Function at 0x1009c020
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xb0
mov eax, dword [0x10124018]
xor eax, esp
mov dword [esp + 0xac], eax
push ebx
push ebp
push esi
mov esi, dword [esp + 0xc0]
xor ebx, ebx
push edi
mov dword [esp + 0x14], ebx
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0x50]
mov dword [esp + 0x20], eax
lea eax, [eax*2 - 0x10000]
push eax
mov eax, dword [ecx + 8]
add eax, 0x4c
push eax
push ecx
call fcn.1007db20
add esp, 0xc
mov ecx, esi
lea ebp, [eax - 0x10000]
mov eax, 0x8000
mov word [ebp + 0x10000], ax
xor eax, eax
mov dword [esp + 0x1c], ebp
mov dword [esi + 0x76], 0x11800000
mov word [esi + 0x74], ax
call fcn.1009abf0
movzx edi, word [esi + 6]
mov dword [esp + 0x2c], edi
lea eax, [edi*2 - 2]
cmp eax, dword [esi + 0xe8]
jbe 0x1009c0b2
push eax
push esi
call fcn.1009dae0
add esp, 8
mov edx, dword [esi + 0x1c]
lea edi, [edi + edi*2]
mov eax, dword [esp + 0x2c]
add eax, 0xfffffffe
movzx ecx, byte [edx + edi*4 - 4]
imul ecx, eax
mov eax, dword [esi + 0x18]
lea eax, [ecx + eax*2]
cmp eax, dword [esi + 0xf4]
jbe 0x1009c0e2
push eax
push esi
call fcn.1009db20
mov edx, dword [esi + 0x1c]
add esp, 8
cmp dword [esp + 0x20], 0x8001
mov ecx, dword [edx + edi*4 - 0xc]
mov eax, dword [esi + 0x20]
mov dword [esp + 0x10], 0x8001
lea eax, [eax + ecx*4]
mov dword [esp + 0x28], eax
movzx eax, byte [edx + edi*4 - 4]
mov edx, dword [esp + 0x28]
mov dword [edx + eax*4], 0xff000000
mov ecx, dword [esi + 0x1c]
lea eax, [edx + eax*4]
mov dword [esp + 0x38], eax
lea edi, [ecx + 0xc]
mov dword [esp + 0x24], edi
jbe 0x1009c345
mov ebp, 0x8001
nop dword [eax]
movzx eax, word [edi + 4]
cmp ebp, eax
jb 0x1009c14e
push dword [esp + 0x1c]
push edx
push edi
push esi
call fcn.1009bea0
add esp, 0x10
add edi, 0xc
mov dword [esp + 0x24], edi
mov eax, dword [esi + 0x10]
lea edi, [eax + ebp*8]
mov eax, dword [esp + 0x1c]
movzx ebp, word [edi]
mov edx, ebp
cmp edx, 0x8000
jb 0x1009c169
movzx edx, word [eax + edx*2]
movzx ebx, word [edi + 2]
mov ecx, ebx
cmp ecx, 0x8000
jb 0x1009c17b
movzx ecx, word [eax + ecx*2]
movzx eax, byte [edi + 5]
test byte [eax + 0x1010a270], 0x60
jne 0x1009c1a1
cmp edx, ebp
jne 0x1009c1a1
cmp ecx, ebx
jne 0x1009c1a1
mov ebp, dword [esp + 0x10]
mov eax, dword [esp + 0x1c]
mov word [eax + ebp*2], bp
jmp 0x1009c322
mov al, byte [edi + 4]
mov ebx, 0xffbf
mov byte [esp + 0x1b], al
mov ax, word [edi + 4]
and ax, bx
mov word [esi + 0x76], cx
mov ecx, esi
mov word [esi + 0x78], ax
mov word [esi + 0x74], dx
call fcn.100b86f0
mov ebp, dword [esp + 0x10]
mov ecx, dword [esp + 0x1c]
movzx ebx, ax
lea ecx, [ecx + ebp*2]
mov eax, ebx
mov dword [esp + 0x34], ecx
mov dword [esp + 0x30], eax
mov word [ecx], bx
cmp eax, ebp
je 0x1009c322
mov edi, dword [esi + 0x10]
lea edx, [edi + eax*8]
cmp eax, dword [esp + 0x20]
jae 0x1009c2d4
cmp eax, 0x8000
jb 0x1009c230
mov cl, byte [edx + 4]
test cl, 0x40
jne 0x1009c230
mov ebp, dword [esp + 0x14]
mov al, cl
and al, 0x1f
cmp al, 2
jbe 0x1009c234
or cl, 0x40
mov byte [edx + 4], cl
cmp ebp, 0x40
jae 0x1009c3a6
mov word [esp + ebp*2 + 0x3c], bx
inc ebp
mov dword [esp + 0x14], ebp
jmp 0x1009c234
mov ebp, dword [esp + 0x14]
mov bl, byte [edx + 4]
mov al, byte [esp + 0x1b]
mov cl, bl
xor cl, al
test cl, 0x1f
je 0x1009c31e
movzx edi, al
and edi, 0x1f
movzx edx, bl
add edi, 0xfffffff1
and edx, 0x1f
cmp edi, 4
ja 0x1009c268
lea ecx, [edx - 0xf]
cmp ecx, 4
jbe 0x1009c31e
and al, 0x1f
cmp al, 0xe
jne 0x1009c282
lea eax, [edx - 0xf]
cmp eax, 4
ja 0x1009c282
mov eax, 0x1d3
mov ecx, 0x550e
jmp 0x1009c2a1
and bl, 0x1f
cmp bl, 0xe
jne 0x1009c39e
cmp edi, 4
ja 0x1009c39e
mov eax, 0x326e
mov ecx, 0x5593
mov word [esi + 0x78], cx
mov ecx, dword [esp + 0x30]
mov word [esi + 0x74], cx
mov ecx, esi
mov word [esi + 0x76], ax
call fcn.100b86f0
movzx ecx, ax
mov eax, dword [esp + 0x34]
mov word [eax], cx
mov eax, dword [esi + 0x10]
mov dword [esp + 0x14], ebp
lea edx, [eax + ecx*8]
cmp ecx, dword [esp + 0x20]
jae 0x1009c31e
jmp 0x1009c2f7
cmp eax, 0xffff
je 0x1009c322
cmp byte [edx + 5], 0x55
jne 0x1009c322
mov ebx, dword [esp + 0x20]
cmp eax, ebx
jbe 0x1009c322
movzx ecx, word [edx]
cmp ecx, ebx
jae 0x1009c322
mov ebp, dword [esp + 0x14]
lea edx, [edi + ecx*8]
cmp ecx, 0x8000
jb 0x1009c31e
mov al, byte [edx + 4]
test al, 0x40
jne 0x1009c31e
or al, 0x40
mov byte [edx + 4], al
cmp ebp, 0x40
jae 0x1009c3a6
mov word [esp + ebp*2 + 0x3c], cx
inc ebp
mov dword [esp + 0x14], ebp
mov ebp, dword [esp + 0x10]
inc ebp
mov dword [esp + 0x10], ebp
cmp ebp, dword [esp + 0x20]
jae 0x1009c33a
mov edi, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
jmp 0x1009c130
mov ecx, dword [esi + 0x1c]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
cmp byte [esi + 0x72], 0
jl 0x1009c361
mov eax, 0xffff
add word [esi + 6], ax
movzx eax, word [esi + 6]
lea eax, [eax + eax*2]
mov eax, dword [ecx + eax*4]
mov dword [esi + 0x18], eax
movzx ecx, byte [ecx + 8]
mov eax, dword [esi + 0x20]
push dword [esp + 0x2c]
push ebx
mov eax, dword [eax + ecx*4]
mov ecx, dword [esp + 0x40]
mov dword [ecx], eax
lea eax, [esp + 0x44]
push eax
push ebp
push esi
call fcn.1009bb70
mov ecx, dword [esp + 0xd0]
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.10073eeb
add esp, 0xb0
ret
push 0x1a
push esi
call fcn.10080d90
push 0x19
push esi
call fcn.10080d90
int3