Function at 0x10feec
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff0
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x10], ecx
mov ebx, edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x1102e3
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
cmp dword [eax + 0x28], 0
je 0x1102cd
mov eax, ebx
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x24]
call fcn.000140bc
jne 0x1102cd
mov eax, dword [ebp - 4]
mov eax, dword [eax + 8]
cmp dword [eax + 0x18], 0
jne 0x10ffcd
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x20]
mov esi, dword [eax + 8]
call fcn.0010fa0c
mov ebx, eax
test esi, esi
je 0x10ff71
lea ecx, [ebp - 0x10]
mov edx, esi
dec edx
mov eax, dword [ebp - 4]
call fcn.0010fdac
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x28]
call fcn.0001898c
test eax, eax
je 0x10ff7f
lea eax, [ebx + 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x28]
call fcn.00013d80
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2c]
mov dword [ebx + 8], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x14]
mov dword [ebx + 0x10], edx
mov edx, dword [eax + 0x18]
mov dword [ebx + 0x14], edx
jmp 0x10ffaf
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x20]
xor edx, edx
call fcn.0010fa2c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3c]
test eax, eax
jle 0x1102c2
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x20]
cmp eax, dword [edx + 8]
jl 0x10ffa2
jmp 0x1102c2
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x28]
mov eax, dword [0x1c4c6c]
mov eax, dword [eax]
call fcn.00197750
test al, al
je 0x1102c2
xor edi, edi
mov eax, dword [0x1c4dbc]
mov eax, dword [eax]
mov eax, dword [eax + 0x38]
mov esi, dword [eax + 8]
dec esi
test esi, esi
jl 0x11003a
inc esi
xor ebx, ebx
mov eax, dword [0x1c4dbc]
mov eax, dword [eax]
mov eax, dword [eax + 0x38]
mov edx, ebx
call fcn.0018bf78
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x28]
call fcn.0001898c
test eax, eax
jne 0x110036
mov eax, dword [0x1c4dbc]
mov eax, dword [eax]
mov eax, dword [eax + 0x38]
mov edx, ebx
call fcn.0018bf78
mov edi, eax
jmp 0x11003a
inc ebx
dec esi
jne 0x10fffe
test edi, edi
jne 0x110067
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x28]
mov eax, dword [0x1c4dbc]
mov eax, dword [eax]
mov eax, dword [eax + 0x38]
xor ecx, ecx
call fcn.0018c004
mov edi, eax
test edi, edi
je 0x1102cd
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x40], edx
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x2c]
test ebx, ebx
jl 0x1102cd
mov eax, dword [edi + 8]
cmp ebx, dword [eax + 8]
jge 0x1102cd
mov edx, ebx
mov eax, dword [edi + 8]
call fcn.0018aa70
mov edx, dword [0x189bf4]
call fcn.0001317c
test al, al
je 0x1102cd
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2c]
mov eax, dword [edi + 8]
call fcn.0018aa70
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x40]
je 0x1100fb
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2c]
mov eax, dword [edi + 8]
call fcn.0018aa70
mov ebx, eax
mov eax, dword [ebx + 0x30]
xor edx, edx
call fcn.00023030
mov eax, dword [ebp - 4]
mov eax, dword [eax + 8]
call fcn.001569b4
mov edx, dword [ebx + 0x30]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 8]
call fcn.001587e4
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x2c]
mov eax, dword [edi + 8]
call fcn.0018aa70
mov edx, dword [ebp - 4]
mov dword [edx + 0x40], eax
push 1
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x34]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x30]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 8]
call fcn.00158950
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x30]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 8]
call fcn.00156a04
xor edx, edx
push ebp
push 0x1102bb
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 8]
dec esi
test esi, esi
jl 0x110279
inc esi
xor ebx, ebx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
mov edx, ebx
call fcn.00020ce4
mov edx, dword [eax]
call dword [edx + 0x14]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 8]
add eax, dword [edx + 0x28]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
mov edx, ebx
call fcn.00020ce4
mov edx, dword [eax]
call dword [edx + 0xd0]
mov edx, dword [eax]
call dword [edx + 0xd0]
mov edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 8]
call fcn.00158e8c
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
mov edx, ebx
call fcn.00020ce4
mov edx, dword [eax]
call dword [edx + 0xd4]
mov edx, dword [eax]
call dword [edx + 0xd4]
mov edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 8]
call fcn.00158e8c
mov edi, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
cmp dword [eax + 8], 0
jle 0x110236
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
mov edx, dword [eax + 8]
dec edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
call fcn.0010f634
mov eax, dword [eax + 0x18]
add eax, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 8]
cmp eax, dword [edx + 0x14]
jg 0x110236
mov eax, dword [ebp - 0xc]
push eax
push edi
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
mov edx, dword [eax + 8]
dec edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
call fcn.0010f634
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x2c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x28]
call fcn.0010f27c
jmp 0x110262
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
call fcn.0010f648
mov edx, dword [ebp - 0xc]
push edx
push edi
mov edx, dword [ebp - 8]
push edx
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x38]
push edx
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0x2c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x28]
call fcn.0010f27c
inc ebx
dec esi
jne 0x110155
jmp 0x110279
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
xor edx, edx
call fcn.0010f668
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3c]
test eax, eax
jle 0x11028e
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x10]
cmp eax, dword [edx + 8]
jl 0x11026c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x1102c2
mov eax, dword [ebp - 4]
call fcn.0010fd78
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x34]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x30]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 8]
call fcn.0015899c
ret
mov eax, dword [ebp - 4]
add eax, 0x28
call fcn.00013d2c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x1102ea
lea eax, [ebp - 0x10]
call fcn.00013d2c
ret