Function at 0xcf8aa0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0xa8
or eax, 0xffffffff
mov dword [esp + 0x4c], edx
push esi
mov esi, ecx
mov dword [esp + 0x4c], eax
xor eax, eax
mov dword [esp + 0x14], esi
mov dword [esp + 0x64], eax
xorps xmm0, xmm0
mov dword [esp + 0x60], eax
cmp dword [esi + 0x40], 0
mov dword [esp + 0x44], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x3c], eax
mov eax, dword [esi]
push edi
mov dword [esp + 0x5c], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x24], eax
movaps xmmword [esp + 0x70], xmm0
jne 0xcf9c7d
cmp byte [eax + 0x1e], 0
jne 0xcf9c7d
cmp dword [edx + 0xc], 0
je 0xcf9c7d
call fcn.00cfd560
mov dword [esp + 0x14], eax
test eax, eax
je 0xcf9c7d
mov edx, dword [eax + 0x40]
mov edi, 0xfff0bdc0
mov dword [esp + 0x20], edi
test edx, edx
je 0xcf8b69
mov ecx, dword [esp + 0x24]
xor edi, edi
mov dword [esp + 0x20], edi
mov ecx, dword [ecx + 4]
test ecx, ecx
jle 0xcf8b69
mov eax, dword [esp + 0x24]
mov eax, dword [eax + 8]
add eax, 0xc
cmp dword [eax], edx
je 0xcf8b61
inc edi
add eax, 0x10
cmp edi, ecx
jl 0xcf8b55
mov eax, dword [esp + 0x14]
mov dword [esp + 0x20], edi
mov edx, eax
mov ecx, esi
call fcn.00d00bd0
test eax, eax
jne 0xcf9c7d
mov edx, dword [esp + 0x14]
push ecx
mov ecx, esi
call fcn.00cfd500
add esp, 4
test eax, eax
jne 0xcf9c7d
mov ecx, esi
call fcn.00cf0230
mov esi, eax
mov dword [esp + 0x4c], esi
test esi, esi
je 0xcf9c7d
mov eax, dword [esp + 0x18]
cmp byte [eax + 0x13], 0
jne 0xcf8bb4
mov byte [esi + 0x6d], 1
xor edx, edx
mov ecx, eax
cmp dword [ebp + 0xc], edx
push edi
setne dl
call fcn.00cfe3c0
add esp, 4
cmp dword [ebp + 0x10], 0
jne 0xcf8bf0
mov edx, dword [esp + 0x14]
push edi
push dword [ebp + 0x14]
mov edi, dword [esp + 0x20]
mov ecx, edi
push dword [ebp + 0xc]
call fcn.00cf71c0
add esp, 0xc
test eax, eax
jne 0xcf9bb2
jmp 0xcf8bf4
mov edi, dword [esp + 0x18]
cmp dword [ebp + 0xc], 0
je 0xcf8fa6
mov eax, dword [edi + 0x48]
mov edx, 7
inc eax
mov ecx, esi
push eax
push 0
mov dword [esp + 0x34], eax
mov dword [edi + 0x48], eax
call fcn.00d185a0
mov eax, dword [edi + 0x48]
mov edx, 7
inc eax
mov word [esp + 0x78], 0xa
mov dword [edi + 0x48], eax
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], 0
mov ecx, dword [esi + 0xc]
add ecx, 2
push eax
mov dword [esp + 0x28], ecx
lea eax, [ecx - 1]
mov ecx, esi
push eax
call fcn.00d185a0
push 0
push 0
mov edx, 1
mov ecx, esi
call fcn.00d185a0
mov edx, dword [ebp + 0xc]
mov edi, eax
mov ecx, dword [esp + 0x30]
lea eax, [esp + 0x88]
push eax
call fcn.00ce9d20
add esp, 0x1c
test eax, eax
jne 0xcf8f85
mov eax, dword [esp + 0x18]
cmp dword [eax + 0x40], 0
jne 0xcf8f85
mov eax, dword [esp + 0x24]
cmp byte [eax + 0x1e], 0
jne 0xcf8f85
push dword [esp + 0x2c]
mov edx, 7
mov ecx, esi
push 1
call fcn.00d185a0
push dword [esp + 0x7c]
mov edx, 4
mov ecx, esi
call fcn.00d18610
add esp, 0xc
mov edx, 6
mov ecx, esi
push 2
push 2
call fcn.00d185a0
mov edx, dword [esi + 0xc]
add esp, 8
cmp edx, edi
jle 0xcf8cf1
mov eax, dword [esi + 0x14]
lea ecx, [edi + edi*4]
mov dword [eax + ecx*4 + 8], edx
mov eax, dword [esp + 0x78]
mov dword [esp + 0x60], eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x18]
mov edx, dword [eax + 0xc]
test edx, edx
jne 0xcf8de0
mov edi, dword [eax]
test edi, edi
je 0xcf8d6b
cmp byte [edi + 0x1e], dl
jne 0xcf8ddb
cmp byte [edi + 0xe2], dl
je 0xcf8d6b
mov eax, 0xe8
cmp ax, word [edi + 0xe0]
ja 0xcf8d6b
mov ecx, dword [edi + 0xec]
mov dword [esp + 0x28], ecx
test ecx, ecx
je 0xcf8d6b
mov eax, dword [ecx]
mov dword [edi + 0xec], eax
mov eax, dword [edi + 0xe4]
inc eax
mov dword [edi + 0xe4], eax
cmp eax, dword [edi + 0xe8]
jle 0xcf8d8e
mov dword [edi + 0xe8], eax
jmp 0xcf8d8e
push 0xe8
call fcn.00d2bcf0
mov ecx, eax
mov dword [esp + 0x2c], eax
add esp, 4
test ecx, ecx
jne 0xcf8d8e
test edi, edi
je 0xcf8d8a
mov byte [edi + 0x1e], 1
test ecx, ecx
je 0xcf8dd7
push 0xe4
lea eax, [ecx + 4]
push 0
push eax
call fcn.00c175b0
mov edx, dword [esp + 0x34]
add esp, 0xc
mov dword [edx], edi
mov eax, dword [edi + 0x88]
test eax, eax
je 0xcf8db4
mov dword [eax + 4], edx
mov eax, dword [edi + 0x88]
mov dword [edx + 8], eax
mov eax, dword [esp + 0x18]
mov dword [edx + 4], 0
mov dword [edi + 0x88], edx
mov dword [edx + 0x50], 0x26bceaa5
jmp 0xcf8ddd
mov eax, dword [esp + 0x18]
xor edx, edx
mov dword [eax + 0xc], edx
mov ecx, dword [esp + 0x14]
test byte [ecx + 0x22], 0x10
je 0xcf8e00
mov edi, dword [ecx + 0x30]
test edi, edi
je 0xcf8e02
mov eax, dword [eax]
cmp dword [edi], eax
je 0xcf8e02
mov edi, dword [edi + 0x10]
test edi, edi
jne 0xcf8df3
jmp 0xcf8e02
xor edi, edi
mov eax, dword [esp + 0x1c]
cmp eax, dword [edx + 0xc]
jge 0xcf9055
nop
mov ecx, eax
test eax, eax
jns 0xcf8e27
mov eax, dword [edx + 0xc]
test eax, eax
jne 0xcf8e24
mov eax, 0xa596d0
jmp 0xcf8e3f
lea ecx, [eax - 1]
mov eax, dword [edx]
cmp byte [eax + 0x1e], 0
je 0xcf8e36
mov eax, 0xa596d0
jmp 0xcf8e3f
mov eax, dword [edx + 0x14]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov cl, byte [eax]
cmp cl, 0x26
jne 0xcf8e70
mov ecx, dword [esp + 0x20]
cmp dword [eax + 0xc], ecx
jne 0xcf8e7a
mov ecx, dword [eax + 8]
mov eax, dword [esp + 0x14]
cmp ecx, dword [eax + 0x18]
je 0xcf8e8d
mov eax, dword [eax + 0x14]
test eax, eax
je 0xcf8e7a
cmp ecx, dword [eax + 0x14]
je 0xcf8e8d
mov eax, dword [eax + 0x20]
test eax, eax
jne 0xcf8e62
jmp 0xcf8e7a
cmp cl, 0x7c
jne 0xcf8e7a
cmp dword [eax + 0x10], edi
je 0xcf8e8d
mov eax, dword [esp + 0x1c]
inc eax
mov dword [esp + 0x1c], eax
cmp eax, dword [edx + 0xc]
jl 0xcf8e10
jmp 0xcf9055
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x5c], 1
mov edx, dword [ecx + 0x44]
mov dword [esp + 0x3c], edx
lea eax, [edx + 1]
mov dword [ecx + 0x44], eax
call fcn.00d05390
mov dword [esp + 0x20], eax
call fcn.00d05390
push dword [esp + 0x38]
mov ecx, esi
mov dword [esp + 0x20], eax
push edx
mov edx, 0x28
call fcn.00d185a0
push dword [esp + 0x7c]
mov edx, 4
mov ecx, esi
call fcn.00d18610
add esp, 0xc
mov edx, 0x1a
mov ecx, esi
mov edi, eax
push dword [esp + 0x2c]
call fcn.00d18610
add esp, 4
mov dword [esp + 0x30], eax
mov edx, 0x1e
mov ecx, esi
push dword [esp + 0x20]
push dword [esp + 0x3c]
push dword [esp + 0x68]
call fcn.00d186f0
add esp, 0xc
mov edx, 0x35
mov ecx, esi
push dword [esp + 0x1c]
push dword [esp + 0x40]
call fcn.00d185a0
push dword [esp + 0x24]
mov edx, 0x36
mov ecx, esi
push dword [esp + 0x2c]
push dword [esp + 0x4c]
call fcn.00d186f0
add esp, 0x14
mov edx, 1
mov ecx, esi
push edi
push 0
call fcn.00d185a0
mov edx, dword [esi + 0xc]
add esp, 8
mov eax, dword [esp + 0x30]
cmp edx, eax
jle 0xcf8f66
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x14]
mov dword [eax + ecx*4 + 8], edx
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x20]
call fcn.00d05350
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
call fcn.00d05350
jmp 0xcf9055
mov esi, dword [esp + 0x24]
mov ecx, esi
mov edx, dword [esp + 0x54]
call fcn.00cfeb40
mov edx, dword [ebp + 8]
mov ecx, esi
call fcn.00d09410
mov eax, dword [ebp + 0xc]
jmp 0xcf9c9d
mov ecx, dword [ebp + 8]
xorps xmm0, xmm0
movlpd qword [esp + 0x90], xmm0
movlpd qword [esp + 0x98], xmm0
movlpd qword [esp + 0xa0], xmm0
movlpd qword [esp + 0xa8], xmm0
mov dword [esp + 0x8c], edi
mov dword [esp + 0x3c], 0xffffffff
test ecx, ecx
je 0xcf904d
mov eax, dword [ecx]
mov dword [esp + 0x38], eax
mov dword [esp + 0x28], 0
test eax, eax
jle 0xcf9055
xor edi, edi
mov dword [esp + 0x38], eax
nop dword [eax + eax]
mov edx, dword [ecx + 0xc]
lea ecx, [esp + 0x8c]
mov edx, dword [edi + edx]
call fcn.00d0bd70
test eax, eax
jne 0xcf902d
mov eax, dword [esp + 0x28]
add edi, 0x14
mov ecx, dword [ebp + 8]
inc eax
mov dword [esp + 0x28], eax
cmp eax, dword [esp + 0x38]
jl 0xcf9000
jmp 0xcf9055
mov esi, dword [esp + 0x24]
mov ecx, esi
mov edx, dword [esp + 0x54]
call fcn.00cfeb40
mov edx, dword [ebp + 8]
mov ecx, esi
call fcn.00d09410
xor edi, edi
jmp 0xcf9cf0
mov dword [esp + 0x38], 0
mov edx, dword [esp + 0x14]
xor ecx, ecx
test byte [edx + 0x22], 0x10
je 0xcf90c5
mov eax, dword [edx + 0xc]
xor edi, edi
mov dword [esp + 0x20], edi
cmp eax, 2
jl 0xcf90ff
mov ecx, dword [edx + 0x10]
lea edx, [eax - 2]
mov dword [esp + 0x34], ecx
add ecx, 0x2f
shr edx, 1
inc edx
lea eax, [edx + edx]
mov dword [esp + 0x30], eax
nop word [eax + eax]
xor eax, eax
lea ecx, [ecx + 0x30]
cmp byte [ecx - 0x48], al
setne al
add edi, eax
xor eax, eax
cmp byte [ecx - 0x30], al
setne al
add dword [esp + 0x20], eax
sub edx, 1
jne 0xcf9090
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x30]
cmp ecx, dword [edx + 0xc]
jl 0xcf9120
xor ecx, ecx
mov eax, dword [esp + 0x20]
add eax, edi
add ecx, eax
mov edi, dword [ebp + 0x10]
test edi, edi
jne 0xcf91a6
mov edi, dword [esp + 0x38]
test edi, edi
je 0xcf9141
mov eax, dword [edx + 0xc]
sub eax, ecx
cmp edi, eax
je 0xcf9136
push edi
push eax
push 0
push dword [esp + 0x60]
push 0xa403bc
push dword [esp + 0x2c]
call fcn.00d29110
add esp, 0x18
jmp 0xcf9c7d
test eax, eax
jle 0xcf90bb
mov edx, dword [edx + 0x10]
lea eax, [ecx + ecx*2]
xor ecx, ecx
cmp byte [edx + eax*8 + 0x17], cl
mov edx, dword [esp + 0x14]
setne cl
jmp 0xcf90bd
mov edx, dword [esp + 0x34]
lea eax, [ecx + ecx*2]
xor ecx, ecx
cmp byte [edx + eax*8 + 0x17], cl
mov edx, dword [esp + 0x14]
setne cl
jmp 0xcf90bd
test edi, edi
jle 0xcf9141
mov eax, dword [edx + 8]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x24]
mov edi, dword [esp + 0x18]
test byte [eax + 0xc], 0x80
je 0xcf916b
inc dword [edi + 0x48]
mov edx, 7
mov eax, dword [edi + 0x48]
mov ecx, esi
push eax
push 0
mov dword [esp + 0x74], eax
call fcn.00d185a0
add esp, 8
mov eax, dword [edi + 0x44]
mov edx, dword [esp + 0x14]
push ecx
push eax
mov ecx, edi
mov dword [esp + 0x4c], eax
call fcn.00cf7940
mov edx, dword [esp + 0x2c]
mov edi, eax
add esp, 8
cmp byte [edx + 0x1e], 0
lea ecx, [edi*4 + 4]
je 0xcf92d5
mov dword [esp + 0x40], 0
jmp 0xcf9c7d
mov eax, dword [edi + 4]
mov ecx, dword [esp + 0x38]
cmp ecx, eax
je 0xcf91c9
push eax
push ecx
push 0xa403f0
push dword [esp + 0x24]
call fcn.00d29110
add esp, 0x10
jmp 0xcf9c7d
xor ecx, ecx
test eax, eax
jle 0xcf91e2
nop
mov eax, dword [edi]
mov dword [eax + ecx*8 + 4], 0xffffffff
inc ecx
mov eax, dword [edi + 4]
cmp ecx, eax
jl 0xcf91d0
xor ecx, ecx
mov dword [esp + 0x1c], ecx
test eax, eax
jle 0xcf9141
mov eax, edi
xor edi, edi
cmp edi, dword [edx + 0xc]
jge 0xcf925a
mov eax, dword [eax]
mov ecx, dword [eax + ecx*8]
mov eax, dword [edx + 0x10]
mov dword [esp + 0x30], ecx
mov dword [esp + 0x28], eax
nop dword [eax]
mov edx, dword [eax]
call fcn.00d28fb0
mov edx, dword [esp + 0x14]
test eax, eax
je 0xcf923a
mov eax, dword [esp + 0x28]
inc edi
mov ecx, dword [esp + 0x30]
add eax, 0x18
mov dword [esp + 0x28], eax
cmp edi, dword [edx + 0xc]
jl 0xcf9210
mov ecx, dword [esp + 0x1c]
jmp 0xcf9255
mov eax, dword [ebp + 0x10]
mov ecx, dword [esp + 0x1c]
mov eax, dword [eax]
mov dword [eax + ecx*8 + 4], edi
mov eax, dword [esp + 0x50]
cmp edi, dword [edx + 8]
cmove eax, ecx
mov dword [esp + 0x50], eax
cmp edi, dword [edx + 0xc]
jl 0xcf929e
mov eax, dword [ebp + 0x10]
mov edx, 0xa3f6d4
mov eax, dword [eax]
mov edi, dword [eax + ecx*8]
mov ecx, edi
call fcn.00d28fb0
test eax, eax
je 0xcf9292
mov edx, 0xa3f6dc
mov ecx, edi
call fcn.00d28fb0
test eax, eax
je 0xcf9292
mov edx, 0xa3f6e4
mov ecx, edi
call fcn.00d28fb0
test eax, eax
jne 0xcf92b4
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x50], ecx
mov eax, dword [ebp + 0x10]
inc ecx
mov dword [esp + 0x1c], ecx
cmp ecx, dword [eax + 4]
jl 0xcf91f2
jmp 0xcf9141
mov esi, dword [esp + 0x18]
push edi
push 0
push dword [esp + 0x5c]
push 0xa4040c
push esi
call fcn.00d29110
add esp, 0x14
inc dword [esi + 0x40]
jmp 0xcf9c7d
cmp byte [edx + 0xe2], 0
je 0xcf9320
movzx eax, word [edx + 0xe0]
cmp ecx, eax
jg 0xcf9320
mov eax, dword [edx + 0xec]
mov dword [esp + 0x40], eax
test eax, eax
je 0xcf9320
mov eax, dword [eax]
mov dword [edx + 0xec], eax
mov eax, dword [edx + 0xe4]
inc eax
mov dword [edx + 0xe4], eax
cmp eax, dword [edx + 0xe8]
jle 0xcf931a
mov dword [edx + 0xe8], eax
mov edx, dword [esp + 0x40]
jmp 0xcf9345
push ecx
call fcn.00d2bcf0
mov ecx, eax
add esp, 4
mov dword [esp + 0x40], ecx
test ecx, ecx
jne 0xcf933b
mov eax, dword [esp + 0x24]
mov byte [eax + 0x1e], 1
mov edx, ecx
test ecx, ecx
je 0xcf9c7d
xor ecx, ecx
test edi, edi
jle 0xcf9362
mov esi, dword [esp + 0x18]
nop
inc dword [esi + 0x48]
mov eax, dword [esi + 0x48]
mov dword [edx + ecx*4], eax
inc ecx
cmp ecx, edi
jl 0xcf9350
mov esi, dword [esp + 0x4c]
cmp dword [esp + 0x5c], 0
je 0xcf9386
push dword [esp + 0x3c]
mov edx, 0x40
mov ecx, esi
call fcn.00d18610
mov dword [esp + 0x6c], eax
mov eax, dword [esi + 0xc]
mov dword [esp + 0x68], eax
jmp 0xcf93b7
cmp dword [ebp + 0xc], 0
je 0xcf93ba
push dword [esp + 0x74]
mov edx, 4
mov ecx, esi
call fcn.00d18610
add esp, 4
mov dword [esp + 0x64], eax
mov edx, 0x1a
mov ecx, esi
push dword [esp + 0x2c]
call fcn.00d18610
mov dword [esp + 0x6c], eax
add esp, 4
mov edx, dword [esp + 0x18]
mov ecx, dword [edx + 0x48]
inc ecx
mov dword [edx + 0x48], ecx
lea eax, [ecx + 1]
mov dword [esp + 0x1c], eax
mov edi, eax
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 0xc]
inc eax
add eax, ecx
mov ecx, dword [esp + 0x14]
mov dword [edx + 0x48], eax
test byte [ecx + 0x22], 0x10
je 0xcf93ea
inc edi
inc eax
mov dword [edx + 0x48], eax
mov ecx, esi
call fcn.00d18450
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x14]
test byte [eax + 0x22], 0x10
je 0xcf9418
push dword [esp + 0x1c]
mov edx, 0xa
mov ecx, esi
push 0
call fcn.00d185a0
mov eax, dword [esp + 0x1c]
add esp, 8
mov ecx, dword [esp + 0x50]
test ecx, ecx
js 0xcf9554
cmp dword [esp + 0x5c], 0
push edi
je 0xcf9497
push ecx
push dword [esp + 0x44]
mov edx, 0x1c
mov ecx, esi
call fcn.00d186f0
add esp, 0xc
mov edx, dword [esp + 0x14]
test byte [edx + 0x22], 0x10
jne 0xcf9527
push edi
mov edx, 0x4a
mov ecx, esi
call fcn.00d18610
mov ecx, dword [esp + 0x48]
add esp, 4
mov edx, 0x35
mov dword [esp + 0x4c], eax
push 0
push edi
push ecx
mov ecx, esi
call fcn.00d186f0
mov edx, dword [esi + 0xc]
add esp, 0xc
mov eax, dword [esp + 0x4c]
cmp edx, eax
jle 0xcf953e
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x14]
mov dword [eax + ecx*4 + 8], edx
jmp 0xcf953e
cmp dword [ebp + 0xc], 0
je 0xcf94b5
mov eax, dword [esp + 0x64]
mov edx, 0xf
add eax, ecx
mov ecx, esi
push eax
call fcn.00d185a0
add esp, 8
jmp 0xcf9440
mov edx, dword [ebp + 8]
lea eax, [ecx + ecx*4]
mov ecx, dword [esp + 0x1c]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + eax*4]
call fcn.00d06500
mov eax, dword [esi + 0xc]
add esp, 4
test eax, eax
jne 0xcf94db
mov eax, 0xa596d0
jmp 0xcf94fe
lea ecx, [eax + eax*4]
mov eax, dword [esi]
shl ecx, 2
cmp byte [eax + 0x1e], 0
je 0xcf94f0
mov eax, 0xa596d0
jmp 0xcf94fe
mov eax, dword [esi + 0x14]
add eax, 0xffffffec
add eax, ecx
je 0xcf9440
cmp byte [eax], 0xa
mov edx, dword [esp + 0x14]
jne 0xcf9444
test byte [edx + 0x22], 0x10
jne 0xcf9527
mov ecx, dword [esp + 0x44]
mov byte [eax], 0x35
mov dword [eax + 4], ecx
mov dword [eax + 8], edi
mov dword [eax + 0xc], 0
jmp 0xcf958d
mov eax, dword [esi + 0xc]
mov edx, 0x49
add eax, 2
mov ecx, esi
push eax
push edi
call fcn.00d185a0
add esp, 8
push edi
mov edx, 0x15
mov ecx, esi
call fcn.00d18610
mov edx, dword [esp + 0x18]
add esp, 4
jmp 0xcf9595
test byte [eax + 0x22], 0x10
je 0xcf9572
push edi
push 0
mov edx, 0xa
mov ecx, esi
call fcn.00d185a0
mov edx, dword [esp + 0x1c]
add esp, 8
jmp 0xcf9595
mov ecx, dword [esp + 0x44]
mov edx, 0x35
push 0
push edi
push ecx
mov ecx, esi
call fcn.00d186f0
mov edx, dword [esp + 0x20]
add esp, 0xc
mov dword [esp + 0x48], 1
xor ecx, ecx
mov dword [esp + 0x28], 0
mov dword [esp + 0x34], ecx
cmp dword [edx + 0xc], ecx
jle 0xcf9695
lea eax, [edi + 1]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x58], eax
add eax, ecx
mov dword [esp + 0x2c], eax
cmp ecx, dword [edx + 8]
jne 0xcf9613
mov edi, dword [esi + 0xc]
cmp dword [esi + 0x10], edi
jg 0xcf95d9
mov ecx, esi
call fcn.00d18760
test eax, eax
jne 0xcf9676
mov eax, dword [esi + 0x14]
lea ecx, [edi + edi*4]
inc dword [esi + 0xc]
mov edx, dword [esp + 0x2c]
mov word [eax + ecx*4], 0xa
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
jmp 0xcf9676
mov eax, dword [ebp + 0x10]
test eax, eax
jne 0xcf9703
mov eax, dword [edx + 0x10]
mov edx, dword [esp + 0x20]
cmp byte [eax + edx + 0x17], 0
je 0xcf96fb
inc dword [esp + 0x28]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x2c]
mov edi, dword [esp + 0x18]
mov eax, dword [eax + 0x10]
push edx
mov edx, dword [eax + ecx + 4]
mov ecx, edi
call fcn.00d065d0
mov edx, eax
add esp, 4
mov eax, dword [esp + 0x2c]
cmp edx, eax
je 0xcf9676
mov ecx, dword [edi + 0xc]
test ecx, ecx
je 0xcf9676
push eax
push edx
mov edx, 0xf
call fcn.00d185a0
add esp, 8
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x14]
inc ecx
add dword [esp + 0x20], 0x18
mov eax, dword [esp + 0x58]
mov dword [esp + 0x34], ecx
cmp ecx, dword [edx + 0xc]
jl 0xcf95b7
test byte [edx + 0x22], 0x10
je 0xcf98e3
mov edi, dword [edx + 0x30]
test edi, edi
je 0xcf96bb
mov eax, dword [esp + 0x24]
nop word [eax + eax]
cmp dword [edi], eax
je 0xcf96bb
mov edi, dword [edi + 0x10]
test edi, edi
jne 0xcf96b0
mov ecx, dword [esp + 0x18]
call fcn.00ce6e60
mov ecx, dword [esp + 0x14]
mov edx, dword [esi + 0xc]
mov dword [esp + 0x34], edx
mov eax, dword [ecx + 0xc]
add eax, 2
mov dword [esp + 0x58], eax
cmp dword [esi + 0x10], edx
jg 0xcf9841
mov ecx, esi
call fcn.00d18760
test eax, eax
je 0xcf983d
mov edx, 1
jmp 0xcf987d
mov edi, ecx
sub edi, dword [esp + 0x28]
jmp 0xcf971d
mov edx, dword [eax + 4]
xor edi, edi
test edx, edx
jle 0xcf9728
mov eax, dword [eax]
add eax, 4
cmp dword [eax], ecx
je 0xcf971d
inc edi
add eax, 8
cmp edi, edx
jl 0xcf9711
test edi, edi
js 0xcf9634
mov eax, dword [ebp + 0x10]
cmp dword [esp + 0x38], 0
je 0xcf9634
test eax, eax
je 0xcf9740
cmp edi, dword [eax + 4]
jge 0xcf9634
cmp dword [esp + 0x5c], 0
je 0xcf979f
mov eax, dword [esi + 0xc]
mov dword [esp + 0x4c], eax
cmp dword [esi + 0x10], eax
jg 0xcf9766
mov ecx, esi
call fcn.00d18760
test eax, eax
jne 0xcf9676
mov eax, dword [esp + 0x4c]
inc dword [esi + 0xc]
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x14]
mov edx, dword [esp + 0x3c]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x2c]
mov word [eax + ecx*4], 0x1c
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edi
mov dword [eax + ecx*4 + 0xc], edx
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
jmp 0xcf9676
cmp dword [ebp + 0xc], 0
je 0xcf9802
mov eax, dword [esi + 0xc]
mov dword [esp + 0x4c], eax
cmp dword [esi + 0x10], eax
jg 0xcf97c4
mov ecx, esi
call fcn.00d18760
test eax, eax
jne 0xcf9676
mov eax, dword [esp + 0x4c]
inc dword [esi + 0xc]
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x14]
mov edx, dword [esp + 0x2c]
mov word [eax + ecx*4], 0xf
mov byte [eax + ecx*4 + 3], 0
lea ecx, [eax + ecx*4]
mov eax, dword [esp + 0x60]
add eax, edi
mov dword [ecx + 8], edx
mov dword [ecx + 4], eax
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov byte [esi + 0x6e], 0
jmp 0xcf9676
mov eax, dword [ebp + 8]
lea ecx, [edi + edi*4]
mov edi, dword [esp + 0x2c]
push edi
mov eax, dword [eax + 0xc]
mov edx, dword [eax + ecx*4]
mov ecx, dword [esp + 0x1c]
call fcn.00d065d0
add esp, 4
cmp eax, edi
je 0xcf9676
mov ecx, dword [esp + 0x18]
mov ecx, dword [ecx + 0xc]
test ecx, ecx
je 0xcf9676
push edi
push eax
jmp 0xcf9669
mov edx, dword [esp + 0x34]
mov eax, dword [esi + 0x14]
lea ecx, [edx + edx*4]
inc dword [esi + 0xc]
mov edx, dword [esp + 0x58]
mov dword [eax + ecx*4 + 8], edx
mov edx, dword [esp + 0x1c]
mov dword [eax + ecx*4 + 0xc], edx
mov edx, dword [esp + 0x34]
mov word [eax + ecx*4], 0x81
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 1
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
cmp dword [esi + 0x14], 0
mov ecx, dword [esi]
je 0xcf98d6
cmp byte [ecx + 0x1e], 0
jne 0xcf98d6
test edx, edx
jns 0xcf9893
mov edx, dword [esi + 0xc]
dec edx
lea eax, [edx + edx*4]
mov edx, dword [esi + 0x14]
push dword [edx + eax*4 + 0x10]
lea eax, [edx + eax*4]
movsx edx, byte [eax + 1]
mov dword [esp + 0x38], eax
call fcn.00d17ff0
mov eax, dword [esp + 0x38]
add esp, 4
test edi, edi
jne 0xcf98cc
mov dword [eax + 0x10], edi
mov byte [eax + 1], 0
mov eax, dword [esp + 0x18]
mov byte [eax + 0x159], 1
jmp 0xcf993c
mov dword [eax + 0x10], edi
mov byte [eax + 1], 0xf6
inc dword [edi + 0xc]
mov eax, dword [esp + 0x18]
mov byte [eax + 0x159], 1
jmp 0xcf993c
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x58]
push eax
push dword [esp + 0x34]
mov eax, dword [esp + 0x58]
push dword [ebp + 0x14]
not eax
push 0
shr eax, 0x1f
push eax
push dword [esp + 0x54]
push dword [esp + 0x34]
push dword [esp + 0x60]
call fcn.00cf7d70
mov edx, dword [esp + 0x34]
xor eax, eax
cmp dword [esp + 0x78], eax
mov ecx, dword [esp + 0x38]
sete al
push eax
push dword [esp + 0x6c]
push 0
push dword [esp + 0x6c]
push dword [esp + 0x4c]
push dword [esp + 0x78]
call fcn.00cf7b00
add esp, 0x38
mov eax, dword [esp + 0x24]
test byte [eax + 0xc], 0x80
je 0xcf9991
mov edi, dword [esi + 0xc]
cmp dword [esi + 0x10], edi
jg 0xcf9959
mov ecx, esi
call fcn.00d18760
test eax, eax
jne 0xcf9991
mov eax, dword [esi + 0x14]
lea ecx, [edi + edi*4]
inc dword [esi + 0xc]
mov edx, dword [esp + 0x6c]
mov word [eax + ecx*4], 0x14
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 1
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov ecx, dword [esi + 0x20]
test ecx, ecx
je 0xcf99aa
mov eax, dword [esp + 0x30]
lea eax, [eax*4 + 4]
sub ecx, eax
mov eax, dword [esi + 0xc]
mov dword [ecx], eax
cmp dword [esp + 0x5c], 0
je 0xcf9a6c
mov edi, dword [esi + 0xc]
mov eax, edi
cmp dword [esi + 0x10], edi
jg 0xcf99cd
mov ecx, esi
call fcn.00d18760
test eax, eax
jne 0xcf9a06
mov eax, dword [esi + 0xc]
mov edx, dword [esp + 0x3c]
lea ecx, [edi + edi*4]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov dword [eax + ecx*4 + 4], edx
mov edx, dword [esp + 0x64]
mov word [eax + ecx*4], 0x42
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov edx, dword [esi + 0xc]
mov eax, dword [esp + 0x68]
cmp edx, eax
jle 0xcf9a1b
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x14]
mov dword [eax + ecx*4 + 8], edx
mov edi, dword [esi + 0xc]
cmp dword [esi + 0x10], edi
jg 0xcf9a32
mov ecx, esi
call fcn.00d18760
test eax, eax
jne 0xcf9ad8
mov eax, dword [esi + 0x14]
lea ecx, [edi + edi*4]
inc dword [esi + 0xc]
mov edx, dword [esp + 0x3c]
mov word [eax + ecx*4], 0x2a
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
jmp 0xcf9ad8
cmp dword [ebp + 0xc], 0
je 0xcf9ad8
mov edi, dword [esi + 0xc]
mov eax, edi
cmp dword [esi + 0x10], edi
jg 0xcf9a8a
mov ecx, esi
call fcn.00d18760
test eax, eax
jne 0xcf9ac3
mov eax, dword [esi + 0xc]
mov edx, dword [esp + 0x64]
lea ecx, [edi + edi*4]
inc eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x14]
mov word [eax + ecx*4], 1
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], 0
mov dword [eax + ecx*4 + 8], edx
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov edx, dword [esi + 0xc]
mov eax, dword [esp + 0x68]
cmp edx, eax
jle 0xcf9ad8
lea ecx, [eax + eax*4]
mov eax, dword [esi + 0x14]
mov dword [eax + ecx*4 + 8], edx
mov eax, dword [esp + 0x14]
test byte [eax + 0x22], 0x10
jne 0xcf9bae
mov edi, dword [esi + 0xc]
cmp dword [esi + 0x10], edi
jg 0xcf9af9
mov ecx, esi
call fcn.00d18760
test eax, eax
jne 0xcf9b33
mov eax, dword [esi + 0x14]
lea ecx, [edi + edi*4]
inc dword [esi + 0xc]
mov edx, dword [esp + 0x44]
mov word [eax + ecx*4], 0x2a
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
jmp 0xcf9b37
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 0x14]
mov dword [esp + 0x30], eax
test eax, eax
je 0xcf9bae
lea eax, [edx + 1]
mov dword [esp + 0x48], eax
nop dword [eax]
mov edi, dword [esi + 0xc]
cmp dword [esi + 0x10], edi
jg 0xcf9b63
mov ecx, esi
call fcn.00d18760
test eax, eax
jne 0xcf9b9b
mov eax, dword [esi + 0x14]
lea ecx, [edi + edi*4]
inc dword [esi + 0xc]
mov edx, dword [esp + 0x48]
mov word [eax + ecx*4], 0x2a
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov eax, dword [esp + 0x30]
inc dword [esp + 0x48]
mov eax, dword [eax + 0x20]
mov dword [esp + 0x30], eax
test eax, eax
jne 0xcf9b50
mov edi, dword [esp + 0x18]
mov eax, dword [esp + 0x24]
test byte [eax + 0xc], 0x80
je 0xcf9c7d
cmp byte [edi + 0x13], 0
jne 0xcf9c7d
cmp dword [edi + 0x1a4], 0
jne 0xcf9c7d
mov edi, dword [esi + 0xc]
cmp dword [esi + 0x10], edi
jg 0xcf9bea
mov ecx, esi
call fcn.00d18760
test eax, eax
jne 0xcf9c22
mov eax, dword [esi + 0x14]
lea ecx, [edi + edi*4]
inc dword [esi + 0xc]
mov edx, dword [esp + 0x6c]
mov word [eax + ecx*4], 0x10
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 4], edx
mov dword [eax + ecx*4 + 8], 1
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov byte [esi + 0x6e], 0
mov edx, 1
mov ecx, esi
call fcn.00d171d0
mov eax, dword [esi]
cmp byte [eax + 0x1e], 0
jne 0xcf9c7d
mov edi, dword [esi + 0x28]
xor esi, esi
mov eax, dword [edi + 0x10]
test eax, eax
je 0xcf9c4b
mov eax, dword [eax + 0x48]
test eax, eax
js 0xcf9c5e
jmp 0xcf9c50
mov eax, 0x3b9aca00
cmp byte [esi + 0xa4042c], 0
je 0xcf9c5e
inc esi
cmp esi, eax
jle 0xcf9c50
mov ecx, edi
call fcn.00d19b80
mov dword [edi + 0x14], 0xa4042c
mov dword [edi + 0x20], 0
mov dword [edi + 0x18], esi
mov dword [edi + 0x1c], 0x1030a02
mov esi, dword [esp + 0x24]
mov ecx, esi
mov edx, dword [esp + 0x54]
call fcn.00cfeb40
mov edx, dword [ebp + 8]
mov ecx, esi
call fcn.00d09410
mov eax, dword [ebp + 0xc]
test eax, eax
je 0xcf9cec
mov edi, dword [esp + 0x40]
mov edx, eax
mov ecx, esi
call fcn.00cf2900
mov ecx, dword [ebp + 0xc]
test esi, esi
je 0xcf9ce1
cmp ecx, dword [esi + 0xf0]
jb 0xcf9ce1
cmp ecx, dword [esi + 0xf4]
jae 0xcf9ce1
mov eax, dword [esi + 0xec]
mov edx, dword [ebp + 0x10]
mov dword [ecx], eax
dec dword [esi + 0xe4]
mov dword [esi + 0xec], ecx
mov ecx, esi
call fcn.00cff190
jmp 0xcf9cfe
push ecx
call fcn.00d2b990
add esp, 4
jmp 0xcf9cf0
mov edi, dword [esp + 0x40]
mov edx, dword [ebp + 0x10]
mov ecx, esi
call fcn.00cff190
test esi, esi
je 0xcf9d2c
test edi, edi
je 0xcf9d2c
cmp edi, dword [esi + 0xf0]
jb 0xcf9d2c
cmp edi, dword [esi + 0xf4]
jae 0xcf9d2c
mov eax, dword [esi + 0xec]
mov dword [edi], eax
dec dword [esi + 0xe4]
mov dword [esi + 0xec], edi
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push edi
call fcn.00d2b990
add esp, 4
pop edi
pop esi
mov esp, ebp
pop ebp
ret