Function at 0x5aca80
Capabilities:
Access peb ldr_data
Get kernel32 base address
Get process heap force flags
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x721f8f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18
push ebx
push ebp
push esi
mov esi, ecx
xor ebx, ebx
push edi
mov dword [esp + 0x14], esi
mov dword [esi + 4], ebx
mov dword [esi + 8], ebx
mov dword [esi], ebx
mov dword [esp + 0x30], ebx
mov dword [esi + 0x10], ebx
mov dword [esi + 0x14], ebx
mov dword [esi + 0xc], ebx
mov dword [esi + 0x1c], ebx
mov dword [esi + 0x20], ebx
mov dword [esi + 0x18], ebx
lea edi, [esi + 0x28]
mov dword [edi + 4], ebx
mov dword [edi + 8], ebx
mov dword [edi], ebx
lea ecx, [esi + 0x34]
mov byte [esp + 0x30], 3
call fcn.005e9e10
lea ecx, [esi + 0x3c]
mov byte [esp + 0x30], 4
call fcn.005e9e10
lea ebp, [esi + 0x44]
mov ecx, ebp
mov byte [esp + 0x30], 5
call fcn.00405ed0
lea ecx, [esi + 0x58]
call fcn.005e9e10
push 0x5a76e0
push 0x5ac9f0
push 2
push 0x28
lea eax, [esi + 0x8c]
push eax
mov byte [esp + 0x44], 6
call fcn.006fb55f
lea ecx, [esi + 0xe0]
mov byte [esp + 0x30], 7
call fcn.005b3190
lea ecx, [esi + 0x16e]
mov byte [esp + 0x30], 8
call fcn.00405ed0
lea ecx, [esi + 0x1a4]
call fcn.005b3190
push 0x30
mov byte [esp + 0x34], 9
call fcn.006fa7e6
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov byte [esp + 0x30], 0xa
je 0x5acb71
mov ecx, eax
call fcn.005cb1b0
mov dword [esp + 0x10], eax
jmp 0x5acb75
mov dword [esp + 0x10], ebx
mov eax, dword [edi + 8]
cmp dword [edi + 4], eax
mov byte [esp + 0x30], 9
jne 0x5acb97
cmp eax, ebx
je 0x5acb8a
add eax, eax
jmp 0x5acb8f
mov eax, 0x10
push eax
mov ecx, edi
call fcn.005e03c0
mov ecx, dword [edi + 4]
mov edx, dword [edi]
mov eax, dword [esp + 0x10]
mov dword [edx + ecx*4], eax
inc dword [edi + 4]
push 0x73d71c
lea ecx, [esp + 0x1c]
push ecx
mov ecx, ebp
mov byte [esi + 0x89], 1
mov byte [esi + 0x88], bl
call fcn.00406290
mov eax, 1
mov dword [esi + 0x54], eax
mov dword [esi + 0x6c], eax
mov dword [esi + 0x70], ebx
mov dword [esi + 0x74], ebx
mov byte [esi + 0x64], bl
mov dword [esi + 0x60], ebx
mov dx, word [0x74bf14]
push 0x73d71c
lea ecx, [esi + 0xe0]
mov word [esi + 0xdc], dx
call fcn.005e5140
cmp byte [esi + 0x89], bl
mov byte [esi + 0xe8], bl
jbe 0x5acc1c
mov byte [esi + 0xa8], 1
cmp byte [esi + 0x89], bl
jbe 0x5acc1c
mov byte [esi + 0xa7], bl
mov byte [esi + 0x89], 2
mov byte [edi + 0xa8], bl
cmp byte [esi + 0x89], 1
jbe 0x5acc39
mov byte [edi + 0xa7], 0xff
mov eax, dword [esp + 0x38]
push 0x48
mov byte [esi + 0x89], 1
mov word [esi + 0x164], bx
mov byte [esi + 0x16c], bl
mov byte [esi + 0x16d], bl
mov byte [esi + 0x114], bl
mov dword [esi + 0x68], ebx
mov word [esi + 0x17e], bx
mov dword [esi + 0x24], eax
mov dword [esi + 0x108], ebx
mov dword [esi + 0x10c], 0x14
mov dword [esi + 0x110], ebx
mov byte [esi + 0xf8], bl
mov byte [esi + 0xf9], bl
mov byte [esi + 0xfc], bl
mov byte [esi + 0xfd], bl
mov byte [esi + 0x100], bl
mov byte [esi + 0x101], bl
mov byte [esi + 0xfa], bl
mov byte [esi + 0xfb], bl
mov byte [esi + 0xfe], bl
mov byte [esi + 0xff], bl
mov byte [esi + 0xf5], bl
mov byte [esi + 0xf6], bl
mov byte [esi + 0xf7], bl
mov byte [esi + 0x103], bl
mov word [esi + 0x12e], bx
mov word [esi + 0x130], bx
mov word [esi + 0x132], bx
mov word [esi + 0x134], bx
mov word [esi + 0x136], bx
mov word [esi + 0x138], bx
mov word [esi + 0x12c], bx
mov word [esi + 0x13c], bx
mov word [esi + 0x13e], bx
mov word [esi + 0x140], bx
mov word [esi + 0x144], bx
mov word [esi + 0x142], bx
mov word [esi + 0x146], bx
mov word [esi + 0x148], bx
mov word [esi + 0x14a], bx
mov word [esi + 0x14c], bx
mov word [esi + 0x14e], bx
mov word [esi + 0x150], bx
mov word [esi + 0x152], bx
mov word [esi + 0x154], bx
mov word [esi + 0x156], bx
mov word [esi + 0x158], bx
mov word [esi + 0x15a], bx
mov word [esi + 0x15c], bx
mov word [esi + 0x15e], bx
mov byte [esi + 0x102], bl
call fcn.006fa7e6
add esp, 4
mov dword [esp + 0x38], eax
cmp eax, ebx
mov byte [esp + 0x30], 0xb
je 0x5acda9
mov ecx, eax
call fcn.00552280
jmp 0x5acdab
xor eax, eax
mov dword [esi + 0x118], eax
mov word [esi + 0x13a], bx
mov dword [esi + 0x194], ebx
mov dword [esi + 0x19c], ebx
mov dword [esi + 0x198], ebx
mov ecx, dword [0x7a3a28]
movzx edx, byte [ecx + 0xab]
push edx
mov byte [esp + 0x34], 9
call fcn.006fa7e6
mov edi, eax
mov dword [esi + 0x168], edi
mov eax, dword [0x7a3a28]
movzx ecx, byte [eax + 0xab]
mov edx, ecx
shr ecx, 2
xor eax, eax
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
add esp, 4
push 0x73d71c
lea eax, [esp + 0x1c]
push eax
lea ecx, [esi + 0x16e]
mov byte [esi + 0x11c], bl
mov byte [esi + 0x11e], bl
mov byte [esi + 0x11d], bl
mov byte [esi + 0x11f], bl
mov byte [esi + 0x120], bl
mov byte [esi + 0xe9], bl
mov byte [esi + 0xea], bl
mov byte [esi + 0xeb], bl
mov byte [esi + 0xec], bl
mov byte [esi + 0xed], bl
mov byte [esi + 0xee], bl
mov byte [esi + 0xef], bl
mov byte [esi + 0xf0], bl
mov byte [esi + 0xf1], bl
mov byte [esi + 0xf2], bl
mov byte [esi + 0xf3], bl
mov byte [esi + 0xf4], bl
mov byte [esi + 0x1a0], bl
mov byte [esi + 0x1a1], bl
mov byte [esi + 0x1a2], bl
call fcn.00406290
mov byte [esi + 0x182], bl
mov byte [esi + 0x183], bl
mov byte [esi + 0x184], bl
mov byte [esi + 0x185], bl
mov word [esi + 0x186], bx
mov byte [esi + 0x188], bl
mov byte [esi + 0x189], bl
mov dword [esi + 0x18c], ebx
mov byte [esi + 0x18a], 0xff
mov byte [esi + 0x190], bl
mov byte [esi + 0x191], bl
mov dword [esi + 0x78], 0xffffffff
push 0xc
mov dword [esi + 0x84], ebx
call fcn.006fa7e6
add esp, 4
cmp eax, ebx
je 0x5aceff
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
mov dword [eax], ebx
jmp 0x5acf01
xor eax, eax
mov ecx, dword [esp + 0x28]
mov dword [esi + 0x128], eax
mov word [esi + 0x122], bx
mov word [esi + 0x124], bx
mov word [esi + 0x126], bx
mov dword [esi + 0x1ac], ebx
pop edi
mov dword [esi + 0x1b0], ebx
mov eax, esi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x24
ret 4