Function at 0x1000fbf0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x10040a78
mov eax, dword fs:[0]
push eax
sub esp, 0x5c
mov eax, dword [0x1007a6b4]
xor eax, esp
mov dword [esp + 0x58], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x1007a6b4]
xor eax, esp
push eax
lea eax, [esp + 0x70]
mov dword fs:[0], eax
cmp dword [0x1007eaa4], 0
mov eax, dword [esp + 0x8c]
mov ebp, dword [esp + 0x88]
mov ebx, dword [esp + 0x90]
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], 0
je 0x1000fc63
mov eax, dword [0x1007eaa8]
mov ecx, eax
imul ecx, eax
cmp dword [esp + 0x94], ecx
ja 0x1000fe49
cmp dword [0x1007eac4], 0
jne 0x100100c4
push 0x32
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
cmp dword [esp + 0xa0], 2
jne 0x1000fe6c
test eax, eax
jne 0x1000fe49
cmp byte [ebx], al
je 0x1000fe49
mov edx, dword [esp + 0x84]
push 0x3c
push edx
call fcn.10001250
mov dword [esp + 0x20], eax
lea eax, [esp + 0x28]
push eax
mov ecx, 0x1007e464
call fcn.1000c030
mov ecx, dword [eax]
mov edi, dword [eax + 4]
mov edx, dword [eax + 8]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], edx
mov ebp, 0x10
mov eax, dword [0x1007e470]
mov ecx, dword [0x1007e474]
lea esi, [eax + ecx]
cmp eax, esi
jbe 0x1000fce9
call fcn.1002fe90
test edi, edi
je 0x1000fcf5
cmp edi, 0x1007e464
je 0x1000fcfa
call fcn.1002fe90
cmp dword [esp + 0x1c], esi
je 0x1000fe49
xor eax, eax
mov dword [esp + 0x68], 0xf
mov dword [esp + 0x64], eax
mov byte [esp + 0x54], al
cmp dword [esp + 0x20], eax
mov dword [esp + 0x78], eax
lea ecx, [esp + 0x14]
je 0x1000fd67
push 0x1004335c
call fcn.1000c090
add eax, 4
push eax
lea edx, [esp + 0x3c]
push edx
call fcn.1000e7f0
add esp, 0xc
push 0xffffffffffffffff
push 0
push eax
lea ecx, [esp + 0x5c]
mov byte [esp + 0x84], 1
call fcn.1000dec0
cmp dword [esp + 0x4c], ebp
mov byte [esp + 0x78], 0
jb 0x1000fdb0
mov eax, dword [esp + 0x38]
push eax
jmp 0x1000fda8
push 0x10043354
call fcn.1000c090
add eax, 4
push eax
lea ecx, [esp + 0x3c]
push ecx
call fcn.1000e7f0
add esp, 0xc
push 0xffffffffffffffff
push 0
push eax
lea ecx, [esp + 0x5c]
mov byte [esp + 0x84], 2
call fcn.1000dec0
cmp dword [esp + 0x4c], ebp
mov byte [esp + 0x78], 0
jb 0x1000fdb0
mov edx, dword [esp + 0x38]
push edx
call fcn.1002ed55
add esp, 4
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x1000fdb5
sub eax, edx
push eax
mov eax, dword [esp + 0x68]
push ebx
push eax
push 0
lea ecx, [esp + 0x60]
call fcn.1000be00
test eax, eax
je 0x1000fe0a
cmp dword [esp + 0x68], ebp
mov dword [esp + 0x78], 0xffffffff
jb 0x1000fdf1
mov ecx, dword [esp + 0x54]
push ecx
call fcn.1002ed55
add esp, 4
push 0
lea edx, [esp + 0x2c]
push edx
lea ecx, [esp + 0x1c]
call fcn.1000c0e0
mov edi, dword [esp + 0x18]
jmp 0x1000fcd2
cmp dword [0x1007c49c], 0
jne 0x1000fe36
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x84]
mov dword [0x1007c478], eax
mov dword [0x1007c474], ecx
mov dword [0x1007c4a0], 1
cmp dword [esp + 0x68], ebp
jb 0x1000fe49
mov edx, dword [esp + 0x54]
push edx
call fcn.1002ed55
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0x70]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x58]
xor ecx, esp
call fcn.1002e6c3
add esp, 0x68
ret 0x24
test eax, eax
jne 0x1000ff6a
cmp byte [ebx], al
je 0x1000ff6a
lea eax, [esp + 0x28]
push eax
mov ecx, 0x1007e464
call fcn.1000c030
mov ecx, dword [eax]
mov esi, dword [eax + 4]
mov edi, dword [eax + 8]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], esi
mov dword [esp + 0x1c], edi
nop
mov eax, dword [0x1007e470]
mov edx, dword [0x1007e474]
lea ebp, [eax + edx]
cmp eax, ebp
jbe 0x1000feb7
call fcn.1002fe90
test esi, esi
je 0x1000fec3
cmp esi, 0x1007e464
je 0x1000fec8
call fcn.1002fe90
cmp edi, ebp
je 0x1000ff6a
test esi, esi
jne 0x1000fed9
call fcn.1002fe90
mov eax, dword [esi + 0x10]
add eax, dword [esi + 0xc]
cmp edi, eax
jb 0x1000fee8
call fcn.1002fe90
mov eax, dword [esi + 8]
cmp eax, edi
ja 0x1000fef1
sub edi, eax
mov ecx, dword [esi + 4]
mov ecx, dword [ecx + edi*4]
mov eax, ebx
add ecx, 4
lea esi, [eax + 1]
nop
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x1000ff00
mov edx, dword [ecx + 0x14]
sub eax, esi
push eax
push ebx
push edx
push 0
call fcn.1000be00
test eax, eax
je 0x1000ff39
push 0
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x1c]
call fcn.1000c0e0
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
jmp 0x1000fea0
cmp dword [0x1007c49c], 0
mov eax, 1
mov dword [esp + 0x20], eax
jne 0x1000ff6a
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x84]
mov dword [0x1007c470], ecx
mov dword [0x1007c46c], edx
mov dword [0x1007c49c], eax
mov eax, dword [esp + 0x24]
push 0x32
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100101b0
mov ecx, dword [esp + 0x24]
cmp byte [ecx], al
je 0x100101b0
mov eax, dword [0x1007e420]
mov edx, dword [0x1007e424]
add edx, eax
xor ebp, ebp
cmp eax, edx
mov edi, eax
jbe 0x1000ffaa
call fcn.1002fe90
mov eax, dword [0x1007e420]
mov esi, 0x1007e414
mov dword [esp + 0x14], ebp
mov ecx, dword [0x1007e424]
lea ebp, [ecx + eax]
cmp eax, ebp
jbe 0x1000ffc5
call fcn.1002fe90
test esi, esi
je 0x1000ffd1
cmp esi, 0x1007e414
je 0x1000ffd6
call fcn.1002fe90
cmp edi, ebp
je 0x100101b0
test esi, esi
mov ebp, edi
jne 0x1000ffe9
call fcn.1002fe90
mov edx, dword [esi + 0xc]
add edx, dword [esi + 0x10]
cmp edi, edx
jb 0x1000fff8
call fcn.1002fe90
mov eax, dword [esi + 8]
cmp eax, edi
ja 0x10010003
mov ebp, edi
sub ebp, eax
mov eax, dword [esi + 4]
mov eax, dword [eax + ebp*4]
add eax, 4
cmp dword [eax + 0x18], 0x10
jb 0x10010017
mov eax, dword [eax + 4]
jmp 0x1001001a
add eax, 4
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x10010020
mov ecx, dword [esi + 0xc]
add ecx, dword [esi + 0x10]
sub eax, edx
cmp edi, ecx
mov ebx, eax
mov ebp, edi
jb 0x1001003e
call fcn.1002fe90
mov eax, dword [esi + 8]
cmp eax, edi
ja 0x10010049
mov ebp, edi
sub ebp, eax
mov edx, dword [esi + 4]
mov eax, dword [edx + ebp*4]
add eax, 4
cmp dword [eax + 0x18], 0x10
jb 0x1001005d
mov eax, dword [eax + 4]
jmp 0x10010060
add eax, 4
mov ecx, dword [esp + 0x24]
push ebx
push ecx
push eax
call fcn.1002e252
add esp, 0xc
test eax, eax
je 0x1001008f
mov edx, dword [esi + 0xc]
add edx, dword [esi + 0x10]
cmp edi, edx
jb 0x10010082
call fcn.1002fe90
mov eax, dword [0x1007e420]
add edi, 1
jmp 0x1000ffb3
cmp dword [0x1007c4a4], 0
jne 0x100101bb
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x84]
mov dword [0x1007c480], eax
mov dword [0x1007c47c], ecx
mov dword [0x1007c4a4], 1
jmp 0x100101bb
cmp dword [esp + 0xa0], 2
je 0x1000fe49
push 0x32
push ebp
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1000fe49
cmp byte [ebp], al
je 0x1000fe49
lea edx, [esp + 0x28]
push edx
mov ecx, 0x1007e450
call fcn.1000c030
mov ecx, dword [eax]
mov edi, dword [eax + 4]
mov edx, dword [eax + 8]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], edx
nop
mov eax, dword [0x1007e45c]
mov ecx, dword [0x1007e460]
lea esi, [eax + ecx]
cmp eax, esi
jbe 0x10010127
call fcn.1002fe90
test edi, edi
je 0x10010133
cmp edi, 0x1007e450
je 0x10010138
call fcn.1002fe90
cmp dword [esp + 0x1c], esi
je 0x1000fe49
lea ecx, [esp + 0x14]
call fcn.1000c090
mov edx, ebp
add eax, 4
lea esi, [edx + 1]
mov cl, byte [edx]
add edx, 1
test cl, cl
jne 0x10010153
sub edx, esi
push edx
mov edx, dword [eax + 0x14]
push ebp
push edx
push 0
mov ecx, eax
call fcn.1000be00
test eax, eax
je 0x10010187
push 0
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x1c]
call fcn.1000c0e0
mov edi, dword [esp + 0x18]
jmp 0x10010110
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x84]
mov eax, 1
mov dword [0x1007c488], ecx
mov dword [0x1007c484], edx
mov dword [0x1007c4a8], eax
jmp 0x1000fe4b
cmp dword [esp + 0x20], 0
je 0x1000fe49
cmp dword [0x1007eab4], 0
je 0x10010200
mov eax, dword [esp + 0x9c]
cmp eax, dword [0x1007eab8]
jne 0x10010200
cmp dword [0x1007c4b0], 0
jne 0x10010200
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x84]
mov dword [0x1007c498], ecx
mov dword [0x1007c494], edx
mov dword [0x1007c4b0], 1
mov eax, dword [0x1007eab0]
test eax, eax
je 0x1000fe49
cmp dword [esp + 0x98], eax
ja 0x1000fe49
cmp dword [0x1007c4ac], 0
jne 0x10010246
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x84]
mov dword [0x1007c490], eax
mov dword [0x1007c48c], ecx
mov dword [0x1007c4ac], 1
mov eax, 1
jmp 0x1000fe4b