Function at 0x579af0
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x666ee8
push eax
mov dword fs:[0], esp
sub esp, 0x1c
push ebx
push ebp
push edi
call fcn.00578b60
mov edx, eax
xor ebp, ebp
cmp edx, ebp
je 0x579d2e
mov eax, 0x6e5b2c
or ebx, 0xffffffff
test eax, eax
mov dword [esp + 0x10], 0x6e5b2c
je 0x579b41
mov edi, eax
mov ecx, ebx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x14], ecx
jmp 0x579b45
mov dword [esp + 0x14], ebp
mov ecx, 0x6e5b2c
mov dword [esp + 0x18], 0x6e5b2c
test ecx, ecx
je 0x579b67
mov edi, ecx
mov ecx, ebx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x1c], ecx
jmp 0x579b6b
mov dword [esp + 0x1c], ebp
lea eax, [esp + 0x10]
lea ecx, [esp + 0x18]
push eax
lea eax, [esp + 0x10]
push ecx
push eax
mov ecx, edx
call fcn.00498950
mov ecx, 0x6e5b2c
mov dword [esp + 0x30], ebp
test ecx, ecx
mov dword [esp + 0x20], 0x6e5b2c
je 0x579ba7
mov edi, ecx
mov ecx, ebx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x24], ecx
jmp 0x579bab
mov dword [esp + 0x24], ebp
lea edx, [esp + 0x20]
lea ecx, [esp + 0xc]
push edx
call fcn.00499da0
test al, al
jne 0x579d21
mov edi, 0x6e54f0
mov eax, edi
mov dword [esp + 0x20], edi
test eax, eax
je 0x579bdf
mov ecx, ebx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x24], ecx
jmp 0x579be3
mov dword [esp + 0x24], ebp
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x10]
call fcn.00499da0
test al, al
je 0x579c19
lea ecx, [esp + 0xc]
mov dword [esp + 0x30], ebx
call fcn.00499a60
pop edi
pop ebp
mov eax, 1
pop ebx
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
add esp, 0x28
ret
mov edi, 0x6f23fc
mov edx, edi
mov dword [esp + 0x20], edi
test edx, edx
je 0x579c37
mov ecx, ebx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x24], ecx
jmp 0x579c3b
mov dword [esp + 0x24], ebp
lea eax, [esp + 0x20]
lea ecx, [esp + 0xc]
push eax
call fcn.00499da0
test al, al
je 0x579c71
lea ecx, [esp + 0xc]
mov dword [esp + 0x30], ebx
call fcn.00499a60
pop edi
pop ebp
mov eax, 2
pop ebx
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
add esp, 0x28
ret
mov edi, 0x6f1b28
mov ecx, edi
mov dword [esp + 0x20], edi
test ecx, ecx
je 0x579c8f
mov ecx, ebx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x24], ecx
jmp 0x579c93
mov dword [esp + 0x24], ebp
lea edx, [esp + 0x20]
lea ecx, [esp + 0xc]
push edx
call fcn.00499da0
test al, al
je 0x579cc9
lea ecx, [esp + 0xc]
mov dword [esp + 0x30], ebx
call fcn.00499a60
pop edi
pop ebp
mov eax, 3
pop ebx
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
add esp, 0x28
ret
mov edi, 0x6f1d84
mov eax, edi
mov dword [esp + 0x20], edi
test eax, eax
je 0x579ce7
mov ecx, ebx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x24], ecx
jmp 0x579ceb
mov dword [esp + 0x24], ebp
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x10]
call fcn.00499da0
test al, al
je 0x579d21
lea ecx, [esp + 0xc]
mov dword [esp + 0x30], ebx
call fcn.00499a60
pop edi
pop ebp
mov eax, 4
pop ebx
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
add esp, 0x28
ret
lea ecx, [esp + 0xc]
mov dword [esp + 0x30], ebx
call fcn.00499a60
mov ecx, dword [esp + 0x28]
pop edi
pop ebp
xor eax, eax
pop ebx
mov dword fs:[0], ecx
add esp, 0x28
ret