Function at 0x10115ac0
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xf24
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, ecx
lea ebx, [esi - 4]
mov ecx, ebx
call fcn.10004ca0
cmp dword [eax], 0xffffffff
je 0x10115e25
mov ecx, dword [ebp + 0x14]
mov dword [edi + 0x18], esi
mov eax, dword [ecx]
mov dword [edi], eax
mov eax, dword [ecx + 4]
mov dword [edi + 4], eax
mov eax, dword [ecx + 8]
mov ecx, dword [ebp + 0x10]
mov dword [edi + 8], eax
mov eax, dword [ecx]
mov dword [edi + 0xc], eax
mov eax, dword [ecx + 4]
mov dword [edi + 0x10], eax
mov eax, dword [ecx + 8]
mov ecx, 0x32
mov dword [edi + 0x14], eax
lea eax, [esp + 0x60]
nop word [eax + eax]
mov dword [eax - 8], 0
lea eax, [eax + 0xc]
mov dword [eax - 0x10], 0
mov dword [eax - 0xc], 0
sub ecx, 1
jne 0x10115b20
mov ecx, 0x32
lea eax, [esp + 0x2b8]
nop dword [eax]
mov dword [eax - 8], 0
lea eax, [eax + 0x10]
mov dword [eax - 0x14], 0
mov dword [eax - 0x10], 0
mov dword [eax - 0xc], 0
sub ecx, 1
jne 0x10115b50
mov ecx, ebx
call fcn.10004ae0
mov cl, byte [ebp + 0x18]
movss xmm0, dword [eax]
mov eax, dword [ebx + 0x498]
movss dword [esp + 0x10], xmm0
cmp eax, dword [0x243b0a50]
jne 0x10115bb1
test cl, cl
jne 0x10115bb1
mov eax, dword [0x243b0a50]
mov dword [ebx + 0x498], eax
or dword [ebx + 0x4a0], 0x7ff00
jmp 0x10115c17
mov dword [ebx + 0x4ac], 0
mov dword [ebx + 0x4b0], 0
mov eax, dword [ebx + 0x4a0]
mov dword [ebx + 0x49c], eax
mov dword [ebx + 0x4a0], 0
mov eax, dword [0x243b0a50]
mov dword [ebx + 0x498], eax
or dword [ebx + 0x4a0], 0x7ff00
test cl, cl
je 0x10115c17
mov eax, dword [ebx + 0x67c]
lea eax, [eax + eax*2]
shl eax, 4
push eax
push dword [ebx + 0x670]
lea eax, [esp + 0x5d8]
push eax
call fcn.100ae310
add esp, 0xc
mov eax, dword [ebx + 0x4ac]
and eax, 0x7ff00
cmp eax, 0x7ff00
je 0x10115dce
mov eax, dword fs:[0x2c]
mov ecx, dword [0x1034bc9c]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x103594e0]
cmp eax, dword [ecx + 4]
jg 0x10115e30
mov ecx, ebx
call dword [0x103594e4]
mov dword ds:[esp + 0x14], eax
test eax, eax
je 0x10115e25
mov ecx, dword [eax]
cmp dword [ecx + 0x150], 0
je 0x10115c7d
cmp dword [eax + 4], 0
je 0x10115e25
or dword [ebx + 0x130], 0x800
mov dword [edi + 0xc], 0
mov dword [edi + 0x14], 0
mov eax, dword [0x1034a73c]
mov esi, dword [ebx + 0x49c]
mov ecx, dword [eax + 0x54]
mov eax, dword [ecx]
mov eax, dword [eax + 0x60]
call eax
mov ecx, dword [ebp + 8]
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
lea ecx, ds:[esp + 0x28]
mov edx, edi
push ecx
mov ecx, eax
call fcn.1011df00
mov edi, dword [ebx + 0x4ac]
lea eax, [esp + 0x5c]
or dword [ebx + 0x130], 8
add esp, 4
or edi, esi
or edi, 0x7ff00
mov dword [ebx + 0x4b0], edi
push 0x24009c00
push ecx
push 0xc
push eax
mov dword [ebx + 0x4ac], edi
call fcn.10114c40
push 0x24023b00
push ecx
push 0x10
lea eax, [esp + 0x2bc]
push eax
call fcn.10114c40
movss xmm0, dword [esp + 0x10]
lea eax, [esp + 0x2b0]
mov esi, dword [esp + 0x14]
push edi
push ecx
movss dword [esp], xmm0
push eax
lea eax, [esp + 0x64]
push eax
push esi
push ebx
call fcn.10114f80
mov eax, dword [ebx]
lea ecx, [esp + 0x18]
push ecx
push edi
lea ecx, [esp + 0x30]
mov dword [esp + 0x20], 0
push ecx
lea ecx, [esp + 0x2bc]
mov dword [esp + 0x28], 0
push ecx
lea ecx, [esp + 0x68]
mov dword [esp + 0x30], 0
push ecx
mov dword [esp + 0x38], 0
mov ecx, ebx
mov eax, dword [eax + 0x22c]
push esi
call eax
and dword ds:[ebx + 0x130], 0xfffffff7
mov eax, dword fs:[0x2c]
mov ecx, dword [0x1034bc9c]
mov ecx, dword ds:[eax + ecx*4]
mov eax, dword [0x10358f5c]
cmp eax, dword [ecx + 4]
jg 0x10115e71
push esi
mov ecx, ebx
call dword [0x10358f60]
and dword [ebx + 0x130], 0xfffff7ff
mov eax, dword [0x1034a73c]
mov ecx, dword [eax + 0x54]
mov eax, dword [ecx]
mov eax, dword [eax + 0x64]
call eax
mov ecx, dword [ebp + 0xc]
test ecx, ecx
je 0x10115e1a
mov eax, dword [ebx + 0x67c]
lea eax, [eax + eax*2]
shl eax, 4
push eax
push dword [ebx + 0x670]
push ecx
call fcn.100ae310
add esp, 0xc
cmp byte [ebp + 0x18], 0
je 0x10115e1a
mov eax, dword [ebx + 0x67c]
lea eax, [eax + eax*2]
shl eax, 4
push eax
lea eax, [esp + 0x5d4]
push eax
push dword [ebx + 0x670]
call fcn.100ae310
add esp, 0xc
mov al, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14
pop edi
pop esi
xor al, al
pop ebx
mov esp, ebp
pop ebp
ret 0x14
push 0x103594e0
call fcn.100996f3
add esp, 4
cmp dword [0x103594e0], 0xffffffff
jne 0x10115c4d
push str.client.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add eax, 0x32f20
push 0x103594e0
mov dword [0x103594e4], eax
call fcn.100996a2
add esp, 4
jmp 0x10115c4d
push 0x10358f5c
call fcn.100996f3
add esp, 4
cmp dword [0x10358f5c], 0xffffffff
jne 0x10115dac
push str.client.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add eax, 0x37700
push 0x10358f5c
mov dword [0x10358f60], eax
call fcn.100996a2
add esp, 4
jmp 0x10115dac