Function at 0x1019ba60
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x84
mov eax, dword [0x11ad127c]
xor eax, esp
mov dword [esp + 0x80], eax
cmp dword [0x11d0c744], 0
mov eax, dword [ebp + 0xc]
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov ebx, 0x80004005
mov dword [esp + 0x18], eax
je 0x1019c545
cmp dword [edi + 4], 0x58544e43
jne 0x1019c545
mov esi, dword fs:[0x2c]
mov ebx, dword [0x11d0c5b8]
mov eax, dword [edi]
mov ecx, dword [esi + ebx*4]
mov dword [ecx + 0x10], eax
mov ecx, edi
mov dword [edi + 8], 0
mov eax, dword [edi + 0x7fcc]
mov dword [edi + 0x7fc8], eax
mov dword [edi + 0x7fcc], 0x27
call fcn.100bba70
mov edx, dword [esp + 0x18]
test edx, edx
je 0x1019c574
mov eax, dword [edx + 0x18]
shr eax, 1
test al, 1
je 0x1019bb09
mov ecx, dword [edi + 0x11c0]
mov eax, dword [ecx]
call dword [eax + 0xd0]
mov edx, dword [esp + 0x18]
mov ecx, dword [edx + 0x18]
mov eax, dword [edx + 4]
mov dword [esp + 0x50], eax
mov byte [esp + 0x30], 0
mov dword [esp + 0x24], 0
test ecx, 0xfffffff0
jbe 0x1019c46a
lea eax, [esi + ebx*4]
mov esi, edi
lea ebx, [edx + 0x14]
mov dword [esp + 0x34], eax
mov dword [esp + 0x14], ebx
nop dword [eax]
mov eax, dword [esp + 0x18]
mov edx, esi
mov dword [esp + 0x28], ebx
cmp dword [eax], 0x73655243
mov eax, dword [esp + 0x24]
jne 0x1019bce3
shr ecx, 4
cmp eax, ecx
jae 0x1019bce3
cmp dword [ebx], 0
je 0x1019bce3
lea ecx, [eax*4]
mov eax, dword [ebx]
mov dword [esp + 0x20], ecx
mov esi, dword [ecx + eax]
mov eax, dword [esi + 0x10]
add eax, eax
sar eax, 0x1c
cmp eax, 1
je 0x1019bb93
test eax, eax
je 0x1019bb93
xor bl, bl
jmp 0x1019bb95
mov bl, 1
xor eax, eax
mov dword [esp + 0x1c], ecx
test bl, bl
mov ebx, edi
cmovne eax, esi
mov esi, edx
test eax, eax
je 0x1019bcec
mov eax, dword [eax + 0x20c]
mov dword [esp + 0x1c], ecx
mov eax, dword [eax + 0x18c]
cmp dword [eax + 0x58], 0x81008000
jne 0x1019bcec
mov eax, dword [esp + 0x18]
mov dword [esp + 0x38], eax
lea eax, [edx + 0x1080]
mov dword [esp + 0x2c], eax
mov eax, dword [eax]
test eax, eax
je 0x1019bbfc
mov edi, dword [esp + 0x18]
cmp edi, dword [eax + 4]
je 0x1019bc05
jae 0x1019bbf1
mov eax, dword [eax + 0x10]
jmp 0x1019bbf4
mov eax, dword [eax + 0x14]
test eax, eax
jne 0x1019bbe5
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x1c], ecx
jmp 0x1019bcec
mov al, byte [eax]
mov edi, dword [esp + 0x20]
mov dword [esp + 0x1c], edi
test al, al
je 0x1019bcec
lea eax, [esp + 0x38]
push eax
lea ecx, [edx + 0x1080]
call fcn.10016320
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x1c], edi
cmp dword [eax], 0
jne 0x1019bcec
mov eax, dword [esi + 0x11cc]
xor ecx, ecx
mov dword [esp + 0x4c], ecx
xorps xmm0, xmm0
mov dword [esp + 0x3c], eax
and ecx, 0xfffffffe
lea eax, [esp + 0x54]
mov dword [esp + 0x40], ecx
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], 0x35
movlpd qword [esp + 0x68], xmm0
mov dword [esp + 0x70], 0
movlpd qword [esp + 0x78], xmm0
mov dword [esp + 0x80], 0
mov dword [esp + 0x85], 0
mov dword [esp + 0x54], 0x4e564441
mov dword [esp + 0x58], 0x10002
mov dword [esp + 0x5c], 0x35
mov dword [esp + 0x60], 0x4e564458
mov dword [esp + 0x64], 0x200003f
mov dword [esp + 0x74], 0
mov byte [esp + 0x84], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [esp + 0x85], eax
mov ecx, esi
lea eax, [esp + 0x3c]
push eax
call fcn.101d20e0
mov dword [esp + 0x1c], edi
jmp 0x1019bcec
shl eax, 2
mov ebx, edi
mov dword [esp + 0x1c], eax
mov edx, dword [esp + 0x18]
cmp dword [edx], 0x73655243
jne 0x1019bdf4
mov ecx, dword [edx + 0x18]
mov eax, ecx
shr eax, 4
cmp dword [esp + 0x24], eax
jae 0x1019bdf4
mov eax, dword [esp + 0x14]
cmp dword [eax], 0
je 0x1019bdf4
mov eax, dword [eax]
mov edx, dword [esp + 0x1c]
mov edi, dword [edx + eax]
mov eax, dword [edi + 0x10]
add eax, eax
sar eax, 0x1c
cmp eax, 1
je 0x1019bd3a
mov byte [esp + 0x13], 0
test eax, eax
jne 0x1019bd3f
mov byte [esp + 0x13], 1
xor eax, eax
mov edx, ecx
cmp byte [esp + 0x13], al
cmovne eax, edi
test eax, eax
je 0x1019bdf9
mov eax, dword [esp + 0x28]
mov edi, ecx
mov edx, dword [esp + 0x1c]
mov eax, dword [eax]
mov eax, dword [edx + eax]
mov dword [esp + 0x2c], eax
mov eax, dword [eax + 0x10]
add eax, eax
sar eax, 0x1c
cmp eax, 1
je 0x1019bd86
test eax, eax
je 0x1019bd86
mov eax, dword [esp + 0x18]
mov byte [esp + 0x13], 0
mov edx, dword [eax + 0x18]
mov edi, edx
jmp 0x1019bd8d
mov byte [esp + 0x13], 1
mov edx, ecx
xor eax, eax
mov ecx, edi
cmp byte [esp + 0x13], al
lea edi, [esi + 0x28b0]
mov dword [esp + 0x38], edi
cmovne eax, dword [esp + 0x2c]
cmp eax, dword [edi]
je 0x1019bdc9
mov eax, dword [esp + 0x28]
lea edi, [esi + 0x28c8]
mov dword [esp + 0x2c], edi
mov edi, dword [esp + 0x1c]
mov eax, dword [eax]
mov eax, dword [edi + eax]
mov edi, dword [esp + 0x2c]
cmp eax, dword [edi]
jne 0x1019bdf9
jmp 0x1019bdcf
lea edi, [ebx + 0x28c8]
mov eax, dword [esp + 0x38]
mov dword [edi], 0
mov edi, dword [esp + 0x18]
mov dword [eax], 0
mov eax, dword [esi + 0x11d0]
or dword [eax + 0xc], 0xc
mov ecx, dword [edi + 0x18]
mov edx, ecx
jmp 0x1019bdfd
mov ecx, dword [edx + 0x18]
mov edx, ecx
mov edi, dword [esp + 0x18]
cmp dword [edi], 0x73655243
jne 0x1019c061
mov eax, ecx
shr eax, 4
cmp dword [esp + 0x24], eax
jae 0x1019c061
mov eax, dword [esp + 0x28]
cmp dword [eax], 0
je 0x1019c061
mov edi, dword [esp + 0x1c]
mov eax, dword [eax]
mov eax, dword [edi + eax]
mov dword [esp + 0x2c], eax
mov edi, dword [eax + 0x10]
add edi, edi
sar edi, 0x1c
cmp edi, 1
je 0x1019be49
test edi, edi
je 0x1019be47
xor cl, cl
jmp 0x1019be4d
mov ecx, edx
mov edx, ecx
mov cl, 1
xor eax, eax
test cl, cl
mov ecx, dword [esp + 0x2c]
cmovne eax, ecx
test eax, eax
je 0x1019c061
shr edx, 4
cmp dword [esp + 0x24], edx
jae 0x1019be88
cmp edi, 1
je 0x1019be7d
test edi, edi
je 0x1019be7d
xor al, al
xor edi, edi
test al, al
cmovne edi, ecx
jmp 0x1019be8a
mov al, 1
xor edi, edi
test al, al
cmovne edi, ecx
jmp 0x1019be8a
xor edi, edi
mov ecx, dword [esi + 0x11c0]
push edi
mov eax, dword [ecx]
call dword [eax + 0x164]
mov ecx, dword [esi + 0x11c0]
push edi
mov eax, dword [ecx]
call dword [eax + 0x16c]
mov ecx, dword [esp + 0x34]
mov eax, dword [ecx]
mov dword [esp + 0x14], eax
mov ecx, dword [eax + 0x10]
cmp byte [ecx + 0x30688], 0
je 0x1019bee8
mov eax, dword [esp + 0x18]
cmp eax, dword [ecx + 0x30694]
jne 0x1019bee8
cmp byte [ecx + 0x30689], 0
jne 0x1019bee1
mov eax, dword [ecx + 0x30690]
mov dword [0x11d0c770], eax
mov byte [ecx + 0x30688], 0
lea ecx, [esi + 0x288c]
mov edx, 4
cmp dword [ecx], edi
jne 0x1019bf0e
mov dword [ecx], 0
mov dword [ecx + 0x14], 0
mov eax, dword [esi + 0x11d0]
or dword [eax + 0xc], 0xc
add ecx, 4
sub edx, 1
jne 0x1019bef3
test byte [edi + 0x1ac], 1
je 0x1019bf91
add dword [esi + 0x13c8], 0xffffffff
jne 0x1019bf3d
mov eax, dword [esi + 0xf7c]
lea ecx, [esi + 0xf7c]
and byte [eax + 0xb38], 0xfe
jmp 0x1019bf43
lea ecx, [ebx + 0xf7c]
mov ecx, dword [ecx]
test ecx, ecx
je 0x1019bf5b
mov al, byte [ecx + 0xb38]
test al, 1
je 0x1019bf5b
and al, 0xfe
mov byte [ecx + 0xb38], al
mov eax, dword [esi]
mov edx, dword [esp + 0x14]
or dword [eax + 0x162c], 0x40
mov eax, dword [esi]
or dword [eax + 0x162c], 0x10000
mov eax, dword [edx + 0x10]
mov ecx, dword [eax + 0xf7d4]
test ecx, ecx
je 0x1019bf95
cmp dword [ecx + 0x340], 0
je 0x1019bf95
mov eax, dword [ecx]
call dword [eax]
mov edx, dword [esp + 0x14]
test byte [edi + 0x1ac], 1
jne 0x1019bfac
mov eax, dword [esi + 0xf7c]
cmp edi, dword [eax + 0xdc8]
jne 0x1019bfc0
mov eax, dword [edx + 0x10]
mov ecx, dword [eax + 0xf7d8]
test ecx, ecx
je 0x1019bfc0
mov eax, dword [ecx]
call dword [eax]
mov ecx, dword [esp + 0x14]
cmp byte [ecx + 8], 0
jne 0x1019bfd6
call fcn.10450c0b
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 0x10]
mov eax, dword [eax + 0xbe2c]
cmp dword [eax + 0x107c], 0
je 0x1019c061
cmp byte [ecx + 8], 0
jne 0x1019bffd
call fcn.10450c0b
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 0x10]
mov eax, dword [eax + 0xbe2c]
mov eax, dword [eax + 0x107c]
cmp byte [eax + 0x21], 0
je 0x1019c061
mov eax, dword [edi + 0x20c]
mov eax, dword [eax + 0x18c]
mov edi, dword [eax + 8]
lea eax, [edi + 8]
neg edi
sbb edi, edi
and edi, eax
cmp byte [ecx + 8], 0
jne 0x1019c03f
call fcn.10450c0b
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 0x10]
push 0
push 0
push edi
mov eax, dword [eax + 0xbe2c]
mov ecx, dword [eax + 0x107c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
call eax
mov byte [esp + 0x30], al
mov ecx, dword [esp + 0x18]
cmp dword [ecx], 0x73655243
jne 0x1019c196
mov edx, dword [ecx + 0x18]
mov eax, edx
shr eax, 4
cmp dword [esp + 0x24], eax
jae 0x1019c196
mov eax, dword [esp + 0x28]
cmp dword [eax], 0
je 0x1019c196
mov eax, dword [eax]
xor edi, edi
mov ecx, dword [esp + 0x1c]
mov ecx, dword [ecx + eax]
mov eax, dword [ecx + 0x10]
and eax, 0x78000000
cmp eax, 0x10000000
cmove edi, ecx
mov dword [esp + 0x20], edi
test edi, edi
je 0x1019c19b
mov eax, dword [esp + 0x34]
mov edi, dword [eax]
mov dword [esp + 0x14], edi
cmp byte [edi + 8], 0
jne 0x1019c0cf
call fcn.10450c0b
mov eax, dword [edi + 0x10]
mov eax, dword [eax + 0xbe2c]
cmp dword [eax + 0x107c], 0
je 0x1019c155
cmp byte [edi + 8], 0
jne 0x1019c0f2
call fcn.10450c0b
mov eax, dword [edi + 0x10]
mov eax, dword [eax + 0xbe2c]
mov eax, dword [eax + 0x107c]
cmp byte [eax + 0x21], 0
je 0x1019c155
mov eax, dword [esp + 0x20]
mov eax, dword [eax + 0x1c]
mov edi, dword [eax + 8]
lea eax, [edi + 8]
neg edi
sbb edi, edi
and edi, eax
mov eax, dword [esp + 0x14]
cmp byte [eax + 8], 0
jne 0x1019c133
call fcn.10450c0b
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 0x10]
push 0
push 0
push edi
mov eax, dword [eax + 0xbe2c]
mov ecx, dword [eax + 0x107c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
call eax
mov byte [esp + 0x30], al
mov eax, dword [esp + 0x20]
lea ecx, [esi + 0x2968]
mov edx, 0x10
cmp dword [ecx], eax
jne 0x1019c18a
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
mov eax, dword [esi + 0x11d0]
or dword [eax + 0xc], 2
mov eax, dword [esp + 0x20]
add ecx, 0x10
sub edx, 1
jne 0x1019c164
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx + 0x18]
jmp 0x1019c19f
mov ecx, dword [esp + 0x18]
cmp dword [ecx], 0x73655243
jne 0x1019c2d6
shr edx, 4
cmp dword [esp + 0x24], edx
jae 0x1019c2d6
mov eax, dword [esp + 0x28]
cmp dword [eax], 0
je 0x1019c2d6
mov eax, dword [eax]
xor edx, edx
mov ecx, dword [esp + 0x1c]
mov ecx, dword [ecx + eax]
mov eax, dword [ecx + 0x10]
and eax, 0x78000000
cmp eax, 0x28000000
cmove edx, ecx
mov dword [esp + 0x14], edx
test edx, edx
je 0x1019c2d6
mov eax, dword [esp + 0x34]
mov edi, esi
mov esi, dword [eax]
cmp byte [esi + 8], 0
jne 0x1019c202
call fcn.10450c0b
mov eax, dword [esi + 0x10]
mov eax, dword [eax + 0xbe2c]
cmp dword [eax + 0x107c], 0
je 0x1019c28c
cmp byte [esi + 8], 0
jne 0x1019c225
call fcn.10450c0b
mov eax, dword [esi + 0x10]
mov eax, dword [eax + 0xbe2c]
mov eax, dword [eax + 0x107c]
cmp byte [eax + 0x21], 0
je 0x1019c28c
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 0x38]
test eax, eax
je 0x1019c251
add eax, 8
mov dword [esp + 0x20], eax
jmp 0x1019c259
mov dword [esp + 0x20], 0
cmp byte [esi + 8], 0
jne 0x1019c267
call fcn.10450c0b
mov eax, dword [esi + 0x10]
push 0
push 0
push dword [esp + 0x28]
mov eax, dword [eax + 0xbe2c]
mov ecx, dword [eax + 0x107c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
call eax
mov byte [esp + 0x30], al
mov eax, dword [esp + 0x14]
mov esi, edi
cmp eax, dword [edi + 0xfc4]
jne 0x1019c2d6
mov ecx, dword [esp + 0x34]
mov dword [edi + 0xfc4], 0
mov dword [edi + 0x13d0], 0
mov eax, dword [ecx]
mov eax, dword [eax + 0x10]
test dword [eax + 0x190], 0x3fff00
je 0x1019c2d6
mov eax, dword [edi + 0x11d0]
mov dword [eax + 0x19774], 0
mov edx, dword [esp + 0x18]
cmp dword [edx], 0x73655243
jne 0x1019c436
mov eax, dword [edx + 0x18]
shr eax, 4
cmp dword [esp + 0x24], eax
jae 0x1019c436
mov ecx, dword [esp + 0x28]
cmp dword [ecx], 0
je 0x1019c436
mov eax, dword [ecx]
mov edi, ebx
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x1c]
cmp dword [ecx + eax], 0
je 0x1019c44a
mov eax, dword [esp + 0x28]
mov dword [esp + 0x20], edi
mov eax, dword [eax]
mov eax, dword [ecx + eax]
test dword [eax + 0x10], 0x78000000
jne 0x1019c42c
mov eax, dword [eax + 0x294]
shr eax, 0xa
not al
test al, 1
je 0x1019c42c
mov eax, dword [esp + 0x28]
mov ecx, edi
mov edi, dword [esp + 0x1c]
mov ebx, eax
mov dword [esp + 0x14], ebx
mov eax, dword [eax]
mov eax, dword [edi + eax]
mov edi, 0
test dword [eax + 0x10], 0x78000000
cmove edi, eax
mov eax, ecx
mov dword [esp + 0x20], eax
test edi, edi
je 0x1019c444
mov edx, dword [edi + 0x80]
mov ebx, 1
mov eax, edx
mov dword [esp + 0x20], ecx
shr eax, 0x12
shr edx, 0xa
movzx ecx, al
movzx eax, dl
imul ecx, eax
cmp ecx, ebx
jbe 0x1019c3db
nop dword [eax]
test byte [edi + 0x1ad], 8
je 0x1019c3b4
mov eax, dword [edi + 0x23c]
mov ecx, dword [eax + ebx*4]
jmp 0x1019c3b6
mov ecx, edi
test ecx, ecx
je 0x1019c3bf
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [edi + 0x80]
inc ebx
mov eax, edx
shr edx, 0xa
shr eax, 0x12
movzx ecx, al
movzx eax, dl
imul ecx, eax
cmp ebx, ecx
jb 0x1019c3a0
lea eax, [esi + 0x2838]
xor ebx, ebx
mov dword [esp + 0x1c], eax
cmp dword [eax], edi
jne 0x1019c40d
mov ecx, dword [esi + 0x11d0]
push 0
push 0
push ebx
push esi
call fcn.100b8ca0
mov eax, dword [esi + 0x11d0]
or dword [eax + 0x14], 0xfffff
mov eax, dword [esp + 0x1c]
inc ebx
add eax, 4
mov dword [esp + 0x1c], eax
cmp ebx, 0x14
jb 0x1019c3e7
mov ebx, dword [esp + 0x14]
mov edi, dword [esp + 0x20]
mov edx, dword [esp + 0x18]
mov dword [esp + 0x14], ebx
jmp 0x1019c44e
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x14], ebx
jmp 0x1019c44e
lea eax, [edx + 0x14]
mov edi, ebx
mov dword [esp + 0x14], eax
lea ebx, [edx + 0x14]
jmp 0x1019c44e
mov edi, dword [esp + 0x20]
jmp 0x1019c44e
mov ebx, dword [esp + 0x14]
mov ecx, dword [edx + 0x18]
mov eax, ecx
inc dword [esp + 0x24]
shr eax, 4
cmp dword [esp + 0x24], eax
jb 0x1019bb40
mov ebx, dword [esp + 0x28]
jmp 0x1019c46f
lea ebx, [edx + 0x14]
mov esi, edi
mov ecx, dword [esi]
cmp dword [ecx + 0x2fe48], edx
jne 0x1019c48d
mov eax, dword [ecx + 0x2fe44]
add eax, dword [ecx + 0x2fe40]
jne 0x1019c48d
mov dword [ecx + 0x2fe48], eax
cmp dword [edx], 0x73655243
jne 0x1019c500
test dword [edx + 0x18], 0xfffffff0
jbe 0x1019c500
cmp dword [ebx], 0
je 0x1019c500
mov eax, dword [ebx]
mov edx, dword [eax]
mov ecx, dword [edx + 0x10]
add ecx, ecx
sar ecx, 0x1c
cmp ecx, 1
je 0x1019c4bc
test ecx, ecx
je 0x1019c4bc
xor bl, bl
jmp 0x1019c4be
mov bl, 1
xor eax, eax
test bl, bl
cmovne eax, edx
test eax, eax
je 0x1019c4fc
cmp ecx, 1
je 0x1019c4d6
test ecx, ecx
je 0x1019c4d6
xor al, al
jmp 0x1019c4d8
mov al, 1
xor ecx, ecx
test al, al
cmovne ecx, edx
mov eax, dword [ecx]
call dword [eax + 0xc]
test eax, eax
je 0x1019c4fc
mov ecx, dword [esi + 0x11c0]
mov edi, dword [esp + 0x18]
push edi
mov eax, dword [ecx]
call dword [eax + 0x14]
mov edx, edi
jmp 0x1019c500
mov edx, dword [esp + 0x18]
mov ecx, edx
call fcn.101c0c00
mov edi, dword [esp + 0x50]
mov ebx, eax
test edi, edi
je 0x1019c541
cmp byte [esp + 0x30], 0
je 0x1019c52d
mov ecx, dword [esi + 0x11d8]
push 1
push 1
mov ecx, dword [ecx + 0x5e0]
call fcn.101e43f0
push dword [esp + 0x30]
mov ecx, esi
push 0
push edi
call fcn.101d5b70
test ebx, ebx
js 0x1019c545
mov ebx, eax
test ebx, ebx
jns 0x1019c5a2
call fcn.1027e6c0
mov dword [esp + 0x4c], 0
xorps xmm0, xmm0
movups xmmword [esp + 0x3c], xmm0
cmp ebx, 0x8007000e
je 0x1019c58d
cmp ebx, 0x80070057
jne 0x1019c595
mov dword [esp + 0x4c], 2
jmp 0x1019c595
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x80]
xor ecx, esp
call fcn.1045066c
mov esp, ebp
pop ebp
ret 8
mov dword [esp + 0x4c], 1
push eax
lea eax, [esp + 0x40]
mov ecx, ebx
push eax
call fcn.1027e560
mov ecx, dword [esp + 0x8c]
mov eax, ebx
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.1045066c
mov esp, ebp
pop ebp
ret 8