Function at 0x10098ea0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x1015f6f0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x3c
push ebx
mov bl, byte [0x1018ca3d]
mov al, bl
mov cl, 0x37
imul cl
mov dl, 0x84
mov cl, byte [0x1018ca36]
sub dl, al
push esi
mov al, dl
mov esi, dword [0x1018ca0c]
imul byte [0x1018ca3c]
mov byte [esp + 0xc], al
dec cl
mov eax, 0x1fe
mov byte [0x1018ca36], cl
mov ecx, dword [0x1018ca10]
push edi
cdq
idiv ecx
mov al, byte [edx + esi]
mov dl, byte [0x1018ca39]
imul dl
mov byte [esp + 0x14], al
mov eax, dword [esp + 0x10]
dec dl
push eax
mov eax, 0x166
mov byte [0x1018ca39], dl
cdq
idiv ecx
inc bl
push 0xffffffffffffffd8
mov byte [0x1018ca3d], bl
push 0x28
mov al, byte [edx + esi]
mov dl, 0xd2
imul dl
push eax
mov eax, 0x218
cdq
idiv ecx
mov al, byte [edx + esi]
push eax
call fcn.100980e0
mov cl, byte [0x1018ca36]
mov edx, dword [esp + 0x28]
add esp, 0x10
push eax
push ecx
push 0x7a
push edx
call fcn.100980d0
add esp, 0x14
call fcn.1009c8c0
mov eax, 0x37e
mov word [esp + 0x2a], 0xffb7
cdq
idiv dword [0x1018ca10]
mov eax, dword [0x1018ca0c]
mov word [esp + 0x32], 0xffbb
mov word [esp + 0x36], 0xffab
mov word [esp + 0x40], 0xffb6
mov word [esp + 0x44], 0xffb5
xor ebx, ebx
mov cl, byte [edx + eax]
mov eax, 0xffbd
mov byte [0x1018ca35], cl
mov ecx, 0xffb8
mov word [esp + 0x28], cx
mov word [esp + 0x2c], cx
mov word [esp + 0x30], cx
mov edx, 0xffa7
mov ecx, 0xffba
mov word [esp + 0x2e], ax
mov word [esp + 0x34], dx
mov word [esp + 0x38], ax
mov word [esp + 0x3a], cx
mov word [esp + 0x3c], cx
mov word [esp + 0x3e], dx
mov word [esp + 0x42], ax
mov al, byte [0x1019707c]
test al, 1
jne 0x10099054
or al, 1
push 0x20
mov byte [0x1019707c], al
call fcn.1013c2df
add esp, 4
mov dword [0x10197080], eax
xor edi, edi
mov si, word [esp + edi + 0x28]
push 0xb8
mov edx, esi
mov ecx, 0x10197080
and edx, 0xffff
push edx
call fcn.1002ea10
sub esi, eax
mov eax, dword [0x10197080]
add esi, 0xb8
mov word [edi + eax], si
add edi, 2
cmp edi, 0x1e
jb 0x10099007
mov ecx, dword [0x10197080]
push 0x100a8210
mov word [ecx + 0x1e], bx
call fcn.1013c36b
add esp, 4
mov dl, byte [esp + 0xf]
mov edi, dword [0x10197080]
push ebx
lea ecx, [esp + 0x1c]
mov byte [esp + 0x1c], dl
call fcn.1000bc70
push edi
call fcn.1013c2c2
add esp, 4
mov esi, eax
lea ecx, [esp + 0x18]
push 1
push esi
call fcn.1000c010
test al, al
je 0x100990a2
mov eax, dword [esp + 0x1c]
push esi
push edi
push eax
call fcn.100017d0
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x2c], esi
add esp, 0xc
mov word [ecx + esi*2], bx
mov ecx, dword [0x10191a54]
lea edx, [esp + 0x18]
push ebx
push edx
mov dword [esp + 0x58], ebx
call fcn.10058e60
mov ecx, eax
call fcn.10067e70
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x14], eax
cmp ecx, ebx
mov dword [esp + 0x50], 0xffffffff
je 0x100990f0
mov al, byte [ecx - 1]
cmp al, bl
je 0x100990e4
cmp al, 0xff
je 0x100990e4
dec al
mov byte [ecx - 1], al
jmp 0x100990f0
lea eax, [ecx - 2]
push eax
call fcn.101307a0
add esp, 4
mov al, byte [0x1018ca3b]
mov edx, 0x74
mov byte [0x1018ca38], al
dec al
mov byte [0x1018ca3b], al
mov eax, 0x6f
mov word [esp + 0x28], ax
mov word [esp + 0x2c], ax
mov word [esp + 0x30], ax
mov eax, 0x6c
mov word [esp + 0x36], ax
mov word [esp + 0x42], ax
mov al, byte [0x1019708c]
mov ecx, 0x5e
test al, 1
mov word [esp + 0x2a], 0x6e
mov word [esp + 0x2e], dx
mov word [esp + 0x32], 0x72
mov word [esp + 0x34], cx
mov word [esp + 0x38], 0x60
mov word [esp + 0x3a], 0x77
mov word [esp + 0x3c], cx
mov word [esp + 0x3e], 0x6d
mov word [esp + 0x40], dx
jne 0x100991cb
or al, 1
push 0x1e
mov byte [0x1019708c], al
call fcn.1013c2df
add esp, 4
mov dword [0x10197090], eax
xor edi, edi
mov si, word [esp + edi + 0x28]
push 1
mov eax, esi
mov ecx, 0x10197090
and eax, 0xffff
push eax
call fcn.1002ea10
mov ecx, dword [0x10197090]
sub esi, eax
inc esi
mov word [edi + ecx], si
add edi, 2
cmp edi, 0x1c
jb 0x10099186
mov edx, dword [0x10197090]
push 0x100a81d0
mov word [edx + 0x1c], bx
call fcn.1013c36b
add esp, 4
mov esi, dword [0x10197090]
mov al, byte [esp + 0xf]
push esi
mov byte [esp + 0x1c], al
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
call fcn.1013c2c2
add esp, 4
lea ecx, [esp + 0x18]
push eax
push esi
call fcn.1000bf40
lea ecx, [esp + 0x18]
push ebx
push ecx
mov ecx, dword [0x10191a54]
mov dword [esp + 0x58], 1
call fcn.10058e60
mov ecx, eax
call fcn.10067e70
mov ecx, dword [esp + 0x1c]
mov esi, eax
cmp ecx, ebx
mov dword [esp + 0x50], 0xffffffff
je 0x10099249
mov al, byte [ecx - 1]
cmp al, bl
je 0x1009923d
cmp al, 0xff
je 0x1009923d
dec al
mov byte [ecx - 1], al
jmp 0x10099249
add ecx, 0xfffffffe
push ecx
call fcn.101307a0
add esp, 4
inc byte [0x1018ca34]
call fcn.10098410
mov cl, byte [0x1018ca3a]
dec cl
cmp esi, ebx
mov byte [0x1018ca3a], cl
jne 0x1009927a
pop edi
pop esi
xor al, al
pop ebx
mov ecx, dword [esp + 0x3c]
mov dword fs:[0], ecx
add esp, 0x48
ret
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x48]
cmp edx, esi
pop edi
sbb eax, eax
pop esi
inc eax
pop ebx
mov dword fs:[0], ecx
add esp, 0x48
ret