Function at 0x53f550
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x5a34f2
mov eax, dword fs:[0]
push eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x5f13cc]
xor eax, esp
push eax
lea eax, [esp + 0x14]
mov dword fs:[0], eax
mov esi, dword [esp + 0x24]
lea ebp, [esi + 0x24]
xor edi, edi
mov dword [esi], vtable.CEngDataCache2.0
mov dword [ebp + 4], edi
mov dword [ebp + 8], edi
mov dword [ebp + 0xc], edi
lea ebx, [esi + 0x38]
mov dword [esp + 0x1c], edi
mov dword [ebx + 4], edi
mov dword [ebx + 8], edi
mov dword [ebx + 0xc], edi
xor eax, eax
mov dword [esi + 0x4c], edi
mov ecx, 1
mov dword [esi + 0x60], ecx
mov dword [esi + 0x50], eax
mov dword [esi + 0x54], eax
mov dword [esi + 0x58], eax
mov dword [esi + 0x5c], eax
mov dword [esi + 0x64], edi
mov dword [esi + 0x68], edi
mov dword [esi + 0x7c], ecx
mov dword [esi + 0x6c], eax
mov dword [esi + 0x70], eax
mov dword [esi + 0x74], eax
mov dword [esi + 0x78], eax
mov dword [esi + 0x80], edi
mov dword [esi + 0x98], edi
mov dword [esi + 0x9c], edi
mov dword [esi + 0xa0], edi
push 0x52df30
push 0x52df10
push 0x10
push 0x1c
lea eax, [esi + 0xc4]
push eax
mov byte [esp + 0x30], 4
call fcn.0057b07c
push 0x52df30
push 0x52df10
push 2
push 0x1c
lea ecx, [esi + 0x294]
push ecx
mov byte [esp + 0x30], 5
call fcn.0057b07c
xor eax, eax
mov dword [esi + 0x2f0], eax
mov dword [esi + 0x2f4], eax
mov dword [esi + 0x2f8], eax
mov dword [esi + 0x2fc], eax
mov eax, 1
mov dword [esi + 8], eax
mov dword [esi + 0xc], eax
mov eax, ebx
mov dword [esi + 4], edi
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov dword [esi + 0x18], edi
mov dword [esi + 0x1c], edi
mov dword [esi + 0x20], edi
mov dword [esi + 0x34], 3
call fcn.0052a9c0
mov eax, dword [esi + 0x4c]
cmp eax, edi
je 0x53f678
push eax
call fcn.0057832c
add esp, 4
mov dword [esi + 0x4c], edi
mov dword [esi + 0x50], edi
mov dword [esi + 0x54], edi
mov dword [esi + 0x58], edi
mov dword [esi + 0x5c], edi
mov ebx, 1
mov dword [esi + 0x60], ebx
mov dword [esi + 0x64], edi
mov eax, dword [esi + 0x68]
cmp eax, edi
je 0x53f6a2
push eax
call fcn.0057832c
add esp, 4
mov dword [esi + 0x68], edi
mov dword [esi + 0x6c], edi
mov dword [esi + 0x70], edi
mov dword [esi + 0x74], edi
mov dword [esi + 0x78], edi
mov dword [esi + 0x7c], ebx
mov dword [esi + 0x80], edi
lea eax, [esi + 0x94]
mov dword [esi + 0x48], 0xff00ff
mov dword [esi + 0x8c], edi
mov dword [esi + 0x90], edi
mov dword [esi + 0x84], edi
mov dword [esi + 0x88], 7
call fcn.0052a9c0
mov dword [esi + 0xa4], 0xffffffff
mov dword [esi + 0xa8], ebx
mov dword [esi + 0xac], edi
mov dword [esi + 0xb0], ebx
mov dword [esi + 0xb4], edi
mov dword [esi + 0xb8], edi
mov dword [esi + 0xbc], edi
mov dword [esi + 0xc0], edi
mov eax, 0x10
mov dword [esi + 0x284], eax
mov dword [esi + 0x288], eax
mov dword [esi + 0x2d0], edi
mov dword [esi + 0x2d4], edi
mov dword [esi + 0x2d8], edi
mov dword [esi + 0x2dc], edi
mov dword [esi + 0x2e0], edi
mov dword [esi + 0x2e4], edi
mov dword [esi + 0x2e8], edi
mov eax, ebp
mov dword [esi + 0x2ec], edi
mov dword [esi + 0x290], edi
mov dword [esi + 0x2cc], edi
call fcn.0052a9c0
mov dword [esi + 0x300], ebx
mov eax, esi
mov ecx, dword [esp + 0x14]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret 4