Function at 0x1000f810
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1006e808
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push ebx
push ebp
push esi
push edi
mov eax, dword [0x1008ab54]
xor eax, esp
push eax
lea eax, [esp + 0x30]
mov dword fs:[0], eax
mov dword [esp + 0x18], ecx
xor ebx, ebx
mov dword [ecx + 0xc], ebx
call fcn.1000f1b0
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ebx
lea eax, [esp + 0x1c]
push eax
mov ecx, str.SOFTWAREMicrosoftWindowsCurrentVersionUninstall
mov dword [esp + 0x3c], ebx
call fcn.10001890
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x24]
push edx
lea ecx, [ebx + 1]
mov byte [esp + 0x40], 1
call fcn.1001ee40
mov esi, eax
mov byte [esp + 0x40], bl
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
add esp, 8
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1000f8a6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp esi, ebx
je 0x1000f953
mov ecx, dword [esp + 0x24]
mov ebp, dword [ecx]
cmp ebp, dword [esp + 0x24]
je 0x1000f953
mov eax, dword [ebp + 8]
mov esi, dword [eax - 0xc]
lea edi, [ebp + 8]
mov ecx, 1
sub ecx, dword [eax - 4]
mov eax, dword [eax - 8]
sub eax, esi
or eax, ecx
jge 0x1000f8e0
push esi
mov ecx, edi
call fcn.10002100
mov eax, dword [edi]
lea edx, [esi + 1]
push edx
push eax
call fcn.1004a42c
add esp, 8
cmp esi, ebx
jl 0x1000fa5c
mov eax, dword [edi]
cmp esi, dword [eax - 8]
jg 0x1000fa5c
mov dword [eax - 0xc], esi
mov eax, dword [edi]
mov word [eax + esi*2], bx
cmp ebp, dword [esp + 0x24]
jne 0x1000f916
call fcn.1004984b
mov eax, dword [edi]
cmp dword [eax - 0xc], ebx
jl 0x1000f935
push str.OPERA
push eax
call fcn.10049be9
add esp, 8
cmp eax, ebx
je 0x1000f935
sub eax, dword [edi]
sar eax, 1
je 0x1000f948
cmp ebp, dword [esp + 0x24]
jne 0x1000f940
call fcn.1004984b
mov ebp, dword [ebp]
jmp 0x1000f8b4
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0xc], 1
mov edx, dword [esp + 0x18]
cmp dword [edx + 0xc], ebx
jne 0x1000fa71
lea eax, [esp + 0x20]
push eax
call fcn.1000f1d0
lea ecx, [esp + 0x1c]
push ecx
mov ecx, str.SOFTWAREMicrosoftWindowsCurrentVersionUninstall
call fcn.10001890
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x24]
mov ecx, 2
push eax
mov byte [esp + 0x40], cl
call fcn.1001ee40
mov esi, eax
mov byte [esp + 0x40], bl
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
add esp, 8
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1000f9ba
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp esi, ebx
je 0x1000fa71
mov ecx, dword [esp + 0x24]
mov ebp, dword [ecx]
jmp 0x1000f9d0
cmp ebp, dword [esp + 0x24]
je 0x1000fa71
mov eax, dword [ebp + 8]
mov esi, dword [eax - 0xc]
lea edi, [ebp + 8]
mov edx, 1
sub edx, dword [eax - 4]
mov eax, dword [eax - 8]
sub eax, esi
or edx, eax
jge 0x1000f9fc
push esi
mov ecx, edi
call fcn.10002100
mov edx, dword [edi]
lea ecx, [esi + 1]
push ecx
push edx
call fcn.1004a42c
add esp, 8
cmp esi, ebx
jl 0x1000fa5c
mov eax, dword [edi]
cmp esi, dword [eax - 8]
jg 0x1000fa5c
mov dword [eax - 0xc], esi
mov eax, dword [edi]
mov word [eax + esi*2], bx
cmp ebp, dword [esp + 0x24]
jne 0x1000fa2a
call fcn.1004984b
mov eax, dword [edi]
cmp dword [eax - 0xc], ebx
jl 0x1000fa49
push str.OPERA
push eax
call fcn.10049be9
add esp, 8
cmp eax, ebx
je 0x1000fa49
sub eax, dword [edi]
sar eax, 1
je 0x1000fa66
cmp ebp, dword [esp + 0x24]
jne 0x1000fa54
call fcn.1004984b
mov ebp, dword [ebp]
jmp 0x1000f9d0
push 0x80070057
call fcn.10001100
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0xc], 1
lea edx, [esp + 0x20]
push edx
call fcn.1000f1d0
mov eax, dword [esp + 0x24]
push eax
call fcn.1003efae
add esp, 4
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret