Function at 0x410afa
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
mov edx, 0x14
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x410b00
call fcn.00428a60
mov edx, dword [esp + 0x5c]
lea ecx, [esp]
call fcn.00415060
mov edx, dword [esp + 0x60]
lea ecx, [esp + 4]
call fcn.00415060
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x20], 1
mov dword [esp + 0x24], 0xa
push 0
push dword [esp + 0x5c]
call sub.USER32.dll_EnableWindow
mov ebx, dword [esp + 0x74]
and ebx, ebx
jne 0x410b86
movsx ebx, word [0x43233e]
and ebx, ebx
jge 0x410b7a
movsx ebx, word [0x43233e]
dec ebx
mov dword [esp + 0x74], ebx
jmp 0x410b86
movsx ebx, word [0x43233e]
inc ebx
mov dword [esp + 0x74], ebx
push dword [esp + 0x74]
push dword [0x43229c]
push 0xffffffff
call fcn.00427dc4
mov dword [esp + 0x28], eax
push dword [esp + 0x28]
call fcn.00427dda
mov dword [esp + 0x2c], eax
push dword [esp + 0x58]
push 0x90c00002
mov eax, 0x42c02e
push eax
push 0xffff0001
push 0x190
push 0
push 0
push 0xffffffff
call fcn.0041e7ba
mov dword [0x432278], eax
push dword [esp + 4]
push 0
push 0
push 0x14
push 0x3c
push 0xffffffff
call fcn.0041991a
mov dword [esp + 0x34], eax
push dword [esp + 0x2c]
push dword [esp + 0x38]
call fcn.00419315
push dword [0x432260]
push dword [0x432278]
call fcn.0041ec64
push dword [0x432264]
push 1
push dword [esp + 0x3c]
call fcn.0041c7b7
push dword [0x432260]
push 2
push dword [esp + 0x3c]
call fcn.0041c7b7
push 1
push dword [esp + 0x38]
call fcn.00418ce3
mov dword [esp + 0x48], eax
push 1
push dword [esp + 0x38]
call fcn.00418d55
mov dword [esp + 0x4c], eax
mov ebx, dword [esp + 0x48]
cmp ebx, 0x15e
jge 0x410c81
mov dword [esp + 0x48], 0x15e
mov ebx, dword [esp + 0x4c]
cmp ebx, 0x20
jge 0x410c92
mov dword [esp + 0x4c], 0x20
mov ebx, dword [esp + 0x4c]
add ebx, 0x55
push ebx
mov ebx, dword [esp + 0x4c]
add ebx, 0x4b
push ebx
push 0xffff0001
push 0xffff0001
push dword [0x432278]
call fcn.0041ecc3
push dword [esp + 0x4c]
push dword [esp + 0x4c]
push 0xffff0001
push 0xffff0001
push dword [esp + 0x44]
call fcn.00419177
push 0x2d
mov ebx, dword [esp + 0x4c]
add ebx, 0x4b
push ebx
push dword [0x432278]
call fcn.0041e479
mov ebx, eax
add ebx, 0xffffffd3
push ebx
push 0
push 0xffffffff
call fcn.00419668
mov dword [esp + 0x38], eax
push dword [0x432278]
call fcn.0041eeab
mov dword [esp - 4], eax
fild dword [esp - 4]
fdiv qword [0x430064]
sub esp, 8
fstp qword [esp]
call fcn.00418820
mov dword [esp + 0x20], eax
push dword [esp + 0x64]
mov ebx, 4
cmp ebx, dword [esp]
jne 0x410e55
push edx
call fcn.00428880
pop edx
push eax
push edx
call fcn.00428880
pop edx
push eax
push 0x81c8
call fcn.0040947d
call fcn.00428b20
push 0x19
push 0x5a
push dword [esp + 0x38]
push dword [esp + 0x38]
push 0xffffffff
call fcn.004153d2
add dword [esp + 0x14], edx
call fcn.0041b01a
call fcn.004153f0
mov dword [esp + 0x40], eax
push edx
call fcn.00428880
pop edx
push eax
push edx
call fcn.00428880
pop edx
push eax
push 0x81d0
call fcn.0040947d
call fcn.00428b20
push 0x19
push 0x5a
push dword [esp + 0x38]
mov ebx, dword [esp + 0x38]
add ebx, 0x64
push ebx
push 0xffffffff
call fcn.004153d2
add dword [esp + 0x14], edx
call fcn.0041b01a
call fcn.004153f0
mov dword [esp + 0x44], eax
push dword [esp + 0x6c]
mov ebx, 6
cmp ebx, dword [esp]
jne 0x410df3
mov eax, dword [esp + 0x44]
mov dword [esp + 0x20], eax
jmp 0x410dfb
mov eax, dword [esp + 0x48]
mov dword [esp + 0x20], eax
pop eax
push 0
push 0x59
push dword [0x432278]
call fcn.0041eeb9
push 1
push 0x4e
push dword [0x432278]
call fcn.0041eeb9
push 0
push 0x40059
push dword [0x432278]
call fcn.0041eeb9
push 1
push 0x4004e
push dword [0x432278]
call fcn.0041eeb9
jmp 0x411066
mov ebx, 3
cmp ebx, dword [esp]
jne 0x410ff8
push edx
call fcn.00428880
pop edx
push eax
push edx
call fcn.00428880
pop edx
push eax
push 0x81c8
call fcn.0040947d
call fcn.00428b20
push 0x19
push 0x5a
push dword [esp + 0x38]
mov ebx, dword [esp + 0x38]
add ebx, 0xffffff6f
push ebx
push 0xffffffff
call fcn.004153d2
add dword [esp + 0x14], edx
call fcn.0041b01a
call fcn.004153f0
mov dword [esp + 0x40], eax
push edx
call fcn.00428880
pop edx
push eax
push edx
call fcn.00428880
pop edx
push eax
push 0x81d0
call fcn.0040947d
call fcn.00428b20
push 0x19
push 0x5a
push dword [esp + 0x38]
mov ebx, dword [esp + 0x38]
add ebx, 0xffffffd3
push ebx
push 0xffffffff
call fcn.004153d2
add dword [esp + 0x14], edx
call fcn.0041b01a
call fcn.004153f0
mov dword [esp + 0x44], eax
push edx
call fcn.00428880
pop edx
push eax
push edx
call fcn.00428880
pop edx
push eax
push 0x81cc
call fcn.0040947d
call fcn.00428b20
push 0x19
push 0x5a
push dword [esp + 0x38]
mov ebx, dword [esp + 0x38]
add ebx, 0x37
push ebx
push 0xffffffff
call fcn.004153d2
add dword [esp + 0x14], edx
call fcn.0041b01a
call fcn.004153f0
mov dword [esp + 0x48], eax
push dword [esp + 0x6c]
mov ebx, 6
cmp ebx, dword [esp]
jne 0x410f71
mov eax, dword [esp + 0x44]
mov dword [esp + 0x20], eax
jmp 0x410fa1
mov ebx, 7
cmp ebx, dword [esp]
jne 0x410f85
mov eax, dword [esp + 0x48]
mov dword [esp + 0x20], eax
jmp 0x410fa1
mov ebx, 2
cmp ebx, dword [esp]
jne 0x410f99
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x20], eax
jmp 0x410fa1
mov eax, dword [esp + 0x44]
mov dword [esp + 0x20], eax
pop eax
push 0
push 0x59
push dword [0x432278]
call fcn.0041eeb9
push 1
push 0x4e
push dword [0x432278]
call fcn.0041eeb9
push 0
push 0x40059
push dword [0x432278]
call fcn.0041eeb9
push 1
push 0x4004e
push dword [0x432278]
call fcn.0041eeb9
jmp 0x411066
push edx
call fcn.00428880
pop edx
push eax
push edx
call fcn.00428880
pop edx
push eax
push 0x81c9
call fcn.0040947d
call fcn.00428b20
push 0x19
push 0x5a
push dword [esp + 0x38]
mov ebx, dword [esp + 0x38]
add ebx, 0xffffffd3
push ebx
push 0xffffffff
call fcn.004153d2
add dword [esp + 0x14], edx
call fcn.0041b01a
call fcn.004153f0
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x1c], eax
push 0
push 0xd
push dword [0x432278]
call fcn.0041eeb9
pop eax
call fcn.0041993a
push edx
call fcn.00428880
pop edx
push eax
push edx
call fcn.00428880
pop edx
push eax
push dword [esp + 0x20]
call fcn.00418c4e
lea eax, [esp + 0xc]
push eax
call fcn.004288c0
push dword [esp]
push dword [0x432278]
call fcn.0041eb38
push 1
push dword [0x432278]
call fcn.0041efc2
push 2
push 0
push dword [0x432278]
call fcn.0041eb61
push 0x30
call sub.USER32.dll_MessageBeep
push edx
call fcn.00428880
pop edx
push eax
push 0x20
call fcn.0040bf3d
push eax
push dword [esp + 0x78]
mov edx, dword [0x432238]
push edx
call fcn.00428880
pop edx
push eax
push edx
call fcn.00428950
mov edx, str.Shell32.dll
push edx
call fcn.00428950
call fcn.004153d2
add dword [esp], edx
call fcn.0040db60
call fcn.004153f0
mov dword [esp + 0x1c], eax
push dword [esp + 0x1c]
push 0x20
push 0x20
push 0x14
push 0xf
push 0xffffffff
call fcn.0041cd88
mov dword [esp + 0x30], eax
push dword [esp + 0x1c]
call sub.USER32.dll_DestroyIcon
cmp dword [esp + 0x6c], 0
je 0x4111de
push edx
call fcn.00428880
pop edx
push eax
mov edx, dword [esp + 0xc]
push edx
call fcn.00428880
pop edx
push eax
push edx
call fcn.00428950
mov edx, 0x42c040
push edx
call fcn.00428950
push edx
call fcn.00428880
pop edx
push eax
push edx
call fcn.00428880
pop edx
push eax
mov eax, dword [esp + 0x7c]
cdq
push edx
push eax
call fcn.00427060
pop eax
mov edx, 0x42c124
push edx
call fcn.00428950
call fcn.00428b20
push dword [esp + 0x20]
call fcn.004153d2
add dword [esp + 4], edx
call fcn.00418f92
call fcn.004153f0
mov ebx, dword [esp + 0x6c]
imul ebx, ebx, 0x3e8
mov dword [esp + 0x6c], ebx
push 0x3e8
push 0x2bc
push dword [0x432278]
call fcn.0041e487
push dword [esp + 0x18]
call fcn.0041cdd0
push 0
push 0x30002
push 0x128
push dword [0x432278]
call fcn.0041eb1c
push eax
call sub.USER32.dll_SendMessageW
call fcn.0041e635
push eax
mov ebx, 0x333c
cmp ebx, dword [esp]
jne 0x411224
mov dword [esp + 0x10], 1
jmp 0x4113b2
mov ebx, 0x332c
cmp ebx, dword [esp]
jne 0x41125d
call fcn.00421306
push eax
mov ebx, dword [esp + 0x44]
cmp ebx, dword [esp]
je 0x41124f
mov ebx, dword [esp + 0x48]
cmp ebx, dword [esp]
je 0x41124f
mov ebx, dword [esp + 0x4c]
cmp ebx, dword [esp]
jne 0x411257
mov dword [esp + 0x14], 2
pop eax
jmp 0x4113b2
mov ebx, 0x3336
cmp ebx, dword [esp]
jne 0x41134f
call fcn.00421333
push eax
mov ebx, 0x2bc
cmp ebx, dword [esp]
jne 0x41134c
add dword [esp + 0x18], 0x3e8
push edx
call fcn.00428880
pop edx
push eax
mov edx, dword [esp + 0x14]
push edx
call fcn.00428880
pop edx
push eax
push edx
call fcn.00428950
mov edx, 0x42c040
push edx
call fcn.00428950
push edx
call fcn.00428880
pop edx
push eax
push edx
call fcn.00428880
pop edx
push eax
mov eax, dword [esp + 0x84]
cdq
push edx
push eax
mov eax, dword [esp + 0x30]
cdq
sub dword [esp], eax
sbb dword [esp + 4], edx
push 0
push 0x3e8
push dword [esp + 0xc]
push dword [esp + 0xc]
call fcn.00415070
mov dword [esp], eax
mov dword [esp + 4], edx
pop eax
pop edx
push edx
push eax
call fcn.00427060
pop eax
mov edx, 0x42c124
push edx
call fcn.00428950
call fcn.00428b20
push dword [esp + 0x28]
call fcn.004153d2
add dword [esp + 4], edx
call fcn.00418f92
call fcn.004153f0
mov ebx, dword [esp + 0x18]
cmp ebx, dword [esp + 0x74]
jl 0x41134c
mov dword [esp + 0x14], 3
push 0x2bc
push dword [0x432278]
call fcn.0041e63d
push dword [esp + 0x20]
call fcn.0041cdd0
pop eax
jmp 0x4113b2
mov ebx, 0x332d
cmp ebx, dword [esp]
jne 0x4113b2
call fcn.00421324
push eax
xor ebx, ebx
cmp ebx, dword [esp]
jne 0x411379
push dword [esp + 0x44]
call fcn.0041cdd0
mov dword [esp + 0x14], 2
jmp 0x4113b1
mov ebx, 1
cmp ebx, dword [esp]
jne 0x411396
push dword [esp + 0x48]
call fcn.0041cdd0
mov dword [esp + 0x14], 2
jmp 0x4113b1
mov ebx, 2
cmp ebx, dword [esp]
jne 0x4113b1
push dword [esp + 0x4c]
call fcn.0041cdd0
mov dword [esp + 0x14], 2
pop eax
pop eax
cmp dword [esp + 0xc], 0
je 0x411207
call fcn.0041ce0b
push eax
mov ebx, dword [esp + 0x40]
cmp ebx, dword [esp]
jne 0x4113e9
mov ebx, dword [esp + 0x68]
and ebx, ebx
jne 0x4113df
mov dword [esp + 0x18], 0
jmp 0x4113e7
mov dword [esp + 0x18], 6
jmp 0x41140d
mov ebx, dword [esp + 0x44]
cmp ebx, dword [esp]
jne 0x4113fc
mov dword [esp + 0x18], 7
jmp 0x41140d
mov ebx, dword [esp + 0x48]
cmp ebx, dword [esp]
jne 0x41140d
mov dword [esp + 0x18], 2
pop eax
mov ebx, dword [esp + 0xc]
cmp ebx, 1
jne 0x41141f
mov dword [esp + 0x14], 2
push 0xffffffff
push dword [0x432278]
call fcn.0041f009
push dword [esp + 0x28]
call fcn.00427cae
push dword [esp + 0x38]
call fcn.0041cf4c
push dword [esp + 0x34]
call fcn.0041cf4c
push dword [esp + 0x30]
call fcn.0041cf4c
push dword [0x432278]
call fcn.0041e302
push 1
push dword [esp + 0x5c]
call sub.USER32.dll_EnableWindow
mov eax, dword [esp + 0x14]
jmp 0x411474
push dword [esp]
call fcn.00428af0
push dword [esp + 4]
call fcn.00428af0
push dword [esp + 8]
call fcn.00428af0
add esp, 0x50
pop ebx
ret 0x20