Function at 0x404dae
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x445fe5
mov eax, dword fs:[0]
push eax
sub esp, 0x130
mov eax, dword [0x458210]
xor eax, esp
mov dword [esp + 0x128], eax
push ebx
push esi
push edi
mov eax, dword [0x458210]
xor eax, esp
push eax
lea eax, [esp + 0x140]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov edi, edx
xor ebx, ebx
cmp dword [edi], ebx
mov dword [esp + 0x34], edi
mov dword [esp + 0x3c], eax
jne 0x404e2c
mov eax, 0x80004005
mov ecx, dword [esp + 0x140]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x128]
xor ecx, esp
call fcn.00434bcb
mov esp, ebp
pop ebp
ret 0x10
mov eax, dword [ebp + 0x14]
mov dword [edi + 4], eax
mov byte [esp + 0x12], 1
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
cmp ecx, ebx
mov dword [esp + 0x148], ebx
je 0x404f72
lea eax, [esp + 0x24]
push eax
push 0x3b
mov byte [esp + 0x1a], 0
call fcn.0040e130
pop ecx
pop ecx
lea eax, [esp + 0x24]
mov dword [esp + 0x14], ebx
call fcn.00403cab
test eax, eax
jbe 0x404ec4
push dword [esp + 0x14]
lea esi, [esp + 0x28]
call fcn.00407e87
push 0x448dac
mov ebx, 0x448e18
mov edi, eax
call fcn.0040c0b0
pop ecx
push 0x5c
push 0x2f
call fcn.0040c160
push 0x448e0c
mov eax, edi
call fcn.0040c230
add esp, 0xc
inc dword [esp + 0x14]
mov eax, esi
call fcn.00403cab
cmp dword [esp + 0x14], eax
jb 0x404e76
mov edi, dword [esp + 0x34]
xor ebx, ebx
mov esi, dword [esp + 0x28]
cmp esi, dword [esp + 0x2c]
jbe 0x404ed3
call fcn.004352f5
lea eax, [esp + 0x24]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], esi
mov esi, dword [esp + 0x2c]
cmp dword [esp + 0x28], esi
jbe 0x404eee
call fcn.004352f5
cmp dword [esp + 0x18], ebx
je 0x404efe
lea eax, [esp + 0x24]
cmp dword [esp + 0x18], eax
je 0x404f03
call fcn.004352f5
cmp dword [esp + 0x1c], esi
je 0x404f57
lea esi, [esp + 0x18]
call fcn.00403d7e
cmp dword [eax + 0x14], ebx
jne 0x404f4c
mov ebx, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
push ebx
push dword [esp + 0x30]
lea eax, [ebx + 0x1c]
call fcn.00405e70
mov eax, dword [esp + 0x34]
pop ecx
pop ecx
push eax
add eax, 0xffffffe4
call fcn.00403f61
sub dword [esp + 0x2c], 0x1c
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], esi
xor ebx, ebx
jmp 0x404edf
lea esi, [esp + 0x18]
call fcn.00403d9b
jmp 0x404edf
lea eax, [esp + 0x24]
call fcn.00403cab
test eax, eax
jne 0x404f72
lea esi, [esp + 0x24]
call fcn.00403c6c
jmp 0x404e01
mov eax, dword [esp + 0x3c]
lea esi, [esp + 0xd0]
call fcn.00403d21
mov byte [esp + 0x148], 1
cmp dword [esp + 0xe4], ebx
je 0x404f9d
push 0x10
mov ecx, esi
call fcn.0040cf50
pop ecx
mov esi, dword [edi]
cmp esi, ebx
mov dword [esp + 0x14], esi
je 0x404fae
mov eax, esi
call fcn.0040e440
add edi, 8
call fcn.004160f9
mov ebx, eax
xor eax, eax
cmp ebx, eax
mov dword [esp + 0x18], ebx
jne 0x404ff8
cmp esi, eax
mov byte [esp + 0x148], 1
je 0x404fd3
call fcn.0040efa0
mov ebx, 0x80004005
push 0
push 1
lea esi, [esp + 0xd8]
call fcn.004012b6
lea esi, [esp + 0x24]
call fcn.00403c6c
mov eax, ebx
jmp 0x404e06
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], eax
mov byte [esp + 0x148], 3
lea ecx, [esp + 0x38]
mov dword [esp + 0x38], eax
mov eax, dword [ebx]
push ecx
mov ecx, ebx
call dword [eax + 0x18]
mov edi, eax
xor eax, eax
cmp edi, eax
je 0x405046
lea esi, [esp + 0x40]
call fcn.00428e28
mov byte [esp + 0x148], 1
mov esi, dword [esp + 0x14]
test esi, esi
je 0x405042
call fcn.0040efa0
mov ebx, edi
jmp 0x404fd8
cmp dword [esp + 0x38], eax
jne 0x405071
lea esi, [esp + 0x40]
call fcn.00428e28
mov byte [esp + 0x148], 1
mov esi, dword [esp + 0x14]
test esi, esi
je 0x40506a
call fcn.0040efa0
xor ebx, ebx
jmp 0x404fd8
cmp dword [esp + 0x38], eax
mov dword [esp + 0x20], eax
jbe 0x4051b9
lea eax, [esp + 0x8c]
mov byte [esp + 0x13], 0
call fcn.0040e460
lea ecx, [esp + 0x8c]
push ecx
mov byte [esp + 0x14c], 4
mov eax, dword [ebx]
push 6
push dword [esp + 0x28]
mov ecx, ebx
call dword [eax + 0x1c]
mov edi, eax
xor esi, esi
cmp edi, esi
jne 0x4053d1
cmp dword [esp + 0x8c], 4
jne 0x4050d8
mov eax, dword [esp + 0xac]
or eax, dword [esp + 0xb0]
je 0x4050d8
mov byte [esp + 0x13], 1
lea eax, [esp + 0x90]
mov dword [esp + 0x8c], esi
mov dword [esp + 0xac], esi
mov dword [esp + 0xb0], esi
call fcn.00407d2b
mov eax, dword [ebx]
lea ecx, [esp + 0x8c]
push ecx
push 3
push dword [esp + 0x28]
mov ecx, ebx
call dword [eax + 0x1c]
mov edi, eax
cmp edi, esi
jne 0x4053d1
lea eax, [esp + 0x90]
lea esi, [esp + 0xb4]
call fcn.00403d21
cmp byte [esp + 0x12], 0
mov byte [esp + 0x148], 5
je 0x40534a
mov esi, dword [esp + 0x34]
mov eax, dword [esi + 0x94]
add esi, 0x90
mov dword [esp + 0x6c], eax
lea eax, [esp + 0x58]
push eax
lea ebx, [esp + 0x24]
mov dword [esp + 0x6c], esi
call fcn.00415d70
lea edi, [esp + 0x68]
mov esi, eax
call fcn.0040555a
test al, al
je 0x40517f
mov eax, ebx
push eax
lea eax, [esp + 0x44]
call fcn.004054ca
mov ebx, dword [esp + 0x18]
push 0
push 1
lea esi, [esp + 0xbc]
call fcn.004012b6
lea esi, [esp + 0x8c]
mov byte [esp + 0x148], 3
call fcn.0040e480
inc dword [esp + 0x20]
mov eax, dword [esp + 0x20]
cmp eax, dword [esp + 0x38]
jb 0x40507f
xor edi, edi
cmp dword [esp + 0x44], edi
je 0x40504c
mov eax, dword [esp + 0x48]
sub eax, dword [esp + 0x44]
sar eax, 2
je 0x40504c
push 0x130
call fcn.00434ec3
pop ecx
mov dword [esp + 0x18], eax
cmp eax, edi
mov byte [esp + 0x148], 6
je 0x4051f9
push eax
call fcn.00410f83
mov edi, eax
mov ecx, edi
neg ecx
lea eax, [edi + 8]
sbb ecx, ecx
and ecx, eax
lea esi, [esp + 0x18]
mov byte [esp + 0x148], 3
call fcn.004295fb
movzx eax, byte [ebp + 0x10]
movzx edx, byte [ebp + 0xc]
push eax
mov ecx, edi
mov byte [esp + 0x14c], 7
call fcn.004114f3
lea eax, [esp + 0xec]
call fcn.0040e740
mov esi, dword [esp + 0x34]
push eax
lea eax, [esi + 0x74]
push eax
mov byte [esp + 0x150], 8
call fcn.0040e6a0
pop ecx
pop ecx
mov eax, 0x448dac
lea ecx, [esp + 0x70]
call fcn.00401222
xor eax, eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov byte [esp + 0x148], 0xa
push dword [esp + 0x110]
lea eax, [esp + 0x108]
push dword [esp + 0x110]
push eax
lea eax, [esp + 0x7c]
push eax
lea eax, [esp + 0x68]
push eax
push dword [esp + 0x50]
mov eax, dword [esi + 0x70]
push ebx
push edi
call fcn.004113c3
lea esi, [esp + 0x58]
call fcn.00403c6c
push 0
push 1
lea esi, [esp + 0x78]
mov byte [esp + 0x150], 8
call fcn.004012b6
cmp byte [esp + 0x12], 0
je 0x4052de
mov eax, dword [esp + 0x34]
cmp dword [eax + 0x98], 0
jne 0x4052de
lea eax, [esp + 0x40]
call fcn.00405524
mov esi, dword [ebx]
lea eax, [esp + 0x18]
call fcn.0042213c
push eax
push 0
lea eax, [esp + 0x48]
push eax
mov ecx, ebx
call dword [esi + 0x20]
test eax, eax
mov dword [esp + 0x3c], eax
jne 0x4053e2
cmp byte [esp + 0x12], al
jne 0x4053e2
xor esi, esi
cmp dword [esp + 0x44], 0
je 0x4053e2
mov eax, dword [esp + 0x48]
sub eax, dword [esp + 0x44]
sar eax, 2
cmp esi, eax
jae 0x4053e2
mov eax, dword [esp + 0x44]
mov ebx, dword [esp + 0x34]
lea eax, [eax + esi*4]
push eax
add ebx, 0x90
lea edi, [esp + 0x5c]
call fcn.00405426
inc esi
jmp 0x40530e
cmp byte [esp + 0x13], 0
jne 0x405183
mov esi, dword [esp + 0x28]
cmp esi, dword [esp + 0x2c]
jbe 0x405364
call fcn.004352f5
lea eax, [esp + 0x24]
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], esi
mov esi, dword [esp + 0x2c]
cmp dword [esp + 0x28], esi
jbe 0x40537f
call fcn.004352f5
cmp dword [esp + 0x50], 0
je 0x405390
lea eax, [esp + 0x24]
cmp dword [esp + 0x50], eax
je 0x405395
call fcn.004352f5
cmp dword [esp + 0x54], esi
je 0x405183
lea esi, [esp + 0x50]
call fcn.00403d7e
lea esi, [esp + 0xb4]
call fcn.0040bfe0
test eax, eax
jne 0x4053c6
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x44]
call fcn.004054ca
lea esi, [esp + 0x50]
call fcn.00403d9b
jmp 0x405370
lea esi, [esp + 0x8c]
call fcn.0040e480
jmp 0x405024
lea esi, [esp + 0xec]
call fcn.0040e770
lea eax, [esp + 0x18]
mov byte [esp + 0x148], 3
call fcn.004148f9
lea esi, [esp + 0x40]
call fcn.00428e28
mov byte [esp + 0x148], 1
mov esi, dword [esp + 0x14]
test esi, esi
je 0x40541d
call fcn.0040efa0
mov ebx, dword [esp + 0x3c]
jmp 0x404fd8