Function at 0x2fac30
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x1c0
push ebx
mov ebx, dword [esp + 0x1dc]
push ebp
mov ebp, dword [esp + 0x1cc]
push edi
mov edi, eax
mov eax, dword [esp + 0x204]
lea ecx, [eax + ebp]
cmp ecx, 0xa
ja 0x2fbc68
mov edx, dword [esp + 0x1e0]
mov eax, dword [esp + 0x1dc]
mov ecx, dword [esp + 0x1d8]
push esi
push 0
push edx
mov edx, dword [esp + 0x1e0]
push eax
push ecx
push edx
mov eax, edi
call fcn.002f9a20
mov eax, dword [esp + 0x1d8]
mov ecx, dword [esp + 0x1e0]
sub ecx, eax
lea edx, [eax + ecx*2]
mov eax, dword [esp + 0x1dc]
mov ecx, dword [esp + 0x1e4]
sub ecx, eax
mov dword [esp + 0x44], edx
lea edx, [eax + ecx*2]
mov dword [esp + 0x4c], edx
xor esi, esi
xor edx, edx
cmp ebp, 4
jl 0x2fb059
mov ebp, dword [esp + 0x1f0]
sub ebp, ebx
mov dword [esp + 0x2c], ebp
mov ebp, dword [esp + 0x1f4]
sub ebp, ebx
mov dword [esp + 0x28], ebp
mov ebp, dword [esp + 0x1ec]
sub ebp, ebx
mov dword [esp + 0x24], ebp
mov ebp, dword [esp + 0x200]
sub ebp, ebx
mov dword [esp + 0x54], ebp
mov ebp, dword [esp + 0x1f8]
sub ebp, ebx
mov dword [esp + 0x58], ebp
mov ebp, dword [esp + 0x204]
sub ebp, ebx
mov dword [esp + 0x48], ebp
mov ebp, dword [esp + 0x1fc]
sub ebp, ebx
mov dword [esp + 0x50], ebp
lea ebp, [esp + 0x180]
sub ebp, ebx
mov dword [esp + 0x30], ebp
lea ebp, [esp + 0x130]
sub ebp, ebx
mov dword [esp + 0x20], ebp
lea ebp, [esp + 0x158]
sub ebp, ebx
mov dword [esp + 0x40], ebp
lea ebp, [esp + 0x1a8]
sub ebp, ebx
mov dword [esp + 0x18], ebp
lea ebp, [esp + 0x184]
sub ebp, ebx
mov dword [esp + 0x64], ebp
mov eax, dword [esp + 0x1f4]
lea ebp, [esp + 0x134]
sub ebp, ebx
mov dword [esp + 0x5c], ebp
lea ebp, [esp + 0x15c]
sub ebp, ebx
mov dword [esp + 0x68], ebp
lea ebp, [esp + 0x1ac]
sub ebp, ebx
mov dword [esp + 0x70], ebp
lea ebp, [esp + 0x188]
sub ebp, ebx
mov dword [esp + 0x8c], ebp
lea ebp, [esp + 0x138]
sub ebp, ebx
mov dword [esp + 0x78], ebp
mov ecx, dword [esp + 0x1ec]
lea ebp, [esp + 0x160]
sub ebp, ebx
mov dword [esp + 0x74], ebp
add eax, 0xc
lea ebp, [esp + 0x1b0]
sub ebp, ebx
mov dword [esp + 0x38], ebp
mov ebp, dword [esp + 0x1f4]
mov dword [esp + 0x34], eax
lea eax, [ebx + 4]
mov ebx, dword [esp + 0x1ec]
sub ebp, ebx
mov dword [esp + 0x6c], ebp
mov ebp, dword [esp + 0x200]
sub ebp, ebx
mov dword [esp + 0x7c], ebp
mov ebp, dword [esp + 0x1f8]
sub ebp, ebx
mov dword [esp + 0x14], ebp
mov ebp, dword [esp + 0x204]
sub ebp, ebx
mov dword [esp + 0x84], ebp
mov ebp, dword [esp + 0x1fc]
add ecx, 8
sub ebp, ebx
mov ebx, dword [esp + 0x1f4]
mov dword [esp + 0x1c], ebp
mov ebp, dword [esp + 0x1f0]
sub ebp, ebx
mov dword [esp + 0x10], ebp
mov ebp, dword [esp + 0x200]
sub ebp, ebx
mov dword [esp + 0x88], ebp
mov ebp, dword [esp + 0x1f8]
sub ebp, ebx
