Function at 0x58f00e
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x7b0
movzx eax, byte [edx + 0x84]
mov bl, byte [edx + 0x6c]
mov edi, edx
mov dword [esp + 0x24], edi
lea edx, [eax - 2]
cmp edx, 2
jb 0x58f068
cmp eax, 1
jne 0x58f088
cmp bl, 7
jne 0x58f068
xor ecx, ecx
mov edx, 4
inc ecx
call fcn.004cbacb
lea ecx, [esp + 0x1e8]
mov dword [ecx + 4], 0
mov dword [ecx], 3
mov dword [ecx + 8], eax
jmp 0x58f467
mov byte [esp], bl
movzx ebx, byte [edi + 0x40]
mov dword [esp + 0x20], ecx
test ebx, ebx
je 0x58f0ef
cmp ebx, 1
jne 0x58f0f3
movzx esi, byte [edi + 0x41]
shl esi, 8
jmp 0x58f135
xor ecx, ecx
mov edx, 3
inc ecx
call fcn.004cbacb
mov edi, eax
mov al, byte [0x803894]
mov ecx, 0x70
mov edx, 8
call fcn.004889b0
test eax, eax
je 0x58fbb8
mov dword [eax + 4], 0
mov dword [eax], 3
mov dword [eax + 8], edi
mov esi, eax
mov ecx, 4
mov edx, 4
mov al, byte [0x803894]
call fcn.004889b0
test eax, eax
je 0x58fbc4
mov dword [eax], esi
mov edi, eax
mov esi, 0x752eec
jmp 0x58f470
mov esi, ebx
jmp 0x58f135
call fcn.004ce5c9
mov esi, eax
mov eax, dword [edi + 0x44]
mov edx, dword [eax]
lea ecx, [eax + 0xc]
push dword [eax + 8]
push dword [eax + 4]
push ecx
lea eax, [esp + 0x1f4]
push eax
call dword [edx]
add esp, 0x10
lea eax, [esp + 0x1e8]
mov dword [esp + 0x14], esi
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
movsd qword [esi + 8], xmm1
movsd qword [esi], xmm0
xor esi, esi
mov ecx, dword [edi + 0x48]
lea eax, [edi + 0x54]
mov dword [esp + 0x18], esi
or esi, ebx
lea edx, [esp + 0xe4]
push dword [edi + 0x50]
push dword [edi + 0x4c]
push eax
push edx
call dword [ecx]
add esp, 0x10
mov ecx, dword [edi + 0x58]
lea eax, [edi + 0x64]
mov dword [esp + 0x1c], ebx
lea ebx, [esp + 0x1e8]
push dword [edi + 0x60]
push dword [edi + 0x5c]
push eax
push ebx
call dword [ecx]
add esp, 0x10
movzx eax, word [edi + 0x68]
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0xe4]
mov dword [edx - 8], esi
mov word [ebx + 0x10], ax
mov dword [edx - 4], ecx
mov eax, dword [ebx + 0x10]
movsd xmm0, qword [ebx]
movsd xmm1, qword [ebx + 8]
mov dword [edx + 0x20], eax
mov eax, dword [esp + 0x1c]
movsd qword [edx + 0x10], xmm0
movsd qword [edx + 0x18], xmm1
mov edi, dword [edx + 8]
test al, al
je 0x58f208
test edi, edi
je 0x58f435
cmp al, 2
jne 0x58f48d
mov ebx, ecx
call fcn.004ce5c9
mov ecx, dword [ebx]
mov esi, eax
lea eax, [ebx + 0xc]
push dword [ebx + 8]
push dword [ebx + 4]
push eax
lea eax, [esp + 0x1f4]
push eax
call dword [ecx]
add esp, 0x10
movsd xmm0, qword [esp + 0x1e8]
movsd xmm1, qword [esp + 0x1f0]
mov dword [esp + 0x14], esi
movsd qword [esi + 8], xmm1
movsd qword [esi], xmm0
xor esi, esi
jmp 0x58f497
test edi, edi
je 0x58f435
cmp byte [esp], 7
jne 0x58f435
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0xe8]
lea ecx, [esp + 0x1e8]
lea esi, [eax + 0x40]
push edi
call fcn.004c98df
add esp, 4
xor ebx, ebx
lea ecx, [esp + 0x1e8]
mov dword [esp + 0x1c], esi
cmp dword [ecx], ebx
movzx ecx, word [ecx + 8]
setne al
cmp ecx, 0x1bb
sete cl
xor edx, edx
inc edx
test al, cl
mov eax, 0x101
mov ecx, 0xb
cmove eax, edx
lea edx, [esp + 0x120]
mov dword [esp + 0x18], eax
mov edi, edx
mov eax, 0x7505d0
rep movsd dword es:[edi], dword [esi]
lea esi, [esp + 0xb0]
mov dword [esp + 0x14], 0
mov ecx, dword [esp + 0x24]
mov dword [ecx + 0x44], ebx
mov dword [ecx + 0x40], ebx
mov dword [ecx + 0x48], eax
mov dword [ecx + 0x4c], 0x7f59e0
mov dword [ecx + 0x50], ebx
mov dword [ecx + 0x54], ebx
mov dword [ecx + 0x58], eax
mov dword [ecx + 0x5c], 0x7f3994
mov dword [ecx + 0x60], 1
mov dword [ecx + 0x64], ebx
mov word [ecx + 0x68], 0xffff
mov ecx, esi
call fcn.004caa66
mov al, byte [esi]
cmp al, 3
je 0x58f2dc
mov edx, dword [esp + 0xb4]
movzx ecx, al
call fcn.004c91e0
mov eax, dword [esp + 0x18]
xor ecx, ecx
xor edx, edx
mov dword [esp + 0xb4], 0
inc ecx
mov dword [esp + 0xb0], eax
call fcn.004a2669
lea esi, [esp + 0x150]
lea edi, [esp + 0x1e8]
mov byte [eax], 0x2f
mov dword [edi], eax
mov dword [edi + 4], edx
mov ecx, esi
mov edx, edi
mov dword [edi + 8], 1
call fcn.004a294d
lea edi, [esp + 0x1e8]
mov edx, esi
mov ecx, edi
call fcn.004ca2ff
cmp dword [edi], 0
mov ebx, dword [esp + 0x20]
je 0x58fbd5
mov eax, dword [esp + 0x1f8]
lea esi, [esp + 0xc8]
movsd xmm0, qword [esp + 0x1e8]
movsd xmm1, qword [esp + 0x1f0]
mov dword [esp + 0x160], eax
mov eax, dword [esi]
movsd qword [esp + 0x158], xmm1
movsd qword [esp + 0x150], xmm0
test eax, eax
je 0x58f392
lea ecx, [esp + 0xd4]
push dword [ecx - 4]
push dword [ecx - 8]
push ecx
call dword [eax + 8]
add esp, 0xc
lea ecx, [esp + 0x150]
mov eax, dword [ecx + 0x10]
movsd xmm0, qword [ecx]
movsd xmm1, qword [ecx + 8]
mov edx, ecx
mov ecx, 0xb
mov dword [esi + 0x10], eax
lea eax, [esp + 0x1e8]
movsd qword [esi + 8], xmm1
movsd qword [esi], xmm0
lea esi, [esp + 0xb0]
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov edi, edx
mov ecx, edx
mov edx, eax
mov esi, eax
call fcn.004ca1a5
cmp byte [edi], 3
je 0x58fbf9
lea edi, [esp + 0x1e8]
lea esi, [esp + 0x150]
mov ecx, 0xb
rep movsd dword es:[edi], dword [esi]
mov edi, dword [esp + 0x1c]
mov ecx, edi
call fcn.004b91b3
mov ecx, 0xb
lea esi, [esp + 0x1e8]
lea eax, [esp + 0xf0]
lea edx, [esp + 0xa0]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [eax - 0xc]
push dword [eax - 4]
push dword [eax - 8]
push eax
push edx
call dword [ecx]
add esp, 0x10
mov esi, dword [esp + 0x18]
jmp 0x58f4bb
xor ecx, ecx
mov edx, 5
inc ecx
call fcn.004cbacb
lea ecx, [esp + 0xdc]
mov esi, eax
call fcn.004b91b3
lea ecx, [esp + 0x1e8]
mov dword [ecx + 4], 0
mov dword [ecx], 3
mov dword [ecx + 8], esi
call fcn.0058ef68
mov edi, eax
mov esi, edx
mov ebx, dword [esp + 0x24]
mov ecx, ebx
call fcn.00550091
add ebx, 0x88
mov ecx, ebx
call fcn.005500cc
jmp 0x58fb9c
mov esi, dword [esp + 0x18]
and esi, 0xff00
lea eax, [esp + 0xf0]
mov ebx, dword [esp + 0x20]
or esi, dword [esp + 0x1c]
lea edx, [esp + 0xa0]
mov ecx, dword [eax - 0xc]
push edi
push dword [eax - 8]
push eax
push edx
call dword [ecx]
add esp, 0x10
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0xdc]
mov dword [esp + 0x98], esi
mov dword [esp + 0x9c], eax
call fcn.004b91b3
movsd xmm1, qword [esp + 0xa0]
movsd xmm0, qword [esp + 0x98]
movsd qword [esp + 0x110], xmm1
movsd xmm1, qword [esp + 0xa8]
movsd qword [esp + 0x108], xmm0
movsd qword [esp + 0x118], xmm1
mov eax, dword [ebx + 0x50]
movzx ecx, byte [ebx + 0xbe]
movzx esi, word [ebx + 0xbc]
test eax, eax
mov dword [esp + 0x1c], ecx
je 0x58f53a
lock inc dword [eax]
jle 0x58fba8
mov ecx, dword [ebx + 0x54]
mov dword [esp + 0x30], ecx
jmp 0x58f53a
mov edi, dword [ebx]
mov cl, byte [ebx + 0x58]
mov dl, byte [ebx + 0x61]
mov ch, byte [ebx + 0x48]
mov dh, byte [ebx + 0x5b]
mov dword [esp + 0x68], edi
mov edi, dword [ebx + 4]
mov byte [esp + 0x18], cl
mov cl, byte [ebx + 0x59]
mov byte [esp + 0xf], dl
mov dl, byte [ebx + 0x5e]
mov byte [esp + 0x11], ch
mov ch, byte [ebx + 0x49]
mov dword [esp + 0x6c], edi
mov edi, dword [ebx + 8]
mov byte [esp + 0x14], cl
mov cl, byte [ebx + 0x5a]
mov byte [esp + 0x12], dl
mov byte [esp + 0x10], ch
mov dl, byte [ebx + 0x5f]
mov ch, byte [ebx + 0x60]
mov dword [esp + 0x70], edi
mov edi, dword [ebx + 0xc]
mov byte [esp], cl
mov cl, byte [ebx + 0x5c]
mov dword [esp + 0x74], edi
mov edi, dword [ebx + 0x38]
mov byte [esp + 0x13], cl
mov cl, byte [ebx + 0x5d]
mov dword [esp + 0x88], edi
mov edi, dword [ebx + 0x3c]
mov dword [esp + 0x8c], edi
mov edi, dword [ebx + 0x40]
mov dword [esp + 0x90], edi
mov edi, dword [ebx + 0x30]
mov dword [esp + 0x84], edi
mov edi, dword [ebx + 0x2c]
mov dword [esp + 0x7c], edi
mov edi, dword [ebx + 0x28]
mov dword [esp + 0x80], edi
mov edi, dword [ebx + 0x1c]
mov dword [esp + 0x60], edi
mov edi, dword [ebx + 0x18]
mov dword [esp + 0x64], edi
mov edi, dword [ebx + 0x20]
mov dword [esp + 0x5c], edi
mov edi, dword [ebx + 0x10]
mov dword [esp + 0x58], edi
mov edi, dword [ebx + 0x14]
mov dword [esp + 0x54], edi
mov edi, dword [ebx + 0x44]
mov dword [esp + 0x78], edi
mov edi, dword [ebx + 0x7c]
mov dword [esp + 0x94], edi
lock inc dword [edi]
jle 0x58fba8
mov edi, dword [ebx + 0x80]
lock inc dword [edi]
jle 0x58fba8
cmp dword [ebx + 0x68], 0
mov byte [esp + 0xb], ch
mov byte [esp + 0xd], cl
mov ecx, dword [ebx + 0x84]
mov byte [esp + 0xc], dl
mov byte [esp + 0xe], dh
mov dword [esp + 0x50], eax
mov dword [esp + 0x4c], ecx
je 0x58f657
xor eax, eax
inc eax
mov dword [esp + 0x28], eax
push dword [ebx + 0x6c]
call dword [sym.imp.crypt32.dll_CertDuplicateCertificateContext]
mov dword [esp + 0x2c], eax
jmp 0x58f65f
mov dword [esp + 0x28], 0
push dword [ebx + 0x70]
call dword [sym.imp.crypt32.dll_CertDuplicateStore]
mov dword [esp + 0x48], eax
mov al, byte [ebx + 0x76]
mov cl, byte [ebx + 0x78]
mov dl, byte [ebx + 0x79]
mov ch, byte [ebx + 0x74]
mov dh, byte [ebx + 0x75]
mov byte [esp + 0xa], al
mov al, byte [ebx + 0x77]
mov byte [esp + 9], al
mov eax, dword [ebx + 0xac]
lock inc dword [eax]
jle 0x58fba8
mov dword [esp + 0x40], eax
mov al, byte [ebx + 0xb0]
mov byte [esp + 5], cl
mov cl, byte [ebx + 0xb2]
mov byte [esp + 4], dl
mov dl, byte [ebx + 0xb1]
cmp byte [ebx + 0xa8], 2
mov byte [esp + 2], dh
mov byte [esp + 3], ch
mov byte [esp + 8], al
mov eax, dword [ebx + 0x90]
mov byte [esp + 6], cl
mov cl, 2
mov byte [esp + 7], dl
mov dword [esp + 0x3c], eax
mov eax, dword [ebx + 0x88]
mov dword [esp + 0x38], eax
mov eax, dword [ebx + 0x8c]
mov dword [esp + 0x34], eax
je 0x58f75e
mov ecx, dword [ebx + 0x98]
lea eax, [ebx + 0xa4]
push dword [ebx + 0xa0]
push dword [ebx + 0x9c]
push eax
lea eax, [esp + 0x1f4]
push eax
call dword [ecx]
add esp, 0x10
mov cl, byte [ebx + 0xa8]
movsd xmm0, qword [esp + 0x1e8]
movsd xmm1, qword [esp + 0x1f0]
movzx eax, word [esp + 0x1f9]
mov dl, byte [esp + 0x1fb]
movsd qword [esp + 0x158], xmm1
movsd qword [esp + 0x150], xmm0
mov word [esp + 0xb0], ax
mov byte [esp + 0xb2], dl
movzx eax, word [esp + 0xb0]
movsd xmm0, qword [esp + 0x150]
movsd xmm1, qword [esp + 0x158]
mov byte [esp + 1], cl
mov dword [esp + 0x44], edi
mov word [esp + 0xdc], ax
mov al, byte [esp + 0xb2]
movsd qword [esp + 0x1f4], xmm1
movsd qword [esp + 0x1ec], xmm0
mov byte [esp + 0xde], al
mov eax, dword [ebx + 0xb8]
test eax, eax
je 0x58f7bb
lock inc dword [eax]
jle 0x58fba8
