Function at 0x101164a0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101f0005
mov eax, dword fs:[0]
push eax
mov eax, 0x402d8
call fcn.10191780
mov eax, dword [0x102632d4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
push 0x40000
lea eax, [ebp - 0x40010]
push 0
push eax
call fcn.101a9880
push dword [esi + 8]
cmp dword [0x1026c010], 8
mov eax, 0x1026bffc
push dword [esi + 4]
cmovae eax, dword [0x1026bffc]
push dword [esi + 0x28]
push dword [esi + 0x24]
push dword [esi + 0x20]
push dword [esi + 0x1c]
push dword [esi + 0x18]
push dword [esi + 0x14]
push dword [esi + 0x10]
push dword [esi + 0xc]
push dword [esi]
push eax
push dword [0x1026bd3c]
lea eax, [ebp - 0x40010]
push dword [0x1026bd38]
push str._I64d_s_d__d__d__d__d__d__d__d__d__d__d_
push 0xffffffffffffffff
push 0x20000
push eax
call fcn.1010c6d0
mov ecx, dword [esi + 0x30]
mov eax, 0xd20d20d3
sub ecx, dword [esi + 0x2c]
add esp, 0x54
imul ecx
lea eax, [ebp - 0x40010]
add edx, ecx
sar edx, 9
mov edi, edx
shr edi, 0x1f
add edi, edx
push edi
push 0x10227184
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, 0x20000
sub ecx, eax
lea eax, [ebp - 0x40010]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea ecx, [ebp - 0x40010]
lea eax, [ecx + eax*2]
push eax
call fcn.1010c6d0
add esp, 0x14
test edi, edi
je 0x10116d86
xor ecx, ecx
mov dword [ebp - 0x40284], ecx
mov eax, dword [esi + 0x2c]
add eax, 0x28
add eax, ecx
push eax
lea eax, [ebp - 0x40028]
push eax
call fcn.100c3ef0
mov dword [ebp - 4], 0
mov eax, dword [esi + 0x2c]
add eax, 0x40
add eax, dword [ebp - 0x40284]
push eax
lea eax, [ebp - 0x40088]
push eax
call fcn.100c3ef0
mov byte [ebp - 4], 1
mov eax, dword [esi + 0x2c]
add eax, 0x58
add eax, dword [ebp - 0x40284]
push eax
lea eax, [ebp - 0x40250]
push eax
call fcn.100c3ef0
mov byte [ebp - 4], 2
mov eax, dword [esi + 0x2c]
add eax, 0x70
add eax, dword [ebp - 0x40284]
push eax
lea eax, [ebp - 0x40238]
push eax
call fcn.100c3ef0
mov byte [ebp - 4], 3
mov eax, dword [esi + 0x2c]
add eax, 0x90
add eax, dword [ebp - 0x40284]
push eax
lea eax, [ebp - 0x40220]
push eax
call fcn.100c3ef0
mov byte [ebp - 4], 4
mov eax, dword [esi + 0x2c]
add eax, 0xa8
add eax, dword [ebp - 0x40284]
push eax
lea eax, [ebp - 0x40268]
push eax
call fcn.100c3ef0
mov byte [ebp - 4], 5
mov eax, dword [esi + 0x2c]
add eax, 0xc0
add eax, dword [ebp - 0x40284]
push eax
lea eax, [ebp - 0x40208]
push eax
call fcn.100c3ef0
mov byte [ebp - 4], 6
mov eax, dword [esi + 0x2c]
add eax, 0xd8
add eax, dword [ebp - 0x40284]
push eax
lea eax, [ebp - 0x401f0]
push eax
call fcn.100c3ef0
add esp, 0x40
mov byte [ebp - 4], 7
mov eax, dword [esi + 0x2c]
add eax, 0xf0
add eax, dword [ebp - 0x40284]
push eax
lea eax, [ebp - 0x401d8]
push eax
call fcn.100c3ef0
mov byte [ebp - 4], 8
mov eax, dword [esi + 0x2c]
add eax, 0x108
add eax, dword [ebp - 0x40284]
push eax
lea eax, [ebp - 0x401c0]
push eax
call fcn.100c3ef0
mov byte [ebp - 4], 9
mov eax, dword [esi + 0x2c]
add eax, 0x120
add eax, dword [ebp - 0x40284]
push eax
lea eax, [ebp - 0x401a8]
push eax
call fcn.100c3ef0
mov byte [ebp - 4], 0xa
mov eax, dword [esi + 0x2c]
add eax, 0x150
add eax, dword [ebp - 0x40284]
push eax
lea eax, [ebp - 0x40280]
push eax
call fcn.100c3ef0
mov byte [ebp - 4], 0xb
mov eax, dword [esi + 0x2c]
add eax, 0x168
add eax, dword [ebp - 0x40284]
push eax
lea eax, [ebp - 0x40190]
push eax
call fcn.100c3ef0
mov byte [ebp - 4], 0xc
mov eax, dword [esi + 0x2c]
add eax, 0x180
add eax, dword [ebp - 0x40284]
push eax
lea eax, [ebp - 0x40178]
push eax
call fcn.100c3ef0
mov byte [ebp - 4], 0xd
mov eax, dword [esi + 0x2c]
add eax, 0x198
add eax, dword [ebp - 0x40284]
push eax
lea eax, [ebp - 0x40160]
push eax
call fcn.100c3ef0
mov byte [ebp - 4], 0xe
mov eax, dword [esi + 0x2c]
add eax, 0x1b0
add eax, dword [ebp - 0x40284]
push eax
lea eax, [ebp - 0x40148]
push eax
call fcn.100c3ef0
add esp, 0x40
mov byte [ebp - 4], 0xf
mov eax, dword [esi + 0x2c]
add eax, 0x1c8
add eax, dword [ebp - 0x40284]
push eax
lea eax, [ebp - 0x40118]
push eax
call fcn.100c3ef0
mov byte [ebp - 4], 0x10
mov eax, dword [esi + 0x2c]
add eax, 0x1e0
add eax, dword [ebp - 0x40284]
push eax
lea eax, [ebp - 0x40100]
push eax
call fcn.100c3ef0
mov byte [ebp - 4], 0x11
mov eax, dword [esi + 0x2c]
add eax, 0x1f8
add eax, dword [ebp - 0x40284]
push eax
lea eax, [ebp - 0x40130]
push eax
call fcn.100c3ef0
mov byte [ebp - 4], 0x12
mov eax, dword [esi + 0x2c]
add eax, 0x210
add eax, dword [ebp - 0x40284]
push eax
lea eax, [ebp - 0x400e8]
push eax
call fcn.100c3ef0
mov byte [ebp - 4], 0x13
mov eax, dword [esi + 0x2c]
add eax, 0x228
add eax, dword [ebp - 0x40284]
push eax
lea eax, [ebp - 0x400d0]
push eax
call fcn.100c3ef0
mov byte [ebp - 4], 0x14
mov eax, dword [esi + 0x2c]
add eax, 0x240
add eax, dword [ebp - 0x40284]
push eax
lea eax, [ebp - 0x400b8]
push eax
call fcn.100c3ef0
mov byte [ebp - 4], 0x15
mov eax, dword [esi + 0x2c]
add eax, 0x258
add eax, dword [ebp - 0x40284]
push eax
lea eax, [ebp - 0x400a0]
push eax
call fcn.100c3ef0
mov byte [ebp - 4], 0x16
mov eax, dword [esi + 0x2c]
add eax, 0x138
add eax, dword [ebp - 0x40284]
push eax
lea eax, [ebp - 0x40040]
push eax
call fcn.100c3ef0
add esp, 0x40
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x400a0]
cmp dword [ebp - 0x4008c], 8
cmovae eax, dword [ebp - 0x400a0]
cmp dword [ebp - 0x400a4], 8
mov dword [ebp - 0x40290], eax
lea eax, [ebp - 0x400b8]
cmovae eax, dword [ebp - 0x400b8]
cmp dword [ebp - 0x400bc], 8
mov dword [ebp - 0x40294], eax
lea eax, [ebp - 0x400d0]
cmovae eax, dword [ebp - 0x400d0]
cmp dword [ebp - 0x400d4], 8
mov dword [ebp - 0x40298], eax
lea eax, [ebp - 0x400e8]
cmovae eax, dword [ebp - 0x400e8]
cmp dword [ebp - 0x4011c], 8
mov dword [ebp - 0x4029c], eax
lea eax, [ebp - 0x40130]
cmovae eax, dword [ebp - 0x40130]
cmp dword [ebp - 0x400ec], 8
mov dword [ebp - 0x402a0], eax
lea eax, [ebp - 0x40100]
cmovae eax, dword [ebp - 0x40100]
mov dword [ebp - 0x402e4], eax
cmp dword [ebp - 0x40104], 8
lea eax, [ebp - 0x40118]
mov edx, dword [ebp - 0x40284]
lea ecx, [ebp - 0x40238]
cmovae eax, dword [ebp - 0x40118]
cmp dword [ebp - 0x4014c], 8
mov dword [ebp - 0x402a4], eax
lea eax, [ebp - 0x40160]
cmovae eax, dword [ebp - 0x40160]
cmp dword [ebp - 0x40164], 8
mov dword [ebp - 0x402a8], eax
lea eax, [ebp - 0x40178]
cmovae eax, dword [ebp - 0x40178]
cmp dword [ebp - 0x4017c], 8
mov dword [ebp - 0x402ac], eax
lea eax, [ebp - 0x40190]
cmovae eax, dword [ebp - 0x40190]
cmp dword [ebp - 0x40134], 8
mov dword [ebp - 0x402b0], eax
lea eax, [ebp - 0x40148]
cmovae eax, dword [ebp - 0x40148]
cmp dword [ebp - 0x4026c], 8
mov dword [ebp - 0x402b4], eax
lea eax, [ebp - 0x40280]
cmovae eax, dword [ebp - 0x40280]
cmp dword [ebp - 0x4002c], 8
mov dword [ebp - 0x402b8], eax
lea eax, [ebp - 0x40040]
cmovae eax, dword [ebp - 0x40040]
cmp dword [ebp - 0x40194], 8
mov dword [ebp - 0x402bc], eax
lea eax, [ebp - 0x401a8]
cmovae eax, dword [ebp - 0x401a8]
cmp dword [ebp - 0x401ac], 8
mov dword [ebp - 0x402c0], eax
lea eax, [ebp - 0x401c0]
cmovae eax, dword [ebp - 0x401c0]
cmp dword [ebp - 0x401c4], 8
mov dword [ebp - 0x402c4], eax
lea eax, [ebp - 0x401d8]
cmovae eax, dword [ebp - 0x401d8]
cmp dword [ebp - 0x401dc], 8
mov dword [ebp - 0x402c8], eax
lea eax, [ebp - 0x401f0]
cmovae eax, dword [ebp - 0x401f0]
cmp dword [ebp - 0x401f4], 8
mov dword [ebp - 0x402cc], eax
lea eax, [ebp - 0x40208]
cmovae eax, dword [ebp - 0x40208]
cmp dword [ebp - 0x40254], 8
mov dword [ebp - 0x402d0], eax
lea eax, [ebp - 0x40268]
cmovae eax, dword [ebp - 0x40268]
cmp dword [ebp - 0x4020c], 8
mov dword [ebp - 0x402d4], eax
lea eax, [ebp - 0x40220]
cmovae eax, dword [ebp - 0x40220]
cmp dword [ebp - 0x40224], 8
mov dword [ebp - 0x402d8], eax
cmovae ecx, dword [ebp - 0x40238]
cmp dword [ebp - 0x4023c], 8
mov eax, dword [esi + 0x2c]
mov dword [ebp - 0x402e0], ecx
lea ecx, [ebp - 0x40250]
cmovae ecx, dword [ebp - 0x40250]
cmp dword [ebp - 0x40074], 8
mov dword [ebp - 0x402dc], ecx
lea ecx, [ebp - 0x40088]
cmovae ecx, dword [ebp - 0x40088]
cmp dword [ebp - 0x40014], 8
mov dword [ebp - 0x40288], ecx
lea ecx, [ebp - 0x40028]
cmovae ecx, dword [ebp - 0x40028]
mov dword [ebp - 0x4028c], ecx
lea ecx, [edx + 8]
add ecx, eax
cmp dword [ecx + 0x14], 8
jb 0x10116b14
mov ecx, dword [ecx]
push dword [ebp - 0x40290]
push dword [ebp - 0x40294]
push dword [ebp - 0x40298]
push dword [ebp - 0x4029c]
push dword [ebp - 0x402a0]
push dword [ebp - 0x402e4]
push dword [ebp - 0x402a4]
push dword [ebp - 0x402a8]
push dword [ebp - 0x402ac]
push dword [ebp - 0x402b0]
push dword [ebp - 0x402b4]
push dword [ebp - 0x402b8]
push dword [ebp - 0x402bc]
push dword [ebp - 0x402c0]
push dword [ebp - 0x402c4]
push dword [ebp - 0x402c8]
push dword [ebp - 0x402cc]
push dword [ebp - 0x402d0]
push dword [ebp - 0x402d4]
push dword [ebp - 0x402d8]
push dword [edx + eax + 0x8c]
push dword [edx + eax + 0x88]
push dword [ebp - 0x402e0]
push dword [ebp - 0x402dc]
push dword [ebp - 0x40288]
push dword [ebp - 0x4028c]
push dword [edx + eax + 0x24]
push dword [edx + eax + 0x20]
push ecx
push dword [edx + eax + 4]
push dword [edx + eax]
lea eax, [ebp - 0x40010]
push 0x102270c8
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, 0x20000
sub ecx, eax
lea eax, [ebp - 0x40010]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea ecx, [ebp - 0x40010]
lea eax, [ecx + eax*2]
push eax
call fcn.1010c6d0
add esp, 0x8c
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x40040]
call fcn.10008820
lea ecx, [ebp - 0x400a0]
mov byte [ebp - 4], 0x15
call fcn.10008820
lea ecx, [ebp - 0x400b8]
mov byte [ebp - 4], 0x14
call fcn.10008820
lea ecx, [ebp - 0x400d0]
mov byte [ebp - 4], 0x13
call fcn.10008820
lea ecx, [ebp - 0x400e8]
mov byte [ebp - 4], 0x12
call fcn.10008820
lea ecx, [ebp - 0x40130]
mov byte [ebp - 4], 0x11
call fcn.10008820
lea ecx, [ebp - 0x40100]
mov byte [ebp - 4], 0x10
call fcn.10008820
lea ecx, [ebp - 0x40118]
mov byte [ebp - 4], 0xf
call fcn.10008820
lea ecx, [ebp - 0x40148]
mov byte [ebp - 4], 0xe
call fcn.10008820
lea ecx, [ebp - 0x40160]
mov byte [ebp - 4], 0xd
call fcn.10008820
lea ecx, [ebp - 0x40178]
mov byte [ebp - 4], 0xc
call fcn.10008820
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x40190]
call fcn.10008820
lea ecx, [ebp - 0x40280]
mov byte [ebp - 4], 0xa
call fcn.10008820
lea ecx, [ebp - 0x401a8]
mov byte [ebp - 4], 9
call fcn.10008820
lea ecx, [ebp - 0x401c0]
mov byte [ebp - 4], 8
call fcn.10008820
lea ecx, [ebp - 0x401d8]
mov byte [ebp - 4], 7
call fcn.10008820
lea ecx, [ebp - 0x401f0]
mov byte [ebp - 4], 6
call fcn.10008820
lea ecx, [ebp - 0x40208]
mov byte [ebp - 4], 5
call fcn.10008820
lea ecx, [ebp - 0x40268]
mov byte [ebp - 4], 4
call fcn.10008820
lea ecx, [ebp - 0x40220]
mov byte [ebp - 4], 3
call fcn.10008820
lea ecx, [ebp - 0x40238]
mov byte [ebp - 4], 2
call fcn.10008820
lea ecx, [ebp - 0x40250]
mov byte [ebp - 4], 1
call fcn.10008820
lea ecx, [ebp - 0x40088]
mov byte [ebp - 4], 0
call fcn.10008820
lea ecx, [ebp - 0x40028]
mov dword [ebp - 4], 0xffffffff
call fcn.10008820
mov ecx, dword [ebp - 0x40284]
add ecx, 0x270
mov dword [ebp - 0x40284], ecx
sub edi, 1
jne 0x101165a6
lea ecx, [ebp - 0x40070]
call fcn.10009ab0
lea eax, [ebp - 0x40010]
mov dword [ebp - 4], 0x18
push eax
lea ecx, [ebp - 0x40088]
call fcn.10008860
mov byte [ebp - 4], 0x19
cmp dword [eax + 0x10], 0
je 0x10116e5a
push 0x1026bfe4
push eax
lea eax, [ebp - 0x40040]
push eax
call fcn.1000d790
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x40040]
cmp dword [ebp - 0x4002c], 8
mov eax, dword [ebp - 0x40030]
cmovae ecx, dword [ebp - 0x40040]
add eax, eax
push eax
push ecx
lea eax, [ebp - 0x40028]
push eax
call fcn.10016f40
add esp, 0x18
mov esi, eax
lea eax, [ebp - 0x40070]
mov byte [ebp - 4], 0x1b
cmp eax, esi
je 0x10116e3c
mov ecx, eax
call fcn.100088b0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x40070], xmm0
movq xmm0, qword [esi + 0x10]
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
movq qword [ebp - 0x40060], xmm0
mov word [esi], ax
lea ecx, [ebp - 0x40028]
mov byte [ebp - 4], 0x1a
call fcn.10008820
lea ecx, [ebp - 0x40040]
mov byte [ebp - 4], 0x19
call fcn.10008820
lea ecx, [ebp - 0x40088]
mov byte [ebp - 4], 0x18
call fcn.10008820
lea eax, [ebp - 0x40010]
push eax
lea ecx, [ebp - 0x40058]
call fcn.10008860
lea eax, [ebp - 0x40070]
mov byte [ebp - 4], 0x1c
push eax
lea eax, [ebp - 0x40028]
push 0x1026bffc
push eax
call fcn.1000d790
add esp, 0xc
mov byte [ebp - 4], 0x1d
mov ecx, eax
cmp dword [eax + 0x14], 8
jb 0x10116ea8
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x40058]
call fcn.10009bb0
lea ecx, [ebp - 0x40028]
mov byte [ebp - 4], 0x1c
call fcn.10008820
mov eax, dword [ebp - 0x40048]
lea ecx, [ebp - 0x40028]
push str.Local_shared_memeory.rmd_popup
xor esi, esi
lea edi, [eax + eax]
mov dword [ebp - 0x4028c], edi
call fcn.10008860
mov byte [ebp - 4], 0x1e
lea eax, [ebp - 0x40058]
cmp dword [ebp - 0x40044], 8
cmovae eax, dword [ebp - 0x40058]
mov dword [ebp - 0x40288], eax
test edi, edi
je 0x10116f75
cmp edi, 0x20000
ja 0x10116f75
cmp dword [ebp - 0x40014], 8
lea eax, [ebp - 0x40028]
cmovae eax, dword [ebp - 0x40028]
push eax
push 0x20000
push esi
push 4
push esi
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov esi, eax
test esi, esi
je 0x10116f75
push 0x20000
push 0
push 0
push 0xf001f
push esi
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov edi, eax
test edi, edi
je 0x10116f75
push dword [ebp - 0x4028c]
mov ecx, edi
push dword [ebp - 0x40288]
call fcn.101162d0
add esp, 8
push edi
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
lea ecx, [ebp - 0x40028]
mov byte [ebp - 4], 0x1c
call fcn.10008820
lea ecx, [ebp - 0x40058]
mov byte [ebp - 4], 0x18
call fcn.10008820
lea ecx, [ebp - 0x40070]
mov dword [ebp - 4], 0xffffffff
call fcn.10008820
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.101912fd
mov esp, ebp
pop ebp
ret