Function at 0x10018e20
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100b6590
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1c0
push ebx
mov bl, cl
mov ecx, dword [0x103f34d4]
push esi
push edi
mov eax, dword [ecx]
call dword [eax + 0x30]
mov ecx, dword [0x103f34d8]
mov esi, eax
push esi
mov edx, dword [ecx]
call dword [edx + 0xc]
mov edi, eax
mov dword [ebp - 0x50], edi
test edi, edi
je 0x100199ac
mov ecx, dword [0x103f34d4]
lea eax, [ebp - 0x1c8]
push eax
push esi
mov edx, dword [ecx]
mov edx, dword [edx + 0x20]
call edx
test al, al
je 0x100199ac
mov ecx, dword [0x103f281c]
mov eax, dword fs:[0x2c]
mov eax, dword [eax + ecx*4]
lea ecx, [eax + 4]
mov dword [ebp - 0x10], ecx
test bl, bl
je 0x10019268
mov eax, dword [0x103fd484]
cmp eax, dword [ecx]
jle 0x10018fbd
push 0x103fd484
call fcn.10078d0c
add esp, 4
cmp dword [0x103fd484], 0xffffffff
jne 0x10018fbd
mov dword [ebp - 4], 0
call fcn.10004740
push 0xe
push str.m_hMyWearables
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x3c], 0
mov esi, eax
mov dword [ebp - 0x38], 0xf
mov byte [ebp - 0x4c], 0
call fcn.100048b0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2c]
push 0x16
push str.DT_BaseCombatCharacter
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.100048b0
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 2
push eax
lea eax, [ebp - 0x2c]
mov ecx, esi
push eax
call fcn.100751d0
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x18]
mov dword [0x103fd488], eax
cmp edx, 0x10
jb 0x10018f71
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10018f67
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100199bd
push edx
push ecx
call fcn.10078b5e
add esp, 8
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x38]
cmp edx, 0x10
jb 0x10018fa9
mov ecx, dword [ebp - 0x4c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10018f9f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100199c2
push edx
push ecx
call fcn.10078b5e
add esp, 8
push 0x103fd484
mov dword [ebp - 4], 0xffffffff
call fcn.10078cc2
add esp, 4
add edi, dword [0x103fd488]
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 0x14], edi
call fcn.100053d0
xor ecx, ecx
cmp dword [eax], 3
lea eax, [ebp - 0x6c]
push eax
sete cl
add ecx, 0x13a4
mov dword [ebp - 0x6c], ecx
mov ecx, 0x1040063c
call fcn.10019ba0
mov ecx, dword [0x10400e7c]
mov ebx, eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x30], ebx
cmp ecx, dword [eax]
jle 0x1001902c
push 0x10400e7c
call fcn.10078d0c
add esp, 4
cmp dword [0x10400e7c], 0xffffffff
jne 0x1001902c
push 0x10400e7c
mov dword [0x10400e88], 0
call fcn.10078cc2
add esp, 4
mov ecx, dword [0x103f34d8]
push ecx
mov edx, esp
mov eax, dword [ecx]
mov esi, dword [eax + 0x10]
mov eax, dword [edi]
mov dword [edx], eax
call esi
mov edi, eax
test edi, edi
jne 0x1001906e
mov ecx, dword [0x103f34d8]
push ecx
mov edx, esp
mov eax, dword [ecx]
mov esi, dword [eax + 0x10]
mov eax, dword [0x10400e88]
mov dword [edx], eax
call esi
test eax, eax
je 0x1001906e
mov edx, dword [ebp - 0x14]
mov edi, eax
mov ecx, dword [0x10400e88]
mov dword [edx], ecx
mov ecx, dword [ebp - 0x50]
call fcn.1000d490
cmp dword [eax], 0
je 0x100190b0
test edi, edi
je 0x100199ac
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x10]
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x34]
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x10]
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test ebx, ebx
je 0x10019422
cmp dword [ebx + 0x3c], 0
je 0x10019422
test edi, edi
jne 0x10019243
mov ecx, dword [ebp - 0x10]
mov eax, dword [0x10400e80]
cmp eax, dword [ecx]
jle 0x10019194
push 0x10400e80
call fcn.10078d0c
add esp, 4
cmp dword [0x10400e80], 0xffffffff
jne 0x10019194
mov dword [ebp - 4], 3
mov ecx, dword [0x103fd444]
mov eax, dword [ecx]
