Function at 0x407aa0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x470a47
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xb0
mov al, byte [esp + 3]
push ebx
push ebp
push esi
mov esi, ecx
xor ebx, ebx
push edi
mov dword [esp + 0x4c], esi
mov byte [esp + 0x18], al
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
lea ecx, [esp + 0x30]
mov dword [esp + 0xc8], ebx
call fcn.0044e5b0
lea ecx, [esp + 0x34]
mov byte [esp + 0xc8], 1
call fcn.0044e5b0
mov cl, byte [esp + 0x13]
push ebx
mov byte [esp + 0x3c], cl
lea ecx, [esp + 0x3c]
mov byte [esp + 0xcc], 2
call fcn.00413460
mov byte [esp + 0xc8], 3
call fcn.0045d440
test al, al
je 0x407bd3
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x58], esp
push 6
push 0x4865e4
call fcn.0044e650
push ecx
mov byte [esp + 0xd8], 4
mov ecx, esp
mov dword [esp + 0x38], esp
push 6
push 0x486a0c
call fcn.0044e650
mov ecx, 0x4937b8
mov byte [esp + 0xd8], 3
call fcn.004570c0
push 1
lea ecx, [esp + 0x3c]
mov byte [esp + 0xcc], 6
call fcn.00413460
lea ecx, [esp + 0x34]
mov byte [esp + 0xc8], 5
call fcn.0044e6f0
lea ecx, [esp + 0x30]
mov byte [esp + 0xc8], bl
call fcn.0044e6f0
mov eax, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
cmp esi, eax
mov dword [esp + 0xc8], 0xffffffff
mov edi, eax
je 0x408535
push ebx
mov ecx, esi
call fcn.00415000
add esi, 0x1c
cmp esi, edi
jne 0x407bbf
jmp 0x408531
lea edx, [esp + 0x2c]
mov ecx, esi
push edx
call fcn.004076e0
cmp ax, 2
jne 0x407c40
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x486a58
call fcn.0044e650
lea eax, [esp + 0x54]
push eax
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0xc8], 7
push ecx
push ebx
push eax
lea ecx, [esp + 0x44]
call fcn.00413260
push 1
lea ecx, [esp + 0x54]
mov byte [esp + 0xcc], 3
call fcn.00413460
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x2c]
push edx
push 1
push eax
jmp 0x407ca3
cmp ax, 1
jne 0x4083e7
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x486a50
call fcn.0044e650
lea ecx, [esp + 0x54]
push ecx
call fcn.0045ad10
add esp, 8
mov edx, dword [0x47814c]
lea ecx, [esp + 0x38]
push edx
push ebx
push eax
mov byte [esp + 0xd4], 8
call fcn.00413260
push 1
lea ecx, [esp + 0x54]
mov byte [esp + 0xcc], 3
call fcn.00413460
mov ecx, dword [esp + 0x20]
lea eax, [esp + 0x2c]
push eax
push 1
push ecx
lea ecx, [esp + 0x24]
call fcn.00414160
mov byte [esp + 0x13], bl
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x486a48
call fcn.0044e650
mov ecx, dword [0x4937c4]
call fcn.0045c1b0
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x486a40
call fcn.0044e650
mov ecx, dword [0x4937c4]
call fcn.0045c330
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x486a38
call fcn.0044e650
mov ecx, dword [0x4937c4]
call fcn.0045c330
mov eax, dword [esp + 0x1c]
cmp eax, ebx
jne 0x407d18
xor edx, edx
jmp 0x407d31
mov ecx, dword [esp + 0x20]
sub ecx, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx ebp, dx
xor edi, edi
cmp ebp, ebx
jle 0x407db9
mov ecx, ebp
sub ecx, edi
lea esi, [ecx - 1]
lea ecx, [esp + 0x18]
push esi
call fcn.00413140
push ecx
add eax, 8
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.0044e5c0
push esi
lea ecx, [esp + 0x20]
mov byte [esp + 0xd0], 0xf
call fcn.00413140
sub esp, 0x10
add eax, 0xc
mov ecx, esp
mov dword [esp + 0x5c], esp
push eax
call fcn.00412e80
push esi
lea ecx, [esp + 0x30]
mov byte [esp + 0xe0], 0x10
call fcn.00413140
push ecx
add eax, 4
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.0044e5c0
mov ecx, dword [0x4937c4]
mov byte [esp + 0xe0], 3
call fcn.0045c520
inc edi
cmp edi, ebp
jl 0x407d3a
mov ecx, dword [0x4937c4]
call fcn.0045c730
push 0xa
mov esi, eax
call fcn.0044b4f0
add esp, 4
cmp si, 1
je 0x40828c
cmp si, bx
jne 0x40827d
cmp byte [esp + 0x13], bl
je 0x407e31
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x4865e4
call fcn.0044e650
push ecx
mov byte [esp + 0xd8], 0x13
mov ecx, esp
mov dword [esp + 0x58], esp
push 6
push 0x486a30
call fcn.0044e650
mov ecx, 0x4937b8
mov byte [esp + 0xd8], 3
call fcn.004570c0
jmp 0x407cb0
mov ecx, dword [esp + 0x4c]
lea edx, [esp + 0x2c]
push edx
call fcn.004076e0
push 0x3c
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp si, 2
jne 0x407f3a
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x486a58
call fcn.0044e650
lea eax, [esp + 0xb4]
push eax
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0xc8], 0x14
push ecx
push ebx
push eax
lea ecx, [esp + 0x44]
call fcn.00413260
push 1
lea ecx, [esp + 0xb4]
mov byte [esp + 0xcc], 3
call fcn.00413460
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x486a28
call fcn.0044e650
lea edx, [esp + 0x94]
push edx
call fcn.0045ad10
add esp, 8
mov edi, eax
mov esi, dword [esp + 0x1c]
mov byte [esp + 0xc8], 0x15
cmp esi, ebx
jne 0x407edf
xor edx, edx
jmp 0x407ef8
mov ecx, dword [esp + 0x20]
mov eax, 0x92492493
sub ecx, esi
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov ecx, dword [0x47814c]
lea eax, [edx*8]
sub eax, edx
push ecx
push ebx
push edi
lea ecx, [esi + eax*4 - 0x10]
call fcn.00413260
push 1
lea ecx, [esp + 0x94]
mov byte [esp + 0xcc], 3
call fcn.00413460
mov edx, dword [esp + 0x20]
lea ecx, [esp + 0x2c]
push ecx
push 1
push edx
jmp 0x40826a
cmp si, 1
jne 0x40813a
mov esi, dword [esp + 0x1c]
cmp esi, ebx
je 0x40809e
mov ecx, dword [esp + 0x20]
mov eax, 0x92492493
sub ecx, esi
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
je 0x40809e
lea ecx, [edx*8]
sub ecx, edx
lea edx, [esi + ecx*4 - 0x18]
lea ecx, [esp + 0x30]
push edx
call fcn.0044e860
test al, al
jne 0x407cb0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x486a50
call fcn.0044e650
lea eax, [esp + 0xa4]
push eax
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0xc8], 0x16
push ecx
push ebx
push eax
lea ecx, [esp + 0x44]
call fcn.00413260
push 1
lea ecx, [esp + 0xa4]
mov byte [esp + 0xcc], 3
call fcn.00413460
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x486a28
call fcn.0044e650
lea edx, [esp + 0x64]
push edx
call fcn.0045ad10
add esp, 8
mov edi, eax
mov esi, dword [esp + 0x1c]
mov byte [esp + 0xc8], 0x17
cmp esi, ebx
jne 0x408017
xor edx, edx
jmp 0x408030
mov ecx, dword [esp + 0x20]
mov eax, 0x92492493
sub ecx, esi
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov ecx, dword [0x47814c]
lea eax, [edx*8]
sub eax, edx
push ecx
push ebx
push edi
lea ecx, [esi + eax*4 - 0x10]
call fcn.00413260
mov eax, dword [esp + 0x64]
mov byte [esp + 0xc8], 3
cmp eax, ebx
je 0x408078
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x40806f
cmp al, 0xff
je 0x40806f
dec al
mov byte [ecx], al
jmp 0x408078
push ecx
call fcn.00467320
add esp, 4
mov edx, dword [esp + 0x20]
lea ecx, [esp + 0x2c]
push ecx
push 1
push edx
lea ecx, [esp + 0x24]
mov dword [esp + 0x70], ebx
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], ebx
call fcn.00414160
jmp 0x407cb0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x486a50
call fcn.0044e650
lea eax, [esp + 0x84]
push eax
call fcn.0045ad10
add esp, 8
mov ecx, dword [0x47814c]
mov byte [esp + 0xc8], 0x18
push ecx
push ebx
push eax
lea ecx, [esp + 0x44]
call fcn.00413260
mov eax, dword [esp + 0x84]
mov byte [esp + 0xc8], 3
cmp eax, ebx
je 0x40810b
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x408102
cmp al, 0xff
je 0x408102
dec al
mov byte [ecx], al
jmp 0x40810b
push ecx
call fcn.00467320
add esp, 4
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x2c]
push edx
push 1
push eax
lea ecx, [esp + 0x24]
mov dword [esp + 0x90], ebx
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], ebx
call fcn.00414160
jmp 0x407cb0
cmp si, bx
jne 0x4082ef
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x486a58
call fcn.0044e650
lea ecx, [esp + 0x74]
push ecx
call fcn.0045ad10
add esp, 8
mov edx, dword [0x47814c]
lea ecx, [esp + 0x38]
push edx
push ebx
push eax
mov byte [esp + 0xd4], 0x19
call fcn.00413260
mov eax, dword [esp + 0x74]
mov byte [esp + 0xc8], 3
cmp eax, ebx
je 0x4081aa
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x4081a1
cmp al, 0xff
je 0x4081a1
dec al
mov byte [ecx], al
jmp 0x4081aa
push ecx
call fcn.00467320
add esp, 4
push ecx
mov dword [esp + 0x78], ebx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x486a28
mov dword [esp + 0x84], ebx
mov dword [esp + 0x88], ebx
call fcn.0044e650
lea eax, [esp + 0x54]
push eax
call fcn.0045ad10
add esp, 8
mov edi, eax
mov esi, dword [esp + 0x1c]
mov byte [esp + 0xc8], 0x1a
cmp esi, ebx
jne 0x4081f2
xor edx, edx
jmp 0x40820b
mov ecx, dword [esp + 0x20]
mov eax, 0x92492493
sub ecx, esi
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov eax, dword [0x47814c]
lea ecx, [edx*8]
sub ecx, edx
push eax
push ebx
push edi
lea ecx, [esi + ecx*4 - 0x10]
call fcn.00413260
mov eax, dword [esp + 0x54]
mov byte [esp + 0xc8], 3
cmp eax, ebx
je 0x408252
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x408249
cmp al, 0xff
je 0x408249
dec al
mov byte [ecx], al
jmp 0x408252
push ecx
call fcn.00467320
add esp, 4
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x2c]
push edx
push 1
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
push eax
lea ecx, [esp + 0x24]
call fcn.00414160
mov byte [esp + 0x13], 1
jmp 0x407cb0
push 0xa
call fcn.0044b4f0
add esp, 4
jmp 0x407cb0
push 1
lea ecx, [esp + 0x3c]
mov byte [esp + 0xcc], 0x12
call fcn.00413460
lea ecx, [esp + 0x34]
mov byte [esp + 0xc8], 0x11
call fcn.0044e6f0
lea ecx, [esp + 0x30]
mov byte [esp + 0xc8], bl
call fcn.0044e6f0
mov edi, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
cmp esi, edi
mov dword [esp + 0xc8], 0xffffffff
je 0x408535
push ebx
mov ecx, esi
call fcn.00415000
add esi, 0x1c
cmp esi, edi
jne 0x4082db
jmp 0x408531
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x486710
call fcn.0044e650
push ecx
mov byte [esp + 0xd8], 0x1b
mov ecx, esp
mov dword [esp + 0x58], esp
push 6
push 0x4869e4
call fcn.0044e650
mov ecx, 0x4937b8
mov byte [esp + 0xd8], 3
call fcn.004570c0
mov eax, dword [esp + 0x3c]
mov byte [esp + 0xc8], 0x1c
cmp eax, ebx
je 0x40835f
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x408356
cmp al, 0xff
je 0x408356
dec al
mov byte [ecx], al
jmp 0x40835f
push ecx
call fcn.00467320
add esp, 4
lea ecx, [esp + 0x34]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
call fcn.0044e6f0
lea ecx, [esp + 0x30]
mov byte [esp + 0xc8], bl
call fcn.0044e6f0
mov edi, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
or ebp, 0xffffffff
cmp esi, edi
mov dword [esp + 0xc8], ebp
mov dword [esp + 0x4c], esi
je 0x408535
mov bl, 0x1d
push 1
lea ecx, [esi + 0xc]
mov dword [esp + 0xcc], 0x1e
call fcn.00413460
lea ecx, [esi + 8]
mov byte [esp + 0xc8], bl
call fcn.0044e6f0
lea ecx, [esi + 4]
mov dword [esp + 0xc8], ebp
call fcn.0044e6f0
add esi, 0x1c
cmp esi, edi
mov dword [esp + 0x4c], esi
jne 0x4083a4
jmp 0x408531
push ebx
push 1
push ecx
cmp ax, bx
mov ecx, esp
jne 0x408498
mov dword [esp + 0x20], esp
push 6
push 0x4865e4
call fcn.0044e650
push ecx
mov byte [esp + 0xd8], 9
mov ecx, esp
mov dword [esp + 0x58], esp
push 6
push 0x486a0c
call fcn.0044e650
mov ecx, 0x4937b8
mov byte [esp + 0xd8], 3
call fcn.004570c0
push 1
lea ecx, [esp + 0x3c]
mov byte [esp + 0xcc], 0xb
call fcn.00413460
lea ecx, [esp + 0x34]
mov byte [esp + 0xc8], 0xa
call fcn.0044e6f0
lea ecx, [esp + 0x30]
mov byte [esp + 0xc8], bl
call fcn.0044e6f0
mov eax, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
cmp esi, eax
mov dword [esp + 0xc8], 0xffffffff
mov edi, eax
je 0x408535
push ebx
mov ecx, esi
call fcn.00415000
add esi, 0x1c
cmp esi, edi
jne 0x408484
jmp 0x408531
mov dword [esp + 0x20], esp
push 6
push 0x486710
call fcn.0044e650
push ecx
mov byte [esp + 0xd8], 0xc
mov ecx, esp
mov dword [esp + 0x58], esp
push 6
push 0x4869e4
call fcn.0044e650
mov ecx, 0x4937b8
mov byte [esp + 0xd8], 3
call fcn.004570c0
push 1
lea ecx, [esp + 0x3c]
mov byte [esp + 0xcc], 0xe
call fcn.00413460
lea ecx, [esp + 0x34]
mov byte [esp + 0xc8], 0xd
call fcn.0044e6f0
lea ecx, [esp + 0x30]
mov byte [esp + 0xc8], bl
call fcn.0044e6f0
mov eax, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
cmp esi, eax
mov dword [esp + 0xc8], 0xffffffff
mov edi, eax
je 0x408535
push ebx
mov ecx, esi
call fcn.00415000
add esi, 0x1c
cmp esi, edi
jne 0x408522
mov esi, dword [esp + 0x1c]
push esi
call fcn.00467320
mov ecx, dword [esp + 0xc4]
add esp, 4
mov ax, 1
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xbc
ret