Function at 0x1009df90
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
mov ebx, ecx
push esi
push edi
mov dword [ebp - 4], ebx
mov eax, dword [ebx + 8]
mov dword [ebp - 8], eax
test al, 0x40
je 0x1009dfd6
mov ecx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
cmp eax, dword [ecx]
jb 0x1009dfb8
push eax
call fcn.10069080
mov esi, dword [ebx + 0x40]
mov edi, dword [ebx + 0x44]
push eax
push 9
call fcn.10068e90
add esp, 8
mov dword [eax], esi
lea ebx, [eax + 8]
mov dword [eax + 4], edi
mov eax, dword [ebp - 8]
jmp 0x1009dfd9
mov ebx, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
mov dword [ebp + 8], ebx
test al, al
jns 0x1009e015
cmp ebx, dword [edi]
jb 0x1009dff1
push ebx
mov ecx, edi
call fcn.10069080
mov ebx, eax
mov esi, dword [ebp - 4]
push ebx
push 0x10
mov esi, dword [esi + 0x48]
call fcn.10068e90
push eax
mov eax, esi
cdq
push edx
push eax
call fcn.1006fb80
mov ebx, eax
add esp, 0x14
mov eax, dword [ebp - 8]
mov dword [ebp + 8], ebx
test eax, 0x100
je 0x1009e04a
cmp ebx, dword [edi]
jb 0x1009e02a
push ebx
mov ecx, edi
call fcn.10069080
mov ebx, eax
mov eax, dword [ebp - 4]
push ebx
push 0x18
mov esi, dword [eax + 0x4c]
call fcn.10068e90
push eax
push esi
call fcn.10068e90
mov ebx, eax
add esp, 0x10
mov eax, dword [ebp - 8]
mov dword [ebp + 8], ebx
test eax, 0x2000000
je 0x1009e087
cmp ebx, dword [edi]
jb 0x1009e05f
push ebx
mov ecx, edi
call fcn.10069080
mov ebx, eax
mov eax, dword [ebp - 4]
push ebx
push 0x51
mov esi, dword [eax + 0x98]
mov edi, dword [eax + 0x9c]
call fcn.10068e90
add esp, 8
lea ebx, [eax + 8]
mov dword [eax], esi
mov dword [eax + 4], edi
mov eax, dword [ebp - 8]
mov dword [ebp + 8], ebx
test eax, 0x4000000
je 0x1009e0c5
mov ecx, dword [ebp + 0xc]
cmp ebx, dword [ecx]
jb 0x1009e09d
push ebx
call fcn.10069080
mov ebx, eax
mov eax, dword [ebp - 4]
push ebx
push 0x59
mov esi, dword [eax + 0xa0]
mov edi, dword [eax + 0xa4]
call fcn.10068e90
add esp, 8
lea ebx, [eax + 8]
mov dword [eax], esi
mov dword [eax + 4], edi
mov eax, dword [ebp - 8]
mov dword [ebp + 8], ebx
mov esi, dword [ebp - 4]
mov edi, dword [ebp + 0xc]
test al, 1
je 0x1009e0e8
mov eax, dword [esi + 0x28]
mov ecx, edi
push ebx
and eax, 0xfffffffe
push eax
push 0xc
call fcn.100a1f10
mov ebx, eax
mov eax, dword [ebp - 8]
mov dword [ebp + 8], ebx
test eax, 0x8000000
je 0x1009e121
cmp ebx, dword [edi]
jb 0x1009e0fd
push ebx
mov ecx, edi
call fcn.10069080
mov ebx, eax
mov esi, dword [esi + 0xa8]
push ebx
push 0x68
call fcn.10068e90
push eax
mov eax, esi
cdq
push edx
push eax
call fcn.1006fb80
mov ebx, eax
add esp, 0x14
mov eax, dword [ebp - 8]
mov dword [ebp + 8], ebx
mov esi, dword [ebp - 4]
test al, 2
je 0x1009e13e
mov eax, dword [esi + 0x2c]
mov ecx, edi
push ebx
and eax, 0xfffffffe
push eax
push 0xe
call fcn.100a1f10
mov ebx, eax
mov dword [ebp + 8], ebx
cmp dword [esi + 0xbc], 0xf
jne 0x1009e17f
cmp ebx, dword [edi]
jb 0x1009e155
push ebx
mov ecx, edi
call fcn.10069080
mov ebx, eax
cmp dword [esi + 0xbc], 0xf
jne 0x1009e166
mov esi, dword [esi + 0xb8]
jmp 0x1009e168
xor esi, esi
push ebx
push 0x78
call fcn.10068e90
push eax
push esi
call fcn.10068e90
mov ebx, eax
add esp, 0x10
mov dword [ebp + 8], ebx
mov esi, dword [ebp - 8]
test esi, 0x200
je 0x1009e1bb
cmp ebx, dword [edi]
jb 0x1009e198
push ebx
mov ecx, edi
call fcn.10069080
mov ebx, eax
mov eax, dword [ebp - 4]
push ebx
push 0x80
mov esi, dword [eax + 0x50]
call fcn.10068e90
push eax
push esi
call fcn.10068e90
mov esi, dword [ebp - 8]
mov ebx, eax
add esp, 0x10
mov dword [ebp + 8], ebx
test esi, 0x10000000
je 0x1009e1fb
cmp ebx, dword [edi]
jb 0x1009e1d1
push ebx
mov ecx, edi
call fcn.10069080
mov ebx, eax
mov eax, dword [ebp - 4]
push ebx
push 0x88
mov esi, dword [eax + 0xac]
call fcn.10068e90
push eax
mov eax, esi
cdq
push edx
push eax
call fcn.1006fb80
mov esi, dword [ebp - 8]
mov ebx, eax
add esp, 0x14
mov dword [ebp + 8], ebx
test esi, 0x20000000
je 0x1009e23e
cmp ebx, dword [edi]
jb 0x1009e211
push ebx
mov ecx, edi
call fcn.10069080
mov ebx, eax
mov eax, dword [ebp - 4]
push ebx
push 0x90
mov edi, dword [eax + 0xb0]
mov esi, dword [eax + 0xb4]
call fcn.10068e90
push eax
push esi
push edi
call fcn.1006fb80
mov esi, dword [ebp - 8]
mov ebx, eax
add esp, 0x14
mov dword [ebp + 8], ebx
mov edi, dword [ebp + 0xc]
test esi, 0x400
je 0x1009e27a
cmp ebx, dword [edi]
jb 0x1009e257
push ebx
mov ecx, edi
call fcn.10069080
mov ebx, eax
mov eax, dword [ebp - 4]
push ebx
push 0x98
mov esi, dword [eax + 0x54]
call fcn.10068e90
push eax
push esi
call fcn.10068e90
mov esi, dword [ebp - 8]
mov ebx, eax
add esp, 0x10
mov dword [ebp + 8], ebx
test esi, 0x1000
je 0x1009e2b3
cmp ebx, dword [edi]
jb 0x1009e290
push ebx
mov ecx, edi
call fcn.10069080
mov ebx, eax
mov eax, dword [ebp - 4]
push ebx
push 0xa0
mov esi, dword [eax + 0x60]
call fcn.10068e90
push eax
push esi
call fcn.10068e90
mov esi, dword [ebp - 8]
mov ebx, eax
add esp, 0x10
mov dword [ebp + 8], ebx
test esi, 0x800
je 0x1009e2f0
cmp ebx, dword [edi]
jb 0x1009e2c9
push ebx
mov ecx, edi
call fcn.10069080
mov ebx, eax
mov eax, dword [ebp - 4]
push ebx
push 0xa8
mov edi, dword [eax + 0x58]
mov esi, dword [eax + 0x5c]
call fcn.10068e90
push eax
push esi
push edi
call fcn.1006fb80
mov esi, dword [ebp - 8]
mov ebx, eax
add esp, 0x14
mov dword [ebp + 8], ebx
mov edi, dword [ebp + 0xc]
test esi, 0x2000
je 0x1009e32c
cmp ebx, dword [edi]
jb 0x1009e309
push ebx
mov ecx, edi
call fcn.10069080
mov ebx, eax
mov eax, dword [ebp - 4]
push ebx
push 0xb0
mov esi, dword [eax + 0x64]
call fcn.10068e90
push eax
push esi
call fcn.10068e90
mov esi, dword [ebp - 8]
mov ebx, eax
add esp, 0x10
mov dword [ebp + 8], ebx
test esi, 0x8000
je 0x1009e36e
cmp ebx, dword [edi]
jb 0x1009e344
push ebx
mov ecx, edi
call fcn.10069080
mov ecx, eax
jmp 0x1009e347
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 4]
push ecx
push 0xb8
mov bl, byte [eax + 0x6c]
call fcn.10068e90
push eax
xor eax, eax
test bl, bl
setne al
push eax
call fcn.10068e90
mov ebx, eax
add esp, 0x10
mov dword [ebp + 8], ebx
test esi, 0x4000
je 0x1009e3ab
cmp ebx, dword [edi]
jb 0x1009e384
push ebx
mov ecx, edi
call fcn.10069080
mov ebx, eax
mov eax, dword [ebp - 4]
push ebx
push 0xc0
mov esi, dword [eax + 0x68]
call fcn.10068e90
push eax
mov eax, esi
cdq
push edx
push eax
call fcn.1006fb80
mov esi, dword [ebp - 8]
mov ebx, eax
add esp, 0x14
mov dword [ebp + 8], ebx
test esi, 0x20000
je 0x1009e3e4
cmp ebx, dword [edi]
jb 0x1009e3c1
push ebx
mov ecx, edi
call fcn.10069080
mov ebx, eax
mov eax, dword [ebp - 4]
push ebx
push 0xc8
mov esi, dword [eax + 0x70]
call fcn.10068e90
push eax
push esi
call fcn.10068e90
mov esi, dword [ebp - 8]
mov ebx, eax
add esp, 0x10
mov dword [ebp + 8], ebx
test esi, 0x10000
je 0x1009e426
cmp ebx, dword [edi]
jb 0x1009e3fc
push ebx
mov ecx, edi
call fcn.10069080
mov ecx, eax
jmp 0x1009e3ff
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 4]
push ecx
push 0xd0
mov bl, byte [eax + 0x6d]
call fcn.10068e90
push eax
xor eax, eax
test bl, bl
setne al
push eax
call fcn.10068e90
mov ebx, eax
add esp, 0x10
mov dword [ebp + 8], ebx
mov eax, dword [ebp - 4]
add eax, 0x10
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.1006f6c0
mov ecx, eax
xor eax, eax
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0xc], eax
test ecx, ecx
jle 0x1009e489
cmp ebx, dword [edi]
jb 0x1009e455
push ebx
mov ecx, edi
call fcn.10069080
mov ebx, eax
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x10]
push eax
call fcn.1006e9c0
push ebx
push 0xd8
mov esi, dword [eax]
call fcn.10068e90
push eax
push esi
call fcn.10068e90
mov ebx, eax
add esp, 0x10
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp eax, dword [ebp - 0x14]
jl 0x1009e444
mov esi, dword [ebp - 8]
mov dword [ebp + 8], ebx
test esi, 0x40000
je 0x1009e4bf
cmp ebx, dword [edi]
jb 0x1009e49f
push ebx
mov ecx, edi
call fcn.10069080
mov ebx, eax
mov eax, dword [ebp - 4]
push ebx
push 0xe0
mov esi, dword [eax + 0x74]
call fcn.10068e90
push eax
push esi
call fcn.10068e90
mov ebx, eax
add esp, 0x10
mov dword [ebp + 8], ebx
mov esi, dword [ebp - 4]
cmp dword [esi + 0xbc], 0x1d
jne 0x1009e4e4
mov eax, dword [esi + 0xb8]
mov ecx, edi
push ebx
and eax, 0xfffffffe
push eax
push 0x1d
call fcn.100a1f10
mov ebx, eax
mov dword [ebp + 8], ebx
mov eax, dword [ebp - 8]
test eax, 0x80000
je 0x1009e51f
cmp ebx, dword [edi]
jb 0x1009e4fc
push ebx
mov ecx, edi
call fcn.10069080
mov ebx, eax
mov esi, dword [esi + 0x78]
push ebx
push 0xf8
call fcn.10068e90
push eax
push esi
call fcn.10068e90
mov esi, dword [ebp - 4]
mov ebx, eax
mov eax, dword [ebp - 8]
add esp, 0x10
mov dword [ebp + 8], ebx
test eax, 0x100000
je 0x1009e554
cmp ebx, dword [edi]
jb 0x1009e534
push ebx
mov ecx, edi
call fcn.10069080
mov ebx, eax
mov esi, dword [esi + 0x7c]
push ebx
push 0x100
call fcn.10068e90
push eax
push esi
call fcn.10068e90
mov ebx, eax
add esp, 0x10
mov eax, dword [ebp - 8]
mov dword [ebp + 8], ebx
test eax, 0x1000000
je 0x1009e593
cmp ebx, dword [edi]
jb 0x1009e569
push ebx
mov ecx, edi
call fcn.10069080
mov ebx, eax
mov eax, dword [ebp - 4]
push ebx
push 0x108
mov esi, dword [eax + 0x90]
call fcn.10068e90
push eax
mov eax, esi
cdq
push edx
push eax
call fcn.1006fb80
mov ebx, eax
add esp, 0x14
mov eax, dword [ebp - 8]
mov dword [ebp + 8], ebx
mov esi, dword [ebp - 4]
test al, 4
je 0x1009e5b3
mov eax, dword [esi + 0x30]
mov ecx, edi
push ebx
and eax, 0xfffffffe
push eax
push 0x22
call fcn.100a1f10
mov ebx, eax
mov eax, dword [ebp - 8]
mov dword [ebp + 8], ebx
test eax, 0x400000
je 0x1009e5eb
cmp ebx, dword [edi]
jb 0x1009e5c8
push ebx
mov ecx, edi
call fcn.10069080
mov ebx, eax
mov esi, dword [esi + 0x88]
push ebx
push 0x118
call fcn.10068e90
push eax
push esi
call fcn.10068e90
mov ebx, eax
add esp, 0x10
mov eax, dword [ebp - 8]
mov dword [ebp + 8], ebx
test eax, 0x200000
je 0x1009e62d
cmp ebx, dword [edi]
jb 0x1009e600
push ebx
mov ecx, edi
call fcn.10069080
mov ebx, eax
mov eax, dword [ebp - 4]
push ebx
push 0x120
mov edi, dword [eax + 0x80]
mov esi, dword [eax + 0x84]
call fcn.10068e90
push eax
push esi
push edi
call fcn.1006fb80
mov ebx, eax
add esp, 0x14
mov eax, dword [ebp - 8]
mov dword [ebp + 8], ebx
test al, 0x20
je 0x1009e6fb
mov edi, dword [ebp + 0xc]
cmp ebx, dword [edi]
jb 0x1009e646
push ebx
mov ecx, edi
call fcn.10069080
mov ebx, eax
mov eax, dword [ebp - 4]
push ebx
push 0x12a
mov eax, dword [eax + 0x3c]
mov dword [ebp + 8], eax
call fcn.10068e90
mov ebx, dword [ebp + 8]
push eax
mov ecx, dword [ebx + 0xc]
push ecx
call fcn.10068e90
mov ecx, eax
add esp, 0x10
mov eax, dword [ebx + 8]
mov dword [ebp + 8], ecx
mov dword [ebp - 0x14], eax
test al, 1
je 0x1009e6ab
cmp ecx, dword [edi]
jb 0x1009e687
push ecx
mov ecx, edi
call fcn.10069080
mov ecx, eax
mov edi, dword [ebx + 0x10]
mov esi, dword [ebx + 0x14]
push ecx
push 8
call fcn.10068e90
push eax
push esi
push edi
call fcn.1006fb80
mov edi, dword [ebp + 0xc]
mov ecx, eax
mov dword [ebp + 8], eax
add esp, 0x14
mov eax, dword [ebp - 0x14]
test al, 2
je 0x1009e6d7
cmp ecx, dword [edi]
jb 0x1009e6bd
push ecx
mov ecx, edi
call fcn.10069080
mov ecx, eax
mov esi, dword [ebx + 0x18]
push ecx
push 0x10
call fcn.10068e90
push eax
push esi
call fcn.10068e90
mov ecx, eax
add esp, 0x10
mov dword [ebp + 8], ecx
test byte [ebx + 4], 1
je 0x1009e6f6
mov eax, dword [ebx + 4]
and eax, 0xfffffffc
push edi
add eax, 4
push ecx
push eax
call fcn.10115180
mov ecx, eax
add esp, 0xc
mov dword [ebp + 8], ecx
mov eax, dword [ebp - 8]
jmp 0x1009e6fe
mov ecx, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
test eax, 0x800000
je 0x1009e73f
cmp ecx, dword [edi]
jb 0x1009e716
push ecx
mov ecx, edi
call fcn.10069080
mov ecx, eax
mov eax, dword [ebp - 4]
push ecx
push 0x130
mov esi, dword [eax + 0x8c]
call fcn.10068e90
push eax
mov eax, esi
cdq
push edx
push eax
call fcn.1006fb80
mov ebx, eax
add esp, 0x14
mov eax, dword [ebp - 8]
jmp 0x1009e742
mov ebx, dword [ebp + 8]
mov esi, dword [ebp - 4]
test al, 8
je 0x1009e75f
mov eax, dword [esi + 0x34]
mov ecx, edi
push ebx
and eax, 0xfffffffe
push eax
push 0x27
call fcn.100a1f10
mov ebx, eax
mov eax, dword [ebp - 8]
test al, 0x10
je 0x1009e776
mov eax, dword [esi + 0x38]
mov ecx, edi
push ebx
and eax, 0xfffffffe
push eax
push 0x28
call fcn.100a1f10
mov ebx, eax
lea eax, [esi + 0x1c]
mov ecx, eax
mov dword [ebp + 8], eax
call fcn.1006f6c0
mov ecx, eax
xor eax, eax
mov dword [ebp - 0x14], ecx
mov dword [ebp + 0xc], eax
test ecx, ecx
jle 0x1009e7d7
cmp ebx, dword [edi]
jb 0x1009e7a2
push ebx
mov ecx, edi
call fcn.10069080
mov ebx, eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
push eax
call fcn.1006e9c0
push ebx
push pe_nt_image_headers32
mov esi, dword [eax]
call fcn.10068e90
push eax
mov eax, esi
cdq
push edx
push eax
call fcn.1006fb80
mov ebx, eax
add esp, 0x14
mov eax, dword [ebp + 0xc]
inc eax
mov dword [ebp + 0xc], eax
cmp eax, dword [ebp - 0x14]
jl 0x1009e791
mov esi, dword [ebp - 4]
test byte [esi + 4], 1
je 0x1009e7fa
mov eax, dword [esi + 4]
and eax, 0xfffffffc
push edi
add eax, 4
push ebx
push eax
call fcn.10115180
add esp, 0xc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
pop edi
pop esi
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret 8