Function at 0x10003600
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1001babd
mov eax, dword fs:[0]
push eax
sub esp, 0x34
push ebx
push esi
push edi
mov eax, dword [0x10027014]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov esi, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
mov dword [esi + 4], 0
mov dword [esi + 8], 0
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x20], 0
mov dword [esi + 0x24], 0
mov dword [esi + 0x28], 0
mov dword [esi + 0x2c], 0
mov dword [esi + 0x30], 0
mov dword [esi + 0x34], 0
mov dword [esi + 0x38], 0
mov dword [esi + 0x3c], 0
mov byte [esi + 0x40], 1
mov dword [esi], ebx
test ebx, ebx
je 0x10003c59
push str.EntityHealth
lea ecx, [ebp - 0x24]
call fcn.10002360
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 0
add edi, 0x95
push eax
mov ecx, edi
call fcn.10006330
mov eax, dword [eax]
add eax, ebx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
mov dword [esi + 8], eax
cmp ecx, 0x10
jb 0x1000370e
mov edx, dword [ebp - 0x24]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10003704
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10003c73
push ecx
push edx
call fcn.1000c445
add esp, 8
push str.EntityMP
lea ecx, [ebp - 0x24]
call fcn.10002360
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 1
push eax
mov ecx, edi
call fcn.10006330
mov eax, dword [eax]
add eax, ebx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
mov dword [esi + 0xc], eax
cmp ecx, 0x10
jb 0x1000376f
mov edx, dword [ebp - 0x24]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10003765
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10003c78
push ecx
push edx
call fcn.1000c445
add esp, 8
push str.EntityFP
lea ecx, [ebp - 0x24]
call fcn.10002360
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 2
push eax
mov ecx, edi
call fcn.10006330
mov eax, dword [eax]
add eax, ebx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
mov dword [esi + 0x10], eax
cmp ecx, 0x10
jb 0x100037d0
mov edx, dword [ebp - 0x24]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100037c6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10003c7d
push ecx
push edx
call fcn.1000c445
add esp, 8
push str.EntityMaxHealth
lea ecx, [ebp - 0x24]
call fcn.10002360
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 3
push eax
mov ecx, edi
call fcn.10006330
mov eax, dword [eax]
add eax, ebx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
mov dword [esi + 0x14], eax
cmp ecx, 0x10
jb 0x10003831
mov edx, dword [ebp - 0x24]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10003827
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10003c82
push ecx
push edx
call fcn.1000c445
add esp, 8
push str.EntityIsPlayer
lea ecx, [ebp - 0x24]
call fcn.10002360
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 4
push eax
mov ecx, edi
call fcn.10006330
mov eax, dword [eax]
add eax, ebx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
mov dword [esi + 0x18], eax
cmp ecx, 0x10
jb 0x10003892
mov edx, dword [ebp - 0x24]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10003888
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10003c87
push ecx
push edx
call fcn.1000c445
add esp, 8
push str.EntityObjId
lea ecx, [ebp - 0x24]
call fcn.10002360
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 5
push eax
mov ecx, edi
call fcn.10006330
mov eax, dword [eax]
add eax, ebx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
mov dword [esi + 0x1c], eax
cmp ecx, 0x10
jb 0x100038f3
mov edx, dword [ebp - 0x24]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100038e9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10003c8c
push ecx
push edx
call fcn.1000c445
add esp, 8
push str.EntityRange
lea ecx, [ebp - 0x24]
call fcn.10002360
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 6
push eax
mov ecx, edi
call fcn.10006330
mov eax, dword [eax]
add eax, ebx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
mov dword [esi + 0x20], eax
cmp ecx, 0x10
jb 0x10003954
mov edx, dword [ebp - 0x24]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000394a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10003c91
push ecx
push edx
call fcn.1000c445
add esp, 8
push str.EntitySpeedFactor
lea ecx, [ebp - 0x24]
call fcn.10002360
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 7
push eax
mov ecx, edi
call fcn.10006330
mov eax, dword [eax]
add eax, ebx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
mov dword [esi + 0x24], eax
cmp ecx, 0x10
jb 0x100039b5
mov edx, dword [ebp - 0x24]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100039ab
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10003c96
push ecx
push edx
call fcn.1000c445
add esp, 8
push str.CActionMoverAddr
lea ecx, [ebp - 0x24]
call fcn.10002360
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 8
push eax
mov ecx, edi
call fcn.10006330
mov eax, dword [eax]
mov eax, dword [ebx + eax]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
mov dword [esi + 4], eax
cmp ecx, 0x10
jb 0x10003a17
mov edx, dword [ebp - 0x24]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10003a0d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10003c9b
push ecx
push edx
call fcn.1000c445
add esp, 8
push str.CActionDwState
lea ecx, [ebp - 0x24]
call fcn.10002360
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 9
push eax
mov ecx, edi
call fcn.10006330
mov eax, dword [eax]
add eax, dword [esi + 4]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
mov dword [esi + 0x28], eax
cmp ecx, 0x10
jb 0x10003a79
mov edx, dword [ebp - 0x24]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10003a6f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10003ca0
push ecx
push edx
call fcn.1000c445
add esp, 8
push str.CActionDwStateFlag
lea ecx, [ebp - 0x24]
call fcn.10002360
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 0xa
push eax
mov ecx, edi
call fcn.10006330
mov eax, dword [eax]
add eax, dword [esi + 4]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
mov dword [esi + 0x2c], eax
cmp ecx, 0x10
jb 0x10003adb
mov edx, dword [ebp - 0x24]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10003ad1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10003ca5
push ecx
push edx
call fcn.1000c445
add esp, 8
push str.EntityCursorType
lea ecx, [ebp - 0x24]
call fcn.10002360
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 0xb
push eax
mov ecx, edi
call fcn.10006330
mov eax, dword [eax]
add eax, ebx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
mov dword [esi + 0x30], eax
cmp ecx, 0x10
jb 0x10003b3c
mov edx, dword [ebp - 0x24]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10003b32
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10003caa
push ecx
push edx
call fcn.1000c445
add esp, 8
push str.EntityName
lea ecx, [ebp - 0x24]
call fcn.10002360
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 0xc
push eax
mov ecx, edi
call fcn.10006330
mov eax, dword [eax]
add eax, ebx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
mov dword [esi + 0x34], eax
cmp ecx, 0x10
jb 0x10003b9d
mov edx, dword [ebp - 0x24]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10003b93
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10003caf
push ecx
push edx
call fcn.1000c445
add esp, 8
push str.EntityPosition
lea ecx, [ebp - 0x24]
call fcn.10002360
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 0xd
push eax
mov ecx, edi
call fcn.10006330
mov eax, dword [eax]
add eax, ebx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
mov dword [esi + 0x38], eax
cmp ecx, 0x10
jb 0x10003bfe
mov edx, dword [ebp - 0x24]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10003bf4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10003cb4
push ecx
push edx
call fcn.1000c445
add esp, 8
push str.EntityDebuff
lea ecx, [ebp - 0x3c]
call fcn.10002360
lea eax, [ebp - 0x3c]
mov dword [ebp - 4], 0xe
push eax
mov ecx, edi
call fcn.10006330
mov ecx, dword [ebp - 0x28]
mov eax, dword [eax]
add eax, ebx
mov dword [esi + 0x3c], eax
cmp ecx, 0x10
jb 0x10003c54
mov edx, dword [ebp - 0x3c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10003c4a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10003cb9
push ecx
push edx
call fcn.1000c445
add esp, 8
cmp dword [ebx], 0
jne 0x10003c5d
mov byte [esi + 0x40], 0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
call fcn.10012758
call fcn.10012758
call fcn.10012758
call fcn.10012758
call fcn.10012758
call fcn.10012758
call fcn.10012758
call fcn.10012758
call fcn.10012758
call fcn.10012758
call fcn.10012758
call fcn.10012758
call fcn.10012758
call fcn.10012758
call fcn.10012758
int3