Function at 0x1000e65c
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10072824
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x214
and dword [ebp - 0x14], 0
movzx eax, byte [ebp + 0x1c]
test eax, eax
je 0x1000f543
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xfc], eax
lea eax, [ebp + 0x14]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x104]
movzx eax, byte [eax]
test eax, eax
je 0x1000f4e1
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xbc]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x1000e6e6
jmp 0x1000f570
mov eax, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0x24]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x44], ecx
mov eax, dword [ebp - 0x44]
cmp dword [eax], 0x4550
je 0x1000e705
jmp 0x1000f570
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x44]
lea eax, [ecx + eax + 0x78]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
cmp dword [eax + 4], 0
jne 0x1000e723
jmp 0x1000f570
and dword [ebp - 0x28], 0
mov eax, dword [ebp - 0x44]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0x44]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0xb8], eax
push 0x5215
push 0x5946
push 1
push 0x5109
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0xb8]
push eax
push 0x21b7
lea eax, [ebp - 0x44]
push eax
push 1
push 0x4045
lea eax, [ebp - 0x30]
push eax
push 0
push 0x661b
push 0x5089
call fcn.1000d5f8
add esp, 0x38
cmp dword [ebp - 0x28], 0
jne 0x1000e78a
jmp 0x1000f570
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x28]
add ecx, dword [eax]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x18], ecx
xor ecx, ecx
call fcn.1000b0dd
push eax
call fcn.10059a78
pop ecx
mov byte [ebp - 0x64], 1
mov byte [ebp - 0x63], 0x51
mov byte [ebp - 0x62], 2
mov byte [ebp - 0x61], 2
mov byte [ebp - 0x60], 2
mov byte [ebp - 0x5f], 0x7c
mov byte [ebp - 0x5e], 0x9d
mov byte [ebp - 0x5d], 3
mov byte [ebp - 0x5c], 0
mov byte [ebp - 0x5b], 7
mov byte [ebp - 0x5a], 1
mov byte [ebp - 0x59], 0
mov byte [ebp - 0x58], 7
mov byte [ebp - 0x57], 4
mov byte [ebp - 0x56], 9
mov byte [ebp - 0x55], 8
mov byte [ebp - 0x54], 8
mov byte [ebp - 0x53], 9
mov byte [ebp - 0x52], 0
mov byte [ebp - 0x51], 6
mov byte [ebp - 0x50], 1
mov byte [ebp - 0x4f], 5
mov byte [ebp - 0x4e], 0
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x64]
or eax, 0x64
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x64]
and ecx, 0x64
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x64]
mov byte [ebp + ecx - 0xdc], al
mov dword [ebp - 0x20], 2
and dword [ebp - 0x7c], 0
jmp 0x1000e847
mov eax, dword [ebp - 0x20]
inc eax
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x17
jae 0x1000e913
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x64]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x20], eax
jne 0x1000e885
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x64]
inc eax
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x64]
mov ecx, dword [ebp - 0x20]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x20], eax
jmp 0x1000e83f
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x63]
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x7c]
movzx ecx, byte [ebp + ecx - 0x66]
movsx ecx, byte [ebp + ecx - 0xdc]
add eax, ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x63]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x7c]
movzx edx, byte [ebp + edx - 0x66]
movsx edx, byte [ebp + edx - 0xdc]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x63]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x7c]
movzx edx, byte [ebp + edx - 0x66]
movsx edx, byte [ebp + edx - 0xdc]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x64]
