Function at 0x100a6f10
Capabilities:
Access peb ldr_data
Hash data with crc32

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x30
mov edx, ecx
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x10], 0xffffffff
lea eax, [ebp - 0x18]
mov dword [ebp - 0x14], 0x100bc4a0
mov ecx, dword fs:[0]
mov dword [ebp - 0x18], ecx
mov dword fs:[0], eax
lea eax, [edx + 0xbc]
mov dword [ebp - 0x3c], eax
xorps xmm0, xmm0
movlps qword [edx + 0x100], xmm0
mov dword [edx + 0x108], 0
movlps qword [edx + 0x14c], xmm0
lea ecx, [edx + 0x154]
movups xmmword [edx + 0x114], xmm0
movups xmmword [edx + 0x124], xmm0
movups xmmword [edx + 0xc], xmm0
movups xmmword [edx + 0x1c], xmm0
movups xmmword [edx + 0x2c], xmm0
movups xmmword [edx + 0x50], xmm0
movups xmmword [edx + 0x60], xmm0
mov dword [edx + 0x74], 0
mov dword [edx + 0x70], 0
movups xmmword [edx + 0xac], xmm0
movups xmmword [edx + 0xbc], xmm0
movups xmmword [edx + 0xcc], xmm0
movups xmmword [edx + 0xdc], xmm0
mov dword [ebp - 0x20], edx
movups xmmword [edx + 0xe8], xmm0
mov dword [ebp - 0x10], 0
call fcn.100e5eb0
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x20]
lea ecx, [edx + 0xc8]
mov dword [edx + 0x188], 0
xorps xmm1, xmm1
movups xmmword [edx + 0x1b0], xmm1
movups xmmword [edx + 0x1c0], xmm1
movups xmmword [edx + 0x1d0], xmm1
mov dword [edx + 0x140], 0
mov dword [edx + 0x13c], 0
movups xmmword [ecx + 0x60], xmm1
movups xmmword [ecx + 0x50], xmm1
movups xmmword [ecx + 0x40], xmm1
movups xmmword [ecx + 0x30], xmm1
movups xmmword [ecx + 0x20], xmm1
movups xmmword [ecx + 0x10], xmm1
mov dword [ebp - 0x38], ecx
movups xmmword [ecx], xmm1
mov dword [edx + 0x138], 1
mov dword [edx + 0x14c], 0
mov dword [edx + 0x150], 0
movups xmmword [edx + 0x178], xmm1
mov dword [edx + 0x18c], 0
mov dword [edx + 0x190], 0
mov dword [edx + 0x144], 0
mov dword [edx + 0x147], 0
movaps xmm0, xmmword [0x10146aa0]
movups xmmword [edx + 0x194], xmm0
mov dword [edx + 0x1a4], 0
movsd xmm0, qword [0x10146ab0]
movsd qword [edx + 0x1a8], xmm0
lea ecx, [edx + 0x258]
mov dword [ebp - 0x34], ecx
lea ecx, [edx + 0x264]
mov dword [ebp - 0x30], ecx
lea ecx, [edx + 0x27c]
add eax, 0x18dc
movups xmmword [edx + 0x1e0], xmm1
movups xmmword [edx + 0x1f0], xmm1
movups xmmword [edx + 0x200], xmm1
movups xmmword [edx + 0x210], xmm1
movups xmmword [edx + 0x220], xmm1
movups xmmword [edx + 0x230], xmm1
movups xmmword [edx + 0x23c], xmm1
movups xmmword [edx + 0x258], xmm1
mov dword [edx + 0x26c], 0
mov dword [edx + 0x268], 0
mov dword [ebp - 0x10], 1
mov dword [ebp - 0x28], ecx
push eax
call fcn.1001fee0
xorps xmm0, xmm0
mov eax, dword [ebp - 0x20]
movups xmmword [eax + 0x320], xmm0
movups xmmword [eax + 0x310], xmm0
push dword [ebp + 0xc]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov ecx, dword [0x102709d0]
test ecx, ecx
je 0x100a7148
inc dword [ecx + 0x374]
inc eax
mov dword [ebp - 0x24], eax
mov ecx, dword [0x102709d8]
mov dword [ebp - 0x10], 2
push ecx
push eax
call dword [0x1026f97c]
add esp, 8
mov esi, eax
push dword [ebp - 0x24]
mov edi, dword [ebp + 0xc]
push edi
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0x20]
mov dword [edx], esi
movzx ecx, byte [edi]
test cl, cl
je 0x100a71d5
mov eax, edi
lea edx, [edi + 2]
mov esi, 0xffffffff
mov eax, 0xffffffff
jmp 0x100a71b7
movzx edi, ch
movzx ebx, al
shr eax, 8
xor ebx, edi
xor eax, dword [ebx*4 + 0x1014632c]
inc edx
test cl, cl
je 0x100a71ce
mov ch, cl
mov cl, byte [edx - 1]
cmp ch, 0x23
jne 0x100a71a0
cmp cl, 0x23
jne 0x100a71a0
cmp byte [edx], 0x23
cmove eax, esi
jmp 0x100a71a0
not eax
mov edx, dword [ebp - 0x20]
jmp 0x100a71d7
xor eax, eax
mov dword [edx + 4], eax
mov ecx, dword [edx + 0xbc]
cmp ecx, dword [edx + 0xc0]
jne 0x100a71fc
lea edx, [ecx + 1]
test ecx, ecx
je 0x100a7207
mov eax, ecx
shr eax, 0x1f
add eax, ecx
sar eax, 1
add eax, ecx
jmp 0x100a720c
mov edi, dword [edx + 0xc4]
jmp 0x100a72bb
mov eax, 8
cmp eax, edx
cmovg edx, eax
mov dword [ebp - 0x24], edx
lea eax, [edx*4]
mov ecx, dword [0x102709d0]
test ecx, ecx
je 0x100a7232
inc dword [ecx + 0x374]
mov dword [ebp - 0x10], 2
mov ecx, dword [0x102709d8]
mov dword [ebp - 0x10], 2
push ecx
push eax
call dword [0x1026f97c]
add esp, 8
mov edi, eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0xc4]
test eax, eax
je 0x100a72a0
mov esi, dword [ebp - 0x20]
mov ecx, dword [esi + 0xbc]
shl ecx, 2
push ecx
push eax
mov dword [ebp - 0x2c], edi
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 0xc4]
test eax, eax
je 0x100a728d
mov ecx, dword [0x102709d0]
test ecx, ecx
je 0x100a728d
dec dword [ecx + 0x374]
push dword [0x102709d8]
push eax
call dword [0x1026f980]
add esp, 8
mov edi, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x20]
mov dword [edx + 0xc4], edi
mov eax, dword [ebp - 0x24]
mov dword [edx + 0xc0], eax
mov eax, dword [edx + 4]
mov ecx, dword [edx + 0xbc]
mov dword [edi + ecx*4], eax
mov edi, edx
mov esi, dword [edx + 0xbc]
lea eax, [esi + 1]
mov dword [edx + 0xbc], eax
xorps xmm0, xmm0
movups xmmword [edx + 8], xmm0
movups xmmword [edx + 0x18], xmm0
movups xmmword [edx + 0x28], xmm0
movups xmmword [edx + 0x34], xmm0
push dword [ebp + 0xc]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
inc eax
mov dword [edi + 0x44], eax
mov eax, dword [edi + 0xc4]
mov eax, dword [eax + esi*4]
movzx ecx, al
not eax
shr eax, 8
xor ecx, 0xdc
xor eax, dword [ecx*4 + 0x1014632c]
movzx ecx, al
shr eax, 8
xor ecx, 0x4d
xor eax, dword [ecx*4 + 0x1014632c]
movzx ecx, al
shr eax, 8
xor ecx, 0x4f
xor eax, dword [ecx*4 + 0x1014632c]
movzx ecx, al
shr eax, 8
xor ecx, 0x56
xor eax, dword [ecx*4 + 0x1014632c]
movzx edx, al
mov ecx, eax
shr ecx, 8
xor edx, 0x45
xor ecx, dword [edx*4 + 0x1014632c]
not ecx
mov edx, dword [0x102709d0]
cmp dword [edx + 0x1a3c], ecx
jne 0x100a7367
mov dword [edx + 0x1a40], ecx
mov eax, dword [ebp - 0x20]
lea esi, [eax + 0x310]
cmp dword [edx + 0x1a74], ecx
jne 0x100a737f
mov byte [edx + 0x1a78], 1
mov dword [eax + 0x48], ecx
mov dword [eax + 0x4c], 0
mov dword [eax + 0x50], 0
mov dword [eax + 0x54], 0
movaps xmm0, xmmword [0x10146ac0]
movups xmmword [eax + 0x60], xmm0
xorps xmm0, xmm0
movups xmmword [eax + 0x70], xmm0
mov dword [eax + 0x80], 0
mov byte [eax + 0x84], 0xff
mov dword [eax + 0x86], 0xffff0000
mov word [eax + 0x8a], 0xffff
mov dword [eax + 0x8c], 0
mov dword [eax + 0x90], 0xffff
movaps xmm1, xmmword [0x10146ad0]
movups xmmword [eax + 0x94], xmm1
mov dword [eax + 0xb4], 0x7f7fffff
mov dword [eax + 0xb8], 0x7f7fffff
movaps xmm1, xmmword [0x10146ae0]
movups xmmword [eax + 0xa4], xmm1
movups xmmword [eax + 0x1fc], xmm0
mov dword [eax + 0x24c], 0xffffffff
movss xmm1, dword [0x10141e70]
movlps qword [eax + 0x250], xmm1
mov dword [eax + 0x270], 0x3f800000
mov dword [eax + 0x274], 0xffffffff
mov ecx, dword [ebp - 0x28]
mov dword [eax + 0x278], ecx
mov ecx, dword [eax]
mov dword [eax + 0x2a8], ecx
mov dword [eax + 0x30c], 0
mov dword [eax + 0x308], 0
movups xmmword [eax + 0x2f4], xmm0
movups xmmword [esi + 0x10], xmm0
movups xmmword [esi], xmm0
mov dword [eax + 0x304], 0
mov byte [eax + 0x330], 0
mov dword [eax + 0x338], 0
mov dword [eax + 0x334], 0
mov ecx, dword [ebp - 0x18]
mov dword fs:[0], ecx
add esp, 0x30
pop esi
pop edi
pop ebx
pop ebp
ret 8