Function at 0x40aca0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x40b43f
sub esp, 0x4c
cmp dword [0xa973ac], 2
je 0x40b428
mov edx, dword [esp + 0x50]
test edx, edx
je 0x40b3a8
mov ebx, dword [0xa9782c]
test ebx, ebx
je 0x40ad3f
mov eax, dword [esp + 0x54]
test eax, eax
je 0x40ad38
test edx, 7
jne 0x40ad13
mov eax, 8
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [0xa99920]
mov dword [esp + 8], eax
call fcn.0040b910
mov eax, dword [esp + 0xc]
mov dword [esp + 0x5c], eax
add esp, 0x4c
ret
test edx, 3
jne 0x40ad22
mov eax, 4
jmp 0x40acf1
test edx, 1
jne 0x40ad31
mov eax, 2
jmp 0x40acf1
mov eax, 1
jmp 0x40acf1
mov eax, 0x10
jmp 0x40acf1
mov ebx, dword [0xa973a0]
test ebx, ebx
je 0x40b3a1
mov ebx, dword fs:[0x14]
mov ebx, dword [ebx]
mov ebp, dword [ebx + 0x18]
mov ebp, dword [ebp + 0x4c]
test ebp, ebp
je 0x40b39a
mov ebx, dword [ebp + 0xd0]
sub ebx, edx
mov edx, dword [ebp + 0xd4]
mov dword [ebp + 0xd0], ebx
sbb edx, 0
mov dword [ebp + 0xd4], edx
test ebx, ebx
setb bl
test edx, edx
sete dl
xchg esi, ebx
setl bl
xchg esi, ebx
and edx, ebx
or esi, edx
xchg esi, eax
test al, al
xchg esi, eax
jne 0x40b385
mov edx, dword fs:[0x14]
mov edx, dword [edx]
mov ebx, dword [edx + 0x18]
nop
inc dword [ebx + 0x78]
mov ebx, dword [edx + 0x18]
test byte [edx], al
mov edx, dword [ebx + 0x68]
test edx, edx
jne 0x40b412
mov edx, dword fs:[0x14]
mov edx, dword [edx]
cmp dword [ebx + 0x2c], edx
je 0x40b3fc
mov dword [ebx + 0x68], 1
mov edx, dword [esp + 0x50]
mov esi, dword [ebx + 0x54]
test esi, esi
je 0x40b375
mov esi, dword [esi + 0x30]
mov dword [esp + 0x18], 0
mov edi, dword [esp + 0x54]
test edi, edi
je 0x40b369
mov eax, ebp
mov ebp, dword [edi + 4]
test ebp, ebp
xchg ebp, ebx
sete bl
xchg ebp, ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x20], edx
xchg ebp, eax
mov byte [esp + 0x17], al
xchg ebp, eax
mov dword [esp + 0x24], esi
mov dword [esp + 0x38], eax
mov ecx, edx
mov edx, dword [esp + 0x50]
cmp edx, 0x8000
ja 0x40b2e3
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x40b1d7
cmp edx, 0x10
jae 0x40b1d7
mov eax, dword [esi + 0xc]
test edx, 7
jne 0x40b1af
nop
add eax, 7
and eax, 0xfffffff8
add edx, eax
cmp edx, 0x10
ja 0x40aeba
mov ecx, dword [esi + 8]
test ecx, ecx
je 0x40aeba
add eax, ecx
mov dword [esi + 0xc], edx
inc dword [esi + 0x10]
mov dword [ebx + 0x68], 0
nop
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
mov edx, dword [ebx + 0x78]
lea ebp, [edx - 1]
mov dword [ebx + 0x78], ebp
cmp edx, 1
jne 0x40aeb2
movzx edx, byte [ecx + 0x65]
test dl, dl
je 0x40aeb2
mov dword [ecx + 8], 0xfffffade
mov dword [esp + 0x5c], eax
add esp, 0x4c
ret
mov eax, dword [esi + 0x28]
mov dword [esp + 0x18], eax
mov dword [esp], eax
call fcn.0040a980
mov eax, dword [esp + 4]
test eax, eax
je 0x40b186
xor ecx, ecx
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
mov edx, dword [esp + 0x24]
mov ebx, dword [edx + 0xc]
cmp dword [esp + 0x50], ebx
jae 0x40b174
mov ebx, eax
mov dword [edx + 8], eax
mov eax, dword [esp + 0x50]
mov dword [edx + 0xc], eax
mov dword [esp + 0x50], 0x10
mov dword [esp + 0x28], ebx
mov byte [esp + 0x16], cl
movzx eax, byte [esp + 0x17]
test al, al
je 0x40b10a
xor eax, eax
mov ebp, dword [esp + 0x20]
mov dword [esp + 0x20], ebp
mov dword [esp + 0x1c], eax
call fcn.0045c030
mov eax, dword [0xa973ac]
test eax, eax
jne 0x40b0e1
mov eax, dword [esp + 0x2c]
mov dword [eax + 0x68], 0
nop
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
mov edx, dword [eax + 0x78]
lea ebx, [edx - 1]
mov dword [eax + 0x78], ebx
cmp edx, 1
jne 0x40af83
movzx eax, byte [ecx + 0x65]
test al, al
je 0x40af83
mov dword [ecx + 8], 0xfffffade
mov eax, dword [0xa97800]
test eax, eax
jne 0x40b0c0
mov eax, dword [0xa3d19c]
test eax, eax
jle 0x40afba
cmp eax, 1
je 0x40b051
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x24]
mov edx, dword [ecx]
cmp eax, edx
jae 0x40b051
sub edx, eax
mov dword [ecx], edx
mov eax, dword [esp + 0x38]
test eax, eax
je 0x40afe9
mov ecx, dword [eax + 0xd0]
mov edx, dword [esp + 0x50]
mov ebx, dword [esp + 0x20]
sub edx, ebx
sub ecx, edx
mov edx, dword [eax + 0xd4]
mov dword [eax + 0xd0], ecx
sbb edx, 0
mov dword [eax + 0xd4], edx
movzx eax, byte [esp + 0x16]
test al, al
jne 0x40affe
mov eax, dword [esp + 0x28]
mov dword [esp + 0x5c], eax
add esp, 0x4c
ret
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
call fcn.00417230
movzx eax, byte [esp + 0x10]
test al, al
je 0x40aff2
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
call fcn.00417360
jmp 0x40aff2
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
nop
inc dword [ecx + 0x78]
mov eax, dword [eax + 0x18]
mov dword [esp + 0x30], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x50]
mov dword [esp + 8], edx
call fcn.0040b6b0
nop
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov ecx, dword [esp + 0x30]
mov edx, dword [ecx + 0x78]
lea ebx, [edx - 1]
mov dword [ecx + 0x78], ebx
cmp edx, 1
jne 0x40afba
movzx ecx, byte [eax + 0x65]
test cl, cl
je 0x40afba
mov dword [eax + 8], 0xfffffade
jmp 0x40afba
mov eax, dword [esp + 0x28]
mov dword [esp], eax
mov ecx, dword [esp + 0x50]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x54]
mov dword [esp + 8], ecx
call fcn.00429bc0
jmp 0x40af91
mov eax, dword [esp + 0x18]
mov dword [esp], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc], eax
call fcn.0041d970
jmp 0x40af4d
mov eax, dword [esp + 0x54]
cmp dword [0xa7fb8c], eax
jne 0x40b16e
mov ebp, 0x28
mov dword [esp + 0x20], ebp
mov dword [esp], ebx
mov edx, dword [esp + 0x50]
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], eax
call fcn.004125c0
mov eax, dword [esp + 0x54]
mov ecx, dword [eax]
mov edx, dword [esp + 0x20]
cmp edx, ecx
jbe 0x40b167
mov ebx, dword [eax + 4]
test ebx, ebx
je 0x40b161
mov ebp, edx
sub edx, ecx
lea ecx, [edx + ebx]
mov edx, dword [esp + 0x24]
add dword [edx + 4], ecx
mov eax, ecx
jmp 0x40af32
mov ebp, edx
xor ecx, ecx
jmp 0x40b153
mov ecx, dword [eax + 4]
mov ebp, edx
jmp 0x40b153
mov ebp, dword [esp + 0x20]
jmp 0x40b11b
mov ebx, dword [edx + 8]
test ebx, ebx
je 0x40af03
mov ebx, eax
jmp 0x40af0f
mov eax, dword [esp + 0x24]
mov dword [esp], eax
mov byte [esp + 4], 5
call fcn.0040aa90
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
movzx edx, byte [esp + 0x10]
mov dword [esp + 0x18], ecx
mov ecx, edx
jmp 0x40aed7
test edx, 3
jne 0x40b1c2
add eax, 3
and eax, 0xfffffffc
jmp 0x40ae6a
test edx, 1
jne 0x40ae6a
inc eax
and eax, 0xfffffffe
jmp 0x40ae6a
cmp edx, 0x3f8
ja 0x40b2bf
add edx, 7
shr edx, 3
cmp edx, 0x81
jae 0x40b3da
lea ebx, [0xa42d80]
movzx edx, byte [ebx + edx]
movzx ebx, dl
cmp ebx, 0x43
jae 0x40b3c2
lea edi, [0xa42f60]
movzx ebx, word [edi + ebx*2]
mov dword [esp + 0x50], ebx
test byte [esi], al
nop
shl edx, 1
xchg ebp, eax
movzx ebx, al
xchg ebp, eax
or edx, ebx
movzx ebx, dl
cmp ebx, 0x86
jae 0x40b3b6
mov byte [esp + 0x15], dl
mov eax, dword [esi + ebx*4 + 0x14]
mov dword [esp + 0x18], eax
mov dword [esp], eax
call fcn.0040a980
mov eax, dword [esp + 4]
test eax, eax
je 0x40b295
xor ecx, ecx
movzx edx, byte [esp + 0x58]
test dl, dl
je 0x40b267
mov edx, dword [esp + 0x18]
movzx edx, byte [edx + 0x3c]
test dl, dl
jne 0x40b272
mov edx, dword [esp + 0x24]
mov ebx, eax
jmp 0x40af17
mov dword [esp + 0x28], eax
mov byte [esp + 0x16], cl
mov dword [esp], eax
mov ecx, dword [esp + 0x50]
mov dword [esp + 4], ecx
call fcn.0045cba0
mov eax, dword [esp + 0x28]
movzx ecx, byte [esp + 0x16]
jmp 0x40b267
mov eax, dword [esp + 0x24]
mov dword [esp], eax
movzx ecx, byte [esp + 0x15]
mov byte [esp + 4], cl
call fcn.0040aa90
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
movzx edx, byte [esp + 0x10]
mov dword [esp + 0x18], ecx
mov ecx, edx
jmp 0x40b252
add edx, 0xfffffc7f
shr edx, 7
cmp edx, 0xf9
jae 0x40b3ce
lea ebx, [0xa44020]
movzx edx, byte [ebx + edx]
jmp 0x40b1ff
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], 0
lea eax, [0x453b70]
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x50]
mov dword [esp + 0x40], eax
movzx eax, byte [esp + 0x58]
mov byte [esp + 0x44], al
xchg ebp, eax
mov byte [esp + 0x45], al
xchg ebp, eax
lea eax, [esp + 0x18]
mov dword [esp + 0x48], eax
lea eax, [esp + 0x3c]
mov dword [esp], eax
call fcn.0045ad70
mov eax, dword [esp + 0x18]
mov dword [eax + 0x18], 1
mov eax, dword [esp + 0x18]
mov word [eax + 0x38], 1
mov eax, dword [esp + 0x18]
mov ebx, dword [eax + 0xc]
mov eax, dword [eax + 0x40]
mov dword [esp + 0x50], eax
mov edx, dword [esp + 0x24]
mov ecx, 1
jmp 0x40af17
mov eax, ebp
mov ebp, 1
jmp 0x40ae19
mov esi, dword [0xa973bc]
test esi, esi
jne 0x40adf7
jmp 0x40b3e6
mov dword [esp + 0x34], ebp
mov dword [esp], ebp
call fcn.0041aa10
mov ebp, dword [esp + 0x34]
jmp 0x40ada4
mov ebp, ebx
jmp 0x40ad68
xor ebp, ebp
jmp 0x40ada4
lea eax, [0xa97428]
mov dword [esp + 0x5c], eax
add esp, 0x4c
ret
mov eax, ebx
mov ecx, 0x86
call fcn.0045c460
mov eax, ebx
mov ecx, 0x43
call fcn.0045c460
mov eax, edx
mov ecx, 0xf9
call fcn.0045c470
mov eax, edx
mov ecx, 0x81
call fcn.0045c470
lea eax, [0x7f1fc7]
mov dword [esp], eax
mov dword [esp + 4], 0x17
call fcn.00431440
lea eax, [0x7efc72]
mov dword [esp], eax
mov dword [esp + 4], 0x14
call fcn.00431440
lea eax, [0x7ebfa5]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00431440
lea eax, [0x800fab]
mov dword [esp], eax
mov dword [esp + 4], 0x32
call fcn.00431440
nop
call fcn.0045ae90
jmp fcn.0040aca0