Function at 0x10006baa
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
mov edx, 0x2e
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x10006bb3
mov word [esp + 0x54], 1
movzx ebx, word [esp + 0x54]
mov eax, 5
cmp ebx, eax
jl 0x10006be4
movzx ebx, word [esp + 0x54]
dec ebx
push ebx
pop eax
mov word [esp + 0x58], ax
jmp 0x10006bf1
movzx ebx, word [esp + 0x54]
inc ebx
push ebx
pop eax
mov word [esp + 0x58], ax
movzx ebx, word [esp + 0x58]
push ebx
mov ebx, 0xa
cmp ebx, dword [esp]
jne 0x10006c0b
add esp, 4
jmp 0x10007458
mov ebx, 7
cmp ebx, dword [esp]
jne 0x10006c23
movzx eax, word [esp + 0x5c]
push eax
pop eax
mov word [esp + 0x58], ax
jmp 0x10006c3a
mov ebx, 4
cmp ebx, dword [esp]
jne 0x10006c3a
movzx ebx, word [esp + 0x5c]
inc ebx
push ebx
pop eax
mov word [esp + 0x58], ax
pop eax
mov ebx, dword [esp + 0xcc]
and ebx, ebx
jg 0x10006c5c
lea edx, str.costs
lea ecx, [esp + 0x5c]
call fcn.10031008
xor eax, eax
jmp 0x10007458
push dword [esp + 0xcc]
pop eax
mov dword [esp], eax
mov ebx, dword [esp + 0xcc]
mov ebp, dword [esp]
add ebx, dword [ebp + 0x3c]
mov dword [esp + 4], ebx
lea edx, str.legal
lea ecx, [esp + 0x60]
call fcn.10031008
mov ebx, dword [esp + 0xcc]
mov ebp, dword [esp + 4]
add ebx, dword [ebp + 0x78]
mov dword [esp + 0x24], ebx
mov ebx, dword [esp + 0x24]
mov ebp, dword [esp + 4]
add ebx, dword [ebp + 0x7c]
mov dword [esp + 0x28], ebx
lea edx, str.fluid
lea ecx, [esp + 0x64]
call fcn.10031008
mov word [esp + 0x68], 1
movzx ebx, word [esp + 0x68]
mov eax, 2
cmp ebx, eax
jl 0x10006cdb
movzx ebx, word [esp + 0x68]
dec ebx
push ebx
pop eax
mov word [esp + 0x6c], ax
jmp 0x10006ce8
movzx ebx, word [esp + 0x68]
inc ebx
push ebx
pop eax
mov word [esp + 0x6c], ax
movzx ebx, word [esp + 0x6c]
push ebx
mov ebx, 0xd
cmp ebx, dword [esp]
jne 0x10006d02
add esp, 4
jmp 0x10007458
mov ebx, 9
cmp ebx, dword [esp]
jne 0x10006d1a
movzx eax, word [esp + 0x70]
push eax
pop eax
mov word [esp + 0x6c], ax
jmp 0x10006d31
mov ebx, 4
cmp ebx, dword [esp]
jne 0x10006d31
movzx ebx, word [esp + 0x70]
inc ebx
push ebx
pop eax
mov word [esp + 0x6c], ax
pop eax
mov ebp, dword [esp + 4]
push ebp
pop ebp
lea eax, [ebp + 0x78]
push eax
pop eax
mov dword [esp + 8], eax
lea edx, str.cradle
lea ecx, [esp + 0x70]
call fcn.10031008
mov ebx, dword [esp + 0xcc]
mov ebp, dword [esp + 8]
add ebx, dword [ebp]
mov dword [esp + 0xc], ebx
mov word [esp + 0x74], 3
movzx ebx, word [esp + 0x74]
mov eax, 1
cmp ebx, eax
jl 0x10006d86
movzx ebx, word [esp + 0x74]
dec ebx
push ebx
pop eax
mov word [esp + 0x78], ax
jmp 0x10006d93
movzx ebx, word [esp + 0x74]
inc ebx
push ebx
pop eax
mov word [esp + 0x78], ax
movzx ebx, word [esp + 0x78]
push ebx
mov ebx, 0xc
cmp ebx, dword [esp]
jne 0x10006dad
add esp, 4
jmp 0x10007458
mov ebx, 7
cmp ebx, dword [esp]
jne 0x10006dc5
movzx eax, word [esp + 0x7c]
push eax
pop eax
mov word [esp + 0x78], ax
jmp 0x10006ddc
mov ebx, 4
cmp ebx, dword [esp]
jne 0x10006ddc
movzx ebx, word [esp + 0x7c]
inc ebx
push ebx
pop eax
mov word [esp + 0x78], ax
pop eax
lea edx, str.divorce
lea ecx, [esp + 0x7c]
call fcn.10031008
mov ebp, dword [esp + 0xc]
mov ebx, dword [ebp + 0x24]
and ebx, ebx
jle 0x10006e04
mov ebp, dword [esp + 0xc]
mov ebx, dword [ebp + 0x20]
and ebx, ebx
jle 0x10006e04
jmp 0x10006e0b
mov eax, 1
jmp 0x10006e0d
xor eax, eax
and eax, eax
je 0x10006e2a
xor eax, eax
jmp 0x10007458
mov ebx, dword [esp + 0xcc]
mov ebp, dword [esp + 0xc]
add ebx, dword [ebp + 0x1c]
mov dword [esp + 0x10], ebx
mov word [esp + 0x84], 0xa
movzx ebx, word [esp + 0x84]
mov eax, 3
cmp ebx, eax
jl 0x10006e6c
movzx ebx, word [esp + 0x84]
dec ebx
push ebx
pop eax
mov word [esp + 0x88], ax
jmp 0x10006e7f
movzx ebx, word [esp + 0x84]
inc ebx
push ebx
pop eax
mov word [esp + 0x88], ax
movzx ebx, word [esp + 0x88]
push ebx
mov ebx, 0xc
cmp ebx, dword [esp]
jne 0x10006e9c
add esp, 4
jmp 0x10007458
mov ebx, 9
cmp ebx, dword [esp]
jne 0x10006eba
movzx eax, word [esp + 0x8c]
push eax
pop eax
mov word [esp + 0x88], ax
jmp 0x10006ed7
mov ebx, 3
cmp ebx, dword [esp]
jne 0x10006ed7
movzx ebx, word [esp + 0x8c]
inc ebx
push ebx
pop eax
mov word [esp + 0x88], ax
pop eax
mov ebx, dword [esp + 0xcc]
mov ebp, dword [esp + 0xc]
add ebx, dword [ebp + 0x24]
mov dword [esp + 0x14], ebx
lea edx, str.demonstrates
lea ecx, [esp + 0x8c]
call fcn.10031008
mov ebx, dword [esp + 0xcc]
mov ebp, dword [esp + 0xc]
add ebx, dword [ebp + 0x20]
mov dword [esp + 0x18], ebx
lea edx, str.valley
lea ecx, [esp + 0x90]
call fcn.10031008
mov ebp, dword [esp + 0xc]
mov ebx, dword [ebp + 0x18]
cmp ebx, 0x1000
jg 0x10006f3c
mov ebp, dword [esp + 0xc]
mov ebx, dword [ebp + 0x18]
and ebx, ebx
jle 0x10006f3c
jmp 0x10006f43
mov eax, 1
jmp 0x10006f45
xor eax, eax
and eax, eax
je 0x10006ff0
xor eax, eax
jmp 0x10007458
mov word [esp + 0x9c], 8
movzx ebx, word [esp + 0x9c]
mov eax, 5
cmp ebx, eax
jl 0x10007020
movzx ebx, word [esp + 0x9c]
dec ebx
push ebx
pop eax
mov word [esp + 0xa0], ax
jmp 0x10007033
movzx ebx, word [esp + 0x9c]
inc ebx
push ebx
pop eax
mov word [esp + 0xa0], ax
movzx ebx, word [esp + 0xa0]
push ebx
mov ebx, 0x10
cmp ebx, dword [esp]
jne 0x10007050
add esp, 4
jmp 0x10007458
mov ebx, 5
cmp ebx, dword [esp]
jne 0x1000706e
movzx eax, word [esp + 0xa4]
push eax
pop eax
mov word [esp + 0xa0], ax
jmp 0x1000708b
mov ebx, 2
cmp ebx, dword [esp]
jne 0x1000708b
movzx ebx, word [esp + 0xa4]
inc ebx
push ebx
pop eax
mov word [esp + 0xa0], ax
pop eax
mov word [esp + 0xa4], 1
movzx ebx, word [esp + 0xa4]
mov eax, 3
cmp ebx, eax
jl 0x100070bc
movzx ebx, word [esp + 0xa4]
dec ebx
push ebx
pop eax
mov word [esp + 0xa8], ax
jmp 0x100070cf
movzx ebx, word [esp + 0xa4]
inc ebx
push ebx
pop eax
mov word [esp + 0xa8], ax
movzx ebx, word [esp + 0xa8]
push ebx
mov ebx, 0xb
cmp ebx, dword [esp]
jne 0x100070ec
add esp, 4
jmp 0x10007458
mov ebx, 4
cmp ebx, dword [esp]
jne 0x1000710a
movzx eax, word [esp + 0xac]
push eax
pop eax
mov word [esp + 0xa8], ax
jmp 0x10007127
mov ebx, 3
cmp ebx, dword [esp]
jne 0x10007127
movzx ebx, word [esp + 0xac]
inc ebx
push ebx
pop eax
mov word [esp + 0xa8], ax
pop eax
mov dword [esp + 0x1c], 0
jmp 0x10007132
mov ebp, dword [esp + 0xc]
mov ebx, dword [ebp + 0x18]
dec ebx
cmp ebx, dword [esp + 0x1c]
jl 0x1000739a
push dword [0x10043918]
push dword [0x10043918]
push 0x18
push 0xffffffff
mov ebx, dword [esp + 0xdc]
mov edi, dword [esp + 0x28]
mov esi, dword [esp + 0x2c]
shl esi, 2
add edi, esi
push edi
pop eax
call fcn.10031190
add ebx, eax
push ebx
call fcn.10037970
lea eax, [esp + 0x4c]
push eax
call fcn.10037dc0
mov edx, dword [esp + 0x48]
xor ecx, ecx
call fcn.100311d0
jne 0x10007390
push dword [esp + 0x48]
call fcn.10009614
mov dword [esp + 0x44], eax
mov ebx, dword [esp + 0xd0]
cmp ebx, dword [esp + 0x44]
jne 0x10007390
mov ebx, dword [esp + 0xcc]
mov edi, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
add eax, eax
add esi, eax
push esi
pop eax
call fcn.100311b0
mov esi, eax
shl esi, 2
add edi, esi
push edi
pop eax
call fcn.10031190
add ebx, eax
mov dword [esp + 0x20], ebx
push dword [esp + 0x20]
call fcn.10037a90
push eax
pop eax
mov byte [esp + 0x4c], al
mov ebx, dword [esp + 0x20]
inc ebx
push ebx
call fcn.10037a90
push eax
pop eax
mov byte [esp + 0x50], al
movzx ebx, byte [esp + 0x4c]
mov eax, 0xcc
cmp ebx, eax
je 0x10007279
movzx ebx, byte [esp + 0x4c]
mov eax, 0xcd
cmp ebx, eax
jne 0x10007239
movzx ebx, byte [esp + 0x50]
mov eax, 3
cmp ebx, eax
jne 0x10007239
mov eax, 1
jmp 0x1000723b
xor eax, eax
and eax, eax
jne 0x1000726a
movzx ebx, byte [esp + 0x4c]
mov eax, 0xf
cmp ebx, eax
jne 0x10007262
movzx ebx, byte [esp + 0x50]
mov eax, 0xb
cmp ebx, eax
jne 0x10007262
mov eax, 1
jmp 0x10007264
xor eax, eax
and eax, eax
jne 0x1000726a
jmp 0x10007271
mov eax, 1
jmp 0x10007273
xor eax, eax
and eax, eax
jne 0x10007279
jmp 0x10007280
mov eax, 1
jmp 0x10007282
xor eax, eax
and eax, eax
je 0x10007293
mov dword [esp + 0x20], 0
jmp 0x1000739a
mov ebx, dword [esp + 0x20]
cmp ebx, dword [esp + 0x24]
jl 0x100072ae
mov ebx, dword [esp + 0x20]
cmp ebx, dword [esp + 0x28]
jg 0x100072ae
mov eax, 1
jmp 0x100072b0
xor eax, eax
and eax, eax
je 0x1000738e
push dword [0x10043918]
push dword [0x10043918]
push 0x18
push 0xffffffff
push dword [esp + 0x30]
call fcn.10037970
lea eax, [esp + 0x34]
push eax
call fcn.10037dc0
mov dword [esp + 0x20], 0
push dword [esp + 0x30]
call fcn.1000c3e8
mov dword [esp + 0x34], eax
mov ebx, dword [esp + 0x34]
and ebx, ebx
jle 0x1000738e
push dword [0x10043918]
push dword [0x10043918]
push dword [esp + 0x3c]
push 0
push dword [esp + 0x40]
call fcn.100356e0
lea eax, [esp + 0x40]
push eax
call fcn.10037dc0
push dword [0x10043918]
push dword [0x10043918]
mov ebx, dword [esp + 0x3c]
add ebx, 2
push ebx
push dword [esp + 0x3c]
call fcn.10035770
lea eax, [esp + 0x3c]
push eax
call fcn.10037dc0
lea edx, [0x1003e03e]
lea ecx, [esp + 0x30]
call fcn.10031008
push dword [esp + 0x3c]
call fcn.10009149
mov dword [esp + 0x40], eax
mov ebx, dword [esp + 0x40]
and ebx, ebx
jle 0x1000738e
push dword [esp + 0x38]
call fcn.10009614
push eax
push dword [esp + 0x44]
call fcn.10006baa
mov dword [esp + 0x20], eax
jmp 0x1000739a
jmp 0x1000739a
inc dword [esp + 0x1c]
jno 0x10007132
lea edx, str.ventures
lea ecx, [esp + 0xac]
call fcn.10031008
mov dword [esp + 0x1c], 0
mov eax, dword [esp + 0x20]
jmp 0x10007458
push dword [esp + 0x8c]
call fcn.10037d30
push dword [esp + 0x5c]
call fcn.10037d30
push dword [esp + 0x3c]
call fcn.10037d30
push dword [esp + 0x64]
call fcn.10037d30
push dword [esp + 0x60]
call fcn.10037d30
push dword [esp + 0x70]
call fcn.10037d30
push dword [esp + 0x38]
call fcn.10037d30
push dword [esp + 0x7c]
call fcn.10037d30
push dword [esp + 0x90]
call fcn.10037d30
push dword [esp + 0x30]
call fcn.10037d30
push dword [esp + 0x80]
call fcn.10037d30
push dword [esp + 0xac]
call fcn.10037d30
push dword [esp + 0x48]
call fcn.10037d30
add esp, 0xb8
pop esi
pop edi
pop ebx
pop ebp
ret 8