Function at 0x10092d50
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x100c92af
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x14
mov al, byte [esp + 0x28]
push ebx
push esi
push edi
push 0
lea ecx, [esp + 0x14]
mov dword [esp + 0x10], 0
mov byte [esp + 0x14], al
call fcn.1008b200
mov ebx, dword [esp + 0x34]
mov edi, 1
cmp ebx, 0x7f
mov dword [esp + 0x28], edi
ja 0x10092de7
mov eax, dword [esp + 0x18]
cmp eax, edi
jb 0x10092db3
mov ecx, dword [0x100f64c4]
push ecx
push edi
lea ecx, [esp + 0x18]
call fcn.10094690
jmp 0x10092dc3
mov edx, edi
push 0
sub edx, eax
lea ecx, [esp + 0x14]
push edx
call fcn.100945c0
mov eax, dword [esp + 0x14]
test eax, eax
je 0x10092ddd
lea ecx, [esp + 0x10]
call fcn.1008efc0
mov eax, dword [esp + 0x14]
jmp 0x10093057
mov eax, 0x100f6070
jmp 0x10093057
cmp ebx, 0x7ff
ja 0x10092e87
mov eax, dword [esp + 0x18]
cmp eax, 2
jb 0x10092e0f
mov eax, dword [0x100f64c4]
lea ecx, [esp + 0x10]
push eax
push 2
call fcn.10094690
jmp 0x10092e22
mov ecx, 2
push 0
sub ecx, eax
push ecx
lea ecx, [esp + 0x18]
call fcn.100945c0
cmp dword [esp + 0x18], edi
jb 0x10092e42
mov eax, dword [esp + 0x14]
test eax, eax
je 0x10092e42
lea ecx, [esp + 0x10]
call fcn.1008efc0
mov edx, dword [esp + 0x14]
lea eax, [edx + 1]
jmp 0x10092e47
mov eax, 0x100f6070
mov cl, bl
and cl, 0x3f
or cl, 0x80
mov byte [eax], cl
mov eax, dword [esp + 0x14]
test eax, eax
je 0x10092e74
lea ecx, [esp + 0x10]
call fcn.1008efc0
mov eax, dword [esp + 0x14]
shr ebx, 6
and bl, 0x1f
or bl, 0xc0
jmp 0x10093057
shr ebx, 6
and bl, 0x1f
mov eax, 0x100f6070
or bl, 0xc0
jmp 0x10093057
cmp ebx, 0xffff
ja 0x10092f5d
mov eax, dword [esp + 0x18]
cmp eax, 3
jb 0x10092eb0
mov edx, dword [0x100f64c4]
lea ecx, [esp + 0x10]
push edx
push 3
call fcn.10094690
jmp 0x10092ec3
mov ecx, 3
push 0
sub ecx, eax
push ecx
lea ecx, [esp + 0x18]
call fcn.100945c0
cmp dword [esp + 0x18], 2
jb 0x10092ee4
mov eax, dword [esp + 0x14]
test eax, eax
je 0x10092ee4
lea ecx, [esp + 0x10]
call fcn.1008efc0
mov edx, dword [esp + 0x14]
lea eax, [edx + 2]
jmp 0x10092ee9
mov eax, 0x100f6070
mov cl, bl
and cl, 0x3f
or cl, 0x80
mov byte [eax], cl
mov eax, dword [esp + 0x18]
cmp eax, edi
jb 0x10092f15
mov eax, dword [esp + 0x14]
test eax, eax
je 0x10092f15
lea ecx, [esp + 0x10]
call fcn.1008efc0
mov edx, dword [esp + 0x14]
lea eax, [edx + 1]
jmp 0x10092f1a
mov eax, 0x100f6070
mov ecx, ebx
shr ecx, 6
and cl, 0x3f
or cl, 0x80
mov byte [eax], cl
mov eax, dword [esp + 0x14]
test eax, eax
je 0x10092f4a
lea ecx, [esp + 0x10]
call fcn.1008efc0
mov eax, dword [esp + 0x14]
shr ebx, 0xc
and bl, 0xf
or bl, 0xe0
jmp 0x10093057
shr ebx, 0xc
and bl, 0xf
mov eax, 0x100f6070
or bl, 0xe0
jmp 0x10093057
cmp ebx, 0x10ffff
ja 0x10093059
mov eax, dword [esp + 0x18]
cmp eax, 4
jb 0x10092f86
mov edx, dword [0x100f64c4]
lea ecx, [esp + 0x10]
push edx
push 4
call fcn.10094690
jmp 0x10092f99
mov ecx, 4
push 0
sub ecx, eax
push ecx
lea ecx, [esp + 0x18]
call fcn.100945c0
cmp dword [esp + 0x18], 3
jb 0x10092fba
mov eax, dword [esp + 0x14]
test eax, eax
je 0x10092fba
lea ecx, [esp + 0x10]
call fcn.1008efc0
mov edx, dword [esp + 0x14]
lea eax, [edx + 3]
jmp 0x10092fbf
mov eax, 0x100f6070
mov cl, bl
and cl, 0x3f
or cl, 0x80
mov byte [eax], cl
mov eax, dword [esp + 0x18]
cmp eax, 2
jb 0x10092fec
mov eax, dword [esp + 0x14]
test eax, eax
je 0x10092fec
lea ecx, [esp + 0x10]
call fcn.1008efc0
mov edx, dword [esp + 0x14]
lea eax, [edx + 2]
jmp 0x10092ff1
mov eax, 0x100f6070
mov ecx, ebx
shr ecx, 6
and cl, 0x3f
or cl, 0x80
mov byte [eax], cl
mov eax, dword [esp + 0x18]
cmp eax, edi
jb 0x10093020
mov eax, dword [esp + 0x14]
test eax, eax
je 0x10093020
lea ecx, [esp + 0x10]
call fcn.1008efc0
mov edx, dword [esp + 0x14]
lea eax, [edx + 1]
jmp 0x10093025
mov eax, 0x100f6070
mov ecx, ebx
shr ecx, 0xc
and cl, 0x3f
or cl, 0x80
mov byte [eax], cl
mov eax, dword [esp + 0x14]
test eax, eax
je 0x10093049
lea ecx, [esp + 0x10]
call fcn.1008efc0
mov eax, dword [esp + 0x14]
jmp 0x1009304e
mov eax, 0x100f6070
shr ebx, 0x12
and bl, 7
or bl, 0xf0
mov byte [eax], bl
mov esi, dword [esp + 0x30]
lea edx, [esp + 0x10]
push edx
mov ecx, esi
call fcn.10093b50
mov dword [esp + 0xc], edi
push edi
lea ecx, [esp + 0x14]
mov byte [esp + 0x2c], 0
call fcn.1008b200
mov ecx, dword [esp + 0x20]
mov eax, esi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x20
ret