Function at 0x5bbdb8
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
mov ecx, 5
push 0
push 0
dec ecx
jne 0x5bbdc0
push ecx
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x5bc234
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov edx, dword [eax + 0x64]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 8]
mov eax, dword [eax + 0xc]
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
fld qword [eax + 0x30]
call fcn.00402cf4
mov edx, eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 8]
mov eax, dword [eax + 0xc]
call fcn.005bbbc4
mov ebx, eax
push ebx
mov eax, dword [ebp + 8]
mov eax, dword [eax - 8]
call fcn.0042cccc
push eax
call sub.gdi32.dll_SelectObject
mov esi, eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov edx, dword [eax + 0x38]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 8]
mov eax, dword [eax + 0x14]
call fcn.0042bfe4
push 1
mov eax, dword [ebp + 8]
mov eax, dword [eax - 8]
call fcn.0042cccc
push eax
call sub.gdi32.dll_SetBkMode
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
movzx eax, byte [eax + 0x60]
add eax, 0xfffffffb
cmp eax, 0x11
ja case.0x5bbe6a.5
mov al, byte [eax + 0x5bbe71]
jmp dword [eax*4 + 0x5bbe83]
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 4]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x58]
mov ecx, 4
mov edx, 1
call fcn.004048e0
mov eax, dword [ebp - 4]
push eax
mov ecx, 0x1e
mov edx, 3
mov eax, 3
call fcn.005bbc00
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 8]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x58]
mov ecx, 4
mov edx, 5
call fcn.004048e0
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax - 0x1c]
sub ecx, 4
mov edx, 0x23
mov eax, 0x23
call fcn.005bbc00
pop ecx
jmp 0x5bc201
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x58]
mov ecx, 1
mov edx, 1
call fcn.004048e0
mov eax, dword [ebp - 0xc]
push eax
mov ecx, 0xfffffffe
mov edx, 0xfffffff8
mov eax, 0xfffffff8
call fcn.005bbc00
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x58]
mov ecx, 6
mov edx, 2
call fcn.004048e0
mov eax, dword [ebp - 0x10]
push eax
mov ecx, 0x2c
mov edx, 3
mov eax, 3
call fcn.005bbc00
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x58]
mov ecx, 6
mov edx, 8
call fcn.004048e0
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax - 0x1c]
sub ecx, 4
mov edx, 0x31
mov eax, 0x31
call fcn.005bbc00
pop ecx
jmp 0x5bc201
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0x18]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x58]
mov ecx, 1
mov edx, 1
call fcn.004048e0
mov eax, dword [ebp - 0x18]
push eax
mov ecx, 0xfffffffe
mov edx, 0xfffffff8
mov eax, 0xfffffff8
call fcn.005bbc00
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x58]
mov ecx, 5
mov edx, 2
call fcn.004048e0
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, 0x2c
mov edx, 0xa
mov eax, 0xa
call fcn.005bbc00
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x58]
mov ecx, 5
mov edx, 7
call fcn.004048e0
mov eax, dword [ebp - 0x20]
push eax
mov ecx, 0x53
mov edx, 0x31
mov eax, 0x31
call fcn.005bbc00
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x58]
mov ecx, 1
mov edx, 0xc
call fcn.004048e0
mov eax, dword [ebp - 0x24]
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax - 0x1c]
add ecx, 8
mov eax, dword [ebp + 8]
mov edi, dword [eax - 0x1c]
inc edi
mov edx, edi
mov eax, dword [ebp + 8]
mov eax, edi
call fcn.005bbc00
pop ecx
jmp 0x5bc201
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0x28]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x58]
mov ecx, 6
mov edx, 1
call fcn.004048e0
mov eax, dword [ebp - 0x28]
push eax
mov ecx, 0x2c
mov edx, 3
mov eax, 3
call fcn.005bbc00
pop ecx
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0x2c]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov eax, dword [eax + 0x58]
mov ecx, 1
mov edx, 7
call fcn.004048e0
mov eax, dword [ebp - 0x2c]
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax - 0x1c]
add ecx, 8
mov eax, dword [ebp + 8]
mov edi, dword [eax - 0x1c]
inc edi
mov edx, edi
mov eax, dword [ebp + 8]
mov eax, edi
call fcn.005bbc00
pop ecx
jmp 0x5bc201
mov eax, dword [ebp + 8]
add eax, 0xffffffe8
mov edx, dword [ebp + 8]
mov edx, dword [edx - 4]
mov edx, dword [edx + 0x58]
call fcn.00404448
mov eax, dword [ebp + 8]
mov edx, dword [eax - 0x18]
mov eax, 0x5bc24c
call fcn.004049c4
mov edx, dword [ebp + 8]
mov dword [edx - 0x20], eax
mov eax, dword [ebp + 8]
mov edx, dword [eax - 0x20]
mov eax, dword [ebp + 8]
add eax, 0xffffffe8
mov ecx, 6
call fcn.00404920
mov eax, dword [ebp + 8]
cmp dword [eax - 0x20], 0
jne 0x5bc14e
mov eax, dword [ebp + 8]
mov edx, dword [eax - 0x18]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 8]
call fcn.0042cb08
mov edx, dword [ebp + 8]
push edx
mov edx, dword [ebp + 8]
mov edx, dword [edx - 0x18]
push edx
mov edx, dword [ebp + 8]
mov ecx, dword [edx - 0x1c]
mov edx, dword [ebp + 8]
mov edx, dword [edx - 0x1c]
sub edx, eax
sar edx, 1
jns 0x5bc1b4
adc edx, 0
mov eax, edx
xor edx, edx
call fcn.005bbc00
pop ecx
jmp 0x5bc201
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov edx, dword [eax + 0x58]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 8]
call fcn.0042cb08
mov edx, dword [ebp + 8]
push edx
mov edx, dword [ebp + 8]
mov edx, dword [edx - 4]
mov edx, dword [edx + 0x58]
push edx
mov edx, dword [ebp + 8]
mov ecx, dword [edx - 0x1c]
mov edx, dword [ebp + 8]
mov edx, dword [edx - 0x1c]
sub edx, eax
sar edx, 1
jns 0x5bc1f7
adc edx, 0
mov eax, edx
xor edx, edx
call fcn.005bbc00
pop ecx
push esi
mov eax, dword [ebp + 8]
mov eax, dword [eax - 8]
call fcn.0042cccc
push eax
call sub.gdi32.dll_SelectObject
push ebx
call sub.gdi32.dll_DeleteObject
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5bc23b
lea eax, [ebp - 0x2c]
mov edx, 0xb
call fcn.004043d4
ret