Function at 0x10091cc0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xb0
mov eax, dword [0x10117018]
xor eax, esp
mov dword [esp + 0xac], eax
push ebx
push ebp
push esi
mov esi, dword [esp + 0xc0]
xor ebx, ebx
push edi
mov dword [esp + 0x14], ebx
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0x50]
mov dword [esp + 0x20], eax
lea eax, [eax*2 - 0x10000]
push eax
mov eax, dword [ecx + 8]
add eax, 0x4c
push eax
push ecx
call fcn.100737c0
add esp, 0xc
mov ecx, esi
lea ebp, [eax - 0x10000]
mov eax, 0x8000
mov word [ebp + 0x10000], ax
xor eax, eax
mov dword [esp + 0x1c], ebp
mov dword [esi + 0x76], 0x11800000
mov word [esi + 0x74], ax
call fcn.10090890
movzx edi, word [esi + 6]
mov dword [esp + 0x2c], edi
lea eax, [edi*2 - 2]
cmp eax, dword [esi + 0xe8]
jbe 0x10091d52
push eax
push esi
call fcn.10093780
add esp, 8
mov edx, dword [esi + 0x1c]
lea edi, [edi + edi*2]
mov eax, dword [esp + 0x2c]
add eax, 0xfffffffe
movzx ecx, byte [edx + edi*4 - 4]
imul ecx, eax
mov eax, dword [esi + 0x18]
lea eax, [ecx + eax*2]
cmp eax, dword [esi + 0xf4]
jbe 0x10091d82
push eax
push esi
call fcn.100937c0
mov edx, dword [esi + 0x1c]
add esp, 8
cmp dword [esp + 0x20], 0x8001
mov ecx, dword [edx + edi*4 - 0xc]
mov eax, dword [esi + 0x20]
mov dword [esp + 0x10], 0x8001
lea eax, [eax + ecx*4]
mov dword [esp + 0x28], eax
movzx eax, byte [edx + edi*4 - 4]
mov edx, dword [esp + 0x28]
mov dword [edx + eax*4], 0xff000000
mov ecx, dword [esi + 0x1c]
lea eax, [edx + eax*4]
mov dword [esp + 0x38], eax
lea edi, [ecx + 0xc]
mov dword [esp + 0x24], edi
jbe 0x10091fe5
mov ebp, 0x8001
nop dword [eax]
movzx eax, word [edi + 4]
cmp ebp, eax
jb 0x10091dee
push dword [esp + 0x1c]
push edx
push edi
push esi
call fcn.10091b40
add esp, 0x10
add edi, 0xc
mov dword [esp + 0x24], edi
mov eax, dword [esi + 0x10]
lea edi, [eax + ebp*8]
mov eax, dword [esp + 0x1c]
movzx ebp, word [edi]
mov edx, ebp
cmp edx, 0x8000
jb 0x10091e09
movzx edx, word [eax + edx*2]
movzx ebx, word [edi + 2]
mov ecx, ebx
cmp ecx, 0x8000
jb 0x10091e1b
movzx ecx, word [eax + ecx*2]
movzx eax, byte [edi + 5]
test byte [eax + 0x100ff260], 0x60
jne 0x10091e41
cmp edx, ebp
jne 0x10091e41
cmp ecx, ebx
jne 0x10091e41
mov ebp, dword [esp + 0x10]
mov eax, dword [esp + 0x1c]
mov word [eax + ebp*2], bp
jmp 0x10091fc2
mov al, byte [edi + 4]
mov ebx, 0xffbf
mov byte [esp + 0x1b], al
mov ax, word [edi + 4]
and ax, bx
mov word [esi + 0x76], cx
mov ecx, esi
mov word [esi + 0x78], ax
mov word [esi + 0x74], dx
call fcn.100ae390
mov ebp, dword [esp + 0x10]
mov ecx, dword [esp + 0x1c]
movzx ebx, ax
lea ecx, [ecx + ebp*2]
mov eax, ebx
mov dword [esp + 0x34], ecx
