Function at 0x1000f060
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1006eb2c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x3d0
push ebx
push esi
push edi
mov dword [esp + 0x4c], edx
mov esi, ecx
mov dword [esp + 0x18], esi
xor eax, eax
inc eax
lea edx, [esp + 0x2c]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x9c], 0xffffffff
xor ebx, ebx
mov dword [esp + 0x54], eax
lea eax, [esp + 0x54]
push eax
mov dword [esp + 0x8c], 0xffffffff
lea eax, [esp + 0xa0]
mov dword [esp + 0x14], 0xce68266c
mov dword [esp + 0x20], ebx
lea ecx, [esp + 0x8c]
push eax
call fcn.1000ebd8
pop ecx
pop ecx
mov dword [esp + 0x2c], 0xfffffff8
jmp 0x1000f22d
push 1
lea ecx, [esp + 0x80]
call fcn.10012a45
mov dword [esp + 0x3e4], ebx
lea eax, [esp + 0x184]
push dword [esp + 0x60]
movdqa xmm0, xmmword [0x1000c590]
lea ecx, [esp + 0xa8]
push eax
lea eax, [esp + 0x17c]
mov dword [esp + 0x24], 8
push eax
mov dword [esp + 0x20], 0x2b46fac5
push ebx
movdqu xmmword [esp + 0x184], xmm0
mov dword [esp + 0xb4], ebx
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xbc], ebx
call fcn.10016c3e
mov dword [esp + 0x10], ebx
jmp 0x1000f16b
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x7c]
or dword [eax + ecx*4], 0xffffffff
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 1
jl 0x1000f15b
mov ecx, dword [esp + 0x7c]
mov eax, dword [ecx]
sub eax, 0x6824
je 0x1000f187
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x7c]
cmp dword [ecx], ebx
je 0x1000f18f
mov eax, dword [esp + 0x54]
mov eax, dword [esp + 0x2c]
xor ecx, ecx
mov eax, dword [esp + 0x7c]
cmp dword [eax], ebx
setne cl
cmp ecx, dword [esp + 0x2c]
je 0x1000f1af
cmp dword [esp + 0x1c], ebx
je 0x1000f1af
xor eax, eax
inc eax
jmp 0x1000f1b1
mov eax, ebx
xor ecx, ecx
cmp eax, 0xba27
mov eax, dword [esp + 0x7c]
sete cl
xor edx, edx
cmp ecx, dword [eax]
setl dl
sub edx, 0x9edb
mov dword [esp + 0x1c], edx
mov dword [esp + 0x14], ebx
jmp 0x1000f206
mov dword [esp + 0x10], ebx
jmp 0x1000f1fc
mov dword [esp + 0x1c], 0x4855f075
lea ecx, [esp + 0xa4]
mov dword [esp + 0x1c], 0x1851aa8c
call fcn.1000ec3f
inc dword [esp + 0x10]
cmp dword [esp + 0x10], ebx
jle 0x1000f1dc
inc dword [esp + 0x14]
cmp dword [esp + 0x14], ebx
jle 0x1000f1d6
lea ecx, [esp + 0xa4]
call fcn.10012ac7
or dword [esp + 0x3e4], 0xffffffff
lea ecx, [esp + 0x7c]
call fcn.10012ac7
dec dword [esp + 0x2c]
cmp dword [esp + 0x2c], 0xffffffef
jne 0x1000f0e9
cmp dword [esi + 0x10], ebx
jne 0x1000f244
xor al, al
jmp 0x1000fd21
push 1
lea ecx, [esp + 0x124]
call fcn.10012a45
lea edx, [esp + 0x120]
lea ecx, [esp + 0xb0]
call fcn.1000ec45
mov byte [esp + 0xf], bl
cmp byte [esp + 0xf], 0
je 0x1000f275
call fcn.1000ec64
mov byte [esp + 0xf], bl
cmp byte [esp + 0xf], 0
je 0x1000f285
call fcn.1000ec77
lea ecx, [esp + 0x120]
call fcn.10012ac7
lea eax, [esp + 0x4c]
push eax
push ebx
push 0xd22
call fcn.10010307
add esp, 0xc
mov dword [esp + 0x10], 0xc05baf43
mov dword [esp + 0x8c], 0xfffffff9
lea ecx, [esp + 0x34]
mov dword [esp + 0x34], 0xeede
call fcn.1000ec8c
push 5
mov dword [esp + 0x38], ebx
cmp dword [esp + 0x38], 3
pop edi
mov dword [esp + 0x40], edi
jge 0x1000f5e4
mov dword [esp + 0x98], 0xffffffff
mov dword [esp + 0x10], ebx
jmp 0x1000f5c6
push 1
lea ecx, [esp + 0xf8]
call fcn.10012a45
mov dword [esp + 0x1c], 0x16c8
cmp dword [esp + 0x1c], 0x6b6
jge 0x1000f55d
mov edi, ebx
mov dword [esp + 0x1c], ebx
mov esi, ebx
mov dword [esp + 0x14], ebx
call fcn.1005418a
cmp al, 0xa
je 0x1000f34a
mov byte [esp + edi + 0x338], al
inc edi
call fcn.1005418a
cmp al, 0xa
jne 0x1000f32b
mov dword [esp + 0x1c], edi
jmp 0x1000f34a
mov byte [esp + esi + 0x1c8], al
inc esi
call fcn.1005418a
cmp al, 0xa
jne 0x1000f342
mov eax, ebx
test esi, esi
jle 0x1000f37c
mov ebx, dword [esp + 0x14]
mov cl, byte [esp + eax + 0x1c8]
cmp cl, 0x20
je 0x1000f371
mov byte [esp + ebx + 0x1c8], cl
inc ebx
inc eax
cmp eax, esi
jl 0x1000f35d
mov dword [esp + 0x14], ebx
xor ebx, ebx
push 6
mov esi, dword [esp + 0x20]
lea edi, [esp + 0x15c]
xor eax, eax
mov dword [esp + 0x3c], ebx
pop ecx
rep stosd dword es:[edi], eax
mov ecx, ebx
stosw word es:[edi], ax
mov byte [esp + 0x168], 1
test esi, esi
jle 0x1000f3ec
mov al, byte [esp + ecx + 0x338]
mov byte [esp + 0xf], al
cmp al, 0x20
je 0x1000f3e3
movsx edi, al
cmp byte [esp + edi + 0xf7], 0
jne 0x1000f3e3
mov eax, ebx
sub byte [esp + 0xf], 0x20
cdq
idiv dword [esp + 0x40]
mov byte [esp + edi + 0xf7], 1
imul eax, eax, 5
add eax, edx
mov dl, byte [esp + 0xf]
inc ebx
mov byte [esp + eax + 0xd8], dl
inc ecx
cmp ecx, esi
jl 0x1000f3a2
mov dword [esp + 0x38], ebx
mov ebx, dword [esp + 0x38]
lea esi, [esp + 0x158]
mov cl, 0x41
cmp byte [esi], 0
push 5
pop edi
jne 0x1000f413
mov eax, ebx
cdq
idiv edi
imul eax, eax, 5
add eax, edx
inc ebx
mov byte [esp + eax + 0xd8], cl
inc cl
inc esi
cmp cl, 0x5a
jle 0x1000f3f9
xor ebx, ebx
lea esi, [esp + 0xd8]
mov edx, ebx
mov ecx, ebx
movsx eax, byte [esi + ecx]
mov dword [esp + eax*4 + 0x1cc], ecx
inc ecx
mov dword [esp + eax*4 + 0x164], edx
cmp ecx, edi
jl 0x1000f428
inc edx
add esi, edi
cmp edx, edi
jl 0x1000f426
mov eax, dword [esp + 0x14]
mov esi, ebx
test eax, eax
jle 0x1000f552
lea ebx, [eax - 1]
cmp esi, ebx
je 0x1000f47e
mov al, byte [esp + esi + 0x1c8]
mov cl, byte [esp + esi + 0x1c9]
cmp al, cl
je 0x1000f47e
movsx eax, al
movsx ecx, cl
sub eax, 0x61
sub ecx, 0x61
add esi, 2
jmp 0x1000f48d
movsx eax, byte [esp + esi + 0x1c8]
push 0x17
sub eax, 0x61
inc esi
pop ecx
mov edx, dword [esp + ecx*4 + 0x268]
mov edi, dword [esp + eax*4 + 0x2d0]
