Function at 0x40ac40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x40b3df
sub esp, 0x4c
cmp dword [0xa8c3c8], 2
je 0x40b3c8
mov edx, dword [esp + 0x50]
test edx, edx
je 0x40b348
mov ebx, dword [0xa8c82c]
test ebx, ebx
je 0x40acdf
mov eax, dword [esp + 0x54]
test eax, eax
je 0x40acd8
test edx, 7
jne 0x40acb3
mov eax, 8
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [0xa8e920]
mov dword [esp + 8], eax
call fcn.0040b8b0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x5c], eax
add esp, 0x4c
ret
test edx, 3
jne 0x40acc2
mov eax, 4
jmp 0x40ac91
test edx, 1
jne 0x40acd1
mov eax, 2
jmp 0x40ac91
mov eax, 1
jmp 0x40ac91
mov eax, 0x10
jmp 0x40ac91
mov ebx, dword [0xa8c3bc]
test ebx, ebx
je 0x40b341
mov ebx, dword fs:[0x14]
mov ebx, dword [ebx]
mov ebp, dword [ebx + 0x18]
mov ebp, dword [ebp + 0x4c]
test ebp, ebp
je 0x40b33a
mov ebx, dword [ebp + 0xd0]
sub ebx, edx
mov edx, dword [ebp + 0xd4]
mov dword [ebp + 0xd0], ebx
sbb edx, 0
mov dword [ebp + 0xd4], edx
test ebx, ebx
setb bl
test edx, edx
sete dl
xchg esi, ebx
setl bl
xchg esi, ebx
and edx, ebx
or esi, edx
xchg esi, eax
test al, al
xchg esi, eax
jne 0x40b325
mov edx, dword fs:[0x14]
mov edx, dword [edx]
mov ebx, dword [edx + 0x18]
nop
inc dword [ebx + 0x78]
mov ebx, dword [edx + 0x18]
test byte [edx], al
mov edx, dword [ebx + 0x68]
test edx, edx
jne 0x40b3b2
mov edx, dword fs:[0x14]
mov edx, dword [edx]
cmp dword [ebx + 0x2c], edx
je 0x40b39c
mov dword [ebx + 0x68], 1
mov edx, dword [esp + 0x50]
mov esi, dword [ebx + 0x54]
test esi, esi
je 0x40b315
mov esi, dword [esi + 0x30]
mov dword [esp + 0x18], 0
mov edi, dword [esp + 0x54]
test edi, edi
je 0x40b309
mov eax, ebp
mov ebp, dword [edi + 4]
test ebp, ebp
xchg ebp, ebx
sete bl
xchg ebp, ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x20], edx
xchg ebp, eax
mov byte [esp + 0x17], al
xchg ebp, eax
mov dword [esp + 0x24], esi
mov dword [esp + 0x38], eax
mov ecx, edx
mov edx, dword [esp + 0x50]
cmp edx, 0x8000
ja 0x40b283
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x40b177
cmp edx, 0x10
jae 0x40b177
mov eax, dword [esi + 0xc]
test edx, 7
jne 0x40b14f
nop
add eax, 7
and eax, 0xfffffff8
add edx, eax
cmp edx, 0x10
ja 0x40ae5a
mov ecx, dword [esi + 8]
test ecx, ecx
je 0x40ae5a
add eax, ecx
mov dword [esi + 0xc], edx
inc dword [esi + 0x10]
mov dword [ebx + 0x68], 0
nop
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
mov edx, dword [ebx + 0x78]
lea ebp, [edx - 1]
mov dword [ebx + 0x78], ebp
cmp edx, 1
jne 0x40ae52
movzx edx, byte [ecx + 0x65]
test dl, dl
je 0x40ae52
mov dword [ecx + 8], 0xfffffade
mov dword [esp + 0x5c], eax
add esp, 0x4c
ret
mov eax, dword [esi + 0x28]
mov dword [esp + 0x18], eax
mov dword [esp], eax
call fcn.0040a920
mov eax, dword [esp + 4]
test eax, eax
je 0x40b126
xor ecx, ecx
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
mov edx, dword [esp + 0x24]
mov ebx, dword [edx + 0xc]
cmp dword [esp + 0x50], ebx
jae 0x40b114
mov ebx, eax
mov dword [edx + 8], eax
mov eax, dword [esp + 0x50]
mov dword [edx + 0xc], eax
mov dword [esp + 0x50], 0x10
mov dword [esp + 0x28], ebx
mov byte [esp + 0x16], cl