mov dword [esp + 0x80], ebp
mov ebp, dword [esp + 0x204]
sub ebp, ebx
mov dword [esp + 0x60], ebp
mov ebp, dword [esp + 0x1fc]
sub ebp, ebx
mov ebx, dword [esp + 0x34]
mov dword [esp + 0x3c], ebp
jmp 0x2fae80
mov ebp, dword [esp + 0x1f0]
fld dword [ebp + edx*4]
mov ebp, dword [esp + 0x10]
fsub dword [eax - 4]
fadd st(0), st(0)
fadd dword [eax - 4]
fstp dword [esp + edx*4 + 0x180]
fld dword [ebx - 0xc]
mov ebx, dword [esp + 0x200]
fsub dword [ecx - 8]
fadd st(0), st(0)
fadd dword [ecx - 8]
fstp dword [esp + edx*4 + 0x130]
fld dword [ebx + edx*4]
mov ebx, dword [esp + 0x1f8]
fsub dword [ebx + edx*4]
fadd st(0), st(0)
fadd dword [ebx + edx*4]
mov ebx, dword [esp + 0x204]
fstp dword [esp + edx*4 + 0x158]
fld dword [ebx + edx*4]
mov ebx, dword [esp + 0x1fc]
fsub dword [ebx + edx*4]
fadd st(0), st(0)
fadd dword [ebx + edx*4]
mov ebx, dword [esp + 0x2c]
fstp dword [esp + edx*4 + 0x1a8]
fld dword [ebx + eax]
mov ebx, dword [esp + 0x30]
fsub dword [eax]
fadd st(0), st(0)
fadd dword [eax]
fstp dword [ebx + eax]
mov ebx, dword [esp + 0x28]
fld dword [ebx + eax]
mov ebx, dword [esp + 0x24]
fsub dword [ebx + eax]
fadd st(0), st(0)
fadd dword [ebx + eax]
mov ebx, dword [esp + 0x20]
fstp dword [ebx + eax]
mov ebx, dword [esp + 0x54]
fld dword [ebx + eax]
mov ebx, dword [esp + 0x58]
fsub dword [ebx + eax]
fadd st(0), st(0)
fadd dword [ebx + eax]
mov ebx, dword [esp + 0x40]
fstp dword [ebx + eax]
mov ebx, dword [esp + 0x48]
fld dword [ebx + eax]
mov ebx, dword [esp + 0x50]
fsub dword [ebx + eax]
fadd st(0), st(0)
fadd dword [ebx + eax]
mov ebx, dword [esp + 0x18]
fstp dword [ebx + eax]
mov ebx, dword [esp + 0x6c]
add ebx, ecx
fld dword [ebx + ebp]
mov ebp, dword [esp + 0x64]
fsub dword [eax + 4]
fadd st(0), st(0)
fadd dword [eax + 4]
fstp dword [eax + ebp]
fld dword [ebx]
mov ebx, dword [esp + 0x5c]
fsub dword [ecx]
fadd st(0), st(0)
fadd dword [ecx]
fstp dword [ebx + eax]
mov ebx, dword [esp + 0x7c]
fld dword [ebx + ecx]
mov ebx, dword [esp + 0x14]
fsub dword [ebx + ecx]
mov ebp, dword [esp + 0x10]
add edx, 4
add eax, 0x10
fadd st(0), st(0)
add ecx, 0x10
fadd dword [ebx + ecx - 0x10]
mov ebx, dword [esp + 0x68]
fstp dword [ebx + eax - 0x10]
mov ebx, dword [esp + 0x84]
fld dword [ebx + ecx - 0x10]
mov ebx, dword [esp + 0x1c]
fsub dword [ebx + ecx - 0x10]
fadd st(0), st(0)
fadd dword [ebx + ecx - 0x10]
mov ebx, dword [esp + 0x70]
fstp dword [ebx + eax - 0x10]
mov ebx, dword [esp + 0x34]
fld dword [ebx + ebp]
mov ebp, dword [esp + 0x8c]
fsub dword [eax - 8]
add ebx, 0x10
mov dword [esp + 0x34], ebx
fadd st(0), st(0)
fadd dword [eax - 8]
fstp dword [eax + ebp - 0x10]
mov ebp, dword [esp + 0x78]
fld dword [ebx - 0x10]
fsub dword [ecx - 0xc]
fadd st(0), st(0)
fadd dword [ecx - 0xc]
fstp dword [eax + ebp - 0x10]
