Function at 0x10197180
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x30
push ebx
mov ebx, ecx
mov eax, dword [ebx + 0xc]
mov ecx, dword [ebx + 0x4c]
mov edx, dword [ebx + 0x5c]
mov dword [esp + 4], eax
mov eax, dword [edx + ecx*4]
mov ecx, dword [ebx + 0x68]
mov edx, dword [ecx + eax*4 + 4]
lea eax, [ecx + eax*4 + 4]
mov ecx, dword [eax + 4]
mov dword [esp + 0x14], edx
mov edx, dword [eax + 8]
push ebp
mov dword [esp + 0x1c], ecx
mov ecx, dword [eax + 0xc]
mov dword [esp + 0x20], edx
mov edx, dword [eax + 0x10]
push esi
push edi
mov edi, dword [esp + 0x48]
mov esi, dword [edi + 0x94]
mov dword [esp + 0x2c], ecx
mov ecx, dword [eax + 0x14]
mov dword [esp + 0x30], edx
mov edx, dword [eax + 0x18]
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x34], ecx
mov dword [esp + 0x38], edx
mov edx, dword [esi]
mov ecx, esi
mov dword [esp + 0x3c], eax
call dword [edx + 4]
mov eax, dword [esi + 8]
mov ecx, dword [esp + 0x10]
lea ebp, [esi + 8]
and al, 0x90
or al, 0x10
push ecx
mov ecx, esi
mov dword [ebp], eax
call fcn.100ea3e0
mov edx, dword [ebp]
and edx, 0xe6ffcdff
or edx, 0x6000000
mov dword [ebp], edx
mov eax, dword [ebx + 0x5c]
mov ecx, dword [eax]
mov edx, dword [ebx + 0x68]
mov eax, dword [edx + ecx*4]
sub eax, 0
je 0x10197230
sub eax, 1
jne 0x10197234
or byte [esi + 0x13], 2
jmp 0x10197234
and byte [esi + 0x13], 0xfd
mov eax, dword [esi + 0xc]
and eax, 0x600fffe0
or al, 0x1c
mov dword [esi + 0xc], eax
mov ecx, dword [ebx + 0x44]
mov edx, dword [ebx + 0x50]
mov eax, dword [edx + ecx*4]
mov ecx, dword [ebx + 0x34]
mov eax, dword [ecx + eax*4]
mov edx, dword [edi]
push eax
mov ecx, edi
mov dword [esp + 0x18], eax
call dword [edx + 0x1c]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x48], eax
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x18]
mov edx, dword [esi + 0x10]
mov ecx, dword [esi + 0xc]
and eax, 0xff
and edx, 0xfe7f601f
or eax, 0x30000
shl eax, 5
or eax, edx
mov edx, dword [esp + 0x48]
add edx, edx
add edx, edx
mov dword [esp + 0x48], edx
mov edx, eax
xor edx, dword [esp + 0x48]
mov dword [esi + 0x10], eax
and edx, 0x10
xor edx, eax
mov dword [esi + 0x10], edx
and ecx, 0xffffffbf
or ecx, 0x3a0
mov dword [esi + 0xc], ecx
movzx eax, byte [ebx + 0x9a]
shl eax, 0xe
xor eax, edx
and eax, 0x4000
xor eax, edx
mov dword [esi + 0x10], eax
movzx edx, byte [ebx + 0x9e]
shl edx, 0xd
xor edx, eax
or ch, 0x7c
and edx, 0x2000
xor edx, eax
mov dword [esp + 0x48], 0
mov eax, dword [esp + 0x48]
mov dword [esi + 0x10], edx
mov dword [esi + 0x14], eax
mov dword [esi + 0xc], ecx
cmp dword [edi + 0x1c], 0
je 0x1019730b
push 0x10
push ebp
lea ecx, [esp + 0x50]
push ecx
mov ecx, edi
call fcn.100fd200
mov ecx, dword [eax]
jmp 0x10197310
mov ecx, 2
test cl, 1
je 0x1019864d
mov ecx, dword [edi + 0x90]
mov edx, dword [ecx]
mov dword [esp + 0x18], ecx
call dword [edx + 4]
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + 8]
add eax, 8
and ecx, 0xef1fff81
or ecx, 0x201
mov dword [eax], ecx
mov edx, dword [edi]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x30]
push eax
mov ecx, edi
call dword [edx + 0x1c]
mov edx, dword [edi]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x30]
push eax
mov ecx, edi
call dword [edx + 0x18]
mov ecx, dword [esp + 0x48]
and eax, 0xff
shl eax, 5
add ecx, ecx
add ecx, ecx
and ecx, 0x1f
or eax, ecx
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx + 0xc]
shl eax, 0x10
and edx, 0xffe0
or eax, edx
or eax, 0x20000009
mov dword [ecx + 0xc], eax
mov eax, dword [ebx + 0x5c]
mov edx, dword [eax]
mov eax, dword [ebx + 0x68]
mov edx, dword [eax + edx*4]
mov eax, dword [esp + 0x1c]
mov eax, dword [eax]
mov dword [esp + 0x14], edx
mov edx, dword [ecx + 0xc]
and edx, 0xfffffd1f
or dh, 1
shr eax, 0x15
and eax, 7
cmp eax, 5
mov dword [ecx + 0xc], edx
ja case.0x101973be.0
jmp dword [eax*4 + 0x10198660]
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx + 0x10]
and eax, 0xfe45ffff
or eax, 0x450000
mov dword [ecx + 0x10], eax
jmp 0x1019742c
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx + 0x10]
and edx, 0xfe69ffff
or edx, 0x690000
mov dword [ecx + 0x10], edx
jmp 0x1019742c
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx + 0x10]
and eax, 0xfe8dffff
or eax, 0x8d0000
mov dword [ecx + 0x10], eax
jmp 0x1019742c
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx + 0x10]
and edx, 0xfe8dffff
or edx, 0x8d0000
mov dword [ecx + 0x10], edx
jmp 0x1019742c
mov ecx, dword [esp + 0x18]
and dword [ecx + 0x10], 0xfe00ffff
mov eax, dword [ecx + 0x10]
mov edx, dword [esp + 0x14]
and eax, 0xffff661f
or ah, 6
add edx, edx
and edx, 0x1f
mov dword [ecx + 0x10], eax
and eax, 0xfe00ffe0
or eax, edx
mov dword [ecx + 0x10], eax
cmp dword [edi + 0x1c], 0
je 0x1019746a
mov ecx, dword [esp + 0x1c]
push 0x10
push ecx
lea edx, [esp + 0x50]
push edx
mov ecx, edi
call fcn.100fd200
mov eax, dword [eax]
jmp 0x1019746f
mov eax, 2
mov ecx, eax
test cl, 1
je 0x1019864d
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov ecx, dword [ebp]
mov edx, dword [esp + 0x10]
and ecx, 0xffffff90
or ecx, 0x10
mov dword [ebp], ecx
push edx
mov ecx, esi
call fcn.100ea3e0
mov eax, dword [ebp]
and eax, 0xe5ffcdff
or eax, 0x5000000
mov dword [ebp], eax
mov ecx, dword [ebx + 0x5c]
mov edx, dword [ecx]
mov eax, dword [ebx + 0x68]
mov eax, dword [eax + edx*4]
sub eax, 0
je 0x101974c4
sub eax, 1
jne 0x101974c8
or byte [esi + 0x13], 2
jmp 0x101974c8
and byte [esi + 0x13], 0xfd
mov ecx, dword [esi + 0xc]
and ecx, 0x600fffe0
or ecx, 0x1c
mov dword [esi + 0xc], ecx
mov edx, dword [ebx + 0x44]
mov eax, dword [ebx + 0x50]
mov ecx, dword [eax + edx*4]
mov edx, dword [ebx + 0x34]
mov eax, dword [edx + ecx*4]
mov edx, dword [edi]
push eax
mov ecx, edi
mov dword [esp + 0x18], eax
call dword [edx + 0x1c]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x48], eax
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x18]
mov edx, dword [esi + 0x10]
mov ecx, dword [esp + 0x48]
and eax, 0xff
or eax, 0x30000
shl eax, 5
add ecx, ecx
and edx, 0xfe7f601f
or eax, edx
mov dword [esi + 0x10], eax
add ecx, ecx
and eax, 0xffffbfef
and ecx, 0x10
or ecx, eax
mov eax, dword [esi + 0xc]
and al, 0xbf
or ch, 0x20
mov dword [esi + 0x14], 0x3f7fffde
or eax, 0x7fa0
mov dword [esi + 0x10], ecx
mov dword [esi + 0xc], eax
cmp dword [edi + 0x1c], 0
je 0x10197562
push 0x10
push ebp
lea ecx, [esp + 0x50]
push ecx
mov ecx, edi
call fcn.100fd200
mov eax, dword [eax]
jmp 0x10197567
mov eax, 2
mov ecx, eax
test cl, 1
je 0x1019864d
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 4]
mov eax, dword [ebp]
mov ecx, dword [esp + 0x10]
and al, 0xa2
or al, 0x22
push ecx
mov ecx, esi
mov dword [ebp], eax
call fcn.100ea3e0
mov eax, dword [ebp]
and eax, 0xfff1ffff
or eax, 0x10000
mov dword [ebp], eax
mov edx, dword [ebx + 0x5c]
mov ecx, dword [edx]
mov edx, dword [ebx + 0x68]
mov ecx, dword [edx + ecx*4]
sub ecx, 0
je 0x101975ba
sub ecx, 1
jne 0x101975be
or byte [esi + 0x13], 2
jmp 0x101975be
and byte [esi + 0x13], 0xfd
mov ecx, dword [esi + 0x10]
and eax, 0xffefffff
mov dword [ebp], eax
mov eax, dword [esi + 0xc]
and ecx, 0xfe7f740f
or ecx, 0x601400
and eax, 0x600ffc00
push 0
or eax, 0x14000084
mov dword [esi + 0x10], ecx
push 0
mov ecx, esi
mov dword [esi + 0xc], eax
call fcn.10142730
mov edx, dword [esi + 0xc]
and dh, 0x9f
or dh, 0x1c
mov dword [esi + 0x14], 0
mov dword [esi + 0xc], edx
cmp dword [edi + 0x1c], 0
je 0x1019761f
push 0x10
push ebp
lea eax, [esp + 0x50]
push eax
mov ecx, edi
call fcn.100fd200
mov eax, dword [eax]
jmp 0x10197624
mov eax, 2
mov ecx, eax
test cl, 1
je 0x1019864d
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 4]
mov eax, dword [esp + 0x10]
push eax
mov ecx, esi
call fcn.100ea3e0
mov ecx, dword [ebp]
mov eax, dword [esp + 0x3c]
and ecx, 0xefffcdc0
or ecx, 0x40
mov dword [ebp], ecx
mov edx, dword [edi]
push eax
mov ecx, edi
call dword [edx + 0x1c]
mov edx, dword [edi]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x3c]
push eax
mov ecx, edi
call dword [edx + 0x18]
mov ecx, dword [esp + 0x48]
add ecx, ecx
and eax, 0xff
add ecx, ecx
shl eax, 5
and ecx, 0x10
or eax, ecx
mov ecx, dword [esi + 0xc]
shl eax, 0x10
and ecx, 0x600fffe0
or eax, ecx
or al, 0x1d
mov dword [esi + 0xc], eax
mov edx, dword [ebx + 0x44]
mov eax, dword [ebx + 0x50]
mov ecx, dword [eax + edx*4]
mov edx, dword [ebx + 0x34]
mov eax, dword [edx + ecx*4]
mov edx, dword [edi]
push eax
mov ecx, edi
mov dword [esp + 0x18], eax
call dword [edx + 0x1c]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x48], eax
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x18]
mov edx, dword [esp + 0x48]
push 7
push edx
push eax
push 1
push 0
mov ecx, esi
call fcn.10148970
or byte [esi + 0x11], 0x60
or byte [esi + 0xd], 0x7c
mov dword [esi + 0x14], 0x3f800000
cmp dword [edi + 0x1c], 0
je 0x101976fb
push 0x10
push ebp
lea eax, [esp + 0x50]
push eax
mov ecx, edi
call fcn.100fd200
mov eax, dword [eax]
jmp 0x10197700
mov eax, 2
mov ecx, eax
test cl, 1
je 0x1019864d
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 4]
mov eax, dword [ebp]
mov ecx, dword [esp + 0x10]
and al, 0xc1
or al, 0x41
push ecx
mov ecx, esi
mov dword [ebp], eax
call fcn.100ea3e0
mov eax, dword [esp + 0x20]
and dword [ebp], 0xefffcdff
mov edx, dword [edi]
push eax
mov ecx, edi
call dword [edx + 0x1c]
mov edx, dword [edi]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x20]
push eax
mov ecx, edi
call dword [edx + 0x18]
mov ecx, dword [esp + 0x48]
add ecx, ecx
and eax, 0xff
add ecx, ecx
shl eax, 5
and ecx, 0x10
or eax, ecx
mov ecx, dword [esi + 0xc]
shl eax, 0x10
and ecx, 0x600fffe0
or eax, ecx
or al, 0x1d
mov ecx, edi
mov dword [esi + 0xc], eax
mov eax, dword [esp + 0x3c]
mov edx, dword [edi]
push eax
call dword [edx + 0x1c]
mov edx, dword [edi]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x3c]
push eax
mov ecx, edi
call dword [edx + 0x18]
mov ecx, dword [esp + 0x48]
push 7
push ecx
push eax
push 1
push 0
mov ecx, esi
mov dword [esp + 0x28], eax
call fcn.10148970
mov edx, dword [esi + 0xc]
and dh, 0xf7
or dh, 0x74
push 4
push 1
mov ecx, esi
mov dword [esi + 0xc], edx
call fcn.10142730
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x14]
add eax, eax
add eax, eax
and ecx, 0xff
and eax, 0x10
shl ecx, 5
or ecx, eax
mov eax, dword [esi + 0x14]
and eax, 0xffffe00f
or ecx, eax
mov dword [esi + 0x14], ecx
cmp dword [edi + 0x1c], 0
je 0x101977fd
push 0x10
push ebp
lea ecx, [esp + 0x50]
push ecx
mov ecx, edi
call fcn.100fd200
mov eax, dword [eax]
jmp 0x10197802
mov eax, 2
mov ecx, eax
test cl, 1
je 0x1019864d
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 4]
mov eax, dword [ebp]
mov ecx, dword [esp + 0x10]
and al, 0x81
or al, 1
push ecx
mov ecx, esi
mov dword [ebp], eax
call fcn.100ea3e0
mov edx, dword [esi + 0xc]
and dword [ebp], 0xefffcdff
and edx, 0x600ffc00
or edx, 0x40003fc
mov dword [esi + 0x14], 0x3e27d82f
mov dword [esi + 0xc], edx
cmp dword [edi + 0x1c], 0
je 0x10197863
push 0x10
push ebp
lea eax, [esp + 0x50]
push eax
mov ecx, edi
call fcn.100fd200
mov eax, dword [eax]
jmp 0x10197868
mov eax, 2
mov ecx, eax
test cl, 1
je 0x1019864d
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 4]
mov eax, dword [ebp]
mov ecx, dword [esp + 0x10]
and al, 0xc8
or al, 0x48
push ecx
mov ecx, esi
mov dword [ebp], eax
call fcn.100ea3e0
mov eax, dword [esp + 0x24]
mov edx, dword [edi]
push eax
mov ecx, edi
call dword [edx + 0x1c]
mov edx, dword [edi]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x24]
push eax
mov ecx, edi
call dword [edx + 0x18]
mov ecx, dword [esp + 0x48]
add ecx, ecx
and eax, 0xff
add ecx, ecx
shl eax, 5
and ecx, 0x10
or eax, ecx
mov ecx, dword [esi + 0xc]
shl eax, 0x10
and ecx, 0x600fffe0
or eax, ecx
or al, 0x1d
mov ecx, edi
mov dword [esi + 0xc], eax
mov eax, dword [esp + 0x3c]
mov edx, dword [edi]
push eax
call dword [edx + 0x1c]
mov edx, dword [edi]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x3c]
push eax
mov ecx, edi
call dword [edx + 0x18]
mov ecx, dword [esp + 0x48]
push 7
push ecx
push eax
push 1
push 0
mov ecx, esi
call fcn.10148970
or byte [esi + 0xd], 0x7c
mov dword [esi + 0x14], 0x3d433119
cmp dword [edi + 0x1c], 0
je 0x10197927
push 0x10
push ebp
lea edx, [esp + 0x50]
