Function at 0x2ce2600
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xac]
cmp eax, dword [ecx + 8]
jbe 0x2ce3c16
sub esp, 0x12c
mov dword [esp + 0x148], 0
mov dword [esp + 0x14c], 0
mov dword [esp + 0x150], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], 0
movzx eax, word [esp + 0x138]
test ax, 4
je 0x2ce269d
mov dword [esp + 0x50], 0
mov dword [esp + 0x50], 0xfffffffd
lea ecx, [esp + 0x50]
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x84], 1
jmp 0x2ce26c6
test ax, 8
je 0x2ce26c6
mov dword [esp + 0x54], 0
mov dword [esp + 0x54], 0xfffffffd
lea ecx, [esp + 0x54]
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x84], 1
mov ecx, dword [esp + 0x140]
test ecx, ecx
jg 0x2ce26da
xor edx, edx
xor ebx, ebx
jmp 0x2ce381a
lea eax, [0x2d29480]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.02b274d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0xa4], eax
mov ecx, dword [esp + 0x140]
mov edx, dword [esp + 0x13c]
xor ebx, ebx
jmp 0x2ce2726
mov ebp, dword [esp + 0x44]
lea ebx, [ebp + 1]
mov ecx, dword [esp + 0x140]
mov ebp, dword [esp + 0x13c]
mov eax, esi
mov edx, ebp
cmp ecx, ebx
jle 0x2ce380b
lea ebp, [edx + ebx*8]
mov esi, dword [ebp + 4]
mov dword [esp + 0x8c], esi
mov ebp, dword [ebp]
mov edi, ecx
sub ecx, ebx
lea esi, [ecx - 1]
cmp edi, esi
jbe 0x2ce3c0c
mov dword [esp + 0x44], ebx
mov dword [esp + 0x40], ebp
shl esi, 4
mov dword [esp + 0x5c], esi
lea ecx, [eax + esi]
mov dword [esp + 0xa0], ecx
mov dword [esp], ecx
call fcn.02ce12f0
mov eax, dword [esp + 0x40]
test eax, eax
je 0x2ce37b4
mov edx, dword [eax + 8]
cmp edx, 0x83c42c78
ja 0x2ce3009
cmp edx, 0x26ca392d
ja 0x2ce2be6
cmp edx, 0x13ff06c5
ja 0x2ce29ae
cmp edx, 0xaf3a8d3
ja 0x2ce28af
cmp edx, 0xc66cd3
jne 0x2ce2803
lea edx, [0x2d04840]
cmp eax, edx
jne 0x2ce3bce
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0xa4]
mov dword [esi + ebp], 0
mov dword [esi + ebp + 4], 0
mov dword [esi + ebp + 8], 0
mov dword [esi + ebp + 0xc], 0
mov word [esi + ebp], 0x4013
mov dword [esi + ebp + 8], ebx
jmp 0x2ce270d
cmp edx, 0xaf3a8d3
jne 0x2ce3bce
lea ecx, [0x2d06f00]
cmp eax, ecx
jne 0x2ce3bce
mov eax, dword [esp + 0x8c]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.02ce5330
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0xa4]
mov dword [edx + ecx], 0
mov dword [edx + ecx + 4], 0
mov dword [edx + ecx + 8], 0
mov dword [edx + ecx + 0xc], 0
mov word [edx + ecx], 0x2008
mov dword [edx + ecx + 8], eax
mov dword [esp], 0xc
lea eax, [0x2d59f80]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0xa0]
mov dword [esp + 8], ecx
call fcn.02b11790
test eax, eax
jne 0x2ce37f1
lea edx, [0x2d04840]
mov esi, dword [esp + 0xa4]
jmp 0x2ce270d
cmp edx, 0x10dbf978
jne 0x2ce290b
lea edx, [0x2d047c0]
cmp eax, edx
jne 0x2ce3bce
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0xa4]
mov dword [esi + ebp], 0
mov dword [esi + ebp + 4], 0
mov dword [esi + ebp + 8], 0
mov dword [esi + ebp + 0xc], 0
mov word [esi + ebp], 0x4013
mov dword [esi + ebp + 8], ebx
lea edx, [0x2d04840]
jmp 0x2ce270d
cmp edx, 0x13ff06c5
jne 0x2ce3bce
lea edx, [0x2d0d240]
cmp eax, edx
jne 0x2ce3bce
mov ebx, dword [esp + 0x8c]
movzx ebx, byte [ebx]
test bl, bl
je 0x2ce296f
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0xa4]
mov dword [ebp + ebx], 0
mov dword [ebp + ebx + 4], 0
mov dword [ebp + ebx + 8], 0
mov dword [ebp + ebx + 0xc], 0
mov word [ebp + ebx], 0xb
mov dword [ebp + ebx + 8], 0xffff
jmp 0x2ce29a1
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0xa4]
mov dword [ebp + ebx], 0
mov dword [ebp + ebx + 4], 0
mov dword [ebp + ebx + 8], 0
mov dword [ebp + ebx + 0xc], 0
mov word [ebp + ebx], 0xb
lea edx, [0x2d04840]
mov esi, ebp
jmp 0x2ce270d
cmp edx, 0x1ffee651
ja 0x2ce2a76
cmp edx, 0x1e2f74f8
jne 0x2ce2a16
lea edx, [0x2d04880]
cmp eax, edx
jne 0x2ce3bce
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0xa4]
mov dword [esi + ebp], 0
mov dword [esi + ebp + 4], 0
mov dword [esi + ebp + 8], 0
mov dword [esi + ebp + 0xc], 0
mov word [esi + ebp], 0x4015
mov dword [esi + ebp + 8], ebx
lea edx, [0x2d04840]
jmp 0x2ce270d
cmp edx, 0x1ffee651
jne 0x2ce3bce
lea edx, [0x2d017c0]
cmp eax, edx
jne 0x2ce3bce
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0xa4]
mov dword [esi + ebp], 0
mov dword [esi + ebp + 4], 0
mov dword [esi + ebp + 8], 0
mov dword [esi + ebp + 0xc], 0
mov word [esi + ebp], 0x4004
mov dword [esi + ebp + 8], ebx
lea edx, [0x2d04840]
jmp 0x2ce270d
cmp edx, 0x2522ebe7
jne 0x2ce2ad2
lea edx, [0x2d01ac0]
cmp eax, edx
jne 0x2ce3bce
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0xa4]
mov dword [esi + ebp], 0
mov dword [esi + ebp + 4], 0
mov dword [esi + ebp + 8], 0
mov dword [esi + ebp + 0xc], 0
mov word [esi + ebp], 0x4003
mov dword [esi + ebp + 8], ebx
lea edx, [0x2d04840]
jmp 0x2ce270d
cmp edx, 0x26b80717
jne 0x2ce2b2e
lea edx, [0x2d01b80]
cmp eax, edx
jne 0x2ce3bce
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0xa4]
mov dword [esi + ebp], 0
mov dword [esi + ebp + 4], 0
mov dword [esi + ebp + 8], 0
mov dword [esi + ebp + 0xc], 0
mov word [esi + ebp], 0x4014
mov dword [esi + ebp + 8], ebx
lea edx, [0x2d04840]
jmp 0x2ce270d
cmp edx, 0x26ca392d
jne 0x2ce3bce
lea ecx, [0x2d3e040]
cmp eax, ecx
jne 0x2ce3bce
mov esi, dword [esp + 0x8c]
test byte [esi], al
lea edi, [esp + 0xd8]
call fcn.02b3effe
lea edi, [esp]
lea esi, [esp + 0xd8]
call fcn.02b3effe
lea eax, [0x2d44028]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0x13
call fcn.02b57ff0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xbc], eax
mov dword [esp + 0xc0], ecx
lea eax, [esp + 0xbc]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0xa4]
mov dword [edx + ecx], 0
mov dword [edx + ecx + 4], 0
mov dword [edx + ecx + 8], 0
mov dword [edx + ecx + 0xc], 0
mov word [edx + ecx], 0x4008
mov dword [edx + ecx + 8], eax
lea edx, [0x2d04840]
mov esi, dword [esp + 0xa4]
