Function at 0x100d1550
Capabilities:
Access peb ldr_data
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x101316c4
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc4
push ebx
push ebp
mov ebp, dword [esp + 0xe0]
push esi
push edi
xor ebx, ebx
mov dword [esp + 0x1c], ebx
mov eax, dword [ebp]
push ecx
sub eax, 0x10
mov edi, ecx
mov dword [esp + 0x38], esp
mov esi, esp
push eax
mov dword [esp + 0x1c], edi
call fcn.10002370
add eax, 0x10
mov dword [esi], eax
lea eax, [esp + 0x2c]
add esp, 4
push eax
call fcn.10012710
add esp, 8
mov dword [esp + 0xdc], ebx
call fcn.10111836
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x30], eax
mov eax, dword [ebp]
mov ecx, dword [esp + 0xe4]
mov edx, dword [ecx]
push eax
push edx
lea eax, [esp + 0x38]
push str._s_s
push eax
mov byte [esp + 0xec], 1
call fcn.10009090
mov ecx, dword [esp + 0x34]
push 0x10155bd8
push ecx
call fcn.100f6324
add esp, 0x18
test eax, eax
je 0x100d1615
mov edx, dword [esp + 0x24]
push 0x10144fec
push edx
call fcn.100f6324
add esp, 8
test eax, eax
jne 0x100d1625
mov eax, dword [edi + 8]
lea ecx, [esp + 0x30]
push ecx
push eax
mov ecx, edi
call fcn.101108f1
mov edx, dword [esp + 0x24]
push 0x101465a4
push edx
call fcn.100f6324
add esp, 8
test eax, eax
je 0x100d1655
mov eax, dword [esp + 0x24]
push 0x101465a0
push eax
call fcn.100f6324
add esp, 8
test eax, eax
jne 0x100d1e77
mov ebp, dword [esp + 0xec]
mov eax, dword [ebp]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
test eax, eax
mov dword [esp + 0x28], eax
jne 0x100d1704
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0
push 0
lea ecx, [esp + 0x30]
push ecx
push 0x400
push eax
push 0
push 0x1300
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
call fcn.10111836
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x14], eax
mov eax, dword [ebp]
mov ecx, dword [esp + 0x28]
push eax
push ecx
lea edx, [esp + 0x1c]
push str.Cant_load_SEM_Module__s_.___s_.
push edx
mov byte [esp + 0xec], 2
call fcn.10009090
mov eax, dword [esp + 0x38]
add esp, 0x10
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0xdc], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100d1e77
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
jmp 0x100d1e77
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.MP_GetFactory
push eax
call esi
test eax, eax
mov eax, dword [esp + 0x28]
jne 0x100d1e70
push str.getModuleProperties
push eax
call esi
test eax, eax
mov dword [esp + 0x4c], eax
je 0x100d1b6a
mov dword [esp + 0x38], 0
jmp 0x100d1740
mov eax, dword [esp + 0x4c]
xor ecx, ecx
mov dword [esp + 0x98], ecx
mov dword [esp + 0x9c], ecx
mov dword [esp + 0xa0], ecx
mov dword [esp + 0xa4], ecx
mov dword [esp + 0xa8], ecx
lea edx, [esp + 0x98]
mov dword [esp + 0xac], ecx
mov ecx, dword [esp + 0x38]
push edx
push ecx
call eax
add esp, 8
test eax, eax
setne al
test al, al
mov byte [esp + 0x23], al
je 0x100d1b50
mov esi, dword [edi + 0xac]
push 0x54
call fcn.10111729
mov edi, eax
add esp, 4
mov dword [esp + 0x50], edi
test edi, edi
mov byte [esp + 0xdc], 3
je 0x100d1837
push 0x1013e630
lea ecx, [esp + 0x30]
call fcn.10002bc0
mov edx, dword [esp + 0x38]
mov ecx, dword [esp + 0xe4]
push edx
mov edx, dword [esp + 0xec]
push esi
lea eax, [esp + 0x34]
push eax
mov eax, dword [edx]
push 0x100
push ecx
push ecx
sub eax, 0x10
or ebx, 1
mov dword [esp + 0x6c], esp
mov esi, esp
push eax
mov byte [esp + 0xf8], 4
mov dword [esp + 0x38], ebx
call fcn.10002370
add eax, 0x10
mov dword [esi], eax
lea eax, [esp + 0x5c]
add esp, 4
push eax
call fcn.10011850
add esp, 8
push eax
or ebx, 2
push ebp
mov ecx, edi
mov dword [esp + 0xf8], 5
mov dword [esp + 0x38], ebx
call fcn.1003b150
mov esi, eax
jmp 0x100d1839
xor esi, esi
test bl, 2
mov dword [esp + 0xdc], 6
je 0x100d186e
mov eax, dword [esp + 0x40]
and ebx, 0xfffffffd
add eax, 0xfffffff0
mov dword [esp + 0x1c], ebx
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100d186e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
