Function at 0xcf4ccc
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x1bc
mov eax, dword [0xd08954]
xor eax, esp
mov dword [esp + 0x1b8], eax
push ebx
push esi
mov esi, ecx
xor ebx, ebx
push edi
mov edi, dword [esi + 0x18]
mov eax, dword [edi + 0x3c]
test eax, eax
jns 0xcf4d03
cmp eax, dword [edi + 0x44]
jne 0xcf4d03
add edi, 0x40
jmp 0xcf4d05
mov edi, ebx
call fcn.00c69a60
push 0xc6c2f0
call fcn.00b8493d
test edi, edi
je 0xcf4f32
mov eax, dword [eax + 4]
mov dword [esp + 0x14], eax
cmp dword [eax], 5
jbe 0xcf4fb5
mov eax, dword [edi + 4]
lea ecx, [esp + 0xb0]
mov edx, dword [edi + 0x1c]
and dword [esp + 0xac], 0
push 4
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x1c]
mov dword [esp + 0xa8], ebx
pop ebx
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa8], ebx
call fcn.00c213db
mov edx, dword [edi + 0x44]
lea eax, [edi + 0x20]
and dword [esp + 0xc4], 0
lea ecx, [esp + 0xd0]
and dword [esp + 0xcc], 0
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc8], ebx
call fcn.00c213db
mov eax, dword [edi]
lea ecx, [esp + 0xf0]
mov edx, dword [edi + 0xc]
and dword [esp + 0xe4], 0
and dword [esp + 0xec], 0
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x1c]
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe8], ebx
call fcn.00b52bec
mov eax, dword [edi + 0x10]
lea ecx, [esp + 0x110]
mov edx, dword [edi + 0x28]
and dword [esp + 0x104], 0
and dword [esp + 0x10c], 0
mov dword [esp + 0x20], eax
lea eax, [esp + 0x20]
mov dword [esp + 0x100], eax
mov dword [esp + 0x108], ebx
call fcn.00c213db
mov eax, dword [edi + 0x2c]
lea ecx, [esp + 0x130]
mov edx, dword [edi + 0x30]
and dword [esp + 0x124], 0
and dword [esp + 0x12c], 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x24]
mov dword [esp + 0x120], eax
mov dword [esp + 0x128], ebx
call fcn.00c213db
mov edx, dword [edi + 0x34]
lea ecx, [esp + 0x140]
call fcn.00b52bec
mov eax, dword [edi + 0x38]
lea ecx, [esp + 0x160]
mov edx, dword [edi + 0x3c]
and dword [esp + 0x154], 0
and dword [esp + 0x15c], 0
mov dword [esp + 0x28], eax
lea eax, [esp + 0x28]
mov dword [esp + 0x150], eax
mov dword [esp + 0x158], ebx
call fcn.00c213db
mov edx, dword [edi + 0x40]
lea ecx, [esp + 0x170]
call fcn.00b52bec
mov eax, dword [edi + 8]
xor ecx, ecx
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x180], eax
mov eax, dword [edi + 0x24]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xc]
mov dword [esp + 0x184], ecx
mov dword [esp + 0x188], ebx
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x190], eax
mov dword [esp + 0x194], ecx
mov dword [esp + 0x198], ebx
mov dword [esp + 0x19c], ecx
mov edx, dword [edi + 0x18]
lea ecx, [esp + 0x1a0]
call fcn.00c213db
movzx eax, byte [ebp + 8]
and dword [esp + 0x1b4], 0
mov dword [esp + 0x10], eax
lea eax, [esp + 0x10]
mov dword [esp + 0x1b8], ebx
xor ebx, ebx
mov dword [esp + 0x1b0], eax
mov dword [esp + 0x1bc], ebx
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x80]
push eax
push 0x14
mov edx, 0xb3c9d0
jmp 0xcf4fa8
mov edi, dword [eax + 4]
cmp dword [edi], 5
jbe 0xcf4fb5
mov eax, dword [esi + 0x18]
push 4
mov eax, dword [eax + 0x3c]
and dword [esp + 0x60], 0
mov dword [esp + 0x18], eax
lea eax, [esp + 0x18]
mov dword [esp + 0x58], ebx
pop ebx
mov dword [esp + 0x50], eax
mov dword [esp + 0x58], ebx
call dword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_GetCurrentThreadId]
mov dword [esp + 0x10], eax
xor ecx, ecx
lea eax, [esp + 0x10]
mov dword [esp + 0x68], ebx
mov dword [esp + 0x60], eax
movzx eax, byte [ebp + 8]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xc]
mov dword [esp + 0x78], ebx
xor ebx, ebx
mov dword [esp + 0x64], ecx
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], ecx
mov dword [esp + 0x7c], ebx
lea eax, [esp + 0x30]
mov edx, 0xb3c97f
push eax
push 5
mov ecx, edi
mov eax, dword [esi + 0x18]
push ebx
add eax, 8
push eax
call fcn.00b809fe
cmp dword [esi + 0x10], ebx
je 0xcf4fc2
lea ecx, [esi + 4]
call fcn.00b54a44
mov ecx, dword [esp + 0x1c4]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00bc0ea0
mov esp, ebp
pop ebp
ret 4