mov ebp, dword [esp + 0x88]
fld dword [ebx + ebp - 0x10]
mov ebp, dword [esp + 0x80]
fsub dword [ebx + ebp - 0x10]
fadd st(0), st(0)
fadd dword [ebx + ebp - 0x10]
mov ebp, dword [esp + 0x74]
fstp dword [eax + ebp - 0x10]
mov ebp, dword [esp + 0x60]
fld dword [ebx + ebp - 0x10]
mov ebp, dword [esp + 0x3c]
fsub dword [ebx + ebp - 0x10]
fadd st(0), st(0)
fadd dword [ebx + ebp - 0x10]
mov ebp, dword [esp + 0x38]
fstp dword [eax + ebp - 0x10]
mov ebp, dword [esp + 0x1d4]
add ebp, 0xfffffffd
cmp edx, ebp
jb 0x2fae80
mov ebx, dword [esp + 0x1e8]
mov ebp, dword [esp + 0x1d4]
cmp edx, ebp
jae 0x2fb178
mov ecx, dword [esp + 0x1f0]
sub ecx, ebx
mov dword [esp + 0x2c], ecx
lea ecx, [esp + 0x180]
sub ecx, ebx
mov dword [esp + 0x30], ecx
mov ecx, dword [esp + 0x1f4]
sub ecx, ebx
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x1ec]
sub ecx, ebx
mov dword [esp + 0x24], ecx
lea ecx, [esp + 0x130]
sub ecx, ebx
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x200]
sub ecx, ebx
mov dword [esp + 0x54], ecx
mov ecx, dword [esp + 0x1f8]
sub ecx, ebx
mov dword [esp + 0x58], ecx
lea ecx, [esp + 0x158]
sub ecx, ebx
mov dword [esp + 0x40], ecx
mov ecx, dword [esp + 0x204]
sub ecx, ebx
mov dword [esp + 0x48], ecx
mov ecx, dword [esp + 0x1fc]
sub ecx, ebx
mov dword [esp + 0x50], ecx
lea ecx, [esp + 0x1a8]
sub ecx, ebx
mov dword [esp + 0x18], ecx
mov ecx, ebp
lea eax, [ebx + edx*4]
sub ecx, edx
jmp 0x2fb100
mov edx, dword [esp + 0x2c]
fld dword [edx + eax]
mov edx, dword [esp + 0x30]
fsub dword [eax]
add eax, 4
sub ecx, 1
fadd st(0), st(0)
fadd dword [eax - 4]
fstp dword [edx + eax - 4]
mov edx, dword [esp + 0x28]
fld dword [edx + eax - 4]
mov edx, dword [esp + 0x24]
fsub dword [edx + eax - 4]
fadd st(0), st(0)
fadd dword [edx + eax - 4]
mov edx, dword [esp + 0x20]
fstp dword [edx + eax - 4]
mov edx, dword [esp + 0x54]
fld dword [edx + eax - 4]
mov edx, dword [esp + 0x58]
fsub dword [edx + eax - 4]
fadd st(0), st(0)
fadd dword [edx + eax - 4]
mov edx, dword [esp + 0x40]
fstp dword [edx + eax - 4]
mov edx, dword [esp + 0x48]
fld dword [edx + eax - 4]
mov edx, dword [esp + 0x50]
fsub dword [edx + eax - 4]
fadd st(0), st(0)
fadd dword [edx + eax - 4]
mov edx, dword [esp + 0x18]
fstp dword [edx + eax - 4]
jne 0x2fb100
mov ecx, dword [esp + 0x210]
mov eax, dword [esp + 0x20c]
mov edx, dword [esp + 0x214]
mov dword [esp + 0x20], ecx
xor ecx, ecx
mov dword [esp + 0x94], ecx
mov dword [esp + 0x98], ecx
mov dword [esp + 0x9c], ecx
mov dword [esp + 0xa0], ecx
mov dword [esp + 0xa4], ecx
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x218]
mov dword [esp + 0xa8], ecx
mov dword [esp + 0x2c], edx
mov dword [esp + 0x34], eax
mov dword [esp + 0xac], ecx
xor edx, edx
mov dword [esp + 0xb0], ecx
xor eax, eax
mov dword [esp + 0xe4], edx
mov dword [esp + 0xb4], ecx
mov dword [esp + 0xe0], ecx
mov dword [esp + 0xbc], eax
mov dword [esp + 0xe8], edx
mov dword [esp + 0x10c], ecx
mov dword [esp + 0xc0], eax
mov dword [esp + 0xec], edx
mov dword [esp + 0x110], ecx
mov dword [esp + 0xc4], eax
mov dword [esp + 0xf0], edx
mov dword [esp + 0x114], ecx
mov dword [esp + 0xc8], eax
mov dword [esp + 0xf4], edx
mov dword [esp + 0x118], ecx
mov dword [esp + 0xcc], eax
mov dword [esp + 0xf8], edx
mov dword [esp + 0x11c], ecx
mov dword [esp + 0xd0], eax
mov dword [esp + 0xfc], edx
mov dword [esp + 0x100], edx
mov dword [esp + 0x120], ecx
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], eax
mov dword [esp + 0x124], ecx
mov dword [esp + 0x104], edx
mov dword [esp + 0xb8], edx
mov dword [esp + 0x128], ecx
mov dword [esp + 0xdc], eax
mov dword [esp + 0x108], eax
lea edx, [esp + 0x108]
push edx
mov dword [esp + 0x130], ecx
lea eax, [esp + 0xbc]
push eax
lea ecx, [esp + 0x98]
push ecx
lea edx, [esp + 0x214]
push edx
push ebp
lea ecx, [esp + 0xf4]
mov eax, edi
mov dword [esp + 0xa4], 0
call fcn.002f9d40
test eax, eax
je 0x2fb327
lea eax, [esp + 0x90]
mov dword [esp + 0x30], eax
lea edx, [esp + 0xe0]
lea ecx, [esp + 0xb8]
lea eax, [esp + 0x108]
mov dword [esp + 0x20], edx
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x34], eax
jmp 0x2fb32b
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x21c]
cmp eax, 0x5a
je 0x2fb355
cmp eax, 0xb4
je 0x2fb355
cmp eax, 0x10e
je 0x2fb355
cmp eax, 0xffffffff
je 0x2fb355
mov dword [esp + 0x21c], 0
test ebp, ebp
jbe 0x2fb3b4
mov dword [esp + 0x18], 0xb40
mov dword [esp + 0x10], ebp
jmp 0x2fb370
mov ecx, dword [edi + 0x3f0]
mov eax, dword [edi + 0x3d0]
mov eax, dword [eax + 0x8c]
or ecx, 0x20
shl ecx, 0xd
or ecx, dword [esp + 0x18]
add dword [esp + 0x18], 4
mov dword [eax + esi*4], ecx
mov ecx, dword [edi + 0x3d0]
mov eax, dword [ecx + 0x8c]
add esi, 1
mov dword [eax + esi*4], 0x10
add esi, 1
sub dword [esp + 0x10], 1
jne 0x2fb370
mov ecx, dword [esp + 0x208]
lea eax, [ecx + ebp]
cmp ebp, eax
mov dword [esp + 0x24], eax
jae 0x2fb425
lea ecx, [ebp*4 + 0xb40]
sub eax, ebp
mov dword [esp + 0x18], ecx
mov dword [esp + 0x10], eax
jmp 0x2fb3e0
mov eax, dword [edi + 0x3f0]
mov ecx, dword [edi + 0x3d0]
mov ecx, dword [ecx + 0x8c]
or al, 0x20
add esi, 1
add esi, 1
shl eax, 0xd
or eax, dword [esp + 0x18]
add dword [esp + 0x18], 4
sub dword [esp + 0x10], 1
mov dword [ecx + esi*4 - 8], eax
mov eax, dword [edi + 0x3d0]
mov ecx, dword [eax + 0x8c]
mov dword [ecx + esi*4 - 4], 0x10
jne 0x2fb3e0
mov eax, dword [edi + 0x3f0]
mov ecx, dword [edi + 0x3d0]
mov ecx, dword [ecx + 0x8c]
shl eax, 0xd
or eax, 0x41808
mov dword [ecx + esi*4], eax
mov eax, dword [edi + 0x3d0]
mov ecx, dword [eax + 0x8c]
add esi, 1
mov dword [ecx + esi*4], 5
add esi, 1
test ebp, ebp
jbe 0x2fb541
mov eax, dword [esp + 0x1ec]
mov ecx, ebx
sub ecx, eax
mov dword [esp + 0x38], ecx
mov ecx, dword [esp + 0x1f8]
sub ecx, eax
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x1fc]
sub ecx, eax
mov dword [esp + 0x18], 0x1c60
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x10], ebp
jmp 0x2fb4a0
mov edx, dword [edi + 0x3f0]
mov ecx, dword [edi + 0x3d0]
mov ecx, dword [ecx + 0x8c]
or dl, 0x80
add esi, 1
add esi, 1
add esi, 1
add esi, 1
add esi, 1
add eax, 4
shl edx, 0xd
or edx, dword [esp + 0x18]
add dword [esp + 0x18], 0x10
sub dword [esp + 0x10], 1
mov dword [ecx + esi*4 - 0x14], edx
mov edx, dword [edi + 0x3d0]
mov ecx, dword [edx + 0x8c]
mov edx, dword [esp + 0x38]
mov edx, dword [edx + eax - 4]
mov dword [ecx + esi*4 - 0x10], edx
mov ecx, dword [edi + 0x3d0]
mov edx, dword [ecx + 0x8c]
mov ecx, dword [eax - 4]
mov dword [edx + esi*4 - 0xc], ecx
mov edx, dword [edi + 0x3d0]
mov ecx, dword [edx + 0x8c]
mov edx, dword [esp + 0x14]
mov edx, dword [edx + eax - 4]
mov dword [ecx + esi*4 - 8], edx
mov ecx, dword [edi + 0x3d0]
mov edx, dword [ecx + 0x8c]
mov ecx, dword [esp + 0x1c]
mov ecx, dword [ecx + eax - 4]
mov dword [edx + esi*4 - 4], ecx
jne 0x2fb4a0
mov edx, dword [esp + 0x20]
cmp ebp, dword [esp + 0x24]
jae 0x2fb624
lea ecx, [ebp + 0x1c6]
shl ecx, 4
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x30]
sub ecx, edx
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x2c]
sub ecx, edx
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x34]
sub ecx, edx
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x24]
sub ecx, ebp
lea eax, [edx + ebp*4]
mov dword [esp + 0x10], ecx
mov edx, dword [edi + 0x3f0]
mov ecx, dword [edi + 0x3d0]
mov ecx, dword [ecx + 0x8c]
or dl, 0x80
add esi, 1
add esi, 1
add esi, 1
add esi, 1
add esi, 1
add eax, 4
shl edx, 0xd
or edx, dword [esp + 0x14]
add dword [esp + 0x14], 0x10
sub dword [esp + 0x10], 1
mov dword [ecx + esi*4 - 0x14], edx
mov edx, dword [edi + 0x3d0]
mov ecx, dword [edx + 0x8c]
mov edx, dword [esp + 0x1c]
mov edx, dword [edx + eax - 4]
mov dword [ecx + esi*4 - 0x10], edx
mov ecx, dword [edi + 0x3d0]
mov edx, dword [ecx + 0x8c]
mov ecx, dword [eax - 4]
mov dword [edx + esi*4 - 0xc], ecx
mov edx, dword [edi + 0x3d0]
mov ecx, dword [edx + 0x8c]
mov edx, dword [esp + 0x28]
mov edx, dword [edx + eax - 4]
mov dword [ecx + esi*4 - 8], edx
mov ecx, dword [edi + 0x3d0]
mov edx, dword [ecx + 0x8c]
mov ecx, dword [esp + 0x18]
mov ecx, dword [ecx + eax - 4]
mov dword [edx + esi*4 - 4], ecx
jne 0x2fb583
mov edx, dword [esp + 0x20]
mov eax, dword [edi + 0x3f0]
mov ecx, dword [edi + 0x3d0]
mov ecx, dword [ecx + 0x8c]
shl eax, 0xd
or eax, 0x41900
mov dword [ecx + esi*4], eax
mov eax, dword [esp + 0x21c]
add esi, 1
test eax, eax
je 0x2fb695
cmp eax, 0x5a
jne 0x2fb65e
movsx eax, word [esp + 0x1e4]
jmp 0x2fb69d
cmp eax, 0xb4
jne 0x2fb677
movsx eax, word [esp + 0x1e4]
movsx ecx, word [esp + 0x1e0]
jmp 0x2fb6a5
cmp eax, 0x10e
jne 0x2fb690
movzx eax, word [esp + 0x1dc]
movsx ecx, word [esp + 0x1e0]
jmp 0x2fb6a5
cmp eax, 0xffffffff
jne 0x2fb6bc
movzx eax, word [esp + 0x1dc]
movzx ecx, word [esp + 0x1d8]
shl eax, 0x10
or eax, ecx
mov ecx, dword [edi + 0x3d0]
mov ecx, dword [ecx + 0x8c]
mov dword [ecx + esi*4], eax
add esi, 1
test ebp, ebp
jbe 0x2fb7a1
mov eax, dword [esp + 0x1ec]
lea ecx, [esp + 0x180]
sub ecx, eax
mov dword [esp + 0x38], ecx
lea ecx, [esp + 0x158]
sub ecx, eax
mov dword [esp + 0x3c], ecx
mov ecx, dword [esp + 0x1fc]
sub ecx, eax
mov dword [esp + 0x14], 0x1c60
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x10], ebp
mov edi, edi
mov edx, dword [edi + 0x3f0]
mov ecx, dword [edi + 0x3d0]
mov ecx, dword [ecx + 0x8c]
or dl, 0x80
add esi, 1
add esi, 1
add esi, 1
add esi, 1
add esi, 1
add eax, 4
shl edx, 0xd
or edx, dword [esp + 0x14]
add dword [esp + 0x14], 0x10
sub dword [esp + 0x10], 1
mov dword [ecx + esi*4 - 0x14], edx
mov edx, dword [edi + 0x3d0]
mov ecx, dword [edx + 0x8c]
mov edx, dword [esp + 0x38]
mov edx, dword [edx + eax - 4]
mov dword [ecx + esi*4 - 0x10], edx
mov ecx, dword [edi + 0x3d0]
mov edx, dword [ecx + 0x8c]
mov ecx, dword [eax - 4]
mov dword [edx + esi*4 - 0xc], ecx
mov edx, dword [edi + 0x3d0]
mov ecx, dword [edx + 0x8c]
mov edx, dword [esp + 0x3c]
mov edx, dword [edx + eax - 4]
mov dword [ecx + esi*4 - 8], edx
mov ecx, dword [edi + 0x3d0]
mov edx, dword [ecx + 0x8c]
mov ecx, dword [esp + 0x1c]
mov ecx, dword [ecx + eax - 4]
mov dword [edx + esi*4 - 4], ecx
jne 0x2fb700
mov edx, dword [esp + 0x20]
cmp ebp, dword [esp + 0x24]
jae 0x2fb884
lea ecx, [ebp + 0x1c6]
shl ecx, 4
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x30]
sub ecx, edx
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x2c]
sub ecx, edx
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x34]
sub ecx, edx
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x24]
sub ecx, ebp
lea eax, [edx + ebp*4]
mov dword [esp + 0x10], ecx
mov edx, dword [edi + 0x3f0]
mov ecx, dword [edi + 0x3d0]
mov ecx, dword [ecx + 0x8c]
or dl, 0x80
add esi, 1
add esi, 1
add esi, 1
add esi, 1
add esi, 1
add eax, 4
shl edx, 0xd
or edx, dword [esp + 0x14]
add dword [esp + 0x14], 0x10
sub dword [esp + 0x10], 1
mov dword [ecx + esi*4 - 0x14], edx
mov edx, dword [edi + 0x3d0]
mov ecx, dword [edx + 0x8c]
mov edx, dword [esp + 0x1c]
mov edx, dword [eax + edx - 4]
mov dword [ecx + esi*4 - 0x10], edx
mov ecx, dword [edi + 0x3d0]
mov edx, dword [ecx + 0x8c]
mov ecx, dword [eax - 4]
mov dword [edx + esi*4 - 0xc], ecx
mov edx, dword [edi + 0x3d0]
mov ecx, dword [edx + 0x8c]
mov edx, dword [esp + 0x28]
mov edx, dword [eax + edx - 4]
mov dword [ecx + esi*4 - 8], edx
mov ecx, dword [edi + 0x3d0]
mov edx, dword [ecx + 0x8c]
mov ecx, dword [esp + 0x18]
mov ecx, dword [eax + ecx - 4]
mov dword [edx + esi*4 - 4], ecx
jne 0x2fb7e3
mov edx, dword [esp + 0x20]
mov eax, dword [edi + 0x3f0]
mov ecx, dword [edi + 0x3d0]
mov ecx, dword [ecx + 0x8c]
shl eax, 0xd
or eax, 0x41900
mov dword [ecx + esi*4], eax
mov eax, dword [esp + 0x21c]
add esi, 1
test eax, eax
jne 0x2fb8be
movzx eax, word [esp + 0x1dc]
movzx ecx, word [esp + 0x44]
jmp 0x2fb8df
cmp eax, 0x5a
jne 0x2fb8f5
movsx eax, word [esp + 0x1dc]
movsx ecx, word [esp + 0x1e4]
add eax, eax
sub eax, ecx
movzx ecx, word [esp + 0x1d8]
shl eax, 0x10
or eax, ecx
mov ecx, dword [edi + 0x3d0]
mov ecx, dword [ecx + 0x8c]
mov dword [ecx + esi*4], eax
jmp 0x2fb957
cmp eax, 0xb4
jne 0x2fb920
mov eax, dword [esp + 0x1d8]
lea ecx, [eax + eax]
sub ecx, dword [esp + 0x1e0]
movsx eax, word [esp + 0x1e4]
and ecx, 0xffff
shl eax, 0x10
jmp 0x2fb946
cmp eax, 0x10e
jne 0x2fb931
movsx eax, word [esp + 0x1e0]
jmp 0x2fb93e
cmp eax, 0xffffffff
jne 0x2fb961
movzx eax, word [esp + 0x1d8]
movzx ecx, word [esp + 0x4c]
shl ecx, 0x10
or ecx, eax
mov eax, dword [edi + 0x3d0]
mov eax, dword [eax + 0x8c]
mov dword [eax + esi*4], ecx
mov eax, dword [esp + 0x21c]
add esi, 1
xor ecx, ecx
test ebp, ebp
jbe 0x2fba36
mov eax, dword [esp + 0x1f8]
lea edx, [esp + 0x130]
sub ebx, edx
sub eax, edx
mov dword [esp + 0x14], 0x1c60
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], eax
jmp 0x2fb993
mov ebx, dword [esp + 0x38]
mov eax, dword [edi + 0x3f0]
mov edx, dword [edi + 0x3d0]
mov edx, dword [edx + 0x8c]
or al, 0x80
add esi, 1
add esi, 1
add esi, 1
add esi, 1
add esi, 1
shl eax, 0xd
or eax, dword [esp + 0x14]
add dword [esp + 0x14], 0x10
mov dword [edx + esi*4 - 0x14], eax
mov edx, dword [edi + 0x3d0]
mov edx, dword [edx + 0x8c]
lea eax, [esp + ecx*4 + 0x130]
mov ebx, dword [ebx + eax]
mov dword [edx + esi*4 - 0x10], ebx
mov edx, dword [edi + 0x3d0]
mov edx, dword [edx + 0x8c]
mov ebx, dword [eax]
mov dword [edx + esi*4 - 0xc], ebx
mov edx, dword [edi + 0x3d0]
mov edx, dword [edx + 0x8c]
mov ebx, dword [esp + 0x3c]
mov eax, dword [ebx + eax]
mov dword [edx + esi*4 - 8], eax
mov edx, dword [edi + 0x3d0]
mov eax, dword [edx + 0x8c]
mov edx, dword [esp + ecx*4 + 0x1a8]
mov dword [eax + esi*4 - 4], edx
add ecx, 1
cmp ecx, ebp
jb 0x2fb98f
mov eax, dword [esp + 0x21c]
mov edx, dword [esp + 0x20]
cmp ebp, dword [esp + 0x24]
jae 0x2fbb0c
mov ebx, dword [esp + 0x30]
sub ebx, edx
mov dword [esp + 0x1c], ebx
mov ebx, dword [esp + 0x2c]
sub ebx, edx
mov dword [esp + 0x28], ebx
