Function at 0x1000b2c0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x1007410c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push ebp
push esi
push edi
mov esi, ecx
push 0
push 0
push 0x10305
lea ecx, [esi + 0x84]
mov dword [esp + 0x1c], esi
call fcn.1000d250
mov dword [esp + 0x5c], 0
mov dword [esi + 0x168], 0x10093404
mov dword [esp + 0x14], 0x7f8a
mov dword [esp + 0x18], 0x7f00
mov dword [esp + 0x1c], 0x7f03
mov dword [esp + 0x20], 0x7f89
mov dword [esp + 0x24], 0x7f8b
mov dword [esp + 0x28], 0x7f01
mov dword [esp + 0x2c], 0x7f81
mov dword [esp + 0x30], 0x7f88
mov dword [esp + 0x34], 0x7f80
mov dword [esp + 0x38], 0x7f86
mov dword [esp + 0x3c], 0x7f83
mov dword [esp + 0x40], 0x7f85
mov dword [esp + 0x44], 0x7f82
mov dword [esp + 0x48], 0x7f84
mov dword [esp + 0x4c], 0x7f04
mov dword [esp + 0x50], 0x7f02
lea ebx, [esp + 0x14]
lea edi, [esi + 0x1ac]
mov ebp, 0x10
mov eax, dword [ebx]
push eax
push 0
mov dword [edi - 0x40], eax
call dword [sym.imp.USER32.dll_LoadCursorA]
mov dword [edi], eax
add ebx, 4
add edi, 4
dec ebp
jne 0x1000b397
mov ecx, dword [esp + 0x64]
mov ebx, 1
mov byte [esp + 0x5c], bl
mov dword [esi], 0x1009340c
lea eax, [ecx - 1]
cmp eax, 0x1f
ja case.0x1000b3d3.2
xor edx, edx
mov dl, byte [eax + 0x1000b55c]
jmp dword [edx*4 + 0x1000b554]
mov dword [esi + 8], ecx
jmp 0x1000b3e6
mov dword [esi + 8], 0x20
mov ecx, esi
call fcn.1000bfc0
test eax, eax
jne 0x1000b3fb
push eax
call dword [sym.imp.USER32.dll_GetDC]
mov dword [esi + 0x48], eax
lea edi, [esi + 0x30]
push edi
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov eax, dword [esp + 0x6c]
mov ecx, dword [edi]
xor ebp, ebp
mov dword [esi + 0x14], eax
push ebp
push eax
mov eax, dword [edi + 4]
mov dword [esi + 0xc], 0xcc0020
push eax
push ecx
mov dword [esi + 0x10], ebx
call fcn.1000d570
mov dword [edi], eax
mov eax, dword [esi + 0x48]
mov dword [edi + 4], edx
mov dl, byte [esp + 0x68]
mov edi, dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 0x76
push eax
mov byte [esi + 0x18], dl
call edi
mov ecx, dword [esi + 0x48]
push 0x75
push ecx
mov dword [esi + 0x1c], eax
call edi
mov dword [esi + 0x20], eax
mov eax, 0x20
cdq
idiv dword [esi + 8]
mov edx, dword [esi + 0x48]
mov edi, dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push edx
mov dword [esi + 0x28], ebp
mov byte [esi + 0x24], al
call edi
mov dword [esi + 0x4c], eax
mov eax, dword [esi + 0x48]
push eax
call edi
mov ecx, dword [esi + 0x48]
mov dword [esi + 0x50], eax
push ecx
call edi
mov edx, dword [esi + 0x20]
mov ecx, dword [esi + 8]
mov dword [esi + 0x54], eax
mov eax, dword [esi + 0x1c]
push edx
lea edi, [esi + 0x58]
lea ebx, [esi + 0x5c]
push eax
push ecx
mov ecx, esi
mov dword [edi], ebp
mov dword [ebx], ebp
call fcn.1000be20
mov edx, dword [esi + 0x20]
mov ecx, dword [esi + 8]
mov dword [esi + 0x64], eax
mov eax, dword [esi + 0x1c]
push edx
push eax
push ecx
mov ecx, esi
call fcn.1000be20
mov edx, dword [esi + 0x64]
push ebp
push ebp
mov dword [esi + 0x68], eax
mov eax, dword [esi + 0x48]
push edi
mov edi, dword [sym.imp.GDI32.dll_CreateDIBSection]
push ebp
push edx
push eax
call edi
mov dword [esi + 0x6c], eax
mov ecx, dword [esi + 0x64]
mov edx, dword [esi + 0x48]
push ebp
push ebp
push ebx
push ebp
push ecx
push edx
call edi
mov ecx, dword [esi + 0x4c]
mov edi, dword [sym.imp.GDI32.dll_SelectObject]
mov dword [esi + 0x70], eax
mov eax, dword [esi + 0x6c]
push eax
push ecx
call edi
mov edx, dword [esi + 0x70]
mov eax, dword [esi + 0x50]
push edx
push eax
call edi
mov ecx, dword [esi + 0x64]
mov edx, dword [ecx + 0x14]
shl edx, 1
push edx
call sub.MFC42.DLL_operatornew
mov ecx, dword [esi + 0x20]
mov dword [esi + 0x78], eax
mov eax, dword [esi + 0x64]
mov dword [esi + 0x7c], ebp
xor edx, edx
add esp, 4
mov eax, dword [eax + 0x14]
div ecx
mov edx, dword [esi + 8]
push 6
push edx
mov dword [esi + 0x80], eax
mov eax, dword [esi + 0x14]
push eax
push ecx
mov ecx, dword [esi + 0x1c]
push ecx
lea ecx, [esi + 0x84]
call fcn.1000d2b0
mov ecx, dword [esp + 0x54]
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x50
ret 0xc
mov ecx, dword [esp + 0x28]
mov edi, dword [ebp]
add ebp, 4
add edi, ecx
mov ecx, esi
mov edx, ecx
mov al, byte [edi - 1]
mov bl, al
mov bh, bl
mov eax, ebx
shl eax, 0x10
mov ax, bx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov eax, dword [esp + 0x14]
dec eax
mov dword [esp + 0x14], eax
inc esp
and al, 0x14
inc esp
and al, 0x14
jne 0x1001b623
mov edx, dword [esp + 0x24]
mov edi, dword [esp + 0x44]
mov eax, dword [edi + 0xb4]
lea ecx, [eax + eax*4]
shl ecx, 4
shl eax, 4
mov esi, ecx
mov ecx, 0x4000
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x48]
sub ecx, esi
mov esi, dword [eax + 0xc]
mov dword [esp + 0x14], ecx
xor ecx, ecx
test esi, esi
mov dword [esp + 0x28], ecx
jle 0x1001b920
add edx, 0xfffffffe
mov dword [esp + 0x3c], edx
mov edx, dword [esp + 0x4c]
lea eax, [edx - 4]
mov dword [esp + 0x24], eax
mov edx, dword [esp + 0x50]
mov ebx, dword [eax + 4]
mov ebp, dword [eax + 0xc]
mov edi, dword [eax]
mov ecx, dword [edx + ecx*4]
mov esi, dword [eax + 8]
mov dword [esp + 0x44], ecx
xor ecx, ecx
mov cl, byte [ebp]
lea edx, [ebx + 2]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x4c], ecx
xor edx, edx
xor ecx, ecx
mov dl, byte [edi]
mov cl, byte [esi]
mov dword [esp + 0x2c], edx
mov dword [esp + 0x18], ecx
xor edx, edx
lea ecx, [ebp + 2]
mov dl, byte [ebx]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x30], ecx
xor ebx, ebx
mov bl, byte [edi + 1]
lea ecx, [edi + 2]
mov dword [esp + 0x20], ecx
lea eax, [esi + 2]
xor ecx, ecx
mov edi, ebx
mov cl, byte [ebp + 1]
xor ebx, ebx
mov bl, byte [eax]
mov dword [esp + 0x38], eax
add ecx, edi
mov edi, dword [esp + 0x1c]
mov eax, ebx
xor ebx, ebx
mov bl, byte [edi]
mov edi, dword [esp + 0x2c]
add eax, edx
mov ebp, ebx
add eax, ecx
mov ecx, dword [esp + 0x4c]
add ebp, eax
mov eax, dword [esp + 0x18]
add ebp, eax
mov eax, dword [esp + 0x20]
add ebp, edi
xor ebx, ebx
add ebp, ecx
xor ecx, ecx
mov cl, byte [eax]
xor eax, eax
add ecx, edi
mov edi, dword [esp + 0x30]
mov al, byte [edi]
lea ecx, [ecx + ebp*2]
mov ebp, dword [esp + 0x4c]
add eax, ecx
add eax, ebp
mov dword [esp + 0x4c], ebx
imul eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x34]
xor ecx, ecx
mov cl, byte [esi + 1]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x4c]
add edx, ecx
mov al, byte [ebx + 1]
mov ecx, dword [esp + 0x18]
add eax, edx
add eax, ecx
mov ecx, dword [esp + 0x34]
imul eax, dword [esp + 0x14]
lea edx, [ecx + eax + 0x8000]
mov eax, dword [esp + 0x44]
sar edx, 0x10
mov byte [eax], dl
inc eax
mov dword [esp + 0x44], eax
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x38]
mov esi, dword [esp + 0x20]
test edx, edx
jbe 0x1001b85c
mov dword [esp + 0x4c], edx
xor edx, edx
xor ebx, ebx
mov dl, byte [edi + 1]
mov bl, byte [esi + 1]
add edx, ebx
xor ebx, ebx
mov bl, byte [ecx - 1]
mov ebp, dword [esp + 0x44]
add edx, ebx
xor ebx, ebx
mov bl, byte [eax - 1]
add eax, 2
add edx, ebx
xor ebx, ebx
mov bl, byte [edi]
add ecx, 2
add edx, ebx
xor ebx, ebx
mov bl, byte [ecx]
add esi, 2
add edx, ebx
xor ebx, ebx
mov bl, byte [esi - 2]
add edi, 2
add edx, ebx
xor ebx, ebx
mov bl, byte [eax]
add edx, ebx
xor ebx, ebx
mov bl, byte [edi - 3]
lea edx, [ebx + edx*2]
xor ebx, ebx
mov bl, byte [esi - 3]
add edx, ebx
xor ebx, ebx
mov bl, byte [esi]
add edx, ebx
xor ebx, ebx
mov bl, byte [edi]
add edx, ebx
xor ebx, ebx
imul edx, dword [esp + 0x10]
mov bl, byte [ecx - 1]
mov dword [esp + 0x38], edx
xor edx, edx
mov dl, byte [eax - 1]
add ebx, edx
xor edx, edx
mov dl, byte [ecx - 2]
add ebx, edx
xor edx, edx
mov dl, byte [eax - 2]
add ebx, edx
mov edx, dword [esp + 0x38]
imul ebx, dword [esp + 0x14]
lea edx, [edx + ebx + 0x8000]
sar edx, 0x10
mov byte [ebp], dl
mov edx, dword [esp + 0x4c]
inc ebp
dec edx
mov dword [esp + 0x44], ebp
mov dword [esp + 0x4c], edx
jne 0x1001b7b1
xor edx, edx
xor ebx, ebx
mov dl, byte [edi + 1]
mov bl, byte [eax - 1]
mov dword [esp + 0x38], edx
xor edx, edx
mov dl, byte [esi + 1]
mov dword [esp + 0x34], eax
mov dword [esp + 0x4c], edx
xor edx, edx
mov dl, byte [ecx + 1]
mov dword [esp + 0x20], edx
xor edx, edx
mov dl, byte [eax + 1]
xor eax, eax
mov ebp, edx
xor edx, edx
mov dl, byte [ecx - 1]
mov al, byte [esi]
add edx, ebx
xor ebx, ebx
mov bl, byte [edi]
mov dword [esp + 0x30], ebp
add ebx, ebp
mov ebp, dword [esp + 0x4c]
add ebx, edx
mov edx, dword [esp + 0x20]
add eax, ebx
xor ebx, ebx
add eax, edx
xor edx, edx
mov dl, byte [edi - 1]
mov edi, dword [esp + 0x4c]
mov bl, byte [esi - 1]
add eax, ebp
mov ebp, dword [esp + 0x38]
add edx, edi
add eax, ebp
lea edx, [edx + eax*2]
mov eax, dword [esp + 0x34]
add ebx, edx
xor edx, edx
mov dl, byte [ecx]
xor ecx, ecx
mov cl, byte [eax]
mov eax, dword [esp + 0x30]
add eax, edx
add ebx, ebp
mov ebp, dword [esp + 0x20]
imul ebx, dword [esp + 0x10]
add ecx, eax
mov eax, dword [esp + 0x44]
add ecx, ebp
imul ecx, dword [esp + 0x14]
lea edx, [ebx + ecx + 0x8000]
mov ecx, dword [esp + 0x24]
sar edx, 0x10
mov byte [eax], dl
mov edx, dword [esp + 0x48]
lea eax, [ecx + 8]
mov ecx, dword [esp + 0x28]
mov esi, dword [edx + 0xc]
inc ecx
cmp ecx, esi
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ecx
jl 0x1001b6a8
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x30
ret