Function at 0x40aa40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x427ad3
push eax
mov dword fs:[0], esp
sub esp, 0xa8
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov ebx, ecx
test esi, esi
je 0x40b31d
mov edi, dword [ebp + 0xc]
test edi, edi
je 0x40b31d
call fcn.0040a610
movzx ax, byte [esi]
movzx cx, byte [esi + 1]
shl ax, 8
or ax, cx
movzx eax, ax
movzx edx, ax
cmp edx, edi
ja 0x40b301
cmp ax, 0x10
jb 0x40b301
lea eax, [esi + 2]
push 0x42edf0
lea ecx, [eax + 6]
push ecx
push eax
call fcn.0040aa00
add esp, 0xc
test al, al
je 0x40b31d
mov al, byte [esi + 8]
cmp al, 0x49
jne 0x40aad6
cmp byte [esi + 9], al
jne 0x40aad6
mov al, 1
jmp 0x40aae9
cmp al, 0x4d
jne 0x40b2e5
cmp byte [esi + 9], al
jne 0x40b2e5
xor al, al
mov byte [esp + 0x14], al
mov edi, dword [esp + 0x14]
lea edx, [esi + 0xa]
push edi
push edx
mov byte [ebx], al
call fcn.0040a480
mov ecx, 0x2a
add esp, 8
cmp cx, ax
jne 0x40b301
push edi
add esi, 0xc
push esi
call fcn.0040a430
lea esi, [eax + 8]
add esp, 8
cmp esi, dword [ebp + 0xc]
jae 0x40b301
lea edi, [esi + 2]
cmp edi, dword [ebp + 0xc]
ja 0x40b301
mov edx, dword [esp + 0x14]
mov eax, dword [ebp + 8]
push edx
lea ecx, [esi + eax]
push ecx
call fcn.0040a480
movzx eax, ax
lea edx, [eax + eax*2]
mov dword [esp + 0x18], eax
lea eax, [esi + edx*4 + 6]
add esp, 8
cmp eax, dword [ebp + 0xc]
ja 0x40b301
xor esi, esi
sub dword [esp + 0x10], 1
mov dword [esp + 0x18], esi
js 0x40ad01
nop
mov ecx, dword [ebp + 0xc]
mov edx, dword [esp + 0x14]
mov eax, dword [ebp + 8]
push ecx
push 8
push edx
push edi
push eax
lea ecx, [esp + 0x84]
push ecx
call fcn.0040a740
add esp, 0x18
movzx eax, word [esp + 0x70]
cmp eax, 0x131
mov dword [esp + 0xbc], 0
jg 0x40ac79
je 0x40ac61
sub eax, 0x102
cmp eax, 0x10
ja case.0x40abc6.259
movzx edx, byte [eax + 0x40b354]
jmp dword [edx*4 + 0x40b33c]
cmp word [esp + 0x72], 3
jne case.0x40abc6.259
mov ax, word [esp + 0x98]
mov word [ebx + 0x5a], ax
jmp case.0x40abc6.259
cmp word [esp + 0x72], 2
jne case.0x40abc6.259
lea ecx, [esp + 0x7c]
push ecx
lea ecx, [ebx + 4]
call dword [0x42c054]
jmp case.0x40abc6.259
cmp word [esp + 0x72], 2
jne case.0x40abc6.259
lea edx, [esp + 0x7c]
push edx
lea ecx, [ebx + 0x20]
call dword [0x42c054]
jmp case.0x40abc6.259
cmp word [esp + 0x72], 2
jne case.0x40abc6.259
lea eax, [esp + 0x7c]
push eax
lea ecx, [ebx + 0x3c]
call dword [0x42c054]
jmp case.0x40abc6.259
cmp word [esp + 0x72], 3
jne case.0x40abc6.259
mov cx, word [esp + 0x98]
mov word [ebx + 0x58], cx
jmp case.0x40abc6.259
cmp word [esp + 0x72], 2
jne case.0x40abc6.259
lea edx, [esp + 0x7c]
push edx
lea ecx, [ebx + 0x5c]
call dword [0x42c054]
jmp case.0x40abc6.259
cmp eax, 0x8769
jg 0x40accc
je 0x40acc3
cmp eax, 0x132
je 0x40acab
cmp eax, 0x8298
jne case.0x40abc6.259
cmp word [esp + 0x72], 2
jne case.0x40abc6.259
lea eax, [esp + 0x7c]
push eax
lea ecx, [ebx + 0xe8]
call dword [0x42c054]
jmp case.0x40abc6.259
cmp word [esp + 0x72], 2
jne case.0x40abc6.259
lea ecx, [esp + 0x7c]
push ecx
lea ecx, [ebx + 0x78]
call dword [0x42c054]
jmp case.0x40abc6.259
mov esi, dword [esp + 0x74]
add esi, 8
jmp case.0x40abc6.259
cmp eax, 0x8825
jne case.0x40abc6.259
mov edx, dword [esp + 0x74]
add edx, 8
mov dword [esp + 0x18], edx
lea ecx, [esp + 0x7c]
add edi, 0xc
mov dword [esp + 0xbc], 0xffffffff
call dword [0x42c048]
sub dword [esp + 0x10], 1
jns 0x40ab70
lea eax, [esi + 4]
cmp eax, dword [ebp + 0xc]
ja 0x40b040
mov ecx, dword [esp + 0x14]
mov edx, dword [ebp + 8]
push ecx
lea eax, [esi + edx]
push eax
call fcn.0040a480
mov edi, dword [ebp + 0xc]
movzx eax, ax
lea ecx, [eax + eax*2]
lea edx, [esi + ecx*4 + 6]
add esp, 8
mov dword [esp + 0x10], eax
cmp edx, edi
ja 0x40b301
add esi, 2
sub dword [esp + 0x10], 1
js 0x40b043
mov eax, dword [esp + 0x14]
mov ecx, dword [ebp + 8]
push edi
push 8
push eax
push esi
push ecx
lea edx, [esp + 0x44]
push edx
call fcn.0040a740
add esp, 0x18
movzx eax, word [esp + 0x30]
cmp eax, 0x9204
mov dword [esp + 0xbc], 1
jg 0x40aea8
je 0x40ae8d
cmp eax, 0x8827
jg 0x40ae17
je 0x40adfa
sub eax, 0x829a
je 0x40addf
sub eax, 3
je 0x40adc4
sub eax, 0x585
jne case.default.0x40aec7
cmp word [esp + 0x32], 3
jne case.default.0x40aec7
mov ax, word [esp + 0x58]
mov word [ebx + 0x130], ax
jmp case.default.0x40aec7
cmp word [esp + 0x32], 5
jne case.default.0x40aec7
fld qword [esp + 0x60]
fstp qword [ebx + 0x110]
jmp case.default.0x40aec7
cmp word [esp + 0x32], 5
jne case.default.0x40aec7
fld qword [esp + 0x60]
fstp qword [ebx + 0x108]
jmp case.default.0x40aec7
cmp word [esp + 0x32], 3
jne case.default.0x40aec7
mov cx, word [esp + 0x58]
mov word [ebx + 0x118], cx
jmp case.default.0x40aec7
sub eax, 0x9003
je 0x40ae6b
sub eax, 1
je 0x40ae49
sub eax, 0x1fd
jne case.default.0x40aec7
cmp word [esp + 0x32], 5
jne case.default.0x40aec7
fld qword [esp + 0x60]
fstp qword [ebx + 0x120]
jmp case.default.0x40aec7
cmp word [esp + 0x32], 2
jne case.default.0x40aec7
lea edx, [esp + 0x3c]
push edx
lea ecx, [ebx + 0xb0]
call dword [0x42c054]
jmp case.default.0x40aec7
cmp word [esp + 0x32], 2
jne case.default.0x40aec7
lea eax, [esp + 0x3c]
push eax
lea ecx, [ebx + 0x94]
call dword [0x42c054]
jmp case.default.0x40aec7
cmp word [esp + 0x32], 5
jne case.default.0x40aec7
fld qword [esp + 0x60]
fstp qword [ebx + 0x128]
jmp case.default.0x40aec7
cmp eax, 0x9291
jg 0x40af7d
je 0x40af5b
sub eax, 0x9206
cmp eax, 4
ja case.default.0x40aec7
jmp dword [eax*4 + 0x40b368]
cmp word [esp + 0x32], 5
jne case.default.0x40aec7
fld qword [esp + 0x60]
fstp qword [ebx + 0x138]
jmp case.default.0x40aec7
cmp word [esp + 0x32], 3
jne case.default.0x40aec7
mov cx, word [esp + 0x58]
mov word [ebx + 0x14a], cx
jmp case.default.0x40aec7
cmp word [esp + 0x32], 5
jne case.default.0x40aec7
fld qword [esp + 0x60]
fstp qword [ebx + 0x140]
jmp case.default.0x40aec7
cmp word [esp + 0x32], 3
jne case.default.0x40aec7
mov dx, word [esp + 0x58]
mov word [ebx + 0x14c], dx
jmp case.default.0x40aec7
cmp word [esp + 0x32], 3
jne case.default.0x40aec7
mov ax, word [esp + 0x58]
mov word [ebx + 0x14e], ax
jmp case.default.0x40aec7
cmp word [esp + 0x32], 2
jne case.default.0x40aec7
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [ebx + 0xcc]
call dword [0x42c054]
jmp case.default.0x40aec7
cmp eax, 0xa403
jg 0x40b000
je 0x40afea
sub eax, 0xa002
je 0x40afc0
sub eax, 1
jne case.default.0x40aec7
mov ax, word [esp + 0x32]
cmp ax, 4
jne 0x40afad
mov edx, dword [esp + 0x5c]
mov dword [ebx + 0x154], edx
jmp case.default.0x40aec7
cmp ax, 3
jne case.default.0x40aec7
movzx eax, word [esp + 0x58]
mov dword [ebx + 0x154], eax
jmp case.default.0x40aec7
mov ax, word [esp + 0x32]
cmp ax, 4
jne 0x40afd7
mov ecx, dword [esp + 0x5c]
mov dword [ebx + 0x150], ecx
jmp case.default.0x40aec7
cmp ax, 3
jne case.default.0x40aec7
movzx edx, word [esp + 0x58]
mov dword [ebx + 0x150], edx
jmp case.default.0x40aec7
cmp word [esp + 0x32], 3
jne case.default.0x40aec7
mov ax, word [esp + 0x58]
mov word [ebx + 0x132], ax
jmp case.default.0x40aec7
cmp eax, 0xa405
jne case.default.0x40aec7
cmp word [esp + 0x32], 3
jne case.default.0x40aec7
mov cx, word [esp + 0x58]
mov word [ebx + 0x148], cx
lea ecx, [esp + 0x3c]
add esi, 0xc
mov dword [esp + 0xbc], 0xffffffff
call dword [0x42c048]
sub dword [esp + 0x10], 1
jns 0x40ad48
jmp 0x40b043
mov edi, dword [ebp + 0xc]
mov esi, dword [esp + 0x18]
lea edx, [esi + 4]
cmp edx, edi
ja 0x40b2cc
mov eax, dword [esp + 0x14]
mov ecx, dword [ebp + 8]
push eax
lea edx, [esi + ecx]
push edx
call fcn.0040a480
movzx eax, ax
lea ecx, [eax + eax*2]
lea edx, [esi + ecx*4 + 6]
add esp, 8
cmp edx, edi
ja 0x40b301
sub eax, 1
mov dword [esp + 0x2c], eax
js 0x40b2cc
mov eax, dword [ebp + 8]
lea ecx, [esi + eax + 0xa]
mov dword [esp + 0x10], ecx
mov edi, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
add edi, 0xfffffffc
lea edx, [edi - 2]
push esi
push edx
call fcn.0040a480
movzx eax, ax
push esi
push edi
mov dword [esp + 0x28], eax
call fcn.0040a430
mov ecx, dword [esp + 0x20]
push esi
push ecx
mov dword [esp + 0x38], eax
call fcn.0040a430
mov edx, dword [esp + 0x2c]
push edx
add edi, 0xfffffffc
push edi
mov esi, eax
call fcn.0040a480
movzx eax, ax
dec eax
add esp, 0x20
cmp eax, 5
ja case.default.0x40b0e2
jmp dword [eax*4 + 0x40b37c]
mov eax, dword [esp + 0x10]
mov al, byte [eax]
mov byte [ebx + 0x180], al
cmp al, 0x53
jne case.default.0x40b0e2
fld qword [ebx + 0x158]
fchs
fstp qword [ebx + 0x158]
jmp case.default.0x40b0e2
cmp word [esp + 0x18], 5
jne case.default.0x40b0e2
cmp dword [esp + 0x20], 3
jne case.default.0x40b0e2
mov ecx, dword [ebp + 8]
mov edi, dword [esp + 0x14]
lea edx, [ecx + esi + 8]
push edi
push edx
call fcn.0040a540
fst qword [esp + 0x20]
mov eax, dword [ebp + 8]
fstp qword [ebx + 0x168]
lea ecx, [eax + esi + 0x10]
push edi
push ecx
call fcn.0040a540
fst qword [esp + 0x30]
mov edx, dword [ebp + 8]
fstp qword [ebx + 0x170]
lea eax, [edx + esi + 0x14]
push edi
push eax
call fcn.0040a540
fst qword [ebx + 0x178]
fld qword [esp + 0x38]
add esp, 0x18
cmp byte [ebx + 0x180], 0x53
fdiv qword [0x42ede8]
fadd qword [esp + 0x18]
fxch st(1)
fdiv qword [0x42ede0]
faddp st(1)
fst qword [ebx + 0x158]
jne 0x40b2ba
fchs
fstp qword [ebx + 0x158]
jmp case.default.0x40b0e2
mov ecx, dword [esp + 0x10]
mov al, byte [ecx]
mov byte [ebx + 0x1a0], al
cmp al, 0x57
jne case.default.0x40b0e2
fld qword [ebx + 0x160]
fchs
fstp qword [ebx + 0x160]
jmp case.default.0x40b0e2
cmp word [esp + 0x18], 5
jne case.default.0x40b0e2
cmp dword [esp + 0x20], 3
jne case.default.0x40b0e2
mov edx, dword [ebp + 8]
mov edi, dword [esp + 0x14]
lea eax, [edx + esi + 8]
push edi
push eax
call fcn.0040a540
fst qword [esp + 0x20]
mov ecx, dword [ebp + 8]
fstp qword [ebx + 0x188]
lea edx, [ecx + esi + 0x10]
push edi
push edx
call fcn.0040a540
fst qword [esp + 0x30]
mov eax, dword [ebp + 8]
fstp qword [ebx + 0x190]
lea ecx, [eax + esi + 0x14]
push edi
push ecx
call fcn.0040a540
fst qword [ebx + 0x198]
fld qword [esp + 0x38]
add esp, 0x18
cmp byte [ebx + 0x1a0], 0x57
fdiv qword [0x42ede8]
fadd qword [esp + 0x18]
fxch st(1)
fdiv qword [0x42ede0]
faddp st(1)
fst qword [ebx + 0x160]
jne 0x40b2ba
fchs
fstp qword [ebx + 0x160]
jmp case.default.0x40b0e2
mov edx, dword [esp + 0x10]
mov al, byte [edx]
mov byte [ebx + 0x1b0], al
cmp al, 1
jne case.default.0x40b0e2
fld qword [ebx + 0x1a8]
fchs
fstp qword [ebx + 0x1a8]
jmp case.default.0x40b0e2
cmp word [esp + 0x18], 5
jne case.default.0x40b0e2
mov eax, dword [esp + 0x14]
mov ecx, dword [ebp + 8]
push eax
lea edx, [ecx + esi + 8]
push edx
call fcn.0040a540
fst qword [ebx + 0x1a8]
add esp, 8
cmp byte [ebx + 0x1b0], 1
jne 0x40b2ba
fchs
fstp qword [ebx + 0x1a8]
jmp case.default.0x40b0e2
fstp st(0)
add dword [esp + 0x10], 0xc
sub dword [esp + 0x2c], 1
jns 0x40b090
xor eax, eax
mov ecx, dword [esp + 0xb4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov eax, 0x7c0
mov ecx, dword [esp + 0xb4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov eax, 0x7c1
mov ecx, dword [esp + 0xb4]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [esp + 0xb4]
pop edi
pop esi
mov eax, 0x7bf
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 8