Function at 0x5fb2d0
Capabilities:
Access peb ldr_data
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x64dcc0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10
push ebx
push ebp
mov ebp, ecx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push edi
mov dword [esp + 0x10], ebp
mov dword [ebp + 0x50], 0
call esi
push eax
call fcn.0062090e
add esp, 4
call fcn.006208ed
imul eax, eax, 0x41c64e6d
add eax, 0x3039
mov dword [ebp + 0x19c], eax
call esi
push eax
call fcn.0062090e
add esp, 4
call fcn.006208ed
imul eax, eax, 0x41c64e6d
add eax, 0x3039
mov dword [ebp + 0x1a8], eax
mov dword [ebp + 0x414], 0
mov dword [ebp + 0x418], 0
mov dword [ebp + 0x41c], 0
mov dword [esp + 0x28], 0
mov dword [ebp + 0x424], 0
mov dword [ebp + 0x428], 0
mov dword [ebp + 0x42c], 0
push 0x5fbf60
push 0x615190
push 0x600
push 0x158
lea eax, [ebp + 0x50c]
mov byte [esp + 0x38], 1
push eax
call fcn.00622d72
push 0x5fbfd0
push 0x615190
push 0x600
push 0x158
lea eax, [ebp + 0x81510]
mov byte [esp + 0x38], 2
push eax
call fcn.00622d72
mov dword [ebp + 0x102548], 2
mov dword [ebp + 0x102560], 0
mov dword [ebp + 0x102574], 0
mov dword [ebp + 0x102578], 0
mov dword [ebp + 0x10257c], 0
mov dword [ebp + 0x102580], 0
mov dword [ebp + 0x102584], 0
mov dword [ebp + 0x102588], 0
mov dword [ebp + 0x10258c], 0
mov dword [ebp + 0x102590], 0
mov dword [ebp + 0x102594], 0
mov dword [ebp + 0x1025a0], 2
mov dword [ebp + 0x1025e0], 0
mov dword [ebp + 0x1025e4], 0
mov dword [ebp + 0x1025e8], 0
push 0x50
mov byte [esp + 0x2c], 7
call fcn.005f1430
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x5fb48d
mov cl, bl
mov dl, 0x10
and cl, 0xf
sub dl, cl
movzx ecx, dl
add ebx, ecx
mov byte [ebx - 1], dl
jmp 0x5fb48f
xor ebx, ebx
mov esi, dword [ebp + 0x19c]
xor edx, edx
imul eax, esi, 0x3cc0
mov edi, 0xa
shr esi, 0x10
mov ecx, 0x14
push 0x50
sub ebx, eax
mov eax, esi
div edi
mov dword [ebp + 0x1a0], ebx
mov bl, byte [ebp + 0x19d]
mov eax, edx
shr eax, 1
lea eax, [eax + edx*4]
xor eax, edx
xor edx, edx
add eax, 0x20
shr eax, 0x18
xor al, bl
add al, 0x10
xor byte [ebp + 0x1a0], al
mov eax, esi
div ecx
mov ecx, 0x1e
mov eax, edx
shr eax, 1
lea eax, [eax + edx*4]
xor eax, edx
xor edx, edx
add eax, 0x20
shr eax, 0x18
xor al, bl
add al, 0x10
xor byte [ebp + 0x1a2], al
mov eax, esi
div ecx
mov eax, esi
mov ecx, edx
shr ecx, 1
lea ecx, [ecx + edx*4]
xor ecx, edx
xor edx, edx
add ecx, 0x20
shr ecx, 0x18
xor cl, bl
add cl, 0x10
xor byte [ebp + 0x1a1], cl
mov ecx, 0x28
div ecx
mov eax, edx
shr eax, 1
lea eax, [eax + edx*4]
xor eax, edx
add eax, 0x20
shr eax, 0x18
xor al, bl
add al, 0x10
xor byte [ebp + 0x1a3], al
call fcn.005f1430
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x5fb560
mov cl, bl
mov dl, 0x10
and cl, 0xf
sub dl, cl
movzx ecx, dl
add ebx, ecx
mov byte [ebx - 1], dl
jmp 0x5fb562
xor ebx, ebx
mov esi, dword [ebp + 0x1a8]
xor edx, edx
imul eax, esi, 0x3cc0
mov ecx, 0x14
shr esi, 0x10
xorps xmm1, xmm1
sub ebx, eax
mov eax, esi
div edi
mov dword [ebp + 0x1ac], ebx
mov bl, byte [ebp + 0x1a9]
mov eax, edx
shr eax, 1
lea eax, [eax + edx*4]
xor eax, edx
xor edx, edx
add eax, 0x20
shr eax, 0x18
xor al, bl
add al, 0x10
xor byte [ebp + 0x1ac], al
mov eax, esi
div ecx
mov ecx, 0x1e
mov eax, edx
shr eax, 1
lea eax, [eax + edx*4]
xor eax, edx
xor edx, edx
add eax, 0x20
shr eax, 0x18
xor al, bl
add al, 0x10
xor byte [ebp + 0x1ae], al
mov eax, esi
div ecx
mov eax, esi
mov ecx, edx
shr ecx, 1
lea ecx, [ecx + edx*4]
xor ecx, edx
xor edx, edx
add ecx, 0x20
shr ecx, 0x18
xor cl, bl
add cl, 0x10
xor byte [ebp + 0x1ad], cl
mov ecx, 0x28
div ecx
mov eax, edx
shr eax, 1
lea eax, [eax + edx*4]
xor eax, edx
add eax, 0x20
shr eax, 0x18
xor al, bl
add al, 0x10
xor byte [ebp + 0x1af], al
mov dword [ebp], 0
mov dword [ebp + 0x1025a4], 0
mov dword [ebp + 0x10], 0
mov dword [ebp + 0x14], 0
mov dword [ebp + 0x50], 0
mov dword [ebp + 0x44c], 0
mov dword [ebp + 0x450], 0
mov dword [ebp + 0x454], 0
mov dword [ebp + 0x458], 0
mov dword [ebp + 0x45c], 0
mov dword [ebp + 0x460], 0x3f800000
mov dword [ebp + 0x10255c], 1
mov dword [ebp + 0x10254c], 0
mov dword [ebp + 0x464], 0
mov dword [ebp + 0x46c], 0
mov dword [ebp + 0x470], 0x461c4000
mov dword [ebp + 0x468], 0xff000000
mov dword [ebp + 0x40c], 0x3dcccccd
mov dword [ebp + 0x410], 0x47241000
mov dword [ebp + 0x102564], 0
mov byte [ebp + 0x102570], 0
mov dword [ebp + 0x102510], 0xffffffff
mov dword [ebp + 0x102514], 0xffffffff
movss xmm0, xmm1
mov dword [ebp + 0x102520], 0
unpcklps xmm0, xmm1
xor edx, edx
movq qword [ebp + 0x190], xmm0
mov ecx, 0xa
mov dword [ebp + 0x102524], 0
mov dword [ebp + 0x102528], 0
mov dword [ebp + 0x10251c], 0
mov dword [ebp + 0x10252c], 0
mov dword [ebp + 0x102530], 0
mov dword [ebp + 0x102534], 0
mov dword [ebp + 0x102538], 0
mov dword [ebp + 0x10253c], 0
mov dword [ebp + 0x102540], 0
mov dword [ebp + 0x102544], 0
mov byte [ebp + 0x102599], 0
mov dword [ebp + 0x1025a8], 1
mov dword [ebp + 0x1025ac], 0
mov dword [ebp + 0x1025b0], 0
mov dword [ebp + 0x1025b4], 0
mov dword [ebp + 0x102568], 3
mov dword [esp + 0x1c], 0
mov eax, dword [esp + 0x1c]
mov dword [ebp + 0x198], eax
mov edi, dword [ebp + 0x19c]
mov esi, edi
mov eax, dword [ebp + 0x1a0]
mov dword [esp + 0x10], eax
shr esi, 0x10
mov eax, esi
mov bl, byte [ebp + 0x19d]
div ecx
mov ecx, 0x14
mov eax, edx
shr eax, 1
lea eax, [eax + edx*4]
xor eax, edx
xor edx, edx
add eax, 0x20
shr eax, 0x18
xor al, bl
add al, 0x10
xor byte [esp + 0x10], al
mov eax, esi
div ecx
mov ecx, 0x1e
mov eax, edx
shr eax, 1
lea eax, [eax + edx*4]
xor eax, edx
xor edx, edx
add eax, 0x20
shr eax, 0x18
xor al, bl
add al, 0x10
xor byte [esp + 0x12], al
mov eax, esi
div ecx
mov eax, esi
mov ecx, edx
shr ecx, 1
lea ecx, [ecx + edx*4]
xor ecx, edx
xor edx, edx
add ecx, 0x20
shr ecx, 0x18
xor cl, bl
add cl, 0x10
xor byte [esp + 0x11], cl
mov ecx, 0x28
div ecx
mov eax, edx
shr eax, 1
lea eax, [eax + edx*4]
xor eax, edx
add eax, 0x20
shr eax, 0x18
xor al, bl
add al, 0x10
xor byte [esp + 0x13], al
imul eax, edi, 0x3cc0
xor edx, edx
mov ecx, 0xa
add eax, dword [esp + 0x10]
mov dword [eax + 0x38], 0
mov dword [eax + 0x34], 0
mov dword [eax + 0x30], 0
mov dword [eax + 0x2c], 0
mov dword [eax + 0x24], 0
mov dword [eax + 0x20], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0xc], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax + 0x3c], 0x3f800000
mov dword [eax + 0x28], 0x3f800000
mov dword [eax + 0x14], 0x3f800000
mov dword [eax], 0x3f800000
mov dword [ebp + 0x1f8], 0
mov dword [ebp + 0x1f4], 0
mov dword [ebp + 0x1f0], 0
mov dword [ebp + 0x1ec], 0
mov dword [ebp + 0x1e4], 0
mov dword [ebp + 0x1e0], 0
mov dword [ebp + 0x1dc], 0
mov dword [ebp + 0x1d8], 0
mov dword [ebp + 0x1d0], 0
mov dword [ebp + 0x1cc], 0
mov dword [ebp + 0x1c8], 0
mov dword [ebp + 0x1c4], 0
mov dword [ebp + 0x1fc], 0x3f800000
mov dword [ebp + 0x1e8], 0x3f800000
mov dword [ebp + 0x1d4], 0x3f800000
mov dword [ebp + 0x1c0], 0x3f800000
mov edi, dword [ebp + 0x1a8]
mov esi, edi
mov eax, dword [ebp + 0x1ac]
mov dword [esp + 0x10], eax
shr esi, 0x10
mov eax, esi
mov bl, byte [ebp + 0x1a9]
div ecx
mov ecx, 0x14
mov eax, edx
shr eax, 1
lea eax, [eax + edx*4]
xor eax, edx
xor edx, edx
add eax, 0x20
shr eax, 0x18
xor al, bl
add al, 0x10
xor byte [esp + 0x10], al
mov eax, esi
div ecx
mov ecx, 0x1e
mov eax, edx
shr eax, 1
lea eax, [eax + edx*4]
xor eax, edx
xor edx, edx
add eax, 0x20
shr eax, 0x18
xor al, bl
add al, 0x10
xor byte [esp + 0x12], al
mov eax, esi
div ecx
mov eax, esi
mov ecx, edx
shr ecx, 1
lea ecx, [ecx + edx*4]
xor ecx, edx
add ecx, 0x20
shr ecx, 0x18
xor cl, bl
add cl, 0x10
xor byte [esp + 0x11], cl
xor edx, edx
mov ecx, 0x28
div ecx
mov eax, edx
shr eax, 1
lea eax, [eax + edx*4]
xor eax, edx
add eax, 0x20
shr eax, 0x18
xor al, bl
add al, 0x10
xor byte [esp + 0x13], al
imul eax, edi, 0x3cc0
add eax, dword [esp + 0x10]
mov dword [eax + 0x38], 0
mov dword [eax + 0x34], 0
mov dword [eax + 0x30], 0
mov dword [eax + 0x2c], 0
mov dword [eax + 0x24], 0
mov dword [eax + 0x20], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0xc], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax + 0x3c], 0x3f800000
mov dword [eax + 0x28], 0x3f800000
mov dword [eax + 0x14], 0x3f800000
mov dword [eax], 0x3f800000
mov dword [ebp + 0x278], 0
mov dword [ebp + 0x274], 0
mov dword [ebp + 0x270], 0
mov dword [ebp + 0x26c], 0
mov dword [ebp + 0x264], 0
mov dword [ebp + 0x260], 0
mov dword [ebp + 0x25c], 0
mov dword [ebp + 0x258], 0
mov dword [ebp + 0x250], 0
mov dword [ebp + 0x24c], 0
mov dword [ebp + 0x248], 0
mov dword [ebp + 0x244], 0
mov dword [ebp + 0x27c], 0x3f800000
mov dword [ebp + 0x268], 0x3f800000
mov dword [ebp + 0x254], 0x3f800000
mov dword [ebp + 0x240], 0x3f800000
mov dword [ebp + 0x238], 0
mov dword [ebp + 0x234], 0
mov dword [ebp + 0x230], 0
mov dword [ebp + 0x22c], 0
mov dword [ebp + 0x224], 0
mov dword [ebp + 0x220], 0
mov dword [ebp + 0x21c], 0
mov dword [ebp + 0x218], 0
mov dword [ebp + 0x210], 0
mov dword [ebp + 0x20c], 0
mov dword [ebp + 0x208], 0
mov dword [ebp + 0x204], 0
mov dword [ebp + 0x23c], 0x3f800000
mov dword [ebp + 0x228], 0x3f800000
mov dword [ebp + 0x214], 0x3f800000
mov dword [ebp + 0x200], 0x3f800000
mov dword [ebp + 0x2b8], 0
mov dword [ebp + 0x2b4], 0
mov dword [ebp + 0x2b0], 0
mov dword [ebp + 0x2ac], 0
mov dword [ebp + 0x2a4], 0
mov dword [ebp + 0x2a0], 0
mov dword [ebp + 0x29c], 0
mov dword [ebp + 0x298], 0
mov dword [ebp + 0x290], 0
mov dword [ebp + 0x28c], 0
mov dword [ebp + 0x288], 0
mov dword [ebp + 0x284], 0
mov dword [ebp + 0x2bc], 0x3f800000
mov dword [ebp + 0x2a8], 0x3f800000
mov dword [ebp + 0x294], 0x3f800000
mov dword [ebp + 0x280], 0x3f800000
mov dword [ebp + 0x2f8], 0
mov dword [ebp + 0x2f4], 0
mov dword [ebp + 0x2f0], 0
mov dword [ebp + 0x2ec], 0
mov dword [ebp + 0x2e4], 0
mov dword [ebp + 0x2e0], 0
mov dword [ebp + 0x2dc], 0
mov dword [ebp + 0x2d8], 0
mov dword [ebp + 0x2d0], 0
mov dword [ebp + 0x2cc], 0
mov dword [ebp + 0x2c8], 0
mov dword [ebp + 0x2c4], 0
mov dword [ebp + 0x2fc], 0x3f800000
mov dword [ebp + 0x2e8], 0x3f800000
mov dword [ebp + 0x2d4], 0x3f800000
mov dword [ebp + 0x2c0], 0x3f800000
mov ecx, dword [esp + 0x20]
mov dword [ebp + 0x338], 0
mov dword [ebp + 0x334], 0
mov dword [ebp + 0x330], 0
mov dword [ebp + 0x32c], 0
mov dword [ebp + 0x324], 0
mov dword [ebp + 0x320], 0
mov dword [ebp + 0x31c], 0
mov dword [ebp + 0x318], 0
mov dword [ebp + 0x310], 0
mov dword [ebp + 0x30c], 0
mov dword [ebp + 0x308], 0
mov dword [ebp + 0x304], 0
mov dword [ebp + 0x33c], 0x3f800000
mov dword [ebp + 0x328], 0x3f800000
mov dword [ebp + 0x314], 0x3f800000
mov dword [ebp + 0x300], 0x3f800000
mov dword [ebp + 0x102518], 1
mov dword [esp + 0x1c], 0
mov eax, dword [esp + 0x1c]
unpcklps xmm1, xmm1
movq qword [ebp + 0x340], xmm1
mov dword [ebp + 0x348], eax
mov eax, ebp
mov dword [ebp + 0x1025c4], 0
mov dword [ebp + 0x1025c8], 0
mov dword [ebp + 0x1025cc], 0
mov dword [ebp + 0x1025d0], 0
pop edi
pop esi
mov dword [ebp + 0x1025c0], 0x4b
mov dword [ebp + 0x1025b8], 0
mov dword [ebp + 0x1025bc], 0
mov dword [ebp + 0x1025d4], 0
mov dword [ebp + 0x1025d8], 0
mov dword [ebp + 0x1025dc], 0
mov dword [ebp + 8], 0
mov dword [ebp + 0x10259c], 1
mov dword [ebp + 0x1025ec], 0
mov dword [ebp + 0x102558], 0
mov dword [ebp + 0x102550], 0
mov dword [ebp + 0x102554], 0xffffffff
mov dword [ebp + 0x430], 0
mov dword [ebp + 0x434], 0
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x1c
ret