mov dword [esp + 0x38], edx
mov edx, dword [esp + ecx*4 + 0x2d0]
mov ecx, dword [esp + eax*4 + 0x268]
cmp ecx, dword [esp + 0x38]
jne 0x1000f4ec
lea eax, [edx + 1]
imul ecx, ecx, 5
cdq
idiv dword [esp + 0x40]
add edx, ecx
movsx eax, byte [esp + edx + 0xd8]
push eax
push 5
lea eax, [edi + 1]
cdq
pop edi
idiv edi
add edx, ecx
movsx eax, byte [esp + edx + 0xdc]
push eax
push 0x1000bde4
call fcn.10053e1f
add esp, 0xc
jmp 0x1000f546
cmp edi, edx
jne 0x1000f518
mov eax, dword [esp + 0x38]
inc eax
cdq
idiv dword [esp + 0x40]
imul eax, edx, 5
add eax, edi
movsx eax, byte [esp + eax + 0xd8]
push eax
lea eax, [ecx + 1]
cdq
push 5
pop ecx
idiv ecx
imul eax, edx, 5
add eax, edi
jmp 0x1000f52d
imul eax, dword [esp + 0x38], 5
add eax, edi
movsx eax, byte [esp + eax + 0xd8]
push eax
imul eax, ecx, 5
add eax, edx
movsx eax, byte [esp + eax + 0xdc]
push eax
push 0x1000bde4
call fcn.10053e1f
add esp, 0xc
push 5
pop edi
cmp esi, dword [esp + 0x14]
jl 0x1000f457
xor ebx, ebx
push 0x1000bdec
call fcn.10053e1f
pop ecx
mov dword [esp + 0x94], 0xd7494dfd
mov dword [esp + 0x14], ebx
jmp 0x1000f584
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0xf4]
mov dword [eax + ecx*4], 7
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 1
jl 0x1000f56e
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x9c]
push eax
lea eax, [esp + 0x94]
push eax
lea edx, [esp + 0x100]
lea ecx, [esp + 0xa0]
call fcn.1000ec8f
add esp, 0xc
lea ecx, [esp + 0xf4]
call fcn.10012ac7
dec dword [esp + 0x10]
cmp dword [esp + 0x10], 0xfffffffb
jle 0x1000f2f2
inc dword [esp + 0x34]
cmp dword [esp + 0x34], 3
jl 0x1000f2de
mov esi, dword [esp + 0x18]
cmp dword [esi + 0x14], 0x10
jb 0x1000f5ee
mov ecx, dword [esi]
jmp 0x1000f5f0
mov ecx, esi
cmp dword [esi + 0x14], 0x10
mov dword [esp + 0x5c], ecx
jb 0x1000f5fe
mov edx, dword [esi]
jmp 0x1000f600
mov edx, esi
mov eax, dword [esi + 0x10]
add eax, edx
cmp ecx, eax
je 0x1000fbbf
mov al, byte [ecx]
cmp al, 0x30
jl 0x1000f683
cmp al, 0x39
jg 0x1000f683
mov dword [esp + 0x18], 0x8ade19d2
mov dword [esp + 0x1c], 1
mov dword [esp + 0x1c], 8
mov dword [esp + 0x1c], 0x5db34e6d
mov eax, dword [esp + 0x18]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x1c], eax
mov byte [esp + 0xf], bl
cmp byte [esp + 0xf], 0
je 0x1000f657
call fcn.1000ed11
push 0x6a66
lea eax, [esp + 0x60]
push eax
push 0x58ff
push ebx
lea eax, [esp + 0x5c]
push eax
push 0x5d8f
call fcn.10011ccb
mov ecx, dword [esp + 0x74]
add esp, 0x18
inc ecx
jmp 0x1000f5f0
push 4
pop edi
push edi
lea ecx, [esp + 0x68]
call fcn.10012a45
mov dword [esp + 0x3e4], 1
mov dword [esp + 0x28], 0xe76f5020
mov dword [esp + 0x14], ebx
jmp 0x1000f6bc
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x64]
mov dword [eax + ecx*4], 6
inc dword [esp + 0x14]
cmp dword [esp + 0x14], edi
jl 0x1000f6a9
mov dword [esp + 0x28], 3
cmp dword [esp + 0x28], ebx
jl 0x1000f97a
mov dword [esp + 0x20], 0xffffffff
mov dword [esp + 0x18], 0xee1d459
mov dword [esp + 0x1c], 0x78e60d74
mov dword [esp + 0x58], ebx
mov dword [esp + 0x10], 0xfffffff9
mov dword [esp + 0x18], 0x18bf
cmp dword [esp + 0x18], 0xed7
jge 0x1000f7ca
lea eax, [esp + 0x50]
push eax
push 0x1000bdd0
call fcn.10053beb
pop ecx
pop ecx
push dword [esp + 0x50]
lea ecx, [esp + 0xb8]
call fcn.10012c3f
mov edx, dword [esp + 0x50]
mov esi, dword [esp + 0xb4]
mov dword [esp + 0x18], ebx
test edx, edx
jle 0x1000f769
mov ebx, esi
mov esi, dword [esp + 0x18]
push ebx
push 0x1000bdd0
call fcn.10053beb
mov edx, dword [esp + 0x58]
inc esi
pop ecx
add ebx, edi
pop ecx
cmp esi, edx
jl 0x1000f748
mov esi, dword [esp + 0xb4]
xor ebx, ebx
xor eax, eax
mov ecx, ebx
inc eax
dec edx
mov dword [esp + 0x18], edx
cmp edx, eax
jle 0x1000f79d
mov ebx, edx
mov edx, dword [esi + eax*4]
cmp dword [esi + eax*4 - 4], edx
jle 0x1000f78d
cmp edx, dword [esi + eax*4 + 4]
jge 0x1000f789
inc ecx
cmp dword [esi + eax*4 - 4], edx
jge 0x1000f796
cmp edx, dword [esi + eax*4 + 4]
jle 0x1000f796
inc ecx
inc eax
cmp eax, ebx
jl 0x1000f779
xor ebx, ebx
push ecx
push 0x1000bdf0
call fcn.10053e1f
pop ecx
pop ecx
test esi, esi
je 0x1000f7ca
push esi
call fcn.10053f87
pop ecx
mov dword [esp + 0xb4], ebx
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xbc], ebx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x90], 0xfffffffb
mov dword [esp + 0x14], ebx
jmp 0x1000f7f5
mov eax, dword [esp + 0x14]
mov dword [esp + eax*4 + 0x19c], 0xf874acc0
inc dword [esp + 0x14]
cmp dword [esp + 0x14], edi
jl 0x1000f7e2
mov dword [esp + 0x20], ebx
cmp dword [esp + 0x20], 3
jg 0x1000f94a
push 3
lea ecx, [esp + 0x74]
call fcn.10012a45
mov dword [esp + 0x60], 0xffffffff
mov dword [esp + 0x14], ebx
jmp 0x1000f833
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x70]
or dword [eax + ecx*4], 0xffffffff
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 3
jl 0x1000f823
mov edi, dword [esp + 0x70]
mov dword [edi + 4], ebx
mov dword [esp + 0x1c], 0xffffffff
mov dword [esp + 0x40], 0x7017a68f
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x64]
cmp dword [eax + ecx*4], ebx
jne 0x1000f8f8
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x28]
mov eax, dword [esp + 0x20]
sub eax, 8
neg eax
sbb eax, eax
inc eax
mov dword [esp + 0x18], eax
je 0x1000f88a
mov eax, dword [esp + 0x70]
cmp dword [eax + 8], ebx
je 0x1000f88a
xor eax, eax
inc eax
jmp 0x1000f88c
mov eax, ebx
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x1a8]
mov eax, dword [edi + 4]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x40]
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
mov eax, dword [esp + 0x28]
mov eax, dword [esp + 0x28]
mov eax, dword [esp + 0x40]
mov esi, dword [esp + 0x20]
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x64]
mov eax, dword [eax + ecx*4]
mov dword [edx + esi*4], eax
mov eax, dword [esp + 0x28]
mov eax, dword [esp + 0x70]
mov eax, dword [eax + 8]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x58]
inc dword [edi + 4]
cmp dword [edi + 4], 3
mov dword [esp + 0x10], eax
jle 0x1000f841
lea eax, [esp + 0x90]
push eax
lea eax, [esp + 0xa4]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0x3c]
push eax
lea edx, [esp + 0x7c]
lea ecx, [esp + 0x78]
call fcn.1000ed1a
add esp, 0x18
lea ecx, [esp + 0x70]
call fcn.10012ac7
inc dword [esp + 0x20]
cmp dword [esp + 0x20], 3
jle 0x1000f80a
push 4
pop edi
mov dword [esp + 0x10], 3
cmp dword [esp + 0x10], ebx
jl 0x1000f970
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x64]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
dec dword [esp + 0x10]
jns 0x1000f958
dec dword [esp + 0x28]
jns 0x1000f6d4
or dword [esp + 0x3e4], 0xffffffff
lea ecx, [esp + 0x64]
call fcn.10012ac7
push 0x53a7
lea eax, [esp + 0x50]
push ebx
push eax
call fcn.10010189
add esp, 0xc
lea ecx, [esp + 0x110]
push 1
call fcn.10012a45
mov dword [esp + 0x3e4], 2
lea eax, [esp + 0x194]
push dword [esp + 0xb0]
movdqa xmm0, xmmword [0x1000c6f0]
lea ecx, [esp + 0xd0]
push eax
lea eax, [esp + 0x18c]
mov dword [esp + 0xd4], ebx
push eax
push ebx
movdqu xmmword [esp + 0x194], xmm0
mov dword [esp + 0xe0], ebx
mov dword [esp + 0xe4], ebx
call fcn.10016c3e
xor ecx, ecx
mov byte [esp + 0x3e4], 3
mov dword [esp + 0x3c], ebx
inc ecx
jmp 0x1000fa1e
mov eax, dword [esp + 0x3c]
mov dword [esp + eax*4 + 0x48], ecx
inc dword [esp + 0x3c]
cmp dword [esp + 0x3c], ecx
jl 0x1000fa12
lea edx, [esp + 0x110]
lea ecx, [esp + 0x3c]
call fcn.1000ed81
push 9
mov dword [esp + 0x4c], 0xffffffe8
pop esi
jmp 0x1000fa92
push 1
lea ecx, [esp + 0x130]
call fcn.10012a45
mov dword [esp + 0x18], 0x68108531
lea edx, [esp + 0x12c]
mov dword [esp + 0x18], 0xfffffffd
lea ecx, [esp + 0x11c]
mov dword [esp + 0x18], 0x8210
mov dword [esp + 0x1c], esi
call fcn.1000ed9d
inc dword [esp + 0x1c]
lea ecx, [esp + 0x12c]
call fcn.10012ac7
inc dword [esp + 0x48]
cmp dword [esp + 0x48], esi
jl 0x1000fa41
lea ecx, [esp + 0xcc]
call fcn.10012ac7
or dword [esp + 0x3e4], 0xffffffff
lea ecx, [esp + 0x110]
call fcn.10012ac7
push 3
lea ecx, [esp + 0x150]
call fcn.10012a45
push 2
lea ecx, [esp + 0xc4]
mov dword [esp + 0x3e8], edi
call fcn.10012a45
mov dword [esp + 0x14], 0xe9bf9f36
lea edx, [esp + 0x14c]
lea ecx, [esp + 0x24]
call fcn.1000edbc
push 2
mov dword [esp + 0x28], ebx
pop edx
jmp 0x1000fb12
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0xc0]
mov dword [eax + ecx*4], 0xad59e57a
inc dword [esp + 0x24]
cmp dword [esp + 0x24], edx
jl 0x1000fafc
mov dword [esp + 0x24], ebx
jmp 0x1000fb2d
mov eax, dword [esp + 0x24]
mov dword [esp + eax*4 + 0x1b8], esi
inc dword [esp + 0x24]
cmp dword [esp + 0x24], edi
jl 0x1000fb1e
mov esi, dword [esp + 0xc0]
mov dword [esi + 4], edx
mov dword [esp + 0x30], 0x576c
lea ecx, [esp + 0x30]
call fcn.1000ec8c
mov dword [esp + 0x30], ebx
jmp 0x1000fb77
mov byte [esp + 0xf], bl
cmp byte [esp + 0xf], 0
je 0x1000fb6f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ShowCaret]
push 2
pop edx
mov eax, dword [esp + 0x30]
inc dword [esp + 0x30]
cmp dword [esp + 0x30], edx
jle 0x1000fb54
dec dword [esi + 4]
jns 0x1000fb3d
mov dword [esp + 0x14], 1
cmp dword [esp + 0x14], ebx
jl 0x1000fba2
lea ecx, [esp + 0xc0]
call fcn.1000eddb
dec dword [esp + 0x14]
jns 0x1000fb90
lea ecx, [esp + 0xc0]
call fcn.10012ac7
lea ecx, [esp + 0x14c]
call fcn.10012ac7
jmp 0x1000f23d
mov eax, 0xe56f9b2c
mov dword [esp + 0x100], eax
mov dword [esp + 0x104], eax
mov dword [esp + 0x108], eax
mov dword [esp + 0x10c], eax
mov dword [esp + 0x10], ebx
mov dword [esp + 0x18], edi
mov dword [esp + 0x18], 0xffffffff
mov dword [esp + 0x18], 8
mov dword [esp + 0x10], ebx
jmp 0x1000fc11
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x138], 3
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 2
jl 0x1000fbfe
mov dword [esp + 0x10], ebx
jmp 0x1000fc31
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x194], 0x2603
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 2
jl 0x1000fc1e
mov eax, dword [esp + 0x100]
xor ecx, ecx
cmp eax, 0x99fb
setne cl
mov dword [esp + 0x10], ecx
mov dword [esp + 0x10], 6
cmp dword [esp + 0x10], 0xfffffff3
jl 0x1000fd1f
push 4
pop edi
push 0xfffffffffffffff8
pop esi
mov dword [esp + 0x18], 0x3e93
lea ecx, [esp + 0x140]
mov dword [esp + 0x18], esi
mov dword [esp + 0x18], 1
mov dword [esp + 0x18], esi
mov dword [esp + 0x18], 0x426a760
mov dword [esp + 0x18], 0xfffffff6
mov dword [esp + 0x18], ebx
mov dword [esp + 0x18], 0xb611fb8e
push edi
call fcn.10012a45
push 5
pop eax
mov dword [esp + 0x3e4], eax
lea edx, [esp + 0x140]
mov dword [esp + 0x18], 1
lea ecx, [esp + 0x44]
mov dword [esp + 0x18], 0xfffffffb
call fcn.1000eec6
mov dword [esp + 0x44], ebx
jmp 0x1000fcea
mov eax, dword [esp + 0x44]
mov dword [esp + eax*4 + 0x1ac], 0x7da19ae8
inc dword [esp + 0x44]
cmp dword [esp + 0x44], 3
jl 0x1000fcd7
mov dword [esp + 0x138], 1
lea ecx, [esp + 0x140]
or dword [esp + 0x3e4], 0xffffffff
call fcn.10012ac7
dec dword [esp + 0x10]
cmp dword [esp + 0x10], 0xfffffff3
jge 0x1000fc66
mov al, 1
mov ecx, dword [esp + 0x3dc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret