Function at 0x1009d480
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x84
mov dword [ebp - 0x64], edx
mov eax, dword [0x101d2014]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x84], ecx
mov edi, dword [ecx + 0x74]
mov esi, dword [ecx]
test edi, edi
cmove edi, ecx
test esi, esi
je 0x1009dddc
cmp word [esi + 0x114], 0x17
jbe 0x1009dbde
mov ebx, dword [esi + 0x138]
test ebx, ebx
je 0x1009dc56
mov eax, dword [ebx]
mov dword [esi + 0x138], eax
inc dword [esi + 0x120]
test ebx, ebx
je 0x1009ddd0
xor eax, eax
test esi, esi
mov dword [ebx + 4], eax
mov dword [ebx], eax
mov dword [ebx + 0xc], eax
mov dword [ebx + 8], eax
mov dword [ebx + 0x14], eax
mov dword [ebx + 0x10], eax
mov eax, dword [edi + 0x108]
mov dword [ebx + 4], eax
mov dword [edi + 0x108], ebx
je 0x1009dded
cmp word [esi + 0x114], 0x1b
jbe 0x1009dc0d
mov eax, dword [esi + 0x138]
test eax, eax
je 0x1009dc8b
mov ecx, dword [eax]
mov dword [esi + 0x138], ecx
inc dword [esi + 0x120]
test eax, eax
je 0x1009ddc9
xor ecx, ecx
mov dword [ebp - 0x88], edi
mov dword [ebp - 0x80], eax
mov dword [eax + 4], ecx
mov dword [eax], ecx
mov dword [eax + 0xc], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0x14], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x18], ecx
mov dword [ebx + 8], eax
mov edx, dword [edi + 8]
mov edi, dword [ebp + 0xc]
mov ecx, dword [edx + 0xd8]
mov dword [eax + 0x18], ecx
mov ecx, dword [ebp - 0x64]
mov dword [edx + 0xd8], eax
xor edx, edx
dec edx
test esi, esi
mov dword [ebx], ecx
mov dword [ebx + 0xc], edi
mov dword [ebx + 0x10], edx
mov dword [ebx + 0x14], edx
je 0x1009ddfe
movzx ecx, word [esi + 0x114]
cmp ecx, 0x117
jbe 0x1009dc3a
mov edi, dword [esi + 0x130]
test edi, edi
jne 0x1009dcd5
mov edi, dword [esi + 0x12c]
test edi, edi
jne 0x1009dd66
inc dword [esi + 0x128]
mov ecx, esi
mov edx, 0x118
push 0
call fcn.1001a100
add esp, 4
mov edi, eax
test edi, edi
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x70], esi
je 0x1009ddd0
mov esi, dword [ebp + 8]
xor ebx, ebx
lea eax, [edi + 4]
push 0x114
push ebx
mov dword [ebp - 0x8c], eax
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0x4c], edi
mov dword [edi], ebx
mov dword [edi + 0x78], esi
mov dword [edi + 0x74], eax
mov eax, dword [ecx]
mov dword [edi + 0xf4], eax
mov al, byte [ecx + 8]
mov ecx, dword [ebp - 0x84]
mov byte [edi + 0x94], al
mov eax, dword [ecx + 0x88]
mov dword [edi + 0x88], eax
mov al, byte [ecx + 0x19]
mov byte [edi + 0x19], al
mov esi, dword [edi + 8]
test esi, esi
jne 0x1009d66f
mov ecx, edi
call fcn.1000f530
mov esi, eax
test eax, eax
je 0x1009dbb6
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
test eax, eax
je 0x1009d6b6
push eax
push str.___TRIGGER__s
push ebx
call fcn.1000f4f0
add esp, 0xc
mov ecx, dword [esi]
cmp byte [ecx + 0x51], 0
jne 0x1009de0f
mov edx, dword [esi + 0x6c]
mov ecx, dword [esi + 0x68]
dec edx
lea edx, [edx + edx*4]
cmp byte [ecx + edx*4 + 1], 0
jne 0x1009dcc0
test eax, eax
je 0x1009d6b6
lea ecx, [ecx + edx*4 + 1]
mov dword [ecx + 0xf], eax
mov byte [ecx], 0xf9
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x6c], 0
mov edx, dword [eax + 0xc]
test edx, edx
je 0x1009d7a1
xor eax, eax
mov ecx, ebx
push eax
push eax
call fcn.10078d60
add esp, 8
mov esi, eax
test eax, eax
je 0x1009d773
lea ecx, [ebp - 0x4c]
mov ebx, dword [ecx + 0x18]
mov eax, dword [ecx]
mov edx, ebx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], fcn.1007bb90
mov dword [ebp - 0x24], 0x1007d7d0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x14], ecx
and edx, 0xffff6fef
mov dword [ecx + 0x18], edx
mov edx, dword [eax + 0xd4]
mov ecx, dword [eax]
add edx, dword [esi + 0x18]
mov dword [eax + 0xd4], edx
mov ecx, dword [ecx + 0x78]
cmp ecx, edx
jl 0x1009dea0
lea ecx, [ebp - 0x2c]
mov edx, esi
and ebx, 0x9010
call fcn.10076970
lea eax, [ebp - 0x2c]
mov ecx, dword [esi + 0x18]
mov edx, 0x8010
mov eax, dword [eax]
sub dword [eax + 0xd4], ecx
and edx, dword [ebp - 0x34]
or dword [esi + 4], edx
or dword [ebp - 0x34], ebx
cmp dword [ebp - 0x38], 0
jg 0x1009deaf
cmp dword [eax + 0x24], 0
mov ebx, dword [ebp - 0x70]
jg 0x1009deb2
cmp byte [ebx + 0x51], 0
jne 0x1009de70
mov eax, dword [edi + 0x38]
dec eax
mov dword [edi + 0x38], eax
push 0x10
mov dword [ebp - 0x6c], eax
push eax
push esi
push edi
call fcn.100755f0
add esp, 0x10
test esi, esi
je 0x1009d7a1
mov ecx, ebx
mov edx, esi
call fcn.1004bd70
mov eax, dword [ebp - 0x64]
mov ebx, dword [eax + 0x1c]
test ebx, ebx
je 0x1009da90
mov eax, dword [edi]
mov ecx, dword [edi + 8]
xor esi, esi
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x50], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x7c], ecx
movzx eax, al
mov dword [ebp - 0x90], eax
cmp dword [ebp + 0xc], 0xb
mov eax, dword [ebp - 0x90]
jne 0x1009d7db
movzx eax, byte [ebx + 1]
mov byte [edi + 0x95], al
mov dword [ebp - 0x78], ebx
mov eax, dword [ebx + 0x24]
test eax, eax
je 0x1009d87d
push eax
push str.____s
push dword [ebp - 0x50]
call fcn.1000f4f0
add esp, 0xc
mov edi, dword [ebp - 0x7c]
mov dword [ebp - 0x54], eax
mov eax, dword [edi + 0x6c]
cmp dword [edi + 0x70], eax
jle 0x1009da10
lea edx, [eax + 1]
xor ebx, ebx
mov dword [edi + 0x6c], edx
lea edx, [eax + eax*4]
mov esi, dword [edi + 0x68]
mov dword [esi + edx*4], 0xab
mov dword [esi + edx*4 + 4], getsockname
mov dword [esi + edx*4 + 8], 1
mov dword [esi + edx*4 + 0xc], ebx
mov dword [esi + edx*4 + 0x10], ebx
xor esi, esi
mov ecx, dword [edi]
cmp byte [ecx + 0x51], 0
jne 0x1009ddae
mov ebx, dword [ebp - 0x78]
mov edx, dword [ebp - 0x54]
test eax, eax
js 0x1009da07
mov ecx, dword [edi + 0x68]
lea eax, [eax + eax*4]
cmp byte [ecx + eax*4 + 1], 0
jne 0x1009d9ec
mov edi, dword [ebp - 0x60]
test edx, edx
je 0x1009d87d
lea eax, [ecx + eax*4 + 1]
mov dword [eax + 0xf], edx
mov byte [eax], 0xf9
mov al, byte [ebx]
cmp al, 0x7d
je 0x1009d936
cmp al, 0x7f
je 0x1009d995
cmp al, 0x7e
je 0x1009de37
mov edi, dword [ebp - 0x50]
mov edx, dword [ebx + 8]
mov ecx, edi
push esi
call fcn.10079220
add esp, 4
mov esi, eax
xor ecx, ecx
lea eax, [ebp - 0x28]
mov byte [ebp - 0x2c], 4
mov dword [eax + 0x10], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x60]
lea eax, [ebp - 0x2c]
mov edx, esi
push eax
call fcn.1005b3c0
add esp, 4
test esi, esi
je 0x1009d8e4
mov ecx, edi
mov edx, esi
push 1
call fcn.1004bfe0
add esp, 4
mov edi, dword [ebp - 0x60]
cmp byte [ebx], 0x88
mov ecx, dword [ebp - 0x7c]
mov esi, 0
jne 0x1009d904
mov ebx, dword [ebx + 0x28]
test ebx, ebx
jne 0x1009d7cb
jmp 0x1009da90
mov eax, dword [ecx + 0x6c]
cmp dword [ecx + 0x70], eax
jle 0x1009dd01
lea edx, [eax + 1]
lea eax, [eax + eax*4]
mov dword [ecx + 0x6c], edx
mov edx, dword [ecx + 0x68]
mov byte [edx + eax*4], 0x7c
mov dword [edx + eax*4 + 0xd], esi
mov dword [edx + eax*4 + 5], esi
mov dword [edx + eax*4 + 1], esi
mov dword [edx + eax*4 + 9], esi
mov dword [edx + eax*4 + 0x10], esi
jmp 0x1009d8f4
mov esi, dword [ebx + 0x20]
xor eax, eax
test esi, esi
jne 0x1009da2d
movzx ecx, byte [edi + 0x95]
mov esi, dword [ebp - 0x50]
mov edx, dword [ebx + 0x1c]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x54], ecx
mov ecx, esi
call fcn.1007a030
mov edx, dword [ebx + 8]
mov dword [ebp - 0x68], eax
mov ecx, esi
push 0
call fcn.10079220
add esp, 4
mov ecx, edi
mov edx, ebx
mov esi, eax
call fcn.1009dee0
mov ecx, edi
mov edx, eax
push dword [ebp - 0x5c]
push dword [ebp - 0x54]
push dword [ebp - 0x68]
push esi
call fcn.10066d90
add esp, 0x10
jmp 0x1009d8e7
mov edx, dword [ebx + 0x14]
movzx eax, byte [edi + 0x95]
test edx, edx
mov dword [ebp - 0x54], eax
je 0x1009de8e
mov ecx, dword [ebp - 0x50]
xor esi, esi
push esi
push esi
call fcn.10078d60
add esp, 8
mov dword [ebp - 0x5c], eax
mov edx, dword [ebx + 0x18]
mov ecx, dword [ebp - 0x50]
push esi
call fcn.100795e0
add esp, 4
mov ecx, edi
mov edx, ebx
mov dword [ebp - 0x68], eax
call fcn.1009dee0
mov ecx, edi
mov edx, eax
push esi
push dword [ebp - 0x54]
push dword [ebp - 0x5c]
push dword [ebp - 0x68]
call fcn.10064140
jmp 0x1009d98d
mov edi, edx
lea edx, [ecx + eax*4]
mov ecx, dword [ebp - 0x7c]
push 0xfffffffffffffff9
push edi
call fcn.1004e710
add esp, 8
mov edi, dword [ebp - 0x60]
jmp 0x1009d87d
mov eax, dword [edi + 0x6c]
dec eax
jmp 0x1009d85b
mov ecx, edi
mov edx, 0xab
push 0
push 1
push bind
call fcn.1004e590
add esp, 0xc
jmp 0x1009d841
mov edx, dword [esi + 0xc]
mov ecx, dword [ebp - 0x50]
mov eax, 0
mov dword [ebp - 0x54], 0
test edx, edx
jne 0x1009dd38
mov edx, dword [esi + 8]
mov dword [ebp - 0x5c], eax
push 0
call fcn.100795e0
add esp, 4
mov edx, dword [esi + 4]
mov dword [ebp - 0x68], eax
test edx, edx
jne 0x1009debe
mov edx, dword [esi]
mov esi, dword [ebp - 0x50]
mov ecx, esi
push 0
call fcn.100795e0
add esp, 4
mov ecx, esi
mov edx, eax
push dword [ebp - 0x5c]
push dword [ebp - 0x68]
push dword [ebp - 0x54]
call fcn.10069b80
add esp, 0xc
jmp 0x1009d943
mov eax, dword [ebp - 0x6c]
mov esi, dword [ebp - 0x84]
mov ebx, dword [ebp - 0x74]
test eax, eax
je 0x1009dabc
mov ecx, dword [ebx + 0xc]
not eax
mov edx, eax
mov eax, dword [ecx + 0x38]
add eax, dword [ecx + 0x3c]
js 0x1009de7c
mov eax, dword [ebx + 0x6c]
mov ecx, dword [ecx + 0x40]
mov dword [ecx + edx*4], eax
mov eax, dword [ebx + 0x6c]
cmp dword [ebx + 0x70], eax
jle 0x1009dce8
lea ecx, [eax + 1]
lea eax, [eax + eax*4]
xor edx, edx
mov dword [ebx + 0x6c], ecx
mov ecx, dword [ebx + 0x68]
mov byte [ecx + eax*4], 0x44
mov dword [ecx + eax*4 + 0xd], edx
mov dword [ecx + eax*4 + 5], edx
mov dword [ecx + eax*4 + 1], edx
mov dword [ecx + eax*4 + 9], edx
mov dword [ecx + eax*4 + 0x10], edx
mov eax, dword [ebp - 0x8c]
cmp dword [esi + 0x24], 0
mov ebx, dword [ebp - 0x70]
mov edx, dword [eax]
jne 0x1009de23
mov dword [esi + 4], edx
mov eax, dword [edi + 0x24]
mov dword [esi + 0x24], eax
mov eax, dword [edi + 0xc]
mov dword [esi + 0xc], eax
cmp byte [ebx + 0x51], 0
jne 0x1009db46
cmp dword [esi + 0x24], 0
jne 0x1009db46
mov ebx, dword [ebp - 0x74]
mov edx, dword [ebp - 0x88]
mov esi, dword [ebx + 0x68]
add edx, 0x60
mov ecx, ebx
call fcn.1004e8f0
mov eax, dword [ebx + 0x6c]
mov ecx, dword [ebp - 0x80]
mov dword [ecx + 4], eax
mov dword [ebx + 0x68], 0
mov dword [ecx], esi
mov eax, dword [edi + 0x2c]
mov ecx, dword [ebp - 0x80]
mov ebx, dword [ebp - 0x74]
mov dword [ecx + 8], eax
mov edx, ebx
mov eax, dword [edi + 0x28]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x64]
mov dword [ecx + 0x14], eax
mov ecx, dword [ebp - 0x58]
mov eax, dword [edi + 0x8c]
mov dword [ecx + 0x10], eax
mov eax, dword [edi + 0x90]
mov dword [ecx + 0x14], eax
mov esi, dword [ebx]
mov ecx, esi
call fcn.100017a0
mov ecx, dword [ebx + 4]
mov eax, dword [ebx + 8]
test ecx, ecx
jne 0x1009dd16
mov dword [esi + 4], eax
mov edx, dword [ebp - 0x74]
mov ebx, dword [ebp - 0x70]
mov eax, dword [edx + 8]
test eax, eax
je 0x1009dba2
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
mov ecx, esi
mov dword [edx + 0x14], 0x5606c3c8
mov dword [edx], 0
call fcn.10019c40
mov ecx, edi
call fcn.1000fea0
mov ecx, ebx
mov edx, edi
call fcn.10019c40
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10192ef0
mov eax, dword [ebp - 0x58]
add esp, 0x84
pop esi
pop edi
pop ebx
pop ebp
ret
cmp dword [esi + 0x110], 0
je 0x1009dd8d
cmp byte [esi + 0x51], 0
jne 0x1009ddd0
mov ecx, esi
mov edx, 0x18
push 0
call fcn.1001a100
add esp, 4
mov ebx, eax
jmp 0x1009d4db
cmp dword [esi + 0x110], 0
je 0x1009dd98
cmp byte [esi + 0x51], 0
jne 0x1009ddc9
mov ecx, esi
mov edx, 0x1c
push 0
call fcn.1001a100
add esp, 4
jmp 0x1009d537
cmp dword [esi + 0x110], 0
je 0x1009dda3
cmp byte [esi + 0x51], 0
je 0x1009d5c4
jmp 0x1009ddd0
mov ebx, dword [esi + 0x134]
test ebx, ebx
jne 0x1009dd1e
mov ebx, dword [esi + 0x130]
test ebx, ebx
jne 0x1009dd4c
mov ebx, dword [esi + 0x12c]
test ebx, ebx
jne 0x1009dd73
inc dword [esi + 0x128]
jmp 0x1009dbf5
mov eax, dword [esi + 0x134]
test eax, eax
jne 0x1009dd2b
mov eax, dword [esi + 0x130]
test eax, eax
jne 0x1009dd59
mov eax, dword [esi + 0x12c]
test eax, eax
jne 0x1009dd80
inc dword [esi + 0x128]
jmp 0x1009dc24
lea edx, [ecx + edx*4]
mov ecx, esi
push 0xfffffffffffffff9
push eax
call fcn.1004e710
add esp, 8
jmp 0x1009d6b6
mov eax, dword [edi]
mov dword [esi + 0x130], eax
inc dword [esi + 0x120]
jmp 0x1009d5d7
xor eax, eax
mov ecx, ebx
mov edx, 0x44
push eax
push eax
push eax
call fcn.1004e590
add esp, 0xc
jmp 0x1009daee
mov edx, 0x7c
push esi
push esi
push esi
call fcn.1004e590
add esp, 0xc
jmp 0x1009d8f4
mov dword [ecx + 8], eax
jmp 0x1009db8f
mov eax, dword [ebx]
mov dword [esi + 0x134], eax
jmp 0x1009d4d5
mov ecx, dword [eax]
mov dword [esi + 0x134], ecx
jmp 0x1009d531
xor eax, eax
push eax
push eax
call fcn.10078d60
add esp, 8
mov ecx, dword [ebp - 0x50]
jmp 0x1009da47
mov eax, dword [ebx]
mov dword [esi + 0x130], eax
jmp 0x1009d4d5
mov ecx, dword [eax]
mov dword [esi + 0x130], ecx
jmp 0x1009d531
mov eax, dword [edi]
mov dword [esi + 0x12c], eax
jmp 0x1009dcdd
mov eax, dword [ebx]
mov dword [esi + 0x12c], eax
jmp 0x1009d4d5
mov ecx, dword [eax]
mov dword [esi + 0x12c], ecx
jmp 0x1009d531
inc dword [esi + 0x124]
jmp 0x1009dbf5
inc dword [esi + 0x124]
jmp 0x1009dc24
inc dword [esi + 0x124]
jmp 0x1009d5c4
mov edx, dword [ebp - 0x54]
mov edi, dword [ebp - 0x60]
mov ebx, dword [ebp - 0x78]
test edx, edx
je 0x1009d87d
call fcn.10019c40
jmp 0x1009d87d
mov dword [ebx + 8], 0
mov dword [ebp - 0x58], 0
jmp 0x1009dbc6
mov ecx, 0x18
xor edx, edx
call fcn.10002c70
jmp 0x1009dc06
mov ecx, 0x1c
xor edx, edx
call fcn.10002c70
jmp 0x1009d537
mov ecx, 0x118
xor edx, edx
call fcn.10002c70
jmp 0x1009d5d5
test eax, eax
je 0x1009d6b6
mov edx, eax
call fcn.10019c40
jmp 0x1009d6b6
test edx, edx
je 0x1009db12
mov ecx, dword [edi]
call fcn.10019c40
jmp 0x1009db12
mov edx, dword [ebx + 0x14]
test edx, edx
je 0x1009de9c
mov ecx, dword [ebp - 0x50]
xor eax, eax
push eax
push eax
call fcn.10078d60
add esp, 8
mov esi, eax
mov edi, dword [ebp - 0x60]
mov ebx, dword [ebp - 0x78]
mov ecx, edi
mov edx, ebx
call fcn.1009dee0
mov ecx, edi
mov edx, eax
push esi
call fcn.10062c00
add esp, 4
jmp 0x1009d8e7
mov dword [ebp - 0x6c], 0
jmp 0x1009d794
mov eax, edx
mov edx, ebx
push eax
call fcn.10078ce0
add esp, 4
jmp 0x1009dabc
mov dword [ebp - 0x5c], 0
xor esi, esi
jmp 0x1009d9bc
xor esi, esi
jmp 0x1009de4f
push ecx
push str.Expression_tree_is_too_large__maximum_depth__d_
push eax
call fcn.1000f470
add esp, 0xc
mov ebx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], 0
jmp 0x1009d798
mov ecx, dword [ebp - 0x50]
xor eax, eax
push eax
push eax
call fcn.10078d60
add esp, 8
mov dword [ebp - 0x54], eax
jmp 0x1009da65