Function at 0x405aca
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x12c
push ebx
push ebp
push esi
push edi
push ecx
lea ecx, [esp + 0xac]
call fcn.00401593
cmp dword [esp + 0xbc], 0x10
lea ecx, [esp + 0xa8]
mov eax, dword [esp + 0xb8]
cmovae ecx, dword [esp + 0xa8]
add eax, ecx
cmp dword [esp + 0xbc], 0x10
lea ecx, [esp + 0xa8]
cmovae ecx, dword [esp + 0xa8]
push eax
push ecx
lea ecx, [esp + 0xc8]
call fcn.004035a1
push 0
push ecx
lea ecx, [esp + 0xc8]
call fcn.00407dc0
xor ebx, ebx
mov dword [esp + 0x14], 0x2f
mov esi, eax
lea ecx, [esp + 0xc0]
inc ebx
lea eax, [esp + 0x14]
push ebx
push esi
push eax
call fcn.004018f7
and dword [esp + 0xa0], 0
mov edi, eax
xor eax, eax
mov dword [esp + 0xa4], 7
push 0x423f60
mov ecx, 0x44a9c0
mov word [esp + 0x94], ax
call fcn.0040187c
cmp edi, 0xffffffff
jne 0x405b90
cmp esi, edi
je 0x406195
mov eax, edi
lea ecx, [esp + 0xc0]
sub eax, esi
xor bh, bh
push eax
push esi
lea eax, [esp + 0x20]
push eax
call fcn.0040301f
push eax
lea ecx, [esp + 0x94]
call fcn.00407d00
xor ebp, ebp
lea ecx, [esp + 0x18]
push 0
inc ebp
push ebp
call fcn.0040199b
push ebp
push 0
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x20
push eax
lea ecx, [esp + 0x9c]
call fcn.004018f7
mov esi, eax
cmp esi, 0xffffffff
je 0x4060a9
push esi
push 0
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0x9c]
call fcn.0040301f
push 0xffffffffffffffff
lea eax, [esi + 1]
push eax
lea eax, [esp + 0x68]
push eax
lea ecx, [esp + 0x9c]
call fcn.0040301f
push 4
mov edx, 0x433164
lea ecx, [esp + 0x1c]
call fcn.00404f88
mov edx, eax
lea ecx, [esp + 0x78]
call fcn.0040805c
push 0
push ebp
lea ecx, [esp + 0x20]
mov bl, al
call fcn.0040199b
test bl, bl
je 0x405c61
cmp dword [esp + 0x70], 0
jbe 0x4062e2
xor eax, eax
inc eax
mov byte [0x45272b], al
mov bh, al
jmp 0x405d28
push 9
mov edx, 0x440d00
lea ecx, [esp + 0x1c]
call fcn.00404f88
mov edx, eax
lea ecx, [esp + 0x78]
call fcn.0040805c
push 0
push ebp
lea ecx, [esp + 0x20]
mov bl, al
call fcn.0040199b
test bl, bl
je 0x405c9f
mov byte [0x45272f], 1
mov ecx, 0x44aa00
jmp 0x405eb3
push 6
mov edx, 0x430658
lea ecx, [esp + 0x1c]
call fcn.00404f88
mov edx, eax
lea ecx, [esp + 0x78]
call fcn.0040805c
push 0
push 1
lea ecx, [esp + 0x20]
mov bl, al
call fcn.0040199b
test bl, bl
je 0x405cd6
mov byte [0x45272e], 1
jmp 0x405c95
push 1
mov edx, 0x42aefc
lea ecx, [esp + 0x1c]
call fcn.00404f88
mov edx, eax
lea ecx, [esp + 0x78]
call fcn.0040805c
push 0
push 1
lea ecx, [esp + 0x20]
mov bl, al
call fcn.0040199b
test bl, bl
je 0x405e4b
cmp dword [esp + 0x70], 0
jbe 0x405e1e
push 0xffffffffffffffff
push 0
lea eax, [esp + 0x68]
mov ecx, 0x44a9e0
push eax
call fcn.004017f8
mov bh, 1
test bh, bh
je 0x406086
and dword [esp + 0x40], 0
xor eax, eax
mov ebp, 0x423f6c
mov dword [esp + 0x44], 7
push ebp
mov word [esp + 0x34], ax
call fcn.0040e425
add eax, dword [esp + 0x8c]
xor ebx, ebx
mov esi, dword [esp + 0x44]
inc ebx
pop ecx
cmp esi, eax
ja 0x405d8f
cmp dword [esp + 0x44], eax
je 0x405d8f
push ebx
push eax
lea ecx, [esp + 0x38]
call fcn.00401d74
test al, al
je 0x405d8f
cmp dword [esp + 0x44], 8
lea eax, [esp + 0x30]
mov dword [esp + 0x40], esi
cmovae eax, dword [esp + 0x30]
xor ecx, ecx
mov word [eax + esi*2], cx
push ebp
call fcn.0040e425
pop ecx
push eax
push ebp
lea ecx, [esp + 0x38]
call fcn.00401c70
push 0xffffffffffffffff
push 0
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0x3c]
call fcn.00401bde
push 0x423f68
lea edx, [esp + 0x34]
lea ecx, [esp + 0x4c]
call fcn.004080bc
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x68]
push ecx
mov ecx, eax
call fcn.00401bde
push eax
lea ecx, [esp + 0x1c]
call fcn.0040165a
push 0xffffffffffffffff
push 0
lea eax, [esp + 0x20]
mov ecx, 0x44a9c0
push eax
call fcn.00401bde
push 0
push ebx
lea ecx, [esp + 0x20]
call fcn.0040199b
push 0
push ebx
lea ecx, [esp + 0x50]
call fcn.0040199b
push 0
push ebx
lea ecx, [esp + 0x38]
call fcn.0040199b
jmp 0x406089
push 7
mov edx, 0x43b6a4
lea ecx, [esp + 0x1c]
call fcn.00404f88
push eax
mov ecx, 0x44a9e0
call fcn.00407d00
push 0
push 1
lea ecx, [esp + 0x20]
call fcn.0040199b
jmp 0x405d26
push 1
mov edx, 0x428284
lea ecx, [esp + 0x1c]
call fcn.00404f88
mov edx, eax
lea ecx, [esp + 0x78]
call fcn.0040805c
push 0
push 1
lea ecx, [esp + 0x20]
mov bl, al
call fcn.0040199b
test bl, bl
je 0x405e80
mov ecx, 0x44a980
jmp 0x405eb3
push 1
mov edx, 0x42cfec
lea ecx, [esp + 0x1c]
call fcn.00404f88
mov edx, eax
lea ecx, [esp + 0x78]
call fcn.0040805c
push 0
push 1
lea ecx, [esp + 0x20]
mov bl, al
call fcn.0040199b
test bl, bl
je 0x405ec6
mov ecx, 0x44a9a0
push 0xffffffffffffffff
push 0
lea eax, [esp + 0x68]
push eax
call fcn.004017f8
jmp 0x405d28
push 1
mov edx, 0x42e2e0
lea ecx, [esp + 0x1c]
call fcn.00404f88
mov edx, eax
lea ecx, [esp + 0x78]
call fcn.0040805c
push 0
push 1
lea ecx, [esp + 0x20]
mov bl, al
call fcn.0040199b
test bl, bl
je 0x405d26
push 0xe
mov edx, 0x43ced0
lea ecx, [esp + 0x1c]
call fcn.00404f88
push 0xffffffffffffffff
push 0
push 0x44aae0
mov ecx, eax
call fcn.00401bde
push eax
lea ecx, [esp + 0x10c]
call fcn.0040165a
lea edx, [esp + 0x108]
lea ecx, [esp + 0x30]
call fcn.004051b3
push 0
push 1
lea ecx, [esp + 0x110]
call fcn.0040199b
push 0
push 1
lea ecx, [esp + 0x20]
call fcn.0040199b
push 6
mov edx, 0x434b34
lea ecx, [esp + 0xf4]
call fcn.00404f88
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x38]
push ecx
mov ecx, eax
call fcn.00401bde
push eax
lea ecx, [esp + 0x1c]
call fcn.0040165a
push 8
mov edx, 0x4353e0
lea ecx, [esp + 0x4c]
call fcn.00404f88
push eax
lea edx, [esp + 0x1c]
lea ecx, [esp + 0xdc]
call fcn.00408078
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x68]
push ecx
mov ecx, eax
call fcn.00401bde
push eax
lea ecx, [esp + 0x10c]
call fcn.0040165a
push 0x423f64
lea edx, [esp + 0x10c]
lea ecx, [esp + 0x124]
call fcn.004080bc
mov ecx, eax
call fcn.00407b0e
push 0
push 1
lea ecx, [esp + 0x128]
call fcn.0040199b
push 0
push 1
lea ecx, [esp + 0x110]
call fcn.0040199b
push 0
push 1
lea ecx, [esp + 0xe0]
call fcn.0040199b
push 0
push 1
lea ecx, [esp + 0x20]
call fcn.0040199b
push 0
push 1
lea ecx, [esp + 0xf8]
call fcn.0040199b
push 0
push 1
lea ecx, [esp + 0x50]
call fcn.0040199b
lea edx, [esp + 0x60]
lea ecx, [esp + 0x30]
call fcn.0040805c
test al, al
je 0x406050
mov byte [0x452e35], 1
jmp 0x406074
push 0x25
mov edx, 0x447200
lea ecx, [esp + 0x4c]
call fcn.00404f88
mov ecx, eax
call fcn.00405991
push 0
push 1
lea ecx, [esp + 0x50]
call fcn.0040199b
push 0
push 1
lea ecx, [esp + 0x38]
call fcn.0040199b
jmp 0x405d28
xor ebx, ebx
inc ebx
push 0
push ebx
lea ecx, [esp + 0x68]
call fcn.0040199b
push 0
push ebx
lea ecx, [esp + 0x80]
call fcn.0040199b
jmp 0x406163
push 8
mov edx, 0x437820
lea ecx, [esp + 0x4c]
call fcn.00404f88
mov edx, eax
lea ecx, [esp + 0x90]
call fcn.0040805c
push 0
push 1
lea ecx, [esp + 0x50]
mov bl, al
call fcn.0040199b
test bl, bl
je 0x4060e5
xor ebx, ebx
inc ebx
mov byte [0x45272c], bl
jmp 0x406163
push 6
mov edx, 0x430658
lea ecx, [esp + 0x4c]
call fcn.00404f88
mov edx, eax
lea ecx, [esp + 0x90]
call fcn.0040805c
push 0
push 1
lea ecx, [esp + 0x50]
mov bl, al
call fcn.0040199b
test bl, bl
je 0x406121
xor ebx, ebx
inc ebx
mov byte [0x45272e], bl
jmp 0x406163
push 9
mov edx, 0x440d00
lea ecx, [esp + 0x4c]
call fcn.00404f88
mov edx, eax
lea ecx, [esp + 0x90]
call fcn.0040805c
push 0
push 1
lea ecx, [esp + 0x50]
mov bl, al
call fcn.0040199b
movzx ecx, byte [0x45272f]
test bl, bl
push 1
pop ebx
cmovne ecx, ebx
mov byte [0x45272f], cl
push edi
push ecx
lea ecx, [esp + 0xc8]
call fcn.00407dc0
mov esi, eax
mov dword [esp + 0x14], 0x2f
push ebx
push esi
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0xcc]
call fcn.004018f7
mov edi, eax
jmp 0x405b83
cmp dword [0x44a990], 0
je 0x4062da
cmp dword [0x44a9b0], 0
je 0x4062da
mov edi, 0x423f68
lea ecx, [esp + 0xd8]
push edi
push ebx
mov edx, 0x42cfec
call fcn.00404f88
mov ebp, 0x423f6c
lea ecx, [esp + 0xf4]
push eax
mov edx, ebp
call fcn.004080ee
mov edx, eax
lea ecx, [esp + 0x4c]
call fcn.004080bc
push 0xffffffffffffffff
push 0
push 0x44a9a0
mov ecx, eax
call fcn.00401bde
push eax
lea ecx, [esp + 0x1c]
call fcn.0040165a
push 0xffffffffffffffff
push 0
lea eax, [esp + 0x20]
mov esi, 0x44a9c0
push eax
mov ecx, esi
call fcn.00401bde
push 0
push ebx
lea ecx, [esp + 0x20]
call fcn.0040199b
push 0
push ebx
lea ecx, [esp + 0x50]
call fcn.0040199b
push 0
push ebx
lea ecx, [esp + 0xf8]
call fcn.0040199b
push 0
push ebx
lea ecx, [esp + 0xe0]
call fcn.0040199b
push edi
push ebx
mov edx, 0x428284
lea ecx, [esp + 0xe0]
call fcn.00404f88
push eax
mov edx, ebp
lea ecx, [esp + 0xf8]
call fcn.004080ee
mov edx, eax
lea ecx, [esp + 0x4c]
call fcn.004080bc
push 0xffffffffffffffff
push 0
push 0x44a980
mov ecx, eax
call fcn.00401bde
push eax
lea ecx, [esp + 0x1c]
call fcn.0040165a
push 0xffffffffffffffff
push 0
lea eax, [esp + 0x20]
mov ecx, esi
push eax
call fcn.00401bde
push 0
push ebx
lea ecx, [esp + 0x20]
call fcn.0040199b
push 0
push ebx
lea ecx, [esp + 0x50]
call fcn.0040199b
push 0
push ebx
lea ecx, [esp + 0xf8]
call fcn.0040199b
push 0
push ebx
lea ecx, [esp + 0xe0]
call fcn.0040199b
jmp 0x406302
mov byte [0x45272d], bl
jmp 0x406302
xor ebx, ebx
lea ecx, [esp + 0x60]
push 0
inc ebx
push ebx
call fcn.0040199b
push 0
push ebx
lea ecx, [esp + 0x80]
call fcn.0040199b
xor bl, bl
xor eax, eax
lea ecx, [esp + 0x90]
push 0
inc eax
push eax
call fcn.0040199b
xor eax, eax
lea ecx, [esp + 0xc0]
push 0
inc eax
push eax
call fcn.0040199b
xor eax, eax
lea ecx, [esp + 0xa8]
push 0
inc eax
push eax
call fcn.0040176d
pop edi
pop esi
pop ebp
mov al, bl
pop ebx
add esp, 0x12c
ret