mov ebx, dword [esp + 0x34]
lea eax, [edx + ebp*4]
sub ebx, edx
mov edx, dword [esp + 0x24]
lea ecx, [ebp + 0x1c6]
shl ecx, 4
sub edx, ebp
mov dword [esp + 0x10], edx
mov edx, dword [edi + 0x3f0]
mov ebp, dword [edi + 0x3d0]
mov ebp, dword [ebp + 0x8c]
or dl, 0x80
add esi, 1
add esi, 1
add esi, 1
add esi, 1
add esi, 1
add eax, 4
shl edx, 0xd
or edx, ecx
mov dword [ebp + esi*4 - 0x14], edx
mov edx, dword [edi + 0x3d0]
mov edx, dword [edx + 0x8c]
mov ebp, dword [esp + 0x1c]
mov ebp, dword [eax + ebp - 4]
mov dword [edx + esi*4 - 0x10], ebp
mov edx, dword [edi + 0x3d0]
mov edx, dword [edx + 0x8c]
mov ebp, dword [eax - 4]
mov dword [edx + esi*4 - 0xc], ebp
mov edx, dword [edi + 0x3d0]
mov edx, dword [edx + 0x8c]
mov ebp, dword [esp + 0x28]
mov ebp, dword [eax + ebp - 4]
mov dword [edx + esi*4 - 8], ebp
mov edx, dword [edi + 0x3d0]
mov ebp, dword [eax + ebx - 4]
mov edx, dword [edx + 0x8c]
mov dword [edx + esi*4 - 4], ebp
add ecx, 0x10
sub dword [esp + 0x10], 1
jne 0x2fba70
mov eax, dword [esp + 0x21c]
mov ecx, dword [edi + 0x3f0]
mov edx, dword [edi + 0x3d0]
mov edx, dword [edx + 0x8c]
shl ecx, 0xd
or ecx, 0x41900
mov dword [edx + esi*4], ecx
add esi, 1
test eax, eax
jne 0x2fbb57
movzx eax, word [esp + 0x4c]
movzx ecx, word [esp + 0x1d8]
mov edx, dword [edi + 0x3d0]
shl eax, 0x10
or eax, ecx
mov ecx, dword [edx + 0x8c]
mov dword [ecx + esi*4], eax
jmp 0x2fbc09
cmp eax, 0x5a
jne 0x2fbb6e
movsx edx, word [esp + 0x1e4]
movzx eax, word [esp + 0x44]
shl edx, 0x10
jmp 0x2fbbd0
cmp eax, 0xb4
jne 0x2fbba7
movsx ecx, word [esp + 0x1dc]
movsx edx, word [esp + 0x1e4]
movsx eax, word [esp + 0x1e0]
add ecx, ecx
sub ecx, edx
mov edx, dword [edi + 0x3d0]
shl ecx, 0x10
or ecx, eax
mov eax, dword [edx + 0x8c]
mov dword [eax + esi*4], ecx
jmp 0x2fbc09
cmp eax, 0x10e
jne 0x2fbbe3
mov ecx, dword [esp + 0x1d8]
movzx eax, word [esp + 0x1dc]
lea edx, [ecx + ecx]
sub edx, dword [esp + 0x1e0]
and edx, 0xffff
shl eax, 0x10
mov ecx, dword [edi + 0x3d0]
or edx, eax
mov eax, dword [ecx + 0x8c]
mov dword [eax + esi*4], edx
jmp 0x2fbc09
cmp eax, 0xffffffff
jne 0x2fbc0c
movzx ecx, word [esp + 0x1dc]
movzx edx, word [esp + 0x44]
mov eax, dword [edi + 0x3d0]
shl ecx, 0x10
or ecx, edx
mov edx, dword [eax + 0x8c]
mov dword [edx + esi*4], ecx
add esi, 1
mov eax, dword [edi + 0x3f0]
mov ecx, dword [edi + 0x3d0]
mov edx, dword [ecx + 0x8c]
shl eax, 0xd
or eax, 0x41808
mov dword [edx + esi*4], eax
mov eax, dword [edi + 0x3d0]
mov ecx, dword [eax + 0x8c]
add esi, 1
mov dword [ecx + esi*4], 0
mov edi, dword [edi + 0x3d0]
lea edx, [esi*4 + 4]
add dword [edi + 0x8c], edx
mov eax, dword [edi + 0x8c]
cmp eax, dword [edi + 0xa4]
pop esi
jb 0x2fbc68
mov eax, edi
call fcn.000b5d70
pop edi
pop ebp
pop ebx
add esp, 0x1c0
ret 0x4c