Function at 0x5787a0
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x661fc8
push eax
mov dword fs:[0], esp
sub esp, 0x1c
push ebx
push ebp
push edi
call fcn.00577810
mov edx, eax
xor ebp, ebp
cmp edx, ebp
je 0x5789de
mov eax, 0x6e0b2c
or ebx, 0xffffffff
test eax, eax
mov dword [esp + 0x10], 0x6e0b2c
je 0x5787f1
mov edi, eax
mov ecx, ebx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x14], ecx
jmp 0x5787f5
mov dword [esp + 0x14], ebp
mov ecx, 0x6e0b2c
mov dword [esp + 0x18], 0x6e0b2c
test ecx, ecx
je 0x578817
mov edi, ecx
mov ecx, ebx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x1c], ecx
jmp 0x57881b
mov dword [esp + 0x1c], ebp
lea eax, [esp + 0x10]
lea ecx, [esp + 0x18]
push eax
lea eax, [esp + 0x10]
push ecx
push eax
mov ecx, edx
call fcn.00497830
mov ecx, 0x6e0b2c
mov dword [esp + 0x30], ebp
test ecx, ecx
mov dword [esp + 0x20], 0x6e0b2c
je 0x578857
mov edi, ecx
mov ecx, ebx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x24], ecx
jmp 0x57885b
mov dword [esp + 0x24], ebp
lea edx, [esp + 0x20]
lea ecx, [esp + 0xc]
push edx
call fcn.00498cb0
test al, al
jne 0x5789d1
mov edi, 0x6e04f0
mov eax, edi
mov dword [esp + 0x20], edi
test eax, eax
je 0x57888f
mov ecx, ebx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x24], ecx
jmp 0x578893
mov dword [esp + 0x24], ebp
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x10]
call fcn.00498cb0
test al, al
je 0x5788c9
lea ecx, [esp + 0xc]
mov dword [esp + 0x30], ebx
call fcn.00498970
pop edi
pop ebp
mov eax, 1
pop ebx
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
add esp, 0x28
ret
mov edi, 0x6ed32c
mov edx, edi
mov dword [esp + 0x20], edi
test edx, edx
je 0x5788e7
mov ecx, ebx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x24], ecx
jmp 0x5788eb
mov dword [esp + 0x24], ebp
lea eax, [esp + 0x20]
lea ecx, [esp + 0xc]
push eax
call fcn.00498cb0
test al, al
je 0x578921
lea ecx, [esp + 0xc]
mov dword [esp + 0x30], ebx
call fcn.00498970
pop edi
pop ebp
mov eax, 2
pop ebx
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
add esp, 0x28
ret
mov edi, 0x6ecb24
mov ecx, edi
mov dword [esp + 0x20], edi
test ecx, ecx
je 0x57893f
mov ecx, ebx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x24], ecx
jmp 0x578943
mov dword [esp + 0x24], ebp
lea edx, [esp + 0x20]
lea ecx, [esp + 0xc]
push edx
call fcn.00498cb0
test al, al
je 0x578979
lea ecx, [esp + 0xc]
mov dword [esp + 0x30], ebx
call fcn.00498970
pop edi
pop ebp
mov eax, 3
pop ebx
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
add esp, 0x28
ret
mov edi, 0x6ecd80
mov eax, edi
mov dword [esp + 0x20], edi
test eax, eax
je 0x578997
mov ecx, ebx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x24], ecx
jmp 0x57899b
mov dword [esp + 0x24], ebp
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x10]
call fcn.00498cb0
test al, al
je 0x5789d1
lea ecx, [esp + 0xc]
mov dword [esp + 0x30], ebx
call fcn.00498970
pop edi
pop ebp
mov eax, 4
pop ebx
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
add esp, 0x28
ret
lea ecx, [esp + 0xc]
mov dword [esp + 0x30], ebx
call fcn.00498970
mov ecx, dword [esp + 0x28]
pop edi
pop ebp
xor eax, eax
pop ebx
mov dword fs:[0], ecx
add esp, 0x28
ret