movzx eax, byte [esp + 0x17]
test al, al
je 0x40b0aa
xor eax, eax
mov ebp, dword [esp + 0x20]
mov dword [esp + 0x20], ebp
mov dword [esp + 0x1c], eax
call fcn.0045bf80
mov eax, dword [0xa8c3c8]
test eax, eax
jne 0x40b081
mov eax, dword [esp + 0x2c]
mov dword [eax + 0x68], 0
nop
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
mov edx, dword [eax + 0x78]
lea ebx, [edx - 1]
mov dword [eax + 0x78], ebx
cmp edx, 1
jne 0x40af23
movzx eax, byte [ecx + 0x65]
test al, al
je 0x40af23
mov dword [ecx + 8], 0xfffffade
mov eax, dword [0xa8c800]
test eax, eax
jne 0x40b060
mov eax, dword [0xa3415c]
test eax, eax
jle 0x40af5a
cmp eax, 1
je 0x40aff1
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x24]
mov edx, dword [ecx]
cmp eax, edx
jae 0x40aff1
sub edx, eax
mov dword [ecx], edx
mov eax, dword [esp + 0x38]
test eax, eax
je 0x40af89
mov ecx, dword [eax + 0xd0]
mov edx, dword [esp + 0x50]
mov ebx, dword [esp + 0x20]
sub edx, ebx
sub ecx, edx
mov edx, dword [eax + 0xd4]
mov dword [eax + 0xd0], ecx
sbb edx, 0
mov dword [eax + 0xd4], edx
movzx eax, byte [esp + 0x16]
test al, al
jne 0x40af9e
mov eax, dword [esp + 0x28]
mov dword [esp + 0x5c], eax
add esp, 0x4c
ret
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
call fcn.004171d0
movzx eax, byte [esp + 0x10]
test al, al
je 0x40af92
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
call fcn.00417300
jmp 0x40af92
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
nop
inc dword [ecx + 0x78]
mov eax, dword [eax + 0x18]
mov dword [esp + 0x30], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x50]
mov dword [esp + 8], edx
call fcn.0040b650
nop
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov ecx, dword [esp + 0x30]
mov edx, dword [ecx + 0x78]
lea ebx, [edx - 1]
mov dword [ecx + 0x78], ebx
cmp edx, 1
jne 0x40af5a
movzx ecx, byte [eax + 0x65]
test cl, cl
je 0x40af5a
mov dword [eax + 8], 0xfffffade
jmp 0x40af5a
mov eax, dword [esp + 0x28]
mov dword [esp], eax
mov ecx, dword [esp + 0x50]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x54]
mov dword [esp + 8], ecx
call fcn.00429b60
jmp 0x40af31
mov eax, dword [esp + 0x18]
mov dword [esp], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc], eax
call fcn.0041d910
jmp 0x40aeed
mov eax, dword [esp + 0x54]
cmp dword [0xa75090], eax
jne 0x40b10e
mov ebp, 0x28
mov dword [esp + 0x20], ebp
mov dword [esp], ebx
mov edx, dword [esp + 0x50]
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], eax
call fcn.00412560
mov eax, dword [esp + 0x54]
mov ecx, dword [eax]
mov edx, dword [esp + 0x20]
cmp edx, ecx
jbe 0x40b107
mov ebx, dword [eax + 4]
test ebx, ebx
je 0x40b101
mov ebp, edx
sub edx, ecx
lea ecx, [edx + ebx]
mov edx, dword [esp + 0x24]
add dword [edx + 4], ecx
mov eax, ecx
jmp 0x40aed2
mov ebp, edx
xor ecx, ecx
jmp 0x40b0f3
mov ecx, dword [eax + 4]
mov ebp, edx
jmp 0x40b0f3
mov ebp, dword [esp + 0x20]
jmp 0x40b0bb
mov ebx, dword [edx + 8]
test ebx, ebx
je 0x40aea3
mov ebx, eax
jmp 0x40aeaf
mov eax, dword [esp + 0x24]
mov dword [esp], eax
mov byte [esp + 4], 5
call fcn.0040aa30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
movzx edx, byte [esp + 0x10]
mov dword [esp + 0x18], ecx
mov ecx, edx
jmp 0x40ae77
test edx, 3
jne 0x40b162
add eax, 3
and eax, 0xfffffffc
jmp 0x40ae0a
test edx, 1
jne 0x40ae0a
inc eax
and eax, 0xfffffffe
jmp 0x40ae0a
cmp edx, 0x3f8
ja 0x40b25f
add edx, 7
shr edx, 3
cmp edx, 0x81
jae 0x40b37a
lea ebx, [0xa39e20]
movzx edx, byte [ebx + edx]
movzx ebx, dl
cmp ebx, 0x43
jae 0x40b362
lea edi, [0xa39f60]
movzx ebx, word [edi + ebx*2]
mov dword [esp + 0x50], ebx
test byte [esi], al
nop
shl edx, 1
xchg ebp, eax
movzx ebx, al
xchg ebp, eax
or edx, ebx
movzx ebx, dl
cmp ebx, 0x86
jae 0x40b356
mov byte [esp + 0x15], dl
mov eax, dword [esi + ebx*4 + 0x14]
mov dword [esp + 0x18], eax
mov dword [esp], eax
call fcn.0040a920
mov eax, dword [esp + 4]
test eax, eax
je 0x40b235
xor ecx, ecx
movzx edx, byte [esp + 0x58]
test dl, dl
je 0x40b207
mov edx, dword [esp + 0x18]
movzx edx, byte [edx + 0x3c]
test dl, dl
jne 0x40b212
mov edx, dword [esp + 0x24]
mov ebx, eax
jmp 0x40aeb7
mov dword [esp + 0x28], eax
mov byte [esp + 0x16], cl
mov dword [esp], eax
mov ecx, dword [esp + 0x50]
mov dword [esp + 4], ecx
call fcn.0045caf0
mov eax, dword [esp + 0x28]
movzx ecx, byte [esp + 0x16]
jmp 0x40b207
mov eax, dword [esp + 0x24]
mov dword [esp], eax
movzx ecx, byte [esp + 0x15]
mov byte [esp + 4], cl
call fcn.0040aa30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
movzx edx, byte [esp + 0x10]
mov dword [esp + 0x18], ecx
mov ecx, edx
jmp 0x40b1f2
add edx, 0xfffffc7f
shr edx, 7
cmp edx, 0xf9
jae 0x40b36e
lea ebx, [0xa3b040]
movzx edx, byte [ebx + edx]
jmp 0x40b19f
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], 0
lea eax, [0x453ac0]
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x50]
mov dword [esp + 0x40], eax
movzx eax, byte [esp + 0x58]
mov byte [esp + 0x44], al
xchg ebp, eax
mov byte [esp + 0x45], al
xchg ebp, eax
lea eax, [esp + 0x18]
mov dword [esp + 0x48], eax
lea eax, [esp + 0x3c]
mov dword [esp], eax
call fcn.0045acc0
mov eax, dword [esp + 0x18]
mov dword [eax + 0x18], 1
mov eax, dword [esp + 0x18]
mov word [eax + 0x38], 1
mov eax, dword [esp + 0x18]
mov ebx, dword [eax + 0xc]
mov eax, dword [eax + 0x40]
mov dword [esp + 0x50], eax
mov edx, dword [esp + 0x24]
mov ecx, 1
jmp 0x40aeb7
mov eax, ebp
mov ebp, 1
jmp 0x40adb9
mov esi, dword [0xa8c3d8]
test esi, esi
jne 0x40ad97
jmp 0x40b386
mov dword [esp + 0x34], ebp
mov dword [esp], ebp
call fcn.0041a9b0
mov ebp, dword [esp + 0x34]
jmp 0x40ad44
mov ebp, ebx
jmp 0x40ad08
xor ebp, ebp
jmp 0x40ad44
lea eax, [0xa8c444]
mov dword [esp + 0x5c], eax
add esp, 0x4c
ret
mov eax, ebx
mov ecx, 0x86
call fcn.0045c3b0
mov eax, ebx
mov ecx, 0x43
call fcn.0045c3b0
mov eax, edx
mov ecx, 0xf9
call fcn.0045c3c0
mov eax, edx
mov ecx, 0x81
call fcn.0045c3c0
lea eax, [0x7ef95d]
mov dword [esp], eax
mov dword [esp + 4], 0x17
call fcn.004313e0
lea eax, [0x7ed640]
mov dword [esp], eax
mov dword [esp + 4], 0x14
call fcn.004313e0
lea eax, [0x7e9948]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.004313e0
lea eax, [0x7fe55c]
mov dword [esp], eax
mov dword [esp + 4], 0x32
call fcn.004313e0
nop
call fcn.0045ade0
jmp fcn.0040ac40