Function at 0x100e1eb0
Capabilities:
Access peb ldr_data
Get ntdll base address
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x1018a65f
mov eax, dword fs:[0]
push eax
sub esp, 0x140
push ebx
push ebp
push esi
push edi
mov eax, dword [0x101c6444]
xor eax, esp
push eax
lea eax, [esp + 0x154]
mov dword fs:[0], eax
mov ebx, dword [esp + 0x168]
mov eax, dword [ebx + 0xc]
mov ecx, dword [ebx + 0x18]
add ecx, eax
mov dword [esp + 0x48], ecx
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x48]
push ecx
mov ecx, dword [esp + 0x16c]
mov dword [esp + 0x4c], 5
call fcn.100440c0
mov ecx, eax
call fcn.100440c0
mov eax, dword [ebx + 0x14]
lea edi, [ebx + 0x10]
mov byte [esp + 0x16], 0
mov esi, dword [eax]
mov edx, eax
mov dword [esp + 0x30], esi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x40], edx
test edi, edi
je 0x100e1f3b
lea eax, [ebx + 0x10]
cmp edi, eax
je 0x100e1f40
call fcn.1015828d
cmp esi, dword [esp + 0x40]
je 0x100e2195
test edi, edi
jne 0x100e1f53
call fcn.1015828d
cmp esi, dword [edi + 4]
jne 0x100e1f5d
call fcn.1015828d
lea ecx, [esi + 0x30]
call fcn.100dc790
test edx, edx
jl 0x100e217f
jg 0x100e1f77
test eax, eax
jbe 0x100e217f
cmp esi, dword [edi + 4]
jne 0x100e1f81
call fcn.1015828d
lea ecx, [esi + 0x30]
call fcn.100dc7f0
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], edx
cmp esi, dword [edi + 4]
jne 0x100e1f9b
call fcn.1015828d
lea ecx, [esi + 0x30]
call fcn.100dc7c0
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], edx
cmp esi, dword [edi + 4]
jne 0x100e1fb5
call fcn.1015828d
lea ecx, [esi + 0x30]
call fcn.100dc790
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], edx
cmp esi, dword [edi + 4]
jne 0x100e1fcf
call fcn.1015828d
lea ecx, [esi + 0x30]
call fcn.1005c5c0
mov dword [esp + 0x18], eax
cmp esi, dword [edi + 4]
jne 0x100e1fe5
call fcn.1015828d
lea ecx, [esi + 0x30]
call fcn.100dc800
mov dword [esp + 0x1c], eax
cmp esi, dword [edi + 4]
jne 0x100e1ffb
call fcn.1015828d
lea eax, [esp + 0xf0]
push eax
lea ecx, [esi + 0x30]
call fcn.1005c850
mov dword [esp + 0x28], eax
cmp esi, dword [edi + 4]
mov dword [esp + 0x15c], 0
jne 0x100e2024
call fcn.1015828d
lea ecx, [esp + 0x80]
push ecx
lea edx, [esp + 0x120]
push edx
lea ecx, [esi + 0x30]
call fcn.1005c600
mov ecx, eax
call fcn.10094590
mov ebx, eax
cmp esi, dword [edi + 4]
mov byte [esp + 0x15c], 1
jne 0x100e2057
call fcn.1015828d
lea eax, [esp + 0x64]
push eax
lea ecx, [esi + 0x30]
call fcn.100dcb80
mov ebp, eax
cmp esi, dword [edi + 4]
mov byte [esp + 0x15c], 2
jne 0x100e2078
call fcn.1015828d
lea ecx, [esp + 0x20]
push ecx
mov ecx, dword [esp + 0x2c]
lea edx, [esp + 0x60]
push edx
lea eax, [esp + 0x1e]
push eax
push ecx
push ebx
lea edx, [esp + 0x48]
push edx
lea eax, [esp + 0x30]
push eax
push ebp
lea ecx, [esp + 0x160]
push ecx
lea ecx, [esi + 0x30]
call fcn.100dc760
mov ecx, dword [esp + 0x184]
push eax
lea edx, [esp + 0x40]
push edx
call fcn.100440c0
mov ecx, eax
call fcn.10009d40
mov ecx, eax
call fcn.10034520
mov ecx, eax
call fcn.100440c0
mov ecx, eax
call fcn.10044220
mov ecx, eax
call fcn.10034520
mov ecx, eax
call fcn.10034520
mov ecx, eax
call fcn.10044170
mov ecx, eax
call fcn.10044220
mov ecx, eax
call fcn.10044220
mov esi, 0x10
cmp dword [esp + 0x7c], esi
jb 0x100e2111
mov eax, dword [esp + 0x68]
push eax
call fcn.10157f3b
add esp, 4
xor edi, edi
cmp dword [esp + 0x98], esi
mov ebx, 0xf
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x78], edi
mov byte [esp + 0x68], 0
jb 0x100e213e
mov ecx, dword [esp + 0x84]
push ecx
call fcn.10157f3b
add esp, 4
cmp dword [esp + 0x108], esi
mov dword [esp + 0x98], ebx
mov dword [esp + 0x94], edi
mov byte [esp + 0x84], 0
mov dword [esp + 0x15c], 0xffffffff
jb 0x100e2178
mov edx, dword [esp + 0xf4]
push edx
call fcn.10157f3b
add esp, 4
mov ebx, dword [esp + 0x168]
lea ecx, [esp + 0x2c]
call fcn.100a9730
mov esi, dword [esp + 0x30]
mov edi, dword [esp + 0x2c]
jmp 0x100e1f30
mov eax, dword [ebx + 8]
mov esi, dword [eax]
add ebx, 4
mov edi, ebx
mov dword [esp + 0x18], ebx
mov dword [esp + 0x24], esi
mov dword [esp + 0x20], edi
mov dword [esp + 0x38], eax
nop
test edi, edi
je 0x100e21b8
cmp edi, ebx
je 0x100e21bd
call fcn.1015828d
cmp esi, dword [esp + 0x38]
je 0x100e244d
test edi, edi
jne 0x100e21d0
call fcn.1015828d
cmp esi, dword [edi + 4]
jne 0x100e21da
call fcn.1015828d
lea ecx, [esi + 0x28]
call fcn.100dc790
test edx, edx
jl 0x100e2437
jg 0x100e21f4
test eax, eax
jbe 0x100e2437
cmp esi, dword [edi + 4]
jne 0x100e21fe
call fcn.1015828d
lea ecx, [esi + 0x28]
call fcn.100dc870
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], edx
cmp esi, dword [edi + 4]
jne 0x100e2218
call fcn.1015828d
lea ecx, [esi + 0x28]
call fcn.1005c660
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], edx
cmp esi, dword [edi + 4]
jne 0x100e2232
call fcn.1015828d
lea ecx, [esi + 0x28]
call fcn.1005c630
mov byte [esp + 0x17], al
cmp esi, dword [edi + 4]
jne 0x100e2248
call fcn.1015828d
lea ecx, [esi + 0x28]
call fcn.100dc790
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], edx
cmp esi, dword [edi + 4]
jne 0x100e2262
call fcn.1015828d
lea ecx, [esi + 0x28]
call fcn.1005c5c0
mov dword [esp + 0x28], eax
cmp esi, dword [edi + 4]
jne 0x100e2278
call fcn.1015828d
lea ecx, [esi + 0x28]
call fcn.1005c6b0
mov dword [esp + 0x2c], eax
cmp esi, dword [edi + 4]
jne 0x100e228e
call fcn.1015828d
lea ecx, [esp + 0x9c]
push ecx
lea ecx, [esi + 0x28]
call fcn.1005c850
mov dword [esp + 0x1c], eax
cmp esi, dword [edi + 4]
mov dword [esp + 0x15c], 3
jne 0x100e22b7
call fcn.1015828d
lea edx, [esp + 0xb8]
push edx
lea eax, [esp + 0x110]
push eax
lea ecx, [esi + 0x28]
call fcn.1005c600
mov ecx, eax
call fcn.10094590
mov ebx, eax
cmp esi, dword [edi + 4]
mov byte [esp + 0x15c], 4
jne 0x100e22ea
call fcn.1015828d
lea ecx, [esp + 0xd4]
push ecx
lea ecx, [esi + 0x28]
call fcn.100dcb80
mov ebp, eax
cmp esi, dword [edi + 4]
mov byte [esp + 0x15c], 5
jne 0x100e230e
call fcn.1015828d
lea edx, [esp + 0x4c]
push edx
mov edx, dword [esp + 0x20]
lea eax, [esp + 0x58]
push eax
lea ecx, [esp + 0x1f]
push ecx
push edx
push ebx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x40]
push ecx
push ebp
lea edx, [esp + 0x14c]
push edx
lea ecx, [esi + 0x28]
call fcn.100dc760
mov ecx, dword [esp + 0x184]
push eax
lea eax, [esp + 0x50]
push eax
call fcn.100440c0
mov ecx, eax
call fcn.10009d40
mov ecx, eax
call fcn.10034520
mov ecx, eax
call fcn.100440c0
mov ecx, eax
call fcn.10044220
mov ecx, eax
call fcn.10034520
mov ecx, eax
call fcn.10034520
mov ecx, eax
call fcn.10044170
mov ecx, eax
call fcn.10044220
mov ecx, eax
call fcn.10044220
mov ebx, 0x10
cmp dword [esp + 0xec], ebx
jb 0x100e23ad
mov ecx, dword [esp + 0xd8]
push ecx
call fcn.10157f3b
add esp, 4
xor esi, esi
cmp dword [esp + 0xd0], ebx
mov edi, 0xf
mov dword [esp + 0xec], edi
mov dword [esp + 0xe8], esi
mov byte [esp + 0xd8], 0
jb 0x100e23e3
mov edx, dword [esp + 0xbc]
push edx
call fcn.10157f3b
add esp, 4
cmp dword [esp + 0xb4], ebx
mov dword [esp + 0xd0], edi
mov dword [esp + 0xcc], esi
mov byte [esp + 0xbc], 0
mov dword [esp + 0x15c], 0xffffffff
jb 0x100e241d
mov eax, dword [esp + 0xa0]
push eax
call fcn.10157f3b
add esp, 4
mov ebx, dword [esp + 0x18]
mov dword [esp + 0xb4], edi
mov dword [esp + 0xb0], esi
mov byte [esp + 0xa0], 0
lea ecx, [esp + 0x20]
call fcn.10053bd0
mov esi, dword [esp + 0x24]
mov edi, dword [esp + 0x20]
jmp 0x100e21b0
mov eax, dword [esp + 0x164]
mov ecx, dword [esp + 0x154]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x14c
ret