Function at 0x1000ba10
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2a8
push ebx
push esi
push edi
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x22c], 0
mov dword [ebp - 0x18], 0
mov eax, dword [ebp + 0xc]
mov cl, byte [eax]
mov byte [ebp - 0x28], cl
movsx edx, byte [ebp - 0x28]
mov eax, dword [ebp + 0xc]
add eax, 1
mov dword [ebp + 0xc], eax
test edx, edx
je 0x1000c627
cmp dword [ebp - 0x22c], 0
jl 0x1000c627
movsx ecx, byte [ebp - 0x28]
cmp ecx, 0x20
jl 0x1000ba86
movsx edx, byte [ebp - 0x28]
cmp edx, 0x78
jg 0x1000ba86
movsx eax, byte [ebp - 0x28]
movsx ecx, byte [eax + 0x1002be84]
and ecx, 0xf
mov dword [ebp - 0x290], ecx
jmp 0x1000ba90
mov dword [ebp - 0x290], 0
mov edx, dword [ebp - 0x290]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x18]
movsx edx, byte [ecx + eax*8 + 0x1002bea4]
sar edx, 4
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 7
ja case.default.0x1000bac9
mov ecx, dword [ebp - 0x294]
jmp dword [ecx*4 + 0x1000c634]
mov dword [ebp - 0x1c], 0
mov edx, dword [ebp - 0x28]
and edx, 0xff
mov eax, dword [str.________________________________H]
xor ecx, ecx
mov cx, word [eax + edx*2]
and ecx, 0x8000
test ecx, ecx
je 0x1000bb4d
lea edx, [ebp - 0x22c]
push edx
mov eax, dword [ebp + 8]
push eax
movsx ecx, byte [ebp - 0x28]
push ecx
call fcn.1000c740
add esp, 0xc
mov edx, dword [ebp + 0xc]
mov al, byte [edx]
mov byte [ebp - 0x28], al
mov ecx, dword [ebp + 0xc]
add ecx, 1
mov dword [ebp + 0xc], ecx
movsx edx, byte [ebp - 0x28]
test edx, edx
jne 0x1000bb47
push str.ch____T_0_
push 0
push 0x186
push str.output.c
push 2
call fcn.100056e0
add esp, 0x14
cmp eax, 1
jne 0x1000bb47
int3
xor eax, eax
test eax, eax
jne 0x1000bb1e
lea ecx, [ebp - 0x22c]
push ecx
mov edx, dword [ebp + 8]
push edx
movsx eax, byte [ebp - 0x28]
push eax
call fcn.1000c740
add esp, 0xc
jmp case.default.0x1000bac9
mov dword [ebp - 8], 0
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x23c], ecx
mov edx, dword [ebp - 0x23c]
mov dword [ebp - 0x244], edx
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x234], 0xffffffff
mov dword [ebp - 0x1c], 0
jmp case.default.0x1000bac9
movsx ecx, byte [ebp - 0x28]
mov dword [ebp - 0x298], ecx
mov edx, dword [ebp - 0x298]
sub edx, 0x20
mov dword [ebp - 0x298], edx
cmp dword [ebp - 0x298], 0x10
ja case.0x1000bbdc.5
mov ecx, dword [ebp - 0x298]
xor eax, eax
mov al, byte [ecx + 0x1000c66c]
jmp dword [eax*4 + 0x1000c654]
mov edx, dword [ebp - 4]
or edx, 4
mov dword [ebp - 4], edx
jmp case.0x1000bbdc.5
mov eax, dword [ebp - 4]
or al, 1
mov dword [ebp - 4], eax
jmp case.0x1000bbdc.5
mov ecx, dword [ebp - 4]
or ecx, 2
mov dword [ebp - 4], ecx
jmp case.0x1000bbdc.5
mov edx, dword [ebp - 4]
or dl, 0x80
mov dword [ebp - 4], edx
jmp case.0x1000bbdc.5
mov eax, dword [ebp - 4]
or al, 8
mov dword [ebp - 4], eax
jmp case.default.0x1000bac9
movsx ecx, byte [ebp - 0x28]
cmp ecx, 0x2a
jne 0x1000bc57
lea edx, [ebp + 0x10]
push edx
call fcn.1000c850
add esp, 4
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0
jge 0x1000bc55
mov eax, dword [ebp - 4]
or al, 4
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x244]
neg ecx
mov dword [ebp - 0x244], ecx
jmp 0x1000bc6e
mov edx, dword [ebp - 0x244]
imul edx, edx, 0xa
movsx eax, byte [ebp - 0x28]
lea ecx, [edx + eax - 0x30]
mov dword [ebp - 0x244], ecx
jmp case.default.0x1000bac9
mov dword [ebp - 0x234], 0
jmp case.default.0x1000bac9
movsx edx, byte [ebp - 0x28]
cmp edx, 0x2a
jne 0x1000bcb2
lea eax, [ebp + 0x10]
push eax
call fcn.1000c850
add esp, 4
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0
jge 0x1000bcb0
mov dword [ebp - 0x234], 0xffffffff
jmp 0x1000bcc9
mov ecx, dword [ebp - 0x234]
imul ecx, ecx, 0xa
movsx edx, byte [ebp - 0x28]
lea eax, [ecx + edx - 0x30]
mov dword [ebp - 0x234], eax
jmp case.default.0x1000bac9
movsx ecx, byte [ebp - 0x28]
mov dword [ebp - 0x29c], ecx
mov edx, dword [ebp - 0x29c]
sub edx, 0x49
mov dword [ebp - 0x29c], edx
cmp dword [ebp - 0x29c], 0x2e
ja case.0x1000bcfe.4
mov ecx, dword [ebp - 0x29c]
xor eax, eax
mov al, byte [ecx + 0x1000c691]
jmp dword [eax*4 + 0x1000c67d]
mov edx, dword [ebp - 4]
or edx, 0x10
mov dword [ebp - 4], edx
jmp case.0x1000bcfe.4
mov eax, dword [ebp + 0xc]
movsx ecx, byte [eax]
cmp ecx, 0x36
jne 0x1000bd3b
mov edx, dword [ebp + 0xc]
movsx eax, byte [edx + 1]
cmp eax, 0x34
jne 0x1000bd3b
mov ecx, dword [ebp + 0xc]
add ecx, 2
mov dword [ebp + 0xc], ecx
mov edx, dword [ebp - 4]
or dh, 0x80
mov dword [ebp - 4], edx
jmp 0x1000bd47
mov dword [ebp - 0x18], 0
jmp case.0x1000bac9.0
jmp case.0x1000bcfe.4
mov eax, dword [ebp - 4]
or al, 0x20
mov dword [ebp - 4], eax
jmp case.0x1000bcfe.4
mov ecx, dword [ebp - 4]
or ch, 8
mov dword [ebp - 4], ecx
jmp case.default.0x1000bac9
movsx edx, byte [ebp - 0x28]
mov dword [ebp - 0x2a0], edx
mov eax, dword [ebp - 0x2a0]
sub eax, 0x43
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0x35
ja case.0x1000bd95.14
mov edx, dword [ebp - 0x2a0]
xor ecx, ecx
mov cl, byte [edx + 0x1000c6fc]
jmp dword [ecx*4 + 0x1000c6c0]
mov eax, dword [ebp - 4]
and eax, 0x830
test eax, eax
jne case.0x1000bd95.5
mov ecx, dword [ebp - 4]
or ch, 8
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
and edx, 0x810
test edx, edx
je 0x1000bdf7
lea eax, [ebp + 0x10]
push eax
call fcn.1000c890
add esp, 4
mov word [ebp - 0x14], ax
mov cx, word [ebp - 0x14]
push ecx
lea edx, [ebp - 0x228]
push edx
call fcn.1000d840
add esp, 8
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jge 0x1000bdf5
mov dword [ebp - 0x23c], 1
jmp 0x1000be1d
lea eax, [ebp + 0x10]
push eax
call fcn.1000c850
add esp, 4
mov word [ebp - 0x248], ax
mov cl, byte [ebp - 0x248]
mov byte [ebp - 0x228], cl
mov dword [ebp - 0x24], 1
lea edx, [ebp - 0x228]
mov dword [ebp - 0x20], edx
jmp case.0x1000bd95.14
lea eax, [ebp + 0x10]
push eax
call fcn.1000c850
add esp, 4
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0
je 0x1000be52
mov ecx, dword [ebp - 0x24c]
cmp dword [ecx + 4], 0
jne 0x1000be6c
mov edx, dword [str._null_]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x20]
push eax
call fcn.10009640
add esp, 4
mov dword [ebp - 0x24], eax
jmp 0x1000bebb
mov ecx, dword [ebp - 4]
and ecx, 0x800
test ecx, ecx
je 0x1000be9c
mov edx, dword [ebp - 0x24c]
mov eax, dword [edx + 4]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x24c]
movsx edx, word [ecx]
shr edx, 1
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x1c], 1
jmp 0x1000bebb
mov dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0x24c]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x24c]
movsx eax, word [edx]
mov dword [ebp - 0x24], eax
jmp case.0x1000bd95.14
mov ecx, dword [ebp - 4]
and ecx, 0x830
test ecx, ecx
jne case.0x1000bd95.11
mov edx, dword [ebp - 4]
or dh, 8
mov dword [ebp - 4], edx
cmp dword [ebp - 0x234], 0xffffffff
jne 0x1000beeb
mov dword [ebp - 0x2a4], 0x7fffffff
jmp 0x1000bef7
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x2a4], eax
mov ecx, dword [ebp - 0x2a4]
mov dword [ebp - 0x258], ecx
lea edx, [ebp + 0x10]
push edx
call fcn.1000c850
add esp, 4
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 4]
and eax, 0x810
test eax, eax
je 0x1000bf86
cmp dword [ebp - 0x20], 0
jne 0x1000bf2d
mov ecx, dword [0x10030154]
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], 1
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x254], edx
mov eax, dword [ebp - 0x258]
mov ecx, dword [ebp - 0x258]
sub ecx, 1
mov dword [ebp - 0x258], ecx
test eax, eax
je 0x1000bf76
mov edx, dword [ebp - 0x254]
xor eax, eax
mov ax, word [edx]
test eax, eax
je 0x1000bf76
mov ecx, dword [ebp - 0x254]
add ecx, 2
mov dword [ebp - 0x254], ecx
jmp 0x1000bf3d
mov edx, dword [ebp - 0x254]
sub edx, dword [ebp - 0x20]
sar edx, 1
mov dword [ebp - 0x24], edx
jmp 0x1000bfe0
cmp dword [ebp - 0x20], 0
jne 0x1000bf94
mov eax, dword [str._null_]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x250], ecx
mov edx, dword [ebp - 0x258]
mov eax, dword [ebp - 0x258]
sub eax, 1
mov dword [ebp - 0x258], eax
test edx, edx
je 0x1000bfd4
mov ecx, dword [ebp - 0x250]
movsx edx, byte [ecx]
test edx, edx
je 0x1000bfd4
mov eax, dword [ebp - 0x250]
add eax, 1
mov dword [ebp - 0x250], eax
jmp 0x1000bf9d
mov ecx, dword [ebp - 0x250]
sub ecx, dword [ebp - 0x20]
mov dword [ebp - 0x24], ecx
jmp case.0x1000bd95.14
lea edx, [ebp + 0x10]
push edx
call fcn.1000c850
add esp, 4
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 4]
and eax, 0x20
test eax, eax
je 0x1000c013
mov ecx, dword [ebp - 0x25c]
mov dx, word [ebp - 0x22c]
mov word [ecx], dx
jmp 0x1000c021
mov eax, dword [ebp - 0x25c]
mov ecx, dword [ebp - 0x22c]
mov dword [eax], ecx
mov dword [ebp - 0x23c], 1
jmp case.0x1000bd95.14
mov dword [ebp - 8], 1
mov dl, byte [ebp - 0x28]
add dl, 0x20
mov byte [ebp - 0x28], dl
mov eax, dword [ebp - 4]
or al, 0x40
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x234], 0
jge 0x1000c066
mov dword [ebp - 0x234], 6
jmp 0x1000c082
cmp dword [ebp - 0x234], 0
jne 0x1000c082
movsx edx, byte [ebp - 0x28]
cmp edx, 0x67
jne 0x1000c082
mov dword [ebp - 0x234], 1
mov eax, dword [ebp + 0x10]
add eax, 8
mov dword [ebp + 0x10], eax
mov ecx, dword [ebp + 0x10]
sub ecx, 8
mov edx, dword [ecx]
mov eax, dword [ecx + 4]
mov dword [ebp - 0x264], edx
mov dword [ebp - 0x260], eax
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 0x234]
push edx
movsx eax, byte [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x20]
push ecx
lea edx, [ebp - 0x264]
push edx
call dword [0x100303e0]
add esp, 0x14
mov eax, dword [ebp - 4]
and eax, 0x80
test eax, eax
je 0x1000c0e8
cmp dword [ebp - 0x234], 0
jne 0x1000c0e8
mov ecx, dword [ebp - 0x20]
push ecx
call dword [0x100303ec]
add esp, 4
movsx edx, byte [ebp - 0x28]
cmp edx, 0x67
jne 0x1000c10a
mov eax, dword [ebp - 4]
and eax, 0x80
test eax, eax
jne 0x1000c10a
mov ecx, dword [ebp - 0x20]
push ecx
call dword [0x100303e4]
push ebp
mov ebp, esp
sub esp, 0xc
mov dword [ebp - 8], edx
mov dword [ebp - 0xc], ecx
mov eax, dword [ebp - 0xc]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
mov ecx, eax
add ecx, 0xffffffff
mov dword [ebp - 8], ecx
cmp eax, 0
jbe 0x1000c139
mov eax, dword [ebp - 4]
mov ecx, eax
add ecx, 1
mov dword [ebp - 4], ecx
mov byte [eax], 0
jmp 0x1000c119
add esp, 0xc
pop ebp
or al, 0x5d
ret
pushal
fild dword [edx]
adc byte [ecx + 0x458bf845], cl
clc
mov eax, dword [eax + 8]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
or byte [ecx + 0x15ff2404], cl
and byte [edx + 3], al
adc byte [ebx + 0x458904ec], al
sub esp, 4
mov dword [ebp - 0x1c], eax
invalid
add al, 0x24
xor byte [ebp], dh
sub esp, 4
mov dword [ebp - 0x1c], eax
mov dword [esp], 0x7530
add bh, bh
adc eax, sym.imp.KERNEL32.dll_Sleep
add bh, bh
adc eax, sym.imp.KERNEL32.dll_Sleep
sub esp, 4
mov eax, dword [ebp - 8]
mov esi, dword [eax + 0x18]
xor eax, eax
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call dword [sym.imp.KERNEL32.dll_HeapCreate]
sub esp, 0xc
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], esi
je 0x1000c1db
or bh, bh
adc eax, sym.imp.KERNEL32.dll_HeapAlloc
je 0x1000c1db
or bh, bh
adc eax, sym.imp.KERNEL32.dll_HeapAlloc
sub esp, 0xc
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x18]
mov ecx, dword [ebp - 0x10]
call 0x1000c107
mov eax, dword [ebp - 8]
mov eax, dword [eax + 4]
mov ecx, dword [ebp - 0x1c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
sub esp, 8
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 8]
mov edx, dword [edx]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x104
call eax
sub esp, 0xc
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x14]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x18], 0
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x18]
movzx eax, word [eax + ecx*2]
cmp eax, 0
je 0x1000c237
mov eax, dword [ebp - 0x18]
add eax, 1
mov dword [ebp - 0x18], eax
jmp 0x1000c21d
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0xc]
sub ecx, 1
movzx eax, word [eax + ecx*2]
cmp eax, 0x5c
je 0x1000c266
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0xc]
mov word [eax + ecx*2], 0
mov eax, dword [ebp - 0xc]
add eax, 0xffffffff
mov dword [ebp - 0xc], eax
jmp 0x1000c23d
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
movzx eax, word [eax + ecx*2]
cmp eax, 0
je 0x1000c2a4
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov ax, word [eax + ecx*2]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0xc]
mov word [ecx + edx*2], ax
mov eax, dword [ebp - 0xc]
add eax, 1
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x14]
add eax, 1
mov dword [ebp - 0x14], eax
jmp 0x1000c26d
lea ecx, [ebp - 0x80]
mov edx, 0x44
call 0x1000c107
lea ecx, [ebp - 0x3c]
mov edx, 0x10
call 0x1000c107
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
sub esp, 8
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x10]
xor edx, edx
lea edx, [ebp - 0x80]
lea esi, [ebp - 0x3c]
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], edx
mov dword [esp + 0x24], esi
call eax
sub esp, 0x28
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x10]
mov ecx, dword [ebp - 0x1c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
sub esp, 8
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x3c]
mov dword [esp], ecx
mov dword [esp + 4], 0xffffffff
call eax
sub esp, 8
xor eax, eax
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp dword [ebp - 0x23c], 0
jne case.default.0x1000bac9
mov eax, dword [ebp - 4]
and eax, 0x40
test eax, eax
je 0x1000c4ad
mov ecx, dword [ebp - 4]
and ecx, 0x100
test ecx, ecx
je 0x1000c47b
mov byte [ebp - 0x240], 0x2d
mov dword [ebp - 0x10], 1
jmp 0x1000c4ad
mov edx, dword [ebp - 4]
and edx, 1
test edx, edx
je 0x1000c495
mov byte [ebp - 0x240], 0x2b
mov dword [ebp - 0x10], 1
jmp 0x1000c4ad
mov eax, dword [ebp - 4]
and eax, 2
test eax, eax
je 0x1000c4ad
mov byte [ebp - 0x240], 0x20
mov dword [ebp - 0x10], 1
mov ecx, dword [ebp - 0x244]
sub ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 0x27c], ecx
mov edx, dword [ebp - 4]
and edx, 0xc
test edx, edx
jne 0x1000c4e5
lea eax, [ebp - 0x22c]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x27c]
push edx
push 0x20
call fcn.1000c7c0
add esp, 0x10
lea eax, [ebp - 0x22c]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x10]
push edx
lea eax, [ebp - 0x240]
push eax
call fcn.1000c800
add esp, 0x10
mov ecx, dword [ebp - 4]
and ecx, 8
test ecx, ecx
je 0x1000c533
mov edx, dword [ebp - 4]
and edx, 4
test edx, edx
jne 0x1000c533
lea eax, [ebp - 0x22c]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x27c]
push edx
push 0x30
call fcn.1000c7c0
add esp, 0x10
cmp dword [ebp - 0x1c], 0
je 0x1000c5e1
cmp dword [ebp - 0x24], 0
jle 0x1000c5e1
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x280], eax
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x284], ecx
mov edx, dword [ebp - 0x284]
mov eax, dword [ebp - 0x284]
sub eax, 1
mov dword [ebp - 0x284], eax
test edx, edx
je 0x1000c5df
mov ecx, dword [ebp - 0x280]
mov dx, word [ecx]
mov word [ebp - 0x2a6], dx
mov ax, word [ebp - 0x2a6]
push eax
lea ecx, [ebp - 0x288]
push ecx
mov edx, dword [ebp - 0x280]
add edx, 2
mov dword [ebp - 0x280], edx
call fcn.1000d840
add esp, 8
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 0
jg 0x1000c5b9
jmp 0x1000c5df
lea eax, [ebp - 0x22c]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x28c]
push edx
lea eax, [ebp - 0x288]
push eax
call fcn.1000c800
add esp, 0x10
jmp 0x1000c559
jmp 0x1000c5fc
lea ecx, [ebp - 0x22c]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [ebp - 0x20]
push ecx
call fcn.1000c800
add esp, 0x10
mov edx, dword [ebp - 4]
and edx, 4
test edx, edx
je case.default.0x1000bac9
lea eax, [ebp - 0x22c]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x27c]
push edx
push 0x20
call fcn.1000c7c0
add esp, 0x10
jmp 0x1000ba34
mov eax, dword [ebp - 0x22c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret