Function at 0xca1ba0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0xd8
mov eax, dword [ecx + 0xc]
mov dword [esp + 0x20], eax
movzx eax, word [edx]
mov dword [esp + 4], edx
mov dword [esp + 0x18], ecx
push esi
push edi
cmp ax, 0x40
jle 0xca1bde
push 0x40
push 0xa00db4
push ecx
call fcn.00ce9110
add esp, 0xc
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret
mov edi, dword [ecx]
movsx esi, ax
shl esi, 6
add esi, 0x27
mov dword [esp + 0x14], edi
and esi, 0xfffffff8
lea ecx, [esi + 0x264]
test edi, edi
je 0xca1c76
add edi, 0x1e
cmp byte [edi], 0
je 0xca1c0f
mov dword [esp + 0x10], 0
jmp 0xca1cae
mov edx, dword [esp + 0x14]
cmp byte [edx + 0xe2], 0
je 0xca1c74
movzx eax, word [edx + 0xe0]
cmp ecx, eax
jg 0xca1c74
mov edx, dword [edx + 0xec]
mov dword [esp + 0x10], edx
test edx, edx
je 0xca1c6e
mov ecx, dword [esp + 0x14]
mov eax, dword [edx]
mov dword [ecx + 0xec], eax
mov eax, ecx
mov eax, dword [eax + 0xe4]
inc eax
cmp eax, dword [ecx + 0xe8]
mov dword [ecx + 0xe4], eax
lea ecx, [esi + 0x264]
jle 0xca1c9e
mov edx, dword [esp + 0x14]
mov dword [edx + 0xe8], eax
mov edx, dword [esp + 0x10]
jmp 0xca1c9e
mov edi, dword [esp + 0x14]
jmp 0xca1c76
mov edi, edx
push ecx
call fcn.00cebcf0
mov edx, eax
add esp, 4
mov dword [esp + 0x10], edx
test edx, edx
jne 0xca1c91
test edi, edi
je 0xca1c91
mov byte [edi + 0x1e], 1
add edi, 0x1e
test edx, edx
je 0xca1caa
lea ecx, [esi + 0x264]
push ecx
push 0
push edx
call fcn.00bd75b0
add esp, 0xc
mov edx, dword [esp + 0xc]
cmp byte [edi], 0
jne 0xca2363
mov edi, dword [esp + 0x10]
movsx eax, word [edx]
mov ecx, dword [esp + 0x20]
mov dword [edi], ecx
mov ecx, dword [esp + 0x28]
mov dword [edi + 0x18], eax
mov dword [edi + 8], edx
call fcn.00cd8450
mov ecx, dword [ebp + 0x10]
mov dword [edi + 0x14], eax
add edi, esi
mov eax, dword [esp + 0x10]
push 0x104
push 0
lea esi, [edi + 0x160]
mov dword [esp + 0x20], edi
push esi
mov dword [eax + 0x1c], edi
mov word [eax + 4], cx
mov dword [esp + 0x54], esi
call fcn.00bd75b0
mov ecx, dword [esp + 0x2c]
lea eax, [edi + 0x20]
add esp, 0xc
mov dword [edi + 4], esi
mov esi, dword [ebp + 8]
mov edx, esi
mov dword [edi], ecx
mov dword [esp + 0x68], ecx
lea ecx, [esp + 0x60]
mov dword [edi + 0x14], 0
mov dword [edi + 0x18], 8
mov dword [edi + 0x1c], eax
mov dword [edi + 8], 0
mov dword [edi + 0xc], 0
mov dword [esp + 0x60], 0x9b4590
mov dword [esp + 0x64], 0
call fcn.00ccd620
mov byte [edi + 0x10], 0x45
test esi, esi
je 0xca1f2f
cmp byte [esi], 0x45
je 0xca1ee5
mov ecx, dword [edi + 0x18]
cmp dword [edi + 0x14], ecx
jl 0xca1ec2
mov edx, dword [esp + 0x18]
mov edi, dword [edi + 0x1c]
mov eax, dword [edx]
lea edx, [ecx + ecx*4]
shl edx, 4
mov esi, dword [eax]
test esi, esi
je 0xca1e39
