Function at 0x57f390
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x61f4a6
push eax
mov eax, 0x1908
mov dword fs:[0], esp
call fcn.00605010
push ebx
push esi
push edi
mov edi, edx
mov esi, ecx
mov ecx, edi
sub ecx, esi
mov eax, 0xa4402911
imul ecx
add edx, ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp edx, 0x10
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x18], esi
jg 0x57f418
cmp esi, edi
mov cx, word [ebp + 8]
mov word [ebp + 8], cx
je 0x57f62e
lea ebx, [esi + 0xc78]
cmp ebx, edi
je 0x57f62e
push ebx
lea ecx, [ebp - 0xc9c]
call fcn.0057f790
push esi
lea edx, [ebp - 0xc9c]
push edx
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0
call fcn.0057f650
test al, al
jne 0x57f3b8
mov eax, dword [ebp + 8]
push eax
sub esp, 0xc78
lea edx, [ebp - 0xc9c]
mov ecx, esp
mov dword [ebp - 0x18], esp
push edx
call fcn.0057f790
mov ecx, ebx
call fcn.00580e90
jmp 0x57f3e5
cmp esi, ebx
mov edi, ebx
je 0x57f3d4
sub edi, 0xc78
push edi
lea ecx, [edi + 0xc78]
call fcn.00567c70
cmp edi, esi
jne 0x57f3be
lea eax, [ebp - 0xc9c]
push eax
mov ecx, esi
call fcn.00567c70
mov edi, dword [ebp - 0x14]
lea ecx, [ebp - 0xc9c]
mov dword [ebp - 4], 0xffffffff
call fcn.00567ad0
add ebx, 0xc78
cmp ebx, edi
jne 0x57f36d
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
cmp edx, 0x10
mov ebx, edi
jle 0x57f540
mov eax, dword [ebp + 8]
push eax
sub esp, 0xc78
mov dword [ebp - 0x20], esp
mov edi, esp
push eax
sub esp, 0xc78
lea edx, [ebx - 0xc78]
mov ecx, esp
mov dword [ebp - 0x20], esp
push edx
call fcn.0057f790
mov ecx, ebx
sub ecx, esi
mov eax, 0xa4402911
imul ecx
mov eax, edx
add eax, ecx
sar eax, 0xb
mov ecx, eax
shr ecx, 0x1f
add eax, ecx
cdq
sub eax, edx
sar eax, 1
mov edx, eax
shl edx, 5
add edx, eax
lea eax, [eax + edx*4]
sub esp, 0xc78
lea eax, [eax + eax*2]
lea edx, [esi + eax*8]
mov ecx, esp
mov dword [ebp - 0x24], esp
push edx
mov dword [ebp - 4], 1
call fcn.0057f790
sub esp, 0xc78
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
mov byte [ebp - 4], 2
call fcn.0057f790
mov ecx, edi
mov dword [ebp - 4], 0xffffffff
call fcn.00582730
mov edx, ebx
mov ecx, esi
call fcn.00583200
mov dword [ebp - 0x10], eax
mov edi, ebx
sub edi, eax
mov eax, 0xa4402911
imul edi
mov ecx, edx
add ecx, edi
mov edi, dword [ebp - 0x10]
sar ecx, 0xb
mov eax, ecx
shr eax, 0x1f
add ecx, eax
sub edi, esi
mov eax, 0xa4402911
imul edi
add edx, edi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp ecx, edx
push 0
jg 0x57f508
mov ecx, dword [ebp + 8]
mov edx, ebx
mov ebx, dword [ebp - 0x10]
push ecx
mov ecx, ebx
call fcn.00580d30
jmp 0x57f51a
mov edx, dword [ebp + 8]
mov edi, dword [ebp - 0x10]
push edx
mov edx, edi
mov ecx, esi
call fcn.00580d30
mov esi, edi
mov ecx, ebx
sub ecx, esi
mov eax, 0xa4402911
imul ecx
add edx, ecx
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp edx, 0x10
jg 0x57f423
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x14]
mov cx, word [ebp + 8]
lea eax, [esi + 0xc780]
cmp esi, eax
mov word [ebp - 0x10], cx
je 0x57f602
lea ebx, [esi + 0xc78]
cmp ebx, eax
je 0x57f602
push ebx
lea ecx, [ebp - 0x1914]
call fcn.0057f790
push esi
lea edx, [ebp - 0x1914]
push edx
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], 3
call fcn.0057f650
test al, al
jne 0x57f5af
mov eax, dword [ebp - 0x10]
push eax
sub esp, 0xc78
lea edx, [ebp - 0x1914]
mov ecx, esp
mov dword [ebp - 0x1c], esp
push edx
call fcn.0057f790
mov ecx, ebx
call fcn.00580e90
jmp 0x57f5dc
cmp esi, ebx
mov edi, ebx
je 0x57f5cb
sub edi, 0xc78
push edi
lea ecx, [edi + 0xc78]
call fcn.00567c70
cmp edi, esi
jne 0x57f5b5
lea eax, [ebp - 0x1914]
push eax
mov ecx, esi
call fcn.00567c70
mov edi, dword [ebp - 0x14]
lea ecx, [ebp - 0x1914]
mov dword [ebp - 4], 0xffffffff
call fcn.00567ad0
add ebx, 0xc78
lea eax, [esi + 0xc780]
cmp ebx, eax
jne 0x57f564
mov esi, eax
cmp esi, edi
je 0x57f62e
mov ecx, dword [ebp + 8]
push ecx
sub esp, 0xc78
mov ecx, esp
mov dword [ebp - 0x1c], esp
push esi
call fcn.0057f790
mov ecx, esi
call fcn.00580e90
add esi, 0xc78
cmp esi, edi
jne 0x57f608
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 8