Function at 0x57dd90
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x6bd166
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x84
push ebx
push esi
mov esi, ecx
lea ecx, [esp + 0x44]
call fcn.0060d180
xor ebx, ebx
push 0x243
lea ecx, [esp + 0x6c]
mov dword [esp + 0x98], ebx
call fcn.00541680
mov al, byte [esp + 0xb]
mov dword [esp + 0x28], ebx
mov byte [esp + 0x24], al
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
lea ecx, [esp + 0xc]
mov byte [esp + 0x94], 2
mov byte [esp + 0x18], 8
mov byte [esp + 0x19], 7
mov byte [esp + 0x1a], 0xae
mov byte [esp + 0x1b], 2
mov byte [esp + 0x1c], 0x40
mov byte [esp + 0x1d], 0x60
mov byte [esp + 0x1e], bl
mov byte [esp + 0x1f], bl
mov byte [esp + 0x20], bl
call fcn.0060fe70
mov cl, byte [esp + 0xb]
mov dword [esp + 0x38], ebx
mov byte [esp + 0x34], cl
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov edx, dword [esi]
mov ecx, esi
mov byte [esp + 0x94], 4
call dword [edx + 0x18]
test ax, ax
jne 0x57de83
lea ecx, [esp + 0xc]
mov byte [esp + 0x94], 2
call fcn.0060ffb0
lea ecx, [esp + 0x68]
mov byte [esp + 0x94], bl
call fcn.005416b0
lea ecx, [esp + 0x44]
mov dword [esp + 0x94], 0xffffffff
call fcn.0060d280
xor ax, ax
jmp 0x57e040
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x704294
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.006206f0
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x70d99c
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x703774
call fcn.0060ff10
mov ecx, dword [0x71b93c]
call fcn.00620870
sub esp, 0x10
lea eax, [esp + 0x1c]
mov esi, esp
mov dword [esp + 0x20], esp
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.0060fe80
push esi
call fcn.0060f170
add esp, 4
mov byte [esp + 0xa8], 5
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x70379c
call fcn.0060ff10
mov ecx, dword [0x71b93c]
mov byte [esp + 0xa8], 4
call fcn.006208f0
mov ecx, dword [0x71b93c]
call fcn.00620cd0
movsx eax, ax
sub eax, ebx
je 0x57df4d
dec eax
je 0x57dfcc
jmp 0x57de83
cmp byte [0x71bb5c], bl
je 0x57df76
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x70d99c
call fcn.0060ff10
lea ecx, [esp + 0x10]
call fcn.006101a0
jmp 0x57de83
cmp byte [esp + 0x9c], 2
jne 0x57df8a
mov byte [esp + 0x1c], 0x80
mov byte [esp + 0x1d], 0x80
sub esp, 0x24
lea edx, [esp + 0x3c]
mov ecx, esp
mov dword [esp + 0x38], esp
push ebx
push 1
push edx
push ecx
lea ecx, [esp + 0x9c]
call fcn.005436d0
lea ecx, [esp + 0x68]
call fcn.0060d330
lea ecx, [esp + 0x44]
call fcn.0060d760
test ax, ax
je 0x57de83
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x57df5c
cmp byte [0x71bb5c], bl
jne 0x57e007
sub esp, 0x24
lea ecx, [esp + 0x3c]
mov eax, esp
mov dword [esp + 0x38], esp
push ebx
push 1
push ecx
push eax
lea ecx, [esp + 0x9c]
mov byte [esp + 0x50], bl
mov byte [esp + 0x51], bl
mov byte [esp + 0x52], bl
call fcn.005436d0
lea ecx, [esp + 0x68]
call fcn.0060d330
lea ecx, [esp + 0xc]
mov byte [esp + 0x94], 2
call fcn.0060ffb0
lea ecx, [esp + 0x68]
mov byte [esp + 0x94], bl
call fcn.005416b0
lea ecx, [esp + 0x44]
mov dword [esp + 0x94], 0xffffffff
call fcn.0060d280
mov ax, 1
mov ecx, dword [esp + 0x8c]
pop esi
mov dword fs:[0], ecx
pop ebx
add esp, 0x90
ret 4