Function at 0x4aaab0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
jmp 0x4aaab0
push 0xffffffffffffffff
push 0x6a41d4
mov eax, dword fs:[0]
push eax
sub esp, 0x1b0
mov eax, dword [0x774458]
xor eax, esp
mov dword [esp + 0x1ac], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x774458]
xor eax, esp
push eax
lea eax, [esp + 0x1c4]
mov dword fs:[0], eax
lea eax, [esp + 0x48]
push eax
xor ebx, ebx
sub esp, 0x20
mov esi, ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push str.ELEMENTOS
push ecx
mov ecx, dword [esi + 0x7d8]
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], ebx
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x80], ebx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x88], ebx
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x90], ebx
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], ebx
call fcn.00401b9a
mov ecx, esi
call fcn.0040ce4b
push str.INTERFACE
lea edx, [esp + 0x74]
lea ecx, [esi + 0x7a8]
push edx
mov dword [esp + 0x20], ecx
call fcn.0040de9a
push str.INFOCARAS
lea ecx, [esp + 0x74]
mov dword [esp + 0x1d0], ebx
call fcn.00405e16
lea ecx, [esp + 0x70]
call fcn.00405cf9
push 0x6e0280
lea ecx, [esp + 0x124]
call fcn.004024af
lea eax, [esp + 0x120]
push eax
push str.INFOCARAS
lea ecx, [esp + 0x78]
mov byte [esp + 0x1d4], 1
call fcn.0040c65d
lea ecx, [esp + 0x120]
mov byte [esp + 0x1cc], bl
call fcn.0040934a
lea ecx, [esp + 0x70]
call fcn.00405cf9
push str.SUBINTERFACES
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x78]
call fcn.0040de9a
lea ecx, [esp + 0x1c]
mov byte [esp + 0x1cc], 2
call fcn.0040cf1d
mov edi, eax
xor esi, esi
cmp edi, ebx
jle 0x4aace2
xor eax, eax
push esi
lea edx, [esp + 0xcc]
push edx
lea ecx, [esp + 0x24]
mov byte [esp + 0x128], bl
mov dword [esp + 0x129], eax
mov dword [esp + 0x12d], eax
mov dword [esp + 0x131], eax
mov dword [esp + 0x135], eax
mov dword [esp + 0x139], eax
mov dword [esp + 0x13d], eax
mov dword [esp + 0x141], eax
mov word [esp + 0x145], ax
mov byte [esp + 0x147], al
call fcn.004045d4
push ebx
lea ecx, [esp + 0xa0]
push ecx
mov ecx, eax
mov byte [esp + 0x1d4], 3
call fcn.004045d4
push 0x20
lea edx, [esp + 0x124]
push edx
mov ecx, eax
mov byte [esp + 0x1d4], 4
call fcn.0040470f
lea ecx, [esp + 0x9c]
mov byte [esp + 0x1cc], 3
call fcn.00406cda
lea ecx, [esp + 0xc8]
mov byte [esp + 0x1cc], 2
call fcn.00406cda
lea eax, [esp + 0x120]
push str.SUBINTERFACEMULTIPLE
push eax
call fcn.0067c588
add esp, 8
test eax, eax
je 0x4aacde
add esi, 1
cmp esi, edi
jl 0x4aac04
jmp 0x4aace2
cmp esi, edi
jl 0x4aad41
lea ecx, [esp + 0x140]
push str.SUBINTERFACEMULTIPLE___.TOKEN_MULTIPLE__
push ecx
call fcn.00651689
add esp, 8
lea edx, [esp + 0x140]
push edx
lea ecx, [esp + 0x124]
call fcn.004024af
lea eax, [esp + 0x120]
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x1d0], 5
call fcn.0040cd38
lea ecx, [esp + 0x120]
mov byte [esp + 0x1cc], 2
call fcn.0040934a
lea ecx, [esp + 0x1c]
call fcn.00405cf9
mov dword [esp + 0x14], ebx
mov ecx, dword [esp + 0x14]
push ecx
call fcn.004085c1
mov edi, eax
add esp, 4
cmp edi, ebx
je 0x4aaef8
lea ecx, [esp + 0x1c]
call fcn.0040cf1d
mov ebp, eax
xor esi, esi
cmp ebp, ebx
jle 0x4aae7a
xor eax, eax
push esi
lea edx, [esp + 0xf8]
push edx
lea ecx, [esp + 0x24]
mov byte [esp + 0x128], bl
mov dword [esp + 0x129], eax
mov dword [esp + 0x12d], eax
mov dword [esp + 0x131], eax
mov dword [esp + 0x135], eax
mov dword [esp + 0x139], eax
mov dword [esp + 0x13d], eax
mov dword [esp + 0x141], eax
mov word [esp + 0x145], ax
mov byte [esp + 0x147], al
call fcn.004045d4
push 1
lea ecx, [esp + 0xa0]
push ecx
mov ecx, eax
mov byte [esp + 0x1d4], 6
call fcn.004045d4
push 0x6dd75c
lea edx, [esp + 0xcc]
push edx
mov ecx, eax
mov byte [esp + 0x1d4], 7
call fcn.0040de9a
push 0x20
lea ecx, [esp + 0x124]
push ecx
mov ecx, eax
mov byte [esp + 0x1d4], 8
call fcn.0040470f
lea ecx, [esp + 0xc8]
mov byte [esp + 0x1cc], 7
call fcn.00406cda
lea ecx, [esp + 0x9c]
mov byte [esp + 0x1cc], 6
call fcn.00406cda
lea ecx, [esp + 0xf4]
mov byte [esp + 0x1cc], 2
call fcn.00406cda
lea edx, [esp + 0x120]
push edi
push edx
call fcn.0067c588
add esp, 8
test eax, eax
je 0x4ab021
add esi, 1
cmp esi, ebp
jl 0x4aad71
mov ecx, dword [esp + 0x14]
cmp dword [esp + ecx*4 + 0x48], ebx
je 0x4aaee4
push edi
lea edx, [esp + 0x144]
push str.SUBINTERFACEALIADO___.TOKEN__s_.ITEMS_____.TOKEN_IT_MANO_____.TOKEN_IT_PISTOLA______
push edx
call fcn.00651689
add esp, 0xc
lea eax, [esp + 0x140]
push eax
lea ecx, [esp + 0x124]
call fcn.004024af
lea ecx, [esp + 0x120]
push ecx
lea ecx, [esp + 0x20]
mov byte [esp + 0x1d0], 9
call fcn.0040cd38
lea ecx, [esp + 0x120]
mov byte [esp + 0x1cc], 2
call fcn.0040934a
lea ecx, [esp + 0x1c]
call fcn.00405cf9
mov eax, dword [esp + 0x14]
add eax, 1
cmp eax, 0xa
mov dword [esp + 0x14], eax
jl 0x4aad45
lea ecx, [esp + 0x70]
call fcn.004078a6
lea ecx, [esp + 0x70]
call fcn.00405cf9
lea ecx, [esp + 0x1c]
mov byte [esp + 0x1cc], bl
call fcn.00406cda
push str.INFOCARAS
lea edx, [esp + 0x20]
push edx
lea ecx, [esp + 0x78]
call fcn.0040de9a
mov edi, dword [sym.imp.USER32.dll_wsprintfA]
mov byte [esp + 0x1cc], 0xa
xor esi, esi
lea ecx, [ecx]
cmp dword [esp + esi*4 + 0x48], ebx
je 0x4aafa0
push esi
call fcn.004085c1
push eax
lea eax, [esp + 0x148]
push str.CARA___.TOKEN__s__
push eax
call edi
add esp, 0x10
lea ecx, [esp + 0x140]
push ecx
lea ecx, [esp + 0x124]
call fcn.004024af
lea edx, [esp + 0x120]
push edx
lea ecx, [esp + 0x20]
mov byte [esp + 0x1d0], 0xb
call fcn.0040cd38
lea ecx, [esp + 0x120]
mov byte [esp + 0x1cc], 0xa
call fcn.0040934a
add esi, 1
cmp esi, 0xa
jl 0x4aaf40
lea ecx, [esp + 0x1c]
call fcn.00405cf9
lea ecx, [esp + 0x70]
call fcn.004078a6
lea ecx, [esp + 0x70]
call fcn.00405cf9
lea ecx, [esp + 0x1c]
mov byte [esp + 0x1cc], bl
call fcn.00406cda
mov esi, dword [esp + 0x18]
mov ecx, esi
call fcn.004078a6
mov ecx, esi
call fcn.00405cf9
lea ecx, [esp + 0x70]
mov dword [esp + 0x1cc], 0xffffffff
call fcn.00406cda
mov ecx, dword [esp + 0x1c4]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x1ac]
xor ecx, esp
call fcn.00651675
add esp, 0x1bc
ret
cmp esi, ebp
jge 0x4aae7a
mov eax, dword [esp + 0x14]
cmp dword [esp + eax*4 + 0x48], ebx
jne 0x4aaee4
push esi
lea ecx, [esp + 0x20]
call fcn.0040816b
jmp 0x4aaedb