Function at 0x1000f377
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c
mov eax, dword [ebp + 0x14]
push ebx
push esi
lea ecx, [eax + 0x43]
push edi
mov edi, eax
mov dword [ebp - 4], edi
mov dword [ebp - 0x1c], ecx
cmp eax, ecx
ja 0x1000f556
mov esi, dword [ebp + 0x14]
xor ebx, ebx
cmp edi, 0x52a1
ja 0x1000f215
je 0x1000f1e9
mov eax, edi
sub eax, 0x537
je 0x1000f1c3
sub eax, 0x33e
je 0x1000f172
dec eax
je 0x1000f556
jmp case.default.0x1000f236
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
push 0x31de
lea edx, [ebp - 0x4c]
push edx
lea eax, [ebp + 0x14]
push eax
mov dword [ebp + 0x14], ecx
call fcn.10051dc0
mov edx, dword [ebp + 0x10]
push ebx
lea ecx, [ebp - 0x34]
push ecx
push ebx
push 0xf09
push edx
call fcn.10002310
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x34]
push ecx
push 0x2622
push ebx
lea edx, [ebp - 0x4c]
push ebx
push edx
call fcn.10058790
add esp, 0x38
mov dword [ebp + 0x14], eax
jmp case.default.0x1000f236
mov eax, 0x128a
cmp eax, eax
je 0x1000f51e
add eax, 0x24
cmp eax, 0x128a
jbe 0x1000f1ca
mov dword [esi + 0x48], ebx
mov dword [esi + 4], 0x578
jmp case.default.0x1000f236
push 0x7f35
lea eax, [ebp - 0x10]
push ebx
push eax
mov dword [ebp - 0x10], 0xd0
call fcn.100680e0
mov esi, eax
add esp, 0xc
cmp esi, ebx
jne case.default.0x1000f236
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
cmp edi, 0x5c53
ja 0x1000f492
je 0x1000f48a
lea eax, [edi - 0x52a2]
cmp eax, 0x1a
ja case.default.0x1000f236
jmp dword [eax*4 + 0x1000f560]
mov dword [esi + 0x30], 0xc8
mov dword [esi + 0x34], 0x64
jmp case.default.0x1000f236
mov ecx, dword [ebp + 0xc]
mov dword [esi + 0xb0], ecx
jmp case.default.0x1000f236
mov dword [esi + 0x6c], ebx
mov dword [esi + 0x70], ebx
jmp case.default.0x1000f236
mov dword [esi + 0xc], ebx
jmp case.default.0x1000f236
mov edx, dword [esi + 4]
sub edx, 0x18
mov dword [esi + 8], edx
mov dword [esi + 0xc0], ebx
jmp case.default.0x1000f236
mov dword [esi + 0x60], ebx
mov dword [esi + 0x64], ebx
jmp case.default.0x1000f236
jl 0x1000f2ea
or ah, byte [edx]
and byte [ecx + 0xbc9e], cl
add byte [ecx + 0x64e9585e], cl
add al, byte [eax]
add byte [ecx + 0x4c], ch
imul ecx, dword [ebx + edi*8 + 5], 0x2c5e8986
imul ecx, dword [ebx + edi*8 + 5], 0x2c5e8986
mov dword [esi + 0x28], ebx
jmp case.default.0x1000f236
mov eax, dword [esi + 4]
push 0x7f35
lea ecx, [ebp - 0x14]
lea eax, [eax + eax*2 + 0x48]
push ebx
push ecx
mov dword [ebp - 0x14], eax
call fcn.100680e0
add esp, 0xc
mov dword [esi + 0xb4], eax
cmp eax, ebx
jne 0x1000f311
mov edi, 0x67c9
mov edi, edi
mov eax, edi
sub eax, 0x67c9
je 0x1000f2f4
sub eax, 0x5d
je 0x1000f20c
call 0x2a85024c
invalid
jmp 0x1000f303
push esi
push 0x5d67
push ebx
call fcn.10064970
add esp, 0xc
add edi, 0x5d
cmp edi, 0x6826
jbe 0x1000f2e0
mov edi, dword [ebp - 4]
push 0x6401
push ebx
push ebx
call int.100379b0
mov dword [esi + 0xa8], eax
jmp 0x1000f504
mov dword [esi + 0x1c], ebx
mov dword [esi + 0x20], ebx
jmp case.default.0x1000f236
mov dword [esi + 0x7c], 0x14
mov dword [esi + 0xc8], ebx
jmp case.default.0x1000f236
mov dword [esi + 0x54], 0x64
jmp case.default.0x1000f236
mov dword [esi + 0xcc], ebx
mov dword [ebp + 0x14], esi
jmp case.default.0x1000f236
mov dword [esi + 0xac], ebx
jmp case.default.0x1000f236
ret 0xaabb
mov dword [esi + 0xc4], ebx
jmp case.default.0x1000f236
cmp dword [esi + 0xa8], ebx
jne 0x1000f3d6
mov edi, 0x5285
nop
mov eax, edi
sub eax, 0x5285
je 0x1000f3a4
sub eax, 0x27
je 0x1000f556
jmp 0x1000f3c8
mov edx, dword [esi + 0xb4]
push edx
push 0x5d67
push ebx
call fcn.10064970
push esi
push 0x5d67
push ebx
call fcn.10064970
add esp, 0x18
mov dword [ebp + 0x14], ebx
add edi, 0x27
cmp edi, 0x52ac
jbe 0x1000f390
mov edi, dword [ebp - 4]
lea eax, [esi + 0x88]
mov dword [eax], eax
mov dword [esi + 0x8c], eax
lea eax, [esi + 0x90]
mov dword [eax], eax
mov dword [esi + 0x94], eax
jmp case.default.0x1000f236
lea eax, [esi + 0x98]
mov dword [eax], eax
mov dword [esi + 0x9c], eax
lea eax, [esi + 0xa0]
mov dword [eax], eax
mov dword [esi + 0xa4], eax
mov dword [esi + 0x5c], ebx
jmp case.default.0x1000f236
mov eax, 0x20
mov dword [esi + 0x38], eax
mov dword [esi + 0x3c], eax
mov dword [esi + 0x40], eax
jmp case.default.0x1000f236
mov dword [esi + 0x10], ebx
mov dword [esi + 0x14], ebx
mov dword [esi + 0x18], ebx
jmp case.default.0x1000f236
mov dword [esi + 0x74], ebx
mov dword [esi + 0x78], ebx
jmp case.default.0x1000f236
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov dword [esi], ecx
jmp case.default.0x1000f236
mov dword [esi + 0x24], 2
mov dword [esi + 0xb8], ebx
jmp case.default.0x1000f236
cmc
inc edi
sub bl, byte [eax - 0x7b61760f]
add byte [eax], al
add byte [ecx + 0x46c74c5e], cl
push eax
add byte fs:[eax], al
add cl, ch
mov byte [eax], al
add byte [eax], al
mov dword [esi + 0x44], ebx
mov dword [esi + 0x80], ebx
jmp case.default.0x1000f236
mov edx, dword [ebp + 0x14]
mov dword [ebp - 0xc], edx
jmp case.default.0x1000f236
mov eax, edi
sub eax, 0x5c54
je 0x1000f4ce
dec eax
je 0x1000f4a7
dec eax
je 0x1000f556
jmp case.default.0x1000f236
mov eax, dword [ebp - 0xc]
cmp eax, ebx
je 0x1000f4b4
mov eax, dword [eax + 0x10]
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
cmp dword [eax + 0x74], ebx
jne 0x1000f4c6
add eax, 0x7c
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 8]
mov dword [ebp + 0x14], ecx
jmp case.default.0x1000f236
mov edi, dword [ebp + 8]
mov dword [ebp - 8], 0xffffffff
cmp dword [edi + 0x74], ebx
jne 0x1000f4e7
lea edx, [edi + 0x7c]
push edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
push edi
lea edx, [ebp - 0x18]
push 0x60fd
push edx
mov dword [ebp - 0x18], ecx
call fcn.1002e320
mov edi, dword [ebp - 4]
mov dword [ebp - 0xc], eax
add esp, 0xc
inc edi
mov dword [ebp - 4], edi
cmp edi, dword [ebp - 0x1c]
jbe 0x1000f144
mov eax, dword [ebp + 0x14]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
mov eax, dword [ebp + 0xc]
lea edx, [ebp + 0x14]
push edx
push eax
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp + 8]
push ecx
lea edx, [ebp - 0x1c]
push edx
push 0x715c
mov dword [ebp + 0x14], 1
call fcn.1000e1f0
add esp, 0x14
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
popfd
scasb al, byte es:[edi]
add bl, cl
mov eax, dword [ebp + 0x14]
mov eax, dword [ebp + 0x14]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret