Function at 0x100123d0
Capabilities:
Check for peb ntglobalflag flag

Disassembly:
push 0xffffffffffffffff
push 0x100d42b0
mov eax, dword fs:[0]
push eax
sub esp, 0x70
push ebx
push ebp
push esi
push edi
mov eax, dword [0x100ff2f0]
xor eax, esp
push eax
lea eax, [esp + 0x84]
mov dword fs:[0], eax
mov edi, ecx
push 1
xor ebx, ebx
mov esi, 0xf
push 0x100ee2f8
lea ecx, [esp + 0x54]
mov dword [esp + 0x6c], esi
mov dword [esp + 0x68], ebx
mov byte [esp + 0x58], bl
call fcn.10002cc0
mov dword [esp + 0x8c], ebx
push 5
push str.amp_
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], esi
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.10002cc0
lea eax, [esp + 0x4c]
push eax
lea ebx, [esp + 0x18]
mov byte [esp + 0x90], 1
call fcn.10012370
mov ebp, 0x10
add esp, 4
cmp dword [esp + 0x2c], ebp
jb 0x10012473
mov ecx, dword [esp + 0x18]
push ecx
call fcn.100b2ba3
add esp, 4
xor ebx, ebx
mov dword [esp + 0x8c], 0xffffffff
mov dword [esp + 0x2c], esi
mov dword [esp + 0x28], ebx
mov byte [esp + 0x18], bl
cmp dword [esp + 0x64], ebp
jb 0x1001249f
mov edx, dword [esp + 0x50]
push edx
call fcn.100b2ba3
add esp, 4
push 1
push 0x100ee07c
lea ecx, [esp + 0x54]
mov dword [esp + 0x6c], esi
mov dword [esp + 0x68], ebx
mov byte [esp + 0x58], bl
call fcn.10002cc0
mov dword [esp + 0x8c], 2
push 4
push str.lt_
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], esi
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.10002cc0
lea eax, [esp + 0x4c]
push eax
lea ebx, [esp + 0x18]
mov byte [esp + 0x90], 3
call fcn.10012370
add esp, 4
cmp dword [esp + 0x2c], ebp
jb 0x1001250e
mov ecx, dword [esp + 0x18]
push ecx
call fcn.100b2ba3
add esp, 4
xor ebx, ebx
mov dword [esp + 0x8c], 0xffffffff
mov dword [esp + 0x2c], esi
mov dword [esp + 0x28], ebx
mov byte [esp + 0x18], bl
cmp dword [esp + 0x64], ebp
jb 0x1001253a
mov edx, dword [esp + 0x50]
push edx
call fcn.100b2ba3
add esp, 4
push 1
push 0x100ee080
lea ecx, [esp + 0x54]
mov dword [esp + 0x6c], esi
mov dword [esp + 0x68], ebx
mov byte [esp + 0x58], bl
call fcn.10002cc0
mov dword [esp + 0x8c], 4
push 4
push str.gt_
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], esi
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.10002cc0
lea eax, [esp + 0x4c]
push eax
lea ebx, [esp + 0x18]
mov byte [esp + 0x90], 5
call fcn.10012370
add esp, 4
cmp dword [esp + 0x2c], ebp
jb 0x100125a9
mov ecx, dword [esp + 0x18]
push ecx
call fcn.100b2ba3
add esp, 4
xor ebx, ebx
mov dword [esp + 0x8c], 0xffffffff
mov dword [esp + 0x2c], esi
mov dword [esp + 0x28], ebx
mov byte [esp + 0x18], bl
cmp dword [esp + 0x64], ebp
jb 0x100125d5
mov edx, dword [esp + 0x50]
push edx
call fcn.100b2ba3
add esp, 4
push 1
push 0x100ee2fc
lea ecx, [esp + 0x54]
mov dword [esp + 0x6c], esi
mov dword [esp + 0x68], ebx
mov byte [esp + 0x58], bl
call fcn.10002cc0
mov dword [esp + 0x8c], 6
push 6
push str.apos_
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], esi
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.10002cc0
lea eax, [esp + 0x4c]
push eax
lea ebx, [esp + 0x18]
mov byte [esp + 0x90], 7
call fcn.10012370
add esp, 4
cmp dword [esp + 0x2c], ebp
jb 0x10012644
mov ecx, dword [esp + 0x18]
push ecx
call fcn.100b2ba3
add esp, 4
xor ebx, ebx
mov dword [esp + 0x8c], 0xffffffff
mov dword [esp + 0x2c], esi
mov dword [esp + 0x28], ebx
mov byte [esp + 0x18], bl
cmp dword [esp + 0x64], ebp
jb 0x10012670
mov edx, dword [esp + 0x50]
push edx
call fcn.100b2ba3
add esp, 4
push 1
push 0x100ee300
lea ecx, [esp + 0x70]
mov dword [esp + 0x88], esi
mov dword [esp + 0x84], ebx
mov byte [esp + 0x74], bl
call fcn.10002cc0
mov dword [esp + 0x8c], 8
push 6
push str.quot_
lea ecx, [esp + 0x38]
mov dword [esp + 0x50], esi
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x3c], bl
call fcn.10002cc0
lea eax, [esp + 0x68]
push eax
lea ebx, [esp + 0x34]
mov byte [esp + 0x90], 9
call fcn.10012370
add esp, 4
cmp dword [esp + 0x48], ebp
jb 0x100126e5
mov ecx, dword [esp + 0x34]
push ecx
call fcn.100b2ba3
add esp, 4
xor eax, eax
mov dword [esp + 0x48], esi
mov dword [esp + 0x44], eax
mov byte [esp + 0x34], al
cmp dword [esp + 0x80], ebp
jb 0x10012709
mov edx, dword [esp + 0x6c]
push edx
call fcn.100b2ba3
add esp, 4
mov ecx, dword [esp + 0x84]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x7c
ret