Function at 0x5fd99110
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, eax
call fcn.5fd83e2e
jmp 0x5fd99503
mov edi, dword [esp + 0x10]
jmp 0x5fd994eb
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xa4
xor ecx, ecx
push ebx
push esi
push edi
mov dword [esp + 0x58], ecx
mov esi, ecx
mov dword [esp + 0x50], ecx
mov edi, ecx
mov dword [esp + 0x44], ecx
mov dword [esp + 0x28], ecx
mov dword [esp + 0x48], ecx
mov eax, dword [0x5fde9010]
cmp eax, 0x5fde9010
je 0x5fd99154
test dword [eax + 0x1c], 0x400
jne 0x5fdaf18f
push ecx
lea ecx, [esp + 0x80]
call fcn.5fd956d8
test eax, eax
jne 0x5fdacfb8
lea eax, [esp + 0x60]
mov edx, eax
mov dword [esp + 0x20], eax
lea ecx, [esp + 0x7c]
call fcn.5fd98d33
test eax, eax
jne 0x5fdacfc2
and dword [ebp + 8], 0x1000000
mov edx, 0x86
jne 0x5fdacfcc
or edx, 0x440
call fcn.5fd99563
mov ebx, eax
mov dword [esp + 0x44], ebx
test ebx, ebx
je 0x5fdaf1a7
xor edi, edi
mov ecx, edi
mov eax, dword [eax + 8]
inc ecx
test eax, eax
jne 0x5fd991b3
call fcn.5fd989ed
mov esi, eax
test esi, esi
je 0x5fda74fd
cmp dword [0x5fde9354], edi
je 0x5fd99273
test byte [0x5fde934c], 1
mov edx, 0x1000
jne 0x5fd99238
or dword [esi + 0x24], 0x10000
mov eax, dword [0x5fde934c]
test eax, 0x100
jne 0x5fdaf1b4
test edx, eax
jne 0x5fdaf1c5
mov ecx, 0x1000000
test ecx, eax
jne 0x5fdaf1d6
test eax, 0x10000
jne 0x5fdaf1e7
test eax, 0x10000000
jne 0x5fd9922e
or dword [esi + 0x24], 0x100000
mov eax, dword [0x5fde934c]
test eax, 0x100000
jne 0x5fd99238
or dword [esi + 0x24], ecx
cmp dword [0x5fde9354], edi
je 0x5fd99273
test byte [0x5fde9348], 1
jne 0x5fd99273
or dword [esi + 0x24], 0x200000
mov eax, dword [0x5fde9348]
test edx, eax
jne 0x5fd99265
or dword [esi + 0x24], 0x400000
mov eax, dword [0x5fde9348]
test eax, 0x10000
jne 0x5fd99273
or dword [esi + 0x24], 0x800000
lea eax, [esi + 0x6c]
mov dword [esp + 0x18], eax
mov eax, edi
mov dword [esp + 0x14], edi
mov dword [esp + 0x30], edi
mov dword [esp + 0x24], edi
mov dword [esp + 0x38], edi
mov dword [esp + 0x34], edi
lea edi, [esp + 0x8c]
push 9
mov dword [esp + 0x20], eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x40], eax
xor eax, eax
pop ecx
rep stosd dword es:[edi], eax
cmp dword [ebx + 0x44], 2
je 0x5fd99f82
mov ecx, dword [ebx + 0xc]
xor edx, edx
push 1
push 3
call fcn.5fd8abe3
mov edi, eax
mov dword [esp + 0x30], edi
test edi, edi
je 0x5fd990fa
mov ecx, dword [ebx + 0x28]
call fcn.5fd87890
mov dword [esp + 0x38], eax
test eax, eax
je 0x5fd990fa
mov edx, dword [esp + 0x44]
lea eax, [esp + 0x8c]
push eax
lea eax, [esp + 0x64]
mov ecx, edi
push eax
lea eax, [esp + 0x84]
push eax
push ebx
call fcn.5fd99ad6
test eax, eax
jne 0x5fd990fa
cmp dword [esp + 0x94], eax
je 0x5fda7505
xor edi, edi
inc edi
mov dword [esp + 0x14], edi
cmp dword [esp + 0x98], 0
je 0x5fd9933e
or edi, 2
mov dword [esp + 0x14], edi
test byte [ebx + 0x38], 0x10
jne 0x5fd99398
cmp dword [esp + 0xa8], 0
je 0x5fd99398
cmp dword [ebx + 0x40], 0x18
je 0x5fd99398
mov eax, dword [esi + 0x24]
or edi, 0x800000
mov dword [esp + 0x14], edi
test eax, 0x10000
je 0x5fd9937c
test byte [esp + 0xa4], 1
jne 0x5fd9937c
or edi, 0x100000
mov dword [esp + 0x14], edi
mov ecx, 0x200000
or eax, ecx
mov dword [esi + 0x24], eax
je 0x5fd99398
test byte [esp + 0xa0], 1
jne 0x5fd99398
or edi, ecx
mov dword [esp + 0x14], edi
cmp dword [esp + 0x90], 0
je 0x5fd993cb
mov edx, dword [ebx + 0x20]
test edx, edx
je 0x5fd993cb
mov ecx, edx
lea eax, [ecx + 2]
mov dword [esp + 0x54], eax
mov ax, word [ecx]
add ecx, 2
cmp ax, word [esp + 0x58]
jne 0x5fd993b2
sub ecx, dword [esp + 0x54]
sar ecx, 1
jne 0x5fd9a194
test byte [ebx + 0x38], 4
jne 0x5fd9a1ac
xor eax, eax
cmp dword [ebx + 0xa0], eax
jne 0x5fd9a898
mov edx, dword [ebx + 0x10]
lea ecx, [esp + 0x3c]
push ecx
xor eax, eax
cmp dword [ebx + 0x40], 0x18
push ecx
push ecx
sete al
push eax
push 1
call fcn.5fd98fc5
test eax, eax
jne 0x5fda750e
mov edx, dword [ebx + 0x1c]
test edx, edx
je 0x5fd99440
cmp dword [ebx + 0x40], 0x18
lea ecx, [esp + 0x40]
push ecx
push ecx
sete al
push ecx
push eax
xor eax, eax
push eax
call fcn.5fd98fc5
test eax, eax
jne 0x5fdaf213
mov eax, dword [esp + 0x40]
mov dword [esp + 0x2c], eax
test eax, eax
je 0x5fd99440
mov dword [esp + 0x28], 1
test byte [ebx + 0x38], 0x80
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x10], edx
je 0x5fd9947c
or dword [esi + 0x24], 0x10
mov edx, dword [ebx + 0xa4]
test edx, edx
jne 0x5fd9a1bb
push dword [esp + 0x34]
mov edx, dword [esp + 0x14]
push 2
pop ecx
call fcn.5fd98ef6
mov edx, dword [esp + 0x10]
test eax, eax
jne 0x5fd9a8c4
mov eax, 0x100
test dword [ebx + 0x38], eax
je 0x5fd9949c
or dword [esi + 0x24], eax
xor eax, eax
push eax
push 0x17
pop ecx
call fcn.5fd98ef6
test eax, eax
jne 0x5fdaf238
mov edx, dword [ebx + 0x170]
test edx, edx
jne 0x5fdaf24b
mov eax, dword [esp + 0x24]
test eax, eax
jne 0x5fd9a220
mov edx, dword [esp + 0x1c]
mov eax, dword [0x5fde9010]
mov ecx, dword [esp + 0x2c]
test ecx, ecx
jne 0x5fd9a366
mov edi, dword [esp + 0x10]
test edi, edi
jne 0x5fd9a366
cmp eax, 0x5fde9010
je 0x5fd994eb
test dword [eax + 0x1c], 0x10000
jne 0x5fdaf288
lea ecx, [esp + 0x8c]
call fcn.5fd98de1
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x5fd98f39
mov eax, dword [esp + 0x24]
test eax, eax
jne 0x5fdaf2c9
mov eax, dword [esp + 0x38]
test eax, eax
jne 0x5fd99555
mov eax, dword [esp + 0x2c]
test eax, eax
jne 0x5fdaf2d5
test edi, edi
jne 0x5fdaf2e1
mov eax, dword [esp + 0x34]
test eax, eax
jne 0x5fd9a1eb
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x5fdaf2ed
mov ebx, dword [ebx + 8]
test ebx, ebx
je 0x5fd99d6f
xor edi, edi
jmp 0x5fd9927a
mov ecx, eax
call fcn.5fd83e2e
