Function at 0x88180
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff8
xor edx, edx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00083980
xor eax, eax
push ebp
push 0x88def
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 8]
mov edx, dword [ebp - 4]
mov eax, 0x88e04
call fcn.00087a18
mov eax, 0x9c778
mov edx, dword [ebp - 8]
mov edx, dword [edx]
call fcn.00083d88
mov eax, 0x9c780
mov edx, dword [ebp - 8]
mov edx, dword [edx + 4]
call fcn.00083d88
mov eax, 0x9c784
mov edx, dword [ebp - 8]
mov edx, dword [edx + 8]
call fcn.00083d88
mov eax, 0x9c788
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xc]
call fcn.00083d88
mov eax, 0x9c78c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x10]
call fcn.00083d88
mov eax, 0x9c790
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x14]
call fcn.00083d88
mov eax, 0x9c77c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x18]
call fcn.00083d88
mov eax, 0x9c7a4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1c]
call fcn.00083d88
mov eax, 0x9c7a8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x20]
call fcn.00083d88
mov eax, 0x9c7ac
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x24]
call fcn.00083d88
mov eax, 0x9c7c0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x28]
call fcn.00083d88
mov eax, 0x9c7c8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x2c]
call fcn.00083d88
mov eax, 0x9c7cc
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x30]
call fcn.00083d88
mov eax, 0x9c7d0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x34]
call fcn.00083d88
mov eax, 0x9c7d4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x38]
call fcn.00083d88
mov eax, 0x9c7c4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x3c]
call fcn.00083d88
mov eax, 0x9c810
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x40]
call fcn.00083538
mov eax, 0x9c814
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x44]
call fcn.00083538
mov eax, 0x9c7d8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x48]
call fcn.00083538
mov eax, 0x9c7dc
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x4c]
call fcn.00083538
mov eax, 0x9c7e0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x50]
call fcn.00083538
mov eax, 0x9c7e4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x54]
call fcn.00083538
mov eax, 0x9c7e8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x58]
call fcn.00083538
mov eax, 0x9c7ec
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x5c]
call fcn.00083538
mov eax, 0x9c7f0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x60]
call fcn.00083d88
mov eax, 0x9c7f4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x64]
call fcn.00083538
mov eax, 0x9c7f8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x68]
call fcn.00083538
mov eax, 0x9c7fc
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x6c]
call fcn.00083538
mov eax, 0x9c800
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x70]
call fcn.00083538
mov eax, 0x9c804
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x74]
call fcn.00083538
mov eax, 0x9c808
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x78]
call fcn.00083d88
mov eax, 0x9c80c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x7c]
call fcn.00083d88
mov eax, 0x9c818
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x80]
call fcn.00083d88
mov eax, 0x9c81c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x84]
call fcn.00083d88
mov eax, 0x9c820
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x88]
call fcn.00083d88
mov eax, 0x9c824
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x8c]
call fcn.00083d88
mov eax, 0x9c828
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x90]
call fcn.00083d88
mov eax, 0x9c82c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x94]
call fcn.00083d88
mov eax, 0x9c830
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x98]
call fcn.00083d88
mov eax, 0x9c834
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x9c]
call fcn.00083d88
mov eax, 0x9c838
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xa0]
call fcn.00083d88
mov eax, 0x9c83c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xa4]
call fcn.00083d88
mov eax, 0x9c840
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xa8]
call fcn.00083d88
mov eax, 0x9c844
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xac]
call fcn.00083d88
mov eax, 0x9c848
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xb0]
call fcn.00083d88
mov eax, 0x9c84c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xb4]
call fcn.00083d88
mov eax, 0x9c850
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xb8]
call fcn.00083d88
mov eax, 0x9c854
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xbc]
call fcn.00083d88
mov eax, 0x9c858
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xc0]
call fcn.00083d88
mov eax, 0x9c85c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xc4]
call fcn.00083d88
mov eax, 0x9c860
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xc8]
call fcn.00083d88
mov eax, 0x9c864
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xcc]
call fcn.00083d88
mov eax, 0x9c868
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xd0]
call fcn.00083d88
mov eax, 0x9c86c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xd4]
call fcn.00083d88
mov eax, 0x9c870
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xd8]
call fcn.00083d88
mov eax, 0x9c874
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xdc]
call fcn.00083d88
mov eax, 0x9c878
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xe0]
call fcn.00083d88
mov eax, 0x9c87c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xe4]
call fcn.00083d88
mov eax, 0x9c880
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xe8]
call fcn.00083d88
mov eax, 0x9c884
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xec]
call fcn.00083d88
mov eax, 0x9c888
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xf0]
call fcn.00083d88
mov eax, 0x9c88c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xf4]
call fcn.00083d88
mov eax, 0x9c890
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xf8]
call fcn.00083d88
mov eax, 0x9c894
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xfc]
call fcn.00083d88
mov eax, 0x9c898
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x100]
call fcn.00083d88
mov eax, 0x9c89c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x104]
call fcn.00083d88
mov eax, 0x9c8a0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x108]
call fcn.00083d88
mov eax, 0x9c8a4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x10c]
call fcn.00083d88
mov eax, 0x9c8a8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x110]
call fcn.00083d88
mov eax, 0x9c8ac
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x114]
call fcn.00083d88
mov eax, 0x9c8b0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x118]
call fcn.00083d88
mov eax, 0x9c8b4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x11c]
call fcn.00083d88
mov eax, 0x9c8b8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x120]
call fcn.00083d88
mov eax, 0x9c8bc
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x124]
call fcn.00083d88
mov eax, 0x9c8c0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x128]
call fcn.00083d88
mov eax, 0x9c8c4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x12c]
call fcn.00083d88
mov eax, 0x9c8c8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x130]
call fcn.00083d88
mov eax, 0x9c8cc
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x134]
call fcn.00083d88
mov eax, 0x9c8d0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x138]
call fcn.00083d88
mov eax, 0x9c8d4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x13c]
call fcn.00083d88
mov eax, 0x9c8d8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x140]
call fcn.00083d88
mov eax, 0x9c8dc
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x144]
call fcn.00083d88
mov eax, 0x9c8e0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x148]
call fcn.00083d88
mov eax, 0x9c8e4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x14c]
call fcn.00083d88
mov eax, 0x9c8e8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x150]
call fcn.00083d88
mov eax, 0x9c8ec
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x154]
call fcn.00083d88
mov eax, 0x9c8f0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x158]
call fcn.00083d88
mov eax, 0x9c8f4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x15c]
call fcn.00083d88
mov eax, 0x9c8f8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x160]
call fcn.00083d88
mov eax, 0x9c8fc
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x164]
call fcn.00083d88
mov eax, 0x9c900
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x168]
call fcn.00083d88
mov eax, 0x9c904
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x16c]
call fcn.00083d88
mov eax, 0x9c908
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x170]
call fcn.00083d88
mov eax, 0x9c90c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x174]
call fcn.00083d88
mov eax, 0x9c910
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x178]
call fcn.00083d88
mov eax, 0x9c914
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x17c]
call fcn.00083d88
mov eax, 0x9c918
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x180]
call fcn.00083d88
mov eax, 0x9c91c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x184]
call fcn.00083d88
mov eax, 0x9c920
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x188]
call fcn.00083538
mov eax, 0x9c924
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x18c]
call fcn.00083538
mov eax, 0x9c92c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x190]
call fcn.00083538
mov eax, 0x9c930
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x194]
call fcn.00083538
mov eax, 0x9c934
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x198]
call fcn.00083538
mov eax, 0x9c938
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x19c]
call fcn.00083d88
mov eax, 0x9c93c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1a0]
call fcn.00083d88
mov eax, 0x9c940
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1a4]
call fcn.00083d88
mov eax, 0x9c944
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1a8]
call fcn.00083d88
mov eax, 0x9c948
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1ac]
call fcn.00083d88
mov eax, 0x9c94c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1b0]
call fcn.00083d88
mov eax, 0x9c950
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1b4]
call fcn.00083d88
mov eax, 0x9c954
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1b8]
call fcn.00083d88
mov eax, 0x9c958
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1bc]
call fcn.00083d88
mov eax, 0x9c95c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1c0]
call fcn.00083d88
mov eax, 0x9c960
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1c4]
call fcn.00083d88
mov eax, 0x9c964
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1c8]
call fcn.00083d88
mov eax, 0x9c968
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1cc]
call fcn.00083d88
mov eax, 0x9c96c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1d0]
call fcn.00083d88
mov eax, 0x9c970
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1d4]
call fcn.00083d88
mov eax, 0x9c974
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1d8]
call fcn.00083d88
mov eax, 0x9c978
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1dc]
call fcn.00083d88
mov eax, 0x9c97c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1e0]
call fcn.00083d88
mov eax, 0x9c980
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1e4]
call fcn.00083d88
mov eax, 0x9c984
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1e8]
call fcn.00083538
mov eax, 0x9c988
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1ec]
call fcn.00083538
mov eax, 0x9c98c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1f0]
call fcn.00083538
mov eax, 0x9c990
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1f4]
call fcn.00083538
mov eax, 0x9c794
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1f8]
call fcn.00083d88
mov eax, 0x9c7b0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1fc]
call fcn.00083d88
mov eax, 0x9c79c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x200]
call fcn.00083d88
mov eax, 0x9c7b8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x204]
call fcn.00083d88
mov eax, 0x9c798
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x208]
call fcn.00083d88
mov eax, 0x9c7b4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x20c]
call fcn.00083d88
mov eax, 0x9c994
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x210]
call fcn.00083538
mov eax, 0x9c998
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x214]
call fcn.00083538
mov eax, 0x9c99c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x218]
call fcn.00083538
mov eax, 0x9c9a0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x21c]
call fcn.00083538
mov eax, 0x9c9a4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x220]
call fcn.00083538
mov eax, 0x9c9a8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x224]
call fcn.00083538
mov eax, 0x9c9ac
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x228]
call fcn.00083538
mov eax, 0x9c9b0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x22c]
call fcn.00083d88
mov eax, 0x9c9b8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x230]
call fcn.00083538
mov eax, 0x9c9bc
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x234]
call fcn.00083538
mov eax, 0x9c9c0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x238]
call fcn.00083538
mov eax, 0x9c9c4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x23c]
call fcn.00083538
mov eax, 0x9c9c8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x240]
call fcn.00083538
mov eax, 0x9c9cc
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x244]
call fcn.00083538
mov eax, 0x9c9d0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x248]
call fcn.00083538
mov eax, 0x9c9d4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x24c]
call fcn.00083538
mov eax, 0x9c9d8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x250]
call fcn.00083538
mov eax, 0x9c9dc
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x254]
call fcn.00083538
mov eax, 0x9c9e0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x258]
call fcn.00083538
mov eax, 0x9c9e4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x25c]
call fcn.00083538
mov eax, 0x9c9e8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x260]
call fcn.00083538
mov eax, 0x9c9ec
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x264]
call fcn.00083538
mov eax, 0x9c9f0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x268]
call fcn.00083538
mov eax, 0x9c9f4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x26c]
call fcn.00083538
mov eax, 0x9c9f8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x270]
call fcn.00083538
mov eax, 0x9c9fc
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x274]
call fcn.00083538
mov eax, 0x9ca00
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x278]
call fcn.00083538
mov eax, 0x9ca04
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x27c]
call fcn.00083538
mov eax, 0x9ca08
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x280]
call fcn.00083538
mov eax, 0x9ca0c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x284]
call fcn.00083538
mov eax, 0x9ca10
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x288]
call fcn.00083538
mov eax, 0x9ca14
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x28c]
call fcn.00083538
mov eax, 0x9ca18
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x290]
call fcn.00083538
mov eax, 0x9c928
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x294]
call fcn.00083538
mov eax, 0x9c7a0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x298]
call fcn.00083d88
mov eax, 0x9c7bc
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x29c]
call fcn.00083d88
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x88df6
lea eax, [ebp - 8]
mov edx, dword [0x85f50]
call fcn.00084810
lea eax, [ebp - 4]
call fcn.000834e4
ret