Function at 0x11df26e0
Capabilities:
Access peb ldr_data
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x11fb7d7d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xf0
push ebx
push ebp
push esi
mov ebx, ecx
push edi
mov ecx, 0x34
xor eax, eax
lea edi, [esp + 0x30]
mov edx, dword [esp + 0x118]
mov dword [esp + 0x20], ebx
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x114]
mov eax, dword [esp + 0x110]
mov dword [esp + 0x2c], ecx
mov ecx, dword [esp + 0x11c]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x128]
push ecx
mov dword [esp + 0x34], edx
mov dword [esp + 0x3c], eax
call fcn.11e67d05
mov edx, dword [esp + 0x124]
mov dword [esp + 0x40], eax
push edx
call fcn.11e67d05
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x12c]
push eax
call fcn.11e67d05
mov ecx, dword [0x1212b5e8]
mov edx, dword [0x1212b5ec]
mov esi, dword [esp + 0x144]
mov dword [esp + 0x54], ecx
mov ecx, dword [0x1212b5f4]
mov dword [esp + 0x50], eax
mov eax, dword [0x1212b5f0]
mov dword [esp + 0x60], ecx
mov ecx, dword [0x1212b600]
mov dword [esp + 0x58], edx
mov edx, dword [0x1212b5f8]
mov dword [esp + 0x5c], eax
mov eax, dword [0x1212b5fc]
mov dword [esp + 0x6c], ecx
mov ecx, dword [esi + 0xc]
mov dword [esp + 0x64], edx
mov edx, dword [0x1212b62c]
mov dword [esp + 0x68], eax
mov eax, dword [esi + 8]
mov dword [esp + 0x78], ecx
mov ecx, dword [esi + 0x18]
mov dword [esp + 0x70], edx
mov edx, dword [esi + 0x10]
mov dword [esp + 0x74], eax
mov eax, dword [esi + 0x14]
mov dword [esp + 0x84], ecx
mov ecx, dword [esi + 0x24]
mov dword [esp + 0x7c], edx
mov edx, dword [esi + 0x1c]
mov dword [esp + 0x80], eax
mov eax, dword [esi + 0x20]
mov dword [esp + 0x90], ecx
mov ecx, dword [0x1212b678]
mov dword [esp + 0x88], edx
mov edx, dword [esp + 0x148]
mov dword [esp + 0x8c], eax
mov eax, dword [0x1212b674]
mov dword [esp + 0x9c], ecx
mov ecx, 0xb
lea edi, [esp + 0xa0]
mov dword [esp + 0x94], edx
mov edx, dword [0x1212b6a8]
mov dword [esp + 0x98], eax
mov eax, dword [0x1212b6ac]
rep movsd dword es:[edi], dword [esi]
xor edi, edi
add esp, 0xc
cmp eax, edi
mov dword [esp + 0xc0], edx
mov dword [esp + 0xc4], eax
jne 0x11df2876
push edi
mov ecx, 0x1212b5c0
call fcn.11d72490
mov dword [esp + 0xc4], eax
mov eax, dword [0x1212bf28]
mov ecx, dword [0x1212bf2c]
mov edx, dword [0x1212b604]
push 0x12119948
mov eax, dword [eax - 8]
mov dword [esp + 0xcc], eax
mov eax, dword [ecx - 8]
mov dword [esp + 0xd0], eax
mov eax, dword [edx - 8]
mov dword [esp + 0xd4], eax
mov eax, dword [0x1212b608]
lea ecx, [esp + 0x1c]
mov eax, dword [eax - 8]
mov dword [esp + 0xd8], eax
call fcn.11e7eae0
push 0x12119948
lea ecx, [esp + 0x20]
mov dword [esp + 0x10c], edi
call fcn.11e7eae0
mov eax, dword [0x1212b610]
xor esi, esi
cmp eax, edi
mov byte [esp + 0x108], 1
jle 0x11df2959
mov ecx, dword [0x1212b60c]
lea eax, [esp + 0x18]
lea edx, [ecx + esi*4]
lea ecx, [esp + 0x14]
push edx
push eax
push ecx
call fcn.11e7f820
push 0x12023db8
lea edx, [esp + 0x14]
push eax
push edx
mov byte [esp + 0x114], 2
call fcn.11e7f9f0
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x10c], 3
call fcn.11e7f410
lea ecx, [esp + 0x10]
mov byte [esp + 0x108], 2
call fcn.11e7f280
lea ecx, [esp + 0x14]
mov byte [esp + 0x108], 1
call fcn.11e7f280
mov eax, dword [0x1212b610]
inc esi
cmp esi, eax
jl 0x11df28ea
mov eax, dword [0x1212b620]
xor esi, esi
cmp eax, edi
jle 0x11df29d2
mov eax, dword [0x1212b61c]
lea edx, [esp + 0x1c]
lea ecx, [eax + esi*4]
lea eax, [esp + 0x10]
push ecx
push edx
push eax
call fcn.11e7f820
push 0x12023db8
lea ecx, [esp + 0x18]
push eax
push ecx
mov byte [esp + 0x114], 4
call fcn.11e7f9f0
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x10c], 5
call fcn.11e7f410
lea ecx, [esp + 0x14]
mov byte [esp + 0x108], 4
call fcn.11e7f280
lea ecx, [esp + 0x10]
mov byte [esp + 0x108], 1
call fcn.11e7f280
mov eax, dword [0x1212b620]
inc esi
cmp esi, eax
jl 0x11df2964
mov edx, dword [esp + 0x18]
mov ecx, dword [0x1212c104]
push edi
mov eax, dword [edx - 8]
lea edx, [esp + 0x28]
mov dword [esp + 0xdc], eax
mov eax, dword [esp + 0x20]
push edx
mov eax, dword [eax - 8]
mov dword [esp + 0xe8], ecx
mov ecx, 0x1212b5c0
mov dword [esp + 0xe4], eax
mov dword [esp + 0x2c], edi
call fcn.11d744b0
test eax, eax
je 0x11df2a31
mov eax, dword [esp + 0x24]
mov dword [esp + 0xe4], 1
cmp eax, edi
je 0x11df2a31
mov dword [esp + 0xe4], 3
lea ecx, [esp + 0x2c]
call fcn.11cc4240
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0xd8]
mov ebp, dword [esp + 0xd4]
mov esi, dword [esp + 0xd0]
lea eax, [eax + ecx*2 + 2]
mov ecx, dword [esp + 0xdc]
add ecx, edx
mov edx, dword [esp + 0xcc]
add ecx, ebp
mov ebp, dword [esp + 0xc8]
add ecx, esi
add ecx, edx
add ecx, ebp
lea edx, [ecx + ecx + 0xc]
lea ecx, [esp + 0x2c]
sub edx, ecx
add edx, eax
push edx
call fcn.11e679bc
mov ebp, eax
add esp, 4
cmp ebp, edi
je 0x11df2e77
mov edx, dword [esp + 0x130]
mov eax, dword [esp + 0x134]
mov ecx, 0x35
lea esi, [esp + 0x2c]
mov edi, ebp
rep movsd dword es:[edi], dword [esi]
mov dword [ebp + 0xcc], edx
mov edx, dword [esp + 0x12c]
mov dword [ebp + 0xd0], eax
lea ecx, [ebp + 0xbc]
mov eax, dword [edx]
mov dword [ecx], eax
mov eax, dword [edx + 4]
mov dword [ecx + 4], eax
mov eax, dword [edx + 8]
mov dword [ecx + 8], eax
lea eax, [ebp + 0xd4]
mov edx, dword [edx + 0xc]
mov dword [ecx + 0xc], edx
mov ecx, dword [esp + 0x11c]
push ecx
push eax
call fcn.11e6749a
mov eax, dword [ebp + 0x10]
mov edx, dword [esp + 0x128]
push edx
lea ecx, [ebp + eax*2 + 0xd6]
push ecx
call fcn.11e6749a
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x14]
mov edx, dword [esp + 0x134]
add eax, ecx
push edx
lea ecx, [ebp + eax*2 + 0xd8]
push ecx
call fcn.11e6749a
mov edx, dword [0x1212bf28]
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x14]
push edx
add eax, dword [ebp + 0x10]
add eax, ecx
lea ecx, [ebp + eax*2 + 0xda]
push ecx
call fcn.11e6749a
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x10]
mov edi, dword [ebp + 0x14]
mov esi, dword [ebp + 0x9c]
mov edx, dword [0x1212bf2c]
add eax, ecx
add eax, edi
push edx
add eax, esi
lea ecx, [ebp + eax*2 + 0xdc]
push ecx
call fcn.11e6749a
mov eax, dword [ebp + 0x10]
mov edi, dword [ebp + 0xa0]
mov edx, dword [0x1212b604]
mov esi, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x9c]
add eax, edi
push edx
mov edx, dword [ebp + 0x14]
add eax, esi
add eax, edx
add eax, ecx
lea ecx, [ebp + eax*2 + 0xde]
push ecx
call fcn.11e6749a
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0xa0]
mov edx, dword [0x1212b608]
mov edi, dword [ebp + 0x18]
mov esi, dword [ebp + 0x14]
add eax, ecx
push edx
add eax, edi
mov edx, dword [ebp + 0x9c]
mov ecx, dword [ebp + 0xa4]
add eax, esi
add eax, edx
add eax, ecx
lea ecx, [ebp + eax*2 + 0xe0]
push ecx
call fcn.11e6749a
mov edx, dword [esp + 0x50]
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0xa8]
mov edi, dword [ebp + 0xa0]
mov esi, dword [ebp + 0x14]
push edx
mov edx, dword [ebp + 0x18]
add eax, edx
mov edx, dword [ebp + 0x9c]
add eax, ecx
mov ecx, dword [ebp + 0xa4]
add eax, edi
add eax, esi
add eax, edx
add eax, ecx
lea ecx, [ebp + eax*2 + 0xe2]
push ecx
call fcn.11e6749a
add esp, 0x40
mov ecx, ebp
call fcn.11cc2a90
mov edx, dword [ebp + 0x10]
mov ecx, dword [esp + 0x1c]
mov edi, dword [ebp + 0xa0]
mov esi, dword [ebp + 0xa8]
lea eax, [eax + edx*2 + 2]
mov edx, dword [ebp + 0xac]
push ecx
mov ecx, dword [ebp + 0x18]
add edx, ecx
mov ecx, dword [ebp + 0x14]
add edx, edi
mov edi, dword [ebp + 0x9c]
add edx, esi
mov esi, dword [ebp + 0xa4]
add edx, ecx
add edx, edi
add edx, esi
lea eax, [eax + edx*2 + 0xe]
push eax
call fcn.11e6749a
mov eax, dword [0x12133f80]
add esp, 8
test eax, eax
je 0x11df2d9b
mov ecx, ebp
call fcn.11cc2a90
mov ecx, dword [ebp + 0x10]
push 0xd4
lea edx, [eax + ecx*2 + 2]
lea eax, [esp + 0x30]
lea ecx, [esp + 0x2c]
push eax
push ecx
mov dword [esp + 0x20], edx
call fcn.11ec3a30
add esp, 0xc
mov dword [esp + 0x10], eax
mov eax, dword [ebp + 0xa8]
mov ebx, dword [ebp + 0xa4]
mov edi, dword [ebp + 0x9c]
mov esi, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x14]
add eax, ebx
mov ebx, dword [ebp + 0xa0]
mov edx, dword [ebp + 0x10]
add eax, ebx
mov ebx, dword [ebp + 0xac]
add eax, edi
mov byte [esp + 0x108], 6
add eax, esi
add eax, ecx
add eax, ebx
mov ebx, dword [esp + 0x14]
lea eax, [ebx + eax*2 + 0xe]
mov ebx, dword [ebp + 0xa4]
push eax
mov eax, dword [ebp + 0xa8]
add ebx, eax
mov eax, dword [ebp + 0xa0]
add ebx, eax
add ebx, edi
add ebx, esi
add ebx, ecx
add ebx, edx
lea ebx, [ebp + ebx*2 + 0xe2]
push ebx
mov ebx, dword [ebp + 0xa4]
add ebx, eax
add eax, edi
add ebx, edi
add eax, esi
add ebx, esi
add eax, ecx
add ebx, ecx
add edi, esi
add ebx, edx
add eax, edx
add edi, ecx
add esi, ecx
lea ebx, [ebp + ebx*2 + 0xe0]
lea eax, [ebp + eax*2 + 0xde]
add edi, edx
push ebx
push eax
add esi, edx
lea eax, [ebp + edi*2 + 0xdc]
add ecx, edx
push eax
lea eax, [ebp + esi*2 + 0xda]
lea ecx, [ebp + ecx*2 + 0xd8]
push eax
lea edx, [ebp + edx*2 + 0xd6]
push ecx
lea eax, [ebp + 0xd4]
push edx
push eax
mov eax, dword [esp + 0x34]
mov ecx, dword [eax]
push ecx
push str.CSDProcDataMgr::AddSDProcData_TSDPROCDATA__s___r_nGetPath__s___GetCmdLine__s___GetUserName__s__r_nGetCfgKey__s___GetCfgSubKey__s___GetCA2CfgKey__s___GetCA2CfgSubKey__s__r_nGetCA2ProcInc__s___GetCA2ProcExc__s_
push str.IPG7867
push 0xffffffffffffffff
call fcn.11ca5810
add esp, 0x34
lea ecx, [esp + 0x28]
mov byte [esp + 0x108], 1
call fcn.11e7f280
mov ebx, dword [esp + 0x20]
mov eax, dword [esp + 0x114]
mov edi, dword [ebx + 8]
shr eax, 4
xor edx, edx
mov ecx, dword [ebx + 4]
div edi
test ecx, ecx
mov dword [esp + 0x20], edi
mov esi, edx
je 0x11df2de0
mov eax, dword [ecx + esi*4]
test eax, eax
je 0x11df2ddc
mov edx, dword [eax + 8]
cmp edx, dword [esp + 0x114]
je 0x11df2dd4
mov eax, dword [eax]
test eax, eax
jne 0x11df2dc0
jmp 0x11df2ddc
test eax, eax
jne 0x11df2e74
test ecx, ecx
jne 0x11df2e0c
shl edi, 2
push edi
call fcn.11e679bc
mov edx, eax
mov ecx, edi
mov dword [ebx + 4], edx
mov edi, edx
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
add esp, 4
and ecx, 3
rep stosb byte es:[edi], al
mov eax, dword [esp + 0x20]
mov dword [ebx + 8], eax
mov eax, dword [ebx + 0x10]
test eax, eax
jne 0x11df2e42
mov ecx, dword [ebx + 0x18]
push 0x10
lea edx, [ebx + 0x14]
push ecx
push edx
call fcn.11e8aec0
mov ecx, dword [ebx + 0x18]
mov edx, ecx
shl edx, 4
dec ecx
test ecx, ecx
lea eax, [edx + eax - 8]
jl 0x11df2e42
inc ecx
mov edx, dword [ebx + 0x10]
mov dword [eax], edx
mov dword [ebx + 0x10], eax
sub eax, 0x10
dec ecx
jne 0x11df2e34
mov eax, dword [ebx + 0x10]
mov edx, dword [esp + 0x114]
mov ecx, dword [eax]
mov dword [ebx + 0x10], ecx
mov ecx, dword [ebx + 0xc]
inc ecx
mov dword [ebx + 0xc], ecx
xor ecx, ecx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov dword [eax + 4], esi
mov dword [eax + 8], edx
mov ecx, dword [ebx + 4]
mov edx, dword [ecx + esi*4]
mov dword [eax], edx
mov ecx, dword [ebx + 4]
mov dword [ecx + esi*4], eax
mov dword [eax + 0xc], ebp
lea ecx, [esp + 0x1c]
mov byte [esp + 0x108], 0
call fcn.11e7f280
lea ecx, [esp + 0x18]
mov dword [esp + 0x108], 0xffffffff
call fcn.11e7f280
mov ecx, dword [esp + 0x100]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xfc
ret 0x30