Function at 0x409a50
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x663c53
mov eax, dword fs:[0]
push eax
sub esp, 0xf0
mov eax, dword [0x6d35d0]
xor eax, esp
mov dword [esp + 0xec], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x6d35d0]
xor eax, esp
push eax
lea eax, [esp + 0x104]
mov dword fs:[0], eax
mov esi, dword [esp + 0x114]
mov edi, ecx
mov dword [esp + 0x14], edi
mov dword [edi + 0x30c4], esi
xor ebx, ebx
add edi, 0x1b48
call fcn.0041c2c0
mov ecx, dword [eax]
mov eax, dword [ecx]
cmp ebx, esi
jne 0x409ab8
mov edx, dword [eax + 0x74]
jmp 0x409abb
mov edx, dword [eax + 0x78]
call edx
inc ebx
cmp ebx, 5
jb 0x409aa6
push 0x1d
xor ebx, ebx
mov ebp, 0xf
push str.sc_sc_000_000_000_000_000.bmp
lea ecx, [esp + 0x78]
mov dword [esp + 0x90], ebp
mov dword [esp + 0x8c], ebx
mov byte [esp + 0x7c], bl
call fcn.00404c00
mov dword [esp + 0x10c], ebx
push 0x1d
push str.sc_sc_001_000_000_000_000.bmp
lea ecx, [esp + 0x94]
mov dword [esp + 0xac], ebp
mov dword [esp + 0xa8], ebx
mov byte [esp + 0x98], bl
call fcn.00404c00
mov byte [esp + 0x10c], 1
push 0x1d
push str.sc_sc_002_000_000_000_000.bmp
lea ecx, [esp + 0xb0]
mov dword [esp + 0xc8], ebp
mov dword [esp + 0xc4], ebx
mov byte [esp + 0xb4], bl
call fcn.00404c00
mov byte [esp + 0x10c], 2
push 0x1d
push str.sc_sc_003_000_000_000_000.bmp
lea ecx, [esp + 0xcc]
mov dword [esp + 0xe4], ebp
mov dword [esp + 0xe0], ebx
mov byte [esp + 0xd0], bl
call fcn.00404c00
mov byte [esp + 0x10c], 3
push 0x1d
push str.sc_sc_007_000_000_002_000.bmp
lea ecx, [esp + 0xe8]
mov dword [esp + 0x100], ebp
mov dword [esp + 0xfc], ebx
mov byte [esp + 0xec], bl
call fcn.00404c00
mov edi, dword [esp + 0x14]
push ebx
lea eax, [esi*8]
sub eax, esi
push 1
mov dword [esp + 0x114], 4
mov edx, dword [edi + 0x2bbc]
add edi, 0x2bbc
lea esi, [esp + eax*4 + 0x78]
mov eax, dword [edx + 0x140]
push 0x15
push esi
mov ecx, edi
call eax
test al, al
jne 0x409c43
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0xffffffffffffffff
push ebx
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
push esi
mov byte [ecx + 4], bl
call fcn.00404790
lea esi, [esp + 0x38]
call fcn.00476db8
push ebx
push 1
mov byte [esp + 0x114], 5
mov edx, dword [edi]
mov edx, dword [edx + 0x140]
push 0x15
mov eax, esi
push eax
mov ecx, edi
call edx
mov byte [esp + 0x10c], 4
cmp dword [esp + 0x34], 0x10
jb 0x409c43
mov eax, dword [esp + 0x20]
push eax
call fcn.0046efcb
add esp, 4
cmp dword [esp + 0x114], 3
jne 0x409dfe
push 0x1d
push str.sc_sc_004_000_000_000_000.bmp
lea ecx, [esp + 0x5c]
mov dword [esp + 0x74], ebp
mov dword [esp + 0x70], ebx
mov byte [esp + 0x60], bl
call fcn.00404c00
mov edi, dword [esp + 0x14]
push ebx
push 1
mov byte [esp + 0x114], 6
mov edx, dword [edi + 0x2cd8]
mov edx, dword [edx + 0x140]
add edi, 0x2cd8
push 0x15
lea eax, [esp + 0x60]
push eax
mov ecx, edi
call edx
test al, al
jne 0x409d00
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0xe8]
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
push eax
mov byte [ecx + 4], bl
call fcn.00404790
lea esi, [esp + 0x38]
call fcn.00476db8
push ebx
push 1
mov byte [esp + 0x114], 7
mov edx, dword [edi]
mov edx, dword [edx + 0x140]
push 0x15
mov eax, esi
push eax
mov ecx, edi
call edx
mov byte [esp + 0x10c], 6
cmp dword [esp + 0x34], 0x10
jb 0x409d00
mov eax, dword [esp + 0x20]
push eax
call fcn.0046efcb
add esp, 4
push 0x1d
push str.sc_sc_005_000_000_000_000.bmp
lea ecx, [esp + 0x40]
mov dword [esp + 0x58], ebp
mov dword [esp + 0x54], ebx
mov byte [esp + 0x44], bl
call fcn.00404c00
mov edi, dword [esp + 0x14]
push ebx
push 1
mov byte [esp + 0x114], 8
mov edx, dword [edi + 0x2d6c]
mov edx, dword [edx + 0x140]
add edi, 0x2d6c
push 0x15
lea eax, [esp + 0x44]
push eax
mov ecx, edi
call edx
test al, al
jne 0x409db3
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0xe8]
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
push eax
mov byte [ecx + 4], bl
call fcn.00404790
lea esi, [esp + 0x38]
call fcn.00476db8
push ebx
push 1
mov byte [esp + 0x114], 9
mov edx, dword [edi]
mov edx, dword [edx + 0x140]
push 0x15
mov eax, esi
push eax
mov ecx, edi
call edx
cmp dword [esp + 0x34], 0x10
jb 0x409da7
mov eax, dword [esp + 0x20]
push eax
call fcn.0046efcb
add esp, 4
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
mov esi, 0x10
cmp dword [esp + 0x50], esi
jb 0x409dcb
mov ecx, dword [esp + 0x3c]
push ecx
call fcn.0046efcb
add esp, 4
mov byte [esp + 0x10c], 4
mov dword [esp + 0x50], ebp
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x3c], bl
cmp dword [esp + 0x6c], esi
jb 0x409df2
mov edx, dword [esp + 0x58]
push edx
call fcn.0046efcb
add esp, 4
mov dword [esp + 0x6c], ebp
mov dword [esp + 0x68], ebx
mov byte [esp + 0x58], bl
mov esi, dword [esp + 0x14]
mov eax, dword [esi + 0x2c50]
mov edx, dword [eax]
push ebx
lea ecx, [esi + 0x2c50]
push ebx
push ebx
call edx
push ebx
mov ecx, esi
call fcn.00409e70
push fcn.00404660
push 5
push 0x1c
lea eax, [esp + 0x7c]
push eax
mov dword [esp + 0x11c], 0xffffffff
call fcn.0062ca05
mov ecx, dword [esp + 0x104]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xec]
xor ecx, esp
call fcn.0062c8b8
add esp, 0xfc
ret 4