push edx
mov ecx, edi
call fcn.100fd200
mov eax, dword [eax]
jmp 0x1019792c
mov eax, 2
mov ecx, eax
test cl, 1
je 0x1019864d
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov ecx, dword [ebp]
mov edx, dword [esp + 0x10]
and ecx, 0xffffffc1
or ecx, 0x41
mov dword [ebp], ecx
push edx
mov ecx, esi
call fcn.100ea3e0
mov ecx, dword [esp + 0x28]
and dword [ebp], 0xefffcdff
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x1c]
mov edx, dword [edi]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x28]
push eax
mov ecx, edi
call dword [edx + 0x18]
mov ecx, dword [esp + 0x48]
add ecx, ecx
and eax, 0xff
add ecx, ecx
shl eax, 5
and ecx, 0x10
or eax, ecx
mov ecx, dword [esi + 0xc]
shl eax, 0x10
and ecx, 0x600fffe0
or eax, ecx
or al, 0x1d
mov ecx, edi
mov dword [esi + 0xc], eax
mov eax, dword [esp + 0x20]
mov edx, dword [edi]
push eax
call dword [edx + 0x1c]
mov edx, dword [edi]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x20]
push eax
mov ecx, edi
call dword [edx + 0x18]
mov ecx, dword [esp + 0x48]
push 7
push ecx
push eax
push 1
push 0
mov ecx, esi
mov dword [esp + 0x28], eax
call fcn.10148970
mov edx, dword [esp + 0x48]
mov eax, dword [esp + 0x14]
push 7
push edx
push eax
push 1
push 1
mov ecx, esi
call fcn.10148970
cmp dword [edi + 0x1c], 0
je 0x10197a04
push 0x10
push ebp
lea ecx, [esp + 0x50]
push ecx
mov ecx, edi
call fcn.100fd200
mov eax, dword [eax]
jmp 0x10197a09
mov eax, 2
mov ecx, eax
test cl, 1
je 0x1019864d
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 4]
mov eax, dword [ebp]
mov ecx, dword [esp + 0x10]
and al, 0x81
or al, 1
push ecx
mov ecx, esi
mov dword [ebp], eax
call fcn.100ea3e0
and dword [ebp], 0xefffcdff
or dword [esi + 0xc], 0x3e0
push 1
push 0
mov ecx, esi
mov dword [esi + 0x14], 0xbbb4c349
call fcn.10142730
mov edx, dword [esi + 0xc]
and edx, 0x600fffe0
or edx, 0x400001c
mov dword [esi + 0xc], edx
cmp dword [edi + 0x1c], 0
je 0x10197a7c
push 0x10
push ebp
lea eax, [esp + 0x50]
push eax
mov ecx, edi
call fcn.100fd200
mov eax, dword [eax]
jmp 0x10197a81
mov eax, 2
mov ecx, eax
test cl, 1
je 0x1019864d
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 4]
mov eax, dword [ebp]
mov ecx, dword [esp + 0x10]
and al, 0xc8
or al, 0x48
push ecx
mov ecx, esi
mov dword [ebp], eax
call fcn.100ea3e0
mov eax, dword [esp + 0x2c]
mov edx, dword [edi]
push eax
mov ecx, edi
call dword [edx + 0x1c]
mov edx, dword [edi]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x2c]
push eax
mov ecx, edi
call dword [edx + 0x18]
mov ecx, dword [esp + 0x48]
add ecx, ecx
and eax, 0xff
add ecx, ecx
shl eax, 5
and ecx, 0x10
or eax, ecx
mov ecx, dword [esi + 0xc]
shl eax, 0x10
and ecx, 0x600fffe0
or eax, ecx
or al, 0x1d
mov ecx, edi
mov dword [esi + 0xc], eax
mov eax, dword [esp + 0x3c]
mov edx, dword [edi]
push eax
call dword [edx + 0x1c]
mov edx, dword [edi]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x3c]
push eax
mov ecx, edi
call dword [edx + 0x18]
mov ecx, dword [esp + 0x48]
push 7
push ecx
push eax
push 1
push 0
mov ecx, esi
call fcn.10148970
or byte [esi + 0xd], 0x7c
mov dword [esi + 0x14], 0x3c7761a7
cmp dword [edi + 0x1c], 0
je 0x10197b40
push 0x10
push ebp
lea edx, [esp + 0x50]
push edx
mov ecx, edi
call fcn.100fd200
mov eax, dword [eax]
jmp 0x10197b45
mov eax, 2
mov ecx, eax
test cl, 1
je 0x1019864d
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov ecx, dword [ebp]
mov edx, dword [esp + 0x10]
and ecx, 0xffffff81
or ecx, 1
mov dword [ebp], ecx
push edx
mov ecx, esi
call fcn.100ea3e0
and dword [ebp], 0xefffcdff
or dword [esi + 0xc], 0x3e0
push 1
push 0
mov ecx, esi
mov dword [esi + 0x14], 0xb6f2e8fa
call fcn.10142730
mov eax, dword [esi + 0xc]
and eax, 0x600fffe0
or eax, 0x400001c
mov dword [esi + 0xc], eax
cmp dword [edi + 0x1c], 0
je 0x10197bb8
push 0x10
push ebp
lea ecx, [esp + 0x50]
push ecx
mov ecx, edi
call fcn.100fd200
mov eax, dword [eax]
jmp 0x10197bbd
mov eax, 2
mov ecx, eax
test cl, 1
je 0x1019864d
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 4]
mov eax, dword [ebp]
mov ecx, dword [esp + 0x10]
and al, 0xc8
or al, 0x48
push ecx
mov ecx, esi
mov dword [ebp], eax
call fcn.100ea3e0
mov edx, dword [esi + 0xc]
mov ecx, dword [esp + 0x3c]
and dword [ebp], 0xefffcdff
and edx, 0x600fffe0
or edx, 0x400001c
mov dword [esi + 0xc], edx
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x1c]
mov edx, dword [edi]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x3c]
push eax
mov ecx, edi
call dword [edx + 0x18]
mov ecx, dword [esp + 0x48]
push 7
push ecx
push eax
push 1
push 0
mov ecx, esi
call fcn.10148970
or byte [esi + 0xd], 0x7c
mov dword [esi + 0x14], 0x400004c7
cmp dword [edi + 0x1c], 0
je 0x10197c51
push 0x10
push ebp
lea edx, [esp + 0x50]
push edx
mov ecx, edi
call fcn.100fd200
mov eax, dword [eax]
jmp 0x10197c56
mov eax, 2
mov ecx, eax
test cl, 1
je 0x1019864d
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov ecx, dword [ebp]
mov edx, dword [esp + 0x10]
and ecx, 0xffffffc8
or ecx, 0x48
mov dword [ebp], ecx
push edx
mov ecx, esi
call fcn.100ea3e0
mov eax, dword [esi + 0xc]
and dword [ebp], 0xefffcdff
and eax, 0x600fffe0
or eax, 0x400001c
mov dword [esi + 0xc], eax
mov eax, dword [esp + 0x24]
mov edx, dword [edi]
push eax
mov ecx, edi
call dword [edx + 0x1c]
mov edx, dword [edi]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x24]
push eax
mov ecx, edi
call dword [edx + 0x18]
mov ecx, dword [esp + 0x48]
push 7
push ecx
push eax
push 1
push 0
mov ecx, esi
call fcn.10148970
mov eax, dword [esp + 0x20]
mov edx, dword [edi]
push eax
mov ecx, edi
call dword [edx + 0x1c]
mov edx, dword [edi]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x20]
push eax
mov ecx, edi
call dword [edx + 0x18]
mov ecx, dword [esp + 0x48]
push 7
push ecx
push eax
push 1
push 1
mov ecx, esi
call fcn.10148970
cmp dword [edi + 0x1c], 0
je 0x10197d0e
push 0x10
push ebp
lea edx, [esp + 0x50]
push edx
mov ecx, edi
call fcn.100fd200
mov eax, dword [eax]
jmp 0x10197d13
mov eax, 2
mov ecx, eax
test cl, 1
je 0x1019864d
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov ecx, dword [ebp]
mov edx, dword [esp + 0x10]
and ecx, 0xffffffc8
or ecx, 0x48
mov dword [ebp], ecx
push edx
mov ecx, esi
call fcn.100ea3e0
mov ecx, dword [esp + 0x38]
and dword [ebp], 0xefffcdff
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x1c]
mov edx, dword [edi]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x38]
push eax
mov ecx, edi
call dword [edx + 0x18]
mov ecx, dword [esp + 0x48]
add ecx, ecx
and eax, 0xff
add ecx, ecx
shl eax, 5
and ecx, 0x10
or eax, ecx
mov ecx, dword [esi + 0xc]
shl eax, 0x10
and ecx, 0x600fffe0
or eax, ecx
or al, 0x1d
mov ecx, edi
mov dword [esi + 0xc], eax
mov eax, dword [esp + 0x2c]
mov edx, dword [edi]
push eax
call dword [edx + 0x1c]
mov edx, dword [edi]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x2c]
push eax
mov ecx, edi
call dword [edx + 0x18]
mov ecx, dword [esp + 0x48]
push 7
push ecx
push eax
push 1
push 0
mov ecx, esi
call fcn.10148970
mov eax, dword [esp + 0x28]
mov edx, dword [edi]
push eax
mov ecx, edi
call dword [edx + 0x1c]
mov edx, dword [edi]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x28]
push eax
mov ecx, edi
call dword [edx + 0x18]
mov ecx, dword [esp + 0x48]
push 7
push ecx
push eax
push 1
push 1
mov ecx, esi
call fcn.10148970
cmp dword [edi + 0x1c], 0
je 0x10197dff
push 0x10
push ebp
lea edx, [esp + 0x50]
push edx
mov ecx, edi
call fcn.100fd200
mov eax, dword [eax]
jmp 0x10197e04
mov eax, 2
mov ecx, eax
test cl, 1
je 0x1019864d
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov ecx, dword [ebp]
mov edx, dword [esp + 0x10]
and ecx, 0xffffffc1
or ecx, 0x41
mov dword [ebp], ecx
push edx
mov ecx, esi
call fcn.100ea3e0
mov ecx, dword [esp + 0x34]
and dword [ebp], 0xefffcdff
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x1c]
mov edx, dword [edi]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x34]
push eax
mov ecx, edi
call dword [edx + 0x18]
mov ecx, dword [esp + 0x48]
add ecx, ecx
and eax, 0xff
add ecx, ecx
shl eax, 5
and ecx, 0x10
or eax, ecx
mov ecx, dword [esi + 0xc]
shl eax, 0x10
and ecx, 0x600fffe0
or eax, ecx
or al, 0x1d
mov ecx, edi
mov dword [esi + 0xc], eax
mov eax, dword [esp + 0x3c]
mov edx, dword [edi]
push eax
call dword [edx + 0x1c]
mov edx, dword [edi]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x3c]
push eax
mov ecx, edi
call dword [edx + 0x18]
mov ecx, dword [esp + 0x48]
push 7
push ecx
push eax
push 1
push 0
mov ecx, esi
call fcn.10148970
or byte [esi + 0xd], 0x7c
mov dword [esi + 0x14], 0x40000000
cmp dword [edi + 0x1c], 0
je 0x10197ecc
push 0x10
push ebp
lea edx, [esp + 0x50]
push edx
mov ecx, edi
call fcn.100fd200
mov eax, dword [eax]
jmp 0x10197ed1
mov eax, 2
mov ecx, eax
test cl, 1
je 0x1019864d
push 0
push 0
push 0
push 0
push 4
push 1
push 1
call fcn.101682d0
mov dword [esp + 0x38], eax
mov eax, dword [esi]
add esp, 0x1c
mov ecx, esi
call dword [eax + 8]
mov ecx, dword [ebp]
mov edx, dword [esp + 0x10]
and ecx, 0xffffffb1
or ecx, 0x31
mov dword [ebp], ecx
push edx
mov ecx, esi
call fcn.100ea3e0
mov eax, dword [ebx + 0x78]
mov edx, dword [esi]
push eax
mov ecx, esi
call dword [edx + 0xc]
mov ecx, dword [esp + 0x34]
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x1c]
mov edx, dword [edi]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x34]
push eax
mov ecx, edi
call dword [edx + 0x18]
mov ecx, dword [esp + 0x48]
add ecx, ecx
add ecx, ecx
mov edx, eax
and edx, 0xff
shl edx, 5
and ecx, 0x10
or edx, ecx
mov ecx, dword [esi + 0xc]
shl edx, 0x10
and ecx, 0x600fffe0
or edx, ecx
or edx, 0x1d
push 7
mov dword [esi + 0xc], edx
mov edx, dword [esp + 0x4c]
push edx
push eax
push 1
push 0
mov ecx, esi
call fcn.10148970
mov ecx, dword [esi + 0xc]
mov eax, dword [esp + 0x1c]
and ch, 0x9f
or ch, 0x1c
mov dword [esi + 0x14], eax
mov dword [esi + 0xc], ecx
cmp dword [edi + 0x1c], 0
je 0x10197fa7
push 0x10
push ebp
lea edx, [esp + 0x50]
push edx
mov ecx, edi
call fcn.100fd200
mov eax, dword [eax]
jmp 0x10197fac
mov eax, 2
mov ecx, eax
test cl, 1
je 0x1019864d
push 0
push 0
push 0
push 0
push 1
push 1
push 1
call fcn.101682d0
mov dword [esp + 0x38], eax
mov eax, dword [esi]
add esp, 0x1c
mov ecx, esi
call dword [eax + 8]
mov ecx, dword [ebp]
mov edx, dword [esp + 0x10]
and ecx, 0xffffffb1
or ecx, 0x31
mov dword [ebp], ecx
push edx
mov ecx, esi
call fcn.100ea3e0
mov eax, dword [ebx + 0x78]
mov edx, dword [esi]
push eax
mov ecx, esi
call dword [edx + 0xc]
mov ecx, dword [esp + 0x34]
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x1c]
mov edx, dword [edi]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x34]
push eax
mov ecx, edi
call dword [edx + 0x18]
mov ecx, dword [esp + 0x48]
add ecx, ecx
add ecx, ecx
mov edx, eax
and edx, 0xff
shl edx, 5
and ecx, 0x10
or edx, ecx
mov ecx, dword [esi + 0xc]
shl edx, 0x10
and ecx, 0x600fffe0
or edx, ecx
or edx, 0x1d
push 7
mov dword [esi + 0xc], edx
mov edx, dword [esp + 0x4c]
push edx
push eax
push 1
push 0
mov ecx, esi
call fcn.10148970
mov ecx, dword [esi + 0xc]
mov eax, dword [esp + 0x1c]
and ch, 0x9f
or ch, 0x1c
mov dword [esi + 0x14], eax
mov dword [esi + 0xc], ecx
cmp dword [edi + 0x1c], 0
je 0x10198082
push 0x10
push ebp
lea edx, [esp + 0x50]
push edx
mov ecx, edi
call fcn.100fd200
mov eax, dword [eax]
jmp 0x10198087
mov eax, 2
mov ecx, eax
test cl, 1
je 0x1019864d
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov ecx, dword [ebp]
mov edx, dword [esp + 0x10]
and ecx, 0xffffffc1
or ecx, 0x41
mov dword [ebp], ecx
push edx
mov ecx, esi
call fcn.100ea3e0
and dword [ebp], 0xefffcdff
mov eax, dword [ebx + 0x4c]
mov ecx, dword [ebx + 0x5c]
mov edx, dword [ecx + eax*4]
mov eax, dword [ebx + 0x68]
mov eax, dword [eax + edx*4]
mov edx, dword [edi]
push eax
mov ecx, edi
mov dword [esp + 0x18], eax
call dword [edx + 0x1c]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x48], eax
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x18]
mov ecx, dword [esp + 0x48]
mov edx, dword [esi + 0xc]
add ecx, ecx
and eax, 0xff
add ecx, ecx
shl eax, 5
and ecx, 0x10
or eax, ecx
mov ecx, dword [esp + 0x38]
shl eax, 0x10
and edx, 0x600fffe0
or eax, edx
or al, 0x1d
push ecx
mov ecx, edi
mov dword [esi + 0xc], eax
mov eax, dword [edi]
call dword [eax + 0x1c]
mov edx, dword [edi]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x38]
push eax
mov ecx, edi
call dword [edx + 0x18]
mov ecx, dword [esp + 0x48]
push 7
push ecx
push eax
push 1
push 0
mov ecx, esi
call fcn.10148970
mov eax, dword [esp + 0x34]
mov edx, dword [edi]
push eax
mov ecx, edi
call dword [edx + 0x1c]
mov edx, dword [edi]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x34]
push eax
mov ecx, edi
call dword [edx + 0x18]
mov ecx, dword [esp + 0x48]
push 7
push ecx
push eax
push 1
push 1
mov ecx, esi
call fcn.10148970
cmp dword [edi + 0x1c], 0
je 0x10198182
push 0x10
push ebp
lea edx, [esp + 0x50]
push edx
mov ecx, edi
call fcn.100fd200
mov eax, dword [eax]
jmp 0x10198187
mov eax, 2
mov ecx, eax
test cl, 1
je 0x1019864d
mov ecx, dword [edi + 0x90]
mov eax, dword [ecx]
mov dword [esp + 0x48], ecx
call dword [eax + 4]
mov ecx, dword [esp + 0x48]
mov edx, dword [ecx + 8]
lea eax, [ecx + 8]
and edx, 0xffffffa4
or edx, 0x24
mov dword [esp + 0x1c], eax
mov dword [eax], edx
mov eax, dword [esp + 0x10]
push eax
call fcn.100ea3e0
mov ecx, dword [esp + 0x48]
push 1
push 0
push 0xa0
push 0
call fcn.100f2e20
mov ecx, dword [esp + 0x48]
push 1
push 0
push 0xa0
push 0
push 0
call fcn.100f2ee0
mov ecx, dword [esp + 0x48]
push 0
push 1
push 0
push 0
call fcn.100ea4b0
mov eax, dword [esp + 0x48]
mov ecx, dword [eax + 0xc]
and ch, 0x9f
or ch, 0x1c
mov dword [eax + 0x14], 0
mov dword [eax + 0xc], ecx
cmp dword [edi + 0x1c], 0
je 0x10198230
mov edx, dword [esp + 0x1c]
push 0x10
push edx
lea eax, [esp + 0x50]
push eax
mov ecx, edi
call fcn.100fd200
mov eax, dword [eax]
jmp 0x10198235
mov eax, 2
mov ecx, eax
test cl, 1
je 0x1019864d
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 4]
mov eax, dword [ebp]
mov ecx, dword [esp + 0x10]
and al, 0x81
or al, 1
push ecx
mov ecx, esi
mov dword [ebp], eax
call fcn.100ea3e0
and dword [ebp], 0xefffcdff
or dword [esi + 0xc], 0x3e0
push 1
push 0
mov ecx, esi
mov dword [esi + 0x14], 0
call fcn.10142730
mov edx, dword [ebx + 0x4c]
mov eax, dword [ebx + 0x5c]
mov ecx, dword [eax + edx*4]
mov edx, dword [ebx + 0x68]
mov eax, dword [edx + ecx*4]
mov edx, dword [edi]
push eax
mov ecx, edi
mov dword [esp + 0x18], eax
call dword [edx + 0x1c]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x48], eax
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x18]
mov ecx, dword [esp + 0x48]
mov edx, dword [esi + 0xc]
and eax, 0xff
add ecx, ecx
shl eax, 5
add ecx, ecx
and ecx, 0x10
or eax, ecx
shl eax, 0x10
and edx, 0x600fffe0
or eax, edx
or al, 0x1d
mov dword [esi + 0xc], eax
cmp dword [edi + 0x1c], 0
je 0x101982e9
push 0x10
push ebp
lea eax, [esp + 0x50]
push eax
mov ecx, edi
call fcn.100fd200
mov eax, dword [eax]
jmp 0x101982ee
mov eax, 2
mov ecx, eax
test cl, 1
je 0x1019864d
mov ecx, dword [edi + 0x90]
mov edx, dword [ecx]
mov dword [esp + 0x48], ecx
call dword [edx + 4]
mov ecx, dword [esp + 0x48]
mov edx, dword [ecx + 8]
lea eax, [ecx + 8]
and edx, 0xffffffa5
or edx, 0x25
mov dword [esp + 0x18], eax
mov dword [eax], edx
mov eax, dword [esp + 0x10]
push eax
call fcn.100ea3e0
push 0
push 0
call fcn.1006dd40
mov ecx, dword [esp + 0x50]
add esp, 8
push 1
push 0
push eax
push 0
mov dword [esp + 0x2c], eax
call fcn.100f2e20
mov ecx, dword [esp + 0x1c]
push 1
push 0
push ecx
mov ecx, dword [esp + 0x54]
push 0
push 0
call fcn.100f2ee0
mov ecx, dword [esp + 0x48]
push 0
push 1
push 0
push 0
call fcn.100ea4b0
mov eax, dword [esp + 0x48]
mov edx, dword [eax + 0xc]
and dh, 0x9f
or dh, 0x1c
mov dword [eax + 0x14], 0
mov dword [eax + 0xc], edx
cmp dword [edi + 0x1c], 0
je 0x101983a3
mov eax, dword [esp + 0x18]
push 0x10
push eax
lea ecx, [esp + 0x50]
push ecx
mov ecx, edi
call fcn.100fd200
mov eax, dword [eax]
jmp 0x101983a8
mov eax, 2
mov ecx, eax
test cl, 1
je 0x1019864d
mov ecx, dword [edi + 0x90]
mov edx, dword [ecx]
mov dword [esp + 0x18], ecx
call dword [edx + 4]
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx + 8]
lea eax, [ecx + 8]
and edx, 0xffffff81
or edx, 1
push 1
mov dword [esp + 0x20], eax
mov dword [eax], edx
call fcn.100ea3e0
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
and ecx, 0xefffffff
or ch, 2
push 2
mov dword [eax], ecx
mov edx, dword [ebx + 0x5c]
mov ecx, dword [ebx + 0x68]
mov eax, dword [edx]
mov eax, dword [ecx + eax*4]
mov ecx, dword [esp + 0x1c]
push eax
push 0x30
push 0
call fcn.100f2e20
mov eax, dword [esp + 0x30]
mov edx, dword [edi]
push eax
mov ecx, edi
call dword [edx + 0x1c]
mov edx, dword [edi]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x30]
push eax
mov ecx, edi
call dword [edx + 0x18]
mov ecx, dword [esp + 0x48]
push 2
lea edx, [ecx + ecx]
mov ecx, dword [esp + 0x1c]
push edx
push eax
push 1
push 0
call fcn.100f2ee0
mov ecx, dword [esp + 0x18]
push 0
push 1
push 0
push 0
call fcn.100ea4b0
cmp dword [edi + 0x1c], 0
je 0x1019846d
mov eax, dword [esp + 0x1c]
push 0x10
push eax
lea ecx, [esp + 0x50]
push ecx
mov ecx, edi
call fcn.100fd200
mov eax, dword [eax]
jmp 0x10198472
mov eax, 2
mov ecx, eax
test cl, 1
je 0x1019864d
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 4]
mov eax, dword [esp + 0x10]
push eax
mov ecx, esi
call fcn.100ea3e0
mov ecx, dword [ebp]
and ecx, 0xeff1cdc0
or ecx, 0x10040
mov dword [ebp], ecx
mov edx, dword [ebx + 0x5c]
mov eax, dword [edx]
mov ecx, dword [ebx + 0x68]
mov eax, dword [ecx + eax*4]
sub eax, 0
je 0x101984bd
sub eax, 1
jne 0x101984c1
or byte [esi + 0x13], 2
jmp 0x101984c1
and byte [esi + 0x13], 0xfd
mov edx, dword [ebx + 0x4c]
mov eax, dword [ebx + 0x5c]
mov ecx, dword [eax + edx*4]
mov edx, dword [ebx + 0x68]
mov eax, dword [edx + ecx*4]
mov edx, dword [edi]
push eax
mov ecx, edi
mov dword [esp + 0x18], eax
call dword [edx + 0x1c]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x48], eax
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x18]
mov ecx, dword [esp + 0x48]
or byte [esi + 0x11], 0x40
add ecx, ecx
add ecx, ecx
mov edx, eax
and edx, 0xff
shl edx, 5
and ecx, 0x10
or edx, ecx
mov ecx, dword [esi + 0xc]
shl edx, 0x10
and ecx, 0x600fffe0
or edx, ecx
or edx, 0x1d
push 7
mov dword [esi + 0xc], edx
mov edx, dword [esp + 0x4c]
push edx
push eax
push 1
push 0
mov ecx, esi
call fcn.10148970
or byte [esi + 0xd], 0x7c
mov dword [esi + 0x14], 0x40490fda
cmp dword [edi + 0x1c], 0
je 0x10198553
push 0x10
push ebp
lea eax, [esp + 0x50]
push eax
mov ecx, edi
call fcn.100fd200
mov eax, dword [eax]
jmp 0x10198558
mov eax, 2
mov ecx, eax
test cl, 1
je 0x1019864d
cmp byte [ebx + 0xa2], 0
je 0x1019864d
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 4]
mov eax, dword [ebp]
mov ecx, dword [esp + 0x10]
and al, 0x81
or al, 1
push ecx
mov ecx, esi
mov dword [ebp], eax
call fcn.100ea3e0
mov edx, dword [ebp]
and edx, 0xefffcdff
or edx, 0x80000000
mov dword [ebp], edx
mov eax, dword [ebx + 0x4c]
mov ecx, dword [ebx + 0x5c]
mov edx, dword [ecx + eax*4]
mov eax, dword [ebx + 0x68]
mov eax, dword [eax + edx*4]
mov edx, dword [edi]
push eax
mov ecx, edi
mov dword [esp + 0x18], eax
call dword [edx + 0x1c]
mov ecx, dword [esp + 0x14]
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x18]
mov edx, dword [esi + 0xc]
and eax, 0xff
shl eax, 0x15
and edx, 0x600fffe0
or eax, edx
or al, 0x1d
mov dword [esi + 0xc], eax
mov eax, dword [ebx + 0x4c]
mov ecx, dword [ebx + 0x5c]
mov edx, dword [ecx + eax*4]
mov eax, dword [ebx + 0x68]
mov ebx, dword [eax + edx*4]
mov edx, dword [edi]
push ebx
mov ecx, edi
call dword [edx + 0x1c]
mov eax, dword [edi]
push ebx
mov ecx, edi
call dword [eax + 0x18]
push 7
push 0
push eax
push 1
push 0
mov ecx, esi
call fcn.10148970
cmp dword [edi + 0x1c], 0
je 0x10198636
push 0x10
push ebp
lea ecx, [esp + 0x50]
push ecx
mov ecx, edi
call fcn.100fd200
mov eax, dword [eax]
mov ecx, dword [esp + 0x44]
pop edi
pop esi
pop ebp
mov dword [ecx], eax
mov eax, ecx
pop ebx
add esp, 0x30
ret 8
mov ecx, dword [esp + 0x44]
pop edi
pop esi
mov eax, 2
pop ebp
mov dword [ecx], eax
mov eax, ecx
pop ebx
add esp, 0x30
ret 8
mov eax, dword [esp + 0x44]
pop edi
pop esi
pop ebp
mov dword [eax], ecx
pop ebx
add esp, 0x30
ret 8