Function at 0x10017e70
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x3016388
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x3027864]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
lea ecx, [ebp - 0x18]
jmp 0x1001821f
add esp, 8
cmp eax, 0xffffffff
jne 0x10018242
push 0x301d560
lea ecx, [ebp - 0x24]
call fcn.100654b4
push 0x3021fb8
lea ecx, [ebp - 0x24]
push ecx
jmp 0x1001823d
call fcn.10063aad
push esi
call fcn.10063ad9
add esp, 4
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
call fcn.10063aad
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [esp]
lea esp, [esp - 0x20]
pushfd
clc
cmp dh, dh
push eax
push edx
cwd
cmc
push ecx
xchg dx, cx
cmc
push ebx
inc bh
sar dl, 0
push eax
lea ebx, [eax + 0x3459]
bt dx, 0
cdq
inc edx
cbw
bswap eax
das
dec bx
nop
btc eax, 4
bswap ebx
mov eax, dword [esp]
mov dword [esp + 0x34], eax
pop ebx
das
inc ah
cbw
btc ecx, 6
rol dx, 4
dec eax
sub ebx, ebx
mov ebx, dword [esp]
dec cx
xor edx, edx
mov eax, 0xa6d9
mov ecx, 0xcc63
div ecx
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 8]
bts cx, 5
mov ecx, dword [esp + 0x10]
push ecx
popfd
mov ecx, dword [esp + 4]
lea esp, [esp + 0x34]
lea esp, [esp + 4]
pop edi
mov esi, dword [esp]
pushfd
push eax
daa
push ebx
inc ebx
aas
push ecx
push edx
bsf ecx, edx
push ebx
not ah
sub cl, 0xa8
sar eax, 2
dec cx
inc cx
shl edx, 6
nop
lahf
sahf
not cx
mov ecx, dword [esp + 8]
xchg bh, ah
clc
cbw
pop ebx
bts edx, 5
bswap ebx
bswap edx
mov edx, dword [esp]
aam 0xa
inc eax
bswap eax
aam 0xa
mov eax, dword [esp + 0xc]
bsf ebx, ebx
mov ebx, dword [esp + 0x10]
push ebx
popfd
mov ebx, dword [esp + 8]
lea esp, [esp + 0x14]
lea esp, [esp + 4]
pop ebx
mov esp, ebp
pop ebp
ret
mov edi, dword [ebp + 8]
mov esi, dword [0x3028a90]
mov eax, dword [edi]
cmp esi, dword [eax + 0xc]
jae 0x100180f5
mov ecx, dword [eax + 8]
mov ecx, dword [ecx + esi*4]
test ecx, ecx
jne 0x100180fc
cmp byte [eax + 0x14], 0
je 0x100180fc
push 0x2fb746c
lea esp, [esp - 0x20]
push ebx
mov dword [esp + 0x20], ebx
pop ebx
pushfd
push ecx
neg ecx
push edx
neg dx
xor ch, 0x49
not dl
bswap ebx
cmc
push eax
cdq
stc
sahf
push ecx
ror dh, 6
cmc
aad 0xa
shr dh, 6
mov ax, 0x18
mov cx, 0xb7
mul cx
mov edx, dword [esp + 8]
bswap ebx
clc
nop
dec ah
das
ror ecx, 6
btc ax, 4
dec ebx
inc eax
mov eax, dword [esp + 4]
not bx
mov ebx, dword [esp + 0x10]
push ebx
popfd
mov ebx, dword [esp + 0x30]
push edx
bswap ecx
mov ecx, dword [esp + 0x10]
lea esp, [esp + 0x38]
jmp fcn.10063b50
xor ecx, ecx
jmp 0x10017ff4
mov esi, ecx
test esi, esi
jne 0x10017ed7
test ebx, ebx
je 0x10018115
mov esi, ebx
jmp 0x10017ed7
lea eax, [ebp - 0x10]
push edi
lea esp, [esp - 4]
push ebx
bswap ebx
pushfd
push eax
das
lea ebx, [eax - 0x71cd]
push ecx
inc ch
dec cx
nop
aam 0xa
neg bh
cmc
push edx
cbw
bt cx, 1
cmc
pop ebx
push edx
sar dl, 6
mov edx, dword [esp]
cbw
not ebx
add ebx, ecx
not cx
daa
cmc
aad 0xa
bswap ecx
bswap ebx
das
and ebx, eax
das
push eax
stc
ror al, 2
xadd ebx, ecx
mov ebx, dword [esp + 0x14]
mov ecx, dword [esp + 8]
aas
mov eax, dword [esp + 0x10]
push eax
popfd
mov eax, dword [esp + 0xc]
lea esp, [esp + 0x18]
mov dword [esp], eax
call fcn.10017560
jmp 0x10017ea2
mov dword [ebp - 0x10], ebx
jne 0x10017fd2
push 0
lea ecx, [ebp - 0x14]
push 0x2fb75f5
pushfd
stc
push ebx
ror bx, 0
push eax
lahf
bsf ax, bx
shl ebx, 1
shl bx, 6
add ax, bx
stc
push edx
cwd
push ecx
bsf ecx, eax
dec bh
stc
dec bh
not bx
add bx, 0xef33
mov ebx, dword [esp + 0xc]
sub al, 0xec
neg edx
neg ch
mov ecx, dword [esp]
inc ah
and ah, 0xbf
push ebx
cdq
cwd
not dx
mov edx, dword [esp + 8]
das
mov eax, dword [esp + 0x14]
push eax
popfd
mov eax, dword [esp + 0xc]
lea esp, [esp + 0x18]
jmp fcn.10063a85
call fcn.10063a85
cmp dword [0x3028a90], 0
mov ebx, dword [0x3028a88]
mov dword [ebp - 4], 0
jmp 0x10018186
call fcn.1006553b
mov esi, dword [ebp - 0x10]
push 0
lea ecx, [ebp + 8]
mov dword [0x3028a88], esi
call fcn.10063a85
mov eax, dword [esi + 4]
cmp eax, 0xffffffff
jae 0x10018265
inc eax
mov dword [esi + 4], eax
lea ecx, [ebp + 8]
jmp 0x10017ec9