Function at 0x10001060
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
test byte [esi + 8], 1
je 0x10001081
mov eax, dword [esi + 0xc]
lea esp, [ebp - 0x38]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [esi + 4]
test al, 1
je 0x10001097
add dword [esi + 0x40], esi
add dword [esi + 0x48], esi
cmp dword [esi + 0x58], 0
je 0x10001097
add dword [esi + 0x60], esi
test al, 2
je 0x100010f5
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov ecx, dword [eax + 0xc]
mov eax, 0x5a4d
and ecx, 0xffff0000
cmp word [ecx], ax
je 0x100010cb
nop word [eax + eax]
sub ecx, 0x10000
cmp word [ecx], ax
jne 0x100010c0
mov eax, dword [esi + 0x20]
lea ebx, [esi + 0x20]
add dword [esi + 0x10], ecx
lea edx, [esi + 0x10]
add dword [esi + 0x18], ecx
add eax, ecx
mov dword [ebp - 0x10], eax
mov dword [ebx], eax
mov eax, dword [esi + 0x28]
test eax, eax
je 0x100010ed
add eax, ecx
mov dword [esi + 0x28], eax
add dword [esi + 0x30], ecx
mov ecx, dword [ebp - 0x10]
jmp 0x100010fe
mov ecx, dword [esi + 0x20]
lea ebx, [esi + 0x20]
lea edx, [esi + 0x10]
mov eax, dword [esi + 0x40]
xor edi, edi
mov dword [ebp - 8], eax
mov eax, ebx
mov dword [ebp - 4], 0
mov dword [ebp - 0x10], edi
cmp dword [ebp - 8], edi
je 0x100011ba
mov dword [ebp - 0x14], edx
cmp dword [esi + 0x28], edi
je 0x10001210
mov eax, dword fs:[0x18]
xorps xmm0, xmm0
push dword [ebp - 8]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x10]
mov edi, dword [eax + 0x48]
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x14], edi
mov dword [ebp + 8], 0
movlpd qword [ebp - 0x2c], xmm0
call ecx
lea eax, [ebp + 8]
xorps xmm0, xmm0
push eax
lea eax, [ebp - 0x1c]
movlpd qword [ebp - 0x1c], xmm0
push eax
lea eax, [ebp - 0x2c]
push eax
mov eax, dword [esi + 0x28]
push edi
call eax
mov edi, dword [ebp + 8]
add edi, 0xf
and edi, 0xfffffff0
mov dword [ebp + 8], edi
cmp eax, 0xc0000023
jne 0x100011f6
mov eax, edi
call sym.RpaHelper.dll_Ordinal_1
mov ecx, esp
mov dword [ebp - 0x10], ecx
test ecx, ecx
je 0x100011f6
xor eax, eax
mov word [ebp - 0xa], di
mov word [ebp - 0xc], ax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x18], ecx
push eax
lea eax, [ebp - 0x2c]
push eax
push dword [ebp - 0x14]
mov eax, dword [esi + 0x28]
call eax
mov edi, eax
lea eax, [esi + 0x20]
lea ebx, [esi + 0x10]
push dword [esi + 0x48]
mov eax, dword [eax]
lea ecx, [ebp - 0x24]
xorps xmm0, xmm0
push ecx
movlpd qword [ebp - 0x24], xmm0
call eax
test edi, edi
js 0x10001238
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [ebx]
push 0
push dword [ebp - 0x10]
call eax
mov edi, eax
test edi, edi
js 0x10001238
mov ecx, dword [esi + 0x38]
test ecx, ecx
jne 0x10001215
xor edi, edi
jmp 0x10001238
push dword [esi + 0x48]
lea eax, [ebp - 0x24]
xorps xmm0, xmm0
push eax
mov eax, dword [ebx]
mov edi, 0xc00000fd
movlpd qword [ebp - 0x24], xmm0
call eax
jmp 0x10001238
mov ebx, dword [ebp - 0x14]
jmp 0x100011bd
cmp ecx, 0xffffffff
je 0x10001238
push dword [esi + 0x58]
mov eax, dword [ebp - 4]
push dword [esi + 0x60]
add eax, ecx
push dword [esi + 0x50]
call eax
mov edi, eax
test edi, edi
jns 0x10001238
push dword [ebp - 4]
mov eax, dword [esi + 0x18]
call eax
test byte [esi + 8], 2
je 0x10001246
mov eax, dword [esi + 0x30]
push edi
push 0
call eax
mov eax, edi
lea esp, [ebp - 0x38]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4