Function at 0x1000b040
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x1002a760
mov eax, dword fs:[0]
push eax
sub esp, 0x5c
mov eax, dword [0x10033944]
xor eax, esp
mov dword [esp + 0x58], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x10033944]
xor eax, esp
push eax
lea eax, [esp + 0x70]
mov dword fs:[0], eax
mov eax, dword [esp + 0x8c]
mov ebx, dword [esp + 0x84]
mov esi, dword [esp + 0x88]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x90]
push eax
mov dword [esp + 0x34], ebx
call fcn.10008d90
add esp, 4
lea ecx, [esp + 0x50]
mov ebp, eax
push ecx
mov ecx, ebp
call fcn.100062e0
xor edi, edi
mov dword [esp + 0x78], edi
cmp byte [esi + 8], 0
mov dword [esp + 0x18], ebx
mov byte [esp + 0x1f], 0
jne 0x1000b0c9
mov ecx, esi
call fcn.10006d70
mov ecx, dword [esp + 0x20]
cmp byte [ecx + 8], 0
jne 0x1000b0dc
call fcn.10006d70
mov ecx, dword [esp + 0x20]
mov eax, dword [esi + 4]
cmp eax, edi
jne 0x1000b0ec
cmp dword [ecx + 4], edi
je 0x1000b12d
cmp eax, edi
je 0x1000b0f1
cmp dword [ecx + 4], edi
jne 0x1000b12d
cmp byte [esi + 8], 0
jne 0x1000b0fe
mov ecx, esi
call fcn.10006d70
cmp byte [esi + 9], 0x2b
jne 0x1000b109
mov byte [ebx], 0x2b
jmp 0x1000b11f
cmp byte [esi + 8], 0
jne 0x1000b116
mov ecx, esi
call fcn.10006d70
cmp byte [esi + 9], 0x2d
jne 0x1000b12d
mov byte [ebx], 0x2d
add ebx, 1
mov ecx, esi
mov dword [esp + 0x18], ebx
call fcn.10006d20
mov ecx, dword [esp + 0x68]
cmp ecx, 0x10
mov edx, dword [esp + 0x54]
mov byte [esp + 0x17], 0
mov dword [esp + 0x24], edi
mov dword [esp + 0x2c], edi
mov eax, edx
jae 0x1000b14d
lea eax, [esp + 0x54]
cmp byte [eax], 0x7f
je 0x1000b438
cmp ecx, 0x10
mov eax, edx
jae 0x1000b161
lea eax, [esp + 0x54]
cmp byte [eax], 0
jle 0x1000b438
mov edx, dword [ebp]
mov eax, dword [edx + 8]
mov ecx, ebp
call eax
mov dword [esp + 0x48], edi
mov byte [esp + 0x38], 0
mov byte [esp + 0x2b], al
mov dword [esp + 0x4c], 0xf
mov byte [esp + 0x38], 0
mov dword [esp + 0x48], 1
mov byte [esp + 0x39], 0
mov byte [esp + 0x78], 1
mov ecx, dword [esp + 0x20]
push ecx
push esi
xor ebx, ebx
call fcn.10006dc0
add esp, 8
test al, al
je 0x1000b338
cmp byte [esi + 8], 0
jne 0x1000b1f2
mov ecx, dword [esi + 4]
cmp ecx, edi
je 0x1000b1eb
mov eax, dword [ecx + 0x20]
cmp dword [eax], edi
je 0x1000b1da
mov edx, dword [ecx + 0x30]
cmp dword [edx], edi
jle 0x1000b1da
mov eax, dword [eax]
movzx eax, byte [eax]
jmp 0x1000b1e1
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
cmp eax, 0xffffffff
je 0x1000b1eb
mov byte [esi + 9], al
jmp 0x1000b1ee
mov dword [esi + 4], edi
mov byte [esi + 8], 1
cmp byte [esi + 9], 0x30
jl 0x1000b2a1
cmp byte [esi + 8], 0
jne 0x1000b209
mov ecx, esi
call fcn.10006d70
cmp byte [esi + 9], 0x39
jg 0x1000b2a1
cmp dword [esp + 0x24], 0x24
mov byte [esp + 0x17], 1
jl 0x1000b226
add dword [esp + 0x2c], 1
jmp 0x1000b261
cmp byte [esi + 8], 0
jne 0x1000b233
mov ecx, esi
call fcn.10006d70
cmp byte [esi + 9], 0x30
jne 0x1000b23f
cmp dword [esp + 0x24], edi
je 0x1000b261
cmp byte [esi + 8], 0
jne 0x1000b24c
mov ecx, esi
call fcn.10006d70
mov ecx, dword [esp + 0x18]
mov al, byte [esi + 9]
mov byte [ecx], al
add ecx, 1
add dword [esp + 0x24], 1
mov dword [esp + 0x18], ecx
cmp ebx, dword [esp + 0x48]
jbe 0x1000b26c
call fcn.10018321
cmp dword [esp + 0x4c], 0x10
mov eax, dword [esp + 0x38]
jae 0x1000b27b
lea eax, [esp + 0x38]
cmp byte [eax + ebx], 0x7f
je 0x1000b2ed
cmp ebx, dword [esp + 0x48]
jbe 0x1000b28c
call fcn.10018321
cmp dword [esp + 0x4c], 0x10
mov eax, dword [esp + 0x38]
jae 0x1000b29b
lea eax, [esp + 0x38]
add byte [eax + ebx], 1
jmp 0x1000b2ed
cmp ebx, dword [esp + 0x48]
jbe 0x1000b2ac
call fcn.10018321
cmp dword [esp + 0x4c], 0x10
mov eax, dword [esp + 0x38]
jae 0x1000b2bb
lea eax, [esp + 0x38]
cmp byte [eax + ebx], 0
je 0x1000b30a
cmp byte [esp + 0x2b], 0
je 0x1000b30a
cmp byte [esi + 8], 0
jne 0x1000b2d5
mov ecx, esi
call fcn.10006d70
mov al, byte [esp + 0x2b]
cmp byte [esi + 9], al
jne 0x1000b30a
push edi
push 1
lea ecx, [esp + 0x3c]
call fcn.10006130
add ebx, 1
mov ecx, esi
call fcn.10006d20
mov ecx, dword [esp + 0x20]
push ecx
push esi
call fcn.10006dc0
add esp, 8
test al, al
jne 0x1000b1b8
cmp ebx, edi
je 0x1000b338
cmp ebx, dword [esp + 0x48]
jbe 0x1000b319
call fcn.10018321
cmp dword [esp + 0x4c], 0x10
mov eax, dword [esp + 0x38]
jae 0x1000b328
lea eax, [esp + 0x38]
cmp byte [eax + ebx], 0
jle 0x1000b333
add ebx, 1
jmp 0x1000b338
mov byte [esp + 0x1f], 1
cmp dword [esp + 0x68], 0x10
mov edi, dword [esp + 0x54]
jae 0x1000b347
lea edi, [esp + 0x54]
cmp byte [esp + 0x1f], 0
jne 0x1000b3b4
mov edi, edi
test ebx, ebx
jbe 0x1000b3b4
cmp byte [edi], 0x7f
je 0x1000b3b4
sub ebx, 1
je 0x1000b37f
cmp ebx, dword [esp + 0x48]
jbe 0x1000b369
call fcn.10018321
cmp dword [esp + 0x4c], 0x10
mov eax, dword [esp + 0x38]
jae 0x1000b378
lea eax, [esp + 0x38]
mov dl, byte [edi]
cmp dl, byte [eax + ebx]
jne 0x1000b3af
test ebx, ebx
jne 0x1000b3a4
cmp ebx, dword [esp + 0x48]
jbe 0x1000b38e
call fcn.10018321
cmp dword [esp + 0x4c], 0x10
mov eax, dword [esp + 0x38]
jae 0x1000b39d
lea eax, [esp + 0x38]
mov cl, byte [edi]
cmp cl, byte [eax + ebx]
jl 0x1000b3af
cmp byte [edi + 1], 0
jle 0x1000b350
add edi, 1
jmp 0x1000b350
mov byte [esp + 0x1f], 1
mov byte [esp + 0x78], 0
cmp dword [esp + 0x4c], 0x10
jb 0x1000b3cd
mov edx, dword [esp + 0x38]
push edx
call fcn.10018092
add esp, 4
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x4c], 0xf
mov dword [esp + 0x48], 0
mov byte [esp + 0x38], 0
xor edi, edi
cmp byte [esp + 0x17], 0
je 0x1000b403
cmp dword [esp + 0x24], edi
jne 0x1000b403
mov eax, dword [esp + 0x18]
mov byte [eax], 0x30
add eax, 1
mov dword [esp + 0x18], eax
cmp byte [esi + 8], 0
jne 0x1000b5d5
mov ecx, dword [esi + 4]
cmp ecx, edi
je 0x1000b5ce
mov eax, dword [ecx + 0x20]
cmp dword [eax], edi
je 0x1000b5bd
mov edx, dword [ecx + 0x30]
cmp dword [edx], edi
jle 0x1000b5bd
mov eax, dword [eax]
movzx eax, byte [eax]
jmp 0x1000b5c4
mov ebx, dword [esp + 0x20]
lea esp, [esp]
cmp byte [esi + 8], 0
jne 0x1000b47a
mov ecx, dword [esi + 4]
cmp ecx, edi
je 0x1000b473
mov eax, dword [ecx + 0x20]
cmp dword [eax], edi
je 0x1000b462
mov edx, dword [ecx + 0x30]
cmp dword [edx], edi
jle 0x1000b462
mov eax, dword [eax]
movzx eax, byte [eax]
jmp 0x1000b469
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
cmp eax, 0xffffffff
je 0x1000b473
mov byte [esi + 9], al
jmp 0x1000b476
mov dword [esi + 4], edi
mov byte [esi + 8], 1
cmp byte [ebx + 8], 0
jne 0x1000b4b4
mov ecx, dword [ebx + 4]
cmp ecx, edi
je 0x1000b4ad
mov eax, dword [ecx + 0x20]
cmp dword [eax], edi
je 0x1000b49c
mov edx, dword [ecx + 0x30]
cmp dword [edx], edi
jle 0x1000b49c
mov eax, dword [eax]
movzx eax, byte [eax]
jmp 0x1000b4a3
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
cmp eax, 0xffffffff
je 0x1000b4ad
mov byte [ebx + 9], al
jmp 0x1000b4b0
mov dword [ebx + 4], edi
mov byte [ebx + 8], 1
mov ecx, dword [esi + 4]
cmp ecx, edi
jne 0x1000b4c6
cmp dword [ebx + 4], edi
je 0x1000b3e8
jmp 0x1000b4cf
cmp dword [ebx + 4], edi
jne 0x1000b3e8
cmp byte [esi + 8], 0
jne 0x1000b506
cmp ecx, edi
je 0x1000b4ff
mov eax, dword [ecx + 0x20]
cmp dword [eax], edi
je 0x1000b4ee
mov edx, dword [ecx + 0x30]
cmp dword [edx], edi
jle 0x1000b4ee
mov eax, dword [eax]
movzx eax, byte [eax]
jmp 0x1000b4f5
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
cmp eax, 0xffffffff
je 0x1000b4ff
mov byte [esi + 9], al
jmp 0x1000b502
mov dword [esi + 4], edi
mov byte [esi + 8], 1
cmp byte [esi + 9], 0x30
jl 0x1000b3e8
cmp byte [esi + 8], 0
jne 0x1000b54a
mov ecx, dword [esi + 4]
cmp ecx, edi
je 0x1000b543
mov eax, dword [ecx + 0x20]
cmp dword [eax], edi
je 0x1000b532
mov edx, dword [ecx + 0x30]
cmp dword [edx], edi
jle 0x1000b532
mov eax, dword [eax]
movzx eax, byte [eax]
jmp 0x1000b539
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
cmp eax, 0xffffffff
je 0x1000b543
mov byte [esi + 9], al
jmp 0x1000b546
mov dword [esi + 4], edi
mov byte [esi + 8], 1
cmp byte [esi + 9], 0x39
jg 0x1000b3e8
cmp dword [esp + 0x24], 0x24
jl 0x1000b571
add dword [esp + 0x2c], 1
mov ecx, esi
mov byte [esp + 0x17], 1
call fcn.10006d20
jmp 0x1000b440
cmp byte [esi + 8], 0
jne 0x1000b57e
mov ecx, esi
call fcn.10006d70
cmp byte [esi + 9], 0x30
jne 0x1000b58a
cmp dword [esp + 0x24], edi
je 0x1000b5ac
cmp byte [esi + 8], 0
jne 0x1000b597
mov ecx, esi
call fcn.10006d70
mov eax, dword [esp + 0x18]
mov cl, byte [esi + 9]
mov byte [eax], cl
add eax, 1
add dword [esp + 0x24], 1
mov dword [esp + 0x18], eax
mov ecx, esi
mov byte [esp + 0x17], 1
call fcn.10006d20
jmp 0x1000b440
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
cmp eax, 0xffffffff
je 0x1000b5ce
mov byte [esi + 9], al
jmp 0x1000b5d1
mov dword [esi + 4], edi
mov byte [esi + 8], 1
cmp byte [ebx + 8], 0
jne 0x1000b60f
mov ecx, dword [ebx + 4]
cmp ecx, edi
je 0x1000b608
mov eax, dword [ecx + 0x20]
cmp dword [eax], edi
je 0x1000b5f7
mov edx, dword [ecx + 0x30]
cmp dword [edx], edi
jle 0x1000b5f7
mov eax, dword [eax]
movzx eax, byte [eax]
jmp 0x1000b5fe
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
cmp eax, 0xffffffff
je 0x1000b608
mov byte [ebx + 9], al
jmp 0x1000b60b
mov dword [ebx + 4], edi
mov byte [ebx + 8], 1
mov ecx, dword [esi + 4]
cmp ecx, edi
jne 0x1000b627
cmp dword [ebx + 4], edi
je 0x1000b6ce
cmp ecx, edi
mov ebx, dword [esp + 0x20]
je 0x1000b630
cmp dword [ebx + 4], edi
jne 0x1000b6ce
cmp byte [esi + 8], 0
jne 0x1000b667
cmp ecx, edi
je 0x1000b660
mov eax, dword [ecx + 0x20]
cmp dword [eax], edi
je 0x1000b64f
mov edx, dword [ecx + 0x30]
cmp dword [edx], edi
jle 0x1000b64f
mov eax, dword [eax]
movzx eax, byte [eax]
jmp 0x1000b656
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
cmp eax, 0xffffffff
je 0x1000b660
mov byte [esi + 9], al
jmp 0x1000b663
mov dword [esi + 4], edi
mov byte [esi + 8], 1
mov eax, dword [ebp]
mov edx, dword [eax + 4]
mov bl, byte [esi + 9]
mov ecx, ebp
call edx
cmp bl, al
jne 0x1000b6ce
call fcn.100183ba
mov eax, dword [eax]
mov cl, byte [eax]
mov eax, dword [esp + 0x18]
mov byte [eax], cl
mov ecx, dword [esi + 4]
add eax, 1
cmp ecx, edi
mov dword [esp + 0x18], eax
je 0x1000b6c7
mov edx, dword [ecx + 0x20]
cmp dword [edx], edi
je 0x1000b6b5
mov eax, dword [ecx + 0x30]
cmp dword [eax], edi
jle 0x1000b6b5
add dword [eax], 0xffffffff
mov ecx, dword [ecx + 0x20]
mov eax, dword [ecx]
lea edx, [eax + 1]
mov dword [ecx], edx
movzx eax, byte [eax]
jmp 0x1000b6bc
mov eax, dword [ecx]
mov edx, dword [eax + 0x14]
call edx
cmp eax, 0xffffffff
je 0x1000b6c7
mov byte [esi + 8], 0
jmp 0x1000b6ce
mov dword [esi + 4], edi
mov byte [esi + 8], 1
cmp dword [esp + 0x24], edi
jne 0x1000b817
mov ebx, dword [esp + 0x2c]
mov ebp, dword [esp + 0x20]
cmp byte [esi + 8], 0
jne 0x1000b71a
mov ecx, dword [esi + 4]
cmp ecx, edi
je 0x1000b713
mov eax, dword [ecx + 0x20]
cmp dword [eax], edi
je 0x1000b702
mov edx, dword [ecx + 0x30]
cmp dword [edx], edi
jle 0x1000b702
mov eax, dword [eax]
movzx eax, byte [eax]
jmp 0x1000b709
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
cmp eax, 0xffffffff
je 0x1000b713
mov byte [esi + 9], al
jmp 0x1000b716
mov dword [esi + 4], edi
mov byte [esi + 8], 1
cmp byte [ebp + 8], 0
jne 0x1000b754
mov ecx, dword [ebp + 4]
cmp ecx, edi
je 0x1000b74d
mov eax, dword [ecx + 0x20]
cmp dword [eax], edi
je 0x1000b73c
mov edx, dword [ecx + 0x30]
cmp dword [edx], edi
jle 0x1000b73c
mov eax, dword [eax]
movzx eax, byte [eax]
jmp 0x1000b743
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
cmp eax, 0xffffffff
je 0x1000b74d
mov byte [ebp + 9], al
jmp 0x1000b750
mov dword [ebp + 4], edi
mov byte [ebp + 8], 1
mov ecx, dword [esi + 4]
cmp ecx, edi
jne 0x1000b783
cmp dword [ebp + 4], edi
jne 0x1000b788
cmp ebx, edi
mov ebp, dword [esp + 0x18]
mov dword [esp + 0x2c], ebx
jge 0x1000b81b
mov byte [ebp], 0x30
add ebp, 1
add ebx, 1
mov dword [esp + 0x2c], ebx
jmp 0x1000b81b
cmp dword [ebp + 4], edi
jne 0x1000b760
cmp byte [esi + 8], 0
jne 0x1000b7bf
cmp ecx, edi
je 0x1000b7b8
mov eax, dword [ecx + 0x20]
cmp dword [eax], edi
je 0x1000b7a7
mov edx, dword [ecx + 0x30]
cmp dword [edx], edi
jle 0x1000b7a7
mov eax, dword [eax]
movzx eax, byte [eax]
jmp 0x1000b7ae
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
cmp eax, 0xffffffff
je 0x1000b7b8
mov byte [esi + 9], al
jmp 0x1000b7bb
mov dword [esi + 4], edi
mov byte [esi + 8], 1
cmp byte [esi + 9], 0x30
jne 0x1000b760
mov ecx, dword [esi + 4]
sub ebx, 1
cmp ecx, edi
mov byte [esp + 0x17], 1
je 0x1000b80b
mov eax, dword [ecx + 0x20]
cmp dword [eax], edi
je 0x1000b7f6
mov edx, dword [ecx + 0x30]
cmp dword [edx], edi
jle 0x1000b7f6
mov eax, edx
add dword [eax], 0xffffffff
mov ecx, dword [ecx + 0x20]
mov eax, dword [ecx]
lea edx, [eax + 1]
mov dword [ecx], edx
movzx eax, byte [eax]
jmp 0x1000b7fd
mov eax, dword [ecx]
mov edx, dword [eax + 0x14]
call edx
cmp eax, 0xffffffff
je 0x1000b80b
mov byte [esi + 8], 0
jmp 0x1000b6e0
mov dword [esi + 4], edi
mov byte [esi + 8], 1
jmp 0x1000b6e0
mov ebp, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
nop
cmp byte [esi + 8], 0
jne 0x1000b85a
mov ecx, dword [esi + 4]
cmp ecx, edi
je 0x1000b853
mov eax, dword [ecx + 0x20]
cmp dword [eax], edi
je 0x1000b842
mov edx, dword [ecx + 0x30]
cmp dword [edx], edi
jle 0x1000b842
mov eax, dword [eax]
movzx eax, byte [eax]
jmp 0x1000b849
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
cmp eax, 0xffffffff
je 0x1000b853
mov byte [esi + 9], al
jmp 0x1000b856
mov dword [esi + 4], edi
mov byte [esi + 8], 1
cmp byte [ebx + 8], 0
jne 0x1000b894
mov ecx, dword [ebx + 4]
cmp ecx, edi
je 0x1000b88d
mov eax, dword [ecx + 0x20]
cmp dword [eax], edi
je 0x1000b87c
mov edx, dword [ecx + 0x30]
cmp dword [edx], edi
jle 0x1000b87c
mov eax, dword [eax]
movzx eax, byte [eax]
jmp 0x1000b883
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
cmp eax, 0xffffffff
je 0x1000b88d
mov byte [ebx + 9], al
jmp 0x1000b890
mov dword [ebx + 4], edi
mov byte [ebx + 8], 1
mov ecx, dword [esi + 4]
cmp ecx, edi
jne 0x1000b8e6
cmp dword [ebx + 4], edi
jne 0x1000b8eb
cmp byte [esp + 0x17], 0
mov dword [esp + 0x18], ebp
je 0x1000bf22
cmp byte [esi + 8], 0
jne 0x1000ba28
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x1000ba1d
mov eax, dword [ecx + 0x20]
cmp dword [eax], 0
je 0x1000ba0c
mov edx, dword [ecx + 0x30]
cmp dword [edx], 0
jle 0x1000ba0c
mov eax, dword [eax]
movzx eax, byte [eax]
jmp 0x1000ba13
cmp dword [ebx + 4], edi
jne 0x1000b8a0
cmp byte [esi + 8], 0
jne 0x1000b922
cmp ecx, edi
je 0x1000b91b
mov eax, dword [ecx + 0x20]
cmp dword [eax], edi
je 0x1000b90a
mov edx, dword [ecx + 0x30]
cmp dword [edx], edi
jle 0x1000b90a
mov eax, dword [eax]
movzx eax, byte [eax]
jmp 0x1000b911
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
cmp eax, 0xffffffff
je 0x1000b91b
mov byte [esi + 9], al
jmp 0x1000b91e
mov dword [esi + 4], edi
mov byte [esi + 8], 1
cmp byte [esi + 9], 0x30
jl 0x1000b8a0
cmp byte [esi + 8], 0
jne 0x1000b966
mov ecx, dword [esi + 4]
cmp ecx, edi
je 0x1000b95f
mov eax, dword [ecx + 0x20]
cmp dword [eax], edi
je 0x1000b94e
mov edx, dword [ecx + 0x30]
cmp dword [edx], edi
jle 0x1000b94e
mov eax, dword [eax]
movzx eax, byte [eax]
jmp 0x1000b955
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
cmp eax, 0xffffffff
je 0x1000b95f
mov byte [esi + 9], al
jmp 0x1000b962
mov dword [esi + 4], edi
mov byte [esi + 8], 1
cmp byte [esi + 9], 0x39
jg 0x1000b8a0
cmp dword [esp + 0x24], 0x24
jge 0x1000b9bf
cmp byte [esi + 8], 0
jne 0x1000b9b1
mov ecx, dword [esi + 4]
cmp ecx, edi
je 0x1000b9aa
mov eax, dword [ecx + 0x20]
cmp dword [eax], edi
je 0x1000b999
mov edx, dword [ecx + 0x30]
cmp dword [edx], edi
jle 0x1000b999
mov eax, dword [eax]
movzx eax, byte [eax]
jmp 0x1000b9a0
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
call eax
cmp eax, 0xffffffff
je 0x1000b9aa
mov byte [esi + 9], al
jmp 0x1000b9ad
mov dword [esi + 4], edi
mov byte [esi + 8], 1
mov cl, byte [esi + 9]
mov byte [ebp], cl
add ebp, 1
add dword [esp + 0x24], 1
mov ecx, dword [esi + 4]
cmp ecx, edi
mov byte [esp + 0x17], 1
je 0x1000ba00
mov edx, dword [ecx + 0x20]
cmp dword [edx], edi
je 0x1000b9eb
mov eax, dword [ecx + 0x30]
cmp dword [eax], edi
jle 0x1000b9eb
add dword [eax], 0xffffffff
mov ecx, dword [ecx + 0x20]
mov eax, dword [ecx]
lea edx, [eax + 1]
mov dword [ecx], edx
movzx eax, byte [eax]
jmp 0x1000b9f2
mov eax, dword [ecx]
mov edx, dword [eax + 0x14]
call edx
cmp eax, 0xffffffff
je 0x1000ba00
mov byte [esi + 8], 0
jmp 0x1000b820
mov dword [esi + 4], edi
mov byte [esi + 8], 1
jmp 0x1000b820
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
cmp eax, 0xffffffff
je 0x1000ba1d
mov byte [esi + 9], al
jmp 0x1000ba24
mov dword [esi + 4], 0
mov byte [esi + 8], 1
mov edi, ebx
cmp byte [edi + 8], 0
jne 0x1000ba6a
mov ecx, dword [edi + 4]
test ecx, ecx
je 0x1000ba5f
mov eax, dword [ecx + 0x20]
cmp dword [eax], 0
je 0x1000ba4e
mov edx, dword [ecx + 0x30]
cmp dword [edx], 0
jle 0x1000ba4e
mov eax, dword [eax]
movzx eax, byte [eax]
jmp 0x1000ba55
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
cmp eax, 0xffffffff
je 0x1000ba5f
mov byte [edi + 9], al
jmp 0x1000ba66
mov dword [edi + 4], 0
mov byte [edi + 8], 1
mov ecx, dword [esi + 4]
test ecx, ecx
jne 0x1000ba80
cmp dword [edi + 4], ecx
je 0x1000bf22
test ecx, ecx
mov edi, ebx
je 0x1000ba8a
cmp dword [edi + 4], 0
jne 0x1000bf22
cmp byte [esi + 8], 0
jne 0x1000bac7
test ecx, ecx
je 0x1000babc
mov eax, dword [ecx + 0x20]
cmp dword [eax], 0
je 0x1000baab
mov edx, dword [ecx + 0x30]
cmp dword [edx], 0
jle 0x1000baab
mov eax, dword [eax]
movzx eax, byte [eax]
jmp 0x1000bab2
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
cmp eax, 0xffffffff
je 0x1000babc
mov byte [esi + 9], al
jmp 0x1000bac3
mov dword [esi + 4], 0
mov byte [esi + 8], 1
mov al, byte [esi + 9]
cmp al, 0x65
je 0x1000bb18
cmp byte [esi + 8], 0
jne 0x1000bb0e
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x1000bb03
mov eax, dword [ecx + 0x20]
cmp dword [eax], 0
je 0x1000baf2
mov edx, dword [ecx + 0x30]
cmp dword [edx], 0
jle 0x1000baf2
mov eax, dword [eax]
movzx eax, byte [eax]
jmp 0x1000baf9
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
cmp eax, 0xffffffff
je 0x1000bb03
mov byte [esi + 9], al
jmp 0x1000bb0a
mov dword [esi + 4], 0
mov byte [esi + 8], 1
cmp byte [esi + 9], 0x45
jne 0x1000bf22
mov eax, dword [esp + 0x18]
mov byte [eax], 0x65
mov ecx, dword [esi + 4]
add eax, 1
test ecx, ecx
mov dword [esp + 0x18], eax
je 0x1000bb63
mov eax, dword [ecx + 0x20]
cmp dword [eax], 0
je 0x1000bb51
mov edx, dword [ecx + 0x30]
cmp dword [edx], 0
jle 0x1000bb51
mov eax, edx
add dword [eax], 0xffffffff
mov ecx, dword [ecx + 0x20]
mov eax, dword [ecx]
lea edx, [eax + 1]
mov dword [ecx], edx
movzx eax, byte [eax]
jmp 0x1000bb58
mov eax, dword [ecx]
mov edx, dword [eax + 0x14]
call edx
cmp eax, 0xffffffff
je 0x1000bb63
mov byte [esi + 8], 0
jmp 0x1000bb6e
mov dword [esi + 4], 0
mov byte [esi + 8], 1
xor ebx, ebx
xor edi, edi
cmp byte [esi + 8], bl
mov byte [esp + 0x17], 0
jne 0x1000bbb0
mov ecx, dword [esi + 4]
cmp ecx, ebx
je 0x1000bba9
mov eax, dword [ecx + 0x20]
cmp dword [eax], ebx
je 0x1000bb98
mov edx, dword [ecx + 0x30]
cmp dword [edx], ebx
jle 0x1000bb98
mov eax, dword [eax]
movzx eax, byte [eax]
jmp 0x1000bb9f
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
cmp eax, 0xffffffff
je 0x1000bba9
mov byte [esi + 9], al
jmp 0x1000bbac
mov dword [esi + 4], ebx
mov byte [esi + 8], 1
mov ebp, dword [esp + 0x20]
cmp byte [ebp + 8], bl
jne 0x1000bbed
mov ecx, dword [ebp + 4]
cmp ecx, ebx
je 0x1000bbe6
mov eax, dword [ecx + 0x20]
cmp dword [eax], ebx
je 0x1000bbd5
mov edx, dword [ecx + 0x30]
cmp dword [edx], ebx
jle 0x1000bbd5
mov eax, dword [eax]
movzx eax, byte [eax]
jmp 0x1000bbdc
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
cmp eax, 0xffffffff
je 0x1000bbe6
mov byte [ebp + 9], al
jmp 0x1000bbe9
mov dword [ebp + 4], ebx
mov byte [ebp + 8], 1
mov ecx, dword [esi + 4]
cmp ecx, ebx
jne 0x1000bc01
cmp dword [ebp + 4], ebx
je 0x1000bd21
cmp ecx, ebx
je 0x1000bc0a
cmp dword [ebp + 4], ebx
jne 0x1000bd21
cmp byte [esi + 8], bl
jne 0x1000bc40
cmp ecx, ebx
je 0x1000bc39
mov eax, dword [ecx + 0x20]
cmp dword [eax], ebx
je 0x1000bc28
mov edx, dword [ecx + 0x30]
cmp dword [edx], ebx
jle 0x1000bc28
mov eax, dword [eax]
movzx eax, byte [eax]
jmp 0x1000bc2f
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
cmp eax, 0xffffffff
je 0x1000bc39
mov byte [esi + 9], al
jmp 0x1000bc3c
mov dword [esi + 4], ebx
mov byte [esi + 8], 1
cmp byte [esi + 9], 0x2b
jne 0x1000bc95
mov ebp, dword [esp + 0x18]
mov byte [ebp], 0x2b
mov ecx, dword [esi + 4]
add ebp, 1
cmp ecx, ebx
mov dword [esp + 0x18], ebp
je 0x1000bc89
mov eax, dword [ecx + 0x20]
cmp dword [eax], ebx
je 0x1000bd0c
mov edx, dword [ecx + 0x30]
cmp dword [edx], ebx
jle 0x1000bd0c
mov eax, edx
add dword [eax], 0xffffffff
mov ecx, dword [ecx + 0x20]
mov eax, dword [ecx]
lea edx, [eax + 1]
mov dword [ecx], edx
movzx eax, byte [eax]
jmp 0x1000bd13
mov dword [esi + 4], ebx
mov byte [esi + 8], 1
jmp 0x1000bd25
cmp byte [esi + 8], bl
jne 0x1000bcce
mov ecx, dword [esi + 4]
cmp ecx, ebx
je 0x1000bcc7
mov eax, dword [ecx + 0x20]
cmp dword [eax], ebx
je 0x1000bcb6
mov edx, dword [ecx + 0x30]
cmp dword [edx], ebx
jle 0x1000bcb6
mov eax, dword [eax]
movzx eax, byte [eax]
jmp 0x1000bcbd
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
cmp eax, 0xffffffff
je 0x1000bcc7
mov byte [esi + 9], al
jmp 0x1000bcca
mov dword [esi + 4], ebx
mov byte [esi + 8], 1
cmp byte [esi + 9], 0x2d
jne 0x1000bd21
mov ebp, dword [esp + 0x18]
mov byte [ebp], 0x2d
mov ecx, dword [esi + 4]
add ebp, 1
cmp ecx, ebx
mov dword [esp + 0x18], ebp
je 0x1000bc89
mov eax, dword [ecx + 0x20]
cmp dword [eax], ebx
je 0x1000bd0c
mov edx, dword [ecx + 0x30]
cmp dword [edx], ebx
jle 0x1000bd0c
mov eax, edx
add dword [eax], 0xffffffff
mov ecx, dword [ecx + 0x20]
mov eax, dword [ecx]
lea edx, [eax + 1]
mov dword [ecx], edx
movzx eax, byte [eax]
jmp 0x1000bd13
mov eax, dword [ecx]
mov edx, dword [eax + 0x14]
call edx
cmp eax, 0xffffffff
je 0x1000bc89
mov byte [esi + 8], bl
jmp 0x1000bd25
mov ebp, dword [esp + 0x18]
cmp byte [esi + 8], bl
jne 0x1000bd5e
mov ecx, dword [esi + 4]
cmp ecx, ebx
je 0x1000bd57
mov eax, dword [ecx + 0x20]
cmp dword [eax], ebx
je 0x1000bd46
mov edx, dword [ecx + 0x30]
cmp dword [edx], ebx
jle 0x1000bd46
mov eax, dword [eax]
movzx eax, byte [eax]
jmp 0x1000bd4d
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
cmp eax, 0xffffffff
je 0x1000bd57
mov byte [esi + 9], al
jmp 0x1000bd5a
mov dword [esi + 4], ebx
mov byte [esi + 8], 1
mov edx, dword [esp + 0x20]
cmp byte [edx + 8], bl
jne 0x1000bd9f
mov ecx, dword [edx + 4]
cmp ecx, ebx
je 0x1000bd98
mov eax, dword [ecx + 0x20]
cmp dword [eax], ebx
je 0x1000bd83
mov edx, dword [ecx + 0x30]
cmp dword [edx], ebx
jle 0x1000bd83
mov eax, dword [eax]
movzx eax, byte [eax]
jmp 0x1000bd8a
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
cmp eax, 0xffffffff
mov edx, dword [esp + 0x20]
je 0x1000bd98
mov byte [edx + 9], al
jmp 0x1000bd9b
mov dword [edx + 4], ebx
mov byte [edx + 8], 1
mov ecx, dword [esi + 4]
cmp ecx, ebx
jne 0x1000bdfb
cmp dword [edx + 4], ebx
jne 0x1000be00
cmp byte [esp + 0x17], bl
je 0x1000bdbc
mov byte [ebp], 0x30
add ebp, 1
mov dword [esp + 0x18], ebp
mov eax, dword [esp + 0x20]
push eax
push esi
call fcn.10006dc0
add esp, 8
test al, al
je 0x1000bf22
cmp byte [esi + 8], bl
jne 0x1000be69
mov ecx, dword [esi + 4]
cmp ecx, ebx
je 0x1000be62
mov eax, dword [ecx + 0x20]
cmp dword [eax], ebx
je 0x1000be51
mov edx, dword [ecx + 0x30]
cmp dword [edx], ebx
jle 0x1000be51
mov eax, dword [eax]
movzx eax, byte [eax]
jmp 0x1000be58
cmp dword [edx + 4], ebx
jne 0x1000bdab
cmp byte [esi + 8], bl
jne 0x1000be36
cmp ecx, ebx
je 0x1000be2f
mov eax, dword [ecx + 0x20]
cmp dword [eax], ebx
je 0x1000be1e
mov edx, dword [ecx + 0x30]
cmp dword [edx], ebx
jle 0x1000be1e
mov eax, dword [eax]
movzx eax, byte [eax]
jmp 0x1000be25
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
cmp eax, 0xffffffff
je 0x1000be2f
mov byte [esi + 9], al
jmp 0x1000be32
mov dword [esi + 4], ebx
mov byte [esi + 8], 1
cmp byte [esi + 9], 0x30
jne 0x1000bdab
mov ecx, esi
mov byte [esp + 0x17], 1
call fcn.10006d20
jmp 0x1000bd25
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
cmp eax, 0xffffffff
je 0x1000be62
mov byte [esi + 9], al
jmp 0x1000be65
mov dword [esi + 4], ebx
mov byte [esi + 8], 1
cmp byte [esi + 9], 0x30
jl 0x1000bf1e
cmp byte [esi + 8], bl
jne 0x1000beac
mov ecx, dword [esi + 4]
cmp ecx, ebx
je 0x1000bea5
mov eax, dword [ecx + 0x20]
cmp dword [eax], ebx
je 0x1000be94
mov edx, dword [ecx + 0x30]
cmp dword [edx], ebx
jle 0x1000be94
mov eax, dword [eax]
movzx eax, byte [eax]
jmp 0x1000be9b
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
cmp eax, 0xffffffff
je 0x1000bea5
mov byte [esi + 9], al
jmp 0x1000bea8
mov dword [esi + 4], ebx
mov byte [esi + 8], 1
cmp byte [esi + 9], 0x39
jg 0x1000bf1e
cmp edi, 8
jge 0x1000befc
cmp byte [esi + 8], bl
jne 0x1000bef0
mov ecx, dword [esi + 4]
cmp ecx, ebx
je 0x1000bee9
mov eax, dword [ecx + 0x20]
cmp dword [eax], ebx
je 0x1000bed8
mov edx, dword [ecx + 0x30]
cmp dword [edx], ebx
jle 0x1000bed8
mov eax, dword [eax]
movzx eax, byte [eax]
jmp 0x1000bedf
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
call edx
cmp eax, 0xffffffff
je 0x1000bee9
mov byte [esi + 9], al
jmp 0x1000beec
mov dword [esi + 4], ebx
mov byte [esi + 8], 1
mov al, byte [esi + 9]
mov byte [ebp], al
add ebp, 1
add edi, 1
mov ecx, esi
mov byte [esp + 0x17], 1
call fcn.10006d20
mov eax, dword [esp + 0x20]
push eax
push esi
call fcn.10006dc0
add esp, 8
test al, al
jne 0x1000bdd2
mov dword [esp + 0x18], ebp
cmp byte [esp + 0x1f], 0
jne 0x1000bf30
cmp byte [esp + 0x17], 0
jne 0x1000bf36
mov eax, dword [esp + 0x30]
jmp 0x1000bf3a
mov eax, dword [esp + 0x18]
mov byte [eax], 0
mov dword [esp + 0x78], 0xffffffff
cmp dword [esp + 0x68], 0x10
jb 0x1000bf59
mov ecx, dword [esp + 0x54]
push ecx
call fcn.10018092
add esp, 4
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x68], 0xf
mov dword [esp + 0x64], 0
mov byte [esp + 0x54], 0
mov ecx, dword [esp + 0x70]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x58]
xor ecx, esp
call fcn.1001803e
add esp, 0x68
ret