Function at 0x200287ae
Capabilities:
Access peb ldr_data

Disassembly:
push dword [ebp + 8]
sub dword [esp], 0x37af4baf
pop eax
add eax, 0x37af4baf
push ecx
mov ecx, 0xffffffe4
add ecx, ebp
add eax, dword [ecx]
pop ecx
movsx ecx, byte [eax]
push ebp
mov ebp, 0x20
or ecx, ebp
pop ebp
push dword [ebp - 0x10]
sub dword [esp], 0x787b1660
pop edx
add edx, 0x787b1660
push dword [edx + 0x30]
xor dword [esp], 0x1aeb14b0
pop eax
xor eax, 0x1aeb14b0
push dword [ebp - 0x1c]
pop edx
xor esi, esi
push word [eax + edx*2]
xor word [esp], 0x83
pop si
xor si, 0x83
push ecx
mov ecx, 0x20
or esi, ecx
pop ecx
cmp ecx, esi
je 0x2002ca83
jmp 0x2001925a
push dword [ebp + 8]
xor dword [esp], 0x79606be6
pop eax
xor eax, 0x79606be6
push ecx
mov ecx, 0xffffffe4
add ecx, ebp
add eax, dword [ecx]
pop ecx
movsx ecx, byte [eax]
test ecx, ecx
jne 0x2002de80
jmp 0x200170f8
jmp 0x2001dff7
jmp 0x20022a54
jmp 0x2001a756
push dword [ebp - 0x10]
add dword [esp], 0x1f974492
pop edx
sub edx, 0x1f974492
push dword [edx + 0x18]
sub dword [esp], 0x384c1a79
pop eax
add eax, 0x384c1a79
push esi
mov esi, eax
mov dword [ebp - 0x20], esi
pop esi
jmp 0x20018227
push dword [ebp - 0x20]
pop eax
mov edi, dword [esp]
add esp, 4
mov esi, dword [esp]
add esp, 4
mov ebx, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 0x60
xchg dword [esp], eax
pop esp
jmp 0x20018757
push 0x15e1
mov dword [esp], ebp
push esp
pop ebp
push eax
mov eax, esp
add eax, 4
sub eax, 0x60
xchg dword [esp], eax
pop esp
push edx
mov dword [esp], ebx
push 0x4ac4
mov dword [esp], esi
push ebp
mov dword [esp], edi
jmp 0x20028691
mov esp, ebp
mov ebp, dword [esp]
add esp, 4
jmp 0x2002e187
jmp 0x20017609
push dword [ebp - 0x14]
xor dword [esp], 0x6b7e7fe7
pop ecx
xor ecx, 0x6b7e7fe7
cmp ecx, dword [ebp - 0x18]
je 0x20018227
jmp 0x20016c7f
jmp 0x20016ba7
push dword [ebp - 0x1c]
pop eax
push edi
mov edi, 1
add eax, edi
pop edi
mov dword [ebp - 0x1c], eax
jmp 0x20025fd6
jmp 0x20021fda
push ebx
mov ebx, 0xffffffec
add ebx, ebp
mov edx, dword [ebx]
pop ebx
push ecx
mov ecx, 8
sub edx, ecx
pop ecx
push eax
mov eax, edx
mov dword [ebp - 0x10], eax
pop eax
mov dword [ebp - 0x1c], 0x506879fb
shl dword [ebp - 0x1c], 2
shr dword [ebp - 0x1c], 5
xor dword [ebp - 0x1c], 0x3c111cb0
shl dword [ebp - 0x1c], 4
add dword [ebp - 0x1c], 0x1e3ec710
jmp 0x20025fd6
jmp 0x2001785d
push dword [ebp + 8]
pop ecx
push eax
mov eax, 0xffffffe4
add eax, ebp
add ecx, dword [eax]
pop eax
movsx edx, byte [ecx]
test edx, edx
je 0x20016ba7
jmp 0x2002a318
push esi
mov esi, 0x3ed60511
mov eax, 0xc129fb07
add eax, esi
pop esi
mov eax, dword fs:[eax]
push ebx
mov ebx, 0xfffffffc
add ebx, ebp
mov dword [ebx], eax
pop ebx
push ebx
mov ebx, 0xfffffffc
add ebx, ebp
mov eax, dword [ebx]
pop ebx
push dword [eax + 0x30]
pop ecx
push ebx
mov ebx, 0xfffffff8
add ebx, ebp
mov dword [ebx], ecx
pop ebx
push dword [ebp - 8]
pop edx
push dword [edx + 0xc]
pop eax
push esi
mov esi, eax
mov dword [ebp - 0xc], esi
pop esi
push ebx
mov ebx, 0xfffffff4
add ebx, ebp
mov ecx, dword [ebx]
pop ebx
push edi
mov edi, 0x14
add ecx, edi
pop edi
push ecx
pop dword [ebp - 0x18]
push ebx
mov ebx, 0xffffffe8
add ebx, ebp
mov edx, dword [ebx]
pop ebx
push dword [edx]
pop eax
push ebx
mov ebx, eax
mov dword [ebp - 0x14], ebx
pop ebx
push ecx
mov ecx, 0x7eac52fb
add ecx, 0x4dfb34f6
sub ecx, 0xcca787f1
mov dword [ebp - 0x20], ecx
pop ecx
jmp 0x20019d74
jmp 0x200186c9
jmp 0x2002d470
jmp 0x2001b524
jmp 0x2001420f
push ebx
mov ebx, 0xffffffec
add ebx, ebp
mov ecx, dword [ebx]
pop ebx
push dword [ecx]
sub dword [esp], 0x18f635bb
pop edx
add edx, 0x18f635bb
push esi
mov esi, edx
mov dword [ebp - 0x14], esi
pop esi
jmp 0x20019d74
ret