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x1f8]
movsd xmm0, qword [esp + 0x1e8]
movsd xmm1, qword [esp + 0x1f0]
mov dword [esp + 0x130], eax
movzx eax, word [esp + 0xdc]
movsd qword [esp + 0x128], xmm1
movsd qword [esp + 0x120], xmm0
mov word [esp + 0x98], ax
mov al, byte [esp + 0xde]
mov byte [esp + 0x9a], al
lea eax, [esp + 0x150]
push 0x98
push dword [esp + 0x28]
push eax
call fcn.0064a810
add esp, 0xc
movsd xmm1, qword [esp + 0x110]
movsd xmm0, qword [esp + 0x108]
mov ecx, 0x738
mov edx, 8
movsd qword [esp + 0xb9], xmm1
movsd xmm1, qword [esp + 0x118]
movsd qword [esp + 0xb1], xmm0
movsd qword [esp + 0xc1], xmm1
mov al, byte [0x803894]
call fcn.004889b0
test eax, eax
je 0x58fbac
mov edi, eax
mov eax, dword [esp + 0x1c]
mov cl, byte [esp + 0xf]
mov ebx, 2
shl eax, 0x10
or esi, eax
xor eax, eax
test cl, cl
setne al
cmp cl, 2
cmovne ebx, eax
push 0x98
lea eax, [esp + 0x154]
push eax
push edi
call fcn.0064a810
add esp, 0xc
mov eax, dword [esp + 0x68]
mov dword [edi + 0x98], eax
mov eax, dword [esp + 0x6c]
mov dword [edi + 0x9c], eax
mov eax, dword [esp + 0x70]
mov dword [edi + 0xa0], eax
mov eax, dword [esp + 0x74]
mov dword [edi + 0xa4], eax
mov eax, dword [esp + 0x58]
mov dword [edi + 0xa8], eax
mov eax, dword [esp + 0x54]
mov dword [edi + 0xac], eax
mov eax, dword [esp + 0x60]
mov dword [edi + 0xb4], eax
mov eax, dword [esp + 0x64]
mov dword [edi + 0xb0], eax
mov eax, dword [esp + 0x5c]
mov dword [edi + 0xb8], eax
mov eax, dword [esp + 0x7c]
mov dword [edi + 0xc4], eax
mov eax, dword [esp + 0x80]
mov dword [edi + 0xc0], eax
mov eax, dword [esp + 0x84]
mov dword [edi + 0xc8], eax
mov eax, dword [esp + 0x88]
mov dword [edi + 0xd0], eax
mov eax, dword [esp + 0x8c]
mov dword [edi + 0xd4], eax
mov eax, dword [esp + 0x90]
mov dword [edi + 0xd8], eax
mov eax, dword [esp + 0x78]
mov dword [edi + 0xdc], eax
mov al, byte [esp + 0x11]
mov byte [edi + 0xe0], al
mov al, byte [esp + 0x10]
mov byte [edi + 0xe1], al
mov eax, dword [esp + 0x50]
mov dword [edi + 0xe8], eax
mov eax, dword [esp + 0x30]
mov dword [edi + 0xec], eax
mov al, byte [esp + 0x18]
mov byte [edi + 0xf0], al
mov al, byte [esp + 0x14]
mov byte [edi + 0xf1], al
mov al, byte [esp]
mov byte [edi + 0xf2], al
mov al, byte [esp + 0xe]
mov byte [edi + 0xf3], al
mov al, byte [esp + 0x13]
mov byte [edi + 0xf4], al
mov al, byte [esp + 0xd]
mov byte [edi + 0xf5], al
mov al, byte [esp + 0x12]
mov byte [edi + 0xf6], al
mov al, byte [esp + 0xc]
mov byte [edi + 0xf7], al
mov al, byte [esp + 0xb]
mov byte [edi + 0xf8], al
mov eax, dword [esp + 0x28]
mov byte [edi + 0xf9], bl
mov dword [edi + 0x100], eax
mov eax, dword [esp + 0x2c]
mov dword [edi + 0x104], eax
mov eax, dword [esp + 0x48]
mov dword [edi + 0x108], eax
mov al, byte [esp + 3]
mov byte [edi + 0x10c], al
mov al, byte [esp + 2]
mov byte [edi + 0x10d], al
mov al, byte [esp + 0xa]
mov byte [edi + 0x10e], al
mov al, byte [esp + 9]
mov byte [edi + 0x10f], al
mov al, byte [esp + 5]
mov byte [edi + 0x110], al
mov al, byte [esp + 4]
mov byte [edi + 0x111], al
mov eax, dword [esp + 0x94]
mov dword [edi + 0x114], eax
mov eax, dword [esp + 0x44]
mov dword [edi + 0x118], eax
mov eax, dword [esp + 0x4c]
mov dword [edi + 0x11c], eax
mov eax, dword [esp + 0x34]
mov dword [edi + 0x124], eax
mov eax, dword [esp + 0x38]
mov dword [edi + 0x120], eax
mov eax, dword [esp + 0x3c]
mov dword [edi + 0x128], eax
mov eax, dword [esp + 0x130]
mov dword [edi + 0x13c], eax
mov al, byte [esp + 1]
movsd xmm0, qword [esp + 0x120]
movsd xmm1, qword [esp + 0x128]
movsd qword [edi + 0x134], xmm1
movsd qword [edi + 0x12c], xmm0
mov byte [edi + 0x140], al
movzx eax, word [esp + 0x98]
mov word [edi + 0x141], ax
mov al, byte [esp + 0x9a]
mov byte [edi + 0x143], al
mov eax, dword [esp + 0x40]
mov dword [edi + 0x144], eax
mov al, byte [esp + 8]
mov byte [edi + 0x148], al
mov al, byte [esp + 7]
mov byte [edi + 0x149], al
mov al, byte [esp + 6]
mov byte [edi + 0x14a], al
mov eax, dword [esp + 0xdc]
mov dword [edi + 0x14b], eax
mov al, byte [esp + 0xe0]
mov byte [edi + 0x14f], al
mov eax, dword [esp + 0x20]
mov dword [edi + 0x150], eax
mov eax, esi
mov word [edi + 0x154], si
shr eax, 0x10
mov byte [edi + 0x156], al
movsd xmm0, qword [esp + 0xb0]
movsd xmm1, qword [esp + 0xb8]
movsd qword [edi + 0x157], xmm0
movsd qword [edi + 0x15f], xmm1
movsd xmm0, qword [esp + 0xc0]
movsd qword [edi + 0x167], xmm0
mov al, byte [esp + 0xc8]
mov byte [edi + 0x16f], al
mov eax, edi
add eax, 0x170
push 0x5c4
lea ecx, [esp + 0x1ec]
push ecx
push eax
call fcn.0064a810
add esp, 0xc
mov esi, 0x7b7cc4
mov byte [edi + 0x734], 0
mov eax, edi
mov edx, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
ud2
mov ecx, 8
mov edx, 0x738
jmp 0x58fbce
mov ecx, 8
mov edx, 0x70
jmp 0x58fbce
mov ecx, 4
mov edx, 4
call fcn.00651860
ud2
mov al, byte [esp + 0x1ec]
mov ecx, str.slash_is_a_valid_path
mov edx, 0x15
mov byte [esp + 0x150], al
push 0x752fb8
push 0x7518dc
jmp 0x58fc1b
mov al, byte [esp + 0x151]
mov ecx, str.scheme_is_valid
mov edx, 0xf
mov byte [esp + 0x1e8], al
push 0x752fd8
push 0x75188c
push esi
call fcn.006525c0
add esp, 0xc
ud2