cmp byte [esi + 0x1e], 0
jne 0xca1e66
cmp byte [esi + 0xe2], 0
je 0xca1e39
movzx eax, word [esi + 0xe0]
cmp edx, eax
jg 0xca1e39
mov ecx, dword [esi + 0xec]
test ecx, ecx
je 0xca1e39
mov eax, dword [ecx]
mov dword [esi + 0xec], eax
mov eax, dword [esi + 0xe4]
inc eax
mov dword [esi + 0xe4], eax
cmp eax, dword [esi + 0xe8]
jle 0xca1dde
mov dword [esi + 0xe8], eax
mov eax, dword [esp + 0x18]
mov dword [eax + 0x1c], ecx
mov eax, dword [eax + 0x14]
lea eax, [eax + eax*4]
shl eax, 3
push eax
push edi
push ecx
call fcn.00bd6e70
mov eax, dword [esp + 0x24]
add esp, 0xc
add eax, 0x20
cmp edi, eax
je 0xca1e7e
test esi, esi
je 0xca1e75
test edi, edi
je 0xca1e75
cmp edi, dword [esi + 0xf0]
jb 0xca1e75
cmp edi, dword [esi + 0xf4]
jae 0xca1e75
mov eax, dword [esi + 0xec]
mov dword [edi], eax
dec dword [esi + 0xe4]
mov dword [esi + 0xec], edi
mov edi, dword [esp + 0x18]
mov eax, dword [edi + 0x1c]
jmp 0xca1e89
push edx
call fcn.00cebcf0
mov ecx, eax
add esp, 4
test ecx, ecx
jne 0xca1e50
test esi, esi
je 0xca1e50
mov byte [esi + 0x1e], 1
mov eax, dword [esp + 0x18]
mov dword [eax + 0x1c], ecx
test ecx, ecx
jne 0xca1de5
mov esi, dword [ebp + 8]
mov dword [eax + 0x1c], edi
jmp 0xca1f03
mov eax, dword [esp + 0x18]
mov esi, dword [ebp + 8]
mov dword [eax + 0x1c], edi
jmp 0xca1f03
push edi
call fcn.00ceb990
add esp, 4
mov edi, dword [esp + 0x18]
mov eax, dword [edi + 0x1c]
test esi, esi
je 0xca1ea6
test eax, eax
je 0xca1ea6
cmp eax, dword [esi + 0xf0]
jb 0xca1ea6
cmp eax, dword [esi + 0xf4]
jae 0xca1ea6
movzx ecx, word [esi + 0xe0]
jmp 0xca1eb2
push eax
call dword [0xa16ef4]
add esp, 4
mov ecx, eax
mov esi, dword [ebp + 8]
mov eax, 0xcccccccd
mul ecx
shr edx, 5
mov dword [edi + 0x18], edx
mov eax, dword [edi + 0x14]
mov ecx, dword [edi + 0x1c]
lea edx, [eax + eax*4]
inc eax
mov dword [edi + 0x14], eax
mov dword [ecx + edx*8], esi
mov byte [ecx + edx*8 + 0x12], 0
mov dword [ecx + edx*8 + 0x14], edi
mov dword [ecx + edx*8 + 4], 0xffffffff
jmp 0xca1f03
mov edx, dword [esi + 8]
mov ecx, edi
push 0x45
call fcn.00ca69e0
mov edx, dword [esi + 0xc]
add esp, 4
mov ecx, edi
push 0x45
call fcn.00ca69e0
add esp, 4
mov eax, dword [esp + 0xc]
cmp word [eax], 0
je 0xca1f18
mov ecx, esi
call fcn.00cc9280
test eax, eax
je 0xca1f2f
mov eax, dword [esp + 0x10]
mov edx, esi
mov ecx, dword [esp + 0x20]
push 8
push dword [eax + 0x14]
call fcn.00cc58d0
add esp, 8
mov ecx, dword [esp + 0xc]
xor eax, eax
xor esi, esi
cmp ax, word [ecx]
jge 0xca1f8e
mov edx, dword [esp + 0x48]
lea edi, [ecx + 0x14]
mov ecx, dword [edx]
mov eax, dword [edi + 0xc]
mov dword [edx + ecx*4 + 4], eax
inc dword [edx]
mov eax, dword [edi]
test eax, eax
je 0xca1f7f
test byte [eax + 0x22], 0x10
je 0xca1f7f
xor ecx, ecx
mov eax, esi
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
mov eax, dword [esp + 0x18]
cmovae edx, ecx
or dword [eax + 8], ecx
or dword [eax + 0xc], edx
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0xc]
inc esi
add edi, 0x38
movsx eax, word [ecx]
cmp esi, eax
jl 0xca1f43
mov eax, dword [esp + 0x18]
mov esi, dword [eax + 0x14]
sub esi, 1
js 0xca1fb8
nop word [eax + eax]
push esi
mov edx, eax
call fcn.00ca4da0
mov eax, dword [esp + 0x1c]
add esp, 4
sub esi, 1
mov ecx, dword [esp + 0xc]
jns 0xca1fa0
mov edx, dword [esp + 0x14]
cmp byte [edx + 0x1e], 0
jne 0xca2363
mov edi, dword [esp + 0x10]
xor ecx, ecx
or eax, 0xffffffff
mov dword [esp + 0x40], 0xffffffff
or edx, 0xffffffff
mov dword [esp + 0x3c], eax
mov dword [esp + 0x2c], edx
lea esi, [edi + 0x20]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x1c], esi
mov esi, dword [esp + 0xc]
mov dword [esp + 0x34], ecx
cmp cx, word [esi]
jge 0xca237c
nop
xorps xmm0, xmm0
mov dword [esp + 0x44], 1
movlpd qword [esp + 0x80], xmm0
or edi, 0xffffffff
movlpd qword [esp + 0x88], xmm0
movsd xmm0, qword [0xa01378]
mov dword [esp + 0x4c], edi
movsd qword [esp + 0x60], xmm0
jmp 0xca2038
mov eax, dword [esp + 0x3c]
test edi, edi
jns 0xca2245
cmp dword [esp + 0x44], 0
je 0xca2066
xorps xmm0, xmm0
movlpd qword [esp + 0x50], xmm0
mov edx, dword [esp + 0x54]
mov dword [esp + 0x58], edx
mov edx, dword [esp + 0x50]
mov dword [esp + 0x5c], edx
mov edx, dword [esp + 0x2c]
jmp 0xca206e
mov dword [esp + 0x5c], eax
mov dword [esp + 0x58], edx
lea eax, [ecx*8]
mov edi, ecx
sub eax, ecx
lea esi, [esi + eax*8]
mov eax, dword [esp + 0xc]
add esi, 8
mov dword [esp + 0x30], esi
movsx eax, word [eax]
cmp ecx, eax
jge 0xca2232
mov edx, dword [esp + 0x10]
mov eax, ecx
add edx, 0x5c
shl eax, 6
add eax, edx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x50], eax
nop dword [eax + eax]
mov al, byte [esi + 0x15]
and al, 0xa
mov byte [esp + 0x3b], al
cmp edi, ecx
je 0xca20c5
test al, al
jne 0xca2232
mov ecx, dword [esp + 0x48]
xor eax, eax
mov edx, dword [ecx]
test edx, edx
jle 0xca20e3
mov esi, dword [esi + 0x18]
add ecx, 4
cmp dword [ecx], esi
je 0xca211e
inc eax
add ecx, 4
cmp eax, edx
jl 0xca20d7
xorps xmm0, xmm0
movlpd qword [esp + 0x78], xmm0
mov edx, dword [esp + 0x7c]
mov ecx, dword [esp + 0x78]
and ecx, dword [esp + 0x3c]
and edx, dword [esp + 0x2c]
or ecx, edx
jne 0xca2135
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x30]
mov edx, dword [esp + 0x2c]
cmp edi, ecx
jne 0xca2216
inc ecx
mov dword [esp + 0x24], ecx
jmp 0xca2216
xor ecx, ecx
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
cmovae edx, ecx
jmp 0xca20f4
cmp dword [esp + 0x34], 0
jne 0xca2147
mov eax, dword [ebp + 0xc]
test eax, eax
je 0xca2147
mov ecx, dword [eax]
jmp 0xca2149
xor ecx, ecx
mov esi, dword [esp + 0x30]
mov edx, dword [esp + 0x18]
mov eax, dword [esi + 0xc]
test byte [eax + 0x22], 0x10
lea eax, [esp + 0xb0]
je 0xca217e
push dword [esp + 0x50]
push eax
push ecx
push dword [esp + 0x64]
mov ecx, dword [esp + 0x30]
push dword [esp + 0x6c]
push esi
call fcn.00ca41b0
add esp, 0x18
jmp 0xca2195
push eax
push ecx
push dword [esp + 0x60]
mov ecx, dword [esp + 0x2c]
push dword [esp + 0x68]
push esi
call fcn.00ca3be0
add esp, 0x14
mov ecx, dword [esp + 0xd0]
mov eax, dword [esp + 0xd4]
and ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x2c]
and eax, edx
or ecx, eax
mov ecx, dword [esp + 0x24]
jne 0xca220f
cmp edi, ecx
je 0xca21ca
movsd xmm1, qword [esp + 0x60]
comisd xmm1, xmmword [esp + 0xc0]
jbe 0xca220f
movaps xmm0, xmmword [esp + 0xb0]
movaps xmmword [esp + 0x80], xmm0
movaps xmm0, xmmword [esp + 0xc0]
movaps xmmword [esp + 0x90], xmm0
movq xmm0, qword [esp + 0xd0]
movq qword [esp + 0xa0], xmm0
movsd xmm0, qword [esp + 0x90]
mov dword [esp + 0x4c], edi
movsd qword [esp + 0x60], xmm0
cmp byte [esp + 0x3b], 0
jne 0xca2232
mov eax, dword [esp + 0xc]
inc edi
add dword [esp + 0x50], 0x40
add esi, 0x38
mov dword [esp + 0x30], esi
movsx eax, word [eax]
cmp edi, eax
jl 0xca20b0
sub dword [esp + 0x44], 1
mov esi, dword [esp + 0xc]
mov edi, dword [esp + 0x4c]
jns 0xca2034
mov edi, dword [esp + 0x80]
test edi, 0x1000000
je 0xca225d
mov eax, dword [ebp + 0xc]
mov dword [eax], 0
mov edx, dword [esp + 0x1c]
movq xmm0, qword [esp + 0x80]
and dword [esp + 0x40], edi
mov eax, dword [esp + 0x88]
movq qword [edx], xmm0
mov dword [edx + 8], eax
test edi, 0xf0000
je 0xca2293
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx + 0x44]
mov dword [edx + 0x14], eax
inc dword [ecx + 0x44]
jmp 0xca229a
mov dword [edx + 0x14], 0xffffffff
mov edx, dword [esp + 0x48]
xor ecx, ecx
mov edx, dword [edx]
test edx, edx
jle 0xca22cc
mov eax, dword [esp + 0x4c]
shl eax, 3
sub eax, dword [esp + 0x4c]
mov esi, dword [esi + eax*8 + 0x20]
mov eax, dword [esp + 0x48]
add eax, 4
nop dword [eax]
cmp dword [eax], esi
je 0xca2339
inc ecx
add eax, 4
cmp ecx, edx
jl 0xca22c0
xorps xmm0, xmm0
movlpd qword [esp + 0x60], xmm0
mov edx, dword [esp + 0x64]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x4c]
not eax
and dword [esp + 0x3c], eax
not edx
and dword [esp + 0x2c], edx
mov edx, dword [esp + 0x1c]
mov esi, dword [esp + 0xc]
lea eax, [ecx*8]
sub eax, ecx
mov byte [edx + 0x28], cl
mov eax, dword [esi + eax*8 + 0x3c]
test eax, eax
je 0xca2311
test edi, 0xf0000
je 0xca2350
mov ecx, dword [esp + 0x34]
add edx, 0x40
movsx eax, word [esi]
inc ecx
mov dword [esp + 0x34], ecx
mov dword [esp + 0x1c], edx
cmp ecx, eax
jge 0xca2378
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x2c]
jmp 0xca2000
xor eax, eax
xor edx, edx
bts eax, ecx
cmp ecx, 0x20
cmovae edx, eax
xor eax, edx
cmp ecx, 0x40
cmovae edx, eax
jmp 0xca22dd
push dword [eax]
push 0xa00dd0
push dword [esp + 0x28]
call fcn.00ce9110
add esp, 0xc
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
call fcn.00ca26c0
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret
mov edi, dword [esp + 0x10]
mov ecx, dword [esp + 0x20]
cmp dword [ecx + 0x40], 0
jne 0xca2363
mov edx, dword [esp + 0x14]
cmp byte [edx + 0x1e], 0
jne 0xca2363
mov eax, dword [esp + 0x40]
and eax, 0x4000000
mov dword [esp + 0x40], eax
je 0xca23b0
mov eax, dword [ebp + 0xc]
test eax, eax
je 0xca23ac
mov dword [eax], 0
mov eax, dword [esp + 0x40]
test byte [ebp + 0x10], 4
je 0xca23c5
test eax, eax
je 0xca23c5
mov byte [edi + 6], 1
and dword [edi + 0x20], 0xff7fffff
or edx, 0xffffffff
call fcn.00cbe3f0
xor eax, eax
mov dword [esp + 0x44], 0
lea edx, [edi + 0x20]
mov dword [esp + 0x24], edx
cmp ax, word [esi]
jge 0xca2651
nop word [eax + eax]
movzx eax, byte [edx + 0x28]
mov edi, 0xfff0bdc0
lea ecx, [eax*8]
sub ecx, eax
mov dword [esp + 0x30], ecx
mov esi, dword [esi + ecx*8 + 0x14]
mov edx, dword [esi + 0x40]
test edx, edx
je 0xca2434
mov eax, dword [esp + 0x14]
xor edi, edi
mov ecx, dword [eax + 4]
test ecx, ecx
jle 0xca2430
mov eax, dword [eax + 8]
add eax, 0xc
cmp dword [eax], edx
je 0xca2430
inc edi
add eax, 0x10
cmp edi, ecx
jl 0xca2424
mov ecx, dword [esp + 0x30]
test byte [esi + 0x22], 2
jne 0xca262a
cmp dword [esi + 0x1c], 0
jne 0xca262a
mov eax, dword [esp + 0x24]
mov eax, dword [eax]
test eax, 0x8000000
je 0xca255a
mov esi, dword [esi + 0x30]
mov dword [esp + 0x1c], esi
test esi, esi
je 0xca2477
mov eax, dword [esp + 0x14]
cmp dword [esi], eax
je 0xca2473
mov esi, dword [esi + 0x10]
test esi, esi
jne 0xca2468
mov dword [esp + 0x1c], esi
mov eax, dword [esp + 0xc]
mov eax, dword [eax + ecx*8 + 0x20]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x28]
mov edx, dword [eax + 0xc]
mov dword [esp + 0x34], edx
cmp dword [eax + 0x10], edx
jg 0xca24ad
mov ecx, eax
call fcn.00cd8760
test eax, eax
mov eax, dword [esp + 0x28]
je 0xca24a9
mov edx, 1
jmp 0xca24ed
mov edx, dword [esp + 0x34]
inc dword [eax + 0xc]
lea ecx, [edx + edx*4]
mov eax, dword [eax + 0x14]
mov esi, dword [esp + 0x50]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x1c]
mov word [eax + ecx*4], 0x7c
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x28]
mov byte [eax + 0x6e], 0
mov ecx, dword [eax]
mov eax, dword [eax + 0x14]
mov dword [esp + 0x1c], eax
test eax, eax
je 0xca25d7
cmp byte [ecx + 0x1e], 0
jne 0xca25d7
test edx, edx
jns 0xca2514
mov edx, dword [esp + 0x28]
mov edx, dword [edx + 0xc]
dec edx
lea ecx, [edx + edx*4]
push dword [eax + ecx*4 + 0x10]
movsx edx, byte [eax + ecx*4 + 1]
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x38], ecx
mov ecx, dword [eax]
call fcn.00cd7ff0
mov eax, dword [esp + 0x20]
add esp, 4
mov ecx, dword [esp + 0x34]
test esi, esi
jne 0xca254c
mov dword [eax + ecx*4 + 0x10], esi
mov byte [eax + ecx*4 + 1], 0
jmp 0xca25d7
mov dword [eax + ecx*4 + 0x10], esi
mov byte [eax + ecx*4 + 1], 0xf6
inc dword [esi + 0xc]
jmp 0xca25d7
test eax, 0x800000
jne 0xca25d7
test byte [ebp + 0x10], 0x10
jne 0xca25d7
mov edx, dword [esp + 0x10]
xor eax, eax
cmp byte [edx + 6], al
setne al
add eax, 0x26
push eax
mov eax, dword [esp + 0x10]
push esi
push edi
mov edx, dword [eax + ecx*8 + 0x20]
mov ecx, dword [esp + 0x2c]
call fcn.00cba010
mov eax, dword [esp + 0x1c]
add esp, 0xc
cmp byte [eax + 6], 0
jne 0xca25d7
cmp dword [esi + 0xc], 0x40
jge 0xca25d7
mov eax, dword [esp + 0x30]
xor esi, esi
mov ecx, dword [esp + 0xc]
mov edx, dword [ecx + eax*8 + 0x30]
mov ecx, dword [ecx + eax*8 + 0x34]
mov eax, edx
or eax, ecx
je 0xca25c2
shrd edx, ecx, 1
inc esi
shr ecx, 1
mov eax, edx
or eax, ecx
jne 0xca25b5
mov eax, dword [esp + 0x28]
mov ecx, eax
push 0xfffffffffffffff2
push esi
mov edx, dword [eax + 0xc]
dec edx
call fcn.00cd7a80
add esp, 8
mov esi, dword [esp + 0x24]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0xc]
test dword [esi], 0xf0000
mov eax, dword [ecx + eax*8 + 0x20]
mov dword [esi + 0x10], eax
je 0xca261f
mov esi, dword [esi + 8]
mov edx, esi
mov ecx, dword [esp + 0x20]
call fcn.00cbe170
mov ecx, dword [esp + 0x28]
mov edx, 0x26
push 0xfffffffffffffff0
push eax
mov eax, dword [esp + 0x2c]
push edi
push dword [esi + 0x14]
push dword [eax + 0x14]
call fcn.00cd8530
add esp, 0x14
mov ecx, dword [esp + 0x20]
mov edx, edi
call fcn.00cbe3f0
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x24]
inc ecx
add edx, 0x40
mov dword [esp + 0x44], ecx
movsx eax, word [esi]
mov dword [esp + 0x24], edx
cmp ecx, eax
jl 0xca23f0
mov edi, dword [esp + 0x10]
mov eax, dword [esp + 0x28]
or edx, 0xffffffff
mov ecx, dword [esp + 0xc]
xor esi, esi
mov eax, dword [eax + 0xc]
mov dword [edi + 0xc], eax
xor edi, edi
or eax, 0xffffffff
cmp di, word [ecx]
mov edi, dword [esp + 0x10]
jge 0xca26ac
add edi, 0x40
mov ecx, dword [esp + 0x10]
push edx
push eax
push dword [ebp + 0x10]
mov edx, esi
call fcn.00ca27a0
mov ecx, dword [edi]
lea edi, [edi + 0x40]
mov dword [esp + 0x28], eax
inc esi
mov eax, dword [esp + 0x1c]
add esp, 0xc
mov dword [eax + 0x10], ecx
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x1c]
movsx ecx, word [ecx]
cmp esi, ecx
jl 0xca2675
mov edi, dword [esp + 0x10]
mov eax, edi
pop edi
pop esi
mov esp, ebp
pop ebp
ret