Function at 0x40c3f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x40cbcb
sub esp, 0x44
cmp dword [0xa9fd78], 2
je 0x40cbb4
mov edx, dword [esp + 0x48]
test edx, edx
je 0x40cb1e
movzx ebx, byte [0xaa0220]
test bl, bl
je 0x40c4f6
mov ebx, dword [0xaa022c]
test ebx, ebx
je 0x40c49e
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x40c477
test edx, 7
jne 0x40c452
mov eax, 8
jmp 0x40c47c
test edx, 3
jne 0x40c461
mov eax, 4
jmp 0x40c47c
test edx, 1
jne 0x40c470
mov eax, 2
jmp 0x40c47c
mov eax, 1
jmp 0x40c47c
mov eax, 0x10
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [0xaa4120]
mov dword [esp + 8], eax
call fcn.0040d100
mov eax, dword [esp + 0xc]
mov dword [esp + 0x54], eax
add esp, 0x44
ret
movzx ebx, byte [0xaa0100]
test bl, bl
je 0x40c4f6
mov ebx, dword fs:[0x14]
mov ebx, dword [ebx]
mov ebp, dword [ebx + 0x50]
cmp dword [0xaa0104], ebp
xchg ebp, ebx
sete bl
xchg ebp, ebx
mov ebx, dword [ebx + 0x54]
cmp dword [0xaa0108], ebx
sete bl
and ebx, ebp
test bl, bl
je 0x40c4f6
mov ebx, dword [0xaa010c]
add ebx, 1
mov ebp, dword [0xaa0110]
mov dword [0xaa010c], ebx
adc ebp, 0
mov dword [0xaa0110], ebp
mov ebx, dword [0xa9fd70]
test ebx, ebx
je 0x40c550
mov ebx, dword fs:[0x14]
mov ebx, dword [ebx]
mov ebp, dword [ebx + 0x18]
mov ebp, dword [ebp + 0x4c]
test ebp, ebp
jne 0x40c519
mov ebp, ebx
mov ebx, dword [ebp + 0xe4]
sub ebx, edx
mov esi, dword [ebp + 0xe8]
mov dword [ebp + 0xe4], ebx
sbb esi, 0
mov dword [ebp + 0xe8], esi
test esi, esi
jge 0x40c552
mov dword [esp + 0x3c], ebp
mov dword [esp], ebp
call fcn.0041c450
mov edx, dword [esp + 0x48]
mov ebp, dword [esp + 0x3c]
jmp 0x40c552
xor ebp, ebp
mov ebx, dword fs:[0x14]
mov ebx, dword [ebx]
mov esi, dword [ebx + 0x18]
nop
inc dword [esi + 0x78]
mov esi, dword [ebx + 0x18]
test byte [ebx], al
mov ebx, dword [esi + 0x68]
test ebx, ebx
jne 0x40cb9e
mov ebx, dword fs:[0x14]
mov ebx, dword [ebx]
cmp dword [esi + 0x2c], ebx
je 0x40cb88
mov dword [esi + 0x68], 1
mov ebx, dword [esi + 0x54]
test ebx, ebx
je 0x40c59f
mov ebx, dword [ebx + 0x30]
jmp 0x40c5a5
mov ebx, dword [0xa9fd8c]
test ebx, ebx
je 0x40cb72
mov edi, dword [esp + 0x4c]
test edi, edi
je 0x40c5c5
mov eax, ebp
mov ebp, dword [edi + 4]
test ebp, ebp
xchg ebp, ebx
sete bl
xchg ebp, ebx
jmp 0x40c5cc
mov eax, ebp
mov ebp, 1
mov dword [esp + 0x34], esi
mov dword [esp + 0x20], ebx
xchg ebp, eax
mov byte [esp + 0x16], al
xchg ebp, eax
mov dword [esp + 0x40], eax
cmp edx, 0x8000
ja 0x40c824
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x40c70d
cmp edx, 0x10
jae 0x40c70d
mov ecx, dword [ebx + 0xc]
test edx, 7
jne 0x40c610
add ecx, 7
and ecx, 0xfffffff8
jmp 0x40c63a
cmp edx, 0xc
jne 0x40c61d
add ecx, 7
and ecx, 0xfffffff8
jmp 0x40c63a
test edx, 3
jne 0x40c62d
add ecx, 3
and ecx, 0xfffffffc
jmp 0x40c63a
test edx, 1
jne 0x40c63a
nop
inc ecx
and ecx, 0xfffffffe
lea eax, [ecx + edx]
cmp eax, 0x10
ja 0x40c68b
mov edi, dword [ebx + 8]
test edi, edi
je 0x40c68b
add ecx, edi
mov dword [ebx + 0xc], eax
inc dword [ebx + 0x10]
mov dword [esi + 0x68], 0
nop
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov edx, dword [esi + 0x78]
lea ebx, [edx - 1]
mov dword [esi + 0x78], ebx
cmp edx, 1
jne 0x40c683
movzx edx, byte [eax + 0x65]
test dl, dl
je 0x40c683
mov dword [eax + 8], 0xfffffade
mov dword [esp + 0x54], ecx
add esp, 0x44
ret
mov eax, dword [ebx + 0x28]
mov dword [esp + 0x18], eax
mov dword [esp], eax
call fcn.0040c0c0
mov eax, dword [esp + 4]
test eax, eax
je 0x40c6aa
mov ecx, dword [esp + 0x18]
xor edx, edx
jmp 0x40c6c8
mov eax, dword [esp + 0x20]
mov dword [esp], eax
mov byte [esp + 4], 5
call fcn.0040c1d0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
movzx edx, byte [esp + 0x10]
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0x20]
cmp dword [ebp + 0xc], ebx
ja 0x40c6f7
mov esi, dword [ebp + 8]
test esi, esi
jne 0x40c701
mov esi, eax
mov dword [ebp + 8], eax
mov dword [ebp + 0xc], ebx
jmp 0x40c703
mov esi, eax
mov eax, 0x10
jmp 0x40c81d
cmp edx, 0x3f8
ja 0x40c735
mov ecx, esi
lea esi, [edx + 7]
shr esi, 3
cmp esi, 0x81
jae 0x40cb66
lea edi, [0x79ed60]
movzx esi, byte [edi + esi]
jmp 0x40c756
mov ecx, esi
lea esi, [edx - 0x381]
shr esi, 7
cmp esi, 0xf9
jae 0x40cb5a
lea edi, str._______________________....______0001123333333333444444444455666677777888888888889999999999::::::___________________________________________________________________________AAAAAAAAAAAAAAAAAAAAABBBBBBBBBBBCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC
movzx esi, byte [edi + esi]
xchg esi, eax
movzx edi, al
xchg esi, eax
cmp edi, 0x44
jae 0x40cb4e
lea edx, [0x79eea0]
movzx edx, word [edx + edi*2]
nop
shl esi, 1
xchg ebp, eax
movzx edi, al
xchg ebp, eax
or esi, edi
xchg esi, eax
movzx edi, al
xchg esi, eax
cmp edi, 0x88
jae 0x40cb42
xchg esi, eax
mov byte [esp + 0x14], al
xchg esi, eax
mov dword [esp + 0x28], edx
mov eax, dword [ebx + edi*4 + 0x14]
mov dword [esp + 0x18], eax
mov dword [esp], eax
call fcn.0040c0c0
mov eax, dword [esp + 4]
test eax, eax
je 0x40c7b3
mov ecx, dword [esp + 0x18]
xor edx, edx
jmp 0x40c7d5
mov eax, dword [esp + 0x20]
mov dword [esp], eax
movzx ecx, byte [esp + 0x14]
mov byte [esp + 4], cl
call fcn.0040c1d0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
movzx edx, byte [esp + 0x10]
movzx ebx, byte [esp + 0x50]
test bl, bl
je 0x40c80f
movzx ebx, byte [ecx + 0x3c]
test bl, bl
je 0x40c80f
mov dword [esp + 0x38], eax
mov byte [esp + 0x15], dl
mov dword [esp + 0x24], ecx
mov dword [esp], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 4], ecx
call fcn.00465090
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x24]
movzx edx, byte [esp + 0x15]
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0x20]
mov esi, eax
mov eax, dword [esp + 0x28]
xor edi, edi
jmp 0x40c8b6
mov dword [esp], ebx
mov dword [esp + 4], edx
xchg ebp, eax
mov byte [esp + 8], al
xchg ebp, eax
call fcn.004154d0
mov eax, dword [esp + 0xc]
mov dword [eax + 0x18], 1
mov word [eax + 0x38], 1
mov ecx, dword [eax + 0x40]
mov edx, dword [eax + 0xc]
movzx ebx, byte [esp + 0x50]
test bl, bl
je 0x40c894
movzx ebx, byte [eax + 0x3c]
test bl, bl
je 0x40c894
movzx ebx, byte [esp + 0x16]
test bl, bl
jne 0x40c890
mov dword [esp + 0x18], eax
mov dword [esp + 0x28], ecx
mov dword [esp + 0x38], edx
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00465090
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x38]
movzx ebx, byte [esp + 0x16]
mov ebp, ebx
jmp 0x40c89b
movzx ebp, byte [esp + 0x16]
xor ebx, ebx
mov ebp, dword [esp + 0x20]
mov edi, ebx
mov esi, edx
mov ebx, dword [esp + 0x48]
mov edx, 1
mov ebx, ecx
mov ecx, eax
mov eax, ebx
mov ebx, dword [esp + 0x48]
mov dword [esp + 0x38], esi
mov dword [esp + 0x28], eax
mov byte [esp + 0x15], dl
xchg edi, eax
mov byte [esp + 0x17], al
xchg edi, eax
mov dword [esp + 0x18], ecx
movzx edx, byte [esp + 0x16]
test dl, dl
je 0x40c8e1
mov dword [esp + 0x2c], eax
xor eax, eax
mov dword [esp + 0x1c], eax
jmp 0x40c92d
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov edx, dword [esp + 0x4c]
mov dword [esp + 0xc], edx
call fcn.00413ad0
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov edx, dword [esp + 0x48]
cmp edx, ecx
jbe 0x40c91d
mov ebx, dword [eax + 4]
test ebx, ebx
je 0x40c917
mov ebp, edx
sub edx, ecx
lea ecx, [edx + ebx]
jmp 0x40c922
mov ebp, edx
xor ecx, ecx
jmp 0x40c922
mov ecx, dword [eax + 4]
mov ebp, edx
mov edx, dword [esp + 0x20]
add dword [edx + 4], ecx
mov dword [esp + 0x1c], ecx
call fcn.00464560
mov eax, dword [0xa9fd78]
test eax, eax
je 0x40c960
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x18]
mov dword [esp], edx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov edx, dword [esp + 0x1c]
mov dword [esp + 0xc], edx
call fcn.0041f130
mov eax, dword [0xa9fd10]
test eax, eax
jle 0x40c9a5
cmp eax, 1
je 0x40c983
mov eax, dword [esp + 0x20]
mov ecx, dword [eax]
mov edx, dword [esp + 0x28]
cmp edx, ecx
jae 0x40c987
sub ecx, edx
mov dword [eax], ecx
jmp 0x40c9a9
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x34]
mov dword [esp], eax
mov ecx, dword [esp + 0x38]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0040cd50
mov edx, dword [esp + 0x28]
jmp 0x40c9a9
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x34]
mov dword [eax + 0x68], 0
nop
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
mov ebx, dword [eax + 0x78]
lea ebp, [ebx - 1]
mov dword [eax + 0x78], ebp
cmp ebx, 1
jne 0x40c9df
movzx eax, byte [ecx + 0x65]
test al, al
je 0x40c9df
mov dword [ecx + 8], 0xfffffade
movzx eax, byte [esp + 0x17]
test al, al
je 0x40ca09
movzx eax, byte [esp + 0x16]
test al, al
je 0x40cb2c
mov dword [esp], edx
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
call fcn.0040cbe0
mov edx, dword [esp + 0x28]
movzx eax, byte [0xaa0220]
test al, al
je 0x40ca8d
mov eax, dword [0xaa0224]
test eax, eax
je 0x40ca3a
mov eax, dword [esp + 0x38]
mov dword [esp], eax
mov dword [esp + 4], edx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 8], ecx
call fcn.0042f060
mov edx, dword [esp + 0x28]
movzx eax, byte [0xaa0100]
test al, al
je 0x40ca8d
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov ecx, dword [eax + 0x50]
cmp dword [0xaa0104], ecx
sete cl
mov eax, dword [eax + 0x54]
cmp dword [0xaa0108], eax
sete al
and eax, ecx
test al, al
je 0x40ca8d
mov eax, dword [0xaa0114]
add eax, edx
mov ecx, dword [0xaa0118]
mov dword [0xaa0114], eax
adc ecx, 0
mov dword [0xaa0118], ecx
mov eax, dword [esp + 0x40]
test eax, eax
je 0x40cab8
mov ecx, dword [eax + 0xe4]
mov ebx, dword [esp + 0x48]
sub edx, ebx
sub ecx, edx
mov edx, dword [eax + 0xe8]
mov dword [eax + 0xe4], ecx
sbb edx, 0
mov dword [eax + 0xe8], edx
movzx eax, byte [esp + 0x15]
test al, al
je 0x40cb12
mov dword [esp], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp + 0xc], 0
call fcn.00417e40
movzx eax, byte [esp + 0x10]
test al, al
je 0x40cb12
mov dword [esp], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp + 0xc], 0
call fcn.00417fa0
mov eax, dword [esp + 0x38]
mov dword [esp + 0x54], eax
add esp, 0x44
ret
lea eax, [0xa9fdf8]
mov dword [esp + 0x54], eax
add esp, 0x44
ret
lea eax, [0x847fe0]
mov dword [esp], eax
mov dword [esp + 4], 0x31
call fcn.004372c0
mov eax, edi
mov ecx, 0x88
call fcn.00464950
mov eax, edi
mov ecx, 0x44
call fcn.00464950
mov eax, esi
mov ecx, 0xf9
call fcn.00464960
mov eax, esi
mov ecx, 0x81
call fcn.00464960
lea eax, [0x848c93]
mov dword [esp], eax
mov dword [esp + 4], 0x34
call fcn.004372c0
lea eax, [0x83b497]
mov dword [esp], eax
mov dword [esp + 4], 0x14
call fcn.004372c0
lea eax, [0x839061]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.004372c0
lea eax, [0x84863a]
mov dword [esp], eax
mov dword [esp + 4], 0x32
call fcn.004372c0
nop
call fcn.004634e0
jmp fcn.0040c3f0