Function at 0x37500
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 5
push 0
push 0
dec ecx
jne 0x37509
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
test dl, dl
je 0x37523
add esp, 0xfffffff0
call fcn.0001302c
mov dword [ebp - 4], ecx
mov ebx, edx
mov edi, eax
lea eax, [ebp - 4]
call fcn.00014684
xor eax, eax
push ebp
push 0x377c6
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
mov eax, edi
call fcn.00012d14
xor eax, eax
mov dword [edi + 0x48], eax
mov dword [edi + 0x60], pe_nt_image_headers32
mov byte [edi + 0x64], 0
mov dword [edi + 8], 0x10
mov dword [edi + 0xc], 0
mov dword [edi + 0x2c], 0xffffffff
lea edx, [ebp - 0xc]
mov eax, dword [ebp - 4]
call fcn.000370d8
mov edx, dword [ebp - 0xc]
lea eax, [edi + 0x24]
call fcn.000140c0
lea eax, [edi + 0x6c]
call fcn.00014084
lea eax, [edi + 0x38]
call fcn.00014084
xor eax, eax
mov dword [edi + 0x34], eax
lea eax, [ebp - 0x10]
call fcn.0001a70c
mov edx, dword [ebp - 0x10]
lea eax, [edi + 0x20]
call fcn.00014240
lea eax, [edi + 0x58]
call fcn.00014084
xor eax, eax
mov dword [edi + 0x30], eax
lea eax, [ebp - 0x14]
call fcn.0001a70c
mov edx, dword [ebp - 0x14]
lea eax, [edi + 0x84]
call fcn.00014240
lea eax, [edi + 0x88]
call fcn.00014084
xor eax, eax
mov dword [edi + 0x28], eax
lea eax, [ebp - 0x18]
call fcn.0001a70c
mov edx, dword [ebp - 0x18]
lea eax, [edi + 0x80]
call fcn.00014240
lea eax, [edi + 0x5c]
call fcn.00014084
xor eax, eax
mov dword [edi + 0x4c], eax
lea eax, [ebp - 0x1c]
call fcn.0001a70c
mov edx, dword [ebp - 0x1c]
lea eax, [edi + 0x70]
call fcn.00014240
cmp dword [ebp + 0xc], 0
jne 0x37623
cmp dword [ebp + 8], 0x14
jb 0x37652
jmp 0x37625
jl 0x37652
cmp dword [ebp + 0xc], 0
jne 0x37636
cmp dword [ebp + 8], 0x30d40
ja 0x37652
jmp 0x37638
jg 0x37652
push 0
push 0x400
mov eax, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
call fcn.000164c4
mov dword [edi + 0x18], eax
mov dword [edi + 0x1c], edx
jmp 0x37660
mov dword [edi + 0x18], 0xa00000
mov dword [edi + 0x1c], 0
mov edx, 0x22
mov eax, dword [edi + 0x24]
call fcn.0001b294
mov esi, eax
mov dword [edi + 0x2c], esi
inc esi
jne 0x376d4
lea edx, [ebp - 0x20]
mov eax, dword [edi + 0x24]
call fcn.00036d74
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 8]
call fcn.00036d20
mov eax, dword [ebp - 8]
call fcn.0001bfc4
mov edx, 4
mov eax, dword [edi + 0x24]
call fcn.0001b1b8
mov esi, eax
mov dword [edi + 0x2c], esi
inc esi
setne al
mov byte [edi + 0x64], al
mov eax, edi
call fcn.000373dc
mov eax, dword [edi + 0x2c]
call fcn.0001b28c
mov edx, 0x22
mov eax, dword [edi + 0x24]
call fcn.0001b294
mov esi, eax
mov dword [edi + 0x2c], esi
inc esi
setne al
mov byte [edi + 0x64], al
cmp dword [edi + 0x2c], 0xffffffff
je 0x37775
mov byte [edi + 0x64], 1
mov dword [edi + 0x50], 0
mov dword [edi + 0x54], 0
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], 0
mov eax, edi
call fcn.000371e4
lea eax, [ebp - 0x24]
call fcn.0001a70c
mov edx, dword [ebp - 0x24]
lea eax, [edi + 0x68]
call fcn.00014240
push dword [edi + 0x68]
push 0x377f4
push dword [edi + 0x24]
push 0x37818
call fcn.0001a5bc
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x30]
call fcn.0001a994
mov edx, dword [ebp - 0x30]
lea eax, [ebp - 0x2c]
call fcn.00014240
push dword [ebp - 0x2c]
push 0x3782c
lea eax, [ebp - 0x28]
mov edx, 3
call fcn.00014394
push dword [ebp - 0x28]
lea eax, [edi + 0x68]
mov edx, 4
call fcn.00014394
mov eax, edi
call fcn.000372e4
jmp 0x37779
mov byte [edi + 0x64], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x377cd
lea eax, [ebp - 0x30]
call fcn.00013a54
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.0001409c
lea eax, [ebp - 0x24]
call fcn.00013a54
lea eax, [ebp - 0x20]
call fcn.00014084
lea eax, [ebp - 0x1c]
mov edx, 4
call fcn.00013a78
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.0001409c
ret