test bl, 1
mov dword [esp + 0xdc], 1
je 0x100d189f
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
and ebx, 0xfffffffe
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100d189f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi]
lea ecx, [esp + 0x3c]
push ecx
mov ecx, esi
call dword [eax + 4]
push eax
lea edx, [esp + 0xb4]
push edx
mov byte [esp + 0xe4], 8
call fcn.10012420
add esp, 8
push 0xffffffffffffffff
push 0
mov edi, 0xf
push eax
lea ecx, [esp + 0x64]
mov byte [esp + 0xe8], 9
mov dword [esp + 0x7c], edi
mov dword [esp + 0x78], 0
mov byte [esp + 0x68], 0
call fcn.10008e50
mov dword [esp + 0x74], esi
push 0xffffffffffffffff
push 0
lea eax, [esp + 0x60]
push eax
lea ecx, [esp + 0x84]
mov byte [esp + 0xe8], 0xa
mov dword [esp + 0x9c], edi
mov dword [esp + 0x98], 0
mov byte [esp + 0x88], 0
call fcn.10008e50
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x94], ecx
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x78]
push edx
lea eax, [esp + 0xd0]
push eax
add ecx, 0xa4
mov byte [esp + 0xe4], 0xb
call fcn.100d3e20
mov ecx, dword [eax + 4]
mov edi, dword [eax]
cmp dword [esp + 0x90], 0x10
mov dword [esp + 0x48], ecx
jb 0x100d197a
mov edx, dword [esp + 0x7c]
push edx
call fcn.10111754
add esp, 4
cmp dword [esp + 0x70], 0x10
mov dword [esp + 0x90], 0xf
mov dword [esp + 0x8c], 0
mov byte [esp + 0x7c], 0
jb 0x100d19a9
mov eax, dword [esp + 0x5c]
push eax
call fcn.10111754
add esp, 4
cmp dword [esp + 0xc8], 0x10
mov dword [esp + 0x70], 0xf
mov dword [esp + 0x6c], 0
mov byte [esp + 0x5c], 0
jb 0x100d19d8
mov ecx, dword [esp + 0xb4]
push ecx
call fcn.10111754
add esp, 4
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
mov dword [esp + 0xc8], 0xf
mov dword [esp + 0xc4], 0
mov byte [esp + 0xb4], 0
mov byte [esp + 0xdc], 1
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x100d1a1c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov al, byte [esp + 0x48]
test al, al
jne 0x100d1b4c
mov eax, dword [edi + 0x28]
push 0
push 0x101921f8
push 0x101917d8
push 0
push eax
call fcn.100f7578
mov edi, eax
add esp, 0x14
test edi, edi
je 0x100d1a6f
lea ecx, [esp + 0x34]
push ecx
mov ecx, edi
call fcn.100588c0
mov ecx, dword [ebp]
mov eax, dword [eax]
push ecx
push eax
or ebx, 4
call fcn.100f6324
add esp, 8
test eax, eax
mov byte [esp + 0x13], 1
jne 0x100d1a74
mov byte [esp + 0x13], 0
test bl, 4
je 0x100d1a9a
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
and ebx, 0xfffffffb
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x100d1a9a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov al, byte [esp + 0x13]
test al, al
je 0x100d1b44
call fcn.10111836
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x18]
push eax
mov ecx, edi
mov byte [esp + 0xe0], 0xc
call fcn.100588c0
mov ecx, dword [eax]
mov edx, dword [ebp]
push ecx
push edx
lea eax, [esp + 0x24]
push str.Module_FOUND_TWICE___only_one_loaded_n_s_n_s
push eax
mov byte [esp + 0xec], 0xd
call fcn.10009090
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
add esp, 0x10
mov byte [esp + 0xdc], 0xc
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100d1b14
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov edi, dword [esp + 0x1c]
push 0
push 0
push edi
call fcn.1011b1ca
lea eax, [edi - 0x10]
mov byte [esp + 0xdc], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100d1b44
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax]
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0x38]
mov al, byte [esp + 0x23]
inc ecx
test al, al
mov dword [esp + 0x38], ecx
jne 0x100d173c
jmp 0x100d1e6c
mov edi, dword [edi + 0xac]
push 0x54
call fcn.10111729
mov esi, eax
add esp, 4
mov dword [esp + 0x54], esi
test esi, esi
mov byte [esp + 0xdc], 0xe
je 0x100d1c01
push 0x1013e630
lea ecx, [esp + 0x30]
call fcn.10002bc0
mov edx, dword [esp + 0xe4]
mov eax, dword [esp + 0xe8]
push 0
push edi
lea ecx, [esp + 0x34]
push ecx
push 0x100
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x68], esp
push eax
mov byte [esp + 0xf8], 0xf
mov dword [esp + 0x38], 8
call fcn.100024c0
lea ecx, [esp + 0x30]
push ecx
call fcn.10011850
add esp, 8
push eax
mov ebx, 0x18
push ebp
mov ecx, esi
mov dword [esp + 0xf8], 0x10
mov dword [esp + 0x38], ebx
call fcn.1003b150
mov esi, eax
jmp 0x100d1c03
xor esi, esi
test bl, 0x10
mov dword [esp + 0x3c], esi
je 0x100d1c18
lea ecx, [esp + 0x18]
and ebx, 0xffffffef
call fcn.10002650
test bl, 8
mov ebp, 1
mov dword [esp + 0xdc], ebp
je 0x100d1c35
lea ecx, [esp + 0x2c]
and ebx, 0xfffffff7
call fcn.10002650
mov edx, dword [esi]
lea eax, [esp + 0x34]
push eax
mov ecx, esi
call dword [edx + 4]
mov edi, eax
mov eax, dword [edi]
mov ecx, dword [eax - 0xc]
or ebx, 0x20
test ecx, ecx
mov byte [esp + 0xdc], 0x13
mov dword [esp + 0x1c], ebx
jl 0x100d1c73
push str.CK200
push eax
call fcn.100f79f1
add esp, 8
test eax, eax
je 0x100d1c73
sub eax, dword [edi]
test eax, eax
jg 0x100d1c9b
mov edx, dword [esi]
lea eax, [esp + 0x18]
push eax
mov ecx, esi
call dword [edx + 4]
mov eax, dword [eax]
push str.PIRET
push eax
or ebx, 0x40
call fcn.100f6324
add esp, 8
test eax, eax
mov byte [esp + 0x13], 0
jne 0x100d1ca0
mov byte [esp + 0x13], 1
test bl, 0x40
je 0x100d1cb1
lea ecx, [esp + 0x18]
and ebx, 0xffffffbf
call fcn.10002650
test bl, 0x20
mov dword [esp + 0xdc], ebp
je 0x100d1cc9
lea ecx, [esp + 0x34]
and ebx, 0xffffffdf
call fcn.10002650
mov al, byte [esp + 0x13]
test al, al
jne 0x100d1e65
mov eax, dword [esi]
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call dword [eax + 4]
push eax
lea edx, [esp + 0xb4]
push edx
mov byte [esp + 0xe4], 0x14
call fcn.10012420
add esp, 8
lea ecx, [esp + 0x3c]
push ecx
push eax
lea ecx, [esp + 0x60]
mov byte [esp + 0xe4], 0x15
call fcn.100d37c0
push eax
lea ecx, [esp + 0x7c]
mov byte [esp + 0xe0], 0x16
call fcn.100d37f0
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x78]
push edx
lea eax, [esp + 0xd0]
push eax
add ecx, 0xa4
mov byte [esp + 0xe4], 0x17
call fcn.100d3e20
mov ecx, dword [eax + 4]
mov edi, dword [eax]
mov dword [esp + 0x48], ecx
lea ecx, [esp + 0x78]
call fcn.10008bc0
lea ecx, [esp + 0x58]
call fcn.10008bc0
lea ecx, [esp + 0xb0]
call fcn.10008bc0
lea ecx, [esp + 0x18]
mov byte [esp + 0xdc], 1
call fcn.10002650
mov al, byte [esp + 0x48]
test al, al
jne 0x100d1e6c
mov edx, dword [edi + 0x28]
push 0
push 0x101921f8
push 0x101917d8
push 0
push edx
call fcn.100f7578
mov edi, eax
add esp, 0x14
test edi, edi
je 0x100d1dd7
lea eax, [esp + 0x18]
push eax
mov ecx, edi
call fcn.100588c0
mov ecx, dword [esp + 0xec]
push ecx
push eax
or ebx, 0x80
call fcn.10009df0
add esp, 8
test al, al
mov byte [esp + 0x13], 1
jne 0x100d1ddc
mov byte [esp + 0x13], 0
test bl, bl
jns 0x100d1de9
lea ecx, [esp + 0x18]
call fcn.10002650
mov al, byte [esp + 0x13]
test al, al
je 0x100d1e65
lea ecx, [esp + 0x14]
call fcn.10002630
lea edx, [esp + 0x18]
push edx
mov ecx, edi
mov byte [esp + 0xe0], 0x18
call fcn.100588c0
mov eax, dword [eax]
mov ecx, dword [esp + 0xec]
mov edx, dword [ecx]
push eax
push edx
lea eax, [esp + 0x1c]
push str.Module_FOUND_TWICE___only_one_loaded_n_s_n_s
push eax
mov byte [esp + 0xec], 0x19
call fcn.10009090
add esp, 0x10
lea ecx, [esp + 0x18]
mov byte [esp + 0xdc], 0x18
call fcn.10002650
mov ecx, dword [esp + 0x14]
push 0
push 0
push ecx
call fcn.1011b1ca
lea ecx, [esp + 0x14]
mov byte [esp + 0xdc], 1
call fcn.10002650
mov edx, dword [esi]
mov ecx, esi
push ebp
call dword [edx]
mov eax, dword [esp + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
mov byte [esp + 0xdc], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100d1e9d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
mov dword [esp + 0xdc], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100d1ec6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov ecx, dword [esp + 0xd4]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0xd0
ret 0xc