Function at 0x1001cfba
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1008dbc7
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x140
mov dword [esp + 0x34], edx
xor eax, eax
inc eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x14], 0x2006887e
mov dword [esp + 0x14], 0x141e4f1f
mov dword [esp + 0x14], 0xfffffff7
mov dword [esp + 0x14], 0x3a4df6f9
mov dword [esp + 0x14], 0xc92ea21e
mov dword [esp + 0x14], 0x2b96ce02
push ebx
mov dword [esp + 0x18], eax
push esi
mov dword [esp + 0x1c], eax
mov esi, ecx
mov dword [esp + 0x1c], 0x37e0d1b7
push edi
mov dword [esp + 0x20], 8
mov dword [esp + 0x20], 6
push 0xfffffffffffffffa
pop edi
mov dword [esp + 0x20], edi
mov dword [esp + 0x104], eax
mov dword [esp + 0x108], eax
mov dword [esp + 0x10c], eax
mov dword [esp + 0x110], eax
push 0
mov dword [esp + 0x74], 3
mov dword [esp + 0x1c], 0x1b
pop ebx
jmp 0x1001d0e7
mov dword [esp + 0x20], 6
mov dword [esp + 0x20], 0x444696a4
mov dword [esp + 0x20], 0xbd94543b
mov dword [esp + 0x20], ebx
mov dword [esp + 0xc], ebx
jmp 0x1001d0a8
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x134], 0xfffffffe
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 2
jl 0x1001d095
push 0x2dad
lea eax, [esp + 0x36]
mov byte [esp + 0x36], bl
push eax
push ebx
push 0x3c0
push 0x5b46
call fcn.10020545
add esp, 0x14
lea eax, [esp + 0x70]
push eax
push 0x75db
push ebx
call fcn.1001f1a4
add esp, 0xc
dec dword [esp + 0x18]
cmp dword [esp + 0x18], 0xfffffff5
jne 0x1001d073
cmp dword [esi + 0x10], ebx
jne 0x1001d0fa
xor al, al
jmp 0x1001dbbe
mov dword [esp + 0x18], 0x53b26bdd
mov dword [esp + 0x20], 0x6318d581
mov dword [esp + 0x20], 0xe8e1b881
mov dword [esp + 0x20], 0xfffffffd
mov dword [esp + 0x20], ebx
mov dword [esp + 0x18], ebx
jmp 0x1001d192
mov dword [esp + 0x20], 0x3ed1
mov dword [esp + 0x20], 0x5a60d005
mov dword [esp + 0x20], edi
mov dword [esp + 0x6c], 0xffffffff
mov dword [esp + 0x74], 0xfeb9
mov dword [esp + 0xc], ebx
jmp 0x1001d161
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x13c], 2
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 3
jl 0x1001d14e
lea eax, [esp + 0x6c]
push eax
push ebx
call fcn.10020381
push ebx
push 0x7c23
lea eax, [esp + 0x84]
push eax
push 0x61e1
call fcn.1001ff47
add esp, 0x18
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 0x16
jle 0x1001d124
push 0x55
push ebx
mov edx, 0x765a
lea ecx, [esp + 0x48]
call fcn.1001cbeb
pop ecx
pop ecx
mov dword [esp + 0x1c], ebx
lea ecx, [esp + 0x114]
mov dword [esp + 0x10], 0x664dc9ed
mov dword [esp + 0x20], ebx
push 4
call fcn.10019c20
mov dword [esp + 0xc], ebx
jmp 0x1001d1e6
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x114]
mov dword [eax + ecx*4], 0x37a5
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 4
jl 0x1001d1d0
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x10]
cmp dword [esp + 0x1c], eax
jne 0x1001d216
mov eax, dword [esp + 0x10]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x10]
cmp eax, dword [esp + 0x1c]
je 0x1001d216
xor eax, eax
inc eax
jmp 0x1001d218
mov eax, ebx
cmp eax, 0xf9c28ade
sbb eax, eax
inc eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x10], ebx
jmp 0x1001d25c
mov dword [esp + 0x1c], ebx
jmp 0x1001d251
mov byte [esp + 0x27], bl
cmp byte [esp + 0x27], 0
je 0x1001d24d
push 0x7d08
mov edx, 0x724d
xor cl, cl
call fcn.1001cf13
pop ecx
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], 3
jle 0x1001d230
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 3
jle 0x1001d22a
lea ecx, [esp + 0x114]
call fcn.1001a511
cmp dword [esi + 0x14], 0x10
jb 0x1001d279
mov ecx, dword [esi]
jmp 0x1001d27b
mov ecx, esi
push 3
pop edi
cmp dword [esi + 0x14], 0x10
mov dword [esp + 0x3c], ecx
jb 0x1001d28c
mov edx, dword [esi]
jmp 0x1001d28e
mov edx, esi
mov eax, dword [esi + 0x10]
add eax, edx
cmp ecx, eax
je 0x1001da79
mov dword [esp + 0x14], 0x890
lea ecx, [esp + 0x90]
push 1
call fcn.10019c20
lea eax, [esp + 0x120]
mov dword [esp + 0x154], ebx
push eax
mov dword [esp + 0x48], 0xaaf7cc73
lea edx, [esp + 0x94]
mov dword [esp + 0x10], 0x7c7a5019
mov ecx, 0x70db
push 1
call fcn.1001cbeb
pop ecx
pop ecx
cmp dword [esp + 0x14], ebx
je 0x1001d40c
mov dword [esp + 0x14], ebx
jmp 0x1001d3db
push edi
lea ecx, [esp + 0x88]
call fcn.10019c20
lea eax, [esp + 0x124]
mov byte [esp + 0x154], 1
push eax
push 0xa0e
push ebx
push 0x65
pop edx
lea ecx, [esp + 0x90]
call fcn.1001cf45
mov eax, dword [esp + 0x90]
add esp, 0xc
mov dword [eax], ebx
mov dword [esp + 0x18], 0xfffffff9
mov dword [esp + 0x58], ebx
mov dword [esp + 0x18], ebx
jmp 0x1001d3ab
mov dword [esp + 0xc], ebx
jmp 0x1001d361
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x9c], 0xffffffff
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 4
jl 0x1001d34e
mov dword [esp + 0x9c], ebx
jmp 0x1001d39d
push ebx
push 0x7064
push 0x50bf
lea eax, [esp + 0x6c]
mov dword [esp + 0x6c], 0xffffffff
push eax
lea eax, [esp + 0x68]
push eax
call fcn.1001f861
add esp, 0x14
dec dword [esp + 0x9c]
cmp dword [esp + 0x9c], 0xffffffe7
jne 0x1001d371
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 0x11
jle 0x1001d348
mov eax, dword [esp + 0x84]
inc dword [eax]
cmp dword [eax], 0x1b
jne 0x1001d336
lea ecx, [esp + 0x84]
mov byte [esp + 0x154], bl
call fcn.1001a511
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 0x36
jl 0x1001d2f8
mov byte [esp + 0x27], bl
cmp byte [esp + 0x27], 0
je 0x1001d559
push 0x49a6
mov dl, 1
mov ecx, 0x3555
call fcn.1001cecb
pop ecx
jmp 0x1001d559
push 6
pop eax
mov dword [esp + 0xdc], eax
lea ecx, [esp + 0xec]
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], eax
mov dword [esp + 0xe8], eax
push edi
call fcn.10019c20
push 4
lea ecx, [esp + 0xbc]
mov byte [esp + 0x158], 2
call fcn.10019c20
mov byte [esp + 0x154], 3
mov dword [esp + 0x2c], ebx
jmp 0x1001d46e
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0xec]
mov dword [eax + ecx*4], ebx
inc dword [esp + 0x2c]
cmp dword [esp + 0x2c], 3
jl 0x1001d45c
xor ecx, ecx
mov dword [esp + 0x2c], ebx
inc ecx
jmp 0x1001d48a
mov eax, dword [esp + 0x2c]
mov dword [esp + eax*4 + 0x68], ecx
inc dword [esp + 0x2c]
cmp dword [esp + 0x2c], ecx
jl 0x1001d47e
push 0x2653
lea eax, [esp + 0x30]
push eax
push ebx
lea eax, [esp + 0xc4]
push 0xe3e
push eax
call fcn.100203bd
mov eax, dword [esp + 0x28]
add esp, 0x14
mov dword [esp + 0xdc], eax
test eax, eax
jne 0x1001d4db
cmp dword [esp + 0x14], ebx
je 0x1001d4ce
mov eax, dword [esp + 0x14]
xor eax, eax
inc eax
jmp 0x1001d4d0
mov eax, ebx
add eax, 0xc5a7
jne 0x1001d4db
mov ecx, ebx
jmp 0x1001d4de
xor ecx, ecx
inc ecx
mov eax, dword [esp + 0x90]
lea edx, [esp + 0x44]
push 0xfffffffffffffffd
mov dword [eax], ecx
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x48]
mov eax, dword [esp + 0x48]
mov eax, dword [esp + 0x18]
mov dword [esp + 0x10], 0xfffffffe
mov eax, dword [esp + 0x10]
pop ecx
cmp ecx, eax
mov dword [esp + 0x68], eax
sbb ecx, ecx
inc ecx
imul ecx, dword [esp + 0x14]
mov eax, dword [esp + 0xb8]
mov dword [eax + 8], ecx
lea eax, [esp + 0x90]
push eax
mov cl, 1
call fcn.1001cf13
pop ecx
lea ecx, [esp + 0xb8]
call fcn.1001a511
lea ecx, [esp + 0xec]
call fcn.1001a511
push 3
pop edi
or dword [esp + 0x154], 0xffffffff
lea ecx, [esp + 0x90]
call fcn.1001a511
mov eax, dword [esp + 0x3c]
mov al, byte [eax]
cmp al, 0x30
jl 0x1001d754
cmp al, 0x39
jg 0x1001d754
xor ecx, ecx
inc ecx
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebx
jmp 0x1001d5d0
mov dword [esp + 0xc], 0xfffffff7
mov dword [esp + 0xc], 0xffffffe2
cmp dword [esp + 0xc], 0x1a
jl 0x1001d5cc
push 0xb16
push ebx
push 0x32ba
call fcn.1001f3ff
add esp, 0xc
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 0x1a
jge 0x1001d5ab
xor ecx, ecx
inc ecx
inc dword [esp + 0x10]
cmp dword [esp + 0x10], ecx
jne 0x1001d594
mov dword [esp + 0x10], ebx
jmp 0x1001d72a
mov dword [esp + 0x1c], 0x2c36544d
mov dword [esp + 0x14], 0xbc106ec6
mov dword [esp + 0x20], 0x4801465e
cmp dword [esp + 0x10], ebx
jne 0x1001d611
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x14]
sub eax, dword [esp + 0x10]
mov eax, ebx
je 0x1001d613
mov eax, ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x1c], 0x10
cmp dword [esp + 0x1c], 0x1c
jle 0x1001d726
mov dword [esp + 0x18], 0x9df9481f
mov dword [esp + 0x14], ebx
jmp 0x1001d648
mov eax, dword [esp + 0x14]
mov dword [esp + eax*4 + 0x64], 0xffffffff
inc dword [esp + 0x14]
cmp dword [esp + 0x14], ecx
jl 0x1001d638
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x20]
mov dword [esp + 0x14], ebx
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
mov eax, dword [esp + 0x1c]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
cmp dword [esp + 0xc], ebx
jne 0x1001d710
mov dword [esp + 0x5c], 0xffffffff
mov dword [esp + 0x14], ebx
jmp 0x1001d6e0
mov dword [esp + 0xc], ebx
cmp dword [esp + 0xc], ebx
jl 0x1001d6dc
mov dword [esp + 0x18], ebx
jmp 0x1001d6be
lea eax, [esp + 0x31]
mov byte [esp + 0x31], bl
push eax
push ebx
push 0x4421
push 0x4733
call fcn.1001fe92
add esp, 0x10
inc dword [esp + 0x18]
cmp dword [esp + 0x18], ebx
jle 0x1001d69e
mov byte [esp + 0x27], bl
cmp byte [esp + 0x27], 0
je 0x1001d6d6
push ebx
call fcn.10020e3d
pop ecx
dec dword [esp + 0xc]
jns 0x1001d698
inc dword [esp + 0x14]
cmp dword [esp + 0x14], ebx
jle 0x1001d68e
mov dword [esp + 0x14], 0xfffffff0
jmp 0x1001d707
lea eax, [esp + 0x5c]
push eax
push 0x532e
push ebx
call fcn.1001edda
add esp, 0xc
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 0xfffffff9
jge 0x1001d6f0
jmp 0x1001d714
mov dword [esp + 0x64], ecx
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], 0x1c
push 1
pop ecx
jg 0x1001d62a
dec dword [esp + 0x10]
cmp dword [esp + 0x10], 0xfffffffc
je 0x1001d5df
push 0x1607
push ebx
lea edx, [esp + 0x44]
lea ecx, [esp + 0x48]
call fcn.1001cf93
pop ecx
pop ecx
mov ecx, dword [esp + 0x3c]
inc ecx
jmp 0x1001d27e
mov dword [esp + 0x1c], 4
mov dword [esp + 0x20], 0xdfddae97
mov dword [esp + 0xc], 0x5706b379
push 2
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x14], ebx
pop ecx
jmp 0x1001d789
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x50], 0xd9e2a8d3
inc dword [esp + 0x10]
cmp dword [esp + 0x10], ecx
jl 0x1001d779
mov dword [esp + 0x10], ebx
jmp 0x1001d7a5
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x48], 0xfffffff6
inc dword [esp + 0x10]
cmp dword [esp + 0x10], ecx
jl 0x1001d795
cmp dword [esp + 0x50], ebx
je 0x1001d7bc
cmp dword [esp + 0x48], ebx
je 0x1001d7bc
xor esi, esi
inc esi
jmp 0x1001d7be
mov esi, ebx
mov ecx, dword [esp + 0xc]
xor edx, edx
mov eax, dword [esp + 0xc]
cmp ecx, eax
mov eax, dword [esp + 0x50]
setle dl
xor ebx, ebx
cmp edx, 0x4cff
push 2
setne bl
xor ecx, ecx
cmp ebx, eax
mov eax, dword [esp + 0x20]
setle cl
xor edx, edx
cmp esi, ecx
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [esp + 0x58]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [esp + 0x4c]
mov ecx, 0xa624cdb8
setge dl
imul eax, edx
cmp ecx, eax
mov eax, dword [esp + 0x4c]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [esp + 0x4c]
sete dl
add eax, edx
xor edx, edx
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 0x54]
mov eax, dword [esp + 0x1c]
cmp eax, ecx
mov eax, dword [esp + 0x44]
lea ecx, [esp + 0xfc]
setne dl
xor ebx, ebx
mov dword [esp + 0x4c], edx
mov dword [eax], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], 0x3ff14eb4
mov dword [esp + 0x1c], 0xc0de
mov dword [esp + 0x14], 1
call fcn.10019c20
mov dword [esp + 0x154], 4
mov dword [esp + 0xc], ebx
jmp 0x1001d892
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0xf8]
mov dword [eax + ecx*4], 0x6bb64548
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 2
jl 0x1001d87c
cmp dword [esp + 0x1c], ebx
je 0x1001d99e
push 1
lea ecx, [esp + 0xc8]
call fcn.10019c20
mov byte [esp + 0x154], 5
mov dword [esp + 0x28], ebx
jmp 0x1001d8cf
mov eax, dword [esp + 0x28]
mov dword [esp + eax*4 + 0x34], 0xde2167fa
inc dword [esp + 0x28]
cmp dword [esp + 0x28], 1
jl 0x1001d8bf
push ebx
push 0x5f05
push 0x6419
push 0xf2e
push 0x11a7
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0xdc]
push 0x704
push eax
call fcn.1001ef56
add esp, 0x20
mov dword [esp + 0x28], ebx
jmp 0x1001d91e
mov eax, dword [esp + 0x28]
mov dword [esp + eax*4 + 0x128], 0xfffffffb
inc dword [esp + 0x28]
cmp dword [esp + 0x28], edi
jl 0x1001d90b
cmp dword [esp + 0x34], ebx
xor edx, edx
mov eax, dword [esp + 0x34]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0x20]
test eax, eax
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x18]
setns dl
sub ecx, edx
xor edx, edx
cmp ecx, eax
mov eax, dword [esp + 0x34]
setl dl
xor ecx, ecx
imul edx, eax
mov eax, dword [esp + 0x18]
cmp edx, eax
mov eax, dword [esp + 0xc4]
sete cl
xor edx, edx
cmp ecx, dword [eax]
mov eax, dword [esp + 0x34]
setg dl
xor ecx, ecx
cmp eax, edx
setle cl
mov dword [esp + 0x10], ecx
lea ecx, [esp + 0xc4]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x12c], eax
mov byte [esp + 0x154], 4
jmp 0x1001da3e
lea eax, [esp + 0x33]
mov byte [esp + 0x33], bl
push ebx
push eax
call fcn.1001feed
pop ecx
pop ecx
push 0xd
pop esi
mov dword [esp + 0x1c], esi
jmp 0x1001da31
mov dword [esp + 0xc], ebx
lea ecx, [esp + 0x78]
push edi
call fcn.10019c20
mov dword [esp + 0x18], ebx
jmp 0x1001d9df
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x78]
mov dword [eax + ecx*4], 0x638299fa
inc dword [esp + 0x18]
cmp dword [esp + 0x18], edi
jl 0x1001d9cc
cmp dword [esp + 0xc], ebx
jne 0x1001da3a
push 0xfffffffffffffffd
pop eax
mov dword [esp + 0xc], eax
jmp 0x1001da1e
mov dword [esp + 0x10], 2
cmp dword [esp + 0x10], ebx
jl 0x1001da1a
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x78]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
dec dword [esp + 0x10]
jns 0x1001da02
inc dword [esp + 0xc]
cmp dword [esp + 0xc], esi
je 0x1001d9f4
lea ecx, [esp + 0x78]
call fcn.1001a511
dec dword [esp + 0x1c]
cmp dword [esp + 0x1c], 0xffffffe6
jl 0x1001d9b8
jmp 0x1001da43
lea ecx, [esp + 0x78]
call fcn.1001a511
mov dword [esp + 0x10], 1
cmp dword [esp + 0x10], ebx
jl 0x1001da68
lea eax, [esp + 0x30]
mov byte [esp + 0x30], bl
push ebx
push eax
call fcn.1001ee20
dec dword [esp + 0x18]
pop ecx
pop ecx
jns 0x1001da51
lea ecx, [esp + 0xf8]
call fcn.1001a511
jmp 0x1001d0f3
xor eax, eax
mov dword [esp + 0x1c], 0x4530
inc eax
mov dword [esp + 0x20], 0xfffffffe
mov dword [esp + 0x18], eax
lea ecx, [esp + 0xac]
mov dword [esp + 0xc], 7
push eax
call fcn.10019c20
xor eax, eax
mov dword [esp + 0x154], 6
inc eax
lea ecx, [esp + 0xd0]
mov dword [esp + 0xc], eax
mov dword [esp + 0xc], 0xa3a7
push eax
call fcn.10019c20
xor edx, edx
mov dword [esp + 0x38], ebx
inc edx
jmp 0x1001dae7
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0xac]
mov dword [eax + ecx*4], edx
inc dword [esp + 0x38]
cmp dword [esp + 0x38], edx
jl 0x1001dad5
push 0x7a1e
lea eax, [esp + 0xd4]
mov ecx, 0xde8
push eax
push edx
lea edx, [esp + 0x44]
call fcn.1001cf45
mov ecx, dword [esp + 0x28]
add esp, 0xc
mov eax, dword [esp + 0x1c]
neg ecx
sbb ecx, ecx
xor ebx, ebx
add ecx, 0xb8f7
cmp ecx, eax
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x1c]
setne bl
xor edx, edx
cmp ecx, eax
mov eax, dword [esp + 0x20]
setl dl
add eax, 0x10994e85
add ebx, edx
add eax, ebx
sub eax, dword [esp + 0x1c]
neg eax
sbb eax, eax
xor ebx, ebx
inc eax
cmp eax, dword [esp + 0x1c]
jne 0x1001db5d
cmp dword [esp + 0x20], ebx
je 0x1001db5d
xor eax, eax
inc eax
jmp 0x1001db5f
mov eax, ebx
cmp dword [esp + 0x1c], eax
jg 0x1001db6e
cmp dword [esp + 0x18], ebx
je 0x1001db6e
xor ebx, ebx
inc ebx
cmp ebx, 0xfffffffb
mov edx, 0x28e4
sbb eax, eax
inc eax
mov dword [esp + 0xc], eax
cmp dword [esp + 0xc], 0xffffffff
mov eax, dword [esp + 0xac]
sbb ecx, ecx
inc ecx
mov dword [eax], ecx
lea eax, [esp + 0xd0]
push eax
push 1
mov ecx, 0x66f8
call fcn.1001cf93
pop ecx
pop ecx
lea ecx, [esp + 0xd0]
call fcn.1001a511
lea ecx, [esp + 0xac]
call fcn.1001a511
mov al, 1
mov ecx, dword [esp + 0x14c]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret