Function at 0x1000f6c0
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
lea esp, [esp - 4]
pushfd
push ebx
xor bx, bx
mov ebx, 0xffffde13
push eax
lahf
not bl
shr bh, 6
push edx
ror dx, 3
daa
bswap edx
dec edx
push ecx
dec ecx
push edx
inc cl
aam 0xa
bsf edx, ebx
stc
sub edx, eax
sahf
sar edx, 6
lea ebx, [edx + ebx - 0x7000]
or bx, bx
xadd eax, ebx
mov ebx, dword [esp + 0x10]
btc ax, 3
push ebx
push ebx
dec cx
mov ecx, dword [esp + 0xc]
not edx
mov edx, dword [esp + 0x10]
not eax
mov eax, dword [esp + 0x1c]
push eax
popfd
mov eax, dword [esp + 0x14]
lea esp, [esp + 0x20]
mov dword [esp], 0xffffffff
lea esp, [esp - 4]
lea esp, [esp - 0x24]
pushfd
push eax
aam 0xa
not eax
test dx, 0xf7
not eax
aad 0xa
cmc
push edx
xor dx, dx
mov ax, 0x9628
push ecx
mov cx, 0x41da
div cx
rol dh, 2
bswap ecx
cdq
cdq
bt dx, 6
neg dx
cdq
push ebx
xadd ecx, ebx
sahf
bswap ecx
cbw
neg ebx
shl al, 1
das
stc
push ebx
mov edx, dword [esp]
pushfd
push ebx
push ecx
bsf ecx, ebx
push eax
das
aam 0xa
shr al, 0
mov ax, 5
mov cx, 0x40
push edx
mul cx
bswap eax
and cx, 0xdb
push ebx
bswap ebx
dec ecx
pop edx
not ax
not bx
cbw
push edx
bsr ax, cx
lahf
neg ah
aam 0xa
clc
aaa
dec ax
cwd
bsf ecx, ebx
bswap ebx
das
mov eax, dword [esp + 8]
bsf edx, ecx
bswap ecx
mov ecx, dword [esp + 0xc]
neg edx
mov edx, dword [esp + 4]
clc
xadd ebx, ebx
mov ebx, dword [esp + 0x14]
push ebx
popfd
mov ebx, dword [esp + 0x10]
push eax
lea esp, [esp + 0x1c]
lea esp, [esp + 4]
stc
cmc
mov ax, 0xba
mov cx, 0xc8
mul cx
mov ax, 0x1a
mov cx, 0xf2
mul cx
mov edx, dword [esp + 8]
sar ah, 5
mov eax, dword [esp + 0xc]
mov ebx, dword [esp]
mov dword [esp + 0x34], ebx
pop ebx
mov ebx, dword [esp + 0x30]
not ch
mov ecx, dword [esp + 0xc]
push ecx
popfd
mov ecx, dword [esp]
lea esp, [esp + 0x34]
mov dword [esp], 0x3015e30
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push ebx
push esi
jmp 0x1000fa4a
mov ecx, dword [edi]
mov eax, dword [ecx]
mov edx, dword [ebp - 0x28]
mov eax, dword [eax + 0x18]
push edx
call eax
add dword [ebp + 0x14], 2
cmp word [ebp - 0x1c], ax
jne 0x1000f87a
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
cmp eax, ecx
jne 0x1000fa74
mov edx, dword [ebp + 0x18]
cmp dword [ebp + 0x14], edx
jne 0x1000f8ef
lea eax, [ebp + 0xc]
jmp 0x1000f9ee
mov ecx, dword [ebp - 0x10]
ja 0x1000f9f0
push eax
mov ax, 0x43
push ecx
mov cx, 0xf0
pushfd
push edx
mul cx
cdq
push eax
aas
not dl
bswap eax
lahf
lahf
shl dx, 4
dec ax
push ebx
bswap ebx
xor bl, dh
aad 0xa
lahf
cmc
cdq
inc cx
not cl
xor edx, edx
mov eax, 0x1b70
mov ecx, 0xb19a
div ecx
ror eax, 0
mov eax, 0xc53e
mov ecx, 0x40f3
mul ecx
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 8]
lahf
mov eax, dword [esp + 0x14]
stc
add ebx, ebx
mov ebx, dword [esp + 0xc]
push ebx
popfd
mov ebx, dword [esp]
lea esp, [esp + 0x18]
jbe 0x1000f9f0
cmp byte [ebp + 0x20], 0
je 0x1000f9eb
cmp eax, ecx
lea eax, [ebp + 0xc]
jmp 0x1000f9e5
push 0x2faed57
pushfd
push edx
sar edx, 6
push eax
shl eax, 5
cdq
btc ax, 1
push ebx
dec bx
cwd
bsf bx, dx
push eax
shr ebx, 0
mov ebx, dword [esp + 4]
push ecx
bswap ecx
push ecx
pop edx
nop
not ecx
mov ecx, dword [esp]
cdq
bt edx, 6
mov edx, dword [esp + 0x10]
sahf
daa
mov eax, dword [esp + 0xc]
cmp bx, 0x63
push ecx
mov ecx, dword [esp + 0x18]
push ecx
popfd
pop ecx
lea esp, [esp + 0x18]
jmp fcn.100056b0
je 0x1000f9ee
lea eax, [ebp - 0x10]
mov ecx, dword [eax]
mov eax, dword [ebp + 8]
jmp 0x1000fc7d
mov ecx, dword [edi]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x1c]
mov edx, dword [edx + 0x18]
push eax
call edx
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 4], 0
movzx eax, ax
lea edi, [ecx + 4]
mov dword [ebp - 0x1c], eax
jmp 0x1000faad
push edi
mov eax, dword [0x3027864]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
cmp eax, ecx
je 0x1000f866
lea esp, [esp]
mov ecx, dword [ebp + 0x14]
cmp ecx, dword [ebp + 0x18]
je 0x1000f872
movzx ecx, word [ecx]
mov dword [ebp - 0x28], ecx
mov ecx, eax
add eax, 2
mov dword [ebp + 0xc], eax
movzx edx, word [ecx]
mov ecx, dword [ebp + 0x1c]
cmp dword [ecx + 4], 0
lea edi, [ecx + 4]
mov dword [ebp - 0x1c], edx
jne 0x1000fa28
lea eax, [ebp - 0x14]
push eax
jmp 0x1000f903
jne 0x1000f83d
lea edx, [ebp - 0x20]
push edx
call fcn.100056b0
lea esp, [esp - 4]
lea esp, [esp - 0x2c]
push eax
lahf
pushfd
aam 0xa
cbw
aaa
push ebx
btc ax, 6
cbw
aam 0xa
mov dword [esp + 0x34], ecx
pop ecx
push ebx
push edx
xadd edx, ebx
bsr dx, cx
stc
aad 0xa
btc dx, 0
sar bx, 4
inc bl
das
not ax
sar dx, 2
mov cx, bx
mov ebx, dword [esp + 4]
push eax
xor edx, edx
mov eax, 0x9277
mov ecx, 0xb8c6
div ecx
mov eax, dword [esp + 0xc]
push eax
popfd
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 4]
lea esp, [esp + 0x40]
mov dword [esp], eax
mov dword [ebp - 4], 1
call fcn.1000a670
mov ebx, dword [ebp - 0x20]
add esp, 4
mov dword [edi], eax
mov dword [ebp - 4], 0xffffffff
test ebx, ebx
je 0x1000f83d
push 0
lea ecx, [ebp - 0x24]
push 0x2faefcd
push ecx
lea ecx, [ecx - 0x4f63]
pushfd
cmc
nop
push eax
inc ax
lahf
push ebx
bts ebx, 1
push edx
bswap edx
rol bx, 4
not ecx
shl dx, 5
xor dx, dx
mov ax, 0x9251
mov cx, 0x8f05
div cx
inc ecx
or ax, 0x9aff
cmp ecx, 0xe0
clc
test ah, 0x4c
cmc
cwd
cdq
inc ecx
xadd ecx, ecx
dec eax
bt bx, 3
neg ch
mov ecx, dword [esp + 0x10]
bsr ax, ax
mov eax, dword [esp + 8]
push ecx
pop ebx
clc
and bl, 0xe4
mov ebx, dword [esp + 0xc]
push ebx
popfd
mov ebx, dword [esp + 4]
bswap edx
mov edx, dword [esp]
lea esp, [esp + 0x14]
jmp fcn.10063a85
mov dword fs:[0], ecx
mov ecx, dword [esp]
pushfd
push eax
aas
push edx
cdq
lahf
das
cbw
test ebx, 0x4997
cdq
push ebx
not ebx
bswap edx
aam 0xa
inc ax
not ebx
daa
bswap edx
push ecx
and ch, 0x92
cwd
sahf
add bx, 0x92
sub al, 0x38
rol dx, 2
mov edx, dword [esp + 8]
push edx
push eax
bts ebx, 3
lahf
mov eax, dword [esp + 0x14]
inc ch
mov ecx, dword [esp + 8]
push ecx
pop ebx
mov ebx, dword [esp + 0xc]
stc
push eax
mov eax, dword [esp + 0x1c]
push eax
popfd
pop eax
lea esp, [esp + 0x1c]
lea esp, [esp + 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [eax], ecx
mov ecx, dword [ebp - 0xc]
jmp 0x1000fbea