Function at 0x40aeb0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x40b6e7
sub esp, 0x44
cmp dword [0x691e70], 2
je 0x40b6d0
mov edx, dword [esp + 0x48]
test edx, edx
je 0x40b650
movzx ebx, byte [0x692180]
test bl, bl
je 0x40afb6
mov ebx, dword [0x69218c]
test ebx, ebx
je 0x40af5e
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x40af57
test edx, 7
jne 0x40af32
mov eax, 8
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [0x6938c0]
mov dword [esp + 8], eax
call fcn.0040ba60
mov eax, dword [esp + 0xc]
mov dword [esp + 0x54], eax
add esp, 0x44
ret
test edx, 3
jne 0x40af41
mov eax, 4
jmp 0x40af10
test edx, 1
jne 0x40af50
mov eax, 2
jmp 0x40af10
mov eax, 1
jmp 0x40af10
mov eax, 0x10
jmp 0x40af10
movzx ebx, byte [0x692090]
test bl, bl
je 0x40afb6
mov ebx, dword [0x692098]
mov ebp, dword fs:[0x14]
mov ebp, dword [ebp]
cmp dword [ebp + 0x54], ebx
sete bl
mov esi, dword [0x692094]
cmp dword [ebp + 0x50], esi
xchg ebp, ebx
sete bl
xchg ebp, ebx
and ebx, ebp
test bl, bl
je 0x40afb6
mov ebx, dword [0x69209c]
add ebx, 1
mov ebp, dword [0x6920a0]
mov dword [0x69209c], ebx
adc ebp, 0
mov dword [0x6920a0], ebp
mov ebx, dword [0x691e64]
test ebx, ebx
je 0x40b649
mov ebx, dword fs:[0x14]
mov ebx, dword [ebx]
mov ebp, dword [ebx + 0x18]
mov ebp, dword [ebp + 0x4c]
test ebp, ebp
je 0x40b642
mov ebx, dword [ebp + 0xd0]
sub ebx, edx
mov esi, dword [ebp + 0xd4]
mov dword [ebp + 0xd0], ebx
sbb esi, 0
mov dword [ebp + 0xd4], esi
test esi, esi
jl 0x40b629
mov ebx, dword fs:[0x14]
mov ebx, dword [ebx]
mov esi, dword [ebx + 0x18]
nop
inc dword [esi + 0x78]
mov esi, dword [ebx + 0x18]
test byte [ebx], al
mov ebx, dword [esi + 0x68]
test ebx, ebx
jne 0x40b6ba
mov ebx, dword fs:[0x14]
mov ebx, dword [ebx]
cmp dword [esi + 0x2c], ebx
je 0x40b6a4
mov dword [esi + 0x68], 1
mov ebx, dword fs:[0x14]
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x18]
mov ebx, dword [ebx + 0x54]
test ebx, ebx
je 0x40b61e
mov ebx, dword [ebx + 0x30]
test ebx, ebx
je 0x40b68e
mov edi, dword [esp + 0x4c]
test edi, edi
je 0x40b612
mov eax, ebp
mov ebp, dword [edi + 4]
test ebp, ebp
xchg ebp, ebx
sete bl
xchg ebp, ebx
mov dword [esp + 0x38], esi
mov dword [esp + 0x24], ebx
xchg ebp, eax
mov byte [esp + 0x17], al
xchg ebp, eax
mov dword [esp + 0x40], eax
cmp edx, 0x8000
ja 0x40b5cd
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x40b4af
cmp edx, 0x10
jae 0x40b4af
mov ecx, dword [ebx + 0xc]
test edx, 7
jne 0x40b477
nop
add ecx, 7
and ecx, 0xfffffff8
lea eax, [ecx + edx]
cmp eax, 0x10
ja 0x40b11d
mov edi, dword [ebx + 8]
test edi, edi
je 0x40b11d
add ecx, edi
mov dword [ebx + 0xc], eax
inc dword [ebx + 0x10]
mov dword [esi + 0x68], 0
nop
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov edx, dword [esi + 0x78]
lea ebx, [edx - 1]
mov dword [esi + 0x78], ebx
cmp edx, 1
jne 0x40b115
movzx edx, byte [eax + 0x65]
test dl, dl
je 0x40b115
mov dword [eax + 8], 0xfffffade
mov dword [esp + 0x54], ecx
add esp, 0x44
ret
mov eax, dword [ebx + 0x28]
mov dword [esp + 0x18], eax
mov dword [esp], eax
call fcn.0040ab90
mov eax, dword [esp + 4]
test eax, eax
je 0x40b454
mov ecx, dword [esp + 0x18]
xor edx, edx
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0x24]
cmp dword [ebp + 0xc], ebx
jbe 0x40b442
mov esi, eax
mov dword [ebp + 8], eax
mov dword [ebp + 0xc], ebx
mov eax, 0x10
mov dword [esp + 0x30], esi
mov dword [esp + 0x2c], eax
mov byte [esp + 0x16], dl
mov dword [esp + 0x18], ecx
movzx edi, byte [esp + 0x17]
xchg edi, eax
test al, al
xchg edi, eax
je 0x40b3e0
xor edi, edi
mov dword [esp + 0x20], ebx
mov dword [esp + 0x1c], edi
call fcn.0045c080
mov eax, dword [0x691e70]
test eax, eax
jne 0x40b3b7
mov eax, dword [esp + 0x38]
mov dword [eax + 0x68], 0
nop
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
mov edx, dword [eax + 0x78]
lea ebx, [edx - 1]
mov dword [eax + 0x78], ebx
cmp edx, 1
jne 0x40b1e9
movzx eax, byte [ecx + 0x65]
test al, al
je 0x40b1e9
mov dword [ecx + 8], 0xfffffade
movzx eax, byte [0x692180]
test al, al
je 0x40b3ae
mov eax, dword [0x692184]
test eax, eax
jne 0x40b38d
movzx eax, byte [0x692090]
test al, al
je 0x40b384
mov eax, dword [0x692094]
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp dword [ecx + 0x50], eax
sete al
mov edx, dword [0x692098]
cmp dword [ecx + 0x54], edx
sete cl
and ecx, eax
test cl, cl
je 0x40b384
mov eax, dword [0x6920a4]
mov ecx, dword [esp + 0x2c]
add eax, ecx
mov edx, dword [0x6920a8]
mov dword [0x6920a4], eax
adc edx, 0
mov dword [0x6920a8], edx
mov eax, dword [0x65a108]
test eax, eax
jle 0x40b28a
cmp eax, 1
je 0x40b31d
mov eax, dword [esp + 0x24]
mov edx, dword [eax]
cmp edx, ecx
jbe 0x40b31d
sub edx, ecx
mov dword [eax], edx
mov eax, dword [esp + 0x40]
test eax, eax
je 0x40b2b5
mov edx, dword [eax + 0xd0]
mov ebx, dword [esp + 0x20]
sub ecx, ebx
sub edx, ecx
mov ecx, dword [eax + 0xd4]
mov dword [eax + 0xd0], edx
sbb ecx, 0
mov dword [eax + 0xd4], ecx
movzx eax, byte [esp + 0x16]
test al, al
jne 0x40b2ca
mov eax, dword [esp + 0x30]
mov dword [esp + 0x54], eax
add esp, 0x44
ret
mov dword [esp], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp + 0xc], 0
call fcn.00416ac0
movzx eax, byte [esp + 0x10]
test al, al
je 0x40b2be
mov dword [esp], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp + 0xc], 0
call fcn.00416be0
jmp 0x40b2be
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov edx, dword [eax + 0x18]
nop
inc dword [edx + 0x78]
mov eax, dword [eax + 0x18]
mov dword [esp + 0x34], eax
mov dword [esp], eax
mov edx, dword [esp + 0x30]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.0040b7e0
nop
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov ecx, dword [esp + 0x34]
mov edx, dword [ecx + 0x78]
lea ebx, [edx - 1]
mov dword [ecx + 0x78], ebx
cmp edx, 1
jne 0x40b37b
movzx ecx, byte [eax + 0x65]
test cl, cl
je 0x40b37b
mov dword [eax + 8], 0xfffffade
mov ecx, dword [esp + 0x2c]
jmp 0x40b28a
mov ecx, dword [esp + 0x2c]
jmp 0x40b265
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov ecx, dword [esp + 0x2c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x4c]
mov dword [esp + 8], edx
call fcn.00429a50
jmp 0x40b206
mov ecx, dword [esp + 0x2c]
jmp 0x40b265
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x18]
mov dword [esp], edx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 8], eax
mov edx, dword [esp + 0x1c]
mov dword [esp + 0xc], edx
call fcn.0041d3f0
jmp 0x40b1b3
mov edi, dword [esp + 0x4c]
cmp dword [0x674370], edi
jne 0x40b3f1
mov ebx, 0x28
mov dword [esp + 0x20], ebx
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
call fcn.00411520
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov edx, dword [esp + 0x20]
cmp edx, ecx
jbe 0x40b43b
mov ebx, dword [eax + 4]
test ebx, ebx
je 0x40b435
mov ebp, edx
sub edx, ecx
lea ecx, [edx + ebx]
mov edx, dword [esp + 0x24]
add dword [edx + 4], ecx
mov edi, ecx
mov ebx, ebp
jmp 0x40b198
mov ebp, edx
xor ecx, ecx
jmp 0x40b425
mov ecx, dword [eax + 4]
mov ebp, edx
jmp 0x40b425
mov esi, dword [ebp + 8]
test esi, esi
je 0x40b16a
mov esi, eax
jmp 0x40b172
mov eax, dword [esp + 0x24]
mov dword [esp], eax
mov byte [esp + 4], 5
call fcn.0040aca0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
movzx edx, byte [esp + 0x10]
jmp 0x40b13e
cmp edx, 0xc
jne 0x40b487
add ecx, 7
and ecx, 0xfffffff8
jmp 0x40b0cc
test edx, 3
jne 0x40b49a
add ecx, 3
and ecx, 0xfffffffc
jmp 0x40b0cc
test edx, 1
jne 0x40b0cc
inc ecx
and ecx, 0xfffffffe
jmp 0x40b0cc
cmp edx, 0x3f8
ja 0x40b5a1
mov ecx, esi
lea esi, [edx + 7]
shr esi, 3
cmp esi, 0x81
jae 0x40b682
lea edx, [0x65dee0]
movzx edx, byte [edx + esi]
movzx esi, dl
cmp esi, 0x44
jae 0x40b66a
lea edi, [0x65e020]
movzx esi, word [edi + esi*2]
nop
shl edx, 1
xchg ebp, eax
movzx edi, al
xchg ebp, eax
or edx, edi
movzx edi, dl
cmp edi, 0x88
jae 0x40b65e
mov byte [esp + 0x15], dl
mov dword [esp + 0x2c], esi
mov eax, dword [ebx + edi*4 + 0x14]
mov dword [esp + 0x18], eax
mov dword [esp], eax
call fcn.0040ab90
mov eax, dword [esp + 4]
test eax, eax
je 0x40b57d
mov ecx, dword [esp + 0x18]
xor edx, edx
movzx ebx, byte [esp + 0x50]
test bl, bl
je 0x40b53f
movzx ebx, byte [ecx + 0x3c]
test bl, bl
jne 0x40b552
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0x24]
mov esi, eax
mov eax, dword [esp + 0x2c]
jmp 0x40b177
mov dword [esp + 0x30], eax
mov byte [esp + 0x16], dl
mov dword [esp + 0x28], ecx
mov dword [esp], eax
mov ecx, dword [esp + 0x2c]
mov dword [esp + 4], ecx
call fcn.0045cbe0
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
movzx edx, byte [esp + 0x16]
jmp 0x40b53f
mov eax, dword [esp + 0x24]
mov dword [esp], eax
movzx ecx, byte [esp + 0x15]
mov byte [esp + 4], cl
call fcn.0040aca0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
movzx edx, byte [esp + 0x10]
jmp 0x40b52e
mov ecx, esi
lea esi, [edx - 0x381]
shr esi, 7
cmp esi, 0xf9
jae 0x40b676
lea eax, [0x65ee80]
movzx esi, byte [eax + esi]
mov eax, dword [esp + 0x40]
mov edx, esi
jmp 0x40b4d9
mov dword [esp], ebx
mov dword [esp + 4], edx
movzx eax, byte [esp + 0x50]
mov byte [esp + 8], al
xchg ebp, eax
mov byte [esp + 9], al
xchg ebp, eax
call fcn.00412e00
mov ecx, dword [esp + 0xc]
mov dword [ecx + 0x18], 1
mov word [ecx + 0x38], 1
mov esi, dword [ecx + 0xc]
nop
mov eax, dword [ecx + 0x40]
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0x24]
mov edx, 1
jmp 0x40b177
mov eax, ebp
mov ebp, 1
jmp 0x40b085
mov ebx, dword [0x691e80]
jmp 0x40b063
mov dword [esp + 0x3c], ebp
mov dword [esp], ebp
call fcn.0041a630
mov edx, dword [esp + 0x48]
mov ebp, dword [esp + 0x3c]
jmp 0x40b004
mov ebp, ebx
jmp 0x40afdf
xor ebp, ebp
jmp 0x40b004
lea eax, [0x691ee8]
mov dword [esp + 0x54], eax
add esp, 0x44
ret
mov eax, edi
mov ecx, 0x88
call fcn.0045c4c0
mov eax, esi
mov ecx, 0x44
call fcn.0045c4c0
mov eax, esi
mov ecx, 0xf9
call fcn.0045c4d0
mov eax, esi
mov ecx, 0x81
call fcn.0045c4d0
lea eax, [0x580702]
mov dword [esp], eax
mov dword [esp + 4], 0x34
call fcn.00431580
lea eax, [0x577c1b]
mov dword [esp], eax
mov dword [esp + 4], 0x14
call fcn.00431580
lea eax, [0x5757be]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00431580
lea eax, [0x5803d3]
mov dword [esp], eax
mov dword [esp + 4], 0x32
call fcn.00431580
nop
call fcn.0045aee0
jmp fcn.0040aeb0