Function at 0x1000f541
Capabilities:
Check for software breakpoints

Disassembly:
add byte [eax], al
mov ecx, dword [ebp - 0x24]
sub ecx, 1
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp + 0x18]
sub edx, 9
cmp dword [ebp - 0x24], edx
jbe 0x1000f5c9
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
sub ecx, 0x19c
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], 8
ja case.default.0x1000f4ee
mov edx, dword [ebp - 0x28]
jmp dword [edx*4 + 0x1000fad4]
call fcn.1000d5e0
lea ecx, [ebp - 0x2c]
mov edx, dword [edi + 0x10]
call fcn.100135d0
inc dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
push eax
lea eax, [ebp - 0x58]
push eax
jmp case.default.0x1000f4ee
mov eax, esi
call fcn.10014740
jmp case.default.0x1000f4ee
imul ebx, eax
add dword [ebp - 0x1c], ebx
mov ecx, edi
lea edx, [ebp - 0x1c]
mov eax, esi
call fcn.10016a90
jmp case.default.0x1000f4ee
push 0xffffffffffffffff
mov eax, esi
jmp case.default.0x1000f4ee
je case.0x1000f39e.10
mov eax, dword [eax + 0x28]
add dword [ebp - 0x1c], eax
jmp case.0x1000f4ee.4
jnp 0x1000f5b1
hlt
cmp dword [esi + 0x2f0], 0
jmp case.default.0x1000f4ee
into
ljmp 0xe445
add eax, dword [ebp - 0x1c]
add eax, dword [esi + 0x31c]
mov dword [ebp - 0x1c], eax
mov ecx, dword [edi + 0x14]
lea edx, [ebp - 0x1c]
mov eax, esi
call fcn.10014740
mov eax, dword [esi + 0x21c]
test eax, eax
jmp case.default.0x1000f4ee
mov eax, dword [ebp - 0x2c]
add eax, 2
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
call fcn.1000fce0
add byte [eax], al
lea ecx, [ebp - 0x58]
mov edx, dword [edi + 8]
mov eax, dword [esi + 0x1f4]
call fcn.10013660
jmp 0x1000f4b7
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x2c], eax
jmp 0x1000f5da
mov ecx, dword [ebp - 0x2c]
sub ecx, 1
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp + 0x18]
sub edx, 9
cmp dword [ebp - 0x2c], edx
jbe 0x1000f6c7
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
sub ecx, 0x19c
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], 8
ja case.default.0x1000f608
mov edx, dword [ebp - 0x30]
jmp dword [edx*4 + 0x1000faf8]
lea ecx, [eax + 0x7c]
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 8]
call fcn.10001350
jmp case.0x1000f608.0
call fcn.10015e90
lea eax, [ebp - 0x2c]
call fcn.10009cd0
test eax, eax
jmp case.default.0x1000f608
mov dl, 1
mov eax, 0x1000f7d6
call fcn.1000bae0
mov dword [ebp - 8], eax
lea eax, [ebp - 0x2c]
jmp case.default.0x1000f608
mov esi, 0xf0002868
jle 0x1000ed48
jmp case.default.0x1000f608
test al, al
je case.0x1000f706.5
mov eax, dword [ebp - 0xc]
add eax, 0x94
push eax
push 1
mov eax, dword [ebp - 0xc]
jmp case.default.0x1000f608
call fcn.10017d40
mov edx, eax
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x40]
lea eax, [ebp - 0x2c]
call fcn.10001350
jmp case.default.0x1000f608
mov edx, eax
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, esi
mov bx, 0xffb9
call fcn.100080c0
jmp case.default.0x1000f608
jmp 0x1000f57f
lea ecx, [ebp - 0x2c]
mov edx, dword [edi + 0x10]
jmp 0x1000f5d1
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x34], eax
jmp 0x1000f6d8
mov ecx, dword [ebp - 0x34]
sub ecx, 1
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp + 0x18]
sub edx, 9
cmp dword [ebp - 0x34], edx
jbe 0x1000f78d
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x38]
sub ecx, 0x19c
mov dword [ebp - 0x38], ecx
cmp dword [ebp - 0x38], 8
ja case.default.0x1000f706
mov edx, dword [ebp - 0x38]
jmp dword [edx*4 + 0x1000fb1c]
mov eax, dword [ebp - 8]
jmp case.default.0x1000f706
call fcn.1000b780
test al, al
je 0x1000f65c
jmp case.default.0x1000f706
call fcn.1000ab10
jmp case.default.0x1000f706
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0xb8]
call fcn.100135d0
jmp case.0x1000f7cc.8
mov eax, dword [eax + 0xc]
mov edx, dword [esi + 0x58]
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, esi
mov bx, 0xffb9
jmp case.default.0x1000f706
lea ecx, [eax + 0x6c]
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 8]
call fcn.10017d40
mov eax, dword [ebp - 8]
jmp case.default.0x1000f706
mov ch, 0x57
push 0x20e87be4
cmc
invalid
call fcn.10014f80
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0xb4]
jmp case.default.0x1000f706
mov eax, dword [ebp - 8]
jmp 0x1000f6cf
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x3c], eax
jmp 0x1000f79e
mov ecx, dword [ebp - 0x3c]
sub ecx, 1
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp + 0x18]
sub edx, 9
cmp dword [ebp - 0x3c], edx
jbe 0x1000f8b9
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x40]
sub ecx, 0x19c
mov dword [ebp - 0x40], ecx
cmp dword [ebp - 0x40], 8
ja case.default.0x1000f7cc
mov edx, dword [ebp - 0x40]
jmp dword [edx*4 + 0x1000fb40]
ret 0x10
mov edx, dword [edi + 8]
pop ecx
call fcn.1000fce0
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x2c]
mov eax, dword [esi + 0x1f4]
call fcn.100149e0
jmp case.default.0x1000f7cc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
jmp case.default.0x1000f7cc
mov esp, 0x621feb2a
mov edx, 1
mov eax, 2
call fcn.10011d90
jmp case.default.0x1000f7cc
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
lea eax, [ebp - 0x58]
push eax
mov eax, dword [ebp - 8]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov ecx, eax
jmp case.default.0x1000f7cc
call fcn.1000dcc0
mov eax, dword [eax + 0x14]
mov dl, 1
call fcn.10009280
jmp case.default.0x1000f7cc
call fcn.1000df10
mov eax, dword [ebp - 8]
jmp case.default.0x1000f7cc
lea eax, [ebp - 0x58]
push eax
mov eax, dword [ebp - 8]
call fcn.1000bae0
jmp case.default.0x1000f7cc
invalid
jmp 0x1000f795
mov eax, dword [ebp - 0x48]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret