Function at 0x405e80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4b44a8
mov eax, dword fs:[0]
push eax
sub esp, 0x5c
mov eax, dword [0x4ef7d0]
xor eax, esp
mov dword [esp + 0x58], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4ef7d0]
xor eax, esp
push eax
lea eax, [esp + 0x70]
mov dword fs:[0], eax
mov dword [esp + 0x14], ecx
mov ecx, dword [0x4f14e8]
xor ebp, ebp
xor edi, edi
cmp ecx, ebp
je 0x4060da
mov eax, dword [0x4f14ec]
sub eax, ecx
sar eax, 2
cmp edi, eax
jae 0x4060da
mov dword [esp + 0x68], 0xf
mov dword [esp + 0x64], ebp
mov byte [esp + 0x54], 0
mov ecx, dword [ecx + edi*4]
mov eax, dword [ecx + 4]
push ebp
push eax
lea ecx, [esp + 0x58]
push ecx
mov dword [esp + 0x84], ebp
call fcn.0042d500
lea edx, [esp + 0x5c]
push edx
call fcn.004058a0
push 0x30
lea eax, [esp + 0x34]
push ebp
push eax
mov dword [esp + 0x38], ebp
call fcn.0049e8b0
mov esi, 0x10
add esp, 0x1c
cmp dword [esp + 0x68], esi
mov ebx, 0x27
mov dword [esp + 0x20], 0xffff0002
mov dword [esp + 0x24], ebx
jb 0x405f48
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x34], ecx
jmp 0x405f50
lea edx, [esp + 0x54]
mov dword [esp + 0x34], edx
mov eax, dword [0x4f14e8]
cmp eax, ebp
je 0x405f68
mov ecx, dword [0x4f14ec]
sub ecx, eax
sar ecx, 2
cmp edi, ecx
jb 0x405f72
call fcn.0049ed6a
mov eax, dword [0x4f14e8]
mov eax, dword [eax + edi*4]
push eax
call fcn.0042a2c0
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx + 0x20]
add esp, 4
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
lea eax, [esp + 0x1c]
push eax
push ebp
push 0x1100
push edx
mov dword [esp + 0x58], edi
call dword [sym.imp.USER32.dll_SendMessageA]
cmp dword [esp + 0x68], esi
mov edx, dword [esp + 0x54]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x24], ebx
jae 0x405fb9
lea edx, [esp + 0x54]
mov eax, edx
lea esi, [eax + 1]
mov edi, edi
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x405fc0
sub eax, esi
lea esi, [edx + eax + 1]
xor ebx, ebx
mov ecx, dword [0x4f14e8]
test ecx, ecx
je 0x405fe9
mov eax, dword [0x4f14ec]
sub eax, ecx
sar eax, 2
cmp edi, eax
jb 0x405ff4
call fcn.0049ed6a
mov ecx, dword [0x4f14e8]
mov eax, dword [ecx + edi*4]
cmp dword [ebx + eax + 0x94], 0xffffffff
je 0x4060ae
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + 0x20]
lea eax, [esp + 0x1c]
push eax
push 0
push 0x1100
push edx
mov dword [esp + 0x44], esi
mov dword [esp + 0x58], ebp
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, esi
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x406030
sub eax, edx
cmp dword [esp + 0x68], 0x10
lea esi, [esi + eax + 1]
mov eax, dword [esp + 0x54]
jae 0x40604e
lea eax, [esp + 0x54]
mov edx, dword [esp + 0x64]
mov ecx, esi
sub ecx, eax
add edx, 1
cmp ecx, edx
jg 0x406068
add ebp, 1
add ebx, 0x3c
jmp 0x405fd1
push 0
push 0x2725
lea ecx, [esp + 0x20]
call fcn.0042c080
cmp dword [esp + 0x68], 0x10
mov eax, dword [eax]
mov ecx, dword [esp + 0x54]
jae 0x406089
lea ecx, [esp + 0x54]
push 0x10
push eax
mov eax, dword [esp + 0x1c]
push ecx
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov edx, dword [esp + 0x18]
push edx
call fcn.0049ec02
mov ecx, dword [0x4f14e8]
add esp, 4
cmp dword [esp + 0x68], 0x10
mov dword [esp + 0x78], 0xffffffff
jb 0x4060d0
mov eax, dword [esp + 0x54]
push eax
call fcn.0049ea7d
mov ecx, dword [0x4f14e8]
add esp, 4
add edi, 1
xor ebp, ebp
jmp 0x405ec0
mov ecx, dword [esp + 0x70]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x58]
xor ecx, esp
call fcn.0049ec31
add esp, 0x68
ret