Function at 0xce1ba0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0xd8
mov eax, dword [ecx + 0xc]
mov dword [esp + 0x20], eax
movzx eax, word [edx]
mov dword [esp + 4], edx
mov dword [esp + 0x18], ecx
push esi
push edi
cmp ax, 0x40
jle 0xce1bde
push 0x40
push 0xa40db4
push ecx
call fcn.00d29110
add esp, 0xc
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret
mov edi, dword [ecx]
movsx esi, ax
shl esi, 6
add esi, 0x27
mov dword [esp + 0x14], edi
and esi, 0xfffffff8
lea ecx, [esi + 0x264]
test edi, edi
je 0xce1c76
add edi, 0x1e
cmp byte [edi], 0
je 0xce1c0f
mov dword [esp + 0x10], 0
jmp 0xce1cae
mov edx, dword [esp + 0x14]
cmp byte [edx + 0xe2], 0
je 0xce1c74
movzx eax, word [edx + 0xe0]
cmp ecx, eax
jg 0xce1c74
mov edx, dword [edx + 0xec]
mov dword [esp + 0x10], edx
test edx, edx
je 0xce1c6e
mov ecx, dword [esp + 0x14]
mov eax, dword [edx]
mov dword [ecx + 0xec], eax
mov eax, ecx
mov eax, dword [eax + 0xe4]
inc eax
cmp eax, dword [ecx + 0xe8]
mov dword [ecx + 0xe4], eax
lea ecx, [esi + 0x264]
jle 0xce1c9e
mov edx, dword [esp + 0x14]
mov dword [edx + 0xe8], eax
mov edx, dword [esp + 0x10]
jmp 0xce1c9e
mov edi, dword [esp + 0x14]
jmp 0xce1c76
mov edi, edx
push ecx
call fcn.00d2bcf0
mov edx, eax
add esp, 4
mov dword [esp + 0x10], edx
test edx, edx
jne 0xce1c91
test edi, edi
je 0xce1c91
mov byte [edi + 0x1e], 1
add edi, 0x1e
test edx, edx
je 0xce1caa
lea ecx, [esi + 0x264]
push ecx
push 0
push edx
call fcn.00c175b0
add esp, 0xc
mov edx, dword [esp + 0xc]
cmp byte [edi], 0
jne 0xce2363
mov edi, dword [esp + 0x10]
movsx eax, word [edx]
mov ecx, dword [esp + 0x20]
mov dword [edi], ecx
mov ecx, dword [esp + 0x28]
mov dword [edi + 0x18], eax
mov dword [edi + 8], edx
call fcn.00d18450
mov ecx, dword [ebp + 0x10]
mov dword [edi + 0x14], eax
add edi, esi
mov eax, dword [esp + 0x10]
push 0x104
push 0
lea esi, [edi + 0x160]
mov dword [esp + 0x20], edi
push esi
mov dword [eax + 0x1c], edi
mov word [eax + 4], cx
mov dword [esp + 0x54], esi
call fcn.00c175b0
mov ecx, dword [esp + 0x2c]
lea eax, [edi + 0x20]
add esp, 0xc
mov dword [edi + 4], esi
mov esi, dword [ebp + 8]
mov edx, esi
mov dword [edi], ecx
mov dword [esp + 0x68], ecx
lea ecx, [esp + 0x60]
mov dword [edi + 0x14], 0
mov dword [edi + 0x18], 8
mov dword [edi + 0x1c], eax
mov dword [edi + 8], 0
mov dword [edi + 0xc], 0
mov dword [esp + 0x60], 0x9f4590
mov dword [esp + 0x64], 0
call fcn.00d0d620
mov byte [edi + 0x10], 0x45
test esi, esi
je 0xce1f2f
cmp byte [esi], 0x45
je 0xce1ee5
mov ecx, dword [edi + 0x18]
cmp dword [edi + 0x14], ecx
jl 0xce1ec2
mov edx, dword [esp + 0x18]
mov edi, dword [edi + 0x1c]
mov eax, dword [edx]
lea edx, [ecx + ecx*4]
shl edx, 4
mov esi, dword [eax]
test esi, esi
je 0xce1e39
cmp byte [esi + 0x1e], 0
jne 0xce1e66
cmp byte [esi + 0xe2], 0
je 0xce1e39
movzx eax, word [esi + 0xe0]
cmp edx, eax
jg 0xce1e39
mov ecx, dword [esi + 0xec]
test ecx, ecx
je 0xce1e39
mov eax, dword [ecx]
mov dword [esi + 0xec], eax
mov eax, dword [esi + 0xe4]
inc eax
mov dword [esi + 0xe4], eax
cmp eax, dword [esi + 0xe8]
jle 0xce1dde
mov dword [esi + 0xe8], eax
mov eax, dword [esp + 0x18]
mov dword [eax + 0x1c], ecx
mov eax, dword [eax + 0x14]
lea eax, [eax + eax*4]
shl eax, 3
push eax
push edi
push ecx
call fcn.00c16e70
mov eax, dword [esp + 0x24]
add esp, 0xc
add eax, 0x20
cmp edi, eax
je 0xce1e7e
test esi, esi
je 0xce1e75
test edi, edi
je 0xce1e75
cmp edi, dword [esi + 0xf0]
jb 0xce1e75
cmp edi, dword [esi + 0xf4]
jae 0xce1e75
mov eax, dword [esi + 0xec]
mov dword [edi], eax
dec dword [esi + 0xe4]
mov dword [esi + 0xec], edi
mov edi, dword [esp + 0x18]
mov eax, dword [edi + 0x1c]
jmp 0xce1e89
push edx
call fcn.00d2bcf0
mov ecx, eax
add esp, 4
test ecx, ecx
jne 0xce1e50
test esi, esi
je 0xce1e50
mov byte [esi + 0x1e], 1
mov eax, dword [esp + 0x18]
mov dword [eax + 0x1c], ecx
test ecx, ecx
jne 0xce1de5
mov esi, dword [ebp + 8]
mov dword [eax + 0x1c], edi
jmp 0xce1f03
mov eax, dword [esp + 0x18]
mov esi, dword [ebp + 8]
mov dword [eax + 0x1c], edi
jmp 0xce1f03
push edi
call fcn.00d2b990
add esp, 4
mov edi, dword [esp + 0x18]
mov eax, dword [edi + 0x1c]
test esi, esi
je 0xce1ea6
test eax, eax
je 0xce1ea6
cmp eax, dword [esi + 0xf0]
jb 0xce1ea6
cmp eax, dword [esi + 0xf4]
jae 0xce1ea6
movzx ecx, word [esi + 0xe0]
jmp 0xce1eb2
push eax
call dword [0xa56ef4]
add esp, 4
mov ecx, eax
mov esi, dword [ebp + 8]
mov eax, 0xcccccccd
mul ecx
shr edx, 5
mov dword [edi + 0x18], edx
mov eax, dword [edi + 0x14]
mov ecx, dword [edi + 0x1c]
lea edx, [eax + eax*4]
inc eax
mov dword [edi + 0x14], eax
mov dword [ecx + edx*8], esi
mov byte [ecx + edx*8 + 0x12], 0
mov dword [ecx + edx*8 + 0x14], edi
mov dword [ecx + edx*8 + 4], 0xffffffff
jmp 0xce1f03
mov edx, dword [esi + 8]
mov ecx, edi
push 0x45
call fcn.00ce69e0
mov edx, dword [esi + 0xc]
add esp, 4
mov ecx, edi
push 0x45
call fcn.00ce69e0
add esp, 4
mov eax, dword [esp + 0xc]
cmp word [eax], 0
je 0xce1f18
mov ecx, esi
call fcn.00d09280
test eax, eax
je 0xce1f2f
mov eax, dword [esp + 0x10]
mov edx, esi
mov ecx, dword [esp + 0x20]
push 8
push dword [eax + 0x14]
call fcn.00d058d0
add esp, 8
mov ecx, dword [esp + 0xc]
xor eax, eax
xor esi, esi
cmp ax, word [ecx]
jge 0xce1f8e
mov edx, dword [esp + 0x48]
lea edi, [ecx + 0x14]
mov ecx, dword [edx]
mov eax, dword [edi + 0xc]
mov dword [edx + ecx*4 + 4], eax
inc dword [edx]
mov eax, dword [edi]
test eax, eax
je 0xce1f7f
test byte [eax + 0x22], 0x10
je 0xce1f7f
xor ecx, ecx
mov eax, esi
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
mov eax, dword [esp + 0x18]
cmovae edx, ecx
or dword [eax + 8], ecx
or dword [eax + 0xc], edx
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0xc]
inc esi
add edi, 0x38
movsx eax, word [ecx]
cmp esi, eax
jl 0xce1f43
mov eax, dword [esp + 0x18]
mov esi, dword [eax + 0x14]
sub esi, 1
js 0xce1fb8
nop word [eax + eax]
push esi
mov edx, eax
call fcn.00ce4da0
mov eax, dword [esp + 0x1c]
add esp, 4
sub esi, 1
mov ecx, dword [esp + 0xc]
jns 0xce1fa0
mov edx, dword [esp + 0x14]
cmp byte [edx + 0x1e], 0
jne 0xce2363
mov edi, dword [esp + 0x10]
xor ecx, ecx
or eax, 0xffffffff
mov dword [esp + 0x40], 0xffffffff
or edx, 0xffffffff
mov dword [esp + 0x3c], eax
mov dword [esp + 0x2c], edx
lea esi, [edi + 0x20]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x1c], esi
mov esi, dword [esp + 0xc]
mov dword [esp + 0x34], ecx
cmp cx, word [esi]
jge 0xce237c
nop
xorps xmm0, xmm0
mov dword [esp + 0x44], 1
movlpd qword [esp + 0x80], xmm0
or edi, 0xffffffff
movlpd qword [esp + 0x88], xmm0
movsd xmm0, qword [0xa41378]
mov dword [esp + 0x4c], edi
movsd qword [esp + 0x60], xmm0
jmp 0xce2038
mov eax, dword [esp + 0x3c]
test edi, edi
jns 0xce2245
cmp dword [esp + 0x44], 0
je 0xce2066
xorps xmm0, xmm0
movlpd qword [esp + 0x50], xmm0
mov edx, dword [esp + 0x54]
mov dword [esp + 0x58], edx
mov edx, dword [esp + 0x50]
mov dword [esp + 0x5c], edx
mov edx, dword [esp + 0x2c]
jmp 0xce206e
mov dword [esp + 0x5c], eax
mov dword [esp + 0x58], edx
lea eax, [ecx*8]
mov edi, ecx
sub eax, ecx
lea esi, [esi + eax*8]
mov eax, dword [esp + 0xc]
add esi, 8
mov dword [esp + 0x30], esi
movsx eax, word [eax]
cmp ecx, eax
jge 0xce2232
mov edx, dword [esp + 0x10]
mov eax, ecx
add edx, 0x5c
shl eax, 6
add eax, edx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x50], eax
nop dword [eax + eax]
mov al, byte [esi + 0x15]
and al, 0xa
mov byte [esp + 0x3b], al
cmp edi, ecx
je 0xce20c5
test al, al
jne 0xce2232
mov ecx, dword [esp + 0x48]
xor eax, eax
mov edx, dword [ecx]
test edx, edx
jle 0xce20e3
mov esi, dword [esi + 0x18]
add ecx, 4
cmp dword [ecx], esi
je 0xce211e
inc eax
add ecx, 4
cmp eax, edx
jl 0xce20d7
xorps xmm0, xmm0
movlpd qword [esp + 0x78], xmm0
mov edx, dword [esp + 0x7c]
mov ecx, dword [esp + 0x78]
and ecx, dword [esp + 0x3c]
and edx, dword [esp + 0x2c]
or ecx, edx
jne 0xce2135
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x30]
mov edx, dword [esp + 0x2c]
cmp edi, ecx
jne 0xce2216
inc ecx
mov dword [esp + 0x24], ecx
jmp 0xce2216
xor ecx, ecx
xor edx, edx
bts ecx, eax
cmp eax, 0x20
cmovae edx, ecx
xor ecx, edx
cmp eax, 0x40
cmovae edx, ecx
jmp 0xce20f4
cmp dword [esp + 0x34], 0
jne 0xce2147
mov eax, dword [ebp + 0xc]
test eax, eax
je 0xce2147
mov ecx, dword [eax]
jmp 0xce2149
xor ecx, ecx
mov esi, dword [esp + 0x30]
mov edx, dword [esp + 0x18]
mov eax, dword [esi + 0xc]
test byte [eax + 0x22], 0x10
lea eax, [esp + 0xb0]
je 0xce217e
push dword [esp + 0x50]
push eax
push ecx
push dword [esp + 0x64]
mov ecx, dword [esp + 0x30]
push dword [esp + 0x6c]
push esi
call fcn.00ce41b0
add esp, 0x18
jmp 0xce2195
push eax
push ecx
push dword [esp + 0x60]
mov ecx, dword [esp + 0x2c]
push dword [esp + 0x68]
push esi
call fcn.00ce3be0
add esp, 0x14
mov ecx, dword [esp + 0xd0]
mov eax, dword [esp + 0xd4]
and ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x2c]
and eax, edx
or ecx, eax
mov ecx, dword [esp + 0x24]
jne 0xce220f
cmp edi, ecx
je 0xce21ca
movsd xmm1, qword [esp + 0x60]
comisd xmm1, xmmword [esp + 0xc0]
jbe 0xce220f
movaps xmm0, xmmword [esp + 0xb0]
movaps xmmword [esp + 0x80], xmm0
movaps xmm0, xmmword [esp + 0xc0]
movaps xmmword [esp + 0x90], xmm0
movq xmm0, qword [esp + 0xd0]
movq qword [esp + 0xa0], xmm0
movsd xmm0, qword [esp + 0x90]
mov dword [esp + 0x4c], edi
movsd qword [esp + 0x60], xmm0
cmp byte [esp + 0x3b], 0
jne 0xce2232
mov eax, dword [esp + 0xc]
inc edi
add dword [esp + 0x50], 0x40
add esi, 0x38
mov dword [esp + 0x30], esi
movsx eax, word [eax]
cmp edi, eax
jl 0xce20b0
sub dword [esp + 0x44], 1
mov esi, dword [esp + 0xc]
mov edi, dword [esp + 0x4c]
jns 0xce2034
mov edi, dword [esp + 0x80]
test edi, 0x1000000
je 0xce225d
mov eax, dword [ebp + 0xc]
mov dword [eax], 0
mov edx, dword [esp + 0x1c]
movq xmm0, qword [esp + 0x80]
and dword [esp + 0x40], edi
mov eax, dword [esp + 0x88]
movq qword [edx], xmm0
mov dword [edx + 8], eax
test edi, 0xf0000
je 0xce2293
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx + 0x44]
mov dword [edx + 0x14], eax
inc dword [ecx + 0x44]
jmp 0xce229a
mov dword [edx + 0x14], 0xffffffff
mov edx, dword [esp + 0x48]
xor ecx, ecx
mov edx, dword [edx]
test edx, edx
jle 0xce22cc
mov eax, dword [esp + 0x4c]
shl eax, 3
sub eax, dword [esp + 0x4c]
mov esi, dword [esi + eax*8 + 0x20]
mov eax, dword [esp + 0x48]
add eax, 4
nop dword [eax]
cmp dword [eax], esi
je 0xce2339
inc ecx
add eax, 4
cmp ecx, edx
jl 0xce22c0
xorps xmm0, xmm0
movlpd qword [esp + 0x60], xmm0
mov edx, dword [esp + 0x64]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x4c]
not eax
and dword [esp + 0x3c], eax
not edx
and dword [esp + 0x2c], edx
mov edx, dword [esp + 0x1c]
mov esi, dword [esp + 0xc]
lea eax, [ecx*8]
sub eax, ecx
mov byte [edx + 0x28], cl
mov eax, dword [esi + eax*8 + 0x3c]
test eax, eax
je 0xce2311
test edi, 0xf0000
je 0xce2350
mov ecx, dword [esp + 0x34]
add edx, 0x40
movsx eax, word [esi]
inc ecx
mov dword [esp + 0x34], ecx
mov dword [esp + 0x1c], edx
cmp ecx, eax
jge 0xce2378
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x2c]
jmp 0xce2000
xor eax, eax
xor edx, edx
bts eax, ecx
cmp ecx, 0x20
cmovae edx, eax
xor eax, edx
cmp ecx, 0x40
cmovae edx, eax
jmp 0xce22dd
push dword [eax]
push 0xa40dd0
push dword [esp + 0x28]
call fcn.00d29110
add esp, 0xc
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
call fcn.00ce26c0
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret
mov edi, dword [esp + 0x10]
mov ecx, dword [esp + 0x20]
cmp dword [ecx + 0x40], 0
jne 0xce2363
mov edx, dword [esp + 0x14]
cmp byte [edx + 0x1e], 0
jne 0xce2363
mov eax, dword [esp + 0x40]
and eax, 0x4000000
mov dword [esp + 0x40], eax
je 0xce23b0
mov eax, dword [ebp + 0xc]
test eax, eax
je 0xce23ac
mov dword [eax], 0
mov eax, dword [esp + 0x40]
test byte [ebp + 0x10], 4
je 0xce23c5
test eax, eax
je 0xce23c5
mov byte [edi + 6], 1
and dword [edi + 0x20], 0xff7fffff
or edx, 0xffffffff
call fcn.00cfe3f0
xor eax, eax
mov dword [esp + 0x44], 0
lea edx, [edi + 0x20]
mov dword [esp + 0x24], edx
cmp ax, word [esi]
jge 0xce2651
nop word [eax + eax]
movzx eax, byte [edx + 0x28]
mov edi, 0xfff0bdc0
lea ecx, [eax*8]
sub ecx, eax
mov dword [esp + 0x30], ecx
mov esi, dword [esi + ecx*8 + 0x14]
mov edx, dword [esi + 0x40]
test edx, edx
je 0xce2434
mov eax, dword [esp + 0x14]
xor edi, edi
mov ecx, dword [eax + 4]
test ecx, ecx
jle 0xce2430
mov eax, dword [eax + 8]
add eax, 0xc
cmp dword [eax], edx
je 0xce2430
inc edi
add eax, 0x10
cmp edi, ecx
jl 0xce2424
mov ecx, dword [esp + 0x30]
test byte [esi + 0x22], 2
jne 0xce262a
cmp dword [esi + 0x1c], 0
jne 0xce262a
mov eax, dword [esp + 0x24]
mov eax, dword [eax]
test eax, 0x8000000
je 0xce255a
mov esi, dword [esi + 0x30]
mov dword [esp + 0x1c], esi
test esi, esi
je 0xce2477
mov eax, dword [esp + 0x14]
cmp dword [esi], eax
je 0xce2473
mov esi, dword [esi + 0x10]
test esi, esi
jne 0xce2468
mov dword [esp + 0x1c], esi
mov eax, dword [esp + 0xc]
mov eax, dword [eax + ecx*8 + 0x20]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x28]
mov edx, dword [eax + 0xc]
mov dword [esp + 0x34], edx
cmp dword [eax + 0x10], edx
jg 0xce24ad
mov ecx, eax
call fcn.00d18760
test eax, eax
mov eax, dword [esp + 0x28]
je 0xce24a9
mov edx, 1
jmp 0xce24ed
mov edx, dword [esp + 0x34]
inc dword [eax + 0xc]
lea ecx, [edx + edx*4]
mov eax, dword [eax + 0x14]
mov esi, dword [esp + 0x50]
mov dword [eax + ecx*4 + 4], esi
mov esi, dword [esp + 0x1c]
mov word [eax + ecx*4], 0x7c
mov byte [eax + ecx*4 + 3], 0
mov dword [eax + ecx*4 + 8], 0
mov dword [eax + ecx*4 + 0xc], 0
mov dword [eax + ecx*4 + 0x10], 0
mov eax, dword [esp + 0x28]
mov byte [eax + 0x6e], 0
mov ecx, dword [eax]
mov eax, dword [eax + 0x14]
mov dword [esp + 0x1c], eax
test eax, eax
je 0xce25d7
cmp byte [ecx + 0x1e], 0
jne 0xce25d7
test edx, edx
jns 0xce2514
mov edx, dword [esp + 0x28]
mov edx, dword [edx + 0xc]
dec edx
lea ecx, [edx + edx*4]
push dword [eax + ecx*4 + 0x10]
movsx edx, byte [eax + ecx*4 + 1]
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x38], ecx
mov ecx, dword [eax]
call fcn.00d17ff0
mov eax, dword [esp + 0x20]
add esp, 4
mov ecx, dword [esp + 0x34]
test esi, esi
jne 0xce254c
mov dword [eax + ecx*4 + 0x10], esi
mov byte [eax + ecx*4 + 1], 0
jmp 0xce25d7
mov dword [eax + ecx*4 + 0x10], esi
mov byte [eax + ecx*4 + 1], 0xf6
inc dword [esi + 0xc]
jmp 0xce25d7
test eax, 0x800000
jne 0xce25d7
test byte [ebp + 0x10], 0x10
jne 0xce25d7
mov edx, dword [esp + 0x10]
xor eax, eax
cmp byte [edx + 6], al
setne al
add eax, 0x26
push eax
mov eax, dword [esp + 0x10]
push esi
push edi
mov edx, dword [eax + ecx*8 + 0x20]
mov ecx, dword [esp + 0x2c]
call fcn.00cfa010
mov eax, dword [esp + 0x1c]
add esp, 0xc
cmp byte [eax + 6], 0
jne 0xce25d7
cmp dword [esi + 0xc], 0x40
jge 0xce25d7
mov eax, dword [esp + 0x30]
xor esi, esi
mov ecx, dword [esp + 0xc]
mov edx, dword [ecx + eax*8 + 0x30]
mov ecx, dword [ecx + eax*8 + 0x34]
mov eax, edx
or eax, ecx
je 0xce25c2
shrd edx, ecx, 1
inc esi
shr ecx, 1
mov eax, edx
or eax, ecx
jne 0xce25b5
mov eax, dword [esp + 0x28]
mov ecx, eax
push 0xfffffffffffffff2
push esi
mov edx, dword [eax + 0xc]
dec edx
call fcn.00d17a80
add esp, 8
mov esi, dword [esp + 0x24]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0xc]
test dword [esi], 0xf0000
mov eax, dword [ecx + eax*8 + 0x20]
mov dword [esi + 0x10], eax
je 0xce261f
mov esi, dword [esi + 8]
mov edx, esi
mov ecx, dword [esp + 0x20]
call fcn.00cfe170
mov ecx, dword [esp + 0x28]
mov edx, 0x26
push 0xfffffffffffffff0
push eax
mov eax, dword [esp + 0x2c]
push edi
push dword [esi + 0x14]
push dword [eax + 0x14]
call fcn.00d18530
add esp, 0x14
mov ecx, dword [esp + 0x20]
mov edx, edi
call fcn.00cfe3f0
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x24]
inc ecx
add edx, 0x40
mov dword [esp + 0x44], ecx
movsx eax, word [esi]
mov dword [esp + 0x24], edx
cmp ecx, eax
jl 0xce23f0
mov edi, dword [esp + 0x10]
mov eax, dword [esp + 0x28]
or edx, 0xffffffff
mov ecx, dword [esp + 0xc]
xor esi, esi
mov eax, dword [eax + 0xc]
mov dword [edi + 0xc], eax
xor edi, edi
or eax, 0xffffffff
cmp di, word [ecx]
mov edi, dword [esp + 0x10]
jge 0xce26ac
add edi, 0x40
mov ecx, dword [esp + 0x10]
push edx
push eax
push dword [ebp + 0x10]
mov edx, esi
call fcn.00ce27a0
mov ecx, dword [edi]
lea edi, [edi + 0x40]
mov dword [esp + 0x28], eax
inc esi
mov eax, dword [esp + 0x1c]
add esp, 0xc
mov dword [eax + 0x10], ecx
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x1c]
movsx ecx, word [ecx]
cmp esi, ecx
jl 0xce2675
mov edi, dword [esp + 0x10]
mov eax, edi
pop edi
pop esi
mov esp, ebp
pop ebp
ret