Function at 0x101cbd90
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x48
xor eax, eax
xor ecx, ecx
mov esi, ebx
cpuid
xchg ebx, esi
mov ebx, eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x4c], ecx
test ebx, ebx
je 0x101cbff5
mov dword [ebp - 0x20], 0
xor ecx, ecx
mov eax, 1
cmp ebx, 6
mov esi, ebx
cpuid
xchg ebx, esi
mov edi, edx
mov dword [ebp - 0x44], ebx
mov ebx, 0
mov edx, 0
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x1c], 0
jbe 0x101cbe1a
xor ecx, ecx
mov eax, 7
mov esi, ebx
cpuid
xchg ebx, esi
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], esi
mov ebx, edx
mov ecx, 1
mov eax, 7
mov esi, ebx
cpuid
xchg ebx, esi
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x48], edx
mov dword [ebp - 0x40], ebx
mov eax, 0x80000000
xor ecx, ecx
mov esi, ebx
cpuid
xchg ebx, esi
test eax, eax
mov dword [ebp - 0x2c], 0
je 0x101cbe48
xor ecx, ecx
mov eax, 0x80000001
mov esi, ebx
cpuid
xchg ebx, esi
mov dword [ebp - 0x2c], ecx
mov ebx, dword [ebp - 0x30]
mov ecx, ebx
mov eax, ebx
mov edx, ebx
and ecx, 1
and eax, 0x202
and edx, 0x2000
shl ecx, 8
shl edx, 0xf
or eax, ecx
mov ecx, ebx
shr ecx, 9
mov esi, ecx
and ecx, 0x800
and esi, 0x400
or esi, eax
mov eax, ebx
and eax, 0x400000
or ecx, esi
mov esi, ebx
shl eax, 9
mov dword [ebp - 0x10], ecx
and esi, 0x800000
or eax, edx
mov edx, ebx
shr edx, 0x19
mov dword [ebp - 0x18], eax
mov eax, edi
and edi, 0x10
and edx, 1
mov ecx, eax
or edi, edx
mov edx, ebx
shr ecx, 0x12
shr edx, 0x1c
and ecx, 0x20
and edx, 4
or edi, edx
or ecx, edi
mov edi, eax
shr eax, 0x13
and edi, 0x1000000
and eax, 0xc0
or edi, esi
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x14], edi
mov edi, dword [ebp - 0x20]
or eax, ecx
mov esi, edi
mov edx, edi
mov edi, dword [ebp - 0x24]
shr esi, 0x10
and esi, 0x2000
shl edi, 0x16
mov ebx, edi
and edi, 0x80000000
and ebx, 0x40000000
or ebx, esi
mov esi, edx
or edi, ebx
mov ebx, edx
and edx, 0x100
mov ecx, esi
and ebx, 8
shl edx, 0xb
shr ecx, 0xf
shl ebx, 0xf
and ecx, 8
or edx, ebx
mov ebx, dword [ebp - 0x24]
or eax, ecx
mov ecx, dword [ebp - 0x14]
or eax, edi
mov dword [ebp - 0x10], eax
shr ebx, 0xa
shr ecx, 1
mov dword [ebp - 0x3c], ebx
and ebx, 1
add ecx, dword [ebp - 0x18]
or edx, ebx
mov ebx, esi
mov esi, dword [ebp - 0x30]
mov edi, ebx
shr edi, 9
and edi, 1
mov eax, esi
and eax, 0x20000000
shr eax, 0xd
or ecx, eax
mov eax, ebx
mov ebx, ebx
and eax, 0x80000
and ebx, 0x800
shl eax, 0xa
shl ebx, 0x13
or ecx, eax
or ecx, ebx
or ecx, edx
mov edx, esi
not edx
test edx, 0xc000000
jne 0x101cc002
mov esi, ecx
call fcn.101b3c60
mov ecx, eax
not ecx
test cl, 6
jne 0x101cc011
mov ecx, esi
mov dword [ebp - 0x34], eax
and eax, 0xe0
mov dword [ebp - 0x28], 0
or ecx, 0x1000000
cmp dword [ebp - 0x44], 0xc
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x14], ecx
jbe 0x101cc022
mov ebx, esi
mov eax, 0xd
mov ecx, 1
mov esi, ebx
cpuid
xchg ebx, esi
mov ecx, eax
mov edx, dword [ebp - 0x10]
or ebx, 0x3000000
test al, 1
cmove ebx, dword [ebp - 0x14]
cmove edi, edi
mov dword [ebp - 0x18], edi
cmove edx, edx
and ecx, 2
and eax, 8
shl ecx, 0x1a
shl eax, 0x17
or eax, ecx
mov ecx, edx
or eax, ebx
mov dword [ebp - 0x14], eax
jmp 0x101cc028
xor ecx, ecx
xor edx, edx
xor edi, edi
xor ebx, ebx
jmp 0x101cc244
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x28], 0
jmp 0x101cc1ae
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x28], 0
mov ecx, esi
jmp 0x101cc1ae
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x18], edi
mov esi, dword [ebp - 0x20]
mov edi, dword [ebp - 0x30]
mov ebx, dword [ebp - 0x1c]
mov edx, esi
mov eax, edi
shr edi, 0xe
mov dword [ebp - 0x1c], ebx
and edx, 0x20
and edi, 0x4000
and eax, 0x1000
shl edx, 0xa
shl eax, 5
or edx, edi
mov edi, esi
mov esi, ebx
and esi, 0x10
shl esi, 4
or esi, eax
mov eax, ebx
shl ebx, 0x10
shr eax, 0x11
and eax, 0x40
or eax, esi
mov esi, ebx
and ebx, 0x60000
and esi, 0x10000
or esi, edx
or ebx, esi
mov esi, dword [ebp - 0x48]
or ebx, ecx
mov ecx, esi
mov edx, esi
and ecx, 0x10
and edx, 0x20
shl ecx, 6
lea edx, [ecx + edx*4]
mov ecx, esi
and ecx, 0x400
shr ecx, 1
or edx, ecx
mov ecx, edx
or ecx, eax
or ecx, dword [ebp - 0x14]
cmp dword [ebp - 0x38], 0xe0
jne 0x101cc1ab
mov dword [ebp - 0x14], ecx
mov ecx, edi
mov eax, edi
and dword [ebp - 0x34], 0x60000
shl ecx, 7
and eax, 0x10000
and ecx, 0x1000000
lea eax, [ecx + eax*8]
mov ecx, edi
shl ecx, 5
and ecx, 0x4000000
or ecx, eax
mov eax, edi
shr eax, 4
and eax, 0x400000
or eax, ecx
mov ecx, edi
shr ecx, 6
and ecx, 0x200000
or ecx, eax
mov eax, edi
shr eax, 8
and eax, 0x100000
or eax, ecx
mov ecx, edi
shr ecx, 7
and ecx, 0x800000
or ecx, eax
or ebx, ecx
mov eax, ebx
or eax, 0x2000000
test edi, edi
mov edi, dword [ebp - 0x3c]
cmovns eax, ebx
mov ebx, dword [ebp - 0x24]
and edi, 6
mov ecx, ebx
mov edx, ebx
shl ebx, 0xe
and ecx, 2
and edx, 0x40
and ebx, 0x10000000
shl ecx, 0x1a
shl edx, 0x17
or edx, ecx
or ebx, edx
mov edx, dword [ebp - 0x40]
mov ecx, ebx
mov ebx, dword [ebp - 0x1c]
or ecx, eax
mov dword [ebp - 0x10], ecx
mov ecx, edx
mov eax, ebx
shr ecx, 0x12
and eax, 0x20
and ecx, 0x20
shr eax, 2
or eax, ecx
mov ecx, edx
shr ecx, 4
and ecx, 0x10
or edi, ecx
mov ecx, dword [ebp - 0x14]
or edi, eax
or ecx, edi
cmp dword [ebp - 0x34], 0x60000
jne 0x101cc1ae
mov eax, edx
and edx, 0x400000
and ebx, 0x200000
and esi, 0x100
and eax, 0x3000000
shr edx, 9
shr ebx, 7
shl esi, 7
shr eax, 0xd
or edx, eax
or ebx, edx
or esi, ebx
or ecx, esi
jmp 0x101cc1ae
mov dword [ebp - 0x10], ebx
mov esi, dword [ebp - 0x2c]
lea edi, [ebp - 0x54]
and esi, 0x20
shl esi, 0xf
or esi, ecx
push 0xc
push str.AuthenticAMDHygonGenuineGenuineIntelHash_table_capacity_overflow
push edi
call sub.VCRUNTIME140.dll_memcmp
add esp, 0xc
test eax, eax
je 0x101cc1e9
push 0xc
push 0x1024bf00
push edi
call sub.VCRUNTIME140.dll_memcmp
add esp, 0xc
test eax, eax
je 0x101cc1e9
mov ebx, dword [ebp - 0x10]
jmp 0x101cc20b
mov ecx, dword [ebp - 0x2c]
mov ebx, dword [ebp - 0x10]
mov eax, ecx
mov edx, ecx
shr ecx, 0xa
and ecx, 2
and edx, 0x40
and eax, 0x200000
or dword [ebp - 0x18], ecx
shl edx, 6
or esi, eax
or ebx, edx
push 0xc
push 0x1024bf0c
push edi
call sub.VCRUNTIME140.dll_memcmp
add esp, 0xc
mov edi, ebx
mov ecx, ebx
mov edx, esi
and edi, 0x4000
and ecx, 0xffffbfff
and edx, 0xfff3ffff
or edi, eax
mov eax, dword [ebp + 8]
mov edi, dword [ebp - 0x18]
cmovne ecx, ebx
mov ebx, dword [ebp - 0x28]
cmovne edx, esi
mov esi, ecx
or esi, 0x80000000
mov dword [0x10284c30], esi
mov esi, edx
shld esi, ecx, 1
or esi, 0x80000000
mov dword [0x10284c34], esi
mov esi, edi
shld esi, edx, 2
or esi, 0x80000000
mov dword [0x10284c38], esi
mov dword [eax + 0xc], ebx
mov dword [eax + 8], edi
mov dword [eax + 4], edx
mov dword [eax], ecx
add esp, 0x48
pop esi
pop edi
pop ebx
pop ebp
ret