Function at 0x407ab0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x461c37
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xb0
mov al, byte [esp + 3]
push ebx
push ebp
push esi
mov esi, ecx
xor ebx, ebx
push edi
mov dword [esp + 0x4c], esi
mov byte [esp + 0x18], al
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
lea ecx, [esp + 0x30]
mov dword [esp + 0xc8], ebx
call fcn.0043f6d0
lea ecx, [esp + 0x34]
mov byte [esp + 0xc8], 1
call fcn.0043f6d0
mov cl, byte [esp + 0x13]
push ebx
mov byte [esp + 0x3c], cl
lea ecx, [esp + 0x3c]
mov byte [esp + 0xcc], 2
call fcn.00413440
mov byte [esp + 0xc8], 3
call fcn.0044e630
test al, al
je 0x407be3
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x58], esp
push 6
push 0x4755e4
call fcn.0043f770
push ecx
mov byte [esp + 0xd8], 4
mov ecx, esp
mov dword [esp + 0x38], esp
push 6
push 0x475a0c
call fcn.0043f770
mov ecx, 0x4824d0
mov byte [esp + 0xd8], 3
call fcn.004483e0
push 1
lea ecx, [esp + 0x3c]
mov byte [esp + 0xcc], 6
call fcn.00413440
lea ecx, [esp + 0x34]
mov byte [esp + 0xc8], 5
call fcn.0043f810
lea ecx, [esp + 0x30]
mov byte [esp + 0xc8], bl
call fcn.0043f810
mov eax, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
cmp esi, eax
mov dword [esp + 0xc8], 0xffffffff
mov edi, eax
je 0x408545
push ebx
mov ecx, esi
call fcn.00414d80
add esi, 0x1c
cmp esi, edi
jne 0x407bcf
jmp 0x408541
lea edx, [esp + 0x2c]
mov ecx, esi
push edx
call fcn.004076f0
cmp ax, 2
jne 0x407c50
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x475a58
call fcn.0043f770
lea eax, [esp + 0x54]
push eax
call fcn.0044c070
add esp, 8
mov ecx, dword [0x46814c]
mov byte [esp + 0xc8], 7
push ecx
push ebx
push eax
lea ecx, [esp + 0x44]
call fcn.00413240
push 1
lea ecx, [esp + 0x54]
mov byte [esp + 0xcc], 3
call fcn.00413440
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x2c]
push edx
push 1
push eax
jmp 0x407cb3
cmp ax, 1
jne 0x4083f7
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x475a50
call fcn.0043f770
lea ecx, [esp + 0x54]
push ecx
call fcn.0044c070
add esp, 8
mov edx, dword [0x46814c]
lea ecx, [esp + 0x38]
push edx
push ebx
push eax
mov byte [esp + 0xd4], 8
call fcn.00413240
push 1
lea ecx, [esp + 0x54]
mov byte [esp + 0xcc], 3
call fcn.00413440
mov ecx, dword [esp + 0x20]
lea eax, [esp + 0x2c]
push eax
push 1
push ecx
lea ecx, [esp + 0x24]
call fcn.00413ee0
mov byte [esp + 0x13], bl
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x475a48
call fcn.0043f770
mov ecx, dword [0x4824dc]
call fcn.0044d510
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x475a40
call fcn.0043f770
mov ecx, dword [0x4824dc]
call fcn.0044d690
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x475a38
call fcn.0043f770
mov ecx, dword [0x4824dc]
call fcn.0044d690
mov eax, dword [esp + 0x1c]
cmp eax, ebx
jne 0x407d28
xor edx, edx
jmp 0x407d41
mov ecx, dword [esp + 0x20]
sub ecx, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx ebp, dx
xor edi, edi
cmp ebp, ebx
jle 0x407dc9
mov ecx, ebp
sub ecx, edi
lea esi, [ecx - 1]
lea ecx, [esp + 0x18]
push esi
call fcn.00413150
push ecx
add eax, 8
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.0043f6e0
push esi
lea ecx, [esp + 0x20]
mov byte [esp + 0xd0], 0xf
call fcn.00413150
sub esp, 0x10
add eax, 0xc
mov ecx, esp
mov dword [esp + 0x5c], esp
push eax
call fcn.00412e90
push esi
lea ecx, [esp + 0x30]
mov byte [esp + 0xe0], 0x10
call fcn.00413150
push ecx
add eax, 4
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.0043f6e0
mov ecx, dword [0x4824dc]
mov byte [esp + 0xe0], 3
call fcn.0044d710
inc edi
cmp edi, ebp
jl 0x407d4a
mov ecx, dword [0x4824dc]
call fcn.0044d920
push 0xa
mov esi, eax
call fcn.0043cc50
add esp, 4
cmp si, 1
je 0x40829c
cmp si, bx
jne 0x40828d
cmp byte [esp + 0x13], bl
je 0x407e41
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x4755e4
call fcn.0043f770
push ecx
mov byte [esp + 0xd8], 0x13
mov ecx, esp
mov dword [esp + 0x58], esp
push 6
push 0x475a30
call fcn.0043f770
mov ecx, 0x4824d0
mov byte [esp + 0xd8], 3
call fcn.004483e0
jmp 0x407cc0
mov ecx, dword [esp + 0x4c]
lea edx, [esp + 0x2c]
push edx
call fcn.004076f0
push 0x3c
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp si, 2
jne 0x407f4a
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x475a58
call fcn.0043f770
lea eax, [esp + 0xb4]
push eax
call fcn.0044c070
add esp, 8
mov ecx, dword [0x46814c]
mov byte [esp + 0xc8], 0x14
push ecx
push ebx
push eax
lea ecx, [esp + 0x44]
call fcn.00413240
push 1
lea ecx, [esp + 0xb4]
mov byte [esp + 0xcc], 3
call fcn.00413440
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x475a28
call fcn.0043f770
lea edx, [esp + 0x94]
push edx
call fcn.0044c070
add esp, 8
mov edi, eax
mov esi, dword [esp + 0x1c]
mov byte [esp + 0xc8], 0x15
cmp esi, ebx
jne 0x407eef
xor edx, edx
jmp 0x407f08
mov ecx, dword [esp + 0x20]
mov eax, 0x92492493
sub ecx, esi
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov ecx, dword [0x46814c]
lea eax, [edx*8]
sub eax, edx
push ecx
push ebx
push edi
lea ecx, [esi + eax*4 - 0x10]
call fcn.00413240
push 1
lea ecx, [esp + 0x94]
mov byte [esp + 0xcc], 3
call fcn.00413440
mov edx, dword [esp + 0x20]
lea ecx, [esp + 0x2c]
push ecx
push 1
push edx
jmp 0x40827a
cmp si, 1
jne 0x40814a
mov esi, dword [esp + 0x1c]
cmp esi, ebx
je 0x4080ae
mov ecx, dword [esp + 0x20]
mov eax, 0x92492493
sub ecx, esi
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
je 0x4080ae
lea ecx, [edx*8]
sub ecx, edx
lea edx, [esi + ecx*4 - 0x18]
lea ecx, [esp + 0x30]
push edx
call fcn.0043f980
test al, al
jne 0x407cc0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x475a50
call fcn.0043f770
lea eax, [esp + 0xa4]
push eax
call fcn.0044c070
add esp, 8
mov ecx, dword [0x46814c]
mov byte [esp + 0xc8], 0x16
push ecx
push ebx
push eax
lea ecx, [esp + 0x44]
call fcn.00413240
push 1
lea ecx, [esp + 0xa4]
mov byte [esp + 0xcc], 3
call fcn.00413440
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x475a28
call fcn.0043f770
lea edx, [esp + 0x64]
push edx
call fcn.0044c070
add esp, 8
mov edi, eax
mov esi, dword [esp + 0x1c]
mov byte [esp + 0xc8], 0x17
cmp esi, ebx
jne 0x408027
xor edx, edx
jmp 0x408040
mov ecx, dword [esp + 0x20]
mov eax, 0x92492493
sub ecx, esi
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov ecx, dword [0x46814c]
lea eax, [edx*8]
sub eax, edx
push ecx
push ebx
push edi
lea ecx, [esi + eax*4 - 0x10]
call fcn.00413240
mov eax, dword [esp + 0x64]
mov byte [esp + 0xc8], 3
cmp eax, ebx
je 0x408088
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x40807f
cmp al, 0xff
je 0x40807f
dec al
mov byte [ecx], al
jmp 0x408088
push ecx
call fcn.00458510
add esp, 4
mov edx, dword [esp + 0x20]
lea ecx, [esp + 0x2c]
push ecx
push 1
push edx
lea ecx, [esp + 0x24]
mov dword [esp + 0x70], ebx
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], ebx
call fcn.00413ee0
jmp 0x407cc0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x475a50
call fcn.0043f770
lea eax, [esp + 0x84]
push eax
call fcn.0044c070
add esp, 8
mov ecx, dword [0x46814c]
mov byte [esp + 0xc8], 0x18
push ecx
push ebx
push eax
lea ecx, [esp + 0x44]
call fcn.00413240
mov eax, dword [esp + 0x84]
mov byte [esp + 0xc8], 3
cmp eax, ebx
je 0x40811b
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x408112
cmp al, 0xff
je 0x408112
dec al
mov byte [ecx], al
jmp 0x40811b
push ecx
call fcn.00458510
add esp, 4
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x2c]
push edx
push 1
push eax
lea ecx, [esp + 0x24]
mov dword [esp + 0x90], ebx
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], ebx
call fcn.00413ee0
jmp 0x407cc0
cmp si, bx
jne 0x4082ff
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x475a58
call fcn.0043f770
lea ecx, [esp + 0x74]
push ecx
call fcn.0044c070
add esp, 8
mov edx, dword [0x46814c]
lea ecx, [esp + 0x38]
push edx
push ebx
push eax
mov byte [esp + 0xd4], 0x19
call fcn.00413240
mov eax, dword [esp + 0x74]
mov byte [esp + 0xc8], 3
cmp eax, ebx
je 0x4081ba
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x4081b1
cmp al, 0xff
je 0x4081b1
dec al
mov byte [ecx], al
jmp 0x4081ba
push ecx
call fcn.00458510
add esp, 4
push ecx
mov dword [esp + 0x78], ebx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x475a28
mov dword [esp + 0x84], ebx
mov dword [esp + 0x88], ebx
call fcn.0043f770
lea eax, [esp + 0x54]
push eax
call fcn.0044c070
add esp, 8
mov edi, eax
mov esi, dword [esp + 0x1c]
mov byte [esp + 0xc8], 0x1a
cmp esi, ebx
jne 0x408202
xor edx, edx
jmp 0x40821b
mov ecx, dword [esp + 0x20]
mov eax, 0x92492493
sub ecx, esi
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov eax, dword [0x46814c]
lea ecx, [edx*8]
sub ecx, edx
push eax
push ebx
push edi
lea ecx, [esi + ecx*4 - 0x10]
call fcn.00413240
mov eax, dword [esp + 0x54]
mov byte [esp + 0xc8], 3
cmp eax, ebx
je 0x408262
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x408259
cmp al, 0xff
je 0x408259
dec al
mov byte [ecx], al
jmp 0x408262
push ecx
call fcn.00458510
add esp, 4
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x2c]
push edx
push 1
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
push eax
lea ecx, [esp + 0x24]
call fcn.00413ee0
mov byte [esp + 0x13], 1
jmp 0x407cc0
push 0xa
call fcn.0043cc50
add esp, 4
jmp 0x407cc0
push 1
lea ecx, [esp + 0x3c]
mov byte [esp + 0xcc], 0x12
call fcn.00413440
lea ecx, [esp + 0x34]
mov byte [esp + 0xc8], 0x11
call fcn.0043f810
lea ecx, [esp + 0x30]
mov byte [esp + 0xc8], bl
call fcn.0043f810
mov edi, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
cmp esi, edi
mov dword [esp + 0xc8], 0xffffffff
je 0x408545
push ebx
mov ecx, esi
call fcn.00414d80
add esi, 0x1c
cmp esi, edi
jne 0x4082eb
jmp 0x408541
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x475710
call fcn.0043f770
push ecx
mov byte [esp + 0xd8], 0x1b
mov ecx, esp
mov dword [esp + 0x58], esp
push 6
push 0x4759e4
call fcn.0043f770
mov ecx, 0x4824d0
mov byte [esp + 0xd8], 3
call fcn.004483e0
mov eax, dword [esp + 0x3c]
mov byte [esp + 0xc8], 0x1c
cmp eax, ebx
je 0x40836f
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x408366
cmp al, 0xff
je 0x408366
dec al
mov byte [ecx], al
jmp 0x40836f
push ecx
call fcn.00458510
add esp, 4
lea ecx, [esp + 0x34]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
call fcn.0043f810
lea ecx, [esp + 0x30]
mov byte [esp + 0xc8], bl
call fcn.0043f810
mov edi, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
or ebp, 0xffffffff
cmp esi, edi
mov dword [esp + 0xc8], ebp
mov dword [esp + 0x4c], esi
je 0x408545
mov bl, 0x1d
push 1
lea ecx, [esi + 0xc]
mov dword [esp + 0xcc], 0x1e
call fcn.00413440
lea ecx, [esi + 8]
mov byte [esp + 0xc8], bl
call fcn.0043f810
lea ecx, [esi + 4]
mov dword [esp + 0xc8], ebp
call fcn.0043f810
add esi, 0x1c
cmp esi, edi
mov dword [esp + 0x4c], esi
jne 0x4083b4
jmp 0x408541
push ebx
push 1
push ecx
cmp ax, bx
mov ecx, esp
jne 0x4084a8
mov dword [esp + 0x20], esp
push 6
push 0x4755e4
call fcn.0043f770
push ecx
mov byte [esp + 0xd8], 9
mov ecx, esp
mov dword [esp + 0x58], esp
push 6
push 0x475a0c
call fcn.0043f770
mov ecx, 0x4824d0
mov byte [esp + 0xd8], 3
call fcn.004483e0
push 1
lea ecx, [esp + 0x3c]
mov byte [esp + 0xcc], 0xb
call fcn.00413440
lea ecx, [esp + 0x34]
mov byte [esp + 0xc8], 0xa
call fcn.0043f810
lea ecx, [esp + 0x30]
mov byte [esp + 0xc8], bl
call fcn.0043f810
mov eax, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
cmp esi, eax
mov dword [esp + 0xc8], 0xffffffff
mov edi, eax
je 0x408545
push ebx
mov ecx, esi
call fcn.00414d80
add esi, 0x1c
cmp esi, edi
jne 0x408494
jmp 0x408541
mov dword [esp + 0x20], esp
push 6
push 0x475710
call fcn.0043f770
push ecx
mov byte [esp + 0xd8], 0xc
mov ecx, esp
mov dword [esp + 0x58], esp
push 6
push 0x4759e4
call fcn.0043f770
mov ecx, 0x4824d0
mov byte [esp + 0xd8], 3
call fcn.004483e0
push 1
lea ecx, [esp + 0x3c]
mov byte [esp + 0xcc], 0xe
call fcn.00413440
lea ecx, [esp + 0x34]
mov byte [esp + 0xc8], 0xd
call fcn.0043f810
lea ecx, [esp + 0x30]
mov byte [esp + 0xc8], bl
call fcn.0043f810
mov eax, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
cmp esi, eax
mov dword [esp + 0xc8], 0xffffffff
mov edi, eax
je 0x408545
push ebx
mov ecx, esi
call fcn.00414d80
add esi, 0x1c
cmp esi, edi
jne 0x408532
mov esi, dword [esp + 0x1c]
push esi
call fcn.00458510
mov ecx, dword [esp + 0xc4]
add esp, 4
mov ax, 1
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xbc
ret