Function at 0x100b7910
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
push ecx
mov eax, dword fs:[0x2c]
xorps xmm0, xmm0
push ebx
mov ebx, ecx
mov ecx, dword [0x11d0c5b8]
push esi
push edi
mov ecx, dword [eax + ecx*4]
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x1c], 0
mov dword [ebx + 0x24], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0
mov dword [ebx + 0x30], 0
mov dword [ebx + 0x34], 0
mov dword [ebx + 0x38], 0
mov dword [ebx + 0x3c], 0
mov dword [ebx + 0x40], 0
mov dword [ebx + 0x44], 0
mov dword [ebx + 0x48], 0
mov dword [ebx + 0x4c], 0
mov dword [ebx + 0x50], 0
mov dword [ebx + 0x54], 0
movups xmmword [ebx + 0x32c], xmm0
mov dword [ebp - 4], ecx
movups xmmword [ebx + 0x33c], xmm0
movups xmmword [ebx + 0x34c], xmm0
mov dword [ebx + 0x1474], 0
mov dword [ebx + 0x147c], 0
mov dword [ebx + 0x1478], 0
mov dword [ebx], 0x11229324
movups xmmword [ebx + 0x195c], xmm0
mov dword [ebx + 0x52c8], 0x112292bc
mov dword [ebx + 0x5498], 0x10000
mov dword [ebx + 0x549c], 0x10000
mov dword [ebx + 0x54a0], 0x10000
mov dword [ebx + 0x54a4], 0x10000
mov word [ebx + 0x54a8], 0
mov eax, dword [0x11d23bc0]
cmp eax, dword [ecx + 0xc]
jg 0x100b7e74
lea edi, [ebx + 0x52d0]
mov ecx, 0x72
mov esi, 0x11ad12a0
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 4]
mov dword [ebx + 0x52c8], 0x112292f0
mov byte [ebx + 0x54b4], 1
mov dword [ebx + 0x54c8], 0x112292bc
mov dword [ebx + 0x5698], 0x10000
mov dword [ebx + 0x569c], 0x10000
mov dword [ebx + 0x56a0], 0x10000
mov dword [ebx + 0x56a4], 0x10000
mov word [ebx + 0x56a8], 0
mov eax, dword [0x11d23bc0]
cmp eax, dword [ecx + 0xc]
jg 0x100b7eb1
lea edi, [ebx + 0x54d0]
mov ecx, 0x72
mov esi, 0x11ad12a0
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 4]
mov dword [ebx + 0x54c8], 0x11229288
mov dword [ebx + 0x5698], 0xffff
mov dword [ebx + 0x569c], 0xffff
mov dword [ebx + 0x56a0], 0xffff
mov dword [ebx + 0x56a4], 0xffff
mov dword [ebx + 0x56b0], 0
mov dword [ebx + 0x56b4], 0
mov dword [ebx + 0x56b8], 0x112292bc
mov dword [ebx + 0x5888], 0x10000
mov dword [ebx + 0x588c], 0x10000
mov dword [ebx + 0x5890], 0x10000
mov dword [ebx + 0x5894], 0x10000
mov word [ebx + 0x5898], 0
mov eax, dword [0x11d23bc0]
cmp eax, dword [ecx + 0xc]
jg 0x100b7eee
lea edi, [ebx + 0x56c0]
mov ecx, 0x72
mov esi, 0x11ad12a0
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 4]
mov dword [ebx + 0x56b8], 0x11229254
mov dword [ebx + 0x58a8], 0x112292bc
mov dword [ebx + 0x5a78], 0x10000
mov dword [ebx + 0x5a7c], 0x10000
mov dword [ebx + 0x5a80], 0x10000
mov dword [ebx + 0x5a84], 0x10000
mov word [ebx + 0x5a88], 0
mov eax, dword [0x11d23bc0]
cmp eax, dword [ecx + 0xc]
jg 0x100b7f2b
lea edi, [ebx + 0x58b0]
mov ecx, 0x72
mov esi, 0x11ad12a0
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 4]
mov dword [ebx + 0x58a8], 0x11229220
mov dword [ebx + 0x5a90], 0x112292bc
mov dword [ebx + 0x5c60], 0x10000
mov dword [ebx + 0x5c64], 0x10000
mov dword [ebx + 0x5c68], 0x10000
mov dword [ebx + 0x5c6c], 0x10000
mov word [ebx + 0x5c70], 0
mov eax, dword [0x11d23bc0]
cmp eax, dword [ecx + 0xc]
jg 0x100b7f68
lea edi, [ebx + 0x5a98]
mov ecx, 0x72
mov esi, 0x11ad12a0
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 4]
mov dword [ebx + 0x5a90], 0x112291ec
mov dword [ebx + 0x5c80], 0x112292bc
mov dword [ebx + 0x5e50], 0x10000
mov dword [ebx + 0x5e54], 0x10000
mov dword [ebx + 0x5e58], 0x10000
mov dword [ebx + 0x5e5c], 0x10000
mov word [ebx + 0x5e60], 0
mov eax, dword [0x11d23bc0]
cmp eax, dword [ecx + 0xc]
jg 0x100b7fa5
lea edi, [ebx + 0x5c88]
mov ecx, 0x72
mov esi, 0x11ad12a0
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 4]
mov dword [ebx + 0x5c80], 0x112291b8
mov dword [ebx + 0x5e70], 0x112292bc
mov dword [ebx + 0x6040], 0x10000
mov dword [ebx + 0x6044], 0x10000
mov dword [ebx + 0x6048], 0x10000
mov dword [ebx + 0x604c], 0x10000
mov word [ebx + 0x6050], 0
mov eax, dword [0x11d23bc0]
cmp eax, dword [ecx + 0xc]
jg 0x100b7fe2
lea edi, [ebx + 0x5e78]
mov ecx, 0x72
mov esi, 0x11ad12a0
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebx + 0x16060]
mov dword [ebx + 0x5e70], 0x11229184
call fcn.1010bc10
mov ecx, dword [ebp - 4]
mov dword [ebx + 0x162e8], 0x112292bc
mov dword [ebx + 0x164b8], 0x10000
mov dword [ebx + 0x164bc], 0x10000
mov dword [ebx + 0x164c0], 0x10000
mov dword [ebx + 0x164c4], 0x10000
mov word [ebx + 0x164c8], 0
mov eax, dword [0x11d23bc0]
cmp eax, dword [ecx + 0xc]
jg 0x100b801f
lea edi, [ebx + 0x162f0]
xorps xmm0, xmm0
mov ecx, 0x72
mov esi, 0x11ad12a0
rep movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x162e8], 0x11229150
mov eax, ebx
mov dword [ebx + 4], 0
mov dword [ebx + 0x2de0], 0
mov dword [ebx + 0x2de4], 0
mov dword [ebx + 0x30], 0
mov dword [ebx + 0x2dd8], 0
mov dword [ebx + 0x2d98], 0
mov dword [ebx + 0x2d9c], 0
mov dword [ebx + 0x2da0], 0
mov dword [ebx + 0x2da4], 0
mov dword [ebx + 0x2dac], 0x40
mov dword [ebx + 0x2db0], 0x40
mov dword [ebx + 0x2db4], 0xffc0
mov dword [ebx + 0x2db8], 0
mov dword [ebx + 0x2dbc], 0
mov dword [ebx + 0x2dd0], 0x80
mov byte [ebx + 0x1710], 0
mov dword [ebx + 8], 0
movups xmmword [ebx + 0x2dec], xmm0
pop edi
movups xmmword [ebx + 0x2dfc], xmm0
pop esi
movups xmmword [ebx + 0x2e0c], xmm0
movups xmmword [ebx + 0x2e1c], xmm0
movups xmmword [ebx + 0x2e2c], xmm0
mov dword [ebx + 0x164d0], 0
pop ebx
mov esp, ebp
pop ebp
ret
push 0x11d23bc0
call fcn.10450d26
add esp, 4
cmp dword [0x11d23bc0], 0xffffffff
jne 0x100b7a46
push 0x80
push 0
push 0x11ad13e4
call fcn.10425c00
push 0x11d23bc0
call fcn.10450cdc
add esp, 0x10
jmp 0x100b7a46
push 0x11d23bc0
call fcn.10450d26
add esp, 4
cmp dword [0x11d23bc0], 0xffffffff
jne 0x100b7ab8
push 0x80
push 0
push 0x11ad13e4
call fcn.10425c00
push 0x11d23bc0
call fcn.10450cdc
add esp, 0x10
jmp 0x100b7ab8
push 0x11d23bc0
call fcn.10450d26
add esp, 4
cmp dword [0x11d23bc0], 0xffffffff
jne 0x100b7b5f
push 0x80
push 0
push 0x11ad13e4
call fcn.10425c00
push 0x11d23bc0
call fcn.10450cdc
add esp, 0x10
jmp 0x100b7b5f
push 0x11d23bc0
call fcn.10450d26
add esp, 4
cmp dword [0x11d23bc0], 0xffffffff
jne 0x100b7bca
push 0x80
push 0
push 0x11ad13e4
call fcn.10425c00
push 0x11d23bc0
call fcn.10450cdc
add esp, 0x10
jmp 0x100b7bca
push 0x11d23bc0
call fcn.10450d26
add esp, 4
cmp dword [0x11d23bc0], 0xffffffff
jne 0x100b7c35
push 0x80
push 0
push 0x11ad13e4
call fcn.10425c00
push 0x11d23bc0
call fcn.10450cdc
add esp, 0x10
jmp 0x100b7c35
push 0x11d23bc0
call fcn.10450d26
add esp, 4
cmp dword [0x11d23bc0], 0xffffffff
jne 0x100b7ca0
push 0x80
push 0
push 0x11ad13e4
call fcn.10425c00
push 0x11d23bc0
call fcn.10450cdc
add esp, 0x10
jmp 0x100b7ca0
push 0x11d23bc0
call fcn.10450d26
add esp, 4
cmp dword [0x11d23bc0], 0xffffffff
jne 0x100b7d0b
push 0x80
push 0
push 0x11ad13e4
call fcn.10425c00
push 0x11d23bc0
call fcn.10450cdc
add esp, 0x10
jmp 0x100b7d0b
push 0x11d23bc0
call fcn.10450d26
add esp, 4
cmp dword [0x11d23bc0], 0xffffffff
jne 0x100b7d81
push 0x80
push 0
push 0x11ad13e4
call fcn.10425c00
push 0x11d23bc0
call fcn.10450cdc
add esp, 0x10
jmp 0x100b7d81