Function at 0x5d5d00
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x626d76
push eax
mov dword fs:[0], esp
push ebx
push ebp
push esi
mov esi, ecx
xor eax, eax
push edi
mov edi, dword [esp + 0x20]
lea ebp, [esi + 0x30]
lea ebx, [esi + 4]
mov dword [esi + 8], eax
mov dword [esi + 0xc], eax
mov dword [esi + 0x14], eax
mov dword [esi + 0x18], eax
mov dword [esi + 0x1c], eax
mov dword [esi + 0x20], eax
mov dword [esi + 0x28], eax
mov dword [esi + 0x2c], eax
mov dword [ebp], eax
mov dword [esi + 0x38], eax
mov eax, dword [esp + 0x24]
push 4
push esi
push edi
mov dword [esi], 1
mov byte [ebx], 0
mov byte [esi + 5], 0
mov dword [esi + 0x10], 0xffffffff
mov dword [esi + 0x3c], eax
call fcn.004c5a20
push 1
push ebx
push edi
call fcn.004c5a20
lea eax, [esi + 0x10]
push 4
push eax
push edi
call fcn.004c5a20
lea eax, [esi + 5]
push 1
push eax
push edi
call fcn.004c5a20
lea eax, [esi + 8]
push 4
push eax
push edi
call fcn.004c5a20
fld qword [0x67c870]
fcomp qword [0x6483c0]
add esp, 0x3c
fnstsw ax
test ah, 1
jne 0x5d5dbb
lea eax, [esi + 0x38]
push 4
push eax
push edi
call fcn.004c5a20
add esp, 0xc
lea ecx, [esp + 0x24]
push 4
push ecx
push edi
call fcn.004c5a20
mov eax, dword [esp + 0x30]
add esp, 0xc
test eax, eax
jle 0x5d5ded
push eax
push 1
call fcn.006132aa
mov edx, dword [esp + 0x2c]
mov dword [esi + 0xc], eax
push edx
push eax
push edi
call fcn.004c5a20
add esp, 0x14
lea eax, [esp + 0x24]
push 4
push eax
push edi
call fcn.004c5a20
mov eax, dword [esp + 0x30]
add esp, 0xc
test eax, eax
jle 0x5d5e1f
push eax
push 1
call fcn.006132aa
mov ecx, dword [esp + 0x2c]
mov dword [esi + 0x14], eax
push ecx
push eax
push edi
call fcn.004c5a20
add esp, 0x14
push 4
push ebp
push edi
call fcn.004c5a20
mov eax, dword [ebp]
add esp, 0xc
test eax, eax
jle 0x5d5e54
lea edx, [eax*4]
push edx
call fcn.0061317d
mov dword [esi + 0x28], eax
mov eax, dword [ebp]
shl eax, 2
push eax
call fcn.0061317d
add esp, 8
mov dword [esi + 0x2c], eax
mov eax, dword [ebp]
xor ebx, ebx
test eax, eax
mov dword [esi + 0x34], eax
jle 0x5d5ea9
push 0x74
call fcn.0061317d
add esp, 4
mov dword [esp + 0x20], eax
test eax, eax
mov dword [esp + 0x18], 0
je 0x5d5e90
mov ecx, dword [esi + 0x3c]
push ebx
call fcn.005d7770
mov ecx, dword [esp + 0x24]
push eax
push edi
call fcn.005d4880
jmp 0x5d5e92
xor eax, eax
mov ecx, dword [esi + 0x28]
inc ebx
mov dword [esp + 0x18], 0xffffffff
mov dword [ecx + ebx*4 - 4], eax
mov eax, dword [ebp]
cmp ebx, eax
jl 0x5d5e60
fld qword [0x67c870]
fcomp qword [0x6483b8]
fnstsw ax
test ah, 1
jne 0x5d5ee1
mov eax, dword [ebp]
xor ebx, ebx
test eax, eax
jle 0x5d5ef8
mov edx, dword [esi + 0x2c]
push 4
lea eax, [edx + ebx*4]
push eax
push edi
call fcn.004c5a20
mov eax, dword [ebp]
add esp, 0xc
inc ebx
cmp ebx, eax
jl 0x5d5ec5
jmp 0x5d5ef8
mov ecx, dword [ebp]
xor eax, eax
test ecx, ecx
jle 0x5d5ef8
mov ecx, dword [esi + 0x2c]
mov dword [ecx + eax*4], eax
mov ecx, dword [ebp]
inc eax
cmp eax, ecx
jl 0x5d5eea
lea ebx, [esi + 0x20]
push 4
push ebx
push edi
call fcn.004c5a20
mov eax, dword [ebx]
add esp, 0xc
test eax, eax
jle 0x5d5f2e
lea edx, [eax*4]
push edx
call fcn.0061317d
mov dword [esi + 0x18], eax
mov eax, dword [ebx]
shl eax, 2
push eax
call fcn.0061317d
add esp, 8
mov dword [esi + 0x1c], eax
mov eax, dword [ebx]
xor ebp, ebp
test eax, eax
mov dword [esi + 0x24], eax
jle 0x5d5f81
push 0x4c
call fcn.0061317d
add esp, 4
mov dword [esp + 0x20], eax
test eax, eax
mov dword [esp + 0x18], 1
je 0x5d5f69
mov ecx, dword [esi + 0x3c]
push ebp
call fcn.005d7760
mov ecx, dword [esp + 0x24]
push eax
push edi
call fcn.005d3fe0
jmp 0x5d5f6b
xor eax, eax
mov ecx, dword [esi + 0x18]
inc ebp
mov dword [esp + 0x18], 0xffffffff
mov dword [ecx + ebp*4 - 4], eax
mov eax, dword [ebx]
cmp ebp, eax
jl 0x5d5f39
fld qword [0x67c870]
fcomp qword [0x6483b8]
fnstsw ax
test ah, 1
jne 0x5d5fb7
mov eax, dword [ebx]
xor ebp, ebp
test eax, eax
jle 0x5d5fcc
mov edx, dword [esi + 0x1c]
push 4
lea eax, [edx + ebp*4]
push eax
push edi
call fcn.004c5a20
mov eax, dword [ebx]
add esp, 0xc
inc ebp
cmp ebp, eax
jl 0x5d5f9c
jmp 0x5d5fcc
mov ecx, dword [ebx]
xor eax, eax
test ecx, ecx
jle 0x5d5fcc
mov ecx, dword [esi + 0x1c]
mov dword [ecx + eax*4], eax
mov ecx, dword [ebx]
inc eax
cmp eax, ecx
jl 0x5d5fbf
mov ecx, dword [esp + 0x10]
mov eax, esi
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0xc
ret 8