Function at 0x10005490
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x1001f0b5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1dc
push ebx
push ebp
push esi
push edi
push 0xa
lea ecx, [esp + 0x24]
call fcn.10015780
mov eax, dword [0x10028ccc]
xor edi, edi
mov dword [esp + 0x1f4], edi
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 0x204]
mov byte [esp + 0x1f4], 4
call fcn.100164f2
lea ecx, [esp + 0x20]
call fcn.100157bf
mov ebp, dword [esp + 0x208]
mov esi, dword [esp + 0x1fc]
push 1
push ebp
lea eax, [esp + 0x6c]
push 2
push eax
push esi
mov dword [esp + 0x78], edi
call fcn.10003af0
add esp, 0x14
test eax, eax
jne 0x1000557d
lea ecx, [esp + 0x1c]
mov byte [esp + 0x1f4], 3
call fcn.10016567
lea ecx, [esp + 0x18]
mov byte [esp + 0x1f4], 2
call fcn.10016567
lea ecx, [esp + 0x10]
mov byte [esp + 0x1f4], 1
call fcn.10016567
lea ecx, [esp + 0x14]
mov byte [esp + 0x1f4], 0
call fcn.10016567
lea ecx, [esp + 0x20]
mov dword [esp + 0x1f4], 0xffffffff
call fcn.100157f4
xor eax, eax
jmp 0x10007014
cmp dword [esp + 0x64], edi
jne 0x100055e2
lea ecx, [esp + 0x1c]
mov byte [esp + 0x1f4], 3
call fcn.10016567
lea ecx, [esp + 0x18]
mov byte [esp + 0x1f4], 2
call fcn.10016567
lea ecx, [esp + 0x10]
mov byte [esp + 0x1f4], 1
call fcn.10016567
lea ecx, [esp + 0x14]
mov byte [esp + 0x1f4], 0
call fcn.10016567
lea ecx, [esp + 0x20]
mov dword [esp + 0x1f4], 0xffffffff
call fcn.100157f4
xor eax, eax
jmp 0x10007014
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0xc]
mov edi, dword [ebp]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x64]
cmp edi, eax
mov ebx, eax
jae 0x1000562d
sub eax, edi
push 1
mov ebx, eax
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x28]
mov edx, dword [esi]
lea eax, [esp + 0x50]
push 4
push eax
mov ecx, esi
call dword [edx + 0x34]
cmp eax, 4
jne 0x1000563b
cmp word [esp + 0x50], 0x3c
jne 0x1000563b
mov edi, dword [esp + 0x52]
and edi, 0xffff
mov edx, dword [esi]
push 1
push ebx
mov ecx, esi
call dword [edx + 0x28]
cmp edi, ebx
jae 0x1000569a
lea ecx, [esp + 0x1c]
mov byte [esp + 0x1f4], 3
call fcn.10016567
lea ecx, [esp + 0x18]
mov byte [esp + 0x1f4], 2
call fcn.10016567
lea ecx, [esp + 0x10]
mov byte [esp + 0x1f4], 1
call fcn.10016567
lea ecx, [esp + 0x14]
mov byte [esp + 0x1f4], 0
call fcn.10016567
lea ecx, [esp + 0x20]
mov dword [esp + 0x1f4], 0xffffffff
call fcn.100157f4
xor eax, eax
jmp 0x10007014
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0xc]
mov edx, dword [esi]
mov dword [esp + 0x4c], eax
mov edi, eax
mov eax, dword [esp + 0x3c]
push 0
push eax
mov ecx, esi
mov dword [esp + 0x58], edi
call dword [edx + 0x28]
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0xc]
cmp eax, edi
jae 0x10006ec1
mov ebx, dword [esp + 0x200]
mov edi, dword [esp + 0x20c]
push 1
push ebp
lea eax, [esp + 0x64]
push 1
push eax
push esi
call fcn.10003af0
add esp, 0x14
test eax, eax
je case.0x1000570f.34
mov ecx, dword [esp + 0x5c]
and ecx, 0xff
lea eax, [ecx - 1]
cmp eax, 0x7c
ja case.0x1000570f.34
xor edx, edx
mov dl, byte [eax + 0x100070b8]
jmp dword [edx*4 + 0x10007030]
cmp dword [esp + 0x2c], 1
jl case.0x1000570f.34
lea eax, [esp + 0x16c]
lea ecx, [esp + 0x20]
push eax
call fcn.1001599c
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x1f8], 5
call fcn.1001665c
lea ecx, [esp + 0x16c]
mov byte [esp + 0x1f4], 4
call fcn.10016567
mov ecx, dword [esp + 0x5c]
and ecx, 0xff
lea eax, [ecx - 0x12]
cmp eax, 3
ja case.default.0x1000592f
jmp dword [eax*4 + 0x10007138]
lea edx, [esp + 0x10]
lea eax, [esp + 0xa8]
push edx
push 0x10027ec4
push eax
call fcn.1001682c
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x1f8], 6
call fcn.100158f4
lea ecx, [esp + 0xa8]
mov byte [esp + 0x1f4], 4
call fcn.10016567
jmp case.default.0x1000592f
lea ecx, [esp + 0x10]
lea edx, [esp + 0x1dc]
push ecx
push 0x10027ec0
push edx
call fcn.1001682c
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x1f8], 7
call fcn.100158f4
lea ecx, [esp + 0x1dc]
mov byte [esp + 0x1f4], 4
call fcn.10016567
jmp case.default.0x1000592f
lea eax, [esp + 0x10]
push 0x10027ebc
lea ecx, [esp + 0x188]
push eax
push ecx
call fcn.100167b8
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x1f8], 8
call fcn.100158f4
lea ecx, [esp + 0x184]
mov byte [esp + 0x1f4], 4
call fcn.10016567
jmp case.default.0x1000592f
lea edx, [esp + 0x10]
lea eax, [esp + 0x124]
push edx
push 0x10027e84
push eax
call fcn.1001682c
push 0x10027e80
lea ecx, [esp + 0x78]
push eax
push ecx
mov byte [esp + 0x200], 9
call fcn.100167b8
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x1f8], 0xa
call fcn.100158f4
lea ecx, [esp + 0x74]
mov byte [esp + 0x1f4], 9
call fcn.10016567
lea ecx, [esp + 0x124]
mov byte [esp + 0x1f4], 4
call fcn.10016567
jmp case.default.0x1000592f
cmp dword [esp + 0x2c], 2
jl case.0x1000570f.34
lea edx, [esp + 0x7c]
lea ecx, [esp + 0x20]
push edx
call fcn.1001599c
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x1f8], 0xb
call fcn.1001665c
lea ecx, [esp + 0x7c]
mov byte [esp + 0x1f4], 4
call fcn.10016567
lea eax, [esp + 0x1e0]
lea ecx, [esp + 0x20]
push eax
call fcn.1001599c
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x1f8], 0xc
call fcn.1001665c
lea ecx, [esp + 0x1e0]
mov byte [esp + 0x1f4], 4
call fcn.10016567
mov ecx, dword [esp + 0x5c]
and ecx, 0xff
lea eax, [ecx - 3]
cmp eax, 0xe
ja case.default.0x1000592f
jmp dword [eax*4 + 0x10007148]
lea edx, [esp + 0x10]
push 0x10027ec4
lea eax, [esp + 0x134]
push edx
push eax
call fcn.100167b8
lea ecx, [esp + 0x18]
lea edx, [esp + 0x84]
push ecx
push eax
push edx
mov byte [esp + 0x200], 0xd
call fcn.10016752
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x1f8], 0xe
call fcn.100158f4
lea ecx, [esp + 0x84]
mov byte [esp + 0x1f4], 0xd
call fcn.10016567
lea ecx, [esp + 0x130]
mov byte [esp + 0x1f4], 4
call fcn.10016567
jmp case.default.0x1000592f
lea eax, [esp + 0x10]
push 0x10027ec0
lea ecx, [esp + 0x194]
push eax
push ecx
call fcn.100167b8
lea edx, [esp + 0x18]
mov byte [esp + 0x1f4], 0xf
push edx
push eax
lea eax, [esp + 0x94]
push eax
call fcn.10016752
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x1f8], 0x10
call fcn.100158f4
lea ecx, [esp + 0x8c]
mov byte [esp + 0x1f4], 0xf
call fcn.10016567
lea ecx, [esp + 0x190]
mov byte [esp + 0x1f4], 4
call fcn.10016567
jmp case.default.0x1000592f
lea ecx, [esp + 0x10]
push 0x10027eb8
lea edx, [esp + 0x140]
push ecx
push edx
call fcn.100167b8
lea ecx, [esp + 0x18]
lea edx, [esp + 0x94]
push ecx
push eax
push edx
mov byte [esp + 0x200], 0x11
call fcn.10016752
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x1f8], 0x12
call fcn.100158f4
lea ecx, [esp + 0x94]
mov byte [esp + 0x1f4], 0x11
call fcn.10016567
lea ecx, [esp + 0x13c]
mov byte [esp + 0x1f4], 4
call fcn.10016567
jmp case.default.0x1000592f
lea eax, [esp + 0x10]
push 0x10027eb4
lea ecx, [esp + 0x1c4]
push eax
push ecx
call fcn.100167b8
lea edx, [esp + 0x18]
mov byte [esp + 0x1f4], 0x13
push edx
push eax
lea eax, [esp + 0xa4]
push eax
call fcn.10016752
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x1f8], 0x14
call fcn.100158f4
lea ecx, [esp + 0x9c]
mov byte [esp + 0x1f4], 0x13
call fcn.10016567
lea ecx, [esp + 0x1c0]
mov byte [esp + 0x1f4], 4
call fcn.10016567
jmp case.default.0x1000592f
lea ecx, [esp + 0x10]
push 0x10027eb0
lea edx, [esp + 0x14c]
push ecx
push edx
call fcn.100167b8
lea ecx, [esp + 0x18]
lea edx, [esp + 0xa4]
push ecx
push eax
push edx
mov byte [esp + 0x200], 0x15
call fcn.10016752
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x1f8], 0x16
call fcn.100158f4
lea ecx, [esp + 0xa4]
mov byte [esp + 0x1f4], 0x15
call fcn.10016567
lea ecx, [esp + 0x148]
mov byte [esp + 0x1f4], 4
call fcn.10016567
jmp case.default.0x1000592f
lea eax, [esp + 0x10]
push 0x10027eac
lea ecx, [esp + 0x1a0]
push eax
push ecx
call fcn.100167b8
lea edx, [esp + 0x18]
mov byte [esp + 0x1f4], 0x17
push edx
push eax
lea eax, [esp + 0xb4]
push eax
call fcn.10016752
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x1f8], 0x18
call fcn.100158f4
lea ecx, [esp + 0xac]
mov byte [esp + 0x1f4], 0x17
call fcn.10016567
lea ecx, [esp + 0x19c]
mov byte [esp + 0x1f4], 4
call fcn.10016567
jmp case.default.0x1000592f
lea ecx, [esp + 0x10]
push str.____
lea edx, [esp + 0x158]
push ecx
push edx
call fcn.100167b8
lea ecx, [esp + 0x18]
lea edx, [esp + 0xb8]
push ecx
push eax
push edx
mov byte [esp + 0x200], 0x19
call fcn.10016752
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x1f8], 0x1a
call fcn.100158f4
lea ecx, [esp + 0xb8]
mov byte [esp + 0x1f4], 0x19
call fcn.10016567
lea ecx, [esp + 0x154]
mov byte [esp + 0x1f4], 4
call fcn.10016567
jmp case.default.0x1000592f
lea eax, [esp + 0x10]
push 0x10027ea4
lea ecx, [esp + 0x1dc]
push eax
push ecx
call fcn.100167b8
lea edx, [esp + 0x18]
mov byte [esp + 0x1f4], 0x1b
push edx
push eax
lea eax, [esp + 0xcc]
push eax
call fcn.10016752
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x1f8], 0x1c
call fcn.100158f4
lea ecx, [esp + 0xc4]
mov byte [esp + 0x1f4], 0x1b
call fcn.10016567
lea ecx, [esp + 0x1d8]
mov byte [esp + 0x1f4], 4
call fcn.10016567
jmp case.default.0x1000592f
lea ecx, [esp + 0x10]
push 0x10027ea0
lea edx, [esp + 0x164]
push ecx
push edx
call fcn.100167b8
lea ecx, [esp + 0x18]
lea edx, [esp + 0xd0]
push ecx
push eax
push edx
mov byte [esp + 0x200], 0x1d
call fcn.10016752
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x1f8], 0x1e
call fcn.100158f4
lea ecx, [esp + 0xd0]
mov byte [esp + 0x1f4], 0x1d
call fcn.10016567
lea ecx, [esp + 0x160]
mov byte [esp + 0x1f4], 4
call fcn.10016567
jmp case.default.0x1000592f
lea eax, [esp + 0x10]
push 0x10027e9c
lea ecx, [esp + 0x1ac]
push eax
push ecx
call fcn.100167b8
lea edx, [esp + 0x18]
mov byte [esp + 0x1f4], 0x1f
push edx
push eax
lea eax, [esp + 0xe4]
push eax
call fcn.10016752
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x1f8], 0x20
call fcn.100158f4
lea ecx, [esp + 0xdc]
mov byte [esp + 0x1f4], 0x1f
call fcn.10016567
lea ecx, [esp + 0x1a8]
mov byte [esp + 0x1f4], 4
call fcn.10016567
jmp case.default.0x1000592f
lea ecx, [esp + 0x10]
push 0x10027e98
lea edx, [esp + 0x6c]
push ecx
push edx
call fcn.100167b8
lea ecx, [esp + 0x18]
lea edx, [esp + 0xe8]
push ecx
push eax
push edx
mov byte [esp + 0x200], 0x21
call fcn.10016752
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x1f8], 0x22
call fcn.100158f4
lea ecx, [esp + 0xe8]
mov byte [esp + 0x1f4], 0x21
call fcn.10016567
lea ecx, [esp + 0x68]
mov byte [esp + 0x1f4], 4
call fcn.10016567
jmp case.default.0x1000592f
lea eax, [esp + 0x10]
push 0x10027e94
lea ecx, [esp + 0x1d0]
push eax
push ecx
call fcn.100167b8
lea edx, [esp + 0x18]
mov byte [esp + 0x1f4], 0x23
push edx
push eax
lea eax, [esp + 0xfc]
push eax
call fcn.10016752
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x1f8], 0x24
call fcn.100158f4
lea ecx, [esp + 0xf4]
mov byte [esp + 0x1f4], 0x23
call fcn.10016567
lea ecx, [esp + 0x1cc]
mov byte [esp + 0x1f4], 4
call fcn.10016567
jmp case.default.0x1000592f
lea ecx, [esp + 0x10]
push 0x10027e90
lea edx, [esp + 0x17c]
push ecx
push edx
call fcn.100167b8
lea ecx, [esp + 0x18]
lea edx, [esp + 0x100]
push ecx
push eax
push edx
mov byte [esp + 0x200], 0x25
call fcn.10016752
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x1f8], 0x26
call fcn.100158f4
lea ecx, [esp + 0x100]
mov byte [esp + 0x1f4], 0x25
call fcn.10016567
lea ecx, [esp + 0x178]
mov byte [esp + 0x1f4], 4
call fcn.10016567
jmp case.default.0x1000592f
lea eax, [esp + 0x10]
push 0x10027e64
lea ecx, [esp + 0x1b8]
push eax
push ecx
call fcn.100167b8
lea edx, [esp + 0x18]
mov byte [esp + 0x1f4], 0x27
push edx
push eax
lea eax, [esp + 0x114]
push eax
call fcn.10016752
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x1f8], 0x28
call fcn.100158f4
lea ecx, [esp + 0x10c]
mov byte [esp + 0x1f4], 0x27
call fcn.10016567
lea ecx, [esp + 0x1b4]
mov byte [esp + 0x1f4], 4
call fcn.10016567
jmp case.default.0x1000592f
lea ecx, [esp + 0x10]
push 0x10027e7c
lea edx, [esp + 0x70]
push ecx
push edx
call fcn.100167b8
lea ecx, [esp + 0x18]
lea edx, [esp + 0x118]
push ecx
push eax
push edx
mov byte [esp + 0x200], 0x29
call fcn.10016752
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x1f8], 0x2a
call fcn.100158f4
lea ecx, [esp + 0x118]
mov byte [esp + 0x1f4], 0x29
call fcn.10016567
lea ecx, [esp + 0x6c]
mov byte [esp + 0x1f4], 4
call fcn.10016567
jmp case.default.0x1000592f
cmp ebx, 0x50
jb 0x1000601b
lea ecx, [esp + 0x14]
mov dword [esp + 0x3c], 0
call fcn.100164f2
push 0
push ebp
lea eax, [esp + 0x44]
push 1
push eax
push esi
call fcn.10003af0
add esp, 0x14
test eax, eax
je case.0x1000570f.34
mov edx, dword [esp + 0x3c]
lea ecx, [esp + 0x14]
push ebp
push ecx
push edx
push esi
call fcn.10003d00
add esp, 0x10
test eax, eax
je case.0x1000570f.34
jmp 0x100060b8
lea ecx, [esp + 0x14]
mov dword [esp + 0x3c], 0
call fcn.100164f2
push 1
push ebp
lea eax, [esp + 0x44]
push 1
push eax
push esi
call fcn.10003af0
add esp, 0x14
test eax, eax
je case.0x1000570f.34
mov ecx, dword [esp + 0x3c]
and ecx, 0xffff
push ecx
lea ecx, [esp + 0x18]
call fcn.100169b5
mov ecx, dword [esp + 0x3c]
mov edx, eax
and ecx, 0xffff
mov eax, 0x20202020
mov ebx, ecx
mov edi, edx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, ebx
push 1
and ecx, 3
push ebp
rep stosb byte es:[edi], al
mov eax, dword [esp + 0x44]
and eax, 0xffff
push eax
push edx
push esi
call fcn.10003af0
mov ecx, dword [esp + 0x50]
add esp, 0x14
and ecx, 0xffff
mov edi, eax
push ecx
lea ecx, [esp + 0x18]
call fcn.1001698d
test edi, edi
je case.0x1000570f.34
mov ebx, dword [esp + 0x200]
lea edx, [esp + 0x14]
lea eax, [esp + 0x78]
push edx
push 0x10027e68
push eax
call fcn.1001682c
push 0x10027e68
lea ecx, [esp + 0x74]
push eax
push ecx
mov byte [esp + 0x200], 0x2b
call fcn.100167b8
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x1f8], 0x2c
call fcn.100158f4
lea ecx, [esp + 0x70]
mov byte [esp + 0x1f4], 0x2b
call fcn.10016567
lea ecx, [esp + 0x78]
mov byte [esp + 0x1f4], 4
call fcn.10016567
jmp case.default.0x1000592f
push 1
push ebp
lea edx, [esp + 0x60]
push 1
push edx
push esi
call fcn.10003af0
add esp, 0x14
test eax, eax
je case.0x1000570f.34
mov eax, dword [esp + 0x58]
test al, al
je 0x1000615c
cmp al, 7
je 0x1000615c
cmp al, 0xf
je 0x1000615c
cmp al, 0x17
je 0x1000615c
cmp al, 0x1d
je 0x1000615c
cmp al, 0x24
je 0x1000615c
cmp al, 0x2a
jne case.0x1000570f.34
push eax
lea eax, [esp + 0x84]
push eax
call fcn.100039d0
add esp, 8
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x1f8], 0x2d
call fcn.100158f4
lea ecx, [esp + 0x80]
mov byte [esp + 0x1f4], 4
call fcn.10016567
jmp case.default.0x1000592f
push 1
push ebp
lea ecx, [esp + 0x60]
push 1
push ecx
push esi
call fcn.10003af0
add esp, 0x14
test eax, eax
je case.0x1000570f.34
mov eax, dword [esp + 0x58]
test al, al
je 0x100061c3
cmp al, 1
jne case.0x1000570f.34
lea edx, [esp + 0x88]
push eax
push edx
call fcn.10003940
add esp, 8
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x1f8], 0x2e
call fcn.100158f4
lea ecx, [esp + 0x88]
mov byte [esp + 0x1f4], 4
call fcn.10016567
jmp case.default.0x1000592f
push 1
push ebp
lea eax, [esp + 0x98]
push 2
push eax
push esi
call fcn.10003af0
add esp, 0x14
test eax, eax
je case.0x1000570f.34
mov ecx, dword [esp + 0x90]
lea edx, [esp + 0x14]
and ecx, 0xffff
push ecx
push 0x10027e74
push edx
call fcn.100153cf
add esp, 0xc
jmp 0x10006790
push 1
push ebp
lea ecx, [esp + 0x1ec]
push 8
push ecx
push esi
call fcn.10003af0
add esp, 0x14
test eax, eax
je case.0x1000570f.34
mov edx, dword [esp + 0x1e8]
mov eax, dword [esp + 0x1e4]
push edx
push eax
lea ecx, [esp + 0x1c]
push 0x10027e6c
push ecx
call fcn.100153cf
add esp, 0x10
lea edx, [esp + 0x14]
lea ecx, [esp + 0x20]
push edx
call fcn.100158f4
jmp case.default.0x1000592f
mov eax, dword [ebp]
mov edi, 7
cmp eax, edi
jae 0x100062e6
mov edx, dword [esi]
push 1
push eax
mov ecx, esi
sub edi, eax
call dword [edx + 0x28]
mov eax, dword [esi]
lea ecx, [esp + 0xb0]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
cmp eax, 4
jne case.0x1000570f.34
cmp word [esp + 0xb0], 0x3c
jne case.0x1000570f.34
mov edx, dword [esp + 0xb2]
and edx, 0xffff
mov dword [ebp], edx
mov eax, dword [esi]
push 1
push edi
mov ecx, esi
call dword [eax + 0x28]
mov eax, dword [ebp]
cmp eax, edi
jb case.0x1000570f.34
sub eax, edi
mov ecx, esi
mov dword [ebp], eax
mov edx, dword [esi]
call dword [edx + 0xc]
mov edi, eax
lea eax, [esp + 0x14]
push ebp
lea ecx, [esp + 0x50]
push eax
push ecx
push ebx
push esi
call fcn.10004100
add esp, 0x14
test eax, eax
je case.0x1000570f.34
mov edx, dword [esi]
push 0
push edi
mov ecx, esi
call dword [edx + 0x28]
jmp 0x10006790
cmp ebx, 0x50
jb 0x1000638b
mov eax, dword [ebp]
mov edi, 4
cmp eax, edi
jae 0x10006a92
mov edx, dword [esi]
push 1
push eax
mov ecx, esi
sub edi, eax
call dword [edx + 0x28]
mov eax, dword [esi]
lea ecx, [esp + 0xbc]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
cmp eax, 4
jne case.0x1000570f.34
cmp word [esp + 0xbc], 0x3c
jne case.0x1000570f.34
mov edx, dword [esp + 0xbe]
jmp 0x10006a89
cmp ebx, 0x32
jb 0x100063e1
mov eax, dword [ebp]
mov edi, 0xe
cmp eax, edi
jae 0x10006a92
mov edx, dword [esi]
push 1
push eax
mov ecx, esi
sub edi, eax
call dword [edx + 0x28]
mov eax, dword [esi]
lea ecx, [esp + 0xc8]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
cmp eax, 4
jne case.0x1000570f.34
cmp word [esp + 0xc8], 0x3c
jne case.0x1000570f.34
mov edx, dword [esp + 0xca]
jmp 0x10006a89
cmp ebx, 0x1e
jb 0x10006437
mov eax, dword [ebp]
mov edi, 0xa
cmp eax, edi
jae 0x10006a92
mov edx, dword [esi]
push 1
push eax
mov ecx, esi
sub edi, eax
call dword [edx + 0x28]
mov eax, dword [esi]
lea ecx, [esp + 0xd4]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
cmp eax, 4
jne case.0x1000570f.34
cmp word [esp + 0xd4], 0x3c
jne case.0x1000570f.34
mov edx, dword [esp + 0xd6]
jmp 0x10006a89
mov eax, dword [ebp]
mov edi, 7
cmp eax, edi
jae 0x10006a92
mov edx, dword [esi]
push 1
push eax
mov ecx, esi
sub edi, eax
call dword [edx + 0x28]
mov eax, dword [esi]
lea ecx, [esp + 0xe0]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
cmp eax, 4
jne case.0x1000570f.34
cmp word [esp + 0xe0], 0x3c
jne case.0x1000570f.34
mov edx, dword [esp + 0xe2]
jmp 0x10006a89
push 0
push 0
push 0
lea ecx, [esp + 0x20]
push ebp
push ecx
push ebx
push esi
call fcn.10004860
add esp, 0x1c
test eax, eax
je case.0x1000570f.34
lea edx, [esp + 0x14]
lea ecx, [esp + 0x20]
push edx
call fcn.100158f4
jmp case.default.0x1000592f
push 0
push 0
push 0
lea eax, [esp + 0x20]
push ebp
push eax
push ebx
push esi
call fcn.10004a30
add esp, 0x1c
test eax, eax
je case.0x1000570f.34
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x24]
call fcn.100158f4
jmp case.default.0x1000592f
mov eax, dword [ebp]
mov edi, 6
cmp eax, edi
jae 0x1000653b
mov edx, dword [esi]
push 1
push eax
mov ecx, esi
sub edi, eax
call dword [edx + 0x28]
mov eax, dword [esi]
lea ecx, [esp + 0xec]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
cmp eax, 4
jne case.0x1000570f.34
cmp word [esp + 0xec], 0x3c
jne case.0x1000570f.34
mov edx, dword [esp + 0xee]
and edx, 0xffff
mov dword [ebp], edx
mov eax, dword [esi]
push 1
push edi
mov ecx, esi
call dword [eax + 0x28]
mov eax, dword [ebp]
cmp eax, edi
jb case.0x1000570f.34
sub eax, edi
mov ecx, esi
mov dword [ebp], eax
mov edx, dword [esi]
call dword [edx + 0xc]
mov ecx, dword [esp + 0x4c]
cmp ebx, 0x50
sbb edi, edi
mov dword [esp + 0x3c], eax
mov eax, dword [esi]
push 0
and edi, 0xfffffffe
push ecx
mov ecx, esi
add edi, 8
call dword [eax + 0x28]
push 0
push ebp
lea edx, [esp + 0x4e]
push 2
push edx
push esi
call fcn.10003af0
add esp, 0x14
test eax, eax
je case.0x1000570f.34
xor ebx, ebx
cmp word [esp + 0x46], bx
jbe 0x10006609
mov eax, dword [ebp]
cmp eax, edi
jae 0x100065e7
mov edx, dword [esi]
push 1
push eax
mov ecx, esi
call dword [edx + 0x28]
mov eax, dword [esi]
lea ecx, [esp + 0xf8]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
cmp eax, 4
jne case.0x1000570f.34
cmp word [esp + 0xf8], 0x3c
jne case.0x1000570f.34
mov edx, dword [esp + 0xfa]
and edx, 0xffff
mov dword [ebp], edx
mov eax, dword [esi]
push 1
push edi
mov ecx, esi
call dword [eax + 0x28]
mov eax, dword [ebp]
cmp eax, edi
jb case.0x1000570f.34
sub eax, edi
inc ebx
cmp bx, word [esp + 0x46]
mov dword [ebp], eax
jb 0x1000659d
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0xc]
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x4c], eax
mov eax, dword [esi]
push 0
push ecx
mov ecx, esi
call dword [eax + 0x28]
mov ebx, dword [esp + 0x200]
jmp case.default.0x1000592f
mov eax, dword [ebp]
mov edi, 6
cmp eax, edi
jae 0x10006cb9
mov edx, dword [esi]
push 1
push eax
mov ecx, esi
sub edi, eax
call dword [edx + 0x28]
mov eax, dword [esi]
lea ecx, [esp + 0x104]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
cmp eax, 4
jne case.0x1000570f.34
cmp word [esp + 0x104], 0x3c
jne case.0x1000570f.34
mov edx, dword [esp + 0x106]
jmp 0x10006cb0
mov eax, dword [ebp]
cmp ebx, 0x50
sbb edi, edi
add edi, 4
cmp eax, edi
jae 0x100066d3
mov edx, dword [esi]
push 1
push eax
mov ecx, esi
sub edi, eax
call dword [edx + 0x28]
mov eax, dword [esi]
lea ecx, [esp + 0x110]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
cmp eax, 4
jne case.0x1000570f.34
cmp word [esp + 0x110], 0x3c
jne case.0x1000570f.34
mov edx, dword [esp + 0x112]
and edx, 0xffff
mov dword [ebp], edx
mov eax, dword [esi]
push 1
push edi
mov ecx, esi
call dword [eax + 0x28]
mov eax, dword [ebp]
cmp eax, edi
jb case.0x1000570f.34
sub eax, edi
push str.REF_
lea ecx, [esp + 0x24]
mov dword [ebp], eax
call fcn.100158b1
jmp case.default.0x1000592f
mov eax, dword [ebp]
cmp ebx, 0x50
sbb edi, edi
and edi, 0xfffffffe
add edi, 8
cmp eax, edi
jae 0x100066d3
mov edx, dword [esi]
push 1
push eax
mov ecx, esi
sub edi, eax
call dword [edx + 0x28]
mov eax, dword [esi]
lea ecx, [esp + 0x11c]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
cmp eax, 4
jne case.0x1000570f.34
cmp word [esp + 0x11c], 0x3c
jne case.0x1000570f.34
mov edx, dword [esp + 0x11e]
jmp 0x100066ca
mov ecx, dword [esp + 0x210]
lea edx, [esp + 0x14]
push ecx
push edi
push 1
push ebp
push edx
push ebx
push esi
call fcn.10004860
jmp 0x10006785
mov ecx, dword [esp + 0x210]
lea edx, [esp + 0x14]
push ecx
push edi
push 1
push ebp
push edx
push ebx
push esi
call fcn.10004a30
add esp, 0x1c
test eax, eax
je case.0x1000570f.34
lea eax, [esp + 0x14]
lea ecx, [esp + 0x20]
push eax
call fcn.100158f4
jmp case.default.0x1000592f
cmp ebx, 0x50
jb 0x100067f9
mov eax, dword [ebp]
mov edi, 6
cmp eax, edi
jae 0x10006a92
mov edx, dword [esi]
push 1
push eax
mov ecx, esi
sub edi, eax
call dword [edx + 0x28]
mov eax, dword [esi]
lea ecx, [esp + 0x128]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
cmp eax, 4
jne case.0x1000570f.34
cmp word [esp + 0x128], 0x3c
jne case.0x1000570f.34
mov edx, dword [esp + 0x12a]
jmp 0x10006a89
mov eax, dword [ebp]
mov edi, 0x18
cmp eax, edi
jae 0x10006a92
mov edx, dword [esi]
push 1
push eax
mov ecx, esi
sub edi, eax
call dword [edx + 0x28]
mov eax, dword [esi]
lea ecx, [esp + 0x134]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
cmp eax, 4
jne case.0x1000570f.34
cmp word [esp + 0x134], 0x3c
jne case.0x1000570f.34
mov edx, dword [esp + 0x136]
jmp 0x10006a89
cmp ebx, 0x50
jb 0x100068a0
mov eax, dword [ebp]
mov edi, 6
cmp eax, edi
jae 0x10006a92
mov edx, dword [esi]
push 1
push eax
mov ecx, esi
sub edi, eax
call dword [edx + 0x28]
mov eax, dword [esi]
lea ecx, [esp + 0x140]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
cmp eax, 4
jne case.0x1000570f.34
cmp word [esp + 0x140], 0x3c
jne case.0x1000570f.34
mov edx, dword [esp + 0x142]
jmp 0x10006a89
mov eax, dword [ebp]
mov edi, 0x11
cmp eax, edi
jae 0x10006a92
mov edx, dword [esi]
push 1
push eax
mov ecx, esi
sub edi, eax
call dword [edx + 0x28]
mov eax, dword [esi]
lea ecx, [esp + 0x14c]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
cmp eax, 4
jne case.0x1000570f.34
cmp word [esp + 0x14c], 0x3c
jne case.0x1000570f.34
mov edx, dword [esp + 0x14e]
jmp 0x10006a89
cmp ebx, 0x50
jb 0x10006947
mov eax, dword [ebp]
mov edi, 0xa
cmp eax, edi
jae 0x10006a92
mov edx, dword [esi]
push 1
push eax
mov ecx, esi
sub edi, eax
call dword [edx + 0x28]
mov eax, dword [esi]
lea ecx, [esp + 0x158]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
cmp eax, 4
jne case.0x1000570f.34
cmp word [esp + 0x158], 0x3c
jne case.0x1000570f.34
mov edx, dword [esp + 0x15a]
jmp 0x10006a89
mov eax, dword [ebp]
mov edi, 0x14
cmp eax, edi
jae 0x10006a92
mov edx, dword [esi]
push 1
push eax
mov ecx, esi
sub edi, eax
call dword [edx + 0x28]
mov eax, dword [esi]
lea ecx, [esp + 0x164]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
cmp eax, 4
jne case.0x1000570f.34
cmp word [esp + 0x164], 0x3c
jne case.0x1000570f.34
mov edx, dword [esp + 0x166]
jmp 0x10006a89
cmp ebx, 0x50
jb 0x100069ee
mov eax, dword [ebp]
mov edi, 6
cmp eax, edi
jae 0x10006a92
mov edx, dword [esi]
push 1
push eax
mov ecx, esi
sub edi, eax
call dword [edx + 0x28]
mov eax, dword [esi]
lea ecx, [esp + 0x170]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
cmp eax, 4
jne case.0x1000570f.34
cmp word [esp + 0x170], 0x3c
jne case.0x1000570f.34
mov edx, dword [esp + 0x172]
jmp 0x10006a89
mov eax, dword [ebp]
mov edi, 0x11
cmp eax, edi
jae 0x10006a92
mov edx, dword [esi]
push 1
push eax
mov ecx, esi
sub edi, eax
call dword [edx + 0x28]
mov eax, dword [esi]
lea ecx, [esp + 0x17c]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
cmp eax, 4
jne case.0x1000570f.34
cmp word [esp + 0x17c], 0x3c
jne case.0x1000570f.34
mov edx, dword [esp + 0x17e]
jmp 0x10006a89
cmp ebx, 0x50
jb 0x10006aa9
mov eax, dword [ebp]
mov edi, 0xa
cmp eax, edi
jae 0x10006a92
mov edx, dword [esi]
push 1
push eax
mov ecx, esi
sub edi, eax
call dword [edx + 0x28]
mov eax, dword [esi]
lea ecx, [esp + 0x188]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
cmp eax, 4
jne case.0x1000570f.34
cmp word [esp + 0x188], 0x3c
jne case.0x1000570f.34
mov edx, dword [esp + 0x18a]
and edx, 0xffff
mov dword [ebp], edx
mov eax, dword [esi]
push 1
push edi
mov ecx, esi
call dword [eax + 0x28]
mov eax, dword [ebp]
cmp eax, edi
jb case.0x1000570f.34
jmp 0x10006b0f
mov eax, dword [ebp]
mov edi, 0x14
cmp eax, edi
jae 0x10006afa
mov edx, dword [esi]
push 1
push eax
mov ecx, esi
sub edi, eax
call dword [edx + 0x28]
mov eax, dword [esi]
lea ecx, [esp + 0x194]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
cmp eax, 4
jne case.0x1000570f.34
cmp word [esp + 0x194], 0x3c
jne case.0x1000570f.34
mov edx, dword [esp + 0x196]
and edx, 0xffff
mov dword [ebp], edx
mov eax, dword [esi]
push 1
push edi
mov ecx, esi
call dword [eax + 0x28]
mov eax, dword [ebp]
cmp eax, edi
jb case.0x1000570f.34
sub eax, edi
mov dword [ebp], eax
push 0x1002c2c0
lea ecx, [esp + 0x24]
call fcn.100158b1
jmp case.default.0x1000592f
mov eax, dword [ebp]
mov edi, 2
cmp eax, edi
jae 0x10006cb9
mov edx, dword [esi]
push 1
push eax
mov ecx, esi
sub edi, eax
call dword [edx + 0x28]
mov eax, dword [esi]
lea ecx, [esp + 0x1a0]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
cmp eax, 4
jne case.0x1000570f.34
cmp word [esp + 0x1a0], 0x3c
jne case.0x1000570f.34
mov edx, dword [esp + 0x1a2]
jmp 0x10006cb0
mov eax, dword [ebp]
mov edi, 2
cmp eax, edi
jae 0x10006cb9
mov edx, dword [esi]
push 1
push eax
mov ecx, esi
sub edi, eax
call dword [edx + 0x28]
mov eax, dword [esi]
lea ecx, [esp + 0x1ac]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
cmp eax, 4
jne case.0x1000570f.34
cmp word [esp + 0x1ac], 0x3c
jne case.0x1000570f.34
mov edx, dword [esp + 0x1ae]
jmp 0x10006cb0
mov eax, dword [ebp]
mov edi, 2
cmp eax, edi
jae 0x10006cb9
mov edx, dword [esi]
push 1
push eax
mov ecx, esi
sub edi, eax
call dword [edx + 0x28]
mov eax, dword [esi]
lea ecx, [esp + 0x1b8]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
cmp eax, 4
jne case.0x1000570f.34
cmp word [esp + 0x1b8], 0x3c
jne case.0x1000570f.34
mov edx, dword [esp + 0x1ba]
jmp 0x10006cb0
mov eax, dword [ebp]
mov edi, 4
cmp eax, edi
jae 0x10006cb9
mov edx, dword [esi]
push 1
push eax
mov ecx, esi
sub edi, eax
call dword [edx + 0x28]
mov eax, dword [esi]
lea ecx, [esp + 0x1c4]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
cmp eax, 4
jne case.0x1000570f.34
cmp word [esp + 0x1c4], 0x3c
jne case.0x1000570f.34
mov edx, dword [esp + 0x1c6]
jmp 0x10006cb0
mov eax, dword [ebp]
mov edi, 4
cmp eax, edi
jae 0x10006cb9
mov edx, dword [esi]
push 1
push eax
mov ecx, esi
sub edi, eax
call dword [edx + 0x28]
mov eax, dword [esi]
lea ecx, [esp + 0x1d0]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
cmp eax, 4
jne case.0x1000570f.34
cmp word [esp + 0x1d0], 0x3c
jne case.0x1000570f.34
mov edx, dword [esp + 0x1d2]
and edx, 0xffff
mov dword [ebp], edx
mov eax, dword [esi]
push 1
push edi
mov ecx, esi
call dword [eax + 0x28]
mov eax, dword [ebp]
cmp eax, edi
jb case.0x1000570f.34
sub eax, edi
mov dword [ebp], eax
jmp case.default.0x1000592f
push ebp
lea ecx, [esp + 0x24]
push esi
push ecx
call fcn.100052c0
add esp, 0xc
test eax, eax
je case.0x1000570f.34
jmp case.default.0x1000592f
cmp ebx, 0x28
push 1
sbb eax, eax
push ebp
add eax, 2
lea edx, [esp + 0x48]
push eax
push edx
push esi
mov dword [esp + 0x54], 0
call fcn.10003af0
add esp, 0x14
test eax, eax
je case.0x1000570f.34
mov ecx, dword [esp + 0x40]
lea eax, [esp + 0x48]
push eax
lea edx, [esp + 0x9c]
push ecx
push edx
call fcn.100038d0
add esp, 0xc
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x1f8], 0x2f
call fcn.1001665c
mov eax, dword [eax]
xor ecx, ecx
mov edx, dword [eax - 8]
test edx, edx
sete cl
mov eax, ecx
test eax, eax
jne 0x10006d82
mov eax, dword [esp + 0x48]
cmp eax, 0xffffffff
sete cl
test cl, cl
jne 0x10006d82
cmp eax, 0xfffffffe
sete cl
test cl, cl
jne 0x10006d82
cmp eax, 0xfffffffd
sete al
test al, al
jne 0x10006d82
xor bl, bl
jmp 0x10006d84
mov bl, 1
lea ecx, [esp + 0x98]
mov byte [esp + 0x1f4], 4
call fcn.10016567
test bl, bl
jne case.0x1000570f.34
mov edx, dword [esp + 0x48]
lea eax, [esp + 0x1c]
push edx
lea ecx, [esp + 0x24]
push eax
push ecx
call fcn.100050d0
add esp, 0xc
test eax, eax
je case.0x1000570f.34
mov ebx, dword [esp + 0x200]
jmp case.default.0x1000592f
push 1
push ebp
lea edx, [esp + 0x68]
push 1
push edx
push esi
call fcn.10003af0
add esp, 0x14
test eax, eax
je case.0x1000570f.34
mov al, byte [esp + 0x60]
push 1
and al, 0x7f
cmp ebx, 0x28
mov byte [esp + 0x64], al
push ebp
sbb eax, eax
mov dword [esp + 0x48], 0
add eax, 2
push eax
lea eax, [esp + 0x4c]
push eax
push esi
call fcn.10003af0
add esp, 0x14
test eax, eax
je case.0x1000570f.34
mov eax, dword [esp + 0x40]
lea ecx, [esp + 0x48]
and eax, 0x7fff
push ecx
lea edx, [esp + 0xa4]
push eax
push edx
mov dword [esp + 0x4c], eax
call fcn.100038d0
add esp, 0xc
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x1f8], 0x30
call fcn.1001665c
mov eax, dword [eax]
xor ecx, ecx
mov byte [esp + 0x1f4], 4
mov edx, dword [eax - 8]
test edx, edx
sete cl
mov edi, ecx
lea ecx, [esp + 0xa0]
call fcn.10016567
test edi, edi
jne case.0x1000570f.34
mov eax, dword [esp + 0x60]
lea edx, [esp + 0x1c]
and eax, 0xff
mov dword [esp + 0x48], eax
push eax
lea eax, [esp + 0x24]
push edx
push eax
call fcn.100050d0
add esp, 0xc
test eax, eax
je case.0x1000570f.34
jmp case.default.0x1000592f
lea ecx, [esp + 0x4c]
push ebp
push ecx
push esi
call fcn.10004dd0
add esp, 0xc
test eax, eax
je case.0x1000570f.34
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0xc]
mov edi, dword [esp + 0x50]
cmp eax, edi
jb 0x100056cf
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0xc]
cmp eax, edi
je 0x10006f2b
lea ecx, [esp + 0x1c]
mov byte [esp + 0x1f4], 3
call fcn.10016567
lea ecx, [esp + 0x18]
mov byte [esp + 0x1f4], 2
call fcn.10016567
lea ecx, [esp + 0x10]
mov byte [esp + 0x1f4], 1
call fcn.10016567
lea ecx, [esp + 0x14]
mov byte [esp + 0x1f4], 0
call fcn.10016567
lea ecx, [esp + 0x20]
mov dword [esp + 0x1f4], 0xffffffff
call fcn.100157f4
xor eax, eax
jmp 0x10007014
mov ecx, dword [esp + 0x204]
push 0x10027ea0
call fcn.100166ac
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x10006f97
mov bl, 0x31
lea ecx, [esp + 0x50]
push ecx
lea ecx, [esp + 0x24]
call fcn.10015928
mov esi, dword [esp + 0x204]
push eax
mov ecx, esi
mov byte [esp + 0x1f8], bl
call fcn.10016926
lea ecx, [esp + 0x50]
mov byte [esp + 0x1f4], 4
call fcn.10016567
mov eax, dword [esp + 0x2c]
test eax, eax
jle 0x10006f95
push 0x10027e90
mov ecx, esi
call fcn.100168ff
mov eax, dword [esp + 0x2c]
test eax, eax
jne 0x10006f46
mov edx, dword [esp + 0x204]
push 0x10027ea0
mov eax, dword [edx]
push eax
call fcn.1000b57e
add esp, 8
lea ecx, [esp + 0x1c]
test eax, eax
setne al
and eax, 0xff
mov byte [esp + 0x1f4], 3
mov esi, eax
call fcn.10016567
lea ecx, [esp + 0x18]
mov byte [esp + 0x1f4], 2
call fcn.10016567
lea ecx, [esp + 0x10]
mov byte [esp + 0x1f4], 1
call fcn.10016567
lea ecx, [esp + 0x14]
mov byte [esp + 0x1f4], 0
call fcn.10016567
lea ecx, [esp + 0x20]
mov dword [esp + 0x1f4], 0xffffffff
call fcn.100157f4
mov eax, esi
mov ecx, dword [esp + 0x1ec]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x1e8
ret