Function at 0x7e0ca8
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffdc
push ebx
push esi
push edi
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov ebx, dword [ebp + 0xc]
xor edx, edx
push ebp
push 0x7e11c3
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp + 8]
mov byte [eax], 1
mov eax, dword [ebp - 4]
cmp byte [eax + 0x159c], 0
je 0x7e0db6
mov eax, dword [ebp - 4]
cmp dword [eax + 0x4e0], 1
jne 0x7e0d4a
mov eax, dword [ebp - 4]
inc dword [eax + 0x15a0]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f0]
call fcn.005f6738
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x15a0]
jle 0x7e0d2e
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x15a0]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f0]
mov edx, dword [ebp - 0x10]
call fcn.005f6988
jmp 0x7e0d3f
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f0]
call fcn.005f6a5c
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 4]
inc dword [eax + 0x15a0]
jmp 0x7e0dc7
mov eax, dword [ebp - 4]
cmp byte [eax + 0x159c], 0
je 0x7e0d89
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x15a0]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x1598]
jge 0x7e0d89
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x15a0]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f0]
mov edx, dword [ebp - 0x10]
call fcn.005f6988
jmp 0x7e0d9a
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f0]
call fcn.005f6a5c
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x15a0]
dec edx
xor eax, eax
call fcn.00437fc0
mov edx, dword [ebp - 4]
mov dword [edx + 0x15a0], eax
jmp 0x7e0dc7
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f0]
call fcn.005f6a5c
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f0]
mov edx, dword [eax]
call dword [edx + pe_nt_image_headers32]
mov edx, dword [ebp - 0x10]
call fcn.0057b790
mov dword [ebx], eax
cmp dword [ebx], 0
je 0x7e0e12
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f0]
mov edx, dword [eax]
call dword [edx + pe_nt_image_headers32]
mov edx, dword [ebp - 0x10]
call fcn.0057b790
xor edx, edx
mov dword [eax + 0x520], edx
mov dword [eax + 0x524], 0x3ff00000
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3e4]
cmp eax, dword [ebp - 8]
je 0x7e1072
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x484]
mov edx, dword [eax]
call dword [edx + 0xc4]
test al, al
je 0x7e1072
cmp dword [ebx], 0
je 0x7e1072
cmp dword [ebp - 0xc], 0
je 0x7e1072
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx + 0xc]
test eax, eax
jle 0x7e1072
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx + 8]
test eax, eax
jle 0x7e1072
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x488]
cmp dword [eax + 0x230], 0
jle 0x7e1072
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x488]
mov eax, dword [ebx + 0x230]
cmp eax, dword [ebx + 0x220]
jg 0x7e1072
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48c]
cmp dword [eax + 0x230], 0
jle 0x7e1072
mov eax, dword [ebp - 4]
mov esi, dword [eax + 0x48c]
mov eax, dword [esi + 0x230]
cmp eax, dword [esi + 0x220]
jg 0x7e1072
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx + 0xc]
mov ebx, eax
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx + 8]
cmp ebx, eax
jle 0x7e0f08
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x488]
mov eax, dword [eax + 0x230]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x48c]
cmp eax, dword [edx + 0x230]
jl 0x7e0f3e
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx + 0xc]
mov ebx, eax
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx + 8]
cmp ebx, eax
jge 0x7e0f7a
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x488]
mov eax, dword [eax + 0x230]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x48c]
cmp eax, dword [edx + 0x230]
jle 0x7e0f7a
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x488]
mov eax, dword [eax + 0x230]
push eax
lea eax, [ebp - 0x18]
push eax
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx + 8]
push eax
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x48c]
mov ecx, dword [edx + 0x230]
pop edx
call fcn.008b8f08
jmp 0x7e0fb4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48c]
mov eax, dword [eax + 0x230]
push eax
lea eax, [ebp - 0x18]
push eax
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx + 8]
push eax
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx + 0xc]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x488]
mov ecx, dword [edx + 0x230]
pop edx
call fcn.008b8f08
mov esi, dword [ebp - 0x18]
test esi, esi
jle 0x7e1072
xor edx, edx
push ebp
push 0x7e106b
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx + 0xc]
mov ebx, eax
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx + 0x10]
cmp al, 1
sete al
xor ecx, ecx
mov dl, 1
mov eax, dword [0x5ce108]
call fcn.005d0d78
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
call fcn.005e95cc
mov eax, dword [ebp - 0x1c]
mov byte [eax + 0x30], 0
push 5
mov ecx, dword [ebp - 0x14]
mov edx, esi
mov eax, dword [ebp - 0x1c]
call fcn.005d4530
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f0]
mov edx, dword [eax]
call dword [edx + pe_nt_image_headers32]
mov edx, dword [ebp - 0x10]
call fcn.0057b790
add eax, 0x520
push eax
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
call dword [edx + 0xc]
mov dword [ebp - 0x20], eax
fild dword [ebp - 0x20]
mov dword [ebp - 0x24], ebx
fild dword [ebp - 0x24]
fmul dword [0x7e11d8]
fdivrp st(1)
pop eax
fstp qword [eax]
wait
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x7e1072
lea eax, [ebp - 0x1c]
call fcn.004120b8
ret
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
call fcn.007e0c00
mov ecx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f0]
mov edx, dword [ebp - 0x10]
call fcn.005f6638
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f0]
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x10]
call fcn.005f71a0
mov eax, dword [ebp - 4]
call fcn.007df590
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3e4]
cmp eax, dword [ebp - 8]
je 0x7e11b9
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f0]
mov edx, dword [ebp - 0x10]
call fcn.005f7d54
mov eax, dword [ebp - 4]
cmp byte [eax + 0x159c], 0
jne 0x7e10f9
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x2f0]
mov eax, ebx
call fcn.005fc0fc
mov edx, eax
mov eax, ebx
call fcn.005f6000
jmp 0x7e11af
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f0]
call fcn.005f6738
dec eax
cmp eax, dword [ebp - 0x10]
jne 0x7e112b
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x2f0]
mov eax, ebx
call fcn.005fc0fc
mov edx, eax
mov eax, ebx
call fcn.005f6000
jmp 0x7e11af
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f0]
mov edx, dword [ebp - 0x10]
call fcn.005f64d4
mov edx, dword [ebp - 4]
mov esi, dword [edx + 0x2f0]
cmp eax, dword [esi + 0x260]
jge 0x7e1162
mov eax, esi
mov edx, dword [ebp - 0x10]
call fcn.005f64d4
mov edx, eax
mov eax, esi
call fcn.005f6000
jmp 0x7e11af
mov eax, esi
mov edx, dword [ebp - 0x10]
call fcn.005f64d4
mov edx, dword [ebp - 4]
mov ebx, dword [edx + 0x2f0]
mov edx, dword [ebx + 0x48]
sub edx, dword [ebx + 0x278]
add edx, dword [ebx + 0x260]
cmp eax, edx
jle 0x7e11af
mov eax, ebx
mov edx, dword [ebp - 0x10]
call fcn.005f64d4
mov edx, eax
mov eax, dword [ebp - 4]
mov esi, dword [eax + 0x2f0]
mov eax, dword [esi + 0x48]
sub eax, dword [esi + 0x278]
sub edx, eax
mov eax, ebx
call fcn.005f6000
push 0x3e8
call sub.kernel32.dll_Sleep_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x7e11cd
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8