call dword [eax + 0x20]
mov esi, eax
mov edx, str.CEconWearable
mov ecx, dword [esi + 8]
mov bl, byte [ecx]
cmp bl, byte [edx]
jne 0x10019130
test bl, bl
je 0x1001912c
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x10019130
add ecx, 2
add edx, 2
test al, al
jne 0x10019110
xor eax, eax
jmp 0x10019135
sbb eax, eax
or eax, 1
test eax, eax
je 0x10019179
nop dword [eax]
mov esi, dword [esi + 0x10]
mov ecx, str.CEconWearable
mov eax, dword [esi + 8]
nop dword [eax + eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10019170
test dl, dl
je 0x1001916c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10019170
add eax, 2
add ecx, 2
test dl, dl
jne 0x10019150
xor eax, eax
jmp 0x10019175
sbb eax, eax
or eax, 1
test eax, eax
jne 0x10019140
mov eax, dword [esi]
push 0x10400e80
mov dword [0x10400e8c], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10078cc2
add esp, 4
mov ecx, dword [0x103f34d8]
mov eax, dword [ecx]
call dword [eax + 0x18]
lea ebx, [eax + 1]
call fcn.10093aeb
mov esi, eax
and esi, 0x80000fff
jns 0x100191b9
dec esi
or esi, 0xfffff000
inc esi
push esi
push ebx
call dword [0x10400e8c]
mov ecx, dword [0x103f34d8]
add esp, 8
mov edx, dword [ecx]
push ebx
call dword [edx + 0xc]
mov ecx, dword [ebp - 0x10]
mov edi, eax
mov eax, dword [0x10400e84]
cmp eax, dword [ecx]
jle 0x10019223
push 0x10400e84
call fcn.10078d0c
add esp, 4
cmp dword [0x10400e84], 0xffffffff
jne 0x10019223
mov edx, str.55_8B_EC_83_E4_F8_51_53_56_57_8B_F1_E8
mov dword [ebp - 4], 4
mov ecx, 0x100caefc
call fcn.10027f30
push 0x10400e84
mov dword [0x10400e90], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10078cc2
add esp, 4
push 0x100cc210
mov ecx, edi
call dword [0x10400e90]
mov eax, dword [ebp - 0x14]
shl esi, 0x10
or esi, ebx
mov ebx, dword [ebp - 0x30]
mov dword [eax], esi
mov dword [0x10400e88], esi
mov eax, dword [edi]
mov ecx, edi
push 0xffffffffffffffff
mov eax, dword [eax + 0x12c]
call eax
push dword [ebp - 0x1c0]
mov edx, ebx
mov ecx, edi
call fcn.10018280
add esp, 4
jmp 0x10019422
mov eax, dword [0x103fd49c]
cmp eax, dword [ecx]
jle 0x1001937f
push 0x103fd49c
call fcn.10078d0c
add esp, 4
cmp dword [0x103fd49c], 0xffffffff
jne 0x1001937f
mov dword [ebp - 4], 5
call fcn.10004740
push 0xc
push str.m_hMyWeapons
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x3c], 0
mov esi, eax
mov dword [ebp - 0x38], 0xf
mov byte [ebp - 0x4c], 0
call fcn.100048b0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2c]
push 0x16
push str.DT_BaseCombatCharacter
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.100048b0
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x2c]
mov ecx, esi
push eax
call fcn.100751d0
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x18]
mov dword [0x103fd44c], eax
cmp edx, 0x10
jb 0x10019333
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10019329
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100199c7
push edx
push ecx
call fcn.10078b5e
add esp, 8
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x38]
cmp edx, 0x10
jb 0x1001936b
mov ecx, dword [ebp - 0x4c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10019361
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100199cc
push edx
push ecx
call fcn.10078b5e
add esp, 8
push 0x103fd49c
mov dword [ebp - 4], 0xffffffff
call fcn.10078cc2
add esp, 4
mov ebx, dword [0x103fd44c]
add ebx, edi
xor edi, edi
mov esi, dword [ebx]
cmp esi, 0xffffffff
je 0x10019422
mov ecx, dword [0x103f34d8]
push ecx
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
mov eax, esp
mov dword [eax], esi
call edx
mov esi, eax
test esi, esi
je 0x10019414
mov ecx, esi
call fcn.1000ae30
mov edx, 0x1f4
movzx eax, word [eax]
movsx ecx, ax
cmp ax, dx
jl 0x100193cd
mov edx, 0x13a3
cmp ax, dx
jl 0x100193d9
cmp ax, 0x3b
je 0x100193d9
cmp ax, 0x2a
jne 0x100193f1
mov ecx, dword [ebp - 0x50]
call fcn.100053d0
mov ecx, 0x3b
cmp dword [eax], 3
mov eax, 0x2a
cmove ecx, eax
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], ecx
push eax
mov ecx, 0x1040063c
call fcn.10019ba0
push dword [ebp - 0x1c0]
mov edx, eax
mov ecx, esi
call fcn.10018280
add esp, 4
mov esi, dword [ebx + edi*4 + 4]
inc edi
cmp esi, 0xffffffff
jne 0x10019394
mov ecx, dword [ebp - 0x10]
mov eax, dword [0x103fd454]
cmp eax, dword [ecx]
jle 0x1001954e
push 0x103fd454
call fcn.10078d0c
add esp, 4
cmp dword [0x103fd454], 0xffffffff
jne 0x1001954e
mov dword [ebp - 4], 8
call fcn.10004740
push 0xf
push str.m_hViewModel_0_
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x58], 0
mov esi, eax
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
call fcn.100048b0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x2c]
push 0xd
push str.DT_BasePlayer
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.100048b0
lea eax, [ebp - 0x68]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x2c]
mov ecx, esi
push eax
call fcn.100751d0
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x18]
mov dword [0x103fd460], eax
cmp edx, 0x10
jb 0x100194f0
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100194e6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100199d1
push edx
push ecx
call fcn.10078b5e
add esp, 8
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x54]
cmp edx, 0x10
jb 0x10019528
mov ecx, dword [ebp - 0x68]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1001951e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100199d6
push edx
push ecx
call fcn.10078b5e
add esp, 8
push 0x103fd454
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
mov dword [ebp - 4], 0xffffffff
call fcn.10078cc2
add esp, 4
mov eax, dword [0x103fd460]
mov ecx, dword [ebp - 0x50]
mov eax, dword [eax + ecx]
cmp eax, 0xffffffff
je 0x100199ac
mov ecx, dword [0x103f34d8]
push ecx
mov edx, dword [ecx]
mov esi, dword [edx + 0x10]
mov edx, esp
mov dword [edx], eax
call esi
mov edi, eax
test edi, edi
je 0x100199ac
mov ecx, edi
call fcn.10017f30
mov edx, dword [eax]
cmp edx, 0xffffffff
je 0x100199ac
mov ecx, dword [0x103f34d8]
push ecx
mov eax, dword [ecx]
mov esi, dword [eax + 0x10]
mov eax, esp
mov dword [eax], edx
call esi
mov ebx, eax
test ebx, ebx
je 0x100199ac
mov ecx, ebx
call fcn.1000ae30
movsx ecx, word [eax]
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x30], ecx
call fcn.10019a00
test eax, eax
je 0x100199ac
mov ecx, ebx
call fcn.1000ae30
movsx eax, word [eax]
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
call fcn.10019c80
mov ecx, dword [0x103fd43c]
mov edx, dword [eax]
mov eax, dword [ecx]
push edx
call dword [eax + 8]
mov ecx, dword [0x103fd430]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x10]
cmp ecx, dword [eax]
jle 0x1001971e
push 0x103fd430
call fcn.10078d0c
add esp, 4
cmp dword [0x103fd430], 0xffffffff
jne 0x1001971e
mov dword [ebp - 4], 0xb
call fcn.10004740
push 0xd
push str.m_nModelIndex
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x58], 0
mov esi, eax
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
call fcn.100048b0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x2c]
push 0x10
push str.DT_BaseViewModel
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.100048b0
lea eax, [ebp - 0x68]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x2c]
mov ecx, esi
push eax
call fcn.100751d0
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x18]
mov dword [0x103fd478], eax
cmp edx, 0x10
jb 0x100196c0
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100196b6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100199db
push edx
push ecx
call fcn.10078b5e
add esp, 8
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x54]
cmp edx, 0x10
jb 0x100196f8
mov ecx, dword [ebp - 0x68]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100196ee
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100199e0
push edx
push ecx
call fcn.10078b5e
add esp, 8
push 0x103fd430
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
mov dword [ebp - 4], 0xffffffff
call fcn.10078cc2
add esp, 4
mov eax, dword [0x103fd478]
mov ecx, dword [ebp - 0x14]
mov dword [eax + edi], ecx
mov ecx, dword [ebp - 0x10]
mov eax, dword [0x103fd440]
cmp eax, dword [ecx]
jle 0x10019855
push 0x103fd440
call fcn.10078d0c
add esp, 4
cmp dword [0x103fd440], 0xffffffff
jne 0x10019855
mov dword [ebp - 4], 0xe
call fcn.10004740
push 0x13
push str.m_hWeaponWorldModel
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x3c], 0
mov esi, eax
mov dword [ebp - 0x38], 0xf
mov byte [ebp - 0x4c], 0
call fcn.100048b0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x2c]
push 0x13
push str.DT_BaseCombatWeapon
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.100048b0
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0x10
push eax
lea eax, [ebp - 0x2c]
mov ecx, esi
push eax
call fcn.100751d0
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x18]
mov dword [0x103fd418], eax
cmp edx, 0x10
jb 0x100197f7
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100197ed
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100199e5
push edx
push ecx
call fcn.10078b5e
add esp, 8
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x38]
cmp edx, 0x10
jb 0x1001982f
mov ecx, dword [ebp - 0x4c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10019825
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100199ea
push edx
push ecx
call fcn.10078b5e
add esp, 8
push 0x103fd440
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0xf
mov byte [ebp - 0x4c], 0
mov dword [ebp - 4], 0xffffffff
call fcn.10078cc2
add esp, 4
mov eax, dword [0x103fd418]
mov eax, dword [eax + ebx]
cmp eax, 0xffffffff
je 0x100199ac
mov ecx, dword [0x103f34d8]
push ecx
mov edx, dword [ecx]
mov esi, dword [edx + 0x10]
mov edx, esp
mov dword [edx], eax
call esi
mov edi, eax
test edi, edi
je 0x100199ac
mov eax, dword [ebp - 0x10]
mov ecx, dword [0x103fd458]
cmp ecx, dword [eax]
jle 0x100199a0
push 0x103fd458
call fcn.10078d0c
add esp, 4
cmp dword [0x103fd458], 0xffffffff
jne 0x100199a0
mov dword [ebp - 4], 0x11
call fcn.10004740
push 0xd
push str.m_nModelIndex
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1c], 0
mov esi, eax
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.100048b0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x4c]
push 0x17
push str.DT_BaseWeaponWorldModel
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0xf
mov byte [ebp - 0x4c], 0
call fcn.100048b0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x13
push eax
lea eax, [ebp - 0x4c]
mov ecx, esi
push eax
call fcn.100751d0
mov edx, dword [ebp - 0x38]
mov dword [0x103fd480], eax
cmp edx, 0x10
jb 0x1001994d
mov ecx, dword [ebp - 0x4c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10019943
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100199ef
push edx
push ecx
call fcn.10078b5e
add esp, 8
mov edx, dword [ebp - 0x18]
cmp edx, 0x10
jb 0x10019981
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10019977
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100199f4
push edx
push ecx
call fcn.10078b5e
add esp, 8
push 0x103fd458
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.10078cc2
add esp, 4
mov eax, dword [0x103fd480]
mov ecx, dword [ebp - 0x14]
inc ecx
mov dword [eax + edi], ecx
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.10093a9a
call fcn.10093a9a
call fcn.10093a9a
call fcn.10093a9a
call fcn.10093a9a
call fcn.10093a9a
call fcn.10093a9a
call fcn.10093a9a
call fcn.10093a9a
call fcn.10093a9a
call fcn.10093a9a
call fcn.10093a9a
int3