Function at 0x97ed1c
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006b8c8
mov eax, dword fs:[0]
push eax
sub esp, 0x30
push ebx
push esi
push edi
mov eax, dword [0x1008c614]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, dword [ebp + 8]
mov dword [ebx], 0x1007673c
mov dword [ebx + 4], 0x10076760
mov dword [ebx + 8], 0x10076774
mov dword [ebx + 0xc], 0x10076794
mov dword [ebx + 0x10], 0x100767a8
mov dword [ebx + 0x14], 0x100767bc
mov dword [ebx + 0x18], 0x100767d4
mov dword [ebx + 0x1c], 0x100767ec
mov dword [ebx + 0x20], 0x10076800
mov dword [ebx + 0x24], 0x10076814
mov dword [ebx + 0x28], 0x1007682c
mov dword [ebx + 0x2c], 0x10076840
mov dword [ebx + 0x30], 0x10076854
mov dword [ebx + 0x34], 0x10076878
mov dword [ebx + 0x38], 0x10076894
mov dword [ebx + 0x3c], 0x100768b0
mov dword [ebx + 0x40], 0x100768c4
mov dword [ebx + 0x44], 0x100768d8
mov dword [ebx + 0x48], 0x100768f0
mov dword [ebx + 0x4c], 0x10076904
mov dword [ebp - 4], 0x2d
mov esi, dword [ebx + 0x58]
xor edi, edi
mov dword [ebp - 0x1c], esi
cmp esi, edi
je 0x97edef
mov eax, dword [esi]
mov ecx, dword [eax]
push esi
call ecx
add esp, 4
xor eax, eax
mov byte [ebp - 4], 0x2e
mov dword [ebp - 0x18], eax
cmp esi, edi
je 0x97ee23
mov edx, dword [esi]
mov ecx, dword [edx + 0xc]
push 0x200
lea eax, [ebp - 0x18]
push eax
push 0x2bc
push esi
call ecx
add esp, 0x10
test eax, eax
je 0x97ee20
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x97ee23
mov eax, dword [ebp - 0x18]
cmp eax, edi
je 0x97ee98
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], 0x200
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x2c], 0x201
mov dword [ebp - 0x28], 6
mov dword [ebp - 0x24], edi
mov byte [ebp - 0x20], 0x20
mov byte [ebp - 4], 0x30
mov eax, 0x10075998
xor ecx, ecx
mov edi, edi
inc eax
inc ecx
cmp byte [eax], 0
jne 0x97ee5c
push ecx
push 0x10075998
push edi
push edi
lea eax, [ebp - 0x3c]
call fcn.0098f43c
mov byte [ebp - 4], 0x2f
mov eax, dword [ebp - 0x3c]
add esp, 0x10
cmp eax, edi
je 0x97ee98
mov ecx, dword [ebp - 0x38]
cmp ecx, edi
je 0x97ee98
mov esi, dword [ebp - 0x30]
mov edx, dword [eax]
push esi
push ecx
push eax
mov eax, dword [edx + 0x10]
call eax
add esp, 0xc
mov byte [ebp - 4], 0x2d
mov eax, dword [ebp - 0x1c]
cmp eax, edi
je 0x97eeae
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
add esp, 4
mov byte [ebp - 4], 0x2c
mov eax, dword [ebx + 0x400]
cmp eax, edi
je 0x97eec7
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
add esp, 4
mov byte [ebp - 4], 0x2b
mov eax, dword [ebx + 0x3fc]
cmp eax, edi
je 0x97eee0
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
add esp, 4
mov byte [ebp - 4], 0x2a
mov eax, dword [ebx + 0x3f8]
cmp eax, edi
je 0x97eef9
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
add esp, 4
mov byte [ebp - 4], 0x29
mov eax, dword [ebx + 0x3f4]
cmp eax, edi
je 0x97ef12
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
add esp, 4
mov byte [ebp - 4], 0x28
mov eax, dword [ebx + 0x3f0]
cmp eax, edi
je 0x97ef2b
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
add esp, 4
mov byte [ebp - 4], 0x27
mov eax, dword [ebx + 0x3ec]
cmp eax, edi
je 0x97ef44
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
add esp, 4
mov edi, dword [0x1007100c]
lea eax, [ebx + 0x3c4]
push eax
call edi
mov byte [ebp - 4], 0x25
mov eax, dword [ebx + 0x3c0]
test eax, eax
je 0x97ef6c
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
add esp, 4
mov byte [ebp - 4], 0x24
mov eax, dword [ebx + 0x3bc]
test eax, eax
je 0x97ef85
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
add esp, 4
mov byte [ebp - 4], 0x23
mov eax, dword [ebx + 0x3b8]
test eax, eax
je 0x97ef9e
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
add esp, 4
mov byte [ebp - 4], 0x22
mov eax, dword [ebx + 0x3b4]
test eax, eax
je 0x97efb7
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
add esp, 4
mov byte [ebp - 4], 0x21
mov eax, dword [ebx + 0x3b0]
test eax, eax
je 0x97efd0
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
add esp, 4
lea eax, [ebx + 0x398]
push eax
call edi
lea ecx, [ebx + 0x368]
push ecx
mov byte [ebp - 4], 0x1f
call fcn.00986efc
lea esi, [ebx + 0x334]
call fcn.0097573c
mov byte [ebp - 4], 0x1d
mov eax, dword [ebx + 0x330]
xor esi, esi
cmp eax, esi
je 0x97f00f
mov edx, dword [eax]
push eax
mov eax, dword [edx + 4]
call eax
add esp, 4
mov byte [ebp - 4], 0x1c
mov eax, dword [ebx + 0x32c]
cmp eax, esi
je 0x97f028
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
add esp, 4
lea eax, [ebx + 0x314]
push eax
call edi
mov byte [ebp - 4], 0x1a
mov eax, dword [ebx + 0x304]
cmp eax, esi
je 0x97f070
mov ecx, dword [ebx + 0x308]
mov esi, eax
mov dword [ebp - 0x14], ecx
cmp esi, ecx
je 0x97f05f
push esi
call fcn.00983cbc
add esi, 0x9c
cmp esi, dword [ebp - 0x14]
jne 0x97f04e
mov eax, dword [ebx + 0x304]
push eax
call fcn.009c0094
add esp, 4
xor esi, esi
mov dword [ebx + 0x304], esi
mov dword [ebx + 0x308], esi
mov dword [ebx + 0x30c], esi
lea ecx, [ebx + 0x2b8]
mov dword [ebx + 0x2fc], 0x100769d8
mov dword [ebx + 0x2f4], 0x100769b4
mov dword [ebx + 0x2ec], 0x10076998
mov dword [ebx + 0x2e4], 0x10076984
mov byte [ebp - 4], 0x15
push ecx
mov dword [ebx + 0x2a0], 0x10076970
call edi
mov eax, dword [ebx + 0x2a4]
cmp eax, esi
je 0x97f0d6
mov edx, dword [eax]
push eax
mov eax, dword [edx + 4]
call eax
add esp, 4
lea ecx, [ebx + 0x278]
mov byte [ebp - 4], 0x14
push ecx
mov dword [ebx + 0x260], 0x10076970
call edi
mov eax, dword [ebx + 0x264]
cmp eax, esi
je 0x97f102
mov edx, dword [eax]
push eax
mov eax, dword [edx + 4]
call eax
add esp, 4
lea ecx, [ebx + 0x238]
push ecx
mov dword [ebx + 0x258], 0x10076944
mov dword [ebx + 0x250], 0x1007692c
call edi
lea edi, [ebx + 0x22c]
mov dword [ebp - 0x14], edi
mov byte [ebp - 4], 0x31
call fcn.0098845c
mov edi, dword [edi]
push edi
call fcn.009c0094
mov esi, dword [0x1007100c]
add esp, 4
lea edx, [ebx + 0x214]
push edx
call esi
lea edi, [ebx + 0x208]
mov dword [ebp - 0x14], edi
mov byte [ebp - 4], 0x32
call fcn.0098845c
mov edi, dword [edi]
push edi
call fcn.009c0094
add esp, 4
lea eax, [ebx + 0x1f0]
push eax
call esi
lea edi, [ebx + 0x1e4]
mov dword [ebp - 0x14], edi
mov byte [ebp - 4], 0x33
call fcn.0098845c
mov edi, dword [edi]
push edi
call fcn.009c0094
add esp, 4
lea ecx, [ebx + 0x1cc]
push ecx
call esi
add ebx, 0x1bc
mov byte [ebp - 4], 0xa
call fcn.0098840c
mov edi, dword [ebp + 8]
lea edx, [edi + 0x1a4]
push edx
call esi
lea ebx, [edi + 0x194]
mov dword [ebp - 0x14], ebx
mov byte [ebp - 4], 0x34
mov eax, dword [ebx + 4]
mov ecx, dword [eax]
push eax
push ecx
lea esi, [ebp - 0x18]
mov eax, ebx
call fcn.009891cc
mov ebx, dword [ebx + 4]
push ebx
call fcn.009c0094
add esp, 4
lea eax, [edi + 0x17c]
push eax
call dword [0x1007100c]
mov byte [ebp - 4], 6
mov eax, dword [edi + 0x160]
test eax, eax
je 0x97f202
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
add esp, 4
mov byte [ebp - 4], 5
mov eax, dword [edi + 0x15c]
test eax, eax
je 0x97f21b
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
add esp, 4
mov byte [ebp - 4], 4
mov eax, dword [edi + 0x158]
test eax, eax
je 0x97f234
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
add esp, 4
lea esi, [edi + 0x12c]
mov dword [ebp - 0x18], esi
mov byte [ebp - 4], 0x35
mov ebx, dword [esi]
mov dword [esi + 4], ebx
test ebx, ebx
je 0x97f26f
mov eax, dword [esi + 0xc]
test eax, eax
je 0x97f25f
mov ecx, dword [eax]
mov edx, dword [ecx + 0x14]
push ebx
push eax
call edx
add esp, 8
jmp 0x97f26f
call dword [0x1007101c]
push ebx
push 0
push eax
call dword [0x10071024]
mov byte [ebp - 4], 3
mov esi, dword [esi + 0xc]
test esi, esi
je 0x97f285
mov eax, dword [esi]
mov ecx, dword [eax + 4]
push esi
call ecx
add esp, 4
lea edx, [edi + 0xac]
push edx
mov byte [ebp - 4], 2
call fcn.009840cc
lea eax, [edi + 0x94]
push eax
call dword [0x1007100c]
lea ebx, [edi + 0x5c]
call fcn.0097103c
add edi, 0x50
mov dword [ebp + 8], edi
mov dword [ebp - 4], 0x37
mov eax, dword [edi + 8]
test eax, eax
je 0x97f2c9
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
add esp, 4
mov byte [ebp - 4], 0x36
mov eax, dword [edi + 4]
test eax, eax
je 0x97f2df
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov edi, dword [edi]
test edi, edi
je 0x97f2f7
mov eax, dword [edi]
mov ecx, dword [eax + 4]
push edi
call ecx
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4