Function at 0x406090
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x38
mov eax, dword [0x46367c]
xor eax, esp
mov dword [esp + 0x34], eax
push ebx
push ebp
push esi
mov esi, ecx
inc dword [esi + 0xb0]
mov eax, dword [0x462150]
push edi
mov edi, dword [esi + 0x54]
xor ebx, ebx
cmp eax, dword [edi + 0x60]
je 0x4060bd
mov eax, dword [edi + 0x60]
lea esp, [esp]
inc ebx
movzx ecx, bx
cmp dword [ecx*4 + 0x462150], eax
jne 0x4060b0
push 0x3eb
mov ecx, esi
call fcn.00414ce5
mov eax, dword [eax + 0x20]
movzx edx, bx
mov ebx, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push edx
push 0x14e
push eax
call ebx
mov ecx, dword [0x462150]
xor ebp, ebp
cmp ecx, dword [edi + 0x64]
je 0x4060fd
mov eax, dword [edi + 0x64]
inc ebp
movzx edx, bp
cmp dword [edx*4 + 0x462150], eax
jne 0x4060f0
push 0x3ed
mov ecx, esi
call fcn.00414ce5
mov edx, dword [eax + 0x20]
push 0
movzx ecx, bp
push ecx
push 0x14e
push edx
call ebx
xor ebp, ebp
mov ecx, 0x10000
mov dword [esp + 0x1c], ebp
mov edx, dword [edi + 0x6c]
mov eax, dword [edi + 0x68]
and edx, dword [esp + 0x1c]
and eax, ecx
or eax, edx
jne 0x40614a
mov eax, dword [esp + 0x1c]
shld eax, ecx, 1
add ecx, ecx
mov edx, ecx
inc ebp
or edx, eax
mov dword [esp + 0x1c], eax
jne 0x406125
mov eax, dword [edi + 0x78]
push eax
push 0x3fb
mov ecx, esi
call fcn.00414ce5
mov ecx, eax
call fcn.00414e25
mov eax, dword [edi + 0x74]
push eax
push 0x3f2
mov ecx, esi
call fcn.00414ce5
mov ecx, eax
call fcn.00414e25
push 0x3ec
mov ecx, esi
call fcn.00414ce5
mov edx, dword [eax + 0x20]
push 0
movzx ecx, bp
push ecx
push 0x14e
push edx
call ebx
mov ebp, dword [edi + 0x5c]
push 0x3f6
mov ecx, esi
call fcn.00414ce5
mov eax, dword [eax + 0x20]
push 0
push ebp
push 0x14e
push eax
call ebx
mov eax, dword [edi + 0x70]
push eax
push 0x3f9
mov ecx, esi
call fcn.00414ce5
mov ecx, eax
call fcn.00414e25
mov eax, dword [edi + 0xa0]
push eax
push 0x3ff
mov ecx, esi
call fcn.00414ce5
mov ecx, eax
call fcn.00414e25
push 0x3ff
mov ecx, esi
call fcn.00414ce5
mov ecx, dword [eax + 0x20]
push 0
push 5
push 0xc5
push ecx
call ebx
mov ebp, dword [edi + 0x88]
push 0x3e9
mov ecx, esi
call fcn.00414ce5
mov edx, dword [eax + 0x20]
push 0
push ebp
push 0xf1
push edx
call ebx
mov ebp, dword [edi + 0x8c]
push 0x402
mov ecx, esi
call fcn.00414ce5
mov eax, dword [eax + 0x20]
push 0
push ebp
push 0xf1
push eax
call ebx
mov ebp, dword [edi + 0x94]
push 0x3f7
mov ecx, esi
call fcn.00414ce5
mov ecx, dword [eax + 0x20]
push 0
push ebp
push 0xf1
push ecx
call ebx
mov ebp, dword [edi + 0x90]
push 0x3f3
mov ecx, esi
call fcn.00414ce5
mov edx, dword [eax + 0x20]
push 0
push ebp
push 0xf1
push edx
call ebx
mov ebp, dword [edi + 0x98]
push 0x3fa
mov ecx, esi
call fcn.00414ce5
mov eax, dword [eax + 0x20]
push 0
push ebp
push 0xf1
push eax
call ebx
mov ebp, dword [edi + 0x9c]
push 0x401
mov ecx, esi
call fcn.00414ce5
mov ecx, dword [eax + 0x20]
push 0
push ebp
push 0xf1
push ecx
call ebx
mov ecx, esi
call fcn.00405c60
push 0x3f4
mov ecx, esi
call fcn.00414ce5
push 0
push 0
mov ebp, eax
mov edx, dword [ebp + 0x20]
push 0x146
push edx
call ebx
test eax, eax
jne 0x406327
mov dword [esp + 0x10], 2
mov edi, edi
mov eax, dword [esp + 0x10]
push eax
lea ecx, [esp + 0x34]
push 0x44ef14
push ecx
call fcn.00437b02
mov eax, dword [ebp + 0x20]
add esp, 0xc
lea edx, [esp + 0x30]
push edx
push 0
push 0x143
push eax
call ebx
mov eax, dword [esp + 0x10]
inc eax
cmp eax, 0xa
mov dword [esp + 0x10], eax
jle 0x4062f0
movzx ecx, byte [edi + 0xa4]
mov edx, dword [ebp + 0x20]
push 0
sub ecx, 2
push ecx
push 0x14e
push edx
call ebx
xor ebp, ebp
cmp word [edi + 0x7c], bp
je 0x406368
mov ecx, dword [edi + 0x84]
mov eax, dword [edi + 0x80]
push ecx
push eax
mov ecx, esi
mov dword [edi + 0x80], ebp
mov dword [edi + 0x84], ebp
call fcn.00405ee0
mov ecx, dword [0x462150]
xor eax, eax
mov dword [esp + 0x10], eax
cmp ecx, dword [edi + 0x60]
je 0x406391
mov ecx, dword [edi + 0x60]
lea esp, [esp]
inc eax
movzx edx, ax
cmp dword [edx*4 + 0x462150], ecx
jne 0x406380
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ebp
mov ebx, 0x4b0
lea ebp, [edi + 0xb0]
mov dword [esp + 0x18], 0x15
jmp 0x4063b4
mov eax, dword [esp + 0x10]
movzx ecx, word [edi + 0x7c]
cmp dword [esp + 0x14], ecx
jge 0x406430
movzx edx, ax
mov eax, dword [edx*4 + 0x4620f8]
push eax
lea ecx, [ebx - 0x64]
push ecx
mov ecx, esi
call fcn.00414d38
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
shrd edx, eax, 0xa
shr eax, 0xa
push eax
push edx
lea ecx, [esp + 0x38]
push 0x44eec4
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea edx, [esp + 0x30]
push edx
push ebx
mov ecx, esi
call fcn.00414d38
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
shrd eax, ecx, 0xa
shr ecx, 0xa
push ecx
push eax
lea edx, [esp + 0x38]
push 0x44eec4
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea eax, [esp + 0x30]
push eax
lea ecx, [ebx + 0x64]
push ecx
jmp 0x406456
push 0x44ebaf
lea edx, [ebx - 0x64]
push edx
mov ecx, esi
call fcn.00414d38
push 0x44ebaf
push ebx
mov ecx, esi
call fcn.00414d38
push 0x44ebaf
lea eax, [ebx + 0x64]
push eax
mov ecx, esi
call fcn.00414d38
add dword [esp + 0x14], 2
mov eax, 1
add dword [esp + 0x10], eax
add ebp, 0x10
add ebx, eax
sub dword [esp + 0x18], eax
jne 0x4063b0
mov edx, dword [esi + 0x11c]
mov ecx, dword [esi + 0x114]
mov eax, dword [esi + 0x118]
mov dword [esp + 0x38], edx
mov edx, dword [esi + 0x120]
mov dword [esp + 0x3c], edx
mov edx, dword [esi + 0x124]
movzx edi, ax
mov dword [esp + 0x40], edx
movzx edx, cx
shr ecx, 0x10
shr eax, 0x10
add eax, ecx
mov dword [esp + 0x2c], eax
push 1
lea eax, [esp + 0x24]
mov dword [esp + 0x28], ecx
mov ecx, dword [esi + 0x20]
push eax
add edi, edx
push ecx
mov dword [esp + 0x2c], edx
mov dword [esp + 0x34], edi
call dword [sym.imp.USER32.dll_InvalidateRect]
dec dword [esi + 0xb0]
cmp dword [0x464c48], 0
je 0x406503
cmp dword [0x464c50], 0
jne 0x406503
mov edx, dword [esi + 0x20]
push 0
push 0x3ea
push 0x111
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
mov ecx, dword [esp + 0x44]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.004373c8
add esp, 0x38
ret 0xc