Function at 0x2c387b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x90]
cmp eax, dword [ecx + 8]
jbe 0x2c395e2
sub esp, 0x110
mov eax, dword [esp + 0x114]
mov ecx, dword [eax + 0x14]
test ecx, ecx
jne 0x2c388be
mov eax, dword [esp + 0x11c]
mov ecx, dword [esp + 0x128]
lea edx, [ecx + eax]
mov dword [esp + 0xbc], edx
mov ebx, dword [esp + 0x120]
cmp ebx, edx
jb 0x2c38811
mov ebp, dword [esp + 0x118]
jmp 0x2c38850
lea ecx, [0x2d0e7c0]
mov dword [esp], ecx
mov ecx, dword [esp + 0x118]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.02b27650
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov ebp, eax
mov ebx, ecx
mov eax, dword [esp + 0x11c]
mov ecx, dword [esp + 0x128]
mov dword [esp + 0x10c], ebp
mov dword [esp + 0xb8], ebx
add eax, ebp
mov dword [esp], eax
mov eax, dword [esp + 0x124]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.02b3f220
mov eax, dword [esp + 0x10c]
mov dword [esp + 0x138], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x13c], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x140], eax
mov dword [esp + 0x144], 0
mov dword [esp + 0x148], 0
add esp, 0x110
ret
mov dword [esp], eax
call fcn.02c37a10
mov eax, dword [esp + 4]
test eax, eax
jg 0x2c388ee
mov ebx, dword [esp + 0x120]
mov esi, dword [esp + 0x11c]
mov ecx, dword [esp + 0x118]
xor eax, eax
xor ebp, ebp
xor edx, edx
jmp 0x2c38a99
mov dword [esp + 0x98], eax
nop
mov ebx, dword [esp + 0x11c]
lea ecx, [ebx + eax]
mov dword [esp + 0x5c], ecx
mov edx, dword [esp + 0x120]
cmp edx, ecx
jl 0x2c3891e
jb 0x2c395dc
mov ebp, dword [esp + 0x118]
jmp 0x2c38959
lea eax, [0x2d0e7c0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov edx, dword [esp + 0x118]
mov dword [esp + 0xc], edx
call fcn.02b27380
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x5c]
mov ebx, dword [esp + 0x11c]
mov edx, ecx
mov ebp, eax
mov eax, dword [esp + 0x98]
cmp ebx, ecx
ja 0x2c395d5
mov dword [esp + 0x90], edx
mov dword [esp + 0xe8], ebp
mov eax, dword [esp + 0x114]
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0x18]
lea ebx, [0x2d1bbe0]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.02ae9310
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x11c]
mov ebx, ecx
sub ecx, edx
mov dword [esp + 0xa0], ecx
mov ebp, ecx
neg ecx
sar ecx, 0x1f
and edx, ecx
mov ecx, dword [esp + 0xe8]
add edx, ecx
mov dword [esp + 0xf4], edx
test eax, eax
jne 0x2c38a2d
mov eax, dword [esp + 0x98]
cmp eax, 0x10
jge 0x2c38a34
cmp eax, 8
jle 0x2c389e4
mov esi, 8
jmp 0x2c389e6
mov esi, eax
mov edi, dword [esp + 0x114]
add edi, 0x24
cmp edi, edx
je 0x2c38a95
mov dword [esp], edx
mov dword [esp + 4], edi
mov dword [esp + 8], esi
call fcn.02b3f220
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0xe8]
mov edx, dword [esp + 0xf4]
mov ebx, dword [esp + 0x90]
mov ebp, dword [esp + 0xa0]
jmp 0x2c38a95
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x130]
mov dword [esp], ecx
mov ecx, dword [esp + 0x134]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], eax
call fcn.02b67d10
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
test eax, eax
jne 0x2c393a1
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0xe8]
mov edx, dword [esp + 0xf4]
mov ebx, dword [esp + 0x90]
mov ebp, dword [esp + 0xa0]
mov esi, dword [esp + 0x5c]
mov dword [esp + 0xf4], edx
mov dword [esp + 0xa0], ebp
mov edi, dword [esp + 0x114]
mov edx, dword [edi + 0x14]
mov ebp, dword [edi + 0x18]
test edx, edx
je 0x2c39565
mov dword [esp + 0xa8], edx
mov dword [esp + 0x108], ebp
mov dword [esp + 0x9c], eax
mov dword [esp + 0x88], ebx
mov dword [esp + 0x84], esi
mov dword [esp + 0xe4], ecx
lea eax, [0x2d15160]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebp
call fcn.02ae9310
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x2c38d7c
mov edx, dword [esp + 0x88]
cmp edx, 5
jb 0x2c395cb
mov dword [esp + 0x104], ecx
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x114]
mov ecx, dword [eax + 0x1c]
mov ebx, dword [eax + 0x20]
mov dword [esp], ecx
mov dword [esp + 4], ebx
lea ecx, [eax + 0x2c]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0xd
lea ecx, [eax + 0x24]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], 8
mov dword [esp + 0x1c], 8
mov ecx, dword [esp + 0xe4]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], 5
mov dword [esp + 0x28], edx
mov ebx, dword [esp + 0x124]
mov dword [esp + 0x2c], ebx
mov ebp, dword [esp + 0x128]
mov dword [esp + 0x30], ebp
mov esi, dword [esp + 0x12c]
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], 0
call fcn.02c363f0
mov eax, dword [esp + 0x48]
mov dword [esp + 0x7c], eax
mov ecx, dword [esp + 0x128]
lea edx, [ecx + eax]
mov dword [esp + 0x70], edx
mov ebx, dword [esp + 0x44]
mov dword [esp + 0xdc], ebx
mov ebp, dword [esp + 0x4c]
mov dword [esp + 0x80], ebp
mov esi, dword [esp + 0x84]
lea edi, [esi + edx]
mov dword [esp + 0x58], edi
mov ebp, dword [esp + 0x88]
cmp ebp, edi
jl 0x2c38c2a
jb 0x2c395c2
mov dword [esp + 0xd0], eax
mov eax, dword [esp + 0xe4]
mov dword [esp + 0xf0], eax
mov eax, dword [esp + 0xd0]
jmp 0x2c38c79
lea eax, [0x2d0e7c0]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov eax, dword [esp + 0xe4]
mov dword [esp + 0xc], eax
call fcn.02b27380
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x7c]
mov edx, dword [esp + 0x70]
mov ebx, dword [esp + 0xdc]
mov esi, dword [esp + 0x84]
mov edi, dword [esp + 0x58]
mov ebp, edi
mov dword [esp + 0xf0], ecx
mov ecx, dword [esp + 0x128]
cmp esi, edi
ja 0x2c395b9
mov dword [esp + 0x94], ebp
sub ebp, esi
mov dword [esp + 0xa4], ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and esi, ebp
mov ebp, dword [esp + 0xf0]
add esi, ebp
mov ebp, dword [esp + 0xa4]
cmp ecx, ebp
ja 0x2c395b2
mov dword [esp + 0xf8], esi
mov eax, dword [esp + 0xac]
mov edx, dword [eax + 0x10]
mov ebx, dword [esp + 0x104]
mov dword [esp], ebx
mov dword [esp + 4], esi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov edi, dword [esp + 0x124]
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], ecx
mov edi, dword [esp + 0x12c]
mov dword [esp + 0x18], edi
call edx
mov eax, dword [esp + 0x128]
mov ecx, dword [esp + 0x70]
cmp eax, ecx
ja 0x2c395ad
mov ecx, dword [esp + 0xac]
mov ecx, dword [ecx + 0x10]
mov edx, dword [esp + 0x104]
mov dword [esp], edx
mov edx, dword [esp + 0xa4]
sub edx, eax
mov ebx, edx
neg edx
sar edx, 0x1f
and eax, edx
mov edx, dword [esp + 0xf8]
add eax, edx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
mov edx, dword [esp + 0xdc]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x18], eax
call ecx
mov ecx, dword [esp + 0x58]
mov eax, dword [esp + 0xf0]
mov edx, dword [esp + 0x94]
jmp 0x2c39478
lea eax, [0x2d24920]
mov dword [esp], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x108]
mov dword [esp + 8], ecx
call fcn.02ae9310
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x2c390ed
mov ebx, dword [esp + 0x9c]
test ebx, ebx
jne 0x2c38dd1
mov ebx, dword [esp + 0x114]
lea edx, [ebx + 0x24]
mov ebp, 8
mov esi, 8
jmp 0x2c38ded
mov ebx, dword [esp + 0x114]
mov ebp, dword [esp + 0xa0]
mov esi, dword [esp + 0x9c]
mov edx, dword [esp + 0xf4]
mov dword [esp + 0x6c], ebp
mov dword [esp + 0x68], esi
mov dword [esp + 0xd8], edx
cmp word [ebx + 0x10], 0x304
jne 0x2c3903f
mov dword [esp + 0x100], ecx
mov dword [esp + 0xb0], eax
mov edi, dword [esp + 0x84]
mov ebx, dword [esp + 0x128]
lea ebp, [ebx + edi]
mov dword [esp + 0xbc], ebp
mov esi, dword [esp + 0x88]
cmp esi, ebp
jb 0x2c38e50
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0xe4]
mov dword [esp + 0x10c], eax
jmp 0x2c38e94
lea eax, [0x2d0e7c0]
mov dword [esp], eax
mov ecx, dword [esp + 0xe4]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.02b27650
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov edi, dword [esp + 0x84]
mov dword [esp + 0x10c], ecx
mov esi, ebx
mov ebx, dword [esp + 0x128]
mov dword [esp + 0xb8], esi
mov eax, dword [esp + 0x10c]
lea ecx, [eax + edi]
mov dword [esp], ecx
mov ecx, dword [esp + 0x124]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.02b3f220
mov ecx, dword [esp + 0xbc]
test ecx, ecx
jbe 0x2c395a6
mov edx, dword [esp + 0x84]
mov ebx, dword [esp + 0x128]
lea edx, [ebx + edx + 1]
mov ebp, dword [esp + 0x10c]
movzx esi, byte [ebp]
mov edi, dword [esp + 0xb8]
cmp edi, edx
jae 0x2c38f3d
xchg esi, eax
mov byte [esp + 0x53], al
xchg esi, eax
lea eax, [0x2d0e7c0]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], edx
call fcn.02b27650
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea edx, [ecx + 1]
mov ecx, dword [esp + 0xbc]
mov ebx, dword [esp + 0x128]
mov ebp, eax
mov edi, esi
movzx esi, byte [esp + 0x53]
xchg esi, eax
mov byte [ebp + ecx], al
xchg esi, eax
test edx, edx
jbe 0x2c3959d
mov dword [esp + 0x10c], ebp
mov dword [esp + 0xbc], edx
mov dword [esp + 0xb8], edi
mov byte [ebp], 0x17
mov eax, dword [esp + 0xb0]
mov ecx, dword [eax + 0x18]
mov edx, dword [esp + 0x100]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x128]
lea eax, [ecx + eax + 1]
mov ecx, dword [esp + 0xbc]
cmp ecx, 3
jbe 0x2c39593
mov edx, eax
sar eax, 8
mov ebx, dword [esp + 0x10c]
mov byte [ebx + 3], al
cmp ecx, 4
jbe 0x2c39589
mov byte [ebx + 4], dl
mov eax, dword [esp + 0xb0]
mov eax, dword [eax + 0x1c]
mov edx, dword [esp + 0x100]
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], 5
mov edx, dword [esp + 0xb8]
mov dword [esp + 0xc], edx
mov ebp, dword [esp + 0xd8]
mov dword [esp + 0x10], ebp
mov ebp, dword [esp + 0x68]
mov dword [esp + 0x14], ebp
mov ebp, dword [esp + 0x6c]
mov dword [esp + 0x18], ebp
lea ebp, [edx - 5]
mov esi, ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, 5
add ebp, ebx
mov dword [esp + 0x1c], ebp
add ecx, 0xfffffffb
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], esi
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], 5
mov dword [esp + 0x30], edx
call eax
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
jmp 0x2c39478
mov edi, dword [ebx + 0x24]
mov ebp, dword [ebx + 0x28]
mov dword [ebx + 0x2c], edi
mov dword [ebx + 0x30], ebp
mov ebp, dword [esp + 0x88]
cmp ebp, 5
jb 0x2c3957d
mov edi, dword [esp + 0xe4]
mov esi, dword [edi]
movzx edx, byte [edi + 4]
mov dword [ebx + 0x34], esi
mov byte [ebx + 0x38], dl
mov eax, dword [eax + 0x1c]
mov dword [esp], ecx
mov dword [esp + 4], edi
mov ecx, dword [esp + 0x84]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov ecx, dword [esp + 0xd8]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x124]
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x128]
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x12c]
mov dword [esp + 0x24], ecx
lea ecx, [ebx + 0x2c]
mov dword [esp + 0x28], ecx
mov dword [esp + 0x2c], 0xd
mov dword [esp + 0x30], 0xd
call eax
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
jmp 0x2c39478
lea eax, [0x2d1bbe0]
mov dword [esp], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x108]
mov dword [esp + 8], eax
call fcn.02ae9310
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x2c39565
mov edx, dword [esp + 0x88]
cmp edx, 5
jb 0x2c3955b
mov dword [esp + 0xfc], ecx
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0x114]
mov ecx, dword [eax + 0x1c]
mov ebx, dword [eax + 0x20]
mov dword [esp], ecx
mov dword [esp + 4], ebx
lea ecx, [eax + 0x2c]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0xd
lea ecx, [eax + 0x24]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], 8
mov dword [esp + 0x1c], 8
mov ecx, dword [esp + 0xe4]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], 5
mov dword [esp + 0x28], edx
mov ebx, dword [esp + 0x124]
mov dword [esp + 0x2c], ebx
mov ebp, dword [esp + 0x128]
mov dword [esp + 0x30], ebp
mov esi, dword [esp + 0x12c]
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], 0
call fcn.02c363f0
mov eax, dword [esp + 0xb4]
mov ecx, dword [eax + 0x10]
mov edx, dword [esp + 0x48]
mov dword [esp + 0x78], edx
mov ebx, dword [esp + 0x44]
mov dword [esp + 0xe0], ebx
mov ebp, dword [esp + 0xfc]
mov dword [esp], ebp
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x128]
lea ebx, [edx + ecx]
test eax, eax
je 0x2c39556
mov dword [esp + 0x60], ebx
mov ebp, eax
mov eax, ebx
mov esi, edx
cmp ebp, 0xffffffff
je 0x2c3922d
cdq
idiv ebp
jmp 0x2c3922f
xor edx, edx
sub ebp, edx
mov dword [esp + 0x64], ebp
lea edi, [ebx + ebp]
mov dword [esp + 0x74], edi
mov eax, dword [esp + 0x84]
mov edx, ebp
lea ebp, [edi + eax]
mov dword [esp + 0x54], ebp
mov ebx, dword [esp + 0x88]
cmp ebx, ebp
jl 0x2c3927b
jb 0x2c3954d
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0xe4]
mov dword [esp + 0xec], eax
mov eax, dword [esp + 0xc0]
jmp 0x2c392c7
lea ecx, [0x2d0e7c0]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov ecx, dword [esp + 0xe4]
mov dword [esp + 0xc], ecx
call fcn.02b27380
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x64]
mov ebp, dword [esp + 0x54]
mov esi, dword [esp + 0x128]
mov edi, dword [esp + 0x74]
mov ebx, ebp
mov dword [esp + 0xec], ecx
mov ecx, dword [esp + 0x78]
cmp eax, ebp
ja 0x2c39546
mov dword [esp + 0x8c], ebx
sub ebx, eax
mov dword [esp + 0xa4], ebx
neg ebx
sar ebx, 0x1f
and ebx, eax
mov eax, ebp
mov ebp, dword [esp + 0xec]
add ebx, ebp
cmp esi, edi
jl 0x2c392f7
mov esi, edi
mov dword [esp + 0xf8], ebx
mov ebp, dword [esp + 0x124]
cmp ebp, ebx
je 0x2c39341
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.02b3f220
mov eax, dword [esp + 0x128]
mov ecx, dword [esp + 0x74]
cmp eax, ecx
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0xf8]
mov ebp, eax
mov edi, dword [esp + 0x74]
mov eax, dword [esp + 0x54]
jmp 0x2c3934a
mov ebp, dword [esp + 0x128]
cmp ebp, edi
ja 0x2c3953d
mov esi, edi
sub edi, ebp
mov edx, dword [esp + 0xa4]
sub edx, ebp
neg edx
sar edx, 0x1f
and ebp, edx
lea edx, [ebx + ebp]
cmp ecx, edi
jl 0x2c3936d
mov ecx, edi
mov ebp, dword [esp + 0xe0]
cmp ebp, edx
je 0x2c39397
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
call fcn.02b3f220
mov eax, dword [esp + 0x54]
mov ebx, dword [esp + 0xf8]
mov esi, dword [esp + 0x74]
mov edx, dword [esp + 0x64]
mov ebp, dword [esp + 0x60]
jmp 0x2c393e0
mov dword [esp + 0x138], 0
mov dword [esp + 0x13c], 0
mov dword [esp + 0x140], 0
mov dword [esp + 0x144], ecx
mov dword [esp + 0x148], edx
add esp, 0x110
ret
lea edi, [edx - 1]
xchg edi, eax
mov byte [ebx + ebp], al
xchg edi, eax
inc ebp
cmp ebp, esi
jge 0x2c393eb
jb 0x2c393d7
jmp 0x2c39534
mov ecx, dword [esp + 0x9c]
test ecx, ecx
jle 0x2c39431
mov eax, dword [esp + 0xb4]
mov edx, dword [eax + 0x18]
mov ebx, dword [esp + 0xfc]
mov dword [esp], ebx
mov ebp, dword [esp + 0xf4]
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0xc], ecx
call edx
mov ebx, dword [esp + 0xf8]
mov esi, dword [esp + 0x74]
mov eax, dword [esp + 0xb4]
mov eax, dword [eax + 0x14]
mov ecx, dword [esp + 0xfc]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], ecx
call eax
mov ecx, dword [esp + 0x54]
mov eax, dword [esp + 0xec]
mov edx, dword [esp + 0x8c]
cmp ecx, 3
jbe 0x2c3952a
lea ebx, [ecx - 5]
mov ebp, ebx
sar ebx, 8
mov byte [eax + 3], bl
cmp ecx, 4
jbe 0x2c39520
xchg ebp, ebx
mov byte [eax + 4], bl
xchg ebp, ebx
nop
mov ebx, dword [esp + 0x114]
mov ebp, 7
jmp 0x2c394ac
dec ebp
test ebp, ebp
jl 0x2c39508
cmp ebp, 8
jae 0x2c394fc
movzx esi, byte [ebx + ebp + 0x24]
lea edi, [esi + 1]
xchg edi, eax
mov byte [ebx + ebp + 0x24], al
xchg edi, eax
xchg esi, eax
cmp al, 0xff
xchg esi, eax
je 0x2c394ab
mov dword [esp + 0x138], eax
mov dword [esp + 0x13c], ecx
mov dword [esp + 0x140], edx
mov dword [esp + 0x144], 0
mov dword [esp + 0x148], 0
add esp, 0x110
ret
mov eax, ebp
mov ecx, 8
call fcn.02b3e900
lea eax, [0x2d0e5c0]
mov dword [esp], eax
lea eax, [0x2da21c4]
mov dword [esp + 4], eax
call fcn.02b13450
mov eax, 4
call fcn.02b3e900
mov eax, 3
call fcn.02b3e900
mov eax, ebp
mov ecx, esi
call fcn.02b3e900
mov eax, ebp
mov ecx, edi
call fcn.02b3e960
mov ecx, ebp
call fcn.02b3e960
mov ecx, ebp
mov edx, ebx
call fcn.02b3e940
call fcn.02b11730
mov ecx, 5
call fcn.02b3e940
lea eax, [0x2d0e5c0]
mov dword [esp], eax
lea eax, [0x2da21cc]
mov dword [esp + 4], eax
call fcn.02b13450
mov ecx, 5
mov edx, ebp
call fcn.02b3e940
mov eax, 4
call fcn.02b3e900
mov eax, 3
call fcn.02b3e900
xor eax, eax
mov ecx, edx
call fcn.02b3e900
xor eax, eax
call fcn.02b3e900
call fcn.02b3e960
mov edx, ebp
call fcn.02b3e940
mov eax, esi
mov ecx, edi
call fcn.02b3e960
mov ecx, edi
mov edx, ebp
call fcn.02b3e940
mov ecx, 5
call fcn.02b3e940
mov eax, ebx
call fcn.02b3e960
call fcn.02b3e940
nop
call fcn.02b3d440
jmp fcn.02c387b0