jmp 0x5fd99517
mov edi, 0x10000000
test dword [0x5fde92a8], edi
je 0x5fda7517
mov eax, dword [0x5fde9010]
cmp eax, 0x5fde9010
je 0x5fd99d99
test dword [eax + 0x1c], 0x10000
jne 0x5fdaf2f9
xor ebx, ebx
test byte [esi + 0x24], 0x20
je 0x5fd99dc2
mov edx, ebx
cmp dword [esi + 0x30], ebx
jbe 0x5fd99dc2
lea eax, [esi + 0x78]
mov ecx, dword [eax]
test ecx, 0x200
jne 0x5fdacfd6
inc edx
add eax, 0x68
cmp edx, dword [esi + 0x30]
jb 0x5fd99dab
cmp dword [0x5fde927c], 0
je 0x5fd99dd4
xor edx, edx
mov ecx, esi
call fcn.5fd98aba
mov edx, dword [0x5fde9280]
test edx, edx
je 0x5fd99de5
mov ecx, esi
call fcn.5fd98e14
mov eax, dword [esp + 0x28]
test eax, eax
je 0x5fda74dc
xor ebx, ebx
cmp dword [esi + 0x30], ebx
je 0x5fd99e55
mov ecx, ebx
cmp dword [esp + 0x68], ecx
je 0x5fd99e0b
mov ecx, dword [esp + 0x60]
call fcn.5fd9a546
mov ecx, eax
call fcn.5fd9a065
mov edi, eax
push ecx
mov ecx, dword [esp + 0x64]
push esi
test edi, edi
jne 0x5fdaf375
push ebx
lea edx, [esp + 0x88]
call fcn.5fd9a246
mov dword [esi + 0x10], eax
cmp eax, ebx
je 0x5fda74fd
mov ecx, esi
call fcn.5fd9a07a
mov eax, dword [0x5fde901c]
cmp eax, 0xffffffff
je 0x5fdab78a
cmp eax, edi
jne 0x5fdaf383
mov ecx, dword [esp + 0x60]
call fcn.5fd87890
mov dword [esi + 8], eax
mov ecx, dword [esp + 0x64]
call fcn.5fd87890
mov dword [esi + 0xc], eax
cmp dword [esp + 0x60], ebx
jne 0x5fda6c46
test eax, eax
je 0x5fdaf39b
call dword [sym.imp.api_ms_win_core_sysinfo_l1_2_1.dll_GetTickCount64]
push ebx
push 0x3e8
push edx
push eax
call fcn.5fd8b290
push ebx
push esi
mov dword [esi + 0x18], eax
call sym.DNSAPI.dll_NetInfo_ResetServerPriorities
mov eax, dword [ebp + 8]
neg eax
sbb eax, eax
xor ecx, ecx
not eax
and eax, dword [esp + 0x48]
cmp dword [esi + 0x10], ebx
mov dword [esi + 0x14], eax
mov edx, dword [0x5fde9264]
setne cl
push ecx
push dword [0x5fde9268]
call fcn.5fd98c66
mov ecx, esi
call fcn.5fd99687
mov edi, dword [esp + 0x20]
mov ecx, edi
call fcn.5fd99f3d
mov eax, dword [esp + 0x44]
test eax, eax
je 0x5fd99ee7
mov ecx, eax
call fcn.5fd83e2e
test esi, esi
je 0x5fd99ef6
xor eax, eax
cmp dword [esi + 0x30], eax
je 0x5fda74f1
lea ecx, [esp + 0x7c]
call fcn.5fd959c0
test ebx, ebx
jne 0x5fdaf3aa
mov eax, dword [0x5fde9010]
test dword [eax + 0x1c], 0x80000
jne 0x5fdaf3e7
cmp eax, 0x5fde9010
je 0x5fd99f2d
test dword [eax + 0x1c], 0x400
jne 0x5fdaf3fc
mov eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [0x5fde9010]
cmp eax, 0x5fde9010
je 0x5fd990fa
test dword [eax + 0x1c], 0x10000
je 0x5fd990fa
jmp 0x5fdaf1f8
mov ecx, edx
call fcn.5fd87890
mov dword [esp + 0x24], eax
test eax, eax
jne 0x5fd993cb
jmp 0x5fd990fa
or edi, 0x8000
mov dword [esp + 0x14], edi
jmp 0x5fd993d5
lea ecx, [esp + 0x34]
xor eax, eax
cmp dword [ebx + 0x40], 0x18
push ecx
push ecx
sete al
push ecx
push eax
xor eax, eax
push eax
call fcn.5fd98fc5
mov eax, dword [0x5fde9010]
test dword [eax + 0x1c], 0x10000
je 0x5fd99460
jmp 0x5fdaf220
mov ecx, eax
call fcn.5fd83e2e
jmp 0x5fd99537
xor ecx, ecx
xor edx, edx
push ecx
push ecx
push ecx
mov ecx, eax
call fcn.5fd9a246
mov edx, eax
mov dword [esp + 0x1c], edx
test edx, edx
jne 0x5fd994ba
jmp 0x5fd990fa
mov eax, dword [esp + 0x10]
mov edi, dword [esp + 0x18]
push ecx
push eax
mov eax, dword [esp + 0x40]
add edi, 0xffffffe4
push edx
push dword [esp + 0x30]
xor edx, edx
mov ecx, edi
push eax
mov eax, dword [esp + 0x44]
inc edx
push eax
mov eax, dword [esp + 0x2c]
push eax
call fcn.5fd910d6
mov ecx, dword [esp + 0x18]
mov eax, dword [ebx + 4]
mov dword [ecx - 8], eax
mov eax, dword [ebx + 0x38]
mov dword [ecx], eax
mov eax, dword [ebx + 0xc0]
mov dword [ecx + 8], eax
mov eax, dword [ebx + 0x40]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0xac]
mov dword [ecx - 4], eax
mov ecx, dword [ecx + 4]
call fcn.5fd910ba
test eax, eax
jne 0x5fdaf2a3
mov ecx, edi
call fcn.5fd9a67e
cmp dword [esp + 0x48], 0
mov eax, dword [esp + 0x18]
jne 0x5fd9a3e2
mov ecx, dword [eax + 8]
mov dword [esp + 0x48], ecx
mov ecx, dword [esp + 0x50]
xor edx, edx
add eax, 0x68
mov dword [esp + 0x30], edx
inc ecx
mov dword [esp + 0x18], eax
mov eax, edx
mov dword [esp + 0x50], ecx
mov dword [esi + 0x30], ecx
mov ecx, edx
mov dword [esp + 0x10], eax
lea eax, [edi + 0x3c]
mov dword [esp + 0x24], edx
mov dword [esp + 0x38], edx
mov dword [esp + 0x2c], ecx
mov ecx, dword [edi + 0x14]
mov dword [esp + 0x1c], edx
lea edx, [edi + 0x38]
push eax
call fcn.5fd9a0da
mov ecx, edi
call fcn.5fd9a433
jmp 0x5fd990fa
or edi, 0x20000000
mov dword [esp + 0x14], edi
jmp 0x5fd993e3
or edi, 0x20
or dword [esi + 0x24], 0x20
mov dword [esp + 0x14], edi
jmp 0x5fd9947c
cmp dword [esi + 8], ebx
jne 0x5fd99e77
jmp 0x5fda74fd
cmp dword [0x5fde9258], 0
jne 0x5fdaf311
or dword [esi + 0x24], edi
jmp 0x5fd99df1
or dword [esi + 0x24], 0x10000000
jmp 0x5fd99ef6
push 0xe
pop ebx
jmp 0x5fd99ecd
mov edi, dword [esp + 0x14]
jmp 0x5fd9932d
mov edi, dword [esp + 0x3c]
jmp 0x5fd994eb
xor ebx, ebx
jmp 0x5fd99dc2
mov eax, dword [0x5fde9320]
mov dword [0x5fde901c], eax
jmp 0x5fd99e55
mov ebx, 0x267c
jmp 0x5fd99ed1
mov ebx, 0x267c
jmp 0x5fd99ecd
mov edx, 0x286
jmp 0x5fd99196
or ecx, 0x20
mov dword [eax], ecx
jmp 0x5fd99db9
push dword [eax + 0x14]
mov edx, 0x5fdbd28c
push dword [eax + 0x10]
push 0x71
pop ecx
call fcn.5fdc44b5
jmp 0x5fd99154
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
mov ebx, eax
jmp 0x5fd99ecd
or dword [esi + 0x24], 0x10000000
mov eax, dword [0x5fde934c]
jmp 0x5fd991fb
or dword [esi + 0x24], 0x20000
mov eax, dword [0x5fde934c]
jmp 0x5fd99203
or dword [esi + 0x24], 0x80000
mov eax, dword [0x5fde934c]
jmp 0x5fd99210
or dword [esi + 0x24], 0x40000
mov eax, dword [0x5fde934c]
jmp 0x5fd9921b
push dword [ebx + 0xc]
mov edx, 0x5fdbd28c
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x72
pop ecx
call fcn.5fdc7fde
jmp 0x5fd990fa
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x2c], ecx
jmp 0x5fda750e
push dword [esp + 0x34]
push 0x5fdaf438
push 0x5fdaf43c
call fcn.5fdd53cf
jmp 0x5fd99460
mov eax, 0x200
or edi, eax
or dword [esi + 0x24], eax
mov dword [esp + 0x14], edi
jmp 0x5fd9949c
lea eax, [esp + 0x4c]
push eax
call fcn.5fdc80e9
mov eax, dword [0x5fde9010]
test dword [eax + 0x1c], 0x10000
je 0x5fdaf27b
mov edi, dword [esp + 0x4c]
push edi
push 0x5fdaf44c
mov dword [esp + 0x24], edi
call fcn.5fdd990e
jmp 0x5fd994b6
mov edx, dword [esp + 0x4c]
mov dword [esp + 0x1c], edx
jmp 0x5fd994bf
push dword [ebx + 0xc]
mov edx, 0x5fdbd28c
push dword [eax + 0x14]
push dword [eax + 0x10]
push 0x73
pop ecx
call fcn.5fdc7fde
jmp 0x5fd994eb
mov ecx, dword [edi]
xor edx, edx
call fcn.5fdc8f5f
mov ecx, dword [esp + 0x18]
xor edx, edx
inc edx
mov dword [ecx + 0x44], eax
mov ecx, dword [edi]
call fcn.5fdc8f5f
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0x48], eax
jmp 0x5fd9a3c9
mov ecx, eax
call fcn.5fd83e2e
jmp 0x5fd9950f
mov ecx, eax
call fcn.5fd83e2e
jmp 0x5fd99523
mov ecx, edi
call fcn.5fd83e2e
jmp 0x5fd9952b
mov ecx, eax
call fcn.5fdc8c0c
jmp 0x5fd99543
push dword [eax + 0x14]
mov edx, 0x5fdbd28c
push dword [eax + 0x10]
push 0x74
pop ecx
call fcn.5fdc44b5
jmp 0x5fd99d99
mov eax, dword [esi + 0x30]
test eax, eax
je 0x5fda74e9
mov dword [esp + 0x28], ebx
lea ebx, [esi + 0x78]
xor ecx, ecx
inc ecx
call fcn.5fd91039
mov edi, eax
test edi, edi
je 0x5fda74fd
xor eax, eax
lea ecx, [edi + 0x20]
inc eax
mov edx, 0x100007f
mov dword [edi + 4], eax
mov dword [edi], eax
xor eax, eax
push eax
call fcn.5fd90f8c
mov eax, dword [ebx]
and eax, 0xefffffff
mov dword [ebx - 0x18], edi
or eax, 0x2000000
mov dword [ebx], eax
add ebx, 0x68
mov eax, dword [esp + 0x28]
inc eax
mov dword [esp + 0x28], eax
cmp eax, dword [esi + 0x30]
jae 0x5fd99df1
jmp 0x5fdaf323
push dword [esp + 0x8c]
xor edx, edx
jmp 0x5fd99e28
cmp dword [0x5fde90b0], ebx
je 0x5fdaf390
call sym.DNSAPI.dll_DnsFlushResolverCache
mov dword [0x5fde901c], edi
jmp 0x5fd99e55
cmp dword [esp + 0x64], ebx
je 0x5fd99e7f
jmp 0x5fda74fd
push esi
call sym.DNSAPI.dll_NetInfo_Free
mov eax, dword [0x5fde9010]
cmp eax, 0x5fde9010
je 0x5fdaf3d9
test dword [eax + 0x1c], 0x400
je 0x5fdaf3d9
push ebx
push dword [eax + 0x14]
mov edx, 0x5fdbd28c
push dword [eax + 0x10]
push 0x76
pop ecx
call fcn.5fdc7d09
push ebx
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_SetLastError]
xor eax, eax
jmp 0x5fd99f2f
push esi
push 0x5fdaf458
call fcn.5fdd6a42
mov eax, dword [0x5fde9010]
jmp 0x5fd99f19
push esi
push dword [eax + 0x14]
mov edx, 0x5fdbd28c
push dword [eax + 0x10]
push 0x77
pop ecx
call fcn.5fdc7d09
jmp 0x5fd99f2d