Function at 0x405ef0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4e7548
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xb0
mov al, byte [esp + 3]
push ebx
push ebp
push esi
push edi
mov edi, ecx
xor ebx, ebx
mov dword [esp + 0x48], edi
mov byte [esp + 0x14], al
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
lea ecx, [esp + 0x30]
mov dword [esp + 0xc8], ebx
call fcn.004be970
lea ecx, [esp + 0x34]
mov byte [esp + 0xc8], 1
call fcn.004be970
mov cl, byte [esp + 0x13]
push ebx
mov byte [esp + 0x3c], cl
lea ecx, [esp + 0x3c]
mov byte [esp + 0xcc], 2
call fcn.00411e90
mov byte [esp + 0xc8], 3
mov byte [esp + 0x13], bl
call fcn.004cd4a0
test al, al
je 0x406027
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x54], esp
push 6
push 0x50f634
call fcn.004bea10
push ecx
mov byte [esp + 0xd8], 4
mov ecx, esp
mov dword [esp + 0x38], esp
push 6
push 0x50f62c
call fcn.004bea10
mov ecx, 0x520200
mov byte [esp + 0xd8], 3
call fcn.004cb760
push 1
lea ecx, [esp + 0x3c]
mov byte [esp + 0xcc], 6
call fcn.00411e90
lea ecx, [esp + 0x34]
mov byte [esp + 0xc8], 5
call fcn.004beab0
lea ecx, [esp + 0x30]
mov byte [esp + 0xc8], bl
call fcn.004beab0
mov eax, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
cmp esi, eax
mov dword [esp + 0xc8], 0xffffffff
mov edi, eax
je 0x40674e
push ebx
mov ecx, esi
call fcn.00413830
add esi, 0x1c
cmp esi, edi
jne 0x406013
jmp 0x40674a
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
push edx
push eax
push eax
call fcn.004130b0
add esp, 0xc
mov esi, eax
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x14]
push eax
push esi
call fcn.00411ee0
lea ecx, [esp + 0x2c]
mov dword [esp + 0x1c], esi
push ecx
mov ecx, edi
call fcn.00405b00
cmp ax, 2
jne 0x4060ca
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x50f9f0
call fcn.004bea10
lea edx, [esp + 0x54]
push edx
call fcn.004d0560
add esp, 8
mov ecx, dword [0x4f73d0]
mov byte [esp + 0xc8], 7
push ecx
push ebx
push eax
lea ecx, [esp + 0x44]
call fcn.00411c90
push 1
lea ecx, [esp + 0x54]
mov byte [esp + 0xcc], 3
call fcn.00411e90
mov eax, dword [esp + 0x1c]
lea edx, [esp + 0x2c]
push edx
push 1
push eax
lea ecx, [esp + 0x20]
call fcn.00412940
mov byte [esp + 0x13], 1
jmp 0x406136
cmp ax, 1
jne 0x406858
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x50f9e8
call fcn.004bea10
lea ecx, [esp + 0x54]
push ecx
call fcn.004d0560
add esp, 8
mov edx, dword [0x4f73d0]
lea ecx, [esp + 0x38]
push edx
push ebx
push eax
mov byte [esp + 0xd4], 8
call fcn.00411c90
push 1
lea ecx, [esp + 0x54]
mov byte [esp + 0xcc], 3
call fcn.00411e90
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x2c]
push eax
push 1
push ecx
lea ecx, [esp + 0x20]
call fcn.00412940
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x50f9e0
call fcn.004bea10
mov ecx, dword [0x52020c]
call fcn.004d10c0
cmp byte [esp + 0x13], bl
jne 0x406179
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x50f9d8
call fcn.004bea10
mov ecx, dword [0x52020c]
call fcn.004d1240
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x50f9d0
call fcn.004bea10
mov ecx, dword [0x52020c]
call fcn.004d1240
mov eax, dword [esp + 0x18]
cmp eax, ebx
jne 0x4061a4
xor edx, edx
jmp 0x4061bd
mov ecx, dword [esp + 0x1c]
sub ecx, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx ebp, dx
xor edi, edi
cmp ebp, ebx
jle 0x406245
mov ecx, ebp
sub ecx, edi
lea esi, [ecx - 1]
lea ecx, [esp + 0x14]
push esi
call fcn.00411ba0
push ecx
add eax, 8
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.004be980
push esi
lea ecx, [esp + 0x1c]
mov byte [esp + 0xd0], 0xf
call fcn.00411ba0
sub esp, 0x10
add eax, 0xc
mov ecx, esp
mov dword [esp + 0x60], esp
push eax
call fcn.004118e0
push esi
lea ecx, [esp + 0x2c]
mov byte [esp + 0xe0], 0x10
call fcn.00411ba0
push ecx
add eax, 4
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.004be980
mov ecx, dword [0x52020c]
mov byte [esp + 0xe0], 3
call fcn.004d15e0
inc edi
cmp edi, ebp
jl 0x4061c6
mov ecx, dword [0x52020c]
call fcn.004d17f0
push 0xa
mov esi, eax
call fcn.004bba40
mov al, byte [esp + 0x17]
add esp, 4
cmp al, bl
je 0x406272
cmp si, bx
je 0x406694
jmp 0x406136
cmp si, 1
je 0x4066f0
cmp si, bx
jne 0x406685
mov ecx, dword [esp + 0x48]
lea edx, [esp + 0x2c]
push edx
call fcn.00405b00
push 0x3c
mov esi, eax
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp si, 2
jne 0x40638e
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x50f9f0
call fcn.004bea10
lea eax, [esp + 0xa4]
push eax
call fcn.004d0560
add esp, 8
mov ecx, dword [0x4f73d0]
mov byte [esp + 0xc8], 0x15
push ecx
push ebx
push eax
lea ecx, [esp + 0x44]
call fcn.00411c90
push 1
lea ecx, [esp + 0xa4]
mov byte [esp + 0xcc], 3
call fcn.00411e90
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x50f9c8
call fcn.004bea10
lea edx, [esp + 0xb4]
push edx
call fcn.004d0560
add esp, 8
mov edi, eax
mov esi, dword [esp + 0x18]
mov byte [esp + 0xc8], 0x16
cmp esi, ebx
jne 0x406333
xor edx, edx
jmp 0x40634c
mov ecx, dword [esp + 0x1c]
mov eax, 0x92492493
sub ecx, esi
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov ecx, dword [0x4f73d0]
lea eax, [edx*8]
sub eax, edx
push ecx
push ebx
push edi
lea ecx, [esi + eax*4 - 0x10]
call fcn.00411c90
push 1
lea ecx, [esp + 0xb4]
mov byte [esp + 0xcc], 3
call fcn.00411e90
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x2c]
push ecx
push 1
push edx
jmp 0x4060ba
cmp si, 1
jne 0x40654d
mov esi, dword [esp + 0x18]
cmp esi, ebx
je 0x4064c9
mov ecx, dword [esp + 0x1c]
mov eax, 0x92492493
sub ecx, esi
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
je 0x4064c9
lea ecx, [edx*8]
sub ecx, edx
lea edx, [esi + ecx*4 - 0x18]
lea ecx, [esp + 0x30]
push edx
call fcn.004bed50
test al, al
jne 0x406136
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x50f9e8
call fcn.004bea10
lea eax, [esp + 0x84]
push eax
call fcn.004d0560
add esp, 8
mov ecx, dword [0x4f73d0]
mov byte [esp + 0xc8], 0x17
push ecx
push ebx
push eax
lea ecx, [esp + 0x44]
call fcn.00411c90
push 1
lea ecx, [esp + 0x84]
mov byte [esp + 0xcc], 3
call fcn.00411e90
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x50f9c8
call fcn.004bea10
lea edx, [esp + 0x94]
push edx
call fcn.004d0560
add esp, 8
mov edi, eax
mov esi, dword [esp + 0x18]
mov byte [esp + 0xc8], 0x18
cmp esi, ebx
jne 0x40646e
xor edx, edx
jmp 0x406487
mov ecx, dword [esp + 0x1c]
mov eax, 0x92492493
sub ecx, esi
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov ecx, dword [0x4f73d0]
lea eax, [edx*8]
sub eax, edx
push ecx
push ebx
push edi
lea ecx, [esi + eax*4 - 0x10]
call fcn.00411c90
push 1
lea ecx, [esp + 0x94]
mov byte [esp + 0xcc], 3
call fcn.00411e90
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x2c]
push ecx
push 1
push edx
jmp 0x40612d
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x50f9e8
call fcn.004bea10
lea eax, [esp + 0x64]
push eax
call fcn.004d0560
add esp, 8
mov ecx, dword [0x4f73d0]
mov byte [esp + 0xc8], 0x19
push ecx
push ebx
push eax
lea ecx, [esp + 0x44]
call fcn.00411c90
mov eax, dword [esp + 0x64]
mov byte [esp + 0xc8], 3
cmp eax, ebx
je 0x406530
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x406527
cmp al, 0xff
je 0x406527
dec al
mov byte [ecx], al
jmp 0x406530
push ecx
call fcn.004deb10
add esp, 4
mov eax, dword [esp + 0x1c]
lea edx, [esp + 0x2c]
push edx
push 1
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x74], ebx
push eax
jmp 0x40612d
cmp si, bx
jne 0x406760
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x50f9f0
call fcn.004bea10
lea ecx, [esp + 0x74]
push ecx
call fcn.004d0560
add esp, 8
mov edx, dword [0x4f73d0]
lea ecx, [esp + 0x38]
push edx
push ebx
push eax
mov byte [esp + 0xd4], 0x1a
call fcn.00411c90
mov eax, dword [esp + 0x74]
mov byte [esp + 0xc8], 3
cmp eax, ebx
je 0x4065bd
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x4065b4
cmp al, 0xff
je 0x4065b4
dec al
mov byte [ecx], al
jmp 0x4065bd
push ecx
call fcn.004deb10
add esp, 4
push ecx
mov dword [esp + 0x78], ebx
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x50f9c8
mov dword [esp + 0x84], ebx
mov dword [esp + 0x88], ebx
call fcn.004bea10
lea eax, [esp + 0x54]
push eax
call fcn.004d0560
add esp, 8
mov edi, eax
mov esi, dword [esp + 0x18]
mov byte [esp + 0xc8], 0x1b
cmp esi, ebx
jne 0x406605
xor edx, edx
jmp 0x40661e
mov ecx, dword [esp + 0x1c]
mov eax, 0x92492493
sub ecx, esi
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov eax, dword [0x4f73d0]
lea ecx, [edx*8]
sub ecx, edx
push eax
push ebx
push edi
lea ecx, [esi + ecx*4 - 0x10]
call fcn.00411c90
mov eax, dword [esp + 0x54]
mov byte [esp + 0xc8], 3
cmp eax, ebx
je 0x406674
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x40666b
cmp al, 0xff
je 0x40666b
dec al
mov byte [ecx], al
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
jmp 0x4060ae
push ecx
call fcn.004deb10
add esp, 4
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
jmp 0x4060ae
push 0xa
call fcn.004bba40
add esp, 4
jmp 0x406136
push 1
lea ecx, [esp + 0x3c]
mov byte [esp + 0xcc], 0x12
call fcn.00411e90
lea ecx, [esp + 0x34]
mov byte [esp + 0xc8], 0x11
call fcn.004beab0
lea ecx, [esp + 0x30]
mov byte [esp + 0xc8], bl
call fcn.004beab0
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
cmp esi, edi
mov dword [esp + 0xc8], 0xffffffff
je 0x40674e
push ebx
mov ecx, esi
call fcn.00413830
add esi, 0x1c
cmp esi, edi
jne 0x4066df
jmp 0x40674a
push 1
lea ecx, [esp + 0x3c]
mov byte [esp + 0xcc], 0x14
call fcn.00411e90
lea ecx, [esp + 0x34]
mov byte [esp + 0xc8], 0x13
call fcn.004beab0
lea ecx, [esp + 0x30]
mov byte [esp + 0xc8], bl
call fcn.004beab0
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
cmp esi, edi
mov dword [esp + 0xc8], 0xffffffff
je 0x40674e
push ebx
mov ecx, esi
call fcn.00413830
add esi, 0x1c
cmp esi, edi
jne 0x40673b
mov esi, dword [esp + 0x18]
push esi
call fcn.004deb10
add esp, 4
mov ax, 1
jmp 0x4069b1
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x50f76c
call fcn.004bea10
push ecx
mov byte [esp + 0xd8], 0x1c
mov ecx, esp
mov dword [esp + 0x5c], esp
push 6
push 0x50f978
call fcn.004bea10
mov ecx, 0x520200
mov byte [esp + 0xd8], 3
call fcn.004cb760
mov eax, dword [esp + 0x3c]
mov byte [esp + 0xc8], 0x1d
cmp eax, ebx
je 0x4067d0
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x4067c7
cmp al, 0xff
je 0x4067c7
dec al
mov byte [ecx], al
jmp 0x4067d0
push ecx
call fcn.004deb10
add esp, 4
lea ecx, [esp + 0x34]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
call fcn.004beab0
lea ecx, [esp + 0x30]
mov byte [esp + 0xc8], bl
call fcn.004beab0
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
or ebp, 0xffffffff
cmp esi, edi
mov dword [esp + 0xc8], ebp
mov dword [esp + 0x48], esi
je 0x4069a5
mov bl, 0x1e
push 1
lea ecx, [esi + 0xc]
mov dword [esp + 0xcc], 0x1f
call fcn.00411e90
lea ecx, [esi + 8]
mov byte [esp + 0xc8], bl
call fcn.004beab0
lea ecx, [esi + 4]
mov dword [esp + 0xc8], ebp
call fcn.004beab0
add esi, 0x1c
cmp esi, edi
mov dword [esp + 0x48], esi
jne 0x406815
jmp 0x4069a1
push ebx
push 1
push ecx
cmp ax, bx
mov ecx, esp
jne 0x406909
mov dword [esp + 0x30], esp
push 6
push 0x50f634
call fcn.004bea10
push ecx
mov byte [esp + 0xd8], 9
mov ecx, esp
mov dword [esp + 0x5c], esp
push 6
push 0x50f9c0
call fcn.004bea10
mov ecx, 0x520200
mov byte [esp + 0xd8], 3
call fcn.004cb760
push 1
lea ecx, [esp + 0x3c]
mov byte [esp + 0xcc], 0xb
call fcn.00411e90
lea ecx, [esp + 0x34]
mov byte [esp + 0xc8], 0xa
call fcn.004beab0
lea ecx, [esp + 0x30]
mov byte [esp + 0xc8], bl
call fcn.004beab0
mov eax, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
cmp esi, eax
mov dword [esp + 0xc8], 0xffffffff
mov edi, eax
je 0x40674e
push ebx
mov ecx, esi
call fcn.00413830
add esi, 0x1c
cmp esi, edi
jne 0x4068f5
jmp 0x40674a
mov dword [esp + 0x30], esp
push 6
push 0x50f76c
call fcn.004bea10
push ecx
mov byte [esp + 0xd8], 0xc
mov ecx, esp
mov dword [esp + 0x5c], esp
push 6
push 0x50f978
call fcn.004bea10
mov ecx, 0x520200
mov byte [esp + 0xd8], 3
call fcn.004cb760
push 1
lea ecx, [esp + 0x3c]
mov byte [esp + 0xcc], 0xe
call fcn.00411e90
lea ecx, [esp + 0x34]
mov byte [esp + 0xc8], 0xd
call fcn.004beab0
lea ecx, [esp + 0x30]
mov byte [esp + 0xc8], bl
call fcn.004beab0
mov eax, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
or ebp, 0xffffffff
cmp esi, eax
mov dword [esp + 0xc8], ebp
mov edi, eax
je 0x4069a5
push ebx
mov ecx, esi
call fcn.00413830
add esi, 0x1c
cmp esi, edi
jne 0x406992
mov esi, dword [esp + 0x18]
push esi
call fcn.004deb10
add esp, 4
mov ax, bp
mov ecx, dword [esp + 0xc0]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0xbc
ret