Function at 0x5e2d0f
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x68f81c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x188
push ebx
push esi
mov esi, dword [esp + 0x1b8]
push edi
push esi
lea eax, [esp + 0x1a8]
sub esp, 0xc
lea ecx, [esp + 0x1c0]
mov edx, esp
mov dword [esp + 0x34], esp
push eax
push edx
call fcn.0046bdce
lea eax, [esp + 0xb8]
push eax
call fcn.005e2c82
mov ecx, dword [eax]
add esp, 0x14
mov dword [esp + 0xc], ecx
mov ecx, dword [eax + 4]
push esi
lea edx, [esp + 0x10]
sub esp, 0xc
mov dword [esp + 0x20], ecx
mov eax, dword [eax + 8]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
mov dword [esp + 0x28], eax
call fcn.0046bd69
sub esp, 0xc
lea ecx, [esp + 0x1c0]
mov edx, esp
mov dword [esp + 0x40], esp
push ecx
push edx
lea ecx, [esp + 0x1d4]
call fcn.0046bdce
lea eax, [esp + 0xc4]
push eax
call fcn.005e2acb
fld dword [esp + 0x1c4]
fld dword [esp + 0x1c8]
fld dword [esp + 0x1cc]
fld dword [esp + 0x2c]
fld dword [esp + 0x30]
fld dword [esp + 0x34]
fxch st(5)
fsub dword [esp + 0x2c]
mov ecx, dword [eax]
add esp, 0x20
mov dword [esp + 0x18], ecx
mov edx, dword [eax + 4]
mov dword [esp + 0x1c], edx
mov eax, dword [eax + 8]
fstp dword [esp + 0x48]
fld dword [esp + 0xc]
fxch st(4)
fsub dword [esp + 0x10]
mov dword [esp + 0x20], eax
fstp dword [esp + 0x4c]
fld dword [esp + 0x10]
fxch st(3)
fsub dword [esp + 0x14]
fstp dword [esp + 0x50]
fxch st(1)
fadd dword [esp + 0x1a4]
fxch st(1)
fadd dword [esp + 0x1a8]
fxch st(4)
fadd dword [esp + 0x1ac]
fxch st(3)
fadd dword [esp + 0x1b0]
fxch st(2)
fadd dword [esp + 0x1b4]
fxch st(1)
fstp dword [esp + 0x54]
fxch st(3)
fstp dword [esp + 0x58]
fxch st(1)
fstp dword [esp + 0x5c]
fstp dword [esp + 0x60]
fstp dword [esp + 0x64]
fld dword [esp + 0x14]
fld dword [esp + 0x1b0]
fld dword [esp + 0x1b4]
fld dword [esp + 0x1b8]
fld dword [esp + 0x1a4]
fld dword [esp + 0x1a8]
fxch st(5)
fadd dword [esp + 0x1b8]
fstp dword [esp + 0x68]
fld dword [esp + 0x1ac]
fxch st(4)
fsub dword [esp + 0xc]
fstp dword [esp + 0x6c]
fld dword [esp + 0x18]
fxch st(3)
fsub dword [esp + 0x10]
fstp dword [esp + 0x70]
fld dword [esp + 0x1c]
fxch st(2)
fsub dword [esp + 0x14]
fstp dword [esp + 0x74]
fld dword [esp + 0x20]
fxch st(1)
fsub dword [esp + 0x18]
fstp dword [esp + 0x78]
fld dword [esp + 0x18]
fxch st(5)
fsub dword [esp + 0x1c]
fstp dword [esp + 0x7c]
fld dword [esp + 0x1c]
fxch st(4)
fsub dword [esp + 0x20]
fstp dword [esp + 0x80]
fld dword [esp + 0x20]
fxch st(3)
fadd dword [esp + 0x1a4]
fstp dword [esp + 0x84]
fld dword [esp + 0x1b0]
fxch st(2)
fadd dword [esp + 0x1a8]
fstp dword [esp + 0x88]
fld dword [esp + 0x1b4]
fxch st(1)
fadd dword [esp + 0x1ac]
fstp dword [esp + 0x8c]
fld dword [esp + 0x1b8]
fxch st(5)
fadd dword [esp + 0x1b0]
fstp dword [esp + 0x90]
fxch st(3)
fadd dword [esp + 0x1b4]
fxch st(2)
fadd dword [esp + 0x1b8]
fxch st(1)
fsub dword [esp + 0x18]
fxch st(3)
fsub dword [esp + 0x1c]
fxch st(4)
fsub dword [esp + 0x20]
fxch st(2)
fstp dword [esp + 0x94]
fstp dword [esp + 0x98]
fxch st(1)
fstp dword [esp + 0x9c]
fxch st(1)
fstp dword [esp + 0xa0]
xor esi, esi
xor ecx, ecx
fstp dword [esp + 0xa4]
lea eax, [esp + 0xc0]
mov edx, dword [esp + 0x1c0]
mov dword [eax - 4], edx
mov edx, dword [esp + 0x1c4]
mov dword [eax], edx
mov edx, dword [esp + 0x1c8]
mov dword [eax + 4], edx
mov dword [eax + 8], esi
mov word [eax + 0xc], cx
inc ecx
add eax, 0x1c
cmp ecx, 8
jl 0x5e2f9a
mov edx, dword [0x773e20]
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb8], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0x3f800000
mov dword [esp + 0xec], 0x3f800000
mov dword [esp + 0xf0], 0x3f800000
mov dword [esp + 0x108], 0x3f800000
mov dword [esp + 0x10c], 0
mov dword [esp + 0x124], 0
mov dword [esp + 0x128], 0
mov dword [esp + 0x140], 0
mov dword [esp + 0x144], 0x3f800000
mov dword [esp + 0x15c], 0x3f800000
mov dword [esp + 0x160], 0x3f800000
mov dword [esp + 0x178], 0x3f800000
mov dword [esp + 0x17c], 0
lea eax, [esp + 0x2e]
mov ecx, 4
mov word [eax], dx
add eax, 8
dec ecx
jne 0x5e3086
mov ebx, 2
mov edi, 6
push 0x5c
mov word [esp + 0x2c], si
mov word [esp + 0x2e], 1
mov word [esp + 0x30], bx
mov word [esp + 0x34], si
mov word [esp + 0x36], bx
mov word [esp + 0x38], 3
mov word [esp + 0x3c], 4
mov word [esp + 0x3e], 5
mov word [esp + 0x40], di
mov word [esp + 0x44], 4
mov word [esp + 0x46], di
mov word [esp + 0x48], 7
call fcn.005c298f
add esp, 4
mov dword [esp + 0x24], eax
cmp eax, esi
mov dword [esp + 0x19c], esi
je 0x5e311d
push esi
lea ecx, [esp + 0x2c]
push esi
push ecx
lea edx, [esp + 0xc0]
lea ecx, [esp + 0x54]
push edx
push ecx
push 4
push 8
push 8
mov ecx, eax
call fcn.005cd9fc
jmp 0x5e311f
xor eax, eax
push eax
mov dword [esp + 0x1a0], 0xffffffff
call fcn.005b7a1b
add esp, 4
mov word [esp + 0x2a], bx
mov word [esp + 0x34], bx
mov ebx, 4
push 0x5c
mov word [esp + 0x2c], si
mov word [esp + 0x30], 1
mov word [esp + 0x34], si
mov word [esp + 0x36], 3
mov word [esp + 0x3c], bx
mov word [esp + 0x3e], di
mov word [esp + 0x40], 5
mov word [esp + 0x44], bx
mov word [esp + 0x46], 7
mov word [esp + 0x48], di
call fcn.005c298f
add esp, 4
mov dword [esp + 0x24], eax
cmp eax, esi
mov dword [esp + 0x19c], 1
je 0x5e31bb
push esi
lea edx, [esp + 0x2c]
push esi
push edx
lea ecx, [esp + 0xc0]
lea edx, [esp + 0x54]
push ecx
push edx
push ebx
push 8
push 8
mov ecx, eax
call fcn.005cd9fc
jmp 0x5e31bd
xor eax, eax
push eax
mov dword [esp + 0x1a0], 0xffffffff
call fcn.005b7a1b
mov ecx, dword [esp + 0x198]
add esp, 4
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add esp, 0x194
ret