jmp 0x2ce270d
cmp edx, 0x5a52b40f
ja 0x2ce2dda
cmp edx, 0x382e7edf
ja 0x2ce2d1e
cmp edx, 0x2ea27ffb
jne 0x2ce2c72
lea edx, [0x2d0d540]
cmp eax, edx
jne 0x2ce3bce
mov ebx, dword [esp + 0x8c]
movsd xmm0, qword [ebx]
movsd qword [esp + 0x60], xmm0
mov ebx, dword [esp + 0x60]
mov ebp, dword [esp + 0x64]
mov esi, dword [esp + 0x5c]
mov edi, dword [esp + 0xa4]
mov dword [edi + esi], 0
mov dword [edi + esi + 4], 0
mov dword [edi + esi + 8], 0
mov dword [edi + esi + 0xc], 0
mov word [edi + esi], 5
mov dword [edi + esi + 8], ebx
mov dword [edi + esi + 0xc], ebp
lea edx, [0x2d04840]
mov esi, edi
jmp 0x2ce270d
cmp edx, 0x382e7edf
jne 0x2ce3bce
lea ecx, [0x2d07180]
cmp eax, ecx
jne 0x2ce3bce
mov eax, dword [esp + 0x8c]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.02ce5250
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0xa4]
mov dword [edx + ecx], 0
mov dword [edx + ecx + 4], 0
mov dword [edx + ecx + 8], 0
mov dword [edx + ecx + 0xc], 0
mov word [edx + ecx], 0x2011
mov dword [edx + ecx + 8], eax
mov dword [esp], 0xc
lea eax, [0x2d59f80]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0xa0]
mov dword [esp + 8], ecx
call fcn.02b11790
test eax, eax
jne 0x2ce37fe
lea edx, [0x2d04840]
mov esi, dword [esp + 0xa4]
jmp 0x2ce270d
cmp edx, 0x5a175aed
jne 0x2ce2d7a
lea edx, [0x2d04180]
cmp eax, edx
jne 0x2ce3bce
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0xa4]
mov dword [esi + ebp], 0
mov dword [esi + ebp + 4], 0
mov dword [esi + ebp + 8], 0
mov dword [esi + ebp + 0xc], 0
mov word [esi + ebp], 0x4008
mov dword [esi + ebp + 8], ebx
lea edx, [0x2d04840]
jmp 0x2ce270d
cmp edx, 0x5a52b40f
jne 0x2ce3bce
lea edx, [0x2cff8c0]
cmp eax, edx
jne 0x2ce3bce
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0xa4]
mov dword [esi + ebp], 0
mov dword [esi + ebp + 4], 0
mov dword [esi + ebp + 8], 0
mov dword [esi + ebp + 0xc], 0
mov word [esi + ebp], 0x4009
mov dword [esi + ebp + 8], ebx
lea edx, [0x2d04840]
jmp 0x2ce270d
cmp edx, 0x663e425f
ja 0x2ce2eb5
cmp edx, 0x5fcadfef
jne 0x2ce2e52
lea edx, [0x2d01bc0]
cmp eax, edx
jne 0x2ce3bce
lea ebx, [0x2d048c0]
cmp eax, ebx
jne 0x2ce3bf6
mov ebp, dword [esp + 0x8c]
mov esi, dword [esp + 0x5c]
mov edi, dword [esp + 0xa4]
mov dword [edi + esi], 0
mov dword [edi + esi + 4], 0
mov dword [edi + esi + 8], 0
mov dword [edi + esi + 0xc], 0
mov word [edi + esi], 0x4010
mov dword [edi + esi + 8], ebp
lea edx, [0x2d04840]
mov esi, edi
jmp 0x2ce270d
cmp edx, 0x663e425f
jne 0x2ce3bce
lea edx, [0x2d0e7c0]
cmp eax, edx
jne 0x2ce3bce
mov ebx, dword [esp + 0x8c]
movzx ebx, byte [ebx]
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0xa4]
mov dword [esi + ebp], 0
mov dword [esi + ebp + 4], 0
mov dword [esi + ebp + 8], 0
mov dword [esi + ebp + 0xc], 0
mov word [esi + ebp], 0x10
mov dword [esi + ebp + 8], ebx
lea edx, [0x2d04840]
jmp 0x2ce270d
cmp edx, 0x6b581726
jne 0x2ce2f11
lea edx, [0x2d01b40]
cmp eax, edx
jne 0x2ce3bce
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0xa4]
mov dword [esi + ebp], 0
mov dword [esi + ebp + 4], 0
mov dword [esi + ebp + 8], 0
mov dword [esi + ebp + 0xc], 0
mov word [esi + ebp], 0x4003
mov dword [esi + ebp + 8], ebx
lea edx, [0x2d04840]
jmp 0x2ce270d
cmp edx, 0x6e0df0d1
jne 0x2ce2f6d
lea edx, [0x2d00280]
cmp eax, edx
jne 0x2ce3bce
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0xa4]
mov dword [esi + ebp], 0
mov dword [esi + ebp + 4], 0
mov dword [esi + ebp + 8], 0
mov dword [esi + ebp + 0xc], 0
mov word [esi + ebp], 0x400b
mov dword [esi + ebp + 8], ebx
lea edx, [0x2d04840]
jmp 0x2ce270d
cmp edx, 0x83c42c78
jne 0x2ce3bce
lea edx, [0x2d3e3e0]
cmp eax, edx
jne 0x2ce3bce
mov ebx, dword [esp + 0x8c]
mov ebp, dword [ebx + 8]
mov esi, dword [ebx + 4]
test ebp, ebp
jne 0x2ce2f9e
xor edi, edi
xor ebp, ebp
jmp 0x2ce2fac
mov edi, dword [esi]
cmp ebp, 1
jle 0x2ce2faa
mov ebp, dword [esi + 4]
jmp 0x2ce2fac
xor ebp, ebp
movzx ebx, byte [ebx]
test bl, bl
je 0x2ce2fc0
xor ebx, ebx
sub ebx, edi
mov esi, 0
sbb esi, ebp
jmp 0x2ce2fc4
mov esi, ebp
mov ebx, edi
mov ebp, dword [esp + 0x5c]
mov edi, dword [esp + 0xa4]
mov dword [edi + ebp], 0
mov dword [edi + ebp + 4], 0
mov dword [edi + ebp + 8], 0
mov dword [edi + ebp + 0xc], 0
mov word [edi + ebp], 0xe
mov dword [edi + ebp + 8], ebx
mov dword [edi + ebp + 0xc], esi
lea edx, [0x2d04840]
mov esi, edi
jmp 0x2ce270d
cmp edx, 0xcc06c027
ja 0x2ce340e
cmp edx, 0xa066c615
ja 0x2ce31b2
cmp edx, 0x963f9bff
ja 0x2ce30f6
cmp edx, 0x86318d2e
jne 0x2ce308b
lea edx, [0x2d0e780]
cmp eax, edx
jne 0x2ce3bce
mov ebx, dword [esp + 0x8c]
mov ebx, dword [ebx]
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0xa4]
mov dword [esi + ebp], 0
mov dword [esi + ebp + 4], 0
mov dword [esi + ebp + 8], 0
mov dword [esi + ebp + 0xc], 0
mov word [esi + ebp], 0x15
mov dword [esi + ebp + 8], ebx
lea edx, [0x2d04840]
jmp 0x2ce270d
cmp edx, 0x963f9bff
jne 0x2ce3bce
lea edx, [0x2d0de40]
cmp eax, edx
jne 0x2ce3bce
mov ebx, dword [esp + 0x8c]
mov ebp, dword [ebx]
mov ebx, dword [ebx + 4]
mov esi, dword [esp + 0x5c]
mov edi, dword [esp + 0xa4]
mov dword [edi + esi], 0
mov dword [edi + esi + 4], 0
mov dword [edi + esi + 8], 0
mov dword [edi + esi + 0xc], 0
mov word [edi + esi], 0x14
mov dword [edi + esi + 8], ebp
mov dword [edi + esi + 0xc], ebx
lea edx, [0x2d04840]
mov esi, edi
jmp 0x2ce270d
cmp edx, 0x9ad926a8
jne 0x2ce3152
lea edx, [0x2d048c0]
cmp eax, edx
jne 0x2ce3bce
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0xa4]
mov dword [esi + ebp], 0
mov dword [esi + ebp + 4], 0
mov dword [esi + ebp + 8], 0
mov dword [esi + ebp + 0xc], 0
mov word [esi + ebp], 0x4010
mov dword [esi + ebp + 8], ebx
lea edx, [0x2d04840]
jmp 0x2ce270d
cmp edx, 0xa066c615
jne 0x2ce3bce
lea edx, [0x2d01b00]
cmp eax, edx
jne 0x2ce3bce
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0xa4]
mov dword [esi + ebp], 0
mov dword [esi + ebp + 4], 0
mov dword [esi + ebp + 8], 0
mov dword [esi + ebp + 0xc], 0
mov word [esi + ebp], 0x4002
mov dword [esi + ebp + 8], ebx
lea edx, [0x2d04840]
jmp 0x2ce270d
cmp edx, 0xba56ad13
ja 0x2ce3292
cmp edx, 0xb0c23ed3
jne 0x2ce3232
lea edx, [0x2d0d500]
cmp eax, edx
jne 0x2ce3bce
mov ebx, dword [esp + 0x8c]
movss xmm0, dword [ebx]
movss dword [esp + 0x38], xmm0
mov ebx, dword [esp + 0x38]
mov ebp, dword [esp + 0x3c]
mov esi, dword [esp + 0x5c]
mov edi, dword [esp + 0xa4]
mov dword [edi + esi], 0
mov dword [edi + esi + 4], 0
mov dword [edi + esi + 8], 0
mov dword [edi + esi + 0xc], 0
mov word [edi + esi], 4
mov dword [edi + esi + 8], ebx
mov dword [edi + esi + 0xc], ebp
lea edx, [0x2d04840]
mov esi, edi
jmp 0x2ce270d
cmp edx, 0xba56ad13
jne 0x2ce3bce
lea edx, [0x2d01800]
cmp eax, edx
jne 0x2ce3bce
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0xa4]
mov dword [esi + ebp], 0
mov dword [esi + ebp + 4], 0
mov dword [esi + ebp + 8], 0
mov dword [esi + ebp + 0xc], 0
mov word [esi + ebp], 0x4005
mov dword [esi + ebp + 8], ebx
lea edx, [0x2d04840]
jmp 0x2ce270d
cmp edx, 0xbbad4102
jne 0x2ce32f7
lea edx, [0x2d0de00]
cmp eax, edx
jne 0x2ce3bce
mov ebx, dword [esp + 0x8c]
mov ebx, dword [ebx]
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0xa4]
mov dword [esi + ebp], 0
mov dword [esi + ebp + 4], 0
mov dword [esi + ebp + 8], 0
mov dword [esi + ebp + 0xc], 0
mov word [esi + ebp], 3
mov dword [esi + ebp + 8], ebx
sar ebx, 0x1f
mov dword [esi + ebp + 0xc], ebx
lea edx, [0x2d04840]
jmp 0x2ce270d
cmp edx, 0xc0441d00
je 0x2ce3369
cmp edx, 0xcc06c027
jne 0x2ce3bce
lea edx, [0x2d0de80]
cmp eax, edx
jne 0x2ce3bce
mov ebx, dword [esp + 0x8c]
movsx ebx, byte [ebx]
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0xa4]
mov dword [esi + ebp], 0
mov dword [esi + ebp + 4], 0
mov dword [esi + ebp + 8], 0
mov dword [esi + ebp + 0xc], 0
mov word [esi + ebp], 0x10
mov dword [esi + ebp + 8], ebx
sar ebx, 0x1f
mov dword [esi + ebp + 0xc], ebx
lea edx, [0x2d04840]
jmp 0x2ce270d
lea ecx, [0x2d3cd20]
cmp eax, ecx
jne 0x2ce3bce
lea edi, [esp + 0xc4]
mov esi, dword [esp + 0x8c]
call fcn.02b3effe
lea edi, [esp]
lea esi, [esp + 0xc4]
call fcn.02b3effe
lea eax, [0x2d44028]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0x13
call fcn.02b57ff0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.02ce1450
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0xa4]
mov dword [edx + ecx], 0
mov dword [edx + ecx + 4], 0
mov dword [edx + ecx + 8], 0
mov dword [edx + ecx + 0xc], 0
mov word [edx + ecx], 8
mov dword [edx + ecx + 8], eax
lea edx, [0x2d04840]
mov esi, dword [esp + 0xa4]
jmp 0x2ce270d
cmp edx, 0xe5e4736e
ja 0x2ce35be
cmp edx, 0xd5b87712
ja 0x2ce34e6
cmp edx, 0xd04ae83d
jne 0x2ce3484
lea edx, [0x2d0e740]
cmp eax, edx
jne 0x2ce3bee
mov ebx, dword [esp + 0x8c]
mov ebx, dword [ebx]
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0xa4]
mov dword [esi + ebp], 0
mov dword [esi + ebp + 4], 0
mov dword [esi + ebp + 8], 0
mov dword [esi + ebp + 0xc], 0
mov word [esi + ebp], 0x13
mov dword [esi + ebp + 8], ebx
lea edx, [0x2d04840]
jmp 0x2ce270d
cmp edx, 0xd5b87712
jne 0x2ce3bee
lea edx, [0x2d0e6c0]
cmp eax, edx
jne 0x2ce3bee
mov ebx, dword [esp + 0x8c]
mov ebx, dword [ebx]
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0xa4]
mov dword [esi + ebp], 0
mov dword [esi + ebp + 4], 0
mov dword [esi + ebp + 8], 0
mov dword [esi + ebp + 0xc], 0
mov word [esi + ebp], 0x13
mov dword [esi + ebp + 8], ebx
lea edx, [0x2d04840]
jmp 0x2ce270d
cmp edx, 0xe0ff5cb4
je 0x2ce354e
cmp edx, 0xe5e4736e
jne 0x2ce3be6
lea edx, [0x2d364e0]
cmp eax, edx
jne 0x2ce3be6
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0xa4]
mov dword [esi + ebp], 0
mov dword [esi + ebp + 4], 0
mov dword [esi + ebp + 8], 0
mov dword [esi + ebp + 0xc], 0
mov word [esi + ebp], 9
mov dword [esi + ebp + 8], ebx
lea edx, [0x2d04840]
jmp 0x2ce270d
lea ecx, [0x2d0e5c0]
cmp eax, ecx
jne 0x2ce3bce
mov eax, dword [esp + 0x8c]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.02ce1450
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0xa4]
mov dword [edx + ecx], 0
mov dword [edx + ecx + 4], 0
mov dword [edx + ecx + 8], 0
mov dword [edx + ecx + 0xc], 0
mov word [edx + ecx], 8
mov dword [edx + ecx + 8], eax
lea edx, [0x2d04840]
mov esi, dword [esp + 0xa4]
jmp 0x2ce270d
cmp edx, 0xecd580ce
ja 0x2ce3690
cmp edx, 0xe78bb92e
jne 0x2ce3626
lea edx, [0x2d2cfa0]
cmp eax, edx
jne 0x2ce3bce
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0xa4]
mov dword [esi + ebp], 0
mov dword [esi + ebp + 4], 0
mov dword [esi + ebp + 8], 0
mov dword [esi + ebp + 0xc], 0
mov word [esi + ebp], 0x400c
mov dword [esi + ebp + 8], ebx
lea edx, [0x2d04840]
jmp 0x2ce270d
cmp edx, 0xecd580ce
jne 0x2ce3bce
lea edx, [0x2d0ddc0]
cmp eax, edx
jne 0x2ce3bce
mov ebx, dword [esp + 0x8c]
movsx ebx, word [ebx]
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0xa4]
mov dword [esi + ebp], 0
mov dword [esi + ebp + 4], 0
mov dword [esi + ebp + 8], 0
mov dword [esi + ebp + 0xc], 0
mov word [esi + ebp], 2
mov dword [esi + ebp + 8], ebx
sar ebx, 0x1f
mov dword [esi + ebp + 0xc], ebx
lea edx, [0x2d04840]
jmp 0x2ce270d
cmp edx, 0xee92f42e
jne 0x2ce36ec
lea edx, [0x2d04800]
cmp eax, edx
jne 0x2ce3bce
mov ebx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0xa4]
mov dword [esi + ebp], 0
mov dword [esi + ebp + 4], 0
mov dword [esi + ebp + 8], 0
mov dword [esi + ebp + 0xc], 0
mov word [esi + ebp], 0x4012
mov dword [esi + ebp + 8], ebx
lea edx, [0x2d04840]
jmp 0x2ce270d
cmp edx, 0xeff20ea0
jne 0x2ce374b
lea edx, [0x2d0e700]
cmp eax, edx
jne 0x2ce3bce
mov ebx, dword [esp + 0x8c]
movzx ebx, word [ebx]
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0xa4]
mov dword [esi + ebp], 0
mov dword [esi + ebp + 4], 0
mov dword [esi + ebp + 8], 0
mov dword [esi + ebp + 0xc], 0
mov word [esi + ebp], 0x12
mov dword [esi + ebp + 8], ebx
lea edx, [0x2d04840]
jmp 0x2ce270d
cmp edx, 0xf75371fa
jne 0x2ce3bce
lea edx, [0x2d0dd80]
cmp eax, edx
jne 0x2ce3bce
mov ebx, dword [esp + 0x8c]
mov ebx, dword [ebx]
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0xa4]
mov dword [esi + ebp], 0
mov dword [esi + ebp + 4], 0
mov dword [esi + ebp + 8], 0
mov dword [esi + ebp + 0xc], 0
mov word [esi + ebp], 3
mov dword [esi + ebp + 8], ebx
sar ebx, 0x1f
mov dword [esi + ebp + 0xc], ebx
lea edx, [0x2d04840]
jmp 0x2ce270d
mov edx, dword [esp + 0x5c]
mov ebx, dword [esp + 0xa4]
mov dword [ebx + edx], 0
mov dword [ebx + edx + 4], 0
mov dword [ebx + edx + 8], 0
mov dword [ebx + edx + 0xc], 0
mov word [ebx + edx], 1
lea edx, [0x2d04840]
mov esi, ebx
jmp 0x2ce270d
nop
call fcn.02b123e0
add esp, 0x12c
ret
nop
call fcn.02b123e0
add esp, 0x12c
ret
mov ebx, eax
mov dword [esp + 0x78], eax
mov dword [esp + 0x80], ecx
mov edx, ecx
mov dword [esp + 0x88], ebx
mov dword [esp + 0x3c], edx
lea eax, [0x2d29480]
mov dword [esp], eax
call fcn.02aeb620
mov eax, dword [esp + 4]
mov dword [esp + 0x148], eax
lea edi, [esp + 0xec]
xor eax, eax
call fcn.02b3eb18
mov eax, dword [esp + 0x148]
mov dword [esp], eax
call fcn.02ce12f0
nop
mov eax, dword [esp + 0x130]
mov ecx, dword [eax]
mov dword [esp + 0x9c], ecx
mov edx, dword [0x30f6704]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
call fcn.02cd8400
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x130]
mov dword [esp + 0xb8], ecx
mov ecx, dword [0x30f66b4]
mov dword [esp + 0xb4], ecx
lea ecx, [esp + 0x78]
mov dword [esp + 0xb0], ecx
mov ecx, dword [esp + 0x148]
mov dword [esp + 0xac], ecx
lea ecx, [esp + 0xec]
mov dword [esp + 0xa8], ecx
mov edx, dword [esp + 0x9c]
mov edx, dword [edx + 0x18]
mov ebx, dword [esp + 0xb8]
mov ebp, dword [esp + 0xb4]
mov esi, dword [esp + 0xb0]
mov edi, dword [esp + 0xac]
mov dword [esp], edx
mov dword [esp + 4], 9
mov dword [esp + 8], ebx
mov edx, dword [esp + 0x134]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], eax
movzx eax, word [esp + 0x138]
movsx eax, ax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], 0
call fcn.02b3c840
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x2ce3a4b
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0xf4]
mov dword [esp], eax
call fcn.02ce55a0
mov eax, dword [esp + 4]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x58], ecx
lea edi, [esp + 0x10c]
lea esi, [esp + 0xec]
call fcn.02b3efe0
lea ecx, [0x2da4874]
mov dword [esp], ecx
lea ecx, [esp + 0x10c]
mov dword [esp + 4], ecx
call fcn.02ae9050
mov eax, dword [esp + 0xc]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x98], ecx
lea edx, [0x2d22d60]
mov dword [esp], edx
call fcn.02aeb620
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x4c]
mov dword [eax], ecx
mov ecx, dword [esp + 0x58]
mov dword [eax + 8], ecx
mov ecx, dword [0x311e9a0]
test ecx, ecx
jne 0x2ce39f1
mov ecx, dword [esp + 0x94]
mov dword [eax + 4], ecx
jmp 0x2ce3a04
