Function at 0x5d4e70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x715c20
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov edi, dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea eax, [esi + 0x190]
push eax
call edi
lea ecx, [esi + 0x1a8]
push ecx
call edi
lea edx, [esi + 0x1c0]
push edx
call edi
call fcn.005e4b10
push 0xc
call fcn.0044f661
add esp, 4
mov dword [esp + 0x14], eax
xor edi, edi
cmp eax, edi
mov dword [esp + 0x20], edi
je 0x5d4edb
mov ecx, eax
call fcn.005e48f0
jmp 0x5d4edd
xor eax, eax
or ebp, 0xffffffff
mov dword [esi], eax
mov dword [esp + 0x20], ebp
mov dword [esp + 0x14], 0xff
mov ebx, 0x79a5d4
mov eax, dword [ebx]
cmp eax, edi
je 0x5d4f06
mov ecx, dword [esp + 0x14]
push ecx
mov ecx, dword [esi]
push eax
call fcn.005e4970
mov edx, dword [esp + 0x14]
sub ebx, 4
dec edx
cmp ebx, 0x79a1d8
mov dword [esp + 0x14], edx
jge 0x5d4ef3
push 0xc
call fcn.0044f661
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, edi
mov dword [esp + 0x20], 1
je 0x5d4f3d
mov ecx, eax
call fcn.005e48f0
jmp 0x5d4f3f
xor eax, eax
push 0x10
mov dword [esp + 0x24], ebp
mov dword [esi + 4], eax
call fcn.0044f661
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, edi
mov dword [esp + 0x20], 2
je 0x5d4f6b
push 1
mov ecx, eax
call fcn.005e1aa0
jmp 0x5d4f6d
xor eax, eax
push 0x10
mov dword [esp + 0x24], ebp
mov dword [esi + 8], eax
call fcn.0044f661
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, edi
mov dword [esp + 0x20], 3
je 0x5d4f99
push 1
mov ecx, eax
call fcn.005e1aa0
jmp 0x5d4f9b
xor eax, eax
push 0x10
mov dword [esp + 0x24], ebp
mov dword [esi + 0xc], eax
call fcn.0044f661
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, edi
mov dword [esp + 0x20], 4
je 0x5d4fc6
push edi
mov ecx, eax
call fcn.005e1aa0
jmp 0x5d4fc8
xor eax, eax
push 0x10
mov dword [esp + 0x24], ebp
mov dword [esi + 0x10], eax
call fcn.0044f661
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, edi
mov dword [esp + 0x20], 5
je 0x5d4ff4
push 1
mov ecx, eax
call fcn.005e1aa0
jmp 0x5d4ff6
xor eax, eax
push 0x10
mov dword [esp + 0x24], ebp
mov dword [esi + 0x14], eax
call fcn.0044f661
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, edi
mov dword [esp + 0x20], 6
je 0x5d5022
push 1
mov ecx, eax
call fcn.005e1aa0
jmp 0x5d5024
xor eax, eax
push 0x10
mov dword [esp + 0x24], ebp
mov dword [esi + 0x18], eax
call fcn.0044f661
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, edi
mov dword [esp + 0x20], 7
je 0x5d504e
mov ecx, eax
call fcn.005e0ca0
jmp 0x5d5050
xor eax, eax
push 0x40c
mov dword [esp + 0x24], ebp
mov dword [esi + 0x1c], eax
call fcn.0044f661
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, edi
mov dword [esp + 0x20], 8
je 0x5d507d
mov ecx, eax
call fcn.005e47f0
jmp 0x5d507f
xor eax, eax
push 0x10
mov dword [esp + 0x24], ebp
mov dword [esi + 0x20], eax
call fcn.0044f661
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, edi
mov dword [esp + 0x20], 9
je 0x5d50ab
push 1
mov ecx, eax
call fcn.005e1aa0
jmp 0x5d50ad
xor eax, eax
push 4
mov dword [esp + 0x24], ebp
mov dword [esi + 0x24], eax
call fcn.0044f661
add esp, 4
mov dword [esp + 0x14], eax
mov ebx, 0xa
cmp eax, edi
mov dword [esp + 0x20], ebx
je 0x5d50d8
mov ecx, eax
call fcn.005d4c50
jmp 0x5d50da
xor eax, eax
mov dword [esi + 0x28], eax
mov dword [esi + 0x2c], 0x264
mov dword [esi + 0x30], 0x318
mov dword [esi + 0x38], edi
mov dword [esi + 0x34], edi
mov edx, dword [esi + 0x2c]
mov dword [esi + 0x3c], edx
mov eax, dword [esi + 0x30]
mov dword [esi + 0x40], eax
mov eax, 1
mov dword [esi + 0x44], eax
mov dword [esi + 0x48], edi
mov dword [esi + 0x4c], edi
mov dword [esi + 0x50], eax
mov dword [esi + 0x54], eax
mov dword [esi + 0x58], edi
push 0x10
mov dword [esp + 0x24], ebp
mov dword [esi + 0x5c], 2
call fcn.0044f661
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, edi
mov dword [esp + 0x20], 0xb
je 0x5d5144
push 1
mov ecx, eax
call fcn.005e1aa0
jmp 0x5d5146
xor eax, eax
push 0x10
mov dword [esp + 0x24], ebp
mov dword [esi + 0x60], eax
call fcn.0044f661
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, edi
mov dword [esp + 0x20], 0xc
je 0x5d5170
mov ecx, eax
call fcn.005e0ca0
jmp 0x5d5172
xor eax, eax
push 0x10
mov dword [esp + 0x24], ebp
mov dword [esi + 0x64], eax
call fcn.0044f661
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, edi
mov dword [esp + 0x20], 0xd
je 0x5d519c
mov ecx, eax
call fcn.005e0ca0
jmp 0x5d519e
xor eax, eax
mov dword [esi + 0x68], eax
mov eax, 1
mov dword [esi + 0x6c], eax
mov dword [esi + 0x70], eax
mov dword [esi + 0x74], eax
mov dword [esi + 0x78], eax
mov dword [esi + 0x7c], edi
mov dword [esi + 0x80], edi
mov dword [esi + 0x84], edi
mov dword [esi + 0x88], edi
mov dword [esi + 0x8c], eax
mov dword [esi + 0x90], edi
mov dword [esi + 0x98], edi
mov dword [esi + 0x9c], edi
mov dword [esi + 0xa0], edi
mov dword [esi + 0xa4], 0x4072c000
mov dword [esi + 0xa8], edi
mov dword [esi + 0xac], 0x1312d00
mov dword [esi + 0xb0], edi
push 8
mov dword [esp + 0x24], ebp
mov dword [esi + 0xb4], edi
call fcn.0044f661
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, edi
mov dword [esp + 0x20], 0xe
je 0x5d5239
mov ecx, dword [str.Latin1]
push ecx
mov ecx, eax
call fcn.005df180
jmp 0x5d523b
xor eax, eax
mov dword [esi + 0xb8], eax
mov eax, 1
mov dword [esi + 0xbc], eax
mov dword [esi + 0xc0], eax
push 8
mov dword [esp + 0x24], ebp
mov dword [esi + 0xc4], eax
call fcn.0044f661
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, edi
mov dword [esp + 0x20], 0xf
je 0x5d5284
push 0x798ff0
mov ecx, eax
call fcn.005df180
jmp 0x5d5286
xor eax, eax
mov dword [esi + 0xc8], eax
push 8
mov dword [esp + 0x24], ebp
mov dword [esi + 0xcc], edi
call fcn.0044f661
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, edi
mov dword [esp + 0x20], 0x10
je 0x5d52be
push str.continuous
mov ecx, eax
call fcn.005df180
jmp 0x5d52c0
xor eax, eax
mov dword [esi + 0xd0], eax
mov eax, 1
mov dword [esi + 0xd4], eax
push 8
mov dword [esp + 0x24], ebp
mov dword [esi + 0xd8], eax
call fcn.0044f661
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, edi
mov dword [esp + 0x20], 0x11
je 0x5d5303
push str.linear
mov ecx, eax
call fcn.005df180
jmp 0x5d5305
xor eax, eax
mov dword [esi + 0xdc], eax
mov eax, 0x5dc
mov dword [esi + 0xe0], eax
mov dword [esi + 0xe4], eax
mov ecx, 1
mov dword [esi + 0xe8], ebx
mov dword [esi + 0xec], ecx
mov dword [esi + 0xf0], ecx
mov eax, 0x3ff00000
mov dword [esi + 0xf4], edi
mov dword [esi + 0x118], edi
mov dword [esi + 0x120], edi
mov dword [esi + 0x128], edi
mov dword [esi + 0x130], edi
push 8
mov dword [esp + 0x24], ebp
mov dword [esi + 0xf8], ecx
mov dword [esi + 0xfc], ecx
mov dword [esi + 0x100], edi
mov dword [esi + 0x104], ecx
mov dword [esi + 0x108], edi
mov dword [esi + 0x10c], ebp
mov dword [esi + 0x110], ebp
mov dword [esi + 0x11c], eax
mov dword [esi + 0x124], edi
mov dword [esi + 0x12c], eax
mov dword [esi + 0x134], edi
mov dword [esi + 0x138], edi
mov dword [esi + 0x13c], ecx
mov dword [esi + 0x140], ecx
mov dword [esi + 0x144], edi
call fcn.0044f661
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, edi
mov dword [esp + 0x20], 0x12
je 0x5d53dc
push 0x798fd4
mov ecx, eax
call fcn.005df180
jmp 0x5d53de
xor eax, eax
push 8
mov dword [esp + 0x24], ebp
mov dword [esi + 0x148], eax
call fcn.0044f661
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, edi
mov dword [esp + 0x20], 0x13
je 0x5d5410
push str.808080
mov ecx, eax
call fcn.005df180
jmp 0x5d5412
xor eax, eax
push 8
mov dword [esp + 0x24], ebp
mov dword [esi + 0x14c], eax
call fcn.0044f661
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, edi
mov dword [esp + 0x20], 0x14
je 0x5d5444
push str.000000
mov ecx, eax
call fcn.005df180
jmp 0x5d5446
xor eax, eax
mov ebx, 1
push 0x10
mov dword [esp + 0x24], ebp
mov dword [esi + 0x150], eax
mov dword [esi + 0x154], edi
mov dword [esi + 0x158], edi
mov dword [esi + 0x15c], edi
mov dword [esi + 0x160], edi
mov dword [esi + 0x164], ebx
mov dword [esi + 0x168], edi
mov dword [esi + 0x16c], ebx
call fcn.0044f661
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, edi
mov dword [esp + 0x20], 0x15
je 0x5d54a3
push ebx
mov ecx, eax
call fcn.005e1aa0
jmp 0x5d54a5
xor eax, eax
mov ecx, esi
mov dword [esp + 0x20], ebp
mov dword [esi + 0x170], eax
mov dword [esi + 0x174], ebx
call fcn.005d5750
push 8
mov dword [esi + 0x17c], edi
call fcn.0044f661
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, edi
mov dword [esp + 0x20], 0x16
je 0x5d54e7
push 4
mov ecx, eax
call fcn.005e46a0
jmp 0x5d54e9
xor eax, eax
push 8
mov dword [esp + 0x24], ebp
mov dword [esi + 0x180], eax
call fcn.0044f661
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, edi
mov dword [esp + 0x20], 0x17
je 0x5d5518
push 4
mov ecx, eax
call fcn.005e46a0
jmp 0x5d551a
xor eax, eax
push 0x10
mov dword [esp + 0x24], ebp
mov dword [esi + 0x184], eax
call fcn.0044f661
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, edi
mov dword [esp + 0x20], 0x18
je 0x5d5547
mov ecx, eax
call fcn.005e19a0
jmp 0x5d5549
xor eax, eax
push 0x10
mov dword [esp + 0x24], ebp
mov dword [esi + 0x188], eax
call fcn.0044f661
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, edi
mov dword [esp + 0x20], 0x19
je 0x5d5576
mov ecx, eax
call fcn.005e19a0
jmp 0x5d5578
xor eax, eax
mov dword [esi + 0x18c], eax
mov eax, dword [0x7809c4]
cmp eax, edi
mov dword [esp + 0x20], ebp
je 0x5d55a7
mov ebx, 0x7809c4
mov edx, dword [ebx - 4]
mov ecx, dword [esi + 4]
push edx
push eax
call fcn.005e4970
mov eax, dword [ebx + 8]
add ebx, 8
cmp eax, edi
jne 0x5d5590
push 0x20
call fcn.0044f661
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, edi
mov dword [esp + 0x20], 0x1a
je 0x5d55d7
push 0x3d
push 0x788e60
push edi
push str.Latin1
mov ecx, eax
call fcn.005e16e0
jmp 0x5d55d9
xor eax, eax
mov ecx, dword [eax]
push eax
push ecx
mov ecx, dword [esi + 0x10]
mov dword [esp + 0x28], ebp
call fcn.005e1b60
push 0x20
call fcn.0044f661
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, edi
mov dword [esp + 0x20], 0x1b
je 0x5d561c
push 0x83
push 0x789230
push edi
push str.ASCII7
mov ecx, eax
call fcn.005e16e0
jmp 0x5d561e
xor eax, eax
mov ecx, dword [eax]
push eax
push ecx
mov ecx, dword [esi + 0x10]
mov dword [esp + 0x28], ebp
call fcn.005e1b60
push 0x20
call fcn.0044f661
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, edi
mov dword [esp + 0x20], 0x1c
je 0x5d565e
push 0x79
push 0x789a60
push edi
push str.Symbol
mov ecx, eax
call fcn.005e16e0
jmp 0x5d5660
xor eax, eax
mov ecx, dword [eax]
push eax
push ecx
mov ecx, dword [esi + 0x10]
mov dword [esp + 0x28], ebp
call fcn.005e1b60
push 0x20
call fcn.0044f661
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, edi
mov dword [esp + 0x20], 0x1d
je 0x5d56a0
push 0x1e
push 0x78a1f0
push edi
push str.ZapfDingbats
mov ecx, eax
call fcn.005e16e0
jmp 0x5d56a2
xor eax, eax
mov ecx, dword [eax]
push eax
push ecx
mov ecx, dword [esi + 0x10]
mov dword [esp + 0x28], ebp
call fcn.005e1b60
push 0x20
call fcn.0044f661
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, edi
mov dword [esp + 0x20], 0x1e
je 0x5d56e1
push 0x5e0eb0
push 1
push str.UTF_8
mov ecx, eax
call fcn.005e1770
jmp 0x5d56e3
xor eax, eax
mov ecx, dword [eax]
push eax
push ecx
mov ecx, dword [esi + 0x10]
mov dword [esp + 0x28], ebp
call fcn.005e1b60
push 0x20
call fcn.0044f661
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, edi
mov dword [esp + 0x20], 0x1f
je 0x5d5722
push 0x5e0f80
push 1
push str.UCS_2
mov ecx, eax
call fcn.005e1770
jmp 0x5d5724
xor eax, eax
mov ecx, dword [esi + 0x10]
push eax
mov eax, dword [eax]
mov dword [esp + 0x24], ebp
push eax
call fcn.005e1b60
mov ecx, dword [esp + 0x18]
mov eax, esi
pop edi
mov dword fs:[0], ecx
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret