Function at 0x10002860
Capabilities:
Access peb ldr_data
Get process heap flags

Disassembly:
push 0xffffffffffffffff
push 0x10128a53
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push ebp
push esi
push edi
mov eax, dword [0x101636d0]
xor eax, esp
push eax
lea eax, [esp + 0x2c]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x3c]
mov edi, ebp
call fcn.1004b080
xor esi, esi
mov dword [esp + 0x34], esi
mov dword [ebp + 0x118], esi
mov dword [ebp + 0x11c], esi
mov dword [ebp + 0x120], esi
mov dword [ebp + method.BundleHandlerImpl.virtual_0], vtable.BundleHandlerImpl.0
mov dword [ebp + 0x128], 0x101402b8
mov dword [ebp + 0x12c], 0x10141290
mov dword [ebp + 0x130], str._tgzfga
mov dword [ebp + 0x134], str.SbW_1_
mov dword [ebp + 0x138], str.1.0.0.170
mov dword [ebp + 0x144], 0x24
mov dword [ebp + 0x13c], str.http:__www.sogou.com_components_picface
mov dword [ebp + 0x140], str.8.3.0.0000
mov dword [ebp + 0x148], 0x23
lea eax, [ebp + 0x14c]
call fcn.1004c810
lea edi, [ebp + 0x180]
call fcn.1004b080
lea edi, [ebp + 0x298]
call fcn.1004b080
lea edi, [ebp + 0x3b0]
call fcn.1004b080
lea edi, [ebp + 0x4c8]
call fcn.1004b080
lea edi, [ebp + 0x5e0]
call fcn.1004b080
lea edi, [ebp + 0x6f8]
call fcn.1004b080
lea edi, [ebp + 0x810]
call fcn.1004b080
lea edi, [ebp + 0x928]
call fcn.1004b080
lea edi, [ebp + 0xa40]
call fcn.1004b080
lea edi, [ebp + 0xb58]
call fcn.1004b080
lea ecx, [ebp + 0xc70]
call fcn.1005f360
lea edi, [ebp + 0xda0]
xor eax, eax
mov dword [edi + 4], esi
mov dword [edi + 0x210], 4
mov word [edi + 8], ax
mov dword [edi], vtable.t_criticalSection.0
mov dword [edi + 0x214], eax
mov dword [edi + 0x218], eax
mov dword [edi + 0x21c], eax
mov dword [edi + 0x220], eax
mov dword [edi + 0x224], eax
mov dword [edi + 0x228], eax
mov byte [edi + 0x22c], al
lea ebx, [ebp + 0x11e0]
mov dword [ebx], esi
mov dword [ebx + 4], esi
mov dword [ebx + 8], esi
mov dword [ebx + 0xc], esi
mov edx, fcn.100cf978
mov ecx, fcn.100cfa42
mov eax, fcn.100cf89b
mov dword [ebx + 0x10], edx
mov dword [ebx + 0x14], ecx
mov dword [ebx + 0x18], eax
mov byte [esp + 0x34], 0xf
fld dword [0x1014b734]
sub esp, 0xc
fstp dword [esp + 8]
mov dword [esp + 0x30], eax
fld dword [0x1014b730]
lea esi, [ebp + 0x1218]
fstp dword [esp + 4]
lea eax, [esp + 0x28]
fld dword [0x1014b72c]
mov dword [esp + 0x28], edx
fstp dword [esp]
mov dword [esp + 0x2c], ecx
call fcn.10009230
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor ecx, ecx
xor esi, esi
mov dword [ebp + 0xd94], eax
mov dword [ebp + 0xd9c], 1
mov byte [ebp + 0xd98], 0
mov byte [ebp + 0xd99], 0
mov word [ebp + 0xfd0], cx
mov dword [ebp + 0x11d8], esi
mov byte [esp + 0x18], cl
mov dword [esp + 0x14], esi
mov byte [esp + 0x34], 0x11
mov edx, dword [edi]
mov edx, dword [edx + 4]
push str.LocalPicFace_PipeConnect_CriticalSection
lea eax, [esp + 0x18]
push eax
mov ecx, edi
call edx
test al, al
jne 0x10002aa6
lea ecx, [esp + 0x14]
call fcn.100619f0
mov edi, ebx
mov byte [ebp + 0x11dc], 1
call fcn.10007c30
lea ecx, [esp + 0x14]
mov dword [ebp + 0x11fc], esi
mov dword [ebp + 0x1200], 0xffffffff
mov byte [ebp + 0x1204], 0
mov byte [ebp + 0x1205], 0
mov byte [ebp + 0x1206], 0
mov byte [ebp + 0x1207], 0
mov byte [ebp + 0x1208], 0
mov byte [ebp + 0x1209], 0
mov byte [ebp + 0x120a], 0
mov dword [ebp + 0x1210], esi
mov dword [ebp + 0x1214], esi
call fcn.10061940
mov eax, ebp
mov ecx, dword [esp + 0x2c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret 4