Function at 0x5f4cf0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x659e38
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xd0
push esi
mov esi, ecx
mov eax, dword [esi + 8]
mov ecx, dword [esi + 4]
mov dword [esp + 0x30], eax
mov eax, dword [esi + 0xc]
push edi
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0xe8]
xor edi, edi
cmp eax, edi
mov dword [esp + 0x30], ecx
je 0x5f4d4a
mov edx, dword [eax]
mov dword [esp + 0x3c], edx
mov edx, dword [eax + 4]
mov dword [esp + 0x40], edx
mov edx, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
mov dword [esp + 0x44], edx
jmp 0x5f4d5b
mov eax, 0x10000
mov dword [esp + 0x3c], eax
mov dword [esp + 0x44], edi
mov dword [esp + 0x40], edi
mov dword [esp + 0x48], eax
mov eax, dword [esi + 0x34]
push ebx
mov ebx, dword [esi + 0x2c]
push ebp
mov ebp, eax
shr ebp, 0xe
shr eax, 4
and ebp, 3
test al, 1
je 0x5f4dab
push 2
push 0x6854ec
push 0x6854e4
push ecx
call fcn.005f50f0
mov ecx, eax
mov eax, dword [esi + 4]
imul ecx
add esp, 0x10
mov ecx, 0x10
call fcn.00487dc0
cmp ebp, edi
jne 0x5f4da9
mov ebp, 2
mov ebx, eax
jmp 0x5f4daf
add ebx, eax
cmp ebp, edi
je 0x5f4dd7
cmp ebx, edi
jle 0x5f4dd7
mov eax, dword [esi + 0x30]
mov ecx, dword [esi + 0x34]
cmp ebp, 2
mov dword [esp + 0x58], eax
sete al
shr ecx, 0xc
and cl, 3
mov dword [esp + 0x54], ebx
mov byte [esp + 0x5d], al
mov byte [esp + 0x5f], cl
jmp 0x5f4de9
mov dword [esp + 0x54], edi
mov dword [esp + 0x58], edi
mov byte [esp + 0x5d], 0
mov byte [esp + 0x5f], 0
push esi
call fcn.005f5180
push esi
mov byte [esp + 0x64], al
call fcn.005f5160
mov ebx, dword [esi + 0x10]
mov edx, dword [esi + 0x1c]
mov byte [esp + 0x66], al
mov eax, dword [esi]
mov esi, dword [esi + 0x24]
push edi
push eax
mov dword [esp + 0x38], 2
mov dword [esp + 0x74], eax
mov dword [esp + 0x44], ebx
mov dword [esp + 0x40], edi
mov dword [esp + 0x20], edx
mov dword [esp + 0x3c], edi
mov dword [esp + 0x34], esi
mov dword [esp + 0x30], edi
call fcn.005fbf30
add esp, 0x10
cmp ebx, edi
mov dword [esp + 0x60], eax
lea ebp, [eax + 0x28]
je 0x5f4e84
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 4]
test eax, eax
je 0x5f4e80
mov edx, dword [ebx]
lea eax, [esp + 0x14]
push eax
mov ecx, ebx
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], edi
call dword [edx + 8]
mov eax, dword [esp + 0x18]
sub eax, dword [esp + 0x14]
mov dword [esp + 0x30], eax
lea ebp, [eax + ebp + 4]
mov ebx, 3
mov byte [esp + 0x5e], 1
jmp 0x5f4e88
mov dword [esp + 0x34], edi
mov ebx, dword [esp + 0x28]
mov ecx, dword [esp + 0x10]
cmp ecx, edi
je 0x5f4ecf
mov edx, dword [ecx]
call dword [edx + 4]
test eax, eax
je 0x5f4ecb
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx]
lea edx, [esp + 0x14]
push edx
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], edi
call dword [eax + 8]
mov eax, dword [esp + 0x18]
sub eax, dword [esp + 0x14]
mov dword [esp + 0x2c], eax
lea ebp, [eax + ebp + 4]
inc ebx
mov byte [esp + 0x5e], 1
jmp 0x5f4ecf
mov dword [esp + 0x10], edi
cmp esi, edi
je 0x5f4f12
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
test eax, eax
je 0x5f4f0e
mov edx, dword [esi]
lea eax, [esp + 0x68]
push eax
mov ecx, esi
mov dword [esp + 0x6c], edi
mov dword [esp + 0x70], edi
mov dword [esp + 0x74], edi
call dword [edx + 8]
mov eax, dword [esp + 0x6c]
sub eax, dword [esp + 0x68]
mov dword [esp + 0x20], eax
lea ebp, [eax + ebp + 4]
inc ebx
mov byte [esp + 0x5e], 1
jmp 0x5f4f12
mov dword [esp + 0x24], edi
lea ebp, [ebp + ebx*8 + 0xc]
cmp ebp, 0x68
ja 0x5f4f21
lea ebx, [esp + 0x78]
jmp 0x5f4f2c
push ebp
call fcn.005f9450
add esp, 4
mov ebx, eax
mov dword [esp + 0x74], ebx
mov ebp, ebx
mov dword [ebx + 4], 0xc
mov eax, dword [ebx + 4]
add ebx, 4
mov dword [ebp + 8], edi
mov dword [eax + ebp], 0x73726563
mov dword [eax + ebp + 4], 0x28
add eax, ebp
mov dword [esp + 0xe8], edi
lea edi, [eax + 8]
mov ecx, 0xa
lea esi, [esp + 0x38]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
mov edi, dword [ebx]
mov ecx, dword [esp + 0x60]
inc eax
mov dword [ebp + 8], eax
add edi, 0x30
mov dword [ebx], edi
mov eax, edi
mov dword [eax + ebp + 4], ecx
mov dword [eax + ebp], 0x74706663
mov edx, dword [ebx]
mov esi, dword [ebp + 8]
add ecx, 8
add edx, ecx
lea ecx, [eax + ebp + 8]
mov dword [ebx], edx
mov edx, dword [esp + 0x64]
push ecx
inc esi
push edx
mov dword [ebp + 8], esi
call fcn.005fbf30
mov eax, dword [esp + 0x3c]
add esp, 8
test eax, eax
je 0x5f4fc5
push eax
mov eax, dword [esp + 0x34]
push eax
push 0x70746865
push ebp
call fcn.005f5070
add esp, 0x10
mov eax, dword [esp + 0x10]
test eax, eax
je 0x5f4fe1
mov ecx, dword [esp + 0x2c]
push eax
push ecx
push 0x6d736b66
push ebp
call fcn.005f5070
add esp, 0x10
mov eax, dword [esp + 0x24]
test eax, eax
je 0x5f4ffd
mov edx, dword [esp + 0x20]
push eax
push edx
push 0x72617374
push ebp
call fcn.005f5070
add esp, 0x10
mov ecx, ebx
mov ebx, dword [ebx]
add ebx, ebp
xor eax, eax
mov edi, dword [ecx]
mov edx, eax
shr edx, 0x1f
add eax, eax
or edx, eax
add edx, edi
add ecx, 4
cmp ecx, ebx
mov eax, edx
jb 0x5f5005
push ebp
mov dword [ebp], eax
call fcn.005fb360
add esp, 4
mov esi, eax
mov eax, dword [esp + 0x74]
lea ecx, [esp + 0x78]
cmp eax, ecx
pop ebp
mov dword [esp + 0xe4], 0xffffffff
pop ebx
je 0x5f504b
push eax
call fcn.005f9490
add esp, 4
mov ecx, dword [esp + 0xd8]
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
add esp, 0xdc
ret 4