Function at 0x10017270
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008b43e
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
push edi
mov eax, dword [0x100d0040]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x10], esi
mov dword [esi], vtable.WeaselTSF.3.0
mov dword [esi + 4], vtable.WeaselTSF.8.0
mov dword [esi + 8], vtable.WeaselTSF.7.0
mov dword [esi + 0xc], vtable.WeaselTSF.1.0
mov dword [esi + 0x10], vtable.WeaselTSF.5.0
mov dword [esi + 0x14], vtable.WeaselTSF.2.0
mov dword [esi + 0x18], vtable.WeaselTSF.9.0
mov dword [esi + 0x1c], vtable.WeaselTSF.0
mov dword [esi + 0x20], vtable.WeaselTSF.4.0
mov dword [esi + 0x24], vtable.WeaselTSF.6.0
mov dword [esi + 0x28], 0
mov dword [ebp - 4], 0
mov dword [esi + 0x34], 0
mov dword [esi + 0x140], 0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [esi + 0x144], xmm0
mov dword [esi + 0x154], 0
mov dword [esi + 0x158], 7
mov word [esi + 0x144], ax
mov dword [esi + 0x15c], eax
mov dword [esi + 0x160], eax
mov dword [esi + 0x164], eax
mov dword [esi + 0x168], eax
mov dword [esi + 0x16c], eax
mov dword [esi + 0x170], eax
mov dword [esi + 0x174], eax
mov dword [esi + 0x178], eax
mov byte [ebp - 4], 0xb
mov dword [esi + 0x180], eax
push 0x58
mov dword [esi + method.weasel::Client.virtual_0], vtable.weasel::Client.0
call fcn.1005ca34
add esp, 4
mov dword [ebp - 0x14], eax
mov ecx, eax
mov byte [ebp - 4], 0xc
call fcn.1001a410
mov dword [esi + 0x188], eax
xor eax, eax
xorps xmm0, xmm0
movups xmmword [esi + 0x190], xmm0
mov dword [esi + 0x1a0], 0
mov dword [esi + 0x1a4], 7
mov word [esi + 0x190], ax
movups xmmword [esi + 0x1a8], xmm0
mov dword [esi + 0x1b8], eax
mov dword [esi + 0x1bc], 7
mov word [esi + 0x1a8], ax
mov dword [esi + 0x1c0], eax
mov word [esi + 0x1c4], ax
mov dword [esi + 0x1c8], eax
movups xmmword [esi + 0x1d4], xmm0
mov dword [esi + 0x1e4], eax
mov dword [esi + 0x1e8], eax
movups xmmword [esi + 0x1ec], xmm0
mov dword [esi + 0x1fc], eax
mov dword [esi + 0x200], 7
mov word [esi + 0x1ec], ax
mov byte [ebp - 4], 0xf
mov dword [esi + 0x204], eax
mov word [esi + 0x208], ax
mov byte [esi + 0x20a], al
mov dword [esi + 0x20c], eax
mov dword [esi + 0x210], 0xfc000003
lea ecx, [esi + 0x22c]
push 8
movups xmmword [ecx], xmm0
push str.War3.exe
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], eax
call fcn.10003240
lea ecx, [esi + 0x244]
mov byte [ebp - 4], 0x10
xorps xmm0, xmm0
push 7
movups xmmword [ecx], xmm0
push str.WoW.exe
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.10003240
mov byte [ebp - 4], 0x11
push 0x1dc
mov dword [esi + 0x25c], 0
mov dword [esi + 0x17c], 1
mov dword [esi + 0x30], 0xffffffff
mov dword [esi + 0x38], 0xffffffff
mov dword [esi + 0x3c], 0xffffffff
mov dword [esi + 0x1d0], 0xffffffff
call fcn.1005ca34
add esp, 4
mov dword [ebp - 0x14], eax
push esi
mov ecx, eax
mov byte [ebp - 4], 0x12
call fcn.10001b20
mov edi, eax
mov byte [ebp - 4], 0x13
mov edx, dword [esi + 0x174]
test edx, edx
je 0x100174e7
mov ecx, dword [edx]
push edx
call dword [ecx + 8]
mov dword [esi + 0x174], edi
or dword [esi + 0x1e8], 0x40
or dword [esi + 0x1e8], 0x10000
lock inc dword [0x100d0aa0]
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret