Function at 0x13f0dc9
Capabilities:
Check for peb ntglobalflag flag
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ecx
push esi
jmp 0x13f0c92
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x1c]
mov eax, dword [esi]
mov ebx, dword [eax + 8]
mov eax, dword [ebx + 0x3c]
add eax, ebx
mov eax, dword [eax + 0x78]
add eax, ebx
mov edx, 0
mov eax, dword [eax + 0x20]
add eax, ebx
mov esi, dword [eax]
add esi, ebx
call 0x13f0ccf
inc edi
je 0x13f0d14
jb 0x13f0d35
arpl word [ecx + 0x64], ax
jb 0x13f0d31
jae 0x13f0d41
add byte [edi - 0x47], bl
sldt word [eax]
add bl, dh
cmpsb byte [esi], byte es:[edi]
je 0x13f0cdf
add eax, 4
inc edx
jne 0x13f0cb7
mov eax, dword [ebx + 0x3c]
add eax, ebx
mov eax, dword [eax + 0x78]
add eax, ebx
mov eax, dword [eax + 0x24]
add eax, ebx
movzx edx, word [eax + edx*2]
mov eax, dword [ebx + 0x3c]
add eax, ebx
mov eax, dword [eax + 0x78]
add eax, ebx
mov eax, dword [eax + 0x1c]
add eax, ebx
mov esi, dword [eax + edx*4]
add esi, ebx
call 0x13f0d18
push esi
imul esi, dword [edx + 0x74], 0x416c6175
insb byte es:[edi], dx
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [eax], ax
push ebx
call esi
call 0x13f0d20
pop edi
cmp dword [edi - 0x1bdc], 1
je 0x13f0d7e
mov dword [edi - 0x1bd8], eax
push 0x40
inc eax
push 0x1000
add byte [eax], al
push dword [edi - 0x1c5b]
push 0
call dword [edi - 0x1bd8]
mov dword [edi - 0x1bc4], eax
push eax
push edi
push esi
push ebx
add esp, 0xc
pop dword [edi - 0x1bcc]
test eax, eax
jne 0x13f0d74
sub ah, ah
invalid
call 0x13f0d6d
inc ebp
js 0x13f0dcd
je 0x13f0db6
jb 0x13f0dd7
arpl word [ebp + 0x73], sp
jae 0x13f0d6d
push ebx
call esi
push 0
call eax
mov dword [edi - 0x1bdc], 1
call 0x13f0d9e
inc ebx
push 0x526b6365
insd dword es:[edi], dx
outsd dx, dword [esi]
je 0x13f0df3
inc esp
bound esi, qword gs:[ebp + 0x67]
jb 0x13f0de7
jb 0x13f0dfe
jae 0x13f0e00
outsb dx, byte [esi]
je 0x13f0d9e
push ebx
call esi
mov edi, eax
test edi, edi
je 0x13f0df4
lea eax, [ebp - 4]
push eax
mov dword [ebp - 4], 0
call 0x13f0dc9
inc edi
je 0x13f0dfe
add byte [edi + 0x65], al
je 0x13f0dfe
jne 0x13f0e2f
jb 0x13f0e24
outsb dx, byte [esi]
je 0x13f0e12
jb 0x13f0e33
arpl word [ebp + 0x73], sp
jae 0x13f0dc9
push ebx
call esi
call eax
push eax
call edi
rcl byte [eax - 1]
xlatb
test eax, eax
je 0x13f0e2c
mov eax, dword [ebp - 4]
cld
test eax, eax
je 0x13f0e2c
call 0x13f0ded
inc ebp
js 0x13f0e4d
je 0x13f0e36
jb 0x13f0e57
outsd dx, dword [esi]
arpl word [ebp + 0x73], sp
jae 0x13f0ded
push ebx
call esi
push 0
call eax
shr al, 1
adc al, byte [eax]
add byte [eax], al
call 0x13f0e0b
dec ecx
jae 0x13f0e40
bound esi, qword gs:[ebp + 0x67]
jne 0x13f0e67
jb 0x13f0e54
jb 0x13f0e6b
jae 0x13f0e6d
outsb dx, byte [esi]
je 0x13f0e0b
push ebx
call esi
call eax
test eax, eax
je 0x13f0e2c
call 0x13f0e25
inc ebp
js 0x13f0e85
je 0x13f0e6e
jb 0x13f0e8f
arpl word [ebp + 0x73], sp
jae 0x13f0e25
add byte [ebx - 1], dl
salc
push ebx
call esi
push 0
call eax
jmp 0x13f0e3c
dec ebp
push eax
jb 0x13f0ea2
je 0x13f0e9a
arpl word [eax + 0x65], si
outsb dx, byte [esi]
je 0x13f0e58
outsb dx, byte gs:[esi]
add byte fs:[esi - 0x75], bl
in eax, 0x5d
pop esi
mov esp, ebp
pop ebp
ret 0xc
jb 0x13f0ebe
je 0x13f0eb6
arpl word [eax + 0x62], si
imul ebp, dword gs:[bp + 3], 0xfc45c7
bound esp, qword [ebp + 0x67]
imul ebp, dword [esi + 3], 0xfc45c7
outsb dx, byte [esi]
add eax, edi
inc ebp
cld
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ecx + 0x30], ah
add byte [eax], al
add byte [eax + 0x40], al
mov eax, dword fs:[0x30]
inc eax
inc eax
mov eax, dword [eax]
and eax, 0xff
add byte [eax], al
add byte [ecx + 0x458bfc45], cl
cld
add byte [eax], al
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
cmp eax, 1
jne 0x13f0e93
call 0x13f0e8c
inc ebp
js 0x13f0eec
je 0x13f0ed5
jb 0x13f0ef6
arpl word [ebp + 0x73], sp
jae 0x13f0e8c
push ebx
call esi
push 0
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x1c]
inc eax
or al, 0x8b
jo 0x13f0ebb
mov eax, dword [esi]
mov ebx, dword [eax + 8]
mov eax, dword [ebx + 0x3c]
add eax, ebx
pop eax
or byte [ebx - 0x3cfcc3bd], cl
mov eax, dword [eax + 0x78]
add eax, ebx
mov edx, 0
mov eax, dword [eax + 0x20]
add eax, ebx
mov esi, dword [eax]
add esi, ebx
call 0x13f0ed0
call 0x13f0ed0
add byte [eax], al
add byte [edi + 0x65], al
je 0x13f0f15
inc edi
je 0x13f0f15
jb 0x13f0f36
arpl word [ecx + 0x64], ax
jb 0x13f0f32
jae 0x13f0f42
add byte [edi - 0x47], bl
sldt word [eax]
add bl, dh
cmpsb byte [esi], byte es:[edi]
je 0x13f0ee0
add eax, 4
inc edx
jne 0x13f0eb8
mov eax, dword [ebx + 0x3c]
add eax, ebx
mov eax, dword [eax + 0x78]
add eax, ebx
mov eax, dword [eax + 0x24]
add eax, ebx
movzx edx, word [eax + edx*2]
mov eax, dword [ebx + 0x3c]
and al, 3
ret
add eax, ebx
mov eax, dword [eax + 0x78]
add eax, ebx
mov eax, dword [eax + 0x1c]
add eax, ebx
mov esi, dword [eax + edx*4]
add esi, ebx
jmp 0x13f0f17
add byte fs:[esi - 0x75], bl
in eax, 0x5d
pop esi
mov esp, ebp
pop ebp
ret 0xc
imul ebp, dword [esi + 3], 0xfc45c7
add byte [eax], al
add byte [ecx + 0x30], ah
add byte [eax], al
add byte [ebx - 0x1f7c97c0], cl
jo 0x13f0ed2
inc ebp
cld
add byte [eax], al
add byte [eax], al
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0x68]
and eax, 0x70
mov dword [ebp - 4], eax
inc ebp
cld
mov eax, dword [ebp - 4]
cmp eax, 1
jne 0x13f0f6b
call 0x13f0f64
inc ebp
js 0x13f0fc4
je 0x13f0fad
jb 0x13f0fce
arpl word [ebp + 0x73], sp
jae 0x13f0f64
push ebx
call esi
push 0
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x1c]
mov eax, dword [esi]
mov ebx, dword [eax + 8]
mov eax, dword [ebx + 0x3c]
add eax, ebx
mov eax, dword [eax + 0x78]
add eax, ebx
mov edx, 0
mov eax, dword [eax + 0x20]
add eax, ebx
mov esi, dword [eax]
add esi, ebx
call 0x13f0fa8
inc edi
je 0x13f0fed
jb 0x13f100e
arpl word [ecx + 0x64], ax
jb 0x13f100a
jae 0x13f101a
add byte [edi - 0x47], bl
sldt word [eax]
add bl, dh
cmpsb byte [esi], byte es:[edi]
je 0x13f0fb8
add eax, 4
inc edx
jne 0x13f0f90
mov eax, dword [ebx + 0x3c]
add eax, ebx
mov eax, dword [eax + 0x78]
add eax, ebx
mov eax, dword [eax + 0x24]
add eax, ebx
movzx edx, word [eax + edx*2]
mov eax, dword [ebx + 0x3c]
and al, 3
ret
add eax, ebx
mov eax, dword [eax + 0x78]
add eax, ebx
mov eax, dword [eax + 0x1c]
add eax, ebx
mov esi, dword [eax + edx*4]
add esi, ebx
jmp 0x13f0fef
add byte fs:[esi - 0x75], bl
in eax, 0x5d
pop esi
mov esp, ebp
pop ebp
ret 0xc
add byte [eax], dl
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
adc dl, byte [ebx]
or eax, 0x130d0a00
add byte [ebx], cl
adc edx, dword [edi]
add byte [0xb001515], dl
sbb dword [esi], esp
add byte [edx], dl
sbb dword [0x3b1a0f00], esp
add byte [0x900381b], dl
and ch, byte [edx]
add byte [0x9002a23], dl
and al, 0x35
add byte [esi], dl
sub byte [eax], bh
add byte [edx], cl
xor bh, byte [esi]
add byte [edx], bl
xor edi, dword [eax + eax]
daa
daa
daa
add byte [ecx], ah
and dword [0x38383800], esi
add byte [edx + ebx], dl
inc esi
add byte [0x1800422a], al
daa
dec eax
add byte [ecx], cl
xor eax, 0x37180045
inc edi
add byte [eax], bl
sub dword [ebp], edx
or bh, byte [edx]
pop esp
add byte [eax], bl
aaa
push esi
add byte [ecx], dh
sub ecx, dword [edx]
and dh, byte [0x37240047]
pop ecx
add byte [edi + ebp], cl
add byte [0x1900652b], dl
imul eax, dword ss:[eax], 0x75341a
and byte [eax], ch
imul eax, dword [eax], 0x26
cmp byte [esi], ah
and dword [0x40030079], esi
dec ebx
add byte [ebx], cl
inc esi
push esi
add byte [ecx], bl
inc edi
push esi
add byte [0x36005f51], cl
inc eax
dec esp
add byte [edx], ah
inc ebp
push edi
add byte [ebx], cl
inc esi
bound eax, qword [eax]
pop ss
inc edi
push 0x68570900
add byte [ebx], dl
push ebp
add byte [edi], dl
push 0x66551300
add byte [edi], dl
inc edi
jp 0x13f10da
pop es
pop edi
jnp 0x13f10de
adc dl, byte [ebx + 0x77]
add byte [ecx*2 + 0x46300062], ah
bound eax, qword [eax]
xor byte [esi + 0x6c], al
insb byte es:[edi], dx
add byte [edi], ah
push esp
add byte gs:[edi + ecx*2], ch
jnp 0x13f10f2
sub al, 0x55
jle 0x13f10f6
xor al, 0x53
js 0x13f10fa
pop es
jp 0x13f10fe
adc esp, dword [esi + 0x77]
add byte [ebx], ah
pushal
push 0
sub dword [edx + 0x77], esp
add byte [0x40007c67], dh
inc eax
inc ebx
add byte [eax + 0x68], ch
push 0x7a7a7a00
add byte [edi], bl
mov byte ds:[eax], al
and al, 0x39
test dword [eax], eax
xor dword [esi], edi
test al, 0
push ds
dec ecx
xchg dword [eax], eax
adc eax, 0x1e008855
dec esi
xchg esp, eax
add byte [ebx], bl
pop ecx
cdq
add byte [esi + edx*2], bh
mov word [eax], es
adc dword [ecx - 0x7b], ebp
add byte [0x19008574], cl
jne 0x13f10d0
add byte [edx], dl
xchg bp, ax
add byte [edx], cl
jge 0x13f10e6
add byte [edx], bl
jle 0x13f10e4
add byte [eax], dh
outsb dx, byte [esi]
add dword [eax], 0x2f
ja 0x13f10e8
add byte [edx], bh
imul edx, dword [edi - 0x688cd400], 0x9b723c00
add byte [edi], dl
pop ebp
cmpsb byte [esi], byte es:[edi]
add byte [esi], ah
dec ecx
movsd dword es:[edi], dword [esi]
add byte [eax], ah
push edx
movsb byte es:[edi], byte [esi]
add byte [edi], ch
dec esi
mov esi, 0xb7552600
add byte [edi], dl
push 0x780e00a6
mov dword [0xbe7a1600], eax
add byte [0x4b00bd77], bh
insb byte es:[edi], dx
xchg ebp, eax
add byte [ecx + 0x5f], al
cmpsd dword [esi], dword es:[edi]
add byte [edx + 0x68], al
test eax, 0xae724000
add byte [edi + 0x6f], cl
mov dh, 0
xor eax, dword [esi - 0x34]
add byte [eax], ch
pop ecx
lds eax, [eax]
xor dl, byte [eax - 0x31]
add byte [edi], ch
pop esp
fadd dword [eax]
xor dword [ecx - 0x26], ebx
add byte [eax + edi*2], bl
retf