Function at 0x100a2a30
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag

Disassembly:
push 0xffffffffffffffff
push 0x101fdfdc
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, dword [esp + 0x14]
push ebx
push esi
push edi
mov esi, ecx
push eax
mov dword [esp + 0x10], esi
call fcn.100aae40
mov dword [esi], 0x1020c870
xor edi, edi
mov dword [esi + 0x34], edi
mov dword [esi + 0x3c], edi
mov dword [esi + 0x38], 0x10206138
mov dword [esi + 0x40], edi
lea eax, [esi + 0x38]
mov dword [eax + 0xc], eax
mov dword [eax + 0x10], eax
lea eax, [esi + 0x50]
mov dword [eax + 4], edi
mov dword [eax], 0x10206138
mov dword [eax + 8], edi
mov dword [eax + 0xc], eax
mov dword [eax + 0x10], eax
mov ecx, 0x10206154
mov dword [esp + 0x18], edi
mov dword [esi + 0x4c], edi
mov dword [esi + 0x64], edi
mov dword [esi + 0x30], ecx
mov dword [esi + 0x6c], edi
mov dword [esi + 0x74], edi
mov dword [esi + 0x70], 0x10206138
mov dword [esi + 0x78], edi
lea eax, [esi + 0x70]
mov dword [eax + 0xc], eax
mov dword [eax + 0x10], eax
lea eax, [esi + 0x88]
mov dword [eax + 4], edi
mov dword [eax], 0x10206138
mov dword [eax + 8], edi
mov dword [eax + 0xc], eax
mov dword [eax + 0x10], eax
mov dword [esi + 0x84], edi
mov dword [esi + 0x9c], edi
mov dword [esi + 0x68], ecx
mov dword [esi + 0xa4], edi
mov dword [esi + 0xac], edi
mov dword [esi + 0xa8], 0x10206138
mov dword [esi + 0xb0], edi
lea eax, [esi + 0xa8]
mov dword [eax + 0xc], eax
mov dword [eax + 0x10], eax
lea eax, [esi + 0xc0]
mov dword [eax + 4], edi
mov dword [eax], 0x10206138
mov dword [eax + 8], edi
mov dword [eax + 0xc], eax
mov dword [eax + 0x10], eax
mov dword [esi + 0xbc], edi
mov dword [esi + 0xd4], edi
mov dword [esi + 0xa0], ecx
lea ebx, [esi + 0xd8]
push 0x100
mov ecx, ebx
mov byte [esp + 0x1c], 3
mov dword [ebx + 4], edi
mov dword [ebx], 0x1020aeb0
mov dword [ebx + 8], edi
mov dword [ebx + 0xc], edi
mov dword [ebx + 0x10], edi
mov dword [ebx + 0x14], edi
mov dword [ebx + 0x18], edi
call fcn.10089060
push edi
mov ecx, ebx
call fcn.100c6280
mov byte [esp + 0x18], 4
lea ebx, [esi + 0xf4]
push 0x100
mov ecx, ebx
mov dword [ebx + 4], edi
mov dword [ebx], 0x1020aeb0
mov dword [ebx + 8], edi
mov dword [ebx + 0xc], edi
mov dword [ebx + 0x10], edi
mov dword [ebx + 0x14], edi
mov dword [ebx + 0x18], edi
call fcn.10089060
push edi
mov ecx, ebx
call fcn.100c6280
lea ebx, [esi + 0x110]
push 0x100
mov ecx, ebx
mov byte [esp + 0x1c], 5
mov dword [ebx + 4], edi
mov dword [ebx], 0x1020aeb0
mov dword [ebx + 8], edi
mov dword [ebx + 0xc], edi
mov dword [ebx + 0x10], edi
mov dword [ebx + 0x14], edi
mov dword [ebx + 0x18], edi
call fcn.10089060
push edi
mov ecx, ebx
call fcn.100c6280
lea ebx, [esi + 0x12c]
push 0x100
mov ecx, ebx
mov byte [esp + 0x1c], 6
mov dword [ebx + 4], edi
mov dword [ebx], 0x1020aeb0
mov dword [ebx + 8], edi
mov dword [ebx + 0xc], edi
mov dword [ebx + 0x10], edi
mov dword [ebx + 0x14], edi
mov dword [ebx + 0x18], edi
call fcn.10089060
push edi
mov ecx, ebx
call fcn.100c6280
lea ebx, [esi + 0x148]
push 0x100
mov ecx, ebx
mov byte [esp + 0x1c], 7
mov dword [ebx + 4], edi
mov dword [ebx], 0x1020aeb0
mov dword [ebx + 8], edi
mov dword [ebx + 0xc], edi
mov dword [ebx + 0x10], edi
mov dword [ebx + 0x14], edi
mov dword [ebx + 0x18], edi
call fcn.10089060
push edi
mov ecx, ebx
call fcn.100c6280
lea ebx, [esi + 0x164]
push 0x100
mov ecx, ebx
mov byte [esp + 0x1c], 8
mov dword [ebx + 4], edi
mov dword [ebx], 0x1020aeb0
mov dword [ebx + 8], edi
mov dword [ebx + 0xc], edi
mov dword [ebx + 0x10], edi
mov dword [ebx + 0x14], edi
mov dword [ebx + 0x18], edi
call fcn.10089060
push edi
mov ecx, ebx
call fcn.100c6280
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov dword [esi + 0x18], edi
mov ecx, dword [esp + 0x10]
mov dword [esi + 0x1c], edi
mov dword [esi + 0x20], edi
mov dword [esi + 0x24], edi
mov dword [esi + 0x28], edi
mov dword [esi + 0x2c], edi
pop edi
mov eax, esi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret 4