lea edi, [eax + 4]
mov ecx, eax
mov eax, dword [esp + 0x94]
call fcn.02b3e880
mov eax, ecx
mov ecx, dword [esp + 0x98]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x311e9a0]
test ecx, ecx
jne 0x2ce3a24
mov ecx, dword [esp + 0x90]
mov dword [eax + 0x10], ecx
jmp 0x2ce3a37
lea edi, [eax + 0x10]
mov ecx, eax
mov eax, dword [esp + 0x90]
call fcn.02b3e880
mov eax, ecx
lea ecx, [0x2da43d8]
mov dword [esp + 0x14c], ecx
mov dword [esp + 0x150], eax
mov eax, dword [esp + 0x3c]
test eax, eax
jle 0x2ce3a65
mov ecx, dword [esp + 0x140]
mov ebx, dword [esp + 0x88]
xor edx, edx
jmp 0x2ce3a79
nop
call fcn.02b123e0
add esp, 0x12c
ret
add ebx, 0x10
mov edx, ecx
mov ecx, ebp
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x48], edx
lea edi, [esp + 0x68]
mov esi, ebx
call fcn.02b3f008
mov ecx, dword [esp + 0x140]
mov ebp, ecx
sub ecx, edx
mov dword [esp + 0x5c], ecx
cmp word [esp + 0x68], 8
jne 0x2ce3af5
mov esi, ecx
mov ecx, dword [esp + 0x70]
test ecx, ecx
mov edi, ecx
setne cl
mov ebp, dword [esp + 0x74]
test ebp, ebp
xchg ebp, ebx
setne bl
xchg ebp, ebx
or ebp, ecx
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x2ce3ad3
mov ecx, esi
mov ebp, dword [esp + 0x140]
jmp 0x2ce3af5
mov dword [esp], edi
call fcn.02ce1560
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x48]
mov ebx, dword [esp + 0xa0]
mov ebp, dword [esp + 0x140]
cmp word [esp + 0x68], 0x4008
jne 0x2ce3b9f
mov ecx, dword [esp + 0x70]
test ecx, ecx
mov edi, ecx
setne cl
mov ebp, dword [esp + 0x74]
test ebp, ebp
xchg ebp, ebx
setne bl
xchg ebp, ebx
or ebp, ecx
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x2ce3b2b
mov ebp, dword [esp + 0x140]
jmp 0x2ce3b9f
mov eax, dword [edi]
mov dword [esp], eax
call fcn.02ce54b0
mov eax, dword [esp + 0x5c]
lea ecx, [eax - 1]
mov edx, dword [esp + 4]
mov ebx, dword [esp + 8]
mov ebp, dword [esp + 0x140]
cmp ebp, ecx
jbe 0x2ce3bc5
mov ecx, dword [esp + 0x13c]
mov esi, ecx
lea ecx, [ecx + eax*8 - 8]
mov edi, dword [ecx + 4]
mov ecx, dword [ecx]
mov eax, ebp
lea ebp, [0x2d04180]
cmp ecx, ebp
jne 0x2ce3baf
mov dword [edi + 4], ebx
mov ecx, dword [0x311e9a0]
test ecx, ecx
jne 0x2ce3b7e
mov dword [edi], edx
jmp 0x2ce3b89
mov ecx, eax
mov eax, edx
call fcn.02b3e880
mov eax, ecx
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x48]
mov ebx, dword [esp + 0xa0]
mov ebp, dword [esp + 0x140]
lea ecx, [edx + 1]
cmp eax, ecx
jg 0x2ce3a72
jmp 0x2ce3a65
mov dword [esp], ecx
mov dword [esp + 4], ebp
lea eax, [0x2d0dec0]
mov dword [esp + 8], eax
call fcn.02ae8b90
mov eax, ecx
mov ecx, ebp
call fcn.02b3e900
lea eax, [0x2d0e5c0]
mov dword [esp], eax
lea eax, [0x2da224c]
mov dword [esp + 4], eax
call fcn.02b13450
lea ecx, [0x2d0e5c0]
jmp 0x2ce3bce
lea ecx, [0x2d0e5c0]
jmp 0x2ce3bce
mov dword [esp], eax
mov dword [esp + 4], ebx
lea eax, [0x2d0dec0]
mov dword [esp + 8], eax
call fcn.02ae8b90
mov eax, esi
mov ecx, edi
call fcn.02b3e900
nop
call fcn.02b3d440
jmp fcn.02ce2600