Function at 0x1003f340
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x3018838
mov eax, dword fs:[0]
push eax
sub esp, 0x44
mov eax, dword [0x3027864]
xor eax, ebp
mov dword [ebp - 0x10], eax
lea esp, [esp - 4]
push ecx
bswap ecx
pushfd
push eax
push edx
xor ah, dh
push ebx
shl bx, 4
test cl, 0xe9
cwd
rol dx, 6
push edx
push eax
nop
inc bx
clc
shl dx, 1
push edx
sahf
bts ax, 6
not cx
and dx, 0x772f
pop edx
neg ax
cdq
cmp bh, 0x37
bswap ecx
btc ax, 3
cdq
dec bh
mov ebx, dword [esp + 8]
inc edx
shl ecx, 2
xor edx, edx
mov eax, 0x38ea
mov ecx, 0xa812
div ecx
mov eax, dword [esp + 0x14]
push eax
popfd
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0xc]
lea esp, [esp + 0x1c]
mov dword [esp], ebx
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [0x3028aec]
cmp dword [eax + 0x30], 8
mov ebx, dword [ebp + 0xc]
jb 0x1003f471
mov edx, dword [eax + 0x1c]
jns 0x1003f474
lea esp, [esp - 0x18]
pushfd
push eax
bt ax, 4
push ecx
dec ch
push ebx
shr bx, 6
shl cx, 0
aaa
push edx
neg dx
neg bh
bswap ebx
shr ax, 6
nop
bt ebx, 0
aas
nop
push eax
lahf
neg eax
aad 0xa
clc
bswap ebx
dec al
aad 0xa
daa
pop edx
xchg ecx, ebx
shl ah, 1
bsr dx, cx
das
daa
mov eax, dword [esp + 0xc]
dec bh
mov ebx, dword [esp]
mov dword [esp + 0x28], ebx
pop edx
add cx, dx
mov edx, dword [esp + 0x24]
cmp ecx, ebx
sar cl, 3
mov ecx, dword [esp + 4]
neg bl
mov ebx, dword [esp]
clc
push ebx
mov ebx, dword [esp + 0x10]
push ebx
popfd
pop ebx
lea esp, [esp + 0x28]
js 0x1003f474
lea edx, [eax + 0x1c]
xor eax, eax
mov word [ebp - 0x48], ax
mov eax, edx
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x38], 0
lea esi, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1003f494
sub eax, esi
sar eax, 1
push eax
push edx
lea ecx, [ebp - 0x48]
jmp 0x1003f642
pop ebp
ret 8
call fcn.100649af
mov esp, ebp
jmp 0x1003f4b1
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
jae 0x1003f4b5
pushfd
sahf
push eax
daa
push ecx
neg ecx
lea esp, [esp - 4]
pushfd
push eax
aad 0xa
push ebx
dec bx
push edx
xor edx, edx
mov eax, 0x4a3f
push ecx
mov ecx, 0x4b04
div ecx
nop
mov ax, 0xcb
mov cx, 0x2c
mul cx
sar ecx, 1
bswap edx
and edx, edx
aaa
and cx, cx
aaa
bt ebx, 0
rol ecx, 1
shl dx, 1
dec dh
push ecx
nop
inc bl
lea eax, [ecx + 0x68b]
lea ebx, [edx + eax - 0x3dd4]
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 8]
stc
pop ecx
mov ecx, dword [esp]
aaa
mov eax, dword [esp + 0x10]
push eax
popfd
cbw
mov eax, dword [esp + 0xc]
lea esp, [esp + 0x14]
mov dword [esp], ebx
mov bx, 0x41f1
btc bx, 2
mov eax, 0x3098
mov ecx, 0xd5d5
push edx
mul ecx
aas
not cl
not ax
das
xor al, 0x1e
inc al
cmc
nop
cdq
lea eax, [ebx + ebx - 0x14b4]
lahf
aaa
bsf bx, dx
cbw
mov bh, dl
push ecx
nop
cdq
not ebx
test bl, al
sar cx, 6
mov ecx, dword [esp + 0xc]
cwd
bswap edx
mov edx, dword [esp + 4]
mov ax, 0x922
mov eax, dword [esp + 0x10]
and bl, 0x13
mov ebx, dword [esp + 0x14]
push ebx
popfd
mov ebx, dword [esp + 8]
lea esp, [esp + 0x18]
jb 0x1003f4b5
call fcn.100645c0
add esp, 4
xor eax, eax
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x2c], ax
cmp dword [ebp - 0x34], ebx
jb 0x1003f5de
mov ecx, dword [ebp - 0x48]
push ecx
call fcn.100645c0
add esp, 4
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [esp]
pushfd
push edx
not edx
push eax
push ebx
xadd eax, ebx
cdq
sub bx, 0xc5
dec eax
das
push ecx
not ch
test ah, 0xcc
nop
bswap eax
push eax
cmc
not edx
mov edx, dword [esp + 0x10]
ror ebx, 0
xadd ebx, eax
inc bl
bswap ebx
mov ebx, dword [esp + 8]
aaa
mov eax, dword [esp + 0x14]
push eax
popfd
lea ecx, [eax + ecx + 0x2bac]
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 4]
lea esp, [esp + 0x18]
lea esp, [esp + 4]
pop esi
pop ebx
jmp 0x1003f4c1
call fcn.1000deb0
mov ecx, dword [ebp + 8]
push 0
push ecx
lea edx, [ebp - 0x2c]
push edx
mov dword [ebp - 4], 0
call fcn.1003f0e0
mov eax, dword [ebp - 0x48]
add esp, 0xc
cmp dword [ebp - 0x34], 8
mov dword [ebp - 0x50], 4
mov dword [ebx], 0
jae 0x1003f67d
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0x4c]
push ecx
lea esp, [esp - 4]
pushfd
cmc
push eax
push ecx
xadd ecx, eax
push ebx
bswap ebx
push edx
or dx, ax
cmc
add edx, eax
neg bh
nop
cmp cx, ax
daa
not ecx
neg ecx
mov ecx, dword [esp + 8]
das
cbw
bts ebx, 6
daa
sub eax, edx
sahf
bswap edx
xchg bl, bl
mov ebx, dword [esp + 4]
mov edx, 0x1d0b
clc
btc edx, 0
mov eax, dword [esp + 0x10]
push eax
popfd
cdq
mov edx, dword [esp]
push ebx
bswap eax
mov eax, dword [esp + 0x10]
lea esp, [esp + 0x18]
mov dword [esp], eax
push 0x80000001
call dword [0x301d018]
mov esi, eax
test esi, esi
jne 0x1003f807
cmp dword [ebp - 0x18], 8
mov eax, dword [ebp - 0x2c]
jae 0x1003f6ff
lea eax, [ebp - 0x2c]
lea edx, [ebp - 0x50]
push edx
lea esp, [esp - 4]
pushfd
lea esp, [esp - 4]
pushfd
push edx
btc edx, 6
push eax
shl ax, 3
push ecx
inc cx
mov ax, 0x33
mov cx, 0x43
mul cx
sahf
cdq
push edx
stc
push ecx
aaa
shr dh, 1
sahf
daa
inc dx
bts ax, 3
push ebx
sar bh, 4
neg bx
inc bh
cbw
bts ebx, 6
bswap ebx
shl al, 1
ror dx, 3
xadd ebx, ecx
mov ebx, dword [esp]
mov ecx, dword [esp + 0xc]
sar edx, 2
mov edx, dword [esp + 0x14]
aas
mov eax, dword [esp + 0x10]
stc
push eax
mov eax, dword [esp + 0x1c]
push eax
popfd
pop eax
lea esp, [esp + 0x1c]
mov dword [esp], eax
aas
push edx
cdq
push ecx
inc ecx
clc
lahf
lea edx, [ecx + ecx + 0x77a9]
bsr cx, ax
aam 0xa
mov eax, 0xb1a1
mov ecx, 0xa846
mul ecx
push ebx
add bx, dx
das
or ebx, ebx
neg cx
shl eax, 5
bswap edx
lahf
mov ax, 0xd2
mov cx, 0x86
mul cx
inc edx
and ebx, ebx
cwd
dec ecx
dec dh
mov edx, dword [esp + 8]
aaa
xadd eax, ebx
daa
mov eax, dword [esp + 0xc]
test bl, ch
dec bl
cmc
xor ebx, 0x56
push ecx
and bx, cx
mov ebx, dword [esp + 0x14]
push ebx
popfd
mov ebx, dword [esp + 4]
mov ecx, dword [esp + 8]
lea esp, [esp + 0x18]
mov dword [esp], ebx
push 0
push 0
push eax
mov eax, dword [ebp - 0x4c]
push eax
call dword [0x301d01c]
mov esi, eax
test esi, esi
jne 0x1003f807
mov ecx, dword [ebp - 0x4c]
push ecx
call dword [0x301d020]
mov ebx, 8
cmp dword [ebp - 0x18], ebx
jb 0x1003f5b5
mov edx, dword [ebp - 0x2c]
push edx
jmp 0x1003f5ad