Function at 0x100cc85f
Capabilities:
Access peb ldr_data
Check for peb beingdebugged flag

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x10146b40
push eax
mov dword fs:[0], esp
sub esp, 0xa4
push esi
push edi
mov edi, dword [0x101e6780]
test edi, edi
je 0x100cca8f
mov eax, dword [0x101e6764]
test eax, eax
jne 0x100cc7e3
mov edx, 0xe80c2f78
mov ecx, 0x10170ee9
call fcn.100074c0
mov edx, 0xc10bf213
mov ecx, 0x10170f01
mov esi, eax
call fcn.100074c0
push esi
push eax
call fcn.100fc160
mov dword [0x101e6764], eax
movsx eax, word [eax + edi]
dec eax
cmp eax, 0x3f
ja case.0x100cc7f8.5
movzx eax, byte [eax + 0x100ccac8]
jmp dword [eax*4 + 0x100ccaa0]
mov esi, 0x101e8d50
mov edi, 0x101e905c
jmp 0x100cc869
mov esi, 0x101e8d94
mov edi, 0x101e90bc
jmp 0x100cc869
mov esi, 0x101e8dd8
mov edi, 0x101e911c
jmp 0x100cc869
mov esi, 0x101e8bb8
mov edi, 0x101e8e1c
jmp 0x100cc869
mov esi, 0x101e8d0c
mov edi, 0x101e8ffc
jmp 0x100cc869
mov esi, 0x101e8bfc
mov edi, 0x101e8e7c
jmp 0x100cc869
mov esi, 0x101e8c40
mov edi, 0x101e8edc
jmp 0x100cc869
mov esi, 0x101e8c84
mov edi, 0x101e8f3c
jmp 0x100cc869
mov esi, 0x101e8cc8
mov edi, 0x101e8f9c
movzx eax, byte [esi]
mov ecx, 0x101ee888
mov byte [0x101ee880], al
movzx eax, byte [esi + 1]
mov byte [0x101ee881], al
movzx eax, byte [esi + 2]
mov byte [0x101ee882], al
movzx eax, byte [esi + 3]
mov byte [0x101ee883], al
movzx eax, byte [esi + 4]
mov byte [0x101ee884], al
lea eax, [esi + 8]
push eax
call fcn.1000b980
mov eax, dword [esi + 0x28]
mov ecx, 0x101ee840
movss xmm0, dword [esi + 0x34]
mov dword [0x101ee8a8], eax
mov eax, dword [esi + 0x2c]
mov dword [0x101ee8ac], eax
mov eax, dword [esi + 0x30]
mov dword [0x101ee8b0], eax
mov eax, dword [esi + 0x3c]
mov dword [0x101ee8bc], eax
mov eax, dword [esi + 0x40]
mov dword [0x101ee8c0], eax
movzx eax, byte [edi]
mov byte [0x101ee820], al
movzx eax, byte [edi + 1]
mov byte [0x101ee821], al
mov eax, dword [edi + 4]
mov dword [0x101ee824], eax
mov eax, dword [edi + 8]
movss dword [0x101ee8b4], xmm0
movss xmm0, dword [esi + 0x38]
mov dword [0x101ee828], eax
mov eax, dword [edi + 0xc]
movss dword [0x101ee8b8], xmm0
movups xmm0, xmmword [edi + 0x10]
mov dword [0x101ee82c], eax
lea eax, [edi + 0x20]
push eax
movaps xmmword [0x101ee830], xmm0
call fcn.1000b980
lea eax, [edi + 0x40]
mov ecx, 0x101ee860
push eax
call fcn.1000b980
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push 0x44
lea eax, [ebp - 0x50]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x48]
call fcn.10009500
movzx eax, byte [ebp - 0x50]
mov ecx, 0x101ee888
mov byte [0x101ee880], al
movzx eax, byte [ebp - 0x4f]
mov byte [0x101ee881], al
movzx eax, byte [ebp - 0x4e]
mov byte [0x101ee882], al
movzx eax, byte [ebp - 0x4d]
mov byte [0x101ee883], al
movzx eax, byte [ebp - 0x4c]
mov byte [0x101ee884], al
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x24], 1
call fcn.1000b830
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x48]
movss xmm0, dword [ebp - 0x1c]
mov dword [0x101ee8a8], eax
mov eax, dword [ebp - 0x24]
mov dword [0x101ee8ac], eax
mov eax, dword [ebp - 0x20]
mov dword [0x101ee8b0], eax
mov eax, dword [ebp - 0x14]
movss dword [0x101ee8b4], xmm0
movss xmm0, dword [ebp - 0x18]
mov dword [0x101ee8bc], eax
mov eax, dword [ebp - 0x10]
movss dword [0x101ee8b8], xmm0
mov dword [0x101ee8c0], eax
call fcn.10003c90
push 0x60
lea eax, [ebp - 0xb0]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x90]
call fcn.10009500
lea ecx, [ebp - 0x70]
mov dword [ebp - 4], 0
call fcn.10009500
movzx eax, byte [ebp - 0xb0]
mov ecx, 0x101ee840
movups xmm0, xmmword [ebp - 0xa0]
mov byte [0x101ee820], al
movzx eax, byte [ebp - 0xaf]
mov byte [0x101ee821], al
mov eax, dword [ebp - 0xac]
mov dword [0x101ee824], eax
mov eax, dword [ebp - 0xa8]
mov dword [0x101ee828], eax
mov eax, dword [ebp - 0xa4]
mov dword [0x101ee82c], eax
lea eax, [ebp - 0x90]
push eax
movaps xmmword [0x101ee830], xmm0
call fcn.1000b830
lea eax, [ebp - 0x70]
mov ecx, 0x101ee860
push eax
call fcn.1000b830
lea ecx, [ebp - 0x70]
call fcn.10003c90
lea ecx, [ebp - 0x90]
call fcn.10003c90
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret