Function at 0x58cd20
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x78
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x14], 0x58ed00
mov edi, ecx
mov esi, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x20], esp
mov edx, dword fs:[0]
mov dword [ebp - 0x18], edx
lea edx, [ebp - 0x18]
mov dword fs:[0], edx
mov edx, dword [ebp + 0x18]
push eax
sub esp, 0x58
mov eax, esp
mov dword [ebp - 0x70], 7
mov dword [ebp - 0x74], 0
mov word [ebp - 0x84], 0
mov dword [ebp - 0x58], 7
mov dword [ebp - 0x5c], 0
mov word [ebp - 0x6c], 0
mov dword [ebp - 0x40], 7
mov dword [ebp - 0x44], 0
mov word [ebp - 0x54], 0
mov dword [ebp - 0x28], 7
mov dword [ebp - 0x2c], 0
mov word [ebp - 0x3c], 0
mov dword [ebp - 0x10], 4
mov dword [ebp - 0x24], edi
mov dword [eax + 0x30], 0
mov dword [eax + 0x34], 7
mov word [eax + 0x20], 0
mov dword [eax], ebx
mov dword [eax + 4], ecx
mov cl, byte [ebp + 0xc]
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], esi
lea esi, [ebp - 0x3c]
mov dword [eax + 0x14], esi
lea esi, [ebp - 0x54]
mov dword [eax + 0x18], esi
lea esi, [ebp - 0x6c]
mov dword [eax + 0x1c], esi
mov dword [eax + 0x38], edx
mov byte [eax + 0x3c], 0
mov byte [eax + 0x40], 0
mov byte [eax + 0x44], cl
lea ecx, [ebp - 0x84]
mov byte [eax + 0x48], 0
mov byte [eax + 0x4c], 0
mov dword [eax + 0x50], ecx
mov ecx, dword [ebp + 0x1c]
mov dword [eax + 0x54], ecx
mov ecx, edi
mov dword [eax + 0x58], 0
call fcn.00583240
mov esp, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x28]
cmp ecx, 8
jb 0x58ce72
mov eax, dword [ebp - 0x3c]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x58ce68
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x58cf74
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
mov ecx, dword [ebp - 0x40]
cmp ecx, 8
jb 0x58cead
mov eax, dword [ebp - 0x54]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x58cea3
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x58cf80
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
mov ecx, dword [ebp - 0x58]
cmp ecx, 8
jb 0x58cee8
mov eax, dword [ebp - 0x6c]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x58cede
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x58cf8c
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
mov ecx, dword [ebp - 0x70]
cmp ecx, 8
jb 0x58cf26
mov eax, dword [ebp - 0x84]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x58cf1c
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x58cf98
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
mov eax, dword [ebp - 0x24]
mov dword [eax], vtable.IPPHTMLControl.0
mov dword [eax + 0x140], 0
mov dword [eax + 0x144], 0
mov dword [eax + 0x15c], 7
mov dword [eax + 0x158], 0
mov word [eax + 0x148], 0
mov ecx, dword [ebp - 0x18]
mov dword fs:[0], ecx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 0x18
mov dword [ebp - 0x10], 0
call fcn.006207e0
mov dword [ebp - 0x10], 1
call fcn.006207e0
mov dword [ebp - 0x10], 2
call fcn.006207e0
mov dword [ebp - 0x10], 3
call fcn.006207e0
nop word cs:[eax + eax]
nop
push ebp
sub esp, 0x5c
add ebp, 0xc
call fcn.0061de80
nop dword [eax]
push ebp
sub esp, 0x5c
add ebp, 0xc
call fcn.0061de80
nop dword [eax]
push ebp
sub esp, 0x5c
add ebp, 0xc
call fcn.0061de80
nop dword [eax]
push ebp
sub esp, 0x5c
add ebp, 0xc
call fcn.0061de80
nop dword [eax]
push ebp
sub esp, 0x5c
add ebp, 0xc
mov ecx, dword [ebp - 0x28]
cmp ecx, 8
jb 0x58d032
mov eax, dword [ebp - 0x3c]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x58d028
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x58d0e3
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
mov ecx, dword [ebp - 0x40]
cmp ecx, 8
jb 0x58d06d
mov eax, dword [ebp - 0x54]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x58d063
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x58d0e3
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
mov ecx, dword [ebp - 0x58]
cmp ecx, 8
jb 0x58d0a4
mov eax, dword [ebp - 0x6c]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x58d09a
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x58d0e3
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
mov ecx, dword [ebp - 0x70]
cmp ecx, 8
jb 0x58d0de
mov eax, dword [ebp - 0x84]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x58d0d4
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x58d0e3
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
add esp, 0x5c
pop ebp
ret
call fcn.006207e0
int3