Function at 0x40b400
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x40bc37
sub esp, 0x44
cmp dword [0x9f0c30], 2
je 0x40bc20
mov edx, dword [esp + 0x48]
test edx, edx
je 0x40bba0
movzx ebx, byte [0x9f10a0]
test bl, bl
je 0x40b506
mov ebx, dword [0x9f10ac]
test ebx, ebx
je 0x40b4ae
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x40b4a7
test edx, 7
jne 0x40b482
mov eax, 8
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [0x9f3180]
mov dword [esp + 8], eax
call fcn.0040bfb0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x54], eax
add esp, 0x44
ret
test edx, 3
jne 0x40b491
mov eax, 4
jmp 0x40b460
test edx, 1
jne 0x40b4a0
mov eax, 2
jmp 0x40b460
mov eax, 1
jmp 0x40b460
mov eax, 0x10
jmp 0x40b460
movzx ebx, byte [0x9f0f70]
test bl, bl
je 0x40b506
mov ebx, dword [0x9f0f78]
mov ebp, dword fs:[0x14]
mov ebp, dword [ebp]
cmp dword [ebp + 0x54], ebx
sete bl
mov esi, dword [0x9f0f74]
cmp dword [ebp + 0x50], esi
xchg ebp, ebx
sete bl
xchg ebp, ebx
and ebx, ebp
test bl, bl
je 0x40b506
mov ebx, dword [0x9f0f7c]
add ebx, 1
mov ebp, dword [0x9f0f80]
mov dword [0x9f0f7c], ebx
adc ebp, 0
mov dword [0x9f0f80], ebp
mov ebx, dword [0x9f0c24]
test ebx, ebx
je 0x40bb99
mov ebx, dword fs:[0x14]
mov ebx, dword [ebx]
mov ebp, dword [ebx + 0x18]
mov ebp, dword [ebp + 0x4c]
test ebp, ebp
je 0x40bb92
mov ebx, dword [ebp + 0xd0]
sub ebx, edx
mov esi, dword [ebp + 0xd4]
mov dword [ebp + 0xd0], ebx
sbb esi, 0
mov dword [ebp + 0xd4], esi
test esi, esi
jl 0x40bb79
mov ebx, dword fs:[0x14]
mov ebx, dword [ebx]
mov esi, dword [ebx + 0x18]
nop
inc dword [esi + 0x78]
mov esi, dword [ebx + 0x18]
test byte [ebx], al
mov ebx, dword [esi + 0x68]
test ebx, ebx
jne 0x40bc0a
mov ebx, dword fs:[0x14]
mov ebx, dword [ebx]
cmp dword [esi + 0x2c], ebx
je 0x40bbf4
mov dword [esi + 0x68], 1
mov ebx, dword fs:[0x14]
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x18]
mov ebx, dword [ebx + 0x54]
test ebx, ebx
je 0x40bb6e
mov ebx, dword [ebx + 0x30]
test ebx, ebx
je 0x40bbde
mov edi, dword [esp + 0x4c]
test edi, edi
je 0x40bb62
mov eax, ebp
mov ebp, dword [edi + 4]
test ebp, ebp
xchg ebp, ebx
sete bl
xchg ebp, ebx
mov dword [esp + 0x38], esi
mov dword [esp + 0x24], ebx
xchg ebp, eax
mov byte [esp + 0x17], al
xchg ebp, eax
mov dword [esp + 0x40], eax
cmp edx, 0x8000
ja 0x40bb1d
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x40b9ff
cmp edx, 0x10
jae 0x40b9ff
mov ecx, dword [ebx + 0xc]
test edx, 7
jne 0x40b9c7
nop
add ecx, 7
and ecx, 0xfffffff8
lea eax, [ecx + edx]
cmp eax, 0x10
ja 0x40b66d
mov edi, dword [ebx + 8]
test edi, edi
je 0x40b66d
add ecx, edi
mov dword [ebx + 0xc], eax
inc dword [ebx + 0x10]
mov dword [esi + 0x68], 0
nop
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov edx, dword [esi + 0x78]
lea ebx, [edx - 1]
mov dword [esi + 0x78], ebx
cmp edx, 1
jne 0x40b665
movzx edx, byte [eax + 0x65]
test dl, dl
je 0x40b665
mov dword [eax + 8], 0xfffffade
mov dword [esp + 0x54], ecx
add esp, 0x44
ret
mov eax, dword [ebx + 0x28]
mov dword [esp + 0x18], eax
mov dword [esp], eax
call fcn.0040b0e0
mov eax, dword [esp + 4]
test eax, eax
je 0x40b9a4
mov ecx, dword [esp + 0x18]
xor edx, edx
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0x24]
cmp dword [ebp + 0xc], ebx
jbe 0x40b992
mov esi, eax
mov dword [ebp + 8], eax
mov dword [ebp + 0xc], ebx
mov eax, 0x10
mov dword [esp + 0x30], esi
mov dword [esp + 0x2c], eax
mov byte [esp + 0x16], dl
mov dword [esp + 0x18], ecx
movzx edi, byte [esp + 0x17]
xchg edi, eax
test al, al
xchg edi, eax
je 0x40b930
xor edi, edi
mov dword [esp + 0x20], ebx
mov dword [esp + 0x1c], edi
call fcn.0045f0b0
mov eax, dword [0x9f0c30]
test eax, eax
jne 0x40b907
mov eax, dword [esp + 0x38]
mov dword [eax + 0x68], 0
nop
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
mov edx, dword [eax + 0x78]
lea ebx, [edx - 1]
mov dword [eax + 0x78], ebx
cmp edx, 1
jne 0x40b739
movzx eax, byte [ecx + 0x65]
test al, al
je 0x40b739
mov dword [ecx + 8], 0xfffffade
movzx eax, byte [0x9f10a0]
test al, al
je 0x40b8fe
mov eax, dword [0x9f10a4]
test eax, eax
jne 0x40b8dd
movzx eax, byte [0x9f0f70]
test al, al
je 0x40b8d4
mov eax, dword [0x9f0f74]
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp dword [ecx + 0x50], eax
sete al
mov edx, dword [0x9f0f78]
cmp dword [ecx + 0x54], edx
sete cl
and ecx, eax
test cl, cl
je 0x40b8d4
mov eax, dword [0x9f0f84]
mov ecx, dword [esp + 0x2c]
add eax, ecx
mov edx, dword [0x9f0f88]
mov dword [0x9f0f84], eax
adc edx, 0
mov dword [0x9f0f88], edx
mov eax, dword [0x97c1a0]
test eax, eax
jle 0x40b7da
cmp eax, 1
je 0x40b86d
mov eax, dword [esp + 0x24]
mov edx, dword [eax]
cmp edx, ecx
jbe 0x40b86d
sub edx, ecx
mov dword [eax], edx
mov eax, dword [esp + 0x40]
test eax, eax
je 0x40b805
mov edx, dword [eax + 0xd0]
mov ebx, dword [esp + 0x20]
sub ecx, ebx
sub edx, ecx
mov ecx, dword [eax + 0xd4]
mov dword [eax + 0xd0], edx
sbb ecx, 0
mov dword [eax + 0xd4], ecx
movzx eax, byte [esp + 0x16]
test al, al
jne 0x40b81a
mov eax, dword [esp + 0x30]
mov dword [esp + 0x54], eax
add esp, 0x44
ret
mov dword [esp], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp + 0xc], 0
call fcn.00417f20
movzx eax, byte [esp + 0x10]
test al, al
je 0x40b80e
mov dword [esp], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp + 0xc], 0
call fcn.00418040
jmp 0x40b80e
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov edx, dword [eax + 0x18]
nop
inc dword [edx + 0x78]
mov eax, dword [eax + 0x18]
mov dword [esp + 0x34], eax
mov dword [esp], eax
mov edx, dword [esp + 0x30]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.0040bd30
nop
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov ecx, dword [esp + 0x34]
mov edx, dword [ecx + 0x78]
lea ebx, [edx - 1]
mov dword [ecx + 0x78], ebx
cmp edx, 1
jne 0x40b8cb
movzx ecx, byte [eax + 0x65]
test cl, cl
je 0x40b8cb
mov dword [eax + 8], 0xfffffade
mov ecx, dword [esp + 0x2c]
jmp 0x40b7da
mov ecx, dword [esp + 0x2c]
jmp 0x40b7b5
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov ecx, dword [esp + 0x2c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x4c]
mov dword [esp + 8], edx
call fcn.0042b080
jmp 0x40b756
mov ecx, dword [esp + 0x2c]
jmp 0x40b7b5
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x18]
mov dword [esp], edx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 8], eax
mov edx, dword [esp + 0x1c]
mov dword [esp + 0xc], edx
call fcn.0041e850
jmp 0x40b703
mov edi, dword [esp + 0x4c]
cmp dword [0x9d2c3c], edi
jne 0x40b941
mov ebx, 0x28
mov dword [esp + 0x20], ebx
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
call fcn.004127e0
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov edx, dword [esp + 0x20]
cmp edx, ecx
jbe 0x40b98b
mov ebx, dword [eax + 4]
test ebx, ebx
je 0x40b985
mov ebp, edx
sub edx, ecx
lea ecx, [edx + ebx]
mov edx, dword [esp + 0x24]
add dword [edx + 4], ecx
mov edi, ecx
mov ebx, ebp
jmp 0x40b6e8
mov ebp, edx
xor ecx, ecx
jmp 0x40b975
mov ecx, dword [eax + 4]
mov ebp, edx
jmp 0x40b975
mov esi, dword [ebp + 8]
test esi, esi
je 0x40b6ba
mov esi, eax
jmp 0x40b6c2
mov eax, dword [esp + 0x24]
mov dword [esp], eax
mov byte [esp + 4], 5
call fcn.0040b1f0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
movzx edx, byte [esp + 0x10]
jmp 0x40b68e
cmp edx, 0xc
jne 0x40b9d7
add ecx, 7
and ecx, 0xfffffff8
jmp 0x40b61c
test edx, 3
jne 0x40b9ea
add ecx, 3
and ecx, 0xfffffffc
jmp 0x40b61c
test edx, 1
jne 0x40b61c
inc ecx
and ecx, 0xfffffffe
jmp 0x40b61c
cmp edx, 0x3f8
ja 0x40baf1
mov ecx, esi
lea esi, [edx + 7]
shr esi, 3
cmp esi, 0x81
jae 0x40bbd2
lea edx, [0x981880]
movzx edx, byte [edx + esi]
movzx esi, dl
cmp esi, 0x44
jae 0x40bbba
lea edi, [0x9819c0]
movzx esi, word [edi + esi*2]
nop
shl edx, 1
xchg ebp, eax
movzx edi, al
xchg ebp, eax
or edx, edi
movzx edi, dl
cmp edi, 0x88
jae 0x40bbae
mov byte [esp + 0x15], dl
mov dword [esp + 0x2c], esi
mov eax, dword [ebx + edi*4 + 0x14]
mov dword [esp + 0x18], eax
mov dword [esp], eax
call fcn.0040b0e0
mov eax, dword [esp + 4]
test eax, eax
je 0x40bacd
mov ecx, dword [esp + 0x18]
xor edx, edx
movzx ebx, byte [esp + 0x50]
test bl, bl
je 0x40ba8f
movzx ebx, byte [ecx + 0x3c]
test bl, bl
jne 0x40baa2
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0x24]
mov esi, eax
mov eax, dword [esp + 0x2c]
jmp 0x40b6c7
mov dword [esp + 0x30], eax
mov byte [esp + 0x16], dl
mov dword [esp + 0x28], ecx
mov dword [esp], eax
mov ecx, dword [esp + 0x2c]
mov dword [esp + 4], ecx
call fcn.0045fc40
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
movzx edx, byte [esp + 0x16]
jmp 0x40ba8f
mov eax, dword [esp + 0x24]
mov dword [esp], eax
movzx ecx, byte [esp + 0x15]
mov byte [esp + 4], cl
call fcn.0040b1f0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
movzx edx, byte [esp + 0x10]
jmp 0x40ba7e
mov ecx, esi
lea esi, [edx - 0x381]
shr esi, 7
cmp esi, 0xf9
jae 0x40bbc6
lea eax, [0x982a40]
movzx esi, byte [eax + esi]
mov eax, dword [esp + 0x40]
mov edx, esi
jmp 0x40ba29
mov dword [esp], ebx
mov dword [esp + 4], edx
movzx eax, byte [esp + 0x50]
mov byte [esp + 8], al
xchg ebp, eax
mov byte [esp + 9], al
xchg ebp, eax
call fcn.004140c0
mov ecx, dword [esp + 0xc]
mov dword [ecx + 0x18], 1
mov word [ecx + 0x38], 1
mov esi, dword [ecx + 0xc]
nop
mov eax, dword [ecx + 0x40]
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0x24]
mov edx, 1
jmp 0x40b6c7
mov eax, ebp
mov ebp, 1
jmp 0x40b5d5
mov ebx, dword [0x9f0c40]
jmp 0x40b5b3
mov dword [esp + 0x3c], ebp
mov dword [esp], ebp
call fcn.0041ba90
mov edx, dword [esp + 0x48]
mov ebp, dword [esp + 0x3c]
jmp 0x40b554
mov ebp, ebx
jmp 0x40b52f
xor ebp, ebp
jmp 0x40b554
lea eax, [0x9f0ca8]
mov dword [esp + 0x54], eax
add esp, 0x44
ret
mov eax, edi
mov ecx, 0x88
call fcn.0045f4f0
mov eax, esi
mov ecx, 0x44
call fcn.0045f4f0
mov eax, esi
mov ecx, 0xf9
call fcn.0045f500
mov eax, esi
mov ecx, 0x81
call fcn.0045f500
lea eax, [0x77e1ff]
mov dword [esp], eax
mov dword [esp + 4], 0x34
call fcn.00432fc0
lea eax, [0x76e8cd]
mov dword [esp], eax
mov dword [esp + 4], 0x14
call fcn.00432fc0
lea eax, [0x76bb05]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00432fc0
lea eax, [0x77db71]
mov dword [esp], eax
mov dword [esp + 4], 0x32
call fcn.00432fc0
nop
call fcn.0045df10
jmp fcn.0040b400