mov byte [ebp + ecx - 0xdc], al
push 0x20b2
push 0x7572
push 0
lea eax, [ebp - 0x7c]
push eax
push 0x23f1
push 0
call fcn.1000e480
add esp, 0x18
jmp 0x1000e83f
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0xdc], 0
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0x1d8]
call fcn.1000f8ee
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x10c], eax
and dword [ebp - 4], 0
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x10c]
call fcn.1000b0a2
pop ecx
mov dword [ebp - 0x13c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1d8]
call fcn.1000f959
and dword [ebp - 0xa4], 0
jmp 0x1000e984
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0xb
jae 0x1000e99d
mov eax, dword [ebp - 0xa4]
mov byte [ebp + eax - 0xdc], 0
jmp 0x1000e977
mov byte [ebp - 0x90], 5
mov byte [ebp - 0x8f], 0x1c
mov byte [ebp - 0x8e], 3
mov byte [ebp - 0x8d], 3
mov byte [ebp - 0x8c], 1
mov byte [ebp - 0x8b], 4
mov byte [ebp - 0x8a], 7
mov byte [ebp - 0x89], 0
mov byte [ebp - 0x88], 2
mov byte [ebp - 0x87], 1
mov byte [ebp - 0x86], 4
mov byte [ebp - 0x85], 3
mov byte [ebp - 0x84], 9
mov byte [ebp - 0x83], 4
mov byte [ebp - 0x82], 0
mov byte [ebp - 0x81], 1
mov byte [ebp - 0x80], 6
mov byte [ebp - 0x7f], 8
mov byte [ebp - 0x7e], 8
mov byte [ebp - 0x7d], 9
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x90]
or eax, 0x2d
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x90]
and ecx, 0x2d
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x90]
mov byte [ebp + ecx - 0xe8], al
mov dword [ebp - 0x2c], 2
and dword [ebp - 0xa8], 0
jmp 0x1000ea6e
mov eax, dword [ebp - 0x2c]
inc eax
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x14
jae 0x1000eb05
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x8f]
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0xa8]
movzx ecx, byte [ebp + ecx - 0x92]
movsx ecx, byte [ebp + ecx - 0xe8]
add eax, ecx
mov ecx, dword [ebp - 0x2c]
movzx ecx, byte [ebp + ecx - 0x8f]
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0xa8]
movzx edx, byte [ebp + edx - 0x92]
movsx edx, byte [ebp + edx - 0xe8]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x2c]
movzx ecx, byte [ebp + ecx - 0x8f]
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0xa8]
movzx edx, byte [ebp + edx - 0x92]
movsx edx, byte [ebp + edx - 0xe8]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x2c]
movzx ecx, byte [ebp + ecx - 0x90]
mov byte [ebp + ecx - 0xe8], al
jmp 0x1000ea66
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0xe8], 0
lea eax, [ebp - 0xe8]
push eax
lea ecx, [ebp - 0x1a8]
call fcn.1000f8ee
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x11c], eax
mov dword [ebp - 4], 1
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x11c]
call fcn.1000b0a2
pop ecx
mov dword [ebp - 0x124], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1a8]
call fcn.1000f959
and dword [ebp - 0x9c], 0
jmp 0x1000eb79
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0xb
jae 0x1000eb92
mov eax, dword [ebp - 0x9c]
mov byte [ebp + eax - 0xe8], 0
jmp 0x1000eb6c
push dword [ebp - 0x124]
push dword [ebp - 0x13c]
call fcn.1000c7bc
pop ecx
pop ecx
mov dword [ebp - 0xc8], eax
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0x44]
push eax
push 1
push 0x5ec7
push 0x4b22
push 1
call fcn.1000d278
add esp, 0x18
push 0x7034
push 0x3a5d
lea eax, [ebp - 0xc8]
push eax
push 1
push 1
lea eax, [ebp - 0x18]
push eax
call fcn.1000c93d
add esp, 0x18
and dword [ebp - 0x6c], 0
mov eax, dword [ebp - 0x18]
cmp dword [eax + 0x18], 0
jbe 0x1000ec38
push 0x2f46
push 0x3114
push 0x5b48
push 0x36fd
push 1
push 0x5175
push 0x6a32
push 1
push 0x3f02
lea eax, [ebp - 0x18]
push eax
push 0x6878
push 0
lea eax, [ebp - 0x6c]
push eax
call fcn.1000d031
add esp, 0x34
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x14]
sub eax, dword [ebp - 0x6c]
mov dword [ebp - 0x40], eax
and dword [ebp - 0x94], 0
jmp 0x1000ec63
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x40]
jge 0x1000eccc
push 0x373e
push 0x3383
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0xf8]
push eax
call fcn.1000d85c
add esp, 0x24
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0xf8]
mov dword [ecx + eax], edx
push 0x65df
lea eax, [ebp - 0x10]
push eax
push 1
push 1
call fcn.1000d3ff
add esp, 0x10
jmp 0x1000ec56
push 1
push 0x52f6
lea eax, [ebp - 0x18]
push eax
push 0x59ef
push 0x7ac6
push 0x4d0f
push 0
push 0xa19
lea eax, [ebp - 0x6c]
push eax
call fcn.1000e2ac
add esp, 0x24
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x18]
sub eax, dword [ebp - 0x6c]
mov dword [ebp - 0x40], eax
and dword [ebp - 0xac], 0
jmp 0x1000ed1b
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
cmp eax, dword [ebp - 0x40]
jge 0x1000ed87
push 0x1452
push 0x5c9b
push 0x1bbc
push 1
lea eax, [ebp - 0x24]
push eax
push 0x3a5d
push 1
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x10]
push eax
push 0x550a
call fcn.1000d4e5
add esp, 0x28
push 0
push 0x4fc7
push 0x592e
push 0x2a82
push 0xf4e
lea eax, [ebp - 0x10]
push eax
push 0
push 0x608b
push 0x7e0c
call fcn.1000e2ac
add esp, 0x24
jmp 0x1000ed0e
push 0x54db
lea eax, [ebp - 0x18]
push eax
push 1
lea eax, [ebp - 0x10]
push eax
push 0x6ab3
push 0x1fd8
lea eax, [ebp - 0x40]
push eax
push 0x5aa6
push 1
push 0x1847
push 0x1e42
push 1
push 0x4072
push 0x49b7
call fcn.1000d5f8
add esp, 0x38
push 1
push 0xfa1
push 1
lea eax, [ebp - 0x18]
push eax
push 0x407a
push 0x47bb
lea eax, [ebp - 0x6c]
push eax
call fcn.1000d983
add esp, 0x1c
push 1
push 0x5129
lea eax, [ebp - 0x24]
push eax
push 0x33bd
lea eax, [ebp - 0x40]
push eax
push 0x6e5e
push 0x6184
push 1
lea eax, [ebp - 0x18]
push eax
push 0x5fc7
push 0x72de
lea eax, [ebp - 0x28]
push eax
push 0x5ea6
lea eax, [ebp - 0x10]
push eax
call fcn.1000dc98
add esp, 0x38
mov eax, dword [ebp - 0x40]
shl eax, 1
mov ecx, dword [ebp - 0x10]
sub ecx, eax
mov eax, dword [ebp - 0x18]
mov dword [eax + 0x24], ecx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x28]
add ecx, dword [eax + 0xc]
add ecx, dword [ebp - 0x24]
push ecx
lea ecx, [ebp - 0x190]
call fcn.1000f8ee
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x190]
call fcn.1000f992
mov dword [ebp - 0xc0], eax
push dword [ebp - 0xc0]
mov eax, dword [ebp - 0xc0]
shr eax, 1
push eax
call fcn.1000c7bc
pop ecx
pop ecx
mov dword [ebp - 0x78], eax
mov byte [ebp - 0x3c], 0
mov byte [ebp - 0x3b], 0xa1
mov byte [ebp - 0x3a], 2
mov byte [ebp - 0x39], 0xcf
mov byte [ebp - 0x38], 0xb3
mov byte [ebp - 0x37], 3
mov byte [ebp - 0x36], 0x42
mov byte [ebp - 0x35], 1
mov byte [ebp - 0x34], 8
mov byte [ebp - 0x33], 2
mov byte [ebp - 0x32], 8
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x3c]
or eax, 0x8f
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x3c]
and ecx, 0x8f
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x3c]
mov byte [ebp + ecx - 0x4c], al
mov dword [ebp - 0x1c], 2
and dword [ebp - 0x70], 0
jmp 0x1000eefb
mov eax, dword [ebp - 0x1c]
inc eax
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xb
jae 0x1000efa0
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x3c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x1c], eax
jne 0x1000ef39
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x3c]
inc eax
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x3c]
mov ecx, dword [ebp - 0x1c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x1c], eax
