Function at 0x1001ba30
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x100876bb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x140
push ebx
push esi
push edi
push 7
pop esi
mov edi, ecx
mov dword [esp + 0x50], edx
mov dword [esp + 0xc], esi
lea ecx, [esp + 0xa4]
push 3
mov dword [esp + 0x30], edi
call fcn.10016c3e
xor ebx, ebx
mov dword [esp + 0x154], ebx
mov dword [esp + 0x10], ebx
jmp 0x1001ba94
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xa4]
mov dword [eax + ecx*4], ebx
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 3
jl 0x1001ba82
mov dword [esp + 0xc], ebx
cmp dword [esp + 0xc], esi
push 2
pop esi
je 0x1001bc36
mov dword [esp + 0x10], esi
mov dword [esp + 0x40], 0x56a218f0
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
sub eax, dword [esp + 0x10]
je 0x1001bace
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0xa4]
cmp dword [eax + 4], ebx
je 0x1001bbfc
mov dword [esp + 0x18], 0x4cd021aa
xor dl, dl
push 0x6a8
mov ecx, 0x13b5
call fcn.1001b9e6
pop ecx
mov dword [esp + 0x10], ebx
jmp 0x1001bbef
push dword [esp + 0x70]
movdqa xmm0, xmmword [0x100083b0]
lea eax, [esp + 0x114]
push eax
lea eax, [esp + 0x108]
mov dword [esp + 0x7c], ebx
push eax
push ebx
lea ecx, [esp + 0x84]
mov dword [esp + 0x88], ebx
movdqu xmmword [esp + 0x110], xmm0
mov dword [esp + 0x8c], ebx
call fcn.1001815d
mov byte [esp + 0x154], 1
mov eax, dword [esp + 0x74]
mov dword [eax], ebx
mov dword [esp + 0x28], ebx
jmp 0x1001bb6c
mov eax, dword [esp + 0x28]
mov dword [esp + eax*4 + 0x110], 0xffff
inc dword [esp + 0x28]
cmp dword [esp + 0x28], 3
jl 0x1001bb59
mov eax, dword [esp + 0xa4]
xor ecx, ecx
inc ecx
sub ecx, dword [eax + 4]
je 0x1001bb98
mov eax, dword [esp + 0x110]
mov eax, dword [esp + 0x18]
add eax, dword [esp + 0x10]
je 0x1001bb98
xor edx, edx
inc edx
jmp 0x1001bb9a
mov edx, ebx
mov eax, dword [esp + 0x74]
xor ecx, ecx
cmp edx, dword [eax]
sete cl
sub ecx, 0x30fc
neg ecx
sbb ecx, ecx
inc ecx
mov dword [esp + 0x40], ecx
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x1001bbcc
push ebx
push 0x6dfe
call fcn.100259b8
pop ecx
pop ecx
mov eax, dword [esp + 0x74]
inc dword [eax]
cmp dword [eax], 0xf
jne 0x1001bb53
lea ecx, [esp + 0x74]
mov byte [esp + 0x154], bl
call fcn.1001742d
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 8
jne 0x1001bb01
jmp 0x1001bc27
mov dword [esp + 0x40], ebx
jmp 0x1001bc21
lea eax, [esp + 0x40]
push eax
push ebx
lea eax, [esp + 0xac]
push eax
push 0x568d
call fcn.1001de65
add esp, 0x10
inc dword [esp + 0x40]
cmp dword [esp + 0x40], esi
jle 0x1001bc02
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 7
jne 0x1001baac
or dword [esp + 0x154], 0xffffffff
lea ecx, [esp + 0xa4]
call fcn.1001742d
cmp dword [edi + 0x10], ebx
jne 0x1001bc56
xor al, al
jmp 0x1001c583
mov eax, dword [esp + 0x50]
mov dword [eax], ebx
mov dword [esp + 0x28], 6
mov dword [esp + 0xc], 0xfffffff9
mov dword [esp + 0x18], 1
mov dword [esp + 0x18], 0xea53061e
mov dword [esp + 0xc], 0x31fadacd
mov dword [esp + 0xc], 0xfffffffa
mov dword [esp + 0x18], 0x9e885dc1
mov dword [esp + 0xc], ebx
jmp 0x1001bcad
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x128], 0x5cb5542a
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 3
jl 0x1001bc9a
push 0x4f70
lea eax, [esp + 0x43]
mov byte [esp + 0x43], bl
push eax
push 0x7f2f
push ebx
call fcn.1001c5d6
mov eax, dword [esp + 0x38]
add esp, 0x10
mov dword [esp + 0xc], eax
cmp dword [esp + 0xc], 1
jle 0x1001bcea
cmp dword [esp + 0xc], ebx
je 0x1001bcea
xor eax, eax
inc eax
jmp 0x1001bcec
mov eax, ebx
mov dword [esp + 0xc], eax
xor edx, edx
mov eax, dword [esp + 0xc]
mov dword [esp + 0x12c], eax
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x28]
cmp ecx, eax
setl dl
cmp dword [edi + 0x14], 0x10
mov dword [esp + 0x18], edx
jb 0x1001bd1f
mov esi, dword [edi]
jmp 0x1001c0dd
mov esi, edi
mov dword [esp + 0x28], edi
cmp dword [edi + 0x14], 0x10
jb 0x1001bd2f
mov ecx, dword [edi]
jmp 0x1001bd31
mov ecx, edi
mov eax, dword [edi + 0x10]
add eax, ecx
push 1
cmp esi, eax
je 0x1001c403
lea ecx, [esp + 0x60]
call fcn.10016c3e
push 2
pop eax
mov dword [esp + 0x154], eax
mov dword [esp + 0x24], 0x7c7ce53d
mov dword [esp + 0x38], 0xe197e7c1
mov dword [esp + 0x58], 0xffffffff
mov dword [esp + 0x18], 0xe60e4510
mov dword [esp + 0xc], ebx
jmp 0x1001bd8c
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x5c]
mov dword [eax + ecx*4], 0xa5d6
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 1
jl 0x1001bd79
mov dword [esp + 0x24], ebx
cmp dword [esp + 0x24], ebx
jl 0x1001bfd4
push 2
pop esi
mov dword [esp + 0x30], 0xa1e1c5a3
mov dword [esp + 0x8c], 0x9edb9cc5
mov dword [esp + 0xc], ebx
jmp 0x1001bdcd
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x54], 0xffffffff
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 1
jl 0x1001bdbd
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x5c]
mov eax, dword [ecx + eax*4]
add eax, dword [ecx + edx*4]
xor edx, edx
cmp eax, 0x23a266d2
mov eax, dword [esp + 0x24]
mov eax, dword [esp + 0x24]
mov dword [esp + 0x18], eax
setl dl
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x24]
mov edi, dword [esp + 0x5c]
mov dword [esp + 0x44], eax
imul eax, edx, 0xa9b
xor edx, edx
cmp eax, dword [edi + ecx*4]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x44]
setne dl
mov eax, dword [edi + eax*4]
sub eax, edx
sub eax, dword [edi + ecx*4]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x24]
mov eax, dword [esp + 0x54]
mov dword [esp + 0x38], eax
cmp dword [esp + 0x38], ebx
je 0x1001bf81
mov dword [esp + 0x10], 0x37d6c505
mov dword [esp + 0xc], 0x903a798b
mov dword [esp + 0x38], ebx
jmp 0x1001bf75
mov dword [esp + 0x44], 0x546153b
mov dword [esp + 0xc], ebx
jmp 0x1001be83
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x68], 0xffffffff
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 1
jl 0x1001be73
mov eax, dword [esp + 0x54]
mov dword [esp + 0x10], 9
mov ecx, dword [esp + 0x10]
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp ecx, 8
setge al
mov dword [esp + 0x30], eax
mov dword [esp + 0x10], ebx
cmp dword [esp + 0x10], ebx
jl 0x1001bf71
mov dword [esp + 0x18], 0xbf68d270
mov dword [esp + 0x30], ebx
jmp 0x1001bf5d
mov dword [esp + 0xc], 0x76fef6f1
mov eax, dword [esp + 0x18]
neg eax
sbb eax, eax
inc eax
mov dword [esp + 0x68], eax
mov edi, dword [esp + 0x30]
imul eax, eax, 0xfffffff8
cmp esi, eax
mov eax, dword [esp + 0x5c]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, dword [eax + edi*4]
setl dl
cmp edx, dword [esp + 0x10]
jne 0x1001bf0a
cmp dword [esp + 0x68], ebx
je 0x1001bf0a
xor edi, edi
inc edi
jmp 0x1001bf0c
mov edi, ebx
mov ecx, dword [esp + 0x24]
xor edx, edx
mov eax, dword [esp + 0x5c]
cmp edi, dword [eax + ecx*4]
setne dl
add edx, 3
mov dword [esp + 0xc], edx
xor edx, edx
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x5c]
cmp dword [eax + ecx*4], 0xfffffff9
setge dl
xor ecx, ecx
mov dword [esp + 0x58], edx
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x58]
sub edx, eax
mov eax, dword [esp + 0x18]
cmp edx, eax
setg cl
mov dword [esp + 0xc], ecx
inc dword [esp + 0x30]
cmp dword [esp + 0x30], ebx
jle 0x1001becb
dec dword [esp + 0x10]
jns 0x1001beba
inc dword [esp + 0x38]
cmp dword [esp + 0x38], ebx
jle 0x1001be65
jmp 0x1001bfc2
lea eax, [esp + 0x58]
mov dword [esp + 0x94], ebx
push eax
push 0x331c
lea eax, [esp + 0x9c]
push eax
lea eax, [esp + 0x68]
push eax
push 0x27e8
push ebx
lea eax, [esp + 0x50]
push eax
lea eax, [esp + 0xa8]
push eax
lea edx, [esp + 0x50]
lea ecx, [esp + 0x44]
call fcn.1001aed9
add esp, 0x20
dec dword [esp + 0x24]
jns 0x1001bda4
mov esi, dword [esp + 0x28]
mov edi, dword [esp + 0x2c]
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x1001bfeb
xor dl, dl
mov ecx, 0x7a34
call fcn.1001b9d3
or dword [esp + 0x154], 0xffffffff
lea ecx, [esp + 0x5c]
call fcn.1001742d
mov al, byte [esi]
cmp al, 0x30
jl 0x1001c0e6
cmp al, 0x39
jg 0x1001c0e6
push 2
pop eax
mov dword [esp + 0x4c], 0x99841b3c
lea ecx, [esp + 0xc0]
push eax
call fcn.10016c3e
push 2
mov dword [esp + 0x158], 3
mov dword [esp + 0x10], ebx
pop edx
jmp 0x1001c050
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0xc0]
mov dword [eax + ecx*4], 3
inc dword [esp + 0xc]
cmp dword [esp + 0xc], edx
jl 0x1001c03a
mov dword [esp + 0x4c], 7
jmp 0x1001c076
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x1001c072
push ebx
call fcn.1001dfa7
pop ecx
dec dword [esp + 0x4c]
cmp dword [esp + 0x4c], 0xfffffff8
jge 0x1001c060
push 0x5dc7
lea eax, [esp + 0xc4]
mov edx, 0x3b51
push eax
push 0x28af
push 0x5293
lea eax, [esp + 0x5c]
mov ecx, 0x4cfe
push eax
push 1
push 0x4718
push 0x3c5f
call fcn.1001aed9
or dword [esp + 0x174], 0xffffffff
lea ecx, [esp + 0xe0]
add esp, 0x20
call fcn.1001742d
mov edx, dword [esp + 0x50]
movsx eax, byte [esi]
imul ecx, dword [edx], 0xa
add ecx, 0xffffffd0
add eax, ecx
inc esi
mov dword [edx], eax
mov dword [esp + 0x28], esi
jmp 0x1001bd25
mov dword [esp + 0x2c], ebx
lea ecx, [esp + 0xe4]
mov dword [esp + 0x2c], 0xfe7d8a87
push 1
call fcn.10016c3e
xor edx, edx
mov dword [esp + 0x2c], 0xfc0272a
inc edx
mov dword [esp + 0x2c], edx
mov dword [esp + 0x10], ebx
jmp 0x1001c12b
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xe4]
mov dword [eax + ecx*4], 0x5ba7723
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edx
jl 0x1001c115
push 2
mov dword [esp + 0x14], ebx
pop esi
jmp 0x1001c14d
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0xb8], 0xffff
inc dword [esp + 0x10]
cmp dword [esp + 0x10], esi
jl 0x1001c13a
dec dword [esp + 0xb8]
lea ecx, [esp + 0xe4]
call fcn.1001742d
mov dl, 1
lea ecx, [esp + 0x50]
call fcn.1001b9d3
push 3
lea ecx, [esp + 0x84]
call fcn.10016c3e
mov dword [esp + 0x154], 4
lea ecx, [esp + 0x98]
mov dword [esp + 0x20], 0x1cecb457
mov dword [esp + 0x34], 0xffffffff
push esi
call fcn.10016c3e
lea eax, [esp + 0x90]
mov byte [esp + 0x154], 5
push eax
mov dl, 1
lea ecx, [esp + 0x84]
call fcn.1001b9e6
pop ecx
push ebx
lea eax, [esp + 0x94]
push eax
lea eax, [esp + 0xa0]
push eax
call fcn.1001e7f2
add esp, 0xc
mov dword [esp + 0x20], esi
cmp dword [esp + 0x20], ebx
jl 0x1001c3e6
mov dword [esp + 0x48], 0xc829ed89
lea ecx, [esp + 0xcc]
push 3
call fcn.10016c3e
push ebx
lea eax, [esp + 0x100]
mov byte [esp + 0x158], 6
push eax
lea eax, [esp + 0xd4]
push eax
call fcn.1001dd76
add esp, 0xc
cmp dword [esp + 0x20], ebx
jne 0x1001c23c
mov eax, dword [esp + 0x20]
cmp dword [esp + 0x20], 0x47d1afd0
jne 0x1001c23c
mov edx, ebx
jmp 0x1001c23f
xor edx, edx
inc edx
mov edi, dword [esp + 0x20]
mov ecx, dword [esp + 0x20]
mov esi, dword [esp + 0x80]
mov eax, dword [esp + 0x80]
mov eax, dword [eax + ecx*4]
mov dword [esi + edi*4], eax
mov eax, dword [esp + 0x48]
add eax, edx
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x34]
sub ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x20]
neg ecx
sbb ecx, ecx
inc ecx
add eax, ecx
xor ecx, ecx
cmp eax, 0xfff7
mov eax, dword [esp + 0x98]
setne cl
xor edx, edx
cmp dword [esi + edi*4], ecx
mov esi, dword [eax]
mov eax, dword [esp + 0x20]
setle dl
xor ecx, ecx
cmp edx, eax
setl cl
xor eax, eax
cmp ecx, esi
setne al
xor ecx, ecx
cmp eax, esi
setg cl
add ecx, esi
cmp ecx, 0xfffffffa
sbb eax, eax
neg eax
cmp eax, dword [esp + 0x48]
jle 0x1001c32b
mov dword [esp + 0x70], 0x7a9b65ca
mov dword [esp + 0x34], ebx
jmp 0x1001c2e5
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x1001c2e1
push 0x7ba7
push ebx
call fcn.1001dd44
pop ecx
pop ecx
dec dword [esp + 0x34]
cmp dword [esp + 0x34], 0xffffffe2
jl 0x1001c2c9
push 0x3fa4
lea eax, [esp + 0x24]
push eax
lea eax, [esp + 0xa0]
push eax
lea eax, [esp + 0x40]
push eax
push ebx
lea eax, [esp + 0x94]
push eax
push 0x7f83
lea eax, [esp + 0x64]
push eax
lea eax, [esp + 0x90]
push eax
call fcn.1001c659
add esp, 0x24
jmp 0x1001c3bb
mov dword [esp + 0x18], 0xbc71f8b1
mov dword [esp + 0x10], ebx
jmp 0x1001c34c
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x11c], 0x5746ac1
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 3
jl 0x1001c339
xor ecx, ecx
mov dword [esp + 0x10], ebx
inc ecx
jmp 0x1001c368
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x6c], ecx
inc dword [esp + 0x10]
cmp dword [esp + 0x10], ecx
jl 0x1001c35c
dec dword [esp + 0x6c]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x124]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x80]
mov edx, dword [eax + ecx*4]
xor ecx, ecx
mov eax, dword [esp + 0x20]
neg edx
cmp edx, eax
sete cl
mov dword [esp + 0x48], ecx
xor ecx, ecx
mov eax, dword [esp + 0x48]
cmp eax, 0x46ed
mov eax, dword [esp + 0x98]
setle cl
mov dword [eax], ecx
lea ecx, [esp + 0xcc]
cmp dword [esp + 0x48], ebx
jne 0x1001c3e1
mov byte [esp + 0x154], 5
call fcn.1001742d
dec dword [esp + 0x20]
jns 0x1001c1ed
jmp 0x1001c3e6
call fcn.1001742d
lea ecx, [esp + 0x98]
call fcn.1001742d
lea ecx, [esp + 0x80]
call fcn.1001742d
jmp 0x1001bc4f
mov dword [esp + 0x14], 0xe83c7730
lea ecx, [esp + 0xdc]
mov dword [esp + 0x48], 0xe52d8cb4
call fcn.10016c3e
mov dword [esp + 0x154], 7
lea ecx, [esp + 0xf0]
push 2
mov dword [esp + 0x1c], 0x31d8b9db
pop esi
mov dword [esp + 0x2c], 1
mov dword [esp + 0x2c], 0x9f6a715c
mov dword [esp + 0x2c], 0xbf495e3b
push esi
call fcn.10016c3e
mov byte [esp + 0x154], 8
mov dword [esp + 0x2c], 0x75d5f8d9
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x18], 8
mov dword [esp + 0x18], 0xffffffff
mov dword [esp + 0x18], 0xc7153413
mov dword [esp + 0x1c], ebx
jmp 0x1001c49b
mov eax, dword [esp + 0x1c]
mov dword [esp + eax*4 + 0x13c], ebx
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], 3
jl 0x1001c48c
mov dword [esp + 0x1c], ebx
jmp 0x1001c4be
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0xd8]
mov dword [eax + ecx*4], 0x6db6d037
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], 1
jl 0x1001c4a8
lea eax, [esp + 0x1c]
push eax
push ebx
lea eax, [esp + 0xf8]
push eax
push 0xff3
push 0xda4
call fcn.1001dae2
add esp, 0x14
mov dword [esp + 0x1c], ebx
jmp 0x1001c4fa
mov eax, dword [esp + 0x1c]
mov dword [esp + eax*4 + 0xb0], ebx
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], esi
jl 0x1001c4eb
mov dword [esp + 0x10], ebx
jmp 0x1001c531
mov dword [esp + 0xc], 0xfffffff6
mov dword [esp + 0xc], ebx
jmp 0x1001c523
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x134], esi
inc dword [esp + 0xc]
cmp dword [esp + 0xc], esi
jl 0x1001c514
dec dword [esp + 0x18]
inc dword [esp + 0x10]
cmp dword [esp + 0x10], esi
jle 0x1001c506
mov eax, dword [esp + 0x2c]
sub eax, 0x43de4f81
mov dword [esp + 0x10], eax
jne 0x1001c55f
mov dword [esp + 0x18], 0xffff
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x44]
cmp dword [esp + 0xb4], ebx
je 0x1001c562
xor ebx, ebx
inc ebx
lea ecx, [esp + 0xf0]
mov dword [esp + 0xb0], ebx
call fcn.1001742d
lea ecx, [esp + 0xd8]
call fcn.1001742d
mov al, 1
mov ecx, dword [esp + 0x14c]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret