Function at 0x62feea
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x729496
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18
push ebx
push ebp
push esi
mov esi, ecx
xor ebx, ebx
push edi
mov dword [esp + 0x10], esi
mov dword [esi + 0xe8], ebx
mov dword [esi + 0xec], ebx
mov dword [esi + 0xf0], ebx
lea eax, [esi + 0x1c0]
mov ecx, 0x32
mov edx, 0x3f800000
mov dword [eax - 8], ebx
mov dword [eax - 4], ebx
mov dword [eax], ebx
mov dword [eax + 0x10], ebx
mov dword [eax + 0xc], ebx
mov dword [eax + 8], ebx
mov dword [eax + 4], edx
add eax, 0x30
dec ecx
jne 0x62ff16
lea ebp, [esi + 0xb18]
mov ecx, ebp
call fcn.005b3190
lea ecx, [esi + 0xb44]
mov dword [esp + 0x30], ebx
call fcn.004b25d0
lea ecx, [esi + 0xb48]
mov byte [esp + 0x30], 1
call fcn.004b25d0
lea ecx, [esi + 0xb4c]
mov byte [esp + 0x30], 2
call fcn.0062b510
push fcn.005e5c20
push fcn.005b3190
push 8
push 8
lea eax, [esi + 0xb58]
push eax
mov byte [esp + 0x44], 3
call fcn.006fb55f
lea ecx, [esi + 0xbe0]
mov byte [esp + 0x30], 4
call fcn.00405ed0
mov dword [esi + 0xc0c], ebx
mov dword [esi + 0xc10], ebx
mov dword [esi + 0xc14], ebx
mov ecx, dword [0x7a39fc]
mov ecx, dword [ecx + 4]
push 3
call fcn.005ed700
mov ecx, eax
call fcn.0061b6f0
push 0x404
call fcn.006fa7e6
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x30], 5
je 0x62fffd
push fcn.0059ea30
push 0x59ea90
push 0x40
lea edi, [eax + 4]
push 0x10
push edi
mov dword [eax], 0x40
call fcn.006fb55f
jmp 0x62ffff
xor edi, edi
push 0x404
mov byte [esp + 0x34], 4
mov dword [esi + 0xf8], edi
call fcn.006fa7e6
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebx
mov byte [esp + 0x30], 6
je 0x630045
push 0x628600
push 0x6285b0
push 0x40
lea edi, [eax + 4]
push 0x10
push edi
mov dword [eax], 0x40
call fcn.006fb55f
mov eax, edi
jmp 0x630047
xor eax, eax
mov ecx, dword [esi + 0xbc4]
and ecx, 0xfffffffe
mov dword [esi + 0xfc], eax
mov dword [esi + 0xbc4], ecx
lea edi, [esi + 0xc]
mov ecx, 8
xor eax, eax
mov byte [esi + 0xbc0], bl
mov byte [esi + 0xbc1], bl
mov byte [esi + 0xbc8], bl
mov dword [esi + 0xb0], ebx
mov dword [esi + 0x3c], ebx
mov dword [esi + 0x100], ebx
mov dword [esi + 0x104], ebx
mov dword [esi + 0x108], ebx
mov dword [esi + 0x110], ebx
mov dword [esi + 0x10c], ebx
mov dword [esi + 0x2c], ebx
mov dword [esi + 0x34], ebx
mov dword [esi + 0x30], ebx
mov dword [esi + 0x60], ebx
mov dword [esi + 0x64], ebx
mov dword [esi + 0x68], ebx
mov dword [esi + 0x6c], ebx
mov dword [esi + 0x80], ebx
mov dword [esi + 0x4c], ebx
mov dword [esi + 0x50], ebx
mov dword [esi + 0x54], ebx
mov dword [esi + 0x58], ebx
mov dword [esi + 0x70], ebx
mov dword [esi + 0x74], ebx
mov dword [esi + 0x5c], ebx
mov dword [esi + 0x40], ebx
mov dword [esi + 0x44], ebx
mov dword [esi + 0x48], ebx
mov dword [esi + 0x78], ebx
mov dword [esi + 0x84], ebx
mov dword [esi + 0x88], ebx
mov dword [esi + 0x90], ebx
mov dword [esi + 0x94], ebx
mov dword [esi + 0x98], ebx
mov dword [esi + 0x9c], ebx
mov dword [esi + 0xa4], ebx
mov dword [esi + 0xa8], ebx
mov dword [esi + 0xac], ebx
mov dword [esi + 8], ebx
rep stosd dword es:[edi], eax
mov byte [esp + 0x30], 4
mov dword [esi + 0x118], ebx
mov dword [esi + 0x11c], ebx
mov dword [esi + 0x120], ebx
mov dword [esi + 0x124], ebx
mov dword [esi + 0x128], ebx
mov dword [esi + 0x12c], ebx
mov dword [esi + 0x130], ebx
mov dword [esi + 0x134], ebx
mov dword [esi + 0x138], ebx
mov dword [esi + 0x13c], ebx
mov dword [esi + 0x140], ebx
mov dword [esi + 0x144], ebx
mov dword [esi + 0x148], ebx
mov dword [esi + 0x14c], ebx
mov dword [esi + 0x150], ebx
mov dword [esi + 0x154], ebx
mov dword [esi + 0x158], ebx
mov dword [esi + 0x15c], ebx
mov dword [esi + 0x114], ebx
mov dword [esi + 0xb34], ebx
mov dword [esi + 0xb20], ebx
mov dword [esi + 0xb24], ebx
mov dword [esi + 0xb2c], ebx
mov dword [esi + 0xb28], ebx
mov dword [esi + 0x168], ebx
mov dword [esi + 0x160], ebx
mov dword [esi + 0x198], ebx
mov dword [esi + 0x19c], ebx
mov word [esi + 0x164], 0x2772
mov dword [esi + 0x18c], ebx
mov dword [esi + 0x190], ebx
mov dword [esi + 0x194], ebx
mov dword [esi + 0x1a0], ebx
mov edi, 0x7f000000
push 0x73d71c
mov ecx, ebp
mov dword [esi + 0x1a4], ebx
mov dword [esi + 0x1a8], ebx
mov dword [esi + 0x1ac], ebx
mov dword [esi + 0x38], ebx
mov dword [esi + 0x180], 0xffffffff
mov dword [esi + 0x184], edi
mov dword [esi + 0x170], edi
mov dword [esi + 0x174], edi
mov dword [esi + 0x178], edi
mov dword [esi + 0x17c], edi
mov dword [esi + 0xb14], ebx
call fcn.005e5140
mov dword [esi + 0xb4], ebx
mov dword [esi + 0xc0], ebx
mov dword [esi + 0xc4], ebx
mov dword [esi + 0x1b0], ebx
mov dword [esi + 0xe4], ebx
mov dword [esi + 0xf4], ebx
mov dword [esi + 0xb40], ebx
mov dword [esi + 0x16c], ebx
mov dword [esi + 0xc8], ebx
mov ebp, 1
mov dword [esi], ebp
mov dword [esi + 0xcc], ebx
mov dword [esi + 0xd0], ebx
mov dword [esi + 0xd4], ebx
mov dword [esi + 0xb38], ebx
mov dword [esi + 0xb3c], ebx
mov dword [esi + 0xb50], ebx
mov dword [esi + 0xb54], ebx
mov dword [esi + 0xb98], ebx
mov dword [esi + 0xba4], edi
xor edx, edx
mov dword [esi + 0xba8], edx
mov word [esi + 0xbac], dx
mov dword [esi + 0xd8], ebp
mov dword [esi + 0xdc], ebx
mov dword [esi + 0xe0], ebx
mov dword [esi + 0xbb0], ebx
mov dword [esi + 0xbb4], ebx
mov dword [esi + 0xbbc], ebx
mov dword [esi + 0xbb8], ebx
mov dword [esi + 0xbcc], ebx
mov dword [esi + 0xbd0], ebx
mov dword [esi + 0xbd4], ebx
push 0x73d71c
lea eax, [esp + 0x1c]
mov dword [esi + 0xbd8], ebx
push eax
lea ecx, [esi + 0xbe0]
mov dword [esi + 0xbdc], edi
call fcn.00406290
mov ecx, edi
mov dword [esi + 0xbf0], ecx
mov dword [esi + 0xbf4], ecx
mov dword [esi + 0xbf8], ecx
mov dword [esi + 0x188], edi
mov dword [esi + 0xbfc], ebx
mov dword [esi + 0xc00], ebx
mov dword [esi + 0xc04], ebx
mov dword [esi + 0xc08], ebx
mov dword [esp + 0x18], 0
mov edx, dword [esp + 0x18]
mov dword [esi + 0xc0c], edx
mov dword [esp + 0x1c], 0
mov eax, dword [esp + 0x1c]
mov dword [esi + 0xc10], eax
mov dword [esp + 0x20], 0
mov ecx, dword [esp + 0x20]
mov dword [esi + 0xc14], ecx
mov dword [esi + 0xc18], edi
mov dword [esi + 0xc1c], ebp
pop edi
mov dword [esi + 0xc20], ebx
mov eax, esi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
add esp, 0x24
ret