Function at 0x1001b727
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x7c
mov eax, dword [0x100230b0]
xor eax, esp
mov dword [esp + 0x78], eax
push ebx
push esi
mov esi, dword [ebp + 8]
mov ebx, ecx
push edi
push 6
xor eax, eax
lea edi, [esp + 0x4c]
mov edx, dword [esi + 0x28]
pop ecx
rep stosd dword es:[edi], eax
push 6
pop ecx
lea edi, [esp + 0x30]
mov dword [esp + 0x10], eax
rep stosd dword es:[edi], eax
mov ecx, dword [esi + 0x2c]
lea eax, [esp + 0x10]
push eax
call fcn.1000481a
mov dword [esp + 0xc], eax
test eax, eax
jns 0x1001b7b3
mov ecx, dword [0x1002300c]
cmp ecx, 0x1002300c
je 0x1001be94
test byte [ecx + 0x1c], 4
je 0x1001be94
cmp byte [ecx + 0x19], 2
jb 0x1001be94
push dword [ecx + 0x14]
mov edx, 0x100034e4
push dword [ecx + 0x10]
push 0x11
pop ecx
call fcn.100039e9
jmp 0x1001be90
push 0x10002920
push 0x40
call fcn.1001fd62
mov dword [ebx + 0x2c], eax
pop ecx
pop ecx
test eax, eax
jne 0x1001b7fd
mov eax, dword [0x1002300c]
cmp eax, 0x1002300c
je 0x1001b7f3
test byte [eax + 0x1c], 4
je 0x1001b7f3
cmp byte [eax + 0x19], 2
jb 0x1001b7f3
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x12
mov edx, 0x100034e4
pop ecx
call fcn.100039e9
mov eax, 0x8007000e
jmp 0x1001be94
push 0x10
pop ecx
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp + 8]
xor ecx, ecx
push 0x10002920
push 0x18
pop edx
mov eax, dword [edi + 0x28]
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1001fd90
pop ecx
pop ecx
mov ecx, dword [ebx + 0x2c]
mov dword [ecx], eax
mov eax, dword [ebx + 0x2c]
mov ecx, dword [eax]
test ecx, ecx
jne 0x1001b855
mov eax, dword [0x1002300c]
cmp eax, 0x1002300c
je 0x1001b7f3
test byte [eax + 0x1c], 4
je 0x1001b7f3
cmp byte [eax + 0x19], 2
jb 0x1001b7f3
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x13
jmp 0x1001b7e8
imul eax, dword [edi + 0x28], 0x18
push eax
push dword [edi]
push ecx
call sub.msvcrt.dll_memcpy
mov eax, dword [ebx + 0x2c]
xor esi, esi
add esp, 0xc
mov dword [eax + 4], esi
cmp dword [edi + 4], esi
je 0x1001b8e4
mov eax, dword [esp + 0x10]
xor ecx, ecx
push 0x10002920
push 0xc
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1001fd90
pop ecx
pop ecx
mov ecx, dword [ebx + 0x2c]
mov dword [ecx + 4], eax
mov eax, dword [ebx + 0x2c]
mov ecx, dword [eax + 4]
test ecx, ecx
jne 0x1001b8d2
mov eax, dword [0x1002300c]
cmp eax, 0x1002300c
je 0x1001b7f3
test byte [eax + 0x1c], 4
je 0x1001b7f3
cmp byte [eax + 0x19], 2
jb 0x1001b7f3
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x14
jmp 0x1001b7e8
imul eax, dword [esp + 0x10], 0xc
push eax
push dword [edi + 4]
push ecx
call sub.msvcrt.dll_memcpy
add esp, 0xc
imul eax, dword [esp + 0x10], 0x50
push 0x10002920
add eax, 0xb0
push eax
mov dword [ebx + 0x10], eax
call fcn.1001fd90
mov dword [ebx + 0x14], eax
pop ecx
pop ecx
test eax, eax
jne 0x1001b936
mov eax, dword [0x1002300c]
cmp eax, 0x1002300c
je 0x1001b7f3
test byte [eax + 0x1c], 4
je 0x1001b7f3
cmp byte [eax + 0x19], 2
jb 0x1001b7f3
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x15
jmp 0x1001b7e8
push dword [ebx + 0x10]
push esi
push eax
call sub.msvcrt.dll_memset
mov ecx, dword [ebx + 0x14]
add esp, 0xc
mov eax, dword [ebx + 0x10]
mov dword [ecx + 8], eax
lea eax, [esp + 0x20]
push eax
call dword [sym.imp.api_ms_win_core_profile_l1_1_0.dll_QueryPerformanceCounter]
call dword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_GetCurrentProcess]
push eax
call dword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_GetProcessId]
mov ecx, dword [ebx + 0x14]
xor edx, edx
or edx, dword [esp + 0x20]
or eax, esi
mov dword [esp + 0x2c], esi
mov dword [ecx], edx
mov edx, dword [esp + 0x10]
mov dword [ecx + 4], eax
mov eax, dword [ebx + 0x14]
mov dword [eax + 0x4c], edx
mov ecx, dword [ebx + 0x14]
mov eax, dword [edi + 8]
mov dword [ecx + 0x60], eax
mov eax, dword [edi + 0x1c]
sub eax, 0xa
je 0x1001b9c0
sub eax, 0xe
je 0x1001b9bc
sub eax, 4
je 0x1001b9b8
sub eax, 0x25
je 0x1001b9b4
sub eax, 0x16
je 0x1001b9ac
sub eax, 1
je 0x1001b9b0
push 0x15
jmp 0x1001b9c2
push 0x16
jmp 0x1001b9c2
push 0x1c
jmp 0x1001b9c2
push 0x20
jmp 0x1001b9c2
push 0x1f
jmp 0x1001b9c2
push 0x71
mov eax, dword [ebx + 0x14]
pop ecx
mov dword [eax + 0xc], ecx
mov ecx, dword [ebx + 0x14]
mov eax, dword [edi + 0x1c]
mov dword [ecx + 0x10], eax
mov ecx, dword [ebx + 0x14]
mov eax, dword [edi + 0xc]
mov dword [ecx + 0x68], eax
mov ecx, dword [ebx + 0x14]
mov eax, dword [edi + 0x10]
mov dword [ecx + 0x6c], eax
mov ecx, dword [ebx + 0x14]
mov eax, dword [edi + 0x14]
mov dword [ecx + 0x70], eax
mov ecx, dword [ebx + 0x14]
mov eax, dword [edi + 0x18]
mov dword [ecx + 0x74], eax
mov ecx, dword [ebx + 0x14]
mov eax, dword [edi + 0x20]
mov dword [ecx + 0x1c], eax
mov ecx, dword [ebx + 0x14]
mov eax, dword [edi + 0x24]
mov dword [ecx + 0x20], eax
mov ecx, dword [ebx + 0x14]
mov eax, dword [edi + 0x28]
mov dword [ecx + 0x78], eax
mov ecx, dword [ebx + 0x14]
mov eax, dword [edi + 0x2c]
mov dword [ecx + 0x7c], eax
mov ecx, dword [ebx + 0x14]
mov eax, dword [edi + 0x34]
mov dword [ecx + 0xac], eax
mov ecx, dword [edi + 0x1c]
call fcn.1000484c
mov ecx, dword [ebx + 0x14]
shr eax, 3
mov dword [ecx + 0x2c], eax
mov eax, dword [ebx + 0x14]
mov dword [eax + 0x30], esi
mov eax, dword [edi + 0x30]
test eax, eax
je 0x1001ba9b
mov esi, eax
lea edx, [ebx + 0x30]
mov eax, dword [ebx + 0x2c]
mov edi, edx
push 0xb
pop ecx
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebp + 8]
mov dword [eax + 0x30], edx
mov edi, dword [ebx + 0x14]
sub edi, 0xffffff80
mov esi, dword [esi + 0x30]
push 0xb
pop ecx
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp + 8]
mov edx, dword [ebx + 0x14]
mov ecx, dword [edi + 0x30]
mov eax, dword [ecx + 0x14]
mov dword [edx + 0x34], eax
mov eax, dword [ecx + 0x18]
mov dword [edx + 0x38], eax
mov eax, dword [ebx + 0x14]
mov ecx, dword [eax + 0x44]
mov eax, dword [ebx + 0x14]
or ecx, 4
xor esi, esi
mov dword [eax + 0x44], ecx
mov ecx, dword [ebx + 0x14]
mov eax, dword [ebx + 0x34]
mov dword [ecx + 0x84], eax
jmp 0x1001baa1
mov eax, dword [ebx + 0x2c]
mov dword [eax + 0x30], esi
mov ecx, dword [ebx + 0x14]
mov dword [esp + 0x14], esi
mov eax, dword [ecx + 0x74]
shl eax, 0xa
xor eax, dword [ecx + 0x40]
and eax, 0x800
xor dword [ecx + 0x40], eax
mov eax, esi
cmp dword [edi + 0x2c], esi
jle 0x1001bc26
mov edx, dword [edi + 0x28]
mov ecx, esi
mov dword [esp + 0x20], ecx
test edx, edx
jle 0x1001bc18
mov eax, dword [esp + 0x14]
mov dword [esp + 0x1c], esi
mov esi, dword [esp + 0x1c]
imul edx, eax
add edx, ecx
mov ecx, dword [ebx + 0x14]
imul eax, edx, 0x50
mov dword [esp + 0x10], edx
mov dword [esp + 0x18], eax
mov eax, dword [edi]
mov edx, dword [esp + 0x18]
mov eax, dword [esi + eax]
mov dword [ecx + edx + 0xb0], eax
mov eax, dword [edi]
mov ecx, dword [ebx + 0x14]
mov eax, dword [esi + eax + 4]
mov dword [ecx + edx + 0xb4], eax
mov eax, dword [edi]
mov ecx, dword [ebx + 0x14]
mov eax, dword [esi + eax + 8]
mov dword [ecx + edx + 0xb8], eax
mov eax, dword [edi]
mov ecx, dword [ebx + 0x14]
mov eax, dword [esi + eax + 0xc]
mov dword [ecx + edx + 0xbc], eax
mov eax, dword [edi]
mov ecx, dword [ebx + 0x14]
mov eax, dword [esi + eax + 0x10]
mov dword [ecx + edx + 0xc0], eax
mov eax, dword [edi]
mov ecx, dword [ebx + 0x14]
mov eax, dword [esi + eax + 0x14]
mov esi, edx
mov edx, dword [esp + 0x10]
push edx
mov dword [ecx + esi + 0xc4], eax
mov ecx, ebx
call fcn.1001c3cb
mov ecx, dword [ebx + 0x14]
push dword [esp + 0x10]
mov dword [ecx + esi + 0xd8], eax
mov ecx, ebx
call fcn.1001c42b
mov ecx, dword [ebx + 0x14]
push dword [esp + 0x10]
mov dword [ecx + esi + 0xdc], eax
mov ecx, ebx
call fcn.1001c4b2
mov ecx, dword [ebx + 0x14]
push 0
mov dword [ecx + esi + 0xe0], eax
mov eax, dword [ebx + 0x14]
mov ecx, dword [esi + eax + 0xe0]
mov edx, dword [eax + 0x30]
add ecx, edx
pop esi
cmp ecx, edx
jb 0x1001bbb0
mov eax, ecx
jmp 0x1001bbb3
or eax, 0xffffffff
mov edi, dword [ebx + 0x14]
cmp ecx, edx
mov dword [edi + 0x30], eax
sbb eax, eax
mov edi, dword [ebp + 8]
and eax, 0x80070216
mov dword [esp + 0xc], eax
cmp ecx, edx
jb 0x1001bc85
mov ecx, dword [edi + 4]
test ecx, ecx
je 0x1001bbfb
imul eax, dword [esp + 0x10], 0xc
mov edi, dword [esp + 0x18]
mov eax, dword [eax + ecx]
mov ecx, dword [ebx + 0x14]
cdq
mov dword [ecx + edi + 0xe8], eax
mov eax, edi
mov edi, dword [ebp + 8]
mov dword [ecx + eax + 0xec], edx
mov ecx, dword [esp + 0x20]
add dword [esp + 0x1c], 0x18
inc ecx
mov edx, dword [edi + 0x28]
mov eax, dword [esp + 0x14]
mov dword [esp + 0x20], ecx
cmp ecx, edx
jl 0x1001badd
inc eax
mov dword [esp + 0x14], eax
cmp eax, dword [edi + 0x2c]
jl 0x1001bac4
mov eax, dword [ebx]
push dword [ebx + 0x14]
mov eax, dword [eax + 8]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x10]
mov ecx, esi
call dword [0x10024110]
call esi
mov dword [esp + 0xc], eax
test eax, eax
jns 0x1001bcc4
mov ecx, dword [0x1002300c]
cmp ecx, 0x1002300c
je 0x1001be94
test byte [ecx + 0x1c], 4
je 0x1001be94
cmp byte [ecx + 0x19], 2
jb 0x1001be94
push eax
push dword [ecx + 0x14]
push dword [ecx + 0x10]
push 0x17
mov edx, 0x100034e4
pop ecx
call fcn.10003a07
jmp 0x1001be90
mov edx, dword [0x1002300c]
cmp edx, 0x1002300c
je 0x1001be94
test byte [edx + 0x1c], 4
je 0x1001be94
cmp byte [edx + 0x19], 2
jb 0x1001be94
push eax
push dword [edx + 0x14]
push dword [edx + 0x10]
mov edx, 0x100034e4
push 0x16
pop ecx
call fcn.10003a07
jmp 0x1001be90
mov eax, dword [edi + 0x30]
xor ecx, ecx
inc ecx
test eax, eax
je 0x1001bcd9
or dword [esp + 0x44], ecx
mov eax, dword [eax + 4]
mov dword [esp + 0x40], eax
mov eax, dword [ebx + 0x14]
lea edx, [esp + 0x48]
mov dword [esp + 0x38], eax
mov eax, dword [ebx + 0x10]
mov dword [esp + 0x3c], eax
mov eax, dword [ebp + 0xc]
mov dword [ebx + 0x28], eax
mov dword [esp + 0x50], eax
lea eax, [esp + 0x30]
mov dword [esp + 0x5c], eax
mov eax, dword [ebx]
mov dword [esp + 0x58], ecx
push edx
mov ecx, dword [eax + 0x2c]
push dword [eax + 0x3c]
mov esi, dword [ecx]
mov ecx, esi
call dword [0x10024110]
call esi
mov dword [esp + 0xc], eax
test eax, eax
jns 0x1001bd52
mov edx, dword [0x1002300c]
cmp edx, 0x1002300c
je 0x1001be94
test byte [edx + 0x1c], 4
je 0x1001be94
cmp byte [edx + 0x19], 2
jb 0x1001be94
push eax
push dword [edx + 0x14]
push dword [edx + 0x10]
push 0x18
jmp 0x1001bc75
mov eax, dword [esp + 0x54]
mov edx, dword [esp + 0x30]
mov dword [ebx + 0x24], eax
xor eax, eax
mov dword [ebx + 0x20], edx
cmp dword [edi + 4], eax
je 0x1001be90
push 8
pop ecx
lea edi, [esp + 0x60]
rep stosd dword es:[edi], eax
mov eax, dword [ebx]
mov dword [esp + 0x60], edx
lea edx, [esp + 0x60]
push edx
mov ecx, dword [eax + 0x2c]
push dword [eax + 0x3c]
mov esi, dword [ecx + 0x1c]
mov ecx, esi
call dword [0x10024110]
call esi
test eax, eax
jns 0x1001bdca
mov ecx, dword [0x1002300c]
cmp ecx, 0x1002300c
je 0x1001be90
test byte [ecx + 0x1c], 4
je 0x1001be90
cmp byte [ecx + 0x19], 2
jb 0x1001be90
push eax
push dword [ecx + 0x14]
push dword [ecx + 0x10]
push 0x19
jmp 0x1001bc75
mov ecx, dword [ebx + 0x14]
xor esi, esi
mov eax, dword [esp + 0x70]
mov dword [esp + 0x14], eax
cmp dword [ecx + 0x4c], esi
jle 0x1001be67
mov edx, dword [0x1002300c]
mov edi, esi
mov eax, dword [edi + ecx + 0xe8]
or eax, dword [edi + ecx + 0xec]
je 0x1001be29
mov eax, dword [edi + ecx + 0xe0]
push eax
push dword [edi + ecx + 0xe8]
push eax
push dword [esp + 0x20]
call dword [sym.imp.msvcrt.dll_memcpy_s]
mov eax, dword [ebx + 0x14]
add esp, 0x10
mov ecx, dword [esp + 0x14]
add ecx, dword [edi + eax + 0xe0]
mov dword [esp + 0x14], ecx
jmp 0x1001be56
mov eax, ecx
cmp edx, 0x1002300c
je 0x1001be5c
test byte [edx + 0x1c], 4
je 0x1001be5c
cmp byte [edx + 0x19], 2
jb 0x1001be5c
push esi
push dword [edx + 0x14]
push dword [edx + 0x10]
mov edx, 0x100034e4
push 0x1a
pop ecx
call fcn.10003a07
mov eax, dword [ebx + 0x14]
mov edx, dword [0x1002300c]
inc esi
add edi, 0x50
mov ecx, eax
cmp esi, dword [eax + 0x4c]
jl 0x1001bde8
lea eax, [ebx + 0x20]
mov dword [esp + 0x28], 1
mov dword [esp + 0x2c], eax
lea edx, [esp + 0x28]
mov eax, dword [ebx]
push edx
mov ecx, dword [eax + 0x2c]
push dword [eax + 0x3c]
mov esi, dword [ecx + 0x20]
mov ecx, esi
call dword [0x10024110]
call esi
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x84]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.1001fd10
mov esp, ebp
pop ebp
ret 8