Function at 0x1000faa0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x1017b408
mov eax, dword fs:[0]
push eax
sub esp, 0x70
mov eax, dword [0x101c6444]
xor eax, esp
mov dword [esp + 0x6c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x101c6444]
xor eax, esp
push eax
lea eax, [esp + 0x84]
mov dword fs:[0], eax
mov esi, dword [esp + 0x94]
mov ebp, ecx
lea eax, [ebp + 0x198]
lea edi, [eax + 4]
push edi
mov dword [esp + 0x20], ebp
mov dword [esp + 0x60], 0x101975f4
mov dword [esp + 0x64], eax
mov dword [esp + 0x24], edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [esi]
mov edx, dword [esi + 8]
mov ecx, dword [esi + 4]
mov dword [esp + 0x64], eax
mov eax, dword [esi + 0xc]
mov dword [esp + 0x68], ecx
mov ecx, dword [esi + 0x10]
mov dword [esp + 0x6c], edx
lea edx, [esp + 0x64]
mov dword [esp + 0x70], eax
xor ebx, ebx
lea esi, [ebp + 0x1b4]
push edx
lea eax, [esp + 0x38]
mov dword [esp + 0x78], ecx
push eax
mov ecx, esi
mov dword [esp + 0x94], ebx
mov dword [esp + 0x80], ebx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x44], esi
call fcn.10006e10
mov eax, dword [esp + 0x34]
cmp eax, ebx
mov ecx, dword [esi + 4]
mov dword [esp + 0x18], ecx
je 0x1000fb69
cmp eax, esi
je 0x1000fb6e
call fcn.1015828d
mov edx, dword [esp + 0x18]
cmp dword [esp + 0x38], edx
je 0x1000ff97
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0x44]
push ecx
call fcn.1000a780
add esp, 8
cmp dword [esp + 0x58], 0x10
jb 0x1000fba2
mov edx, dword [esp + 0x44]
push edx
call fcn.10157f3b
add esp, 4
lea eax, [esp + 0x64]
push eax
lea ecx, [ebp + 0x1c0]
push ecx
mov ecx, ebp
call fcn.10007c60
mov ebx, dword [ebp + 0x1d8]
cmp dword [ebp + 0x1d4], ebx
lea esi, [ebp + 0x1d0]
jbe 0x1000fbce
call fcn.1015828d
mov edi, dword [esi + 4]
cmp edi, dword [esi + 8]
jbe 0x1000fbdb
call fcn.1015828d
lea edx, [esp + 0x64]
push edx
push ebx
push edi
mov dword [esp + 0x3c], edi
call fcn.10003d00
mov edi, dword [esi + 8]
add esp, 0xc
cmp dword [esi + 4], edi
mov ebx, eax
jbe 0x1000fbfd
call fcn.1015828d
mov eax, esi
cmp esi, eax
je 0x1000fc08
call fcn.1015828d
cmp edi, ebx
jne 0x1000fd61
lea eax, [esp + 0x64]
push eax
mov ecx, esi
call fcn.1000df60
mov ecx, dword [ebp + 0x17c]
mov ebx, dword [ecx]
lea esi, [ebp + 0x178]
mov edx, ecx
mov dword [esp + 0x18], ebx
mov dword [esp + 0x14], esi
mov dword [esp + 0x30], edx
test esi, esi
je 0x1000fc46
lea eax, [ebp + 0x178]
cmp esi, eax
je 0x1000fc4b
call fcn.1015828d
cmp ebx, dword [esp + 0x30]
je 0x1000fd61
test esi, esi
jne 0x1000fc5e
call fcn.1015828d
cmp ebx, dword [esi + 4]
jne 0x1000fc68
call fcn.1015828d
mov eax, dword [ebx + 0xc]
cmp dword [eax + 0x54], 2
je 0x1000fd47
cmp ebx, dword [esi + 4]
jne 0x1000fc7f
call fcn.1015828d
mov esi, dword [ebx + 0x14]
cmp esi, dword [ebx + 0x18]
lea edi, [ebx + 0x10]
jbe 0x1000fc8f
call fcn.1015828d
mov ebp, edi
mov ecx, dword [esp + 0x14]
cmp ebx, dword [ecx + 4]
jne 0x1000fc9f
call fcn.1015828d
mov ebx, dword [edi + 8]
cmp dword [edi + 4], ebx
jbe 0x1000fcac
call fcn.1015828d
test ebp, ebp
je 0x1000fcb4
cmp ebp, edi
je 0x1000fcb9
call fcn.1015828d
cmp esi, ebx
je 0x1000fd47
test ebp, ebp
jne 0x1000fcca
call fcn.1015828d
cmp esi, dword [ebp + 8]
jb 0x1000fcd4
call fcn.1015828d
xor eax, eax
mov dl, byte [esi + eax + 4]
cmp dl, byte [esp + eax + 0x64]
jne 0x1000fd31
add eax, 1
cmp eax, 0x14
jb 0x1000fcd6
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
cmp eax, dword [ecx + 4]
jne 0x1000fcfa
call fcn.1015828d
mov ecx, dword [esp + 0x20]
mov byte [esp + 0x24], 0
mov edx, dword [esp + 0x24]
push edx
mov edx, dword [edi + 8]
mov byte [esp + 0x2c], 0
mov eax, dword [esp + 0x2c]
push eax
push ecx
push esi
push edx
lea eax, [esi + 0x30]
push eax
call fcn.10003e90
mov ebx, dword [esp + 0x30]
add esp, 0x18
add dword [edi + 8], 0xffffffd0
jmp 0x1000fc91
cmp esi, dword [ebp + 8]
jb 0x1000fd3b
call fcn.1015828d
mov ebx, dword [esp + 0x18]
add esi, 0x30
jmp 0x1000fc91
lea ecx, [esp + 0x14]
call fcn.10054630
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
jmp 0x1000fc38
lea ecx, [esp + 0x64]
push ecx
lea edx, [esp + 0x44]
push edx
call fcn.1000a780
add esp, 8
cmp dword [esp + 0x58], 0x10
jb 0x1000fd87
mov eax, dword [esp + 0x44]
push eax
call fcn.10157f3b
add esp, 4
lea ecx, [esp + 0x64]
push ecx
lea edx, [ebp + 0x264]
push edx
mov ecx, ebp
call fcn.10007c60
mov ebx, dword [ebp + 0x27c]
cmp dword [ebp + 0x278], ebx
lea esi, [ebp + 0x274]
jbe 0x1000fdb3
call fcn.1015828d
mov edi, dword [esi + 4]
cmp edi, dword [esi + 8]
jbe 0x1000fdc0
call fcn.1015828d
lea eax, [esp + 0x64]
push eax
push ebx
push edi
mov dword [esp + 0x3c], edi
call fcn.10003d00
mov edi, dword [esi + 8]
add esp, 0xc
cmp dword [esi + 4], edi
mov ebx, eax
jbe 0x1000fde2
call fcn.1015828d
cmp esi, esi
je 0x1000fdeb
call fcn.1015828d
cmp edi, ebx
jne 0x1000ff7b
lea ecx, [esp + 0x64]
push ecx
mov ecx, esi
call fcn.1000df60
mov eax, dword [esp + 0x1c]
mov edx, dword [eax + 0x17c]
mov ebx, dword [edx]
add eax, 0x178
mov esi, eax
mov ecx, edx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], ebx
mov dword [esp + 0x14], esi
mov dword [esp + 0x30], ecx
test esi, esi
je 0x1000fe2c
cmp esi, eax
je 0x1000fe31
call fcn.1015828d
cmp ebx, dword [esp + 0x30]
je 0x1000ff7b
test esi, esi
jne 0x1000fe44
call fcn.1015828d
cmp ebx, dword [esi + 4]
jne 0x1000fe4e
call fcn.1015828d
mov edx, dword [ebx + 0xc]
cmp dword [edx + 0x54], 2
jne 0x1000ff61
cmp ebx, dword [esi + 4]
jne 0x1000fe65
call fcn.1015828d
mov esi, dword [ebx + 0x14]
cmp esi, dword [ebx + 0x18]
lea edi, [ebx + 0x10]
jbe 0x1000fe75
call fcn.1015828d
mov ebp, edi
mov eax, dword [esp + 0x14]
cmp ebx, dword [eax + 4]
jne 0x1000fe85
call fcn.1015828d
mov ebx, dword [edi + 8]
cmp dword [edi + 4], ebx
jbe 0x1000fe92
call fcn.1015828d
test ebp, ebp
je 0x1000fe9a
cmp ebp, edi
je 0x1000fe9f
call fcn.1015828d
cmp esi, ebx
je 0x1000ff61
test ebp, ebp
jne 0x1000feb0
call fcn.1015828d
cmp esi, dword [ebp + 8]
jb 0x1000feba
call fcn.1015828d
lea ecx, [esp + 0x64]
push ecx
lea edx, [esp + 0x44]
push edx
call fcn.1000a780
add esp, 8
cmp dword [esp + 0x58], 0x10
jb 0x1000fee0
mov eax, dword [esp + 0x44]
push eax
call fcn.10157f3b
add esp, 4
cmp esi, dword [ebp + 8]
jb 0x1000feea
call fcn.1015828d
xor eax, eax
lea esp, [esp]
mov cl, byte [esi + eax + 4]
cmp cl, byte [esp + eax + 0x64]
jne 0x1000ff4b
add eax, 1
cmp eax, 0x14
jb 0x1000fef0
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
cmp edx, dword [eax + 4]
jne 0x1000ff14
call fcn.1015828d
mov eax, dword [esp + 0x20]
mov byte [esp + 0x28], 0
mov ecx, dword [esp + 0x28]
push ecx
mov ecx, dword [edi + 8]
mov byte [esp + 0x28], 0
mov edx, dword [esp + 0x28]
push edx
push eax
push esi
push ecx
lea edx, [esi + 0x30]
push edx
call fcn.10003e90
mov ebx, dword [esp + 0x30]
add esp, 0x18
add dword [edi + 8], 0xffffffd0
jmp 0x1000fe77
cmp esi, dword [ebp + 8]
jb 0x1000ff55
call fcn.1015828d
mov ebx, dword [esp + 0x18]
add esi, 0x30
jmp 0x1000fe77
lea ecx, [esp + 0x14]
call fcn.10054630
mov ebx, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
jmp 0x1000fe24
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
push eax
push ecx
mov ecx, dword [esp + 0x44]
lea edx, [esp + 0x34]
push edx
call fcn.10008e90
mov edi, dword [esp + 0x20]
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor eax, eax
mov ecx, dword [esp + 0x84]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x6c]
xor ecx, esp
call fcn.101586e7
add esp, 0x7c
ret 8
mov ecx, dword [ecx + 0x14]
test ecx, ecx
je 0x1001ae1c
jmp 0x1000faa0
mov eax, 2
ret 8