jmp 0x1000eef3
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x3b]
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x70]
movzx ecx, byte [ebp + ecx - 0x3e]
movsx ecx, byte [ebp + ecx - 0x4c]
add eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x3b]
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x70]
movzx edx, byte [ebp + edx - 0x3e]
movsx edx, byte [ebp + edx - 0x4c]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x3b]
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x70]
movzx edx, byte [ebp + edx - 0x3e]
movsx edx, byte [ebp + edx - 0x4c]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x3c]
mov byte [ebp + ecx - 0x4c], al
and dword [ebp - 0x70], 0
jmp 0x1000eef3
xor eax, eax
inc eax
shl eax, 2
mov byte [ebp + eax - 0x4c], 0
cmp dword [ebp - 0x78], 4
jle 0x1000f062
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x220]
call fcn.1000f8ee
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x144], eax
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x14]
or eax, 1
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x78]
sub eax, 4
push eax
lea eax, [ebp - 0x1f0]
push eax
call fcn.1000c80e
pop ecx
pop ecx
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x108], eax
mov dword [ebp - 4], 4
mov eax, dword [ebp - 0x14]
or eax, 2
mov dword [ebp - 0x14], eax
push dword [ebp - 0x144]
mov edx, dword [ebp - 0x108]
lea ecx, [ebp - 0x1c0]
call fcn.10011f96
pop ecx
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x110], eax
mov dword [ebp - 4], 5
mov eax, dword [ebp - 0x14]
or eax, 4
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0xcc], eax
jmp 0x1000f08e
push dword [ebp - 0x78]
lea eax, [ebp - 0x208]
push eax
call fcn.1000c80e
pop ecx
pop ecx
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x14]
or eax, 8
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x118], eax
push dword [ebp - 0x118]
lea ecx, [ebp - 0x178]
call fcn.1000f911
mov dword [ebp - 4], 6
mov eax, dword [ebp - 0x14]
and eax, 8
je 0x1000f0c9
and dword [ebp - 0x14], 0xfffffff7
lea ecx, [ebp - 0x208]
call fcn.1000f959
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x14]
and eax, 4
je 0x1000f0e4
and dword [ebp - 0x14], 0xfffffffb
lea ecx, [ebp - 0x1c0]
call fcn.1000f959
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x14]
and eax, 2
je 0x1000f0ff
and dword [ebp - 0x14], 0xfffffffd
lea ecx, [ebp - 0x1f0]
call fcn.1000f959
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x14]
and eax, 1
je 0x1000f11a
and dword [ebp - 0x14], 0xfffffffe
lea ecx, [ebp - 0x220]
call fcn.1000f959
and dword [ebp - 0xa0], 0
jmp 0x1000f130
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 5
jae 0x1000f146
mov eax, dword [ebp - 0xa0]
mov byte [ebp + eax - 0x4c], 0
jmp 0x1000f123
push 1
push 0x788f
push 0
push 0x58a
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x10]
push eax
push 0x16d5
call fcn.1000d983
add esp, 0x1c
push 0x1a85
push 0x2ccb
push 0x1193
push 0x655c
push 1
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x178]
push eax
push 1
push 0x44a
push 1
push 0x2927
push 0x2dd3
push 0x46d5
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x18]
push eax
push 0x46cb
lea eax, [ebp - 0x24]
push eax
call fcn.1000cb99
add esp, 0x44
push 1
push 0x204b
push 0x83c
lea eax, [ebp - 0x78]
push eax
push 0x33ae
push 0
push 0x6f6f
push 0xcdf
push 0x5001
lea eax, [ebp - 0x10]
push eax
push 0x46e8
call fcn.1000da2d
add esp, 0x2c
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x24]
mov byte [ecx + eax], 0
push 0x4a2
push 0x7f72
push 0xdad
push 0x5715
push 0x4ce5
push 0x3256
lea eax, [ebp - 0x10]
push eax
push 0x1536
push 0x6830
push 1
push 1
push 1
push 0x1077
push 0xa76
push 0x1e56
call fcn.1000ce6c
add esp, 0x3c
mov eax, dword [ebp - 0x18]
cmp dword [eax + 0x18], 0
jbe 0x1000f2a6
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x10]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 4]
sub eax, ecx
mov ecx, dword [ebp - 0x18]
xor edx, edx
div dword [ecx + 0x18]
cmp eax, 0xc
jbe 0x1000f27a
mov dword [ebp - 0xb4], 0xc
jmp 0x1000f298
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x10]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 4]
sub eax, ecx
mov ecx, dword [ebp - 0x18]
xor edx, edx
div dword [ecx + 0x18]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xd0], eax
jmp 0x1000f2ad
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0xc4], eax
and dword [ebp - 0x98], 0
jmp 0x1000f2cf
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x98]
cmp ecx, dword [eax + 0x18]
jae 0x1000f422
push dword [ebp - 0xc4]
mov eax, dword [ebp - 0xc4]
cdq
sub eax, edx
sar eax, 1
push eax
call fcn.1000c7bc
pop ecx
pop ecx
mov dword [ebp - 0xb0], eax
push dword [ebp - 0xb0]
lea eax, [ebp - 0x160]
push eax
call fcn.1000c80e
pop ecx
pop ecx
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x28]
push eax
push 1
lea eax, [ebp - 0x10]
push eax
push 0x3854
push 0x263c
lea eax, [ebp - 0x98]
push eax
push 0x46c9
lea eax, [ebp - 0x24]
push eax
push 1
push 0x6a6a
lea eax, [ebp - 0x18]
push eax
push 0x4a95
call fcn.1000de3b
add esp, 0x30
push 0x12d4
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0xb0]
push eax
push 0x240d
push 0
push 0x5231
lea eax, [ebp - 0x160]
push eax
push 1
lea eax, [ebp - 0x24]
push eax
push 0x4038
lea eax, [ebp - 0x28]
push eax
push 1
push 0x18ad
call fcn.1000d031
add esp, 0x34
lea eax, [ebp - 0x10]
push eax
push 0x46ea
push 0x3ebf
lea eax, [ebp - 0xb0]
push eax
push 1
push 0x3398
push 0x7183
push 1
push 0x661f
push 0x2b13
push 0x2027
push 1
push 0x1609
call fcn.1000d031
add esp, 0x34
push 0x674c
push 1
lea eax, [ebp - 0x10]
push eax
push 0x19fa
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x28]
push eax
push 0x4767
push 0x40e7
push 0
push 0x7fa0
call fcn.1000d171
add esp, 0x28
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x160]
call fcn.1000f959
jmp 0x1000f2c2
and dword [ebp - 0x68], 0
jmp 0x1000f42f
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x10]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 4]
sub eax, ecx
cmp dword [ebp - 0x68], eax
jae 0x1000f47b
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x28]
push eax
push 1
push 0x2b8
push 0x2e35
push 1
push 0x5baf
push 0x42e3
push 0x529c
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.1000e398
add esp, 0x2c
jmp 0x1000f428
push 0
push 0x1120
push 0x2b9
lea eax, [ebp - 0x68]
push eax
push 0x25da
push 0x4230
push 0x2c80
push 1
push 0x743f
lea eax, [ebp - 0x30]
push eax
push 0x4b0a
push 0x1ae5
push 0x771e
push 0x2cb4
call fcn.1000dc98
add esp, 0x38
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x178]
call fcn.1000f959
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.1000f959
jmp 0x1000f541
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x74]
mov dword [eax], 0
jmp 0x1000f524
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x74]
mov dword [ecx], eax
mov eax, dword [ebp - 0x74]
cmp dword [eax], 2
jge 0x1000f541
mov eax, dword [ebp - 0x74]
push dword [eax]
mov ecx, dword [ebp - 0x148]
call fcn.1000fa89
or dword [eax], 0xffffffff
jmp 0x1000f519
jmp 0x1000f570
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xf0], eax
push 0x4c7d
push 1
push dword [ebp - 0xf0]
push dword [ebp - 0xf4]
call fcn.1000d484
add esp, 0x10
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret