Function at 0x58b130
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x6cc9f6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x84
push ebx
push esi
mov esi, ecx
lea ecx, [esp + 0x44]
call fcn.0061aaa0
xor ebx, ebx
push 0x243
lea ecx, [esp + 0x6c]
mov dword [esp + 0x98], ebx
call fcn.0054f000
mov al, byte [esp + 0xb]
mov dword [esp + 0x28], ebx
mov byte [esp + 0x24], al
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
lea ecx, [esp + 0xc]
mov byte [esp + 0x94], 2
mov byte [esp + 0x18], 8
mov byte [esp + 0x19], 7
mov byte [esp + 0x1a], 0xae
mov byte [esp + 0x1b], 2
mov byte [esp + 0x1c], 0x40
mov byte [esp + 0x1d], 0x60
mov byte [esp + 0x1e], bl
mov byte [esp + 0x1f], bl
mov byte [esp + 0x20], bl
call fcn.0061d780
mov cl, byte [esp + 0xb]
mov dword [esp + 0x38], ebx
mov byte [esp + 0x34], cl
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov edx, dword [esi]
mov ecx, esi
mov byte [esp + 0x94], 4
call dword [edx + 0x18]
test ax, ax
jne 0x58b223
lea ecx, [esp + 0xc]
mov byte [esp + 0x94], 2
call fcn.0061d8c0
lea ecx, [esp + 0x68]
mov byte [esp + 0x94], bl
call fcn.0054f030
lea ecx, [esp + 0x44]
mov dword [esp + 0x94], 0xffffffff
call fcn.0061ab90
xor ax, ax
jmp 0x58b3e0
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x714340
call fcn.0061d820
mov ecx, dword [0x72baec]
call fcn.0062e250
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x71db10
call fcn.0061d820
mov ecx, dword [0x72baec]
call fcn.0062e3d0
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x713774
call fcn.0061d820
mov ecx, dword [0x72baec]
call fcn.0062e3d0
sub esp, 0x10
lea eax, [esp + 0x1c]
mov esi, esp
mov dword [esp + 0x20], esp
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.0061d790
push esi
call fcn.0061ca80
add esp, 4
mov byte [esp + 0xa8], 5
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x71379c
call fcn.0061d820
mov ecx, dword [0x72baec]
mov byte [esp + 0xa8], 4
call fcn.0062e450
mov ecx, dword [0x72baec]
call fcn.0062e830
movsx eax, ax
sub eax, ebx
je 0x58b2ed
dec eax
je 0x58b36c
jmp 0x58b223
cmp byte [0x72bd0c], bl
je 0x58b316
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x71db10
call fcn.0061d820
lea ecx, [esp + 0x10]
call fcn.0061dab0
jmp 0x58b223
cmp byte [esp + 0x9c], 2
jne 0x58b32a
mov byte [esp + 0x1c], 0x80
mov byte [esp + 0x1d], 0x80
sub esp, 0x24
lea edx, [esp + 0x3c]
mov ecx, esp
mov dword [esp + 0x38], esp
push ebx
push 1
push edx
push ecx
lea ecx, [esp + 0x9c]
call fcn.00551050
lea ecx, [esp + 0x68]
call fcn.0061ac40
lea ecx, [esp + 0x44]
call fcn.0061b070
test ax, ax
je 0x58b223
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
jmp 0x58b2fc
cmp byte [0x72bd0c], bl
jne 0x58b3a7
sub esp, 0x24
lea ecx, [esp + 0x3c]
mov eax, esp
mov dword [esp + 0x38], esp
push ebx
push 1
push ecx
push eax
lea ecx, [esp + 0x9c]
mov byte [esp + 0x50], bl
mov byte [esp + 0x51], bl
mov byte [esp + 0x52], bl
call fcn.00551050
lea ecx, [esp + 0x68]
call fcn.0061ac40
lea ecx, [esp + 0xc]
mov byte [esp + 0x94], 2
call fcn.0061d8c0
lea ecx, [esp + 0x68]
mov byte [esp + 0x94], bl
call fcn.0054f030
lea ecx, [esp + 0x44]
mov dword [esp + 0x94], 0xffffffff
call fcn.0061ab90
mov ax, 1
mov ecx, dword [esp + 0x8c]
pop esi
mov dword fs:[0], ecx
pop ebx
add esp, 0x90
ret 4