Function at 0x1002d06b
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x8c
push ebx
mov ebx, dword [ebp + 8]
push esi
xor esi, esi
mov dword [ebp - 0x10], esi
mov edx, dword [ebx + 8]
mov dword [ebp - 4], edx
mov dword [ebp - 0x14], esi
mov dword [ebp - 0xc], esi
test edx, edx
jne 0x1002d095
xor eax, eax
jmp 0x1002d2cd
push edi
mov edi, dword [ebp + 0xc]
test edi, edi
jne 0x1002d0a2
push 0x67
pop ecx
jmp 0x1002d0a5
movzx ecx, byte [edi]
lea eax, [ecx - 0x13]
mov dword [ebp - 8], ecx
cmp eax, 0x8c
ja case.0x1002d0bd.21
movzx eax, byte [eax + 0x1002dbbf]
jmp dword [eax*4 + 0x1002db4b]
mov edi, dword [edi + 0xc]
mov dword [ebp + 0xc], edi
jmp 0x1002d099
movsx eax, word [edi + 0x22]
mov ecx, dword [edi + 0x28]
imul eax, eax, 0x18
add eax, dword [ecx + 0x1c]
cmp byte [ecx], 0
jne 0x1002d0e6
mov eax, dword [eax + 0x10]
jmp 0x1002d2cc
cmp byte [ecx + 1], 0
je case.0x1002d0bd.148
mov ebx, dword [ebp + 0x10]
push ebx
push dword [eax + 0xc]
push dword [ecx + 8]
push 0x62
jmp 0x1002d189
mov ecx, dword [edi + 0x1c]
test ecx, ecx
jns 0x1002d117
mov ecx, dword [ebx + 0x38]
test ecx, ecx
jns 0x1002d116
movsx eax, word [edi + 0x20]
sub eax, ecx
jmp 0x1002d2cc
dec ecx
movzx eax, byte [edi + 0x26]
push eax
push dword [ebp + 0x10]
movsx eax, word [edi + 0x20]
push ecx
push eax
push dword [edi + 0x2c]
push ebx
call fcn.1001aa95
add esp, 0x18
jmp 0x1002d2cc
mov esi, dword [ebp + 0x10]
push esi
push 0
push edi
jmp 0x1002d35a
mov eax, dword [edi + 8]
xor ecx, ecx
mov ebx, dword [ebp + 0x10]
push ebx
cmp byte [eax + 4], cl
sete cl
push ecx
push 0x43
push edx
call fcn.1001aa95
jmp 0x1002d37c
mov ebx, dword [ebp + 0x10]
push ebx
push esi
push dword [edi + 8]
jmp 0x1002d376
push dword [edi + 8]
mov ebx, dword [ebp + 0x10]
push ebx
push edx
call fcn.1001aa95
add esp, 0xc
jmp 0x1002d86e
mov ebx, dword [ebp + 0x10]
push esi
push ebx
push esi
push 0x46
push edx
call fcn.1001aa95
add esp, 0x14
jmp 0x1002d86e
push dword [ebp + 0x10]
movsx eax, word [edi + 0x20]
push eax
push 0x49
push edx
call fcn.1001aa95
mov eax, dword [edi + 8]
add esp, 0x10
cmp byte [eax + 1], 0
je 0x1002d76e
movsx eax, word [edi + 0x20]
mov esi, dword [ebx + 0x19c]
push eax
push esi
call fcn.1001aa95
and dword [esi], 0
push 0xffffffffffffffff
push eax
push dword [ebp - 4]
call fcn.1001aa95
add esp, 0x14
jmp 0x1002d76e
mov eax, dword [edi + 0x1c]
jmp 0x1002d2cc
mov esi, dword [ebp + 0x10]
push esi
push dword [edi + 0xc]
push ebx
call fcn.1001aa95
add esp, 0xc
mov dword [ebp - 0x18], eax
cmp eax, esi
je 0x1002d20f
push esi
push eax
push 0x4c
push dword [ebp - 4]
call fcn.1001aa95
add esp, 0x10
mov dword [ebp - 0x18], esi
push 0
push dword [edi + 8]
call fcn.1001aa95
movsx eax, al
push eax
push esi
push 0x52
push dword [ebp - 4]
call fcn.1001aa95
mov esi, dword [ebp - 0x18]
push 1
push esi
push ebx
call fcn.1001aa95
add esp, 0x24
jmp 0x1002d885
xor eax, eax
mov dword [ebp - 0xc], 0x80
cmp ecx, 0x2d
sete al
lea edx, [eax + 0x34]
mov dword [ebp - 8], edx
jmp 0x1002d256
mov edx, dword [ebp - 8]
mov eax, dword [edi + 0xc]
push eax
mov dword [ebp - 0x18], eax
call fcn.1001aa95
pop ecx
cmp eax, 1
jle 0x1002d2d1
push dword [ebp - 0xc]
push edx
push dword [ebp + 0x10]
push edi
push ebx
call fcn.1001aa95
add esp, 0x14
mov edi, dword [ebp + 0x10]
push dword [ebp - 0x10]
push ebx
call fcn.1001aa95
cmp dword [ebp - 0x14], 0
pop ecx
pop ecx
je 0x1002d2ca
mov cl, byte [ebx + 0x13]
cmp cl, 8
jae 0x1002d2ca
movzx edx, byte [ebx + 0x19]
lea eax, [ebx + 0x94]
test edx, edx
je 0x1002d2ba
mov ebx, dword [ebp - 0x14]
cmp dword [eax + 0xc], ebx
mov ebx, dword [ebp + 8]
je 0x1002db42
inc esi
add eax, 0x14
cmp esi, edx
jl 0x1002d2a3
movzx eax, cl
mov ecx, dword [ebp - 0x14]
mov dword [ebx + eax*4 + 0x15c], ecx
inc byte [ebx + 0x13]
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x18]
push ebx
call fcn.1001aa95
mov esi, eax
lea eax, [ebp - 0x14]
push eax
push dword [edi + 0x10]
push ebx
call fcn.1001aa95
mov ecx, dword [ebp - 0xc]
or ecx, 0x20
push ecx
push dword [ebp + 0x10]
push eax
push esi
push dword [ebp - 8]
push dword [edi + 0x10]
push dword [ebp - 0x18]
push ebx
call fcn.1001aa95
add esp, 0x38
xor esi, esi
jmp 0x1002d279
lea eax, [ebp - 0x10]
push eax
push dword [edi + 0xc]
push ebx
call fcn.1001aa95
mov esi, eax
lea eax, [ebp - 0x14]
push eax
push dword [edi + 0x10]
push ebx
call fcn.1001aa95
mov edi, dword [ebp + 0x10]
push edi
push esi
push eax
push dword [ebp - 8]
push dword [ebp - 4]
call fcn.1001aa95
add esp, 0x2c
xor esi, esi
jmp 0x1002d27c
mov eax, dword [edi + 0xc]
mov cl, byte [eax]
cmp cl, 0x88
jne 0x1002d368
mov esi, dword [ebp + 0x10]
push esi
push 1
push eax
push ebx
call fcn.1001aa95
add esp, 0x10
jmp 0x1002d885
cmp cl, 0x86
jne 0x1002d384
mov ebx, dword [ebp + 0x10]
push ebx
push 1
push dword [eax + 8]
push edx
call fcn.1001aa95
add esp, 0x10
jmp 0x1002d86e
lea eax, [ebp - 0x10]
mov byte [ebp - 0x5c], 0x88
push eax
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x58], 0x4400
push eax
push ebx
mov dword [ebp - 0x54], esi
call fcn.1001aa95
mov esi, eax
lea eax, [ebp - 0x14]
push eax
push dword [edi + 0xc]
push ebx
call fcn.1001aa95
mov edi, dword [ebp + 0x10]
push edi
push esi
push eax
push 0x5a
jmp 0x1002d337
lea eax, [ebp - 0x10]
push eax
push dword [edi + 0xc]
push ebx
call fcn.1001aa95
mov edi, dword [ebp + 0x10]
push edi
push eax
push dword [ebp - 8]
push dword [ebp - 4]
call fcn.1001aa95
add esp, 0x1c
jmp 0x1002d27c
lea eax, [ebp - 0x10]
push eax
push dword [edi + 0xc]
push ebx
call fcn.1001aa95
mov esi, eax
xor ecx, ecx
mov eax, dword [edi + 0x10]
cmp byte [edi + 0x26], 0x2d
mov edi, dword [ebp + 0x10]
sete cl
mov eax, dword [eax + 8]
mov dl, byte [eax + 4]
xor eax, eax
test dl, dl
sete al
xor ecx, eax
xor eax, eax
push ecx
test dl, dl
setne al
push eax
push edi
push esi
push 0x5f
push dword [ebp - 4]
call fcn.1001aa95
add esp, 0x24
jmp 0x1002d342
push esi
push dword [ebp + 0x10]
push 1
push 0x43
push edx
call fcn.1001aa95
lea eax, [ebp - 0x10]
push eax
push dword [edi + 0xc]
push ebx
call fcn.1001aa95
push eax
push dword [ebp - 8]
push dword [ebp - 4]
call fcn.1001aa95
mov edi, dword [ebp + 0x10]
mov esi, eax
xor eax, eax
push eax
push edi
push eax
push 0x43
push dword [ebp - 4]
call fcn.1001aa95
add esp, 0x40
push esi
push dword [ebp - 4]
call fcn.1001aa95
pop ecx
pop ecx
jmp 0x1002d342
mov eax, dword [edi + 0x28]
test eax, eax
jne 0x1002d496
push dword [edi + 8]
push str.misuse_of_aggregate:__s__
push ebx
call fcn.1001aa95
add esp, 0xc
jmp 0x1002d279
movsx ecx, word [edi + 0x22]
mov eax, dword [eax + 0x28]
add ecx, ecx
mov eax, dword [eax + ecx*8 + 8]
jmp 0x1002d2cc
cmp byte [ebx + 0x17], 0
mov edx, dword [ebx]
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x18], esi
mov al, byte [edx + 0x46]
mov byte [ebp - 0x24], al
je 0x1002d4e0
push esi
push 2
push edi
call fcn.1001aa95
add esp, 0xc
test eax, eax
je 0x1002d4dd
push 0xffffffffffffffff
push edi
push ebx
call fcn.1001aa95
jmp 0x1002d5d6
mov edx, dword [ebp - 0xc]
test dword [edi + 4], 0x4000
je 0x1002d5ab
mov dword [ebp - 8], esi
mov eax, esi
mov ecx, dword [edi + 8]
push esi
push dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
push eax
push ecx
push edx
mov dword [ebp - 0x2c], ecx
call fcn.1001aa95
add esp, 0x14
mov dword [ebp - 0x24], eax
test eax, eax
je 0x1002d776
cmp dword [eax + 0x10], esi
jne 0x1002d776
movzx eax, word [eax + 2]
test eax, 0x200
je 0x1002d5c0
push dword [ebp - 4]
call fcn.1001aa95
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 8]
push edi
push dword [eax + 4]
push ebx
call fcn.1001aa95
mov eax, dword [ebp - 0x20]
add esp, 0x10
cmp eax, 1
jle 0x1002d599
mov ecx, dword [ebp - 8]
add ecx, 0x1c
dec eax
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x18], eax
push dword [ebp - 0x1c]
push edi
push 0x33
push dword [ebp - 4]
call fcn.1001aa95
push 1
push edi
push ebx
call fcn.1001aa95
mov eax, dword [ebp - 0xc]
inc dword [ebx + 0x3c]
push edi
push dword [eax]
push ebx
call fcn.1001aa95
push ebx
call fcn.1001aa95
add dword [ebp - 0xc], 0x18
add esp, 0x2c
sub dword [ebp - 0x18], 1
jne 0x1002d560
push dword [ebp - 0x1c]
push dword [ebp - 4]
call fcn.1001aa95
pop ecx
pop ecx
jmp 0x1002d27c
mov ecx, dword [edi + 0x14]
mov dword [ebp - 8], ecx
test ecx, ecx
je 0x1002d4f0
mov eax, dword [ecx]
jmp 0x1002d4f2
test eax, 0x400
je 0x1002d5de
mov eax, dword [ebp - 8]
push dword [ebp + 0x10]
push dword [eax + 4]
push ebx
call fcn.1001aa95
add esp, 0xc
jmp 0x1002d2cc
mov ecx, dword [ebp - 0x20]
mov edx, esi
mov dword [ebp - 0x14], edx
test ecx, ecx
jle 0x1002d64b
mov eax, dword [ebp - 8]
mov edi, dword [ebp - 0x24]
add eax, 4
mov dword [ebp - 0x10], eax
cmp edx, 0x20
jae 0x1002d619
push dword [eax]
call fcn.1001aa95
mov edx, dword [ebp - 0x14]
pop ecx
mov ecx, dword [ebp - 0x20]
test eax, eax
je 0x1002d616
mov eax, dword [ebp - 0x1c]
bts eax, edx
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x10]
test byte [edi + 2], 0x20
je 0x1002d63a
cmp dword [ebp - 0x18], esi
jne 0x1002d63a
push dword [eax]
push ebx
call fcn.1001aa95
mov edx, dword [ebp - 0x14]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x10]
inc edx
add eax, 0x18
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x10], eax
cmp edx, ecx
jl 0x1002d5f6
mov edi, dword [ebp + 0xc]
mov edx, dword [ebp - 8]
test edx, edx
je 0x1002d6c7
cmp dword [ebp - 0x1c], esi
je 0x1002d66d
mov eax, dword [ebx + 0x2c]
lea edi, [eax + 1]
add eax, ecx
mov dword [ebp - 0x14], edi
mov edi, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x14]
mov dword [ebx + 0x2c], eax
jmp 0x1002d67e
push ecx
push ebx
call fcn.1001aa95
mov edx, dword [ebp - 8]
pop ecx
pop ecx
mov ecx, eax
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x24]
test byte [eax + 2], 0xc0
je 0x1002d6ab
mov ebx, dword [edx + 4]
mov bl, byte [ebx]
mov byte [ebp - 0x25], bl
cmp bl, 0x94
mov ebx, dword [ebp + 8]
je 0x1002d69d
cmp byte [ebp - 0x25], 0x96
jne 0x1002d6ab
mov edi, dword [edx + 4]
mov al, byte [eax + 2]
and al, 0xc0
mov byte [edi + 0x26], al
mov edi, dword [ebp + 0xc]
inc dword [ebx + 0x3c]
push 3
push esi
push ecx
push edx
push ebx
call fcn.1001aa95
push ebx
call fcn.1001aa95
mov edx, dword [ebp - 8]
add esp, 0x18
jmp 0x1002d6ca
mov dword [ebp - 0x14], esi
mov eax, dword [ebp - 0x20]
cmp eax, 2
jl 0x1002d6ee
test byte [edi + 4], 0x80
je 0x1002d6ee
push dword [edx + 0x1c]
push eax
push dword [ebp - 0x24]
push dword [ebp - 0xc]
call fcn.1001aa95
add esp, 0x10
mov edi, eax
jmp 0x1002d6fa
test eax, eax
jle 0x1002d6f7
push dword [edx + 4]
jmp 0x1002d6db
mov edi, dword [ebp - 0x24]
test byte [edi + 2], 0x20
je 0x1002d723
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x1002d70d
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
push 0xfffffffffffffffe
push eax
push esi
push esi
push esi
mov esi, dword [ebp - 4]
push 0x4f
push esi
call fcn.1001aa95
add esp, 0x1c
jmp 0x1002d726
mov esi, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
push 0xfffffffffffffff8
push edi
push dword [ebp + 0x10]
mov edi, dword [ebp - 0x14]
neg eax
push edi
push dword [ebp - 0x1c]
sbb eax, eax
add eax, 0xa4
push eax
push esi
call fcn.1001aa95
mov eax, dword [ebp - 0x20]
movzx eax, al
push eax
push esi
call fcn.1001aa95
mov eax, dword [ebp - 0x20]
add esp, 0x24
test eax, eax
je 0x1002d76e
cmp dword [ebp - 0x1c], 0
jne 0x1002d76e
push eax
push edi
push ebx
call fcn.1001aa95
add esp, 0xc
mov eax, dword [ebp + 0x10]
jmp 0x1002d2cc
push dword [ebp - 0x2c]
push str.unknown_function:__s__
jmp 0x1002d488
cmp ecx, 0x78
jne 0x1002d7a9
mov eax, dword [edi + 0x14]
mov eax, dword [eax]
cmp dword [eax], 1
je 0x1002d7a9
push 1
push dword [eax]
push str.sub_select_returns__d_columns___expected__d
push ebx
call fcn.1001aa95
add esp, 0x10
jmp 0x1002d279
push esi
push esi
push edi
push ebx
call fcn.1001aa95
add esp, 0x10
jmp 0x1002d2cc
mov edx, dword [edi + 0xc]
cmp dword [edx + 0x1c], esi
jne 0x1002d7d9
push esi
push esi
push edx
push ebx
call fcn.1001aa95
mov ecx, eax
add esp, 0x10
mov eax, dword [edi + 0xc]
mov dword [eax + 0x1c], ecx
mov edx, dword [edi + 0xc]
mov esi, dword [edi + 0x1c]
test esi, esi
je 0x1002d7fe
push edx
call fcn.1001aa95
pop ecx
cmp esi, eax
je 0x1002d7fe
push eax
push esi
push str._d_columns_assigned__d_values
push ebx
call fcn.1001aa95
mov edx, dword [edi + 0xc]
add esp, 0x10
movsx eax, word [edi + 0x20]
add eax, dword [edx + 0x1c]
jmp 0x1002d2cc
push edx
call fcn.1001aa95
push dword [ebp - 4]
mov esi, eax
call fcn.1001aa95
mov edi, eax
xor eax, eax
push eax
push dword [ebp + 0x10]
push eax
push 0x46
push dword [ebp - 4]
call fcn.1001aa95
push edi
push esi
push dword [ebp + 0xc]
push ebx
call fcn.1001aa95
mov ebx, dword [ebp + 0x10]
push 0
push ebx
push 1
push 0x43
push dword [ebp - 4]
call fcn.1001aa95
add esp, 0x40
push esi
mov esi, dword [ebp - 4]
push esi
call fcn.1001aa95
xor eax, eax
push eax
push eax
push ebx
push 0x50
push esi
call fcn.1001aa95
push edi
push esi
call fcn.1001aa95
add esp, 0x24
mov eax, ebx
jmp 0x1002d2cc
push esi
push esi
mov esi, dword [ebp + 0x10]
push esi
push edi
push ebx
call fcn.1001aa95
add esp, 0x14
mov eax, esi
jmp 0x1002d2cc
mov eax, dword [edi + 0x2c]
push dword [ebp + 0x10]
mov dword [ebp - 0x2c], eax
movsx ecx, word [eax + 0x2a]
movsx eax, word [edi + 0x20]
inc ecx
imul ecx, dword [edi + 0x1c]
inc ecx
add eax, ecx
push eax
push 0x92
push edx
call fcn.1001aa95
movzx eax, word [edi + 0x20]
add esp, 0x10
test ax, ax
js 0x1002d279
mov edi, dword [ebp + 0x10]
movsx ecx, ax
mov eax, dword [ebp - 0x2c]
add ecx, ecx
mov eax, dword [eax + 4]
cmp byte [eax + ecx*8 + 0xd], 0x45
jne 0x1002d27c
push edi
push 0x51
push dword [ebp - 4]
call fcn.1001aa95
add esp, 0xc
jmp 0x1002d27c
push str.row_value_misused
push ebx
call fcn.1001aa95
pop ecx
pop ecx
jmp 0x1002d279
push dword [edi + 0x1c]
push 0x17
push edx
call fcn.1001aa95
push dword [ebp + 0x10]
inc dword [ebx + 0x3c]
mov esi, eax
push dword [edi + 0xc]
push ebx
call fcn.1001aa95
push ebx
mov edi, eax
call fcn.1001aa95
push esi
push dword [ebp - 4]
call fcn.1001aa95
push esi
push dword [ebp - 4]
call fcn.1001aa95
mov dword [eax + 0xc], edi
jmp 0x1002d33f
cmp dword [ebx + 0x7c], esi
jne 0x1002d956
push str.RAISE___may_only_be_used_within_a_trigger_program
push ebx
call fcn.1001aa95
pop ecx
pop ecx
xor eax, eax
jmp 0x1002d2cc
mov al, byte [edi + 1]
cmp al, 2
jne 0x1002d96d
cmp dword [ebx + 0x78], esi
mov eax, ebx
cmovne eax, dword [ebx + 0x78]
mov byte [eax + 0x15], 1
mov al, byte [edi + 1]
push esi
cmp al, 4
jne 0x1002d989
push dword [edi + 8]
push esi
push 4
push esi
push 0x42
push edx
call fcn.1001aa95
add esp, 0x1c
jmp 0x1002d279
push esi
push dword [edi + 8]
movsx eax, al
push eax
push 0x713
push ebx
call fcn.1001aa95
add esp, 0x18
jmp 0x1002d279
mov eax, dword [edi + 0x14]
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x20], eax
push edx
lea esi, [eax + 4]
mov eax, dword [eax]
mov dword [ebp - 8], esi
mov dword [ebp - 0x18], eax
call fcn.1001aa95
mov edx, dword [edi + 0xc]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x2c], edx
pop ecx
test edx, edx
je 0x1002da2b
push 0xc
pop ecx
lea eax, [ebp - 0x10]
mov esi, edx
push eax
lea eax, [ebp - 0x5c]
push eax
lea edi, [ebp - 0x5c]
rep movsd dword es:[edi], dword [esi]
push ebx
call fcn.1001aa95
mov cl, byte [ebp - 0x5c]
xor esi, esi
and dword [ebp - 0x58], 0xffffefff
push 0x30
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x8c]
push esi
push eax
mov byte [ebp - 0x36], cl
mov byte [ebp - 0x5c], 0x9a
call sub.VCRUNTIME140.dll_memset
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x80], eax
add esp, 0x18
lea eax, [ebp - 0x8c]
mov dword [ebp - 0x10], esi
mov esi, dword [ebp - 8]
mov byte [ebp - 0x8c], 0x35
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x18]
lea ecx, [eax - 1]
test ecx, ecx
jle 0x1002db00
lea eax, [ecx - 1]
shr eax, 1
inc eax
mov dword [ebp - 0xc], eax
test edx, edx
je 0x1002daaa
mov edi, dword [ebp + 0x10]
mov esi, dword [ebp - 4]
mov eax, dword [ebp - 8]
inc dword [ebx + 0x3c]
mov eax, dword [eax]
push esi
mov dword [ebp - 0x7c], eax
call fcn.1001aa95
push 0x10
mov esi, eax
push esi
push dword [ebp - 0x24]
push ebx
call fcn.1001aa95
mov eax, dword [ebp - 8]
push edi
push dword [eax + 0x18]
push ebx
call fcn.1001aa95
push dword [ebp - 0x1c]
push dword [ebp - 4]
call fcn.1001aa95
push ebx
call fcn.1001aa95
push esi
mov esi, dword [ebp - 4]
push esi
call fcn.1001aa95
mov eax, dword [ebp - 8]
add esp, 0x34
add eax, 0x30
sub dword [ebp - 0xc], 1
mov dword [ebp - 8], eax
jne 0x1002da4f
mov eax, dword [ebp - 0x18]
jmp 0x1002db03
inc dword [ebx + 0x3c]
push dword [ebp - 4]
mov esi, dword [esi]
call fcn.1001aa95
push 0x10
mov edi, eax
push edi
push esi
push ebx
call fcn.1001aa95
mov eax, dword [ebp - 8]
push dword [ebp + 0x10]
push dword [eax + 0x18]
push ebx
call fcn.1001aa95
push dword [ebp - 0x1c]
mov esi, dword [ebp - 4]
push esi
call fcn.1001aa95
push ebx
call fcn.1001aa95
push edi
push esi
call fcn.1001aa95
mov esi, dword [ebp - 8]
add esp, 0x34
add esi, 0x30
sub dword [ebp - 0xc], 1
mov dword [ebp - 8], esi
jne 0x1002daaa
mov eax, dword [ebp - 0x18]
mov edi, dword [ebp + 0x10]
test al, 1
je 0x1002db2b
mov ecx, dword [ebp - 0x20]
inc dword [ebx + 0x3c]
imul eax, eax, 0x18
push edi
push dword [eax + ecx - 0x14]
push ebx
call fcn.1001aa95
push ebx
call fcn.1001aa95
add esp, 0x10
xor esi, esi
jmp 0x1002d599
xor esi, esi
push esi
push edi
push esi
push 0x46
push dword [ebp - 4]
call fcn.1001aa95
add esp, 0x14
jmp 0x1002d599
mov byte [eax + 6], 1
jmp 0x1002d2ca