Function at 0x405aca
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x12c
push ebx
push ebp
push esi
push edi
push ecx
lea ecx, [esp + 0xac]
call fcn.00401593
cmp dword [esp + 0xbc], 0x10
lea ecx, [esp + 0xa8]
mov eax, dword [esp + 0xb8]
cmovae ecx, dword [esp + 0xa8]
add eax, ecx
cmp dword [esp + 0xbc], 0x10
lea ecx, [esp + 0xa8]
cmovae ecx, dword [esp + 0xa8]
push eax
push ecx
lea ecx, [esp + 0xc8]
call fcn.004035a1
push 0
push ecx
lea ecx, [esp + 0xc8]
call fcn.00407bbe
xor ebx, ebx
mov dword [esp + 0x14], 0x2f
mov esi, eax
lea ecx, [esp + 0xc0]
inc ebx
lea eax, [esp + 0x14]
push ebx
push esi
push eax
call fcn.004018f7
and dword [esp + 0xa0], 0
mov edi, eax
xor eax, eax
mov dword [esp + 0xa4], 7
push 0x423fa0
mov ecx, 0x489890
mov word [esp + 0x94], ax
call fcn.0040187c
cmp edi, 0xffffffff
jne 0x405b90
cmp esi, edi
je 0x406195
mov eax, edi
lea ecx, [esp + 0xc0]
sub eax, esi
xor bh, bh
push eax
push esi
lea eax, [esp + 0x20]
push eax
call fcn.0040301f
push eax
lea ecx, [esp + 0x94]
call fcn.00407afe
xor ebp, ebp
lea ecx, [esp + 0x18]
push 0
inc ebp
push ebp
call fcn.0040199b
push ebp
push 0
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x20
push eax
lea ecx, [esp + 0x9c]
call fcn.004018f7
mov esi, eax
cmp esi, 0xffffffff
je 0x4060a9
push esi
push 0
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0x9c]
call fcn.0040301f
push 0xffffffffffffffff
lea eax, [esi + 1]
push eax
lea eax, [esp + 0x68]
push eax
lea ecx, [esp + 0x9c]
call fcn.0040301f
push 4
mov edx, 0x433c4c
lea ecx, [esp + 0x1c]
call fcn.00404f88
mov edx, eax
lea ecx, [esp + 0x78]
call fcn.00407e5a
push 0
push ebp
lea ecx, [esp + 0x20]
mov bl, al
call fcn.0040199b
test bl, bl
je 0x405c61
cmp dword [esp + 0x70], 0
jbe 0x4062e2
xor eax, eax
inc eax
mov byte [0x48ad81], al
mov bh, al
jmp 0x405d28
push 9
mov edx, 0x46cb30
lea ecx, [esp + 0x1c]
call fcn.00404f88
mov edx, eax
lea ecx, [esp + 0x78]
call fcn.00407e5a
push 0
push ebp
lea ecx, [esp + 0x20]
mov bl, al
call fcn.0040199b
test bl, bl
je 0x405c9f
mov byte [0x48b71e], 1
mov ecx, 0x4898d0
jmp 0x405eb3
push 6
mov edx, 0x43296c
lea ecx, [esp + 0x1c]
call fcn.00404f88
mov edx, eax
lea ecx, [esp + 0x78]
call fcn.00407e5a
push 0
push 1
lea ecx, [esp + 0x20]
mov bl, al
call fcn.0040199b
test bl, bl
je 0x405cd6
mov byte [0x48b71d], 1
jmp 0x405c95
push 1
mov edx, 0x42d48c
lea ecx, [esp + 0x1c]
call fcn.00404f88
mov edx, eax
lea ecx, [esp + 0x78]
call fcn.00407e5a
push 0
push 1
lea ecx, [esp + 0x20]
mov bl, al
call fcn.0040199b
test bl, bl
je 0x405e4b
cmp dword [esp + 0x70], 0
jbe 0x405e1e
push 0xffffffffffffffff
push 0
lea eax, [esp + 0x68]
mov ecx, 0x4898b0
push eax
call fcn.004017f8
mov bh, 1
test bh, bh
je 0x406086
and dword [esp + 0x40], 0
xor eax, eax
mov ebp, 0x423fac
mov dword [esp + 0x44], 7
push ebp
mov word [esp + 0x34], ax
call fcn.0040e0f5
add eax, dword [esp + 0x8c]
xor ebx, ebx
mov esi, dword [esp + 0x44]
inc ebx
pop ecx
cmp esi, eax
ja 0x405d8f
cmp dword [esp + 0x44], eax
je 0x405d8f
push ebx
push eax
lea ecx, [esp + 0x38]
call fcn.00401d74
test al, al
je 0x405d8f
cmp dword [esp + 0x44], 8
lea eax, [esp + 0x30]
mov dword [esp + 0x40], esi
cmovae eax, dword [esp + 0x30]
xor ecx, ecx
mov word [eax + esi*2], cx
push ebp
call fcn.0040e0f5
pop ecx
push eax
push ebp
lea ecx, [esp + 0x38]
call fcn.00401c70
push 0xffffffffffffffff
push 0
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0x3c]
call fcn.00401bde
push 0x423fa8
lea edx, [esp + 0x34]
lea ecx, [esp + 0x4c]
call fcn.00407eba
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x68]
push ecx
mov ecx, eax
call fcn.00401bde
push eax
lea ecx, [esp + 0x1c]
call fcn.0040165a
push 0xffffffffffffffff
push 0
lea eax, [esp + 0x20]
mov ecx, 0x489890
push eax
call fcn.00401bde
push 0
push ebx
lea ecx, [esp + 0x20]
call fcn.0040199b
push 0
push ebx
lea ecx, [esp + 0x50]
call fcn.0040199b
push 0
push ebx
lea ecx, [esp + 0x38]
call fcn.0040199b
jmp 0x406089
push 7
mov edx, 0x4404e4
lea ecx, [esp + 0x1c]
call fcn.00404f88
push eax
mov ecx, 0x4898b0
call fcn.00407afe
push 0
push 1
lea ecx, [esp + 0x20]
call fcn.0040199b
jmp 0x405d26
push 1
mov edx, 0x427dd4
lea ecx, [esp + 0x1c]
call fcn.00404f88
mov edx, eax
lea ecx, [esp + 0x78]
call fcn.00407e5a
push 0
push 1
lea ecx, [esp + 0x20]
mov bl, al
call fcn.0040199b
test bl, bl
je 0x405e80
mov ecx, 0x489850
jmp 0x405eb3
push 1
mov edx, 0x430724
lea ecx, [esp + 0x1c]
call fcn.00404f88
mov edx, eax
lea ecx, [esp + 0x78]
call fcn.00407e5a
push 0
push 1
lea ecx, [esp + 0x20]
mov bl, al
call fcn.0040199b
test bl, bl
je 0x405ec6
mov ecx, 0x489870
push 0xffffffffffffffff
push 0
lea eax, [esp + 0x68]
push eax
call fcn.004017f8
jmp 0x405d28
push 1
mov edx, 0x4310f4
lea ecx, [esp + 0x1c]
call fcn.00404f88
mov edx, eax
lea ecx, [esp + 0x78]
call fcn.00407e5a
push 0
push 1
lea ecx, [esp + 0x20]
mov bl, al
call fcn.0040199b
test bl, bl
je 0x405d26
push 0xe
mov edx, 0x463020
lea ecx, [esp + 0x1c]
call fcn.00404f88
push 0xffffffffffffffff
push 0
push 0x4899b0
mov ecx, eax
call fcn.00401bde
push eax
lea ecx, [esp + 0x10c]
call fcn.0040165a
lea edx, [esp + 0x108]
lea ecx, [esp + 0x30]
call fcn.00405026
push 0
push 1
lea ecx, [esp + 0x110]
call fcn.0040199b
push 0
push 1
lea ecx, [esp + 0x20]
call fcn.0040199b
push 6
mov edx, 0x4391a4
lea ecx, [esp + 0xf4]
call fcn.00404f88
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x38]
push ecx
mov ecx, eax
call fcn.00401bde
push eax
lea ecx, [esp + 0x1c]
call fcn.0040165a
push 8
mov edx, 0x44fe70
lea ecx, [esp + 0x4c]
call fcn.00404f88
push eax
lea edx, [esp + 0x1c]
lea ecx, [esp + 0xdc]
call fcn.00407e76
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x68]
push ecx
mov ecx, eax
call fcn.00401bde
push eax
lea ecx, [esp + 0x10c]
call fcn.0040165a
push 0x423fa4
lea edx, [esp + 0x10c]
lea ecx, [esp + 0x124]
call fcn.00407eba
mov ecx, eax
call fcn.00407936
push 0
push 1
lea ecx, [esp + 0x128]
call fcn.0040199b
push 0
push 1
lea ecx, [esp + 0x110]
call fcn.0040199b
push 0
push 1
lea ecx, [esp + 0xe0]
call fcn.0040199b
push 0
push 1
lea ecx, [esp + 0x20]
call fcn.0040199b
push 0
push 1
lea ecx, [esp + 0xf8]
call fcn.0040199b
push 0
push 1
lea ecx, [esp + 0x50]
call fcn.0040199b
lea edx, [esp + 0x60]
lea ecx, [esp + 0x30]
call fcn.00407e5a
test al, al
je 0x406050
mov byte [0x48b71f], 1
jmp 0x406074
push 0x25
mov edx, 0x47df90
lea ecx, [esp + 0x4c]
call fcn.00404f88
mov ecx, eax
call fcn.00405991
push 0
push 1
lea ecx, [esp + 0x50]
call fcn.0040199b
push 0
push 1
lea ecx, [esp + 0x38]
call fcn.0040199b
jmp 0x405d28
xor ebx, ebx
inc ebx
push 0
push ebx
lea ecx, [esp + 0x68]
call fcn.0040199b
push 0
push ebx
lea ecx, [esp + 0x80]
call fcn.0040199b
jmp 0x406163
push 8
mov edx, 0x4575a0
lea ecx, [esp + 0x4c]
call fcn.00404f88
mov edx, eax
lea ecx, [esp + 0x90]
call fcn.00407e5a
push 0
push 1
lea ecx, [esp + 0x50]
mov bl, al
call fcn.0040199b
test bl, bl
je 0x4060e5
xor ebx, ebx
inc ebx
mov byte [0x48ad82], bl
jmp 0x406163
push 6
mov edx, 0x43296c
lea ecx, [esp + 0x4c]
call fcn.00404f88
mov edx, eax
lea ecx, [esp + 0x90]
call fcn.00407e5a
push 0
push 1
lea ecx, [esp + 0x50]
mov bl, al
call fcn.0040199b
test bl, bl
je 0x406121
xor ebx, ebx
inc ebx
mov byte [0x48b71d], bl
jmp 0x406163
push 9
mov edx, 0x46cb30
lea ecx, [esp + 0x4c]
call fcn.00404f88
mov edx, eax
lea ecx, [esp + 0x90]
call fcn.00407e5a
push 0
push 1
lea ecx, [esp + 0x50]
mov bl, al
call fcn.0040199b
movzx ecx, byte [0x48b71e]
test bl, bl
push 1
pop ebx
cmovne ecx, ebx
mov byte [0x48b71e], cl
push edi
push ecx
lea ecx, [esp + 0xc8]
call fcn.00407bbe
mov esi, eax
mov dword [esp + 0x14], 0x2f
push ebx
push esi
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0xcc]
call fcn.004018f7
mov edi, eax
jmp 0x405b83
cmp dword [0x489860], 0
je 0x4062da
cmp dword [0x489880], 0
je 0x4062da
mov edi, 0x423fa8
lea ecx, [esp + 0xd8]
push edi
push ebx
mov edx, 0x430724
call fcn.00404f88
mov ebp, 0x423fac
lea ecx, [esp + 0xf4]
push eax
mov edx, ebp
call fcn.00407eec
mov edx, eax
lea ecx, [esp + 0x4c]
call fcn.00407eba
push 0xffffffffffffffff
push 0
push 0x489870
mov ecx, eax
call fcn.00401bde
push eax
lea ecx, [esp + 0x1c]
call fcn.0040165a
push 0xffffffffffffffff
push 0
lea eax, [esp + 0x20]
mov esi, 0x489890
push eax
mov ecx, esi
call fcn.00401bde
push 0
push ebx
lea ecx, [esp + 0x20]
call fcn.0040199b
push 0
push ebx
lea ecx, [esp + 0x50]
call fcn.0040199b
push 0
push ebx
lea ecx, [esp + 0xf8]
call fcn.0040199b
push 0
push ebx
lea ecx, [esp + 0xe0]
call fcn.0040199b
push edi
push ebx
mov edx, 0x427dd4
lea ecx, [esp + 0xe0]
call fcn.00404f88
push eax
mov edx, ebp
lea ecx, [esp + 0xf8]
call fcn.00407eec
mov edx, eax
lea ecx, [esp + 0x4c]
call fcn.00407eba
push 0xffffffffffffffff
push 0
push 0x489850
mov ecx, eax
call fcn.00401bde
push eax
lea ecx, [esp + 0x1c]
call fcn.0040165a
push 0xffffffffffffffff
push 0
lea eax, [esp + 0x20]
mov ecx, esi
push eax
call fcn.00401bde
push 0
push ebx
lea ecx, [esp + 0x20]
call fcn.0040199b
push 0
push ebx
lea ecx, [esp + 0x50]
call fcn.0040199b
push 0
push ebx
lea ecx, [esp + 0xf8]
call fcn.0040199b
push 0
push ebx
lea ecx, [esp + 0xe0]
call fcn.0040199b
jmp 0x406302
mov byte [0x48ad83], bl
jmp 0x406302
xor ebx, ebx
lea ecx, [esp + 0x60]
push 0
inc ebx
push ebx
call fcn.0040199b
push 0
push ebx
lea ecx, [esp + 0x80]
call fcn.0040199b
xor bl, bl
xor eax, eax
lea ecx, [esp + 0x90]
push 0
inc eax
push eax
call fcn.0040199b
xor eax, eax
lea ecx, [esp + 0xc0]
push 0
inc eax
push eax
call fcn.0040199b
xor eax, eax
lea ecx, [esp + 0xa8]
push 0
inc eax
push eax
call fcn.0040176d
pop edi
pop esi
pop ebp
mov al, bl
pop ebx
add esp, 0x12c
ret