Function at 0x1000df08
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1006eabe
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x178
push ebx
push esi
push edi
xor esi, esi
mov dword [esp + 0x38], ecx
mov edi, edx
lea ecx, [esp + 0xf8]
inc esi
mov dword [esp + 0x24], edi
push esi
call fcn.10012a45
xor ebx, ebx
mov dword [esp + 0x1c], ebx
jmp 0x1000df64
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0xf8]
mov dword [eax + ecx*4], 0x24f01c08
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], esi
jl 0x1000df4e
mov byte [esp + 0x23], bl
cmp byte [esp + 0x23], bl
je 0x1000df86
push 0x84a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov byte [esp + 0x23], bl
cmp byte [esp + 0x23], bl
je 0x1000dfa4
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_UpdateColors]
lea ecx, [esp + 0xf8]
call fcn.10012ac7
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x14], 0xc05baf43
mov dword [esp + 0x28], 0xfffffff9
mov dword [esp + 0x10], 0xeede
inc dword [esp + 0x10]
mov dword [esp + 0x10], ebx
jmp 0x1000e0b6
mov dword [esp + 0x18], 0xffffffff
mov dword [esp + 0x14], ebx
jmp 0x1000e0a7
push esi
lea ecx, [esp + 0x50]
call fcn.10012a45
mov dword [esp + 0x1c], 0xd7494dfd
mov dword [esp + 0x1c], ebx
jmp 0x1000e015
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x4c]
mov dword [eax + ecx*4], 7
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], esi
jl 0x1000e002
cmp dword [esp + 0x18], 0xffffffff
sbb eax, eax
neg eax
cmp dword [esp + 0x18], eax
jne 0x1000e034
mov eax, dword [esp + 0x4c]
cmp dword [eax], ebx
mov eax, ebx
je 0x1000e036
mov eax, esi
neg eax
jne 0x1000e040
cmp dword [esp + 0x28], ebx
je 0x1000e048
mov edx, esi
cmp dword [esp + 0x18], ebx
jne 0x1000e04a
mov edx, ebx
mov eax, dword [esp + 0x18]
xor ecx, ecx
cmp eax, edx
mov eax, dword [esp + 0x4c]
setl cl
xor edx, edx
cmp ecx, 0xed1d25bb
setne dl
xor ecx, ecx
add edx, dword [eax]
mov eax, dword [esp + 0x28]
cmp eax, edx
mov eax, dword [esp + 0x4c]
setg cl
cmp ecx, dword [eax]
jne 0x1000e07d
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x28]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x4c]
mov eax, dword [eax]
inc eax
je 0x1000e092
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x4c]
mov dword [esp + 0x1c], eax
call fcn.10012ac7
dec dword [esp + 0x14]
cmp dword [esp + 0x14], 0xfffffffb
jle 0x1000dfea
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 3
jl 0x1000dfd9
mov dword [esp + 0x2c], 0x94643cdf
mov eax, 0xe56f9b2c
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc8], eax
mov dword [esp + 0xcc], eax
mov dword [esp + 0xd0], eax
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x2c], 5
mov dword [esp + 0x2c], 0xffffffff
push 2
mov dword [esp + 0x30], 8
mov dword [esp + 0x14], ebx
pop ecx
jmp 0x1000e122
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x114], 3
inc dword [esp + 0x10]
cmp dword [esp + 0x10], ecx
jl 0x1000e10f
mov dword [esp + 0x10], ebx
jmp 0x1000e141
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x15c], 0x2603
inc dword [esp + 0x10]
cmp dword [esp + 0x10], ecx
jl 0x1000e12e
mov eax, dword [esp + 0xc4]
xor ecx, ecx
cmp eax, 0x99fb
setne cl
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x1c], 6
jmp 0x1000e215
mov dword [esp + 0x2c], 0x3e93
lea ecx, [esp + 0x104]
mov dword [esp + 0x2c], 0xfffffff8
mov dword [esp + 0x2c], esi
mov dword [esp + 0x2c], 0xfffffff8
mov dword [esp + 0x2c], 0x426a760
mov dword [esp + 0x2c], 0xfffffff6
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x2c], 0xb611fb8e
push 4
call fcn.10012a45
mov dword [esp + 0x2c], esi
mov dword [esp + 0x2c], 0xfffffffb
mov dword [esp + 0x10], ebx
jmp 0x1000e1d7
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x104]
mov dword [eax + ecx*4], 0xaa232401
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 4
jl 0x1000e1c1
mov dword [esp + 0x10], ebx
jmp 0x1000e1f7
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x164], 0x7da19ae8
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 3
jl 0x1000e1e4
mov dword [esp + 0x114], esi
lea ecx, [esp + 0x104]
call fcn.10012ac7
dec dword [esp + 0x1c]
cmp dword [esp + 0x1c], 0xfffffff3
jge 0x1000e169
mov dword [esp + 0x2c], 4
mov dword [esp + 0x2c], 0x7e17f759
mov dword [esp + 0x14], 0x8ade19d2
mov dword [esp + 0x28], esi
mov dword [esp + 0x28], 8
mov dword [esp + 0x2c], 0x5db34e6d
mov eax, dword [esp + 0x14]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x28], eax
mov byte [esp + 0x23], bl
cmp byte [esp + 0x23], bl
je 0x1000e26d
push ebx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov dword [esp + 0x2c], esi
lea ecx, [esp + 0x40]
mov dword [esp + 0x2c], 0x8ce3e63e
push 4
call fcn.10012a45
mov dword [esp + 0x18c], ebx
mov dword [esp + 0x18], 0xe76f5020
mov dword [esp + 0x14], ebx
jmp 0x1000e2ac
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x40]
mov dword [eax + ecx*4], 6
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 4
jl 0x1000e299
mov dword [esp + 0x18], 3
cmp dword [esp + 0x18], ebx
jl 0x1000e4b5
push 3
pop edi
mov dword [esp + 0x10], 0xffffffff
mov dword [esp + 0x28], 0xee1d459
mov dword [esp + 0x28], 0x78e60d74
mov dword [esp + 0x28], ebx
mov dword [esp + 0x1c], 0xfffffff9
mov dword [esp + 0x70], ebx
mov dword [esp + 0x2c], 0xfffffffb
mov dword [esp + 0x14], ebx
jmp 0x1000e311
mov eax, dword [esp + 0x14]
mov dword [esp + eax*4 + 0x14c], 0xf874acc0
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 4
jl 0x1000e2fe
mov dword [esp + 0x10], ebx
cmp dword [esp + 0x10], edi
jg 0x1000e485
push edi
lea ecx, [esp + 0x68]
call fcn.10012a45
mov dword [esp + 0x14], 0xffffffff
mov dword [esp + 0x14], ebx
jmp 0x1000e34e
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x64]
or dword [eax + ecx*4], 0xffffffff
inc dword [esp + 0x14]
cmp dword [esp + 0x14], edi
jl 0x1000e33e
mov edi, dword [esp + 0x64]
mov dword [edi + 4], ebx
mov dword [esp + 0x14], 0xffffffff
mov dword [esp + 0x1c], 0x7017a68f
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x40]
cmp dword [eax + ecx*4], ebx
jne 0x1000e412
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x10]
sub eax, 8
neg eax
sbb eax, eax
inc eax
mov dword [esp + 0x28], eax
je 0x1000e3a1
mov eax, dword [esp + 0x64]
cmp dword [eax + 8], ebx
mov eax, esi
jne 0x1000e3a3
mov eax, ebx
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x28]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x158]
mov eax, dword [edi + 4]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x1c]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov esi, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x40]
push 1
mov eax, dword [eax + ecx*4]
mov dword [edx + esi*4], eax
mov eax, dword [esp + 0x1c]
mov eax, dword [esp + 0x68]
pop esi
mov eax, dword [eax + 8]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x28]
inc dword [edi + 4]
cmp dword [edi + 4], 3
mov dword [esp + 0x1c], eax
jle 0x1000e35b
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x40]
cmp dword [eax + ecx*4], ebx
je 0x1000e42f
mov edx, esi
cmp dword [esp + 0x28], ebx
jne 0x1000e431
mov edx, ebx
mov eax, dword [esp + 0x18]
xor ecx, ecx
cmp edx, eax
mov eax, dword [esp + 0x64]
setle cl
lea edx, [ecx + 7]
mov ecx, dword [esp + 0x18]
mov dword [eax], edx
mov eax, dword [esp + 0x40]
mov esi, dword [eax + ecx*4]
xor ecx, ecx
mov eax, dword [esp + 0x70]
imul esi, edx
neg esi
cmp esi, eax
setne cl
add ecx, dword [esp + 0x2c]
mov dword [esp + 0x14], ecx
lea ecx, [esp + 0x64]
call fcn.10012ac7
inc dword [esp + 0x10]
push 3
pop edi
push 1
pop esi
cmp dword [esp + 0x10], edi
jle 0x1000e326
mov dword [esp + 0x1c], edi
cmp dword [esp + 0x1c], ebx
jl 0x1000e4a7
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x40]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
dec dword [esp + 0x1c]
jns 0x1000e48f
dec dword [esp + 0x18]
jns 0x1000e2c8
mov edi, dword [esp + 0x24]
or dword [esp + 0x18c], 0xffffffff
lea ecx, [esp + 0x40]
call fcn.10012ac7
mov dword [esp + 0x24], 0xfffffffc
lea ecx, [esp + 0xec]
push esi
call fcn.10012a45
mov dword [esp + 0x18c], esi
lea eax, [esp + 0x13c]
push dword [esp + 0x38]
movdqa xmm0, xmmword [0x1000c6f0]
lea ecx, [esp + 0xa4]
push eax
lea eax, [esp + 0x134]
mov dword [esp + 0xa8], ebx
push eax
push ebx
movdqu xmmword [esp + 0x13c], xmm0
mov dword [esp + 0xb4], ebx
mov dword [esp + 0xb8], ebx
call fcn.10016c3e
mov byte [esp + 0x18c], 2
mov dword [esp + 0x10], ebx
jmp 0x1000e543
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x34], esi
inc dword [esp + 0x10]
cmp dword [esp + 0x10], esi
jl 0x1000e537
mov dword [esp + 0x10], ebx
jmp 0x1000e561
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xec]
mov dword [eax + ecx*4], ebx
inc dword [esp + 0x10]
cmp dword [esp + 0x10], esi
jl 0x1000e54f
mov dword [esp + 0x34], 0xffffffe8
jmp 0x1000e5d4
push esi
lea ecx, [esp + 0xd8]
call fcn.10012a45
mov dword [esp + 0x24], 0x68108531
mov dword [esp + 0x24], 0xfffffffd
mov dword [esp + 0x24], 0x8210
mov dword [esp + 0x28], 9
mov dword [esp + 0x14], ebx
jmp 0x1000e5ba
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0xd4]
mov dword [eax + ecx*4], 0x66f5a9c4
inc dword [esp + 0x14]
cmp dword [esp + 0x14], esi
jl 0x1000e5a4
inc dword [esp + 0x28]
lea ecx, [esp + 0xd4]
call fcn.10012ac7
inc dword [esp + 0x34]
cmp dword [esp + 0x34], 9
jl 0x1000e571
lea ecx, [esp + 0xa0]
call fcn.10012ac7
or dword [esp + 0x18c], 0xffffffff
lea ecx, [esp + 0xec]
call fcn.10012ac7
push 3
pop esi
mov dword [esp + 0x24], ebx
lea ecx, [esp + 0xe0]
push esi
call fcn.10012a45
push 2
lea ecx, [esp + 0xb0]
mov dword [esp + 0x190], esi
call fcn.10012a45
mov dword [esp + 0x14], 0xe9bf9f36
mov dword [esp + 0x18], ebx
jmp 0x1000e648
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0xe0]
mov dword [eax + ecx*4], 0xc204
inc dword [esp + 0x18]
cmp dword [esp + 0x18], esi
jl 0x1000e632
push 2
mov dword [esp + 0x1c], ebx
pop edx
jmp 0x1000e66d
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0xac]
mov dword [eax + ecx*4], 0xad59e57a
inc dword [esp + 0x18]
cmp dword [esp + 0x18], edx
jl 0x1000e657
mov dword [esp + 0x18], ebx
jmp 0x1000e68c
mov eax, dword [esp + 0x18]
mov dword [esp + eax*4 + 0x170], 9
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 4
jl 0x1000e679
mov esi, dword [esp + 0xac]
mov dword [esi + 4], edx
mov dword [esp + 0x10], 0x576c
inc dword [esp + 0x10]
mov dword [esp + 0x10], ebx
jmp 0x1000e6d2
mov byte [esp + 0x23], bl
cmp byte [esp + 0x23], 0
je 0x1000e6ca
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ShowCaret]
push 2
pop edx
mov eax, dword [esp + 0x10]
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edx
jle 0x1000e6af
dec dword [esi + 4]
jns 0x1000e69d
xor esi, esi
inc esi
mov dword [esp + 0x14], esi
cmp dword [esp + 0x14], ebx
jl 0x1000e6f9
mov eax, dword [esp + 0xac]
mov dword [eax], ebx
dec dword [esp + 0x14]
jns 0x1000e6ea
lea ecx, [esp + 0xac]
call fcn.10012ac7
or dword [esp + 0x18c], 0xffffffff
lea ecx, [esp + 0xe0]
call fcn.10012ac7
mov dword [esp + 0x24], esi
mov dword [esp + 0x24], 0xfffffff9
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], 0x2b8e
mov dword [esp + 0x28], 0xffffffff
mov dword [esp + 0x10], ebx
jmp 0x1000e74f
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x78], 0x6cdead9b
inc dword [esp + 0x10]
cmp dword [esp + 0x10], esi
jl 0x1000e73f
mov dword [esp + 0x10], ebx
jmp 0x1000e76b
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x3c], 0xffffffff
inc dword [esp + 0x10]
cmp dword [esp + 0x10], esi
jl 0x1000e75b
mov dword [esp + 0x1c], ebx
jmp 0x1000e8a3
push dword [esp + 0x38]
movdqa xmm0, xmmword [0x1000c720]
lea eax, [esp + 0x150]
push eax
lea eax, [esp + 0x144]
mov dword [esp + 0x2c], 0xccb63e8e
push eax
push ebx
lea ecx, [esp + 0x98]
mov dword [esp + 0x98], ebx
movdqu xmmword [esp + 0x14c], xmm0
mov dword [esp + 0x9c], ebx
mov dword [esp + 0xa0], ebx
call fcn.10016c3e
mov dword [esp + 0x18c], 4
lea ecx, [esp + 0x94]
mov dword [esp + 0x24], 0x9f4ffcf3
mov dword [esp + 0x24], 0x9e9d60a2
mov dword [esp + 0x24], ebx
mov dword [esp + 0x2c], 0x8fe24307
push esi
call fcn.10012a45
mov dword [esp + 0x14], ebx
jmp 0x1000e819
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x94]
mov dword [eax + ecx*4], 0x4a0426a7
inc dword [esp + 0x14]
cmp dword [esp + 0x14], esi
jl 0x1000e803
cmp dword [esp + 0x1c], ebx
jne 0x1000e82d
mov eax, dword [esp + 0x3c]
inc dword [esp + 0x3c]
mov ecx, dword [esp + 0x24]
xor edx, edx
mov eax, dword [esp + 0x88]
cmp dword [eax], ecx
setle dl
xor ecx, ecx
test edx, edx
mov dword [esp + 0x78], edx
mov eax, dword [esp + 0x18]
sete cl
xor edx, edx
cmp eax, ecx
mov eax, dword [esp + 0x94]
setne dl
xor ecx, ecx
imul edx, dword [eax]
mov dword [esp + 0x28], edx
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x94]
sub edx, dword [eax]
mov eax, dword [esp + 0x18]
cmp edx, eax
setge cl
mov dword [esp + 0x2c], ecx
lea ecx, [esp + 0x94]
call fcn.10012ac7
or dword [esp + 0x18c], 0xffffffff
lea ecx, [esp + 0x88]
call fcn.10012ac7
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], 0x14
jg 0x1000e77a
mov dword [esp + 0x24], 0x12d2c87
lea ecx, [esp + 0xb8]
push esi
call fcn.10012a45
mov dword [esp + 0x18c], 5
mov dword [esp + 0x30], ebx
jmp 0x1000e8e7
mov eax, dword [esp + 0x30]
mov dword [esp + eax*4 + 0x110], 0xadf1adb2