mov dword [esp + 0x30], eax
mov word [ecx], bx
cmp eax, ebp
je 0x10091fc2
mov edi, dword [esi + 0x10]
lea edx, [edi + eax*8]
cmp eax, dword [esp + 0x20]
jae 0x10091f74
cmp eax, 0x8000
jb 0x10091ed0
mov cl, byte [edx + 4]
test cl, 0x40
jne 0x10091ed0
mov ebp, dword [esp + 0x14]
mov al, cl
and al, 0x1f
cmp al, 2
jbe 0x10091ed4
or cl, 0x40
mov byte [edx + 4], cl
cmp ebp, 0x40
jae 0x10092046
mov word [esp + ebp*2 + 0x3c], bx
inc ebp
mov dword [esp + 0x14], ebp
jmp 0x10091ed4
mov ebp, dword [esp + 0x14]
mov bl, byte [edx + 4]
mov al, byte [esp + 0x1b]
mov cl, bl
xor cl, al
test cl, 0x1f
je 0x10091fbe
movzx edi, al
and edi, 0x1f
movzx edx, bl
add edi, 0xfffffff1
and edx, 0x1f
cmp edi, 4
ja 0x10091f08
lea ecx, [edx - 0xf]
cmp ecx, 4
jbe 0x10091fbe
and al, 0x1f
cmp al, 0xe
jne 0x10091f22
lea eax, [edx - 0xf]
cmp eax, 4
ja 0x10091f22
mov eax, 0x1d3
mov ecx, 0x550e
jmp 0x10091f41
and bl, 0x1f
cmp bl, 0xe
jne 0x1009203e
cmp edi, 4
ja 0x1009203e
mov eax, 0x326e
mov ecx, 0x5593
mov word [esi + 0x78], cx
mov ecx, dword [esp + 0x30]
mov word [esi + 0x74], cx
mov ecx, esi
mov word [esi + 0x76], ax
call fcn.100ae390
movzx ecx, ax
mov eax, dword [esp + 0x34]
mov word [eax], cx
mov eax, dword [esi + 0x10]
mov dword [esp + 0x14], ebp
lea edx, [eax + ecx*8]
cmp ecx, dword [esp + 0x20]
jae 0x10091fbe
jmp 0x10091f97
cmp eax, 0xffff
je 0x10091fc2
cmp byte [edx + 5], 0x55
jne 0x10091fc2
mov ebx, dword [esp + 0x20]
cmp eax, ebx
jbe 0x10091fc2
movzx ecx, word [edx]
cmp ecx, ebx
jae 0x10091fc2
mov ebp, dword [esp + 0x14]
lea edx, [edi + ecx*8]
cmp ecx, 0x8000
jb 0x10091fbe
mov al, byte [edx + 4]
test al, 0x40
jne 0x10091fbe
or al, 0x40
mov byte [edx + 4], al
cmp ebp, 0x40
jae 0x10092046
mov word [esp + ebp*2 + 0x3c], cx
inc ebp
mov dword [esp + 0x14], ebp
mov ebp, dword [esp + 0x10]
inc ebp
mov dword [esp + 0x10], ebp
cmp ebp, dword [esp + 0x20]
jae 0x10091fda
mov edi, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
jmp 0x10091dd0
mov ecx, dword [esi + 0x1c]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
cmp byte [esi + 0x72], 0
jl 0x10092001
mov eax, 0xffff
add word [esi + 6], ax
movzx eax, word [esi + 6]
lea eax, [eax + eax*2]
mov eax, dword [ecx + eax*4]
mov dword [esi + 0x18], eax
movzx ecx, byte [ecx + 8]
mov eax, dword [esi + 0x20]
push dword [esp + 0x2c]
push ebx
mov eax, dword [eax + ecx*4]
mov ecx, dword [esp + 0x40]
mov dword [ecx], eax
lea eax, [esp + 0x44]
push eax
push ebp
push esi
call fcn.10091810
mov ecx, dword [esp + 0xd0]
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.10069b8b
add esp, 0xb0
ret
push 0x1a
push esi
call fcn.10076a30
push 0x19
push esi
call fcn.10076a30
int3