Function at 0x4035ef
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x48413f
mov eax, dword fs:[0]
push eax
sub esp, 0x300
mov eax, dword [0x4a20b0]
xor eax, esp
mov dword [esp + 0x2f8], eax
push ebx
push esi
push edi
mov eax, dword [0x4a20b0]
xor eax, esp
push eax
lea eax, [esp + 0x310]
mov dword fs:[0], eax
lea eax, [esp + 0x70]
mov esi, edx
push eax
mov dword [esp + 0x18], esi
call fcn.00411061
push eax
lea eax, [esp + 0xac]
xor ebx, ebx
push eax
mov dword [esp + 0x320], ebx
call fcn.00427d15
pop ecx
pop ecx
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [esp + 0x78]
mov byte [esp + 0x320], 2
call fcn.0040488d
cmp dword [esp + 0xbc], ebx
jne 0x40368f
push 0x10
push 0x4892c8
push 0x489940
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x4039cb
push ebx
push ebx
lea eax, [esp + 0x24]
call fcn.0041fc92
push eax
lea ecx, [esp + 0xac]
mov byte [esp + 0x31c], 5
call fcn.00401778
pop ecx
test al, al
je 0x4039a7
cmp byte [esp + 0x24], 7
jne 0x4039a7
push 0x489974
lea ecx, [esp + 0x3c]
call fcn.00404550
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x488f6b
mov byte [esp + 0x338], 6
call fcn.00404550
lea eax, [esp + 0x54]
push eax
lea eax, [esp + 0x100]
push eax
lea esi, [esp + 0x40]
call fcn.004018a9
add esp, 0x24
push ebx
push edi
lea ecx, [esp + 0x40]
mov byte [esp + 0x320], 8
call fcn.0040488d
push 0x489978
lea ecx, [esp + 0x58]
call fcn.00404550
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x488f6b
mov byte [esp + 0x338], 9
call fcn.00404550
lea eax, [esp + 0x70]
push eax
lea eax, [esp + 0xe4]
push eax
call fcn.004018a9
add esp, 0x24
push ebx
push edi
lea ecx, [esp + 0x5c]
mov byte [esp + 0x320], 0xb
call fcn.0040488d
cmp dword [esp + 0xf4], ebx
je 0x4037ed
lea eax, [esp + 0x38]
push eax
call fcn.00414860
pop ecx
mov ecx, eax
lea eax, [esp + 0xe0]
mov byte [esp + 0x318], 0xc
call fcn.00405fed
neg al
sbb al, al
push ebx
inc al
push edi
lea ecx, [esp + 0x40]
mov byte [esp + 0x1b], al
mov byte [esp + 0x320], 0xb
call fcn.0040488d
cmp byte [esp + 0x13], bl
je 0x4037ed
push 0x10
push 0x4892c8
push 0x489984
push dword [esp + 0x20]
call dword [sym.imp.USER32.dll_MessageBoxW]
push ebx
push edi
lea ecx, [esp + 0xcc]
call fcn.0040488d
push ebx
push edi
lea ecx, [esp + 0xe8]
call fcn.0040488d
jmp 0x4039ba
cmp dword [esp + 0xd8], ebx
je 0x403968
xor eax, eax
push 0x206
mov word [esp + 0x100], ax
lea eax, [esp + 0x102]
push ebx
push eax
call fcn.00469330
add esp, 0xc
push ebx
lea eax, [esp + 0x100]
push eax
push 0x40
push edi
push 0x48999c
push 0x65
push dword [0x4a6ea0]
call dword [sym.imp.USER32.dll_LoadIconW]
mov edi, 0x104
jmp 0x4038fb
cmp word [esp + 0xfc], bx
je 0x4038bb
lea eax, [esp + 0xc4]
push eax
lea eax, [esp + 0x90]
push eax
call fcn.0040124d
lea ecx, [esp + 0x104]
push ecx
mov byte [esp + 0x324], 0xe
call fcn.00406241
add esp, 0xc
neg al
sbb al, al
push ebx
inc al
push 1
lea esi, [esp + 0x94]
mov byte [esp + 0x1b], al
mov byte [esp + 0x320], 0xb
call fcn.0040498a
cmp byte [esp + 0x13], bl
je 0x403965
push 0x10
push 0x4892c8
push 0x4899dc
push dword [esp + 0x20]
call dword [sym.imp.USER32.dll_MessageBoxW]
xor eax, eax
push 0x206
mov word [esp + 0x100], ax
lea eax, [esp + 0x102]
push ebx
push eax
call fcn.00469330
add esp, 0xc
push ebx
lea eax, [esp + 0x100]
push eax
push 0x40
push 1
push 0x48999c
push 0x65
push dword [0x4a6ea0]
call dword [sym.imp.USER32.dll_LoadIconW]
push eax
push 0x4899ac
push dword [esp + 0x30]
push dword [0x4a6ea0]
call fcn.004284c9
add esp, 0x24
test eax, eax
jne 0x403843
push 0x30
push 0x4899d4
push 0x4899bc
push dword [esp + 0x20]
call dword [sym.imp.USER32.dll_MessageBoxW]
push ebx
push 1
lea ecx, [esp + 0xcc]
call fcn.0040488d
push ebx
push 1
lea ecx, [esp + 0xe8]
call fcn.0040488d
lea esi, [esp + 0x1c]
mov byte [esp + 0x318], 2
call fcn.0041eec5
push ebx
push 1
jmp 0x4039cd
xor edi, edi
inc edi
push ebx
push edi
lea ecx, [esp + 0xcc]
call fcn.0040488d
push ebx
push edi
lea ecx, [esp + 0xe8]
call fcn.0040488d
lea esi, [esp + 0x1c]
mov byte [esp + 0x318], 2
call fcn.0041eec5
push ebx
push edi
lea ecx, [esp + 0xb0]
call fcn.0040488d
mov eax, edi
jmp 0x4039db
push 0x10
push 0x4892c8
push 0x489954
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
lea esi, [esp + 0x1c]
mov byte [esp + 0x318], 2
call fcn.0041eec5
push ebx
push edi
lea ecx, [esp + 0xb0]
call fcn.0040488d
xor eax, eax
mov ecx, dword [esp + 0x310]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x2f8]
xor ecx, esp
call fcn.004678b3
mov esp, ebp
pop ebp
ret