inc dword [esp + 0x30]
cmp dword [esp + 0x30], esi
jl 0x1000e8d4
mov dword [esp + 0x30], ebx
jmp 0x1000e903
mov eax, dword [esp + 0x30]
mov dword [esp + eax*4 + 0x74], 0xfffffff7
inc dword [esp + 0x30]
cmp dword [esp + 0x30], esi
jl 0x1000e8f3
lea edx, [esp + 0xb8]
lea ecx, [esp + 0x30]
call fcn.1000de36
mov eax, dword [esp + 0xb8]
lea ecx, [esp + 0xb8]
dec dword [eax]
or dword [esp + 0x18c], 0xffffffff
call fcn.10012ac7
mov dword [esp + 0x18], esi
xor edx, edx
mov dword [esp + 0x1c], 0xffffffff
mov dword [esp + 0x10], esi
mov dword [esp + 0x24], 0xffffffff
mov dword [esp + 0x14], 0xce68266c
mov dword [esp + 0x24], ebx
mov eax, dword [esp + 0x1c]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x1c]
cmp ecx, eax
setge dl
xor eax, eax
cmp edx, 3
setge al
xor ecx, ecx
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x10]
cmp dword [esp + 0x24], eax
setle cl
mov dword [esp + 0x10], ecx
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
cmp eax, dword [esp + 0x1c]
jl 0x1000e9ac
mov eax, dword [esp + 0x1c]
cmp dword [esp + 0x18], 0xffffffff
sbb eax, eax
inc eax
cmp eax, dword [esp + 0x1c]
jle 0x1000e9c2
mov eax, esi
cmp dword [esp + 0x18], ebx
jne 0x1000e9c4
mov eax, ebx
mov dword [esp + 0x24], eax
mov dword [esp + 0x18], 0xfffffff8
jmp 0x1000eb11
push esi
lea ecx, [esp + 0x5c]
call fcn.10012a45
mov dword [esp + 0x18c], 6
lea eax, [esp + 0x12c]
push dword [esp + 0x74]
movdqa xmm0, xmmword [0x1000c590]
lea ecx, [esp + 0x80]
push eax
lea eax, [esp + 0x124]
mov dword [esp + 0x2c], 8
push eax
mov dword [esp + 0x28], 0x2b46fac5
push ebx
movdqu xmmword [esp + 0x12c], xmm0
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x90], ebx
mov dword [esp + 0x94], ebx
call fcn.10016c3e
mov dword [esp + 0x14], ebx
jmp 0x1000ea57
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x58]
or dword [eax + ecx*4], 0xffffffff
inc dword [esp + 0x14]
cmp dword [esp + 0x14], esi
jl 0x1000ea47
mov ecx, dword [esp + 0x58]
mov eax, dword [ecx]
sub eax, 0x6824
je 0x1000ea72
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x58]
cmp dword [ecx], ebx
je 0x1000ea7a
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
xor ecx, ecx
mov eax, dword [esp + 0x58]
cmp dword [eax], ebx
setne cl
cmp ecx, dword [esp + 0x18]
je 0x1000ea97
mov eax, esi
cmp dword [esp + 0x24], ebx
jne 0x1000ea99
mov eax, ebx
xor ecx, ecx
cmp eax, 0xba27
mov eax, dword [esp + 0x58]
sete cl
xor edx, edx
cmp ecx, dword [eax]
setl dl
sub edx, 0x9edb
mov dword [esp + 0x24], edx
mov dword [esp + 0x1c], ebx
jmp 0x1000eaed
mov dword [esp + 0x14], ebx
cmp dword [esp + 0x14], ebx
jg 0x1000eae9
mov eax, dword [esp + 0x7c]
inc dword [eax + 0xc]
mov dword [esp + 0x24], 0x4855f075
mov dword [esp + 0x24], 0x1851aa8c
inc dword [esp + 0x14]
cmp dword [esp + 0x14], ebx
jle 0x1000eacc
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], ebx
jle 0x1000eabe
lea ecx, [esp + 0x7c]
call fcn.10012ac7
or dword [esp + 0x18c], 0xffffffff
lea ecx, [esp + 0x58]
call fcn.10012ac7
dec dword [esp + 0x18]
cmp dword [esp + 0x18], 0xffffffef
jne 0x1000e9d5
mov eax, edi
mov ecx, 0x3e8
cdq
idiv ecx
mov ecx, dword [esp + 0x38]
mov esi, edx
mov edi, eax
call fcn.1000ddc4
mov ecx, dword [esp + 0x184]
add eax, esi
add eax, edi
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret