Function at 0x1a66ea1
Capabilities:
Access peb ldr_data

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x3c
and dword [esp + 4], 0
and dword [esp], 0
mov eax, dword [0x1ac87fc]
push ebx
push esi
xor esi, esi
push edi
mov edi, 0xc0000001
test eax, eax
je 0x1a66ed8
cmp dword [0x1ac58d8], 0xffffffff
je 0x1a66ed8
xor eax, eax
jmp 0x1a671bd
cmp dword [0x1ac87f8], esi
jne 0x1a66eef
call fcn.01a6724e
mov dword [0x1ac87f8], eax
mov eax, dword [0x1ac87fc]
test eax, eax
jne 0x1a67183
and dword [esp + 0xc], esi
lea eax, [esp + 0x1c]
push 4
push 0x1000
push eax
push 0
lea eax, [esp + 0x1c]
mov dword [esp + 0x2c], 0x22c
push eax
push 0xffffffffffffffff
call fcn.01a22ac0
mov edi, eax
test edi, edi
js 0x1a671ab
mov esi, dword [esp + 0xc]
mov eax, dword [esp + 0x1c]
add eax, esi
mov dword [esp + 0x18], eax
lea ebx, [esi + 0x22c]
cmp ebx, eax
jbe 0x1a66f49
mov edi, 0xc0000023
jmp 0x1a67191
mov eax, dword fs:[0x30]
mov edx, 0x104
mov eax, dword [eax + 0x10]
movzx eax, word [eax + 0x38]
shr eax, 1
mov dword [esp + 0x28], eax
mov eax, dword fs:[0x30]
mov ecx, dword [esp + 0xc]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0x3c]
push eax
mov dword [esp + 0x28], eax
call fcn.01a66d9e
test eax, eax
jns 0x1a66f8a
cmp eax, 0x8007007a
jne 0x1a67191
mov edi, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
lea ecx, [edi - 1]
lea ecx, [edx + ecx*2]
jmp 0x1a66faa
movzx eax, word [ecx]
cmp eax, 0x5c
je 0x1a66fb0
cmp eax, 0x2f
je 0x1a66fb0
sub ecx, 2
cmp ecx, edx
ja 0x1a66f9a
jmp 0x1a66fb3
add ecx, 2
mov eax, ecx
sub eax, edx
sar eax, 1
sub edi, eax
mov edx, edi
call fcn.01a66d14
mov ecx, dword fs:[0x30]
xor edx, edx
mov dword [esi + 0x208], eax
lea eax, [esp + 0x38]
push eax
mov ecx, dword [ecx + 8]
call fcn.01a09035
mov eax, dword [esp + 0x38]
mov dword [esi + 0x214], eax
mov eax, dword [esp + 0x40]
mov dword [esi + 0x20c], eax
mov eax, dword [esp + 0x44]
mov dword [esi + 0x210], eax
lea eax, [esp + 0x10]
push eax
push 8
push 0xffffffffffffffff
call fcn.01a23b30
mov edi, eax
test edi, edi
js 0x1a67191
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x14]
push ecx
sub eax, ebx
push eax
push ebx
push 1
push dword [esp + 0x20]
mov dword [esp + 0x28], eax
call fcn.01a22b70
mov edi, eax
test edi, edi
js 0x1a67191
mov eax, dword [esp + 0x14]
add eax, 3
shr eax, 2
lea eax, [ebx + eax*4]
mov dword [esp + 0x28], eax
cmp eax, dword [esp + 0x18]
ja 0x1a66f3f
mov eax, dword [ebx]
mov dword [esi + 0x218], eax
lea eax, [esp + 0x14]
push eax
push 4
lea eax, [esp + 0x28]
mov dword [esi + 0x224], 0x40000000
push eax
push 0x12
push dword [esp + 0x20]
call fcn.01a22b70
test eax, eax
js 0x1a670bf
cmp dword [esp + 0x20], 2
jne 0x1a67095
mov dword [esi + 0x224], 0xc0000000
jmp 0x1a670bf
cmp dword [esp + 0x20], 1
jne 0x1a670bf
mov ecx, dword [ebx]
movzx eax, byte [ecx + 1]
cmp dword [ecx + eax*4 + 4], 0x1f4
jne 0x1a670b8
mov dword [esi + 0x224], 0x80000000
jmp 0x1a670bf
and dword [esi + 0x224], 0
lea eax, [esp + 0x2c]
push eax
push dword [esi + 0x218]
call fcn.019ec7e0
mov edi, eax
test edi, edi
js 0x1a67191
mov edi, dword [esp + 0x2c]
lea ebx, [esi + 0x21c]
mov ecx, dword [esp + 0x28]
xor eax, eax
mov word [ebx], ax
mov dword [esi + 0x220], ecx
lea eax, [edi + 0x5a]
mov word [esi + 0x21e], ax
movzx eax, ax
add eax, ecx
cmp eax, dword [esp + 0x18]
ja 0x1a66f3f
push 0x19b4f58
push ebx
call fcn.019eccf0
xor eax, eax
mov word [esp + 0x32], di
mov word [esp + 0x30], ax
movzx ecx, word [ebx]
mov eax, dword [esi + 0x220]
shr ecx, 1
push 0
lea eax, [eax + ecx*2]
mov dword [esp + 0x38], eax
lea eax, [esp + 0x34]
push dword [esi + 0x218]
push eax
call fcn.019ec830
mov edi, eax
test edi, edi
js 0x1a67191
mov ax, word [esp + 0x30]
add word [ebx], ax
push 0x19bf718
push ebx
call fcn.019eccf0
mov edi, eax
test edi, edi
js 0x1a67191
call fcn.01a672d2
mov dword [esi + 0x228], eax
mov ecx, esi
mov edx, 0x1ac87fc
xor eax, eax
lock cmpxchg dword [edx], ecx
neg eax
sbb eax, eax
and esi, eax
mov eax, dword [0x1ac58d8]
inc eax
neg eax
sbb eax, eax
not eax
and edi, eax
test esi, esi
je 0x1a671ab
push 0x8000
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x14]
push eax
push 0xffffffffffffffff
call fcn.01a22b40
cmp dword [esp + 0x10], 0
je 0x1a671bb
push dword [esp + 0x10]
call fcn.01a22a30
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret