0x28]
mov ebx, dword [ebp + 8]
mov dword [esp + 0x3c], esi
mov dword [esp + 0x38], edi
mov eax, dword [ebx]
mov ecx, dword [ebx + 4]
mov dword [esp], eax
mov dword [esp + 0x30], eax
mov dword [esp + 4], ecx
mov dword [esp + 0x34], ecx
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
mov ecx, dword [ebp + 0x20]
mov eax, 6
test ecx, ecx
js 0x4062a2
mov eax, ecx
mov ecx, edi
or ecx, esi
je 0x406355
mov cx, 8
test eax, 0x10000
jne 0x4062c0
movzx ecx, cx
or ecx, 0x800
mov dword [esp + 0x88], ecx
mov ecx, eax
and ecx, 0xf
mov dword [esp + 0x10], ecx
sete dh
mov ecx, dword [ebx + 0x48]
mov dword [esp + 0xc], ecx
test ecx, ecx
je 0x4065a7
cmp dword [ebx + 0x14], 2
jne 0x4065a7
cmp dword [ebp + 0x14], 0
sete cl
cmp dword [ebp + 0x10], 0
setne dl
cmp dword [ebp + 0xc], 0
je 0x4065a7
or dl, cl
je 0x4065a7
cmp word [ebp + 0x1c], 0
setne cl
cmp dword [ebp + 0x18], 0
sete dl
test dl, cl
jne 0x4065a7
cmp dword [esp + 0x10], 0xb
jae 0x4065a7
mov byte [esp + 0x1c], dh
mov edx, dword [esp + 0xc]
cmp dword [edx + 0x34], 0
mov ecx, dword [ebx + 0x10]
je 0x406385
xor ebx, ebx
cmp ecx, 0xffffffff
jne 0x40639c
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 2
jmp 0x4065b0
cmp dword [ebp + 0x14], 0
je 0x406373
mov ecx, eax
xor ecx, 0xfffffbff
mov edx, eax
or edx, 0x400
test edx, ecx
je 0x4062ac
xor ecx, ecx
test eax, 0x10000
jne 0x4062c0
jmp 0x4062b7
test esi, esi
jne 0x406393
mov bl, 1
cmp ecx, 0xffff
jne 0x40639c
mov dword [edx + 0x34], 1
xor ebx, ebx
mov ecx, edi
or ecx, esi
je 0x4063bb
mov ecx, eax
and ecx, 0x400
jne 0x4063bb
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 0x18
jmp 0x4065ae
mov ecx, dword [ebp + 0xc]
cmp byte [ecx], 0x2f
je 0x406440
mov ecx, eax
shr ecx, 0xa
and ecx, 1
test eax, 0x400
mov dword [esp + 0x44], ecx
je 0x4063e7
mov eax, dword [ebp + 0x2c]
mov dword [esp + 0x8c], eax
mov byte [esp + 0x24], 1
jmp 0x40642e
or byte [esp + 0x1c], cl
mov edi, dword [ebp + 0x14]
push edi
push dword [ebp + 0x10]
push 0
call fcn.00404110
add esp, 0xc
mov dword [esp + 0x8c], eax
xor esi, esi
mov dword [esp + 0x38], edi
mov dword [esp + 0x3c], 0
mov eax, 0
cmp edi, 4
setb cl
jb 0x406422
mov eax, dword [esp + 0x10]
or cl, byte [esp + 0x1c]
mov byte [esp + 0x24], cl
mov dword [esp + 0x10], eax
push dword [ebp + 0xc]
call fcn.00409660
add esp, 4
cmp eax, 0x10000
jb 0x40644f
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 0x19
jmp 0x4065ae
mov dword [esp + 0x1c], eax
movzx eax, word [ebp + 0x1c]
mov dword [esp + 0x90], eax
mov dword [esp + 8], 0
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x20]
mov edx, dword [ecx + 0x24]
or edx, eax
mov edx, 0
je 0x406490
mov edx, 0xfffffffe
add edx, eax
inc edx
mov ecx, dword [ecx]
and ecx, edx
sub eax, ecx
mov ecx, eax
not ecx
or ecx, edx
lea edx, [ecx + eax]
inc edx
mov dword [esp + 0x20], edx
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 4]
xor edx, edx
mov eax, dword [esp + 0x90]
add eax, dword [esp + 0x1c]
setb dl
mov dword [esp + 0x84], ecx
add eax, ecx
adc edx, 0
mov ecx, eax
mov dword [esp + 0x14], eax
add ecx, 0x4a
adc edx, 0
mov eax, 0xfffffffe
cmp eax, ecx
sbb dword [esp + 8], edx
jae 0x4064df
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 0xf
jmp 0x4065ae
test bl, bl
je 0x40655a
mov eax, dword [esp + 0x1c]
mov ecx, eax
shr ecx, 0x1f
mov dword [esp + 0x80], ecx
mov dword [esp + 8], 0
mov ecx, dword [esp + 0x90]
add ecx, dword [ebp + 0x38]
mov ebx, 0
adc ebx, 0xffffffff
add ecx, dword [ebp + 0x40]
adc ebx, 0
lea edx, [eax + eax]
add ecx, edx
adc ebx, dword [esp + 0x80]
add ecx, dword [esp + 0x20]
adc ebx, 0
add ecx, dword [esp + 0x84]
adc ebx, 0
mov edx, dword [ebp + 8]
add ecx, dword [edx]
adc ebx, dword [edx + 4]
mov edx, eax
add ecx, 0x72
adc ebx, 0
cmp ebx, 0xffffffff
je 0x406566
mov ecx, dword [esp + 0xc]
mov dword [ecx + 0x34], 1
mov dword [esp + 8], 0x1c
jmp 0x406566
mov dword [esp + 8], 0x1c
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x84], 0
test edx, edx
je 0x4065ba
mov ecx, edx
xor ecx, 1
and edx, 0xfffe
add edx, edx
sub edx, ecx
mov ecx, dword [ebp + 0xc]
cmp byte [ecx + edx], 0x2f
mov ebx, dword [ebp + 8]
jne 0x4065bd
cmp dword [ebp + 0x14], 0
jne 0x4065a7
mov dword [esp + 0x84], 0x10
mov ecx, edi
or ecx, esi
je 0x4065bd
mov dword [ebx + 0x1c], 0x18
xor ebx, ebx
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov ebx, dword [ebp + 8]
mov ecx, dword [esp + 8]
mov eax, dword [esp + 0x14]
add eax, ecx
add eax, 0x2e
mov ecx, dword [esp + 0xc]
cmp dword [ecx + 8], eax
jae 0x4065f0
mov ecx, ebx
mov edx, dword [esp + 0xc]
push 1
push eax
call fcn.004094b0
mov ecx, dword [esp + 0x14]
add esp, 8
test eax, eax
je 0x40671e
mov eax, dword [ecx + 0x14]
inc eax
cmp dword [ecx + 0x18], eax
jae 0x406615
mov ecx, dword [esp + 0xc]
lea edx, [ecx + 0x10]
mov ecx, ebx
push 1
push eax
call fcn.004094b0
add esp, 8
test eax, eax
je 0x40671e
cmp dword [ebp + 0x14], 0
sete cl
xor eax, eax
or cl, byte [esp + 0x24]
jne 0x40663c
push 0x4df40
push 1
push dword [ebx + 0x34]
call dword [ebx + 0x28]
add esp, 0xc
test eax, eax
je 0x40671e
mov dword [esp + 0x14], eax
mov ecx, ebx
mov ebx, dword [esp]
mov edx, ebx
push dword [esp + 0x20]
push dword [esp + 8]
call fcn.00406e10
add esp, 8
test eax, eax
je 0x40672a
mov edx, ebx
and edx, dword [esp + 0x20]
mov ecx, edx
shr ecx, 0x1f
add edx, edx
mov eax, ebx
xor ebx, dword [esp + 0x20]
add ebx, edx
mov edx, dword [esp + 4]
adc ecx, edx
add eax, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 8], ebx
mov dword [esp + 0x30], ebx
adc edx, 0
mov dword [esp + 4], edx
mov eax, ecx
mov dword [esp + 0x34], ecx
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov word [esp + 0x7c], 0
movzx ebx, byte [esp + 0x24]
xor bl, 1
or bl, byte [esp + 0x44]
movzx edx, bl
shl edx, 3
mov dword [esp + 0x44], edx
mov edx, dword [esp + 0xc]
cmp dword [edx + 0x34], 0
je 0x40673f
mov dword [esp + 0xc], 0
mov ecx, 0xfffffffe
cmp ecx, edi
mov edx, 0
sbb edx, esi
jb 0x406756
xor edx, edx
cmp ecx, dword [esp + 8]
sbb edx, eax
jb 0x406756
xor edi, edi
jmp 0x406888
mov dword [ebx + 0x1c], 0x10
jmp 0x4065ae
push dword [esp + 0x14]
mov eax, dword [ebp + 8]
push dword [eax + 0x34]
call dword [eax + 0x2c]
add esp, 8
jmp 0x4065ae
mov edx, dword [esp + 4]
test edx, edx
je 0x406770
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 0x1d
jmp 0x4065ae
xor edx, edx
cmp ecx, dword [esp + 8]
mov ecx, 0
sbb ecx, eax
jb 0x406840
xor eax, eax
jmp 0x406844
mov dword [esp + 0x60], 0x4034b50
test bl, bl
je 0x40677e
mov bl, 0x14
mov byte [esp + 0x64], bl
mov ebx, dword [esp + 0x88]
movzx edx, bx
mov byte [esp + 0x66], bl
mov byte [esp + 0x67], dh
mov edx, dword [esp + 0x44]
mov byte [esp + 0x68], dl
mov dword [esp + 0x69], 0
mov dword [esp + 0x6d], 0
mov dword [esp + 0x71], 0
mov dword [esp + 0x75], 0
mov byte [esp + 0x79], 0
mov ebx, dword [esp + 0x1c]
mov byte [esp + 0x7a], bl
mov byte [esp + 0x7b], bh
mov edx, dword [ebp + 0x38]
mov byte [esp + 0x7c], dl
mov byte [esp + 0x7d], dh
lea edx, [esp + 0x60]
push 0x1e
push edx
push eax
push dword [esp + 0x14]
mov esi, dword [ebp + 8]
push dword [esi + 0x44]
call dword [esi + 0x3c]
add esp, 0x14
cmp eax, 0x1e
jne 0x40698f
mov eax, dword [esp]
add eax, 0x1e
mov edi, dword [esp + 4]
adc edi, 0
push ebx
push dword [ebp + 0xc]
push edi
mov dword [esp + 0xc], eax
push eax
push dword [esi + 0x44]
call dword [esi + 0x3c]
add esp, 0x14
cmp eax, ebx
jne 0x406982
mov ecx, dword [esp]
add ecx, ebx
adc edi, 0
mov dword [esp + 0xc], 0
mov ebx, edi
mov dword [esp + 8], 0
jmp 0x4069a3
lea eax, [esp + 0x30]
mov ecx, 0xfffffffe
cmp ecx, edi
mov ecx, 0
sbb ecx, esi
jb 0x40685b
mov esi, 0
jmp 0x40685f
lea esi, [esp + 0x28]
jae 0x406865
lea edx, [esp + 0x38]
lea ecx, [esp + 0xa0]
mov dword [esp + 0xc], ecx
push eax
push esi
call fcn.00406eb0
add esp, 8
mov edi, eax
mov eax, dword [esp + 0x30]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x34]
mov edx, dword [ebp + 0x38]
add edx, edi
mov dword [esp + 0x60], 0x4034b50
test bl, bl
je 0x40689b
mov bl, 0x14
mov byte [esp + 0x64], bl
mov byte [esp + 0x65], 0
movzx ebx, word [esp + 0x88]
mov byte [esp + 0x66], bl
mov byte [esp + 0x67], bh
mov ebx, dword [esp + 0x44]
mov byte [esp + 0x68], bl
mov dword [esp + 0x69], 0
mov dword [esp + 0x6d], 0
mov dword [esp + 0x71], 0
mov dword [esp + 0x75], 0
mov byte [esp + 0x79], 0
mov ebx, dword [esp + 0x1c]
mov byte [esp + 0x7a], bl
mov byte [esp + 0x7b], bh
mov byte [esp + 0x7c], dl
mov byte [esp + 0x7d], dh
lea edx, [esp + 0x60]
push 0x1e
push edx
push eax
push dword [esp + 0x14]
mov esi, dword [ebp + 8]
push dword [esi + 0x44]
call dword [esi + 0x3c]
add esp, 0x14
cmp eax, 0x1e
jne 0x40698f
mov dword [esp + 8], edi
mov edi, dword [esp]
add edi, 0x1e
mov eax, dword [esp + 4]
adc eax, 0
push ebx
push dword [ebp + 0xc]
mov dword [esp + 0xc], eax
push eax
push edi
push dword [esi + 0x44]
call dword [esi + 0x3c]
add esp, 0x14
cmp eax, ebx
jne 0x406982
mov eax, edi
and eax, ebx
mov ecx, eax
shr ecx, 0x1f
add eax, eax
xor edi, ebx
mov ebx, ecx
add edi, eax
adc ebx, dword [esp + 4]
cmp dword [esp + 0xc], 0
mov ecx, edi
je 0x40699b
lea eax, [esp + 0xa0]
mov edi, dword [esp + 8]
push edi
push eax
push ebx
push ecx
push dword [esi + 0x44]
mov dword [esp + 0x14], ecx
call dword [esi + 0x3c]
add esp, 0x14
cmp eax, edi
jne 0x40698f
mov ecx, dword [esp]
add ecx, edi
adc ebx, 0
jmp 0x4069a3
push dword [esp + 0x14]
push dword [esi + 0x34]
call dword [esi + 0x2c]
add esp, 8
mov dword [esi + 0x1c], 0x13
jmp 0x4065ae
mov dword [esp + 0xc], 0
mov eax, dword [ebp + 0x38]
test eax, eax
je 0x4069dc
push eax
push dword [ebp + 0x34]
push ebx
push ecx
push dword [esi + 0x44]
mov edi, ecx
call dword [esi + 0x3c]
mov edx, dword [ebp + 0x38]
add esp, 0x14
cmp eax, edx
jne 0x40698f
mov eax, edi
and eax, edx
mov ecx, eax
shr ecx, 0x1f
add eax, eax
xor edi, edx
add edi, eax
mov dword [esp], edi
adc ebx, ecx
mov dword [esp + 4], ebx
jmp 0x4069e3
mov dword [esp + 4], ebx
mov dword [esp], ecx
cmp byte [esp + 0x24], 0
je 0x406a37
mov esi, dword [ebp + 0x14]
push esi
push dword [ebp + 0x10]
push dword [esp + 0xc]
push dword [esp + 0xc]
mov eax, dword [ebp + 8]
push dword [eax + 0x44]
call dword [eax + 0x3c]
add esp, 0x14
cmp eax, esi
jne 0x406bea
mov edx, dword [esp]
mov eax, edx
and eax, esi
mov ecx, eax
shr ecx, 0x1f
add eax, eax
xor edx, esi
add edx, eax
mov dword [esp], edx
adc dword [esp + 4], ecx
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], 0
jmp 0x406aea
cmp dword [ebp + 0x14], 0
je 0x406aea
mov eax, dword [ebp + 8]
mov dword [esp + 0x48], eax
mov eax, dword [esp]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 4]
mov dword [esp + 0x54], eax
mov dword [esp + 0x5c], 0
mov dword [esp + 0x58], 0
xor eax, eax
mov ecx, dword [esp + 0x10]
cmp ecx, 4
setb al
shl eax, 0xe
or eax, dword [ecx*4 + 0x43884c]
test ecx, ecx
jne 0x406a86
or eax, 0x80000
lea ecx, [esp + 0x48]
push eax
push ecx
push 0x406f20
mov esi, dword [esp + 0x20]
push esi
call fcn.00405620
add esp, 0x10
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x9c], eax
lea eax, [esp + 0x9c]
push 4
push 0
push 0
push eax
push dword [ebp + 0x10]
push esi
call fcn.004041d0
add esp, 0x18
cmp eax, 1
jne 0x406c05
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x50]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
push dword [esp + 0x14]
mov eax, dword [ebp + 8]
push dword [eax + 0x34]
call dword [eax + 0x2c]
add esp, 8
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
mov edi, eax
mov dword [esp + 0x10], ecx
or eax, ecx
je 0x406bf6
mov dword [esp + 0x48], 0x8074b50
mov ecx, dword [esp + 0x8c]
mov byte [esp + 0x4c], cl
mov byte [esp + 0x4d], ch
mov eax, ecx
shr eax, 0x10
mov byte [esp + 0x4e], al
mov eax, ecx
shr eax, 0x18
mov byte [esp + 0x4f], al
mov ebx, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
cmp dword [esp + 0xc], 0
je 0x406c21
mov byte [esp + 0x50], bl
mov byte [esp + 0x51], bh
mov eax, ebx
shr eax, 0x10
mov byte [esp + 0x52], al
mov eax, ecx
shr eax, 0x10
shr ebx, 0x18
mov byte [esp + 0x53], bl
mov ebx, ecx
shr ebx, 0x18
mov byte [esp + 0x54], cl
mov byte [esp + 0x55], ch
mov byte [esp + 0x56], al
mov byte [esp + 0x57], bl
mov ecx, edi
mov byte [esp + 0x58], cl
mov byte [esp + 0x59], ch
mov eax, edi
shr eax, 0x10
mov byte [esp + 0x5a], al
mov eax, edi
shr eax, 0x18
mov byte [esp + 0x5b], al
mov dword [esp + 0x14], 0x38
mov dword [esp + 0x98], 0x30
mov ecx, 0x28
mov dword [esp + 0x24], 0x18
mov dword [esp + 0x20], 0x17
mov eax, dword [esp + 0x10]
mov byte [esp + 0x1b], al
mov dword [esp + 0x80], 0x16
mov dword [esp + 0x94], 0x15
mov esi, 0x14
jmp 0x406c76
push dword [esp + 0x14]
mov esi, dword [ebp + 8]
jmp 0x406986
mov dword [esp + 0x10], 0
xor ecx, ecx
jmp 0x406d1e
push dword [esp + 0x14]
mov esi, dword [ebp + 8]
push dword [esi + 0x34]
call dword [esi + 0x2c]
add esp, 8
mov dword [esi + 0x1c], 0xc
jmp 0x4065ae
test ecx, ecx
jne 0x406747
mov dword [esp + 0x50], ebx
mov dword [esp + 0x14], 0x18
mov dword [esp + 0x98], 0x10
mov ecx, 8
mov dword [esp + 0x20], 0xf
mov dword [esp + 0x80], 0xe
mov eax, edi
mov byte [esp + 0x1b], al
mov dword [esp + 0x94], 0xd
mov esi, 0xc
mov dword [esp + 0x24], 0x10
mov ebx, edi
mov eax, dword [esp + 0x10]
shrd ebx, eax, cl
shr eax, cl
movzx edx, byte [esp + 0x1b]
mov byte [esp + esi + 0x48], dl
test cl, 0x20
jne 0x406c91
mov eax, ebx
mov ebx, edi
mov ecx, dword [esp + 0x98]
mov edx, dword [esp + 0x10]
shrd ebx, edx, cl
mov esi, dword [esp + 0x94]
mov byte [esp + esi + 0x48], al
mov eax, edx
shr eax, cl
test cl, 0x20
jne 0x406cb7
mov eax, ebx
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
shrd edi, edx, cl
mov esi, edi
mov edi, dword [esp + 0x80]
mov byte [esp + edi + 0x48], al
shr edx, cl
test cl, 0x20
jne 0x406cd8
mov edx, esi
mov eax, dword [esp + 0x20]
mov byte [esp + eax + 0x48], dl
lea eax, [esp + 0x48]
mov esi, dword [esp + 0x24]
push esi
push eax
push dword [esp + 0xc]
push dword [esp + 0xc]
mov eax, dword [ebp + 8]
push dword [eax + 0x44]
call dword [eax + 0x3c]
add esp, 0x14
cmp eax, esi
jne 0x4065ae
mov eax, dword [esp + 0x24]
add dword [esp], eax
adc dword [esp + 4], 0
mov eax, dword [esp + 0x38]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x3c]
mov edi, dword [ebp + 0x3c]
cmp dword [esp + 0xc], 0
je 0x406d8a
xor edx, edx
mov eax, 0xfffffffe
cmp eax, dword [esp + 0x30]
mov eax, 0
sbb eax, dword [esp + 0x34]
jb 0x406d42
xor ebx, ebx
jmp 0x406d46
lea ebx, [esp + 0x30]
mov eax, 0xfffffffe
cmp eax, dword [esp + 0x10]
mov eax, 0
sbb eax, ecx
jb 0x406d5f
mov eax, 0
jmp 0x406d63
lea eax, [esp + 0x28]
jae 0x406d69
lea edx, [esp + 0x38]
lea ecx, [esp + 0xa0]
push ebx
push eax
call fcn.00406eb0
add esp, 8
mov dword [esp + 8], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x3c]
movzx esi, word [esp + 0x88]
movzx eax, word [esp + 0x44]
movzx edx, word [esp + 8]
movzx ebx, word [esp + 0x1c]
push dword [ebp + 0x40]
push edi
push dword [esp + 0x8c]
push dword [esp + 0x40]
push dword [esp + 0x40]
push 0
push 0
push esi
push eax
push dword [esp + 0xb0]
push dword [esp + 0x54]
push dword [esp + 0x54]
push ecx
push dword [esp + 0x44]
push dword [esp + 0xc8]
push dword [ebp + 0x18]
push edx
push dword [esp + 0x50]
push ebx
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.00406f70
add esp, 0x54
test eax, eax
je 0x4065ae
mov eax, dword [ebp + 8]
inc dword [eax + 0x10]
mov ecx, dword [esp]
mov dword [eax], ecx
mov ecx, dword [esp + 4]
mov dword [eax + 4], ecx
mov ebx, 1
jmp 0x4065b0