Function at 0x5df3a8
Capabilities:
Read file on windows
Resolve function by parsing pe exports
Terminate process

Disassembly:
sub esp, 0xf8
push ebx
push ebp
push esi
push edi
mov ecx, 0xc
xor eax, eax
lea edi, [esp + 0xd4]
xor ebx, ebx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x32
xor eax, eax
mov edi, 0x418adc
mov byte [esp + 0x43], 0
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x10c]
mov eax, 1
cmp ecx, eax
mov dword [esp + 0x2c], eax
jle 0x5df0f5
mov ebp, dword [esp + 0x110]
mov eax, dword [ebp + 4]
lea edi, [ebp + 4]
push eax
call fcn.005dec80
add esp, 4
and eax, 0xff
mov esi, eax
jne 0x5dee83
mov ecx, dword [esp + 0x10c]
mov eax, 2
cmp ecx, eax
jle 0x5def5b
mov ecx, dword [ebp + 8]
mov dword [esp + 0x2c], eax
push ecx
call fcn.005dec80
add esp, 4
and eax, 0xff
mov esi, eax
cmp esi, 5
je 0x5deeab
cmp esi, 0x1b
je 0x5deeab
cmp esi, 0x2c
jl 0x5dee97
cmp esi, 0x31
jle 0x5deeab
cmp esi, 0x3f
jl 0x5deea1
cmp esi, 0x46
jle 0x5deeab
cmp esi, 0x37
jl 0x5def1b
cmp esi, 0x3e
jg 0x5def1b
mov eax, dword [esp + 0x10c]
mov byte [0x418be5], 0
cmp eax, 1
mov byte [0x418be4], 0
jle 0x5def1b
mov edx, eax
mov ebp, edi
dec edx
mov dword [esp + 0x60], edx
mov eax, dword [ebp]
push 0x416c80
push eax
call fcn.005eed40
add esp, 8
test eax, eax
jne 0x5deeea
mov byte [0x418be4], 1
mov ecx, dword [ebp]
push 0x416c74
push ecx
call fcn.005eed40
add esp, 8
test eax, eax
jne 0x5def06
mov byte [0x418be5], 1
mov eax, dword [esp + 0x60]
add ebp, 4
dec eax
mov dword [esp + 0x60], eax
jne 0x5deece
mov ebp, dword [esp + 0x110]
cmp esi, 0x3f
jl 0x5def5b
cmp esi, 0x46
jg 0x5def5b
cmp dword [esp + 0x10c], 5
jne 0x5def5b
mov esi, dword [esp + 0x2c]
mov edx, dword [ebp + esi*4 + 8]
push edx
call fcn.005e8d64
mov dword [0x418bbc], eax
mov eax, dword [ebp + esi*4 + 0xc]
push eax
call fcn.005e8d64
add esp, 8
mov dword [fcn.00418bc0], eax
mov byte [0x418bc4], 1
mov ecx, dword [edi]
mov dword [esp + 0x2c], 1
push ecx
call fcn.005dec80
and eax, 0xff
push 0x40
mov ebp, eax
call fcn.005e7e75
mov esi, dword [esp + 0x114]
add esp, 8
cmp esi, 3
mov dword [esp + 0x14], eax
jge 0x5defb1
cmp ebp, 7
je 0x5defb1
cmp ebp, 8
je 0x5defb1
cmp ebp, 9
je 0x5defb1
cmp ebp, 0xa
je 0x5defb1
cmp ebp, 0xb
je 0x5defb1
cmp ebp, 0xe
je 0x5defb1
cmp ebp, 0xf
je 0x5defb1
xor ebp, ebp
push 8
call fcn.005e7e75
add esp, 4
mov dword [0x418a6c], eax
test ebp, ebp
je 0x5df04d
push 0x416c6c
call fcn.005e8c5c
add esp, 4
test eax, eax
jne 0x5defed
push 0x416c44
call fcn.005e8417
add esp, 4
push 0
call fcn.005e8b87
push 0x416c6c
call fcn.005e8c5c
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
add esp, 4
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x7c]
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0x7c]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x416c3c
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x5df0c8
cmp esi, 2
jle 0x5df0c8
mov edi, dword [edi]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x7c]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov dword [esp + 0x2c], 2
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x110]
mov edx, dword [ecx + 8]
push edx
call fcn.005dec80
and eax, 0xff
add esp, 4
mov ebp, eax
mov eax, dword [esp + 0x10c]
cmp eax, 4
jge 0x5df0c8
cmp ebp, 7
je 0x5df0c8
cmp ebp, 8
je 0x5df0c8
cmp ebp, 9
je 0x5df0c8
cmp ebp, 0xa
je 0x5df0c8
cmp ebp, 0xb
je 0x5df0c8
cmp ebp, 0xe
je 0x5df0c8
cmp ebp, 0xf
je 0x5df0c8
xor ebp, ebp
mov eax, dword [esp + 0x110]
mov esi, dword [esp + 0x2c]
mov ecx, dword [eax + esi*4]
push ecx
call fcn.005dec80
add esp, 4
cmp al, 7
jne 0x5df0ef
mov eax, dword [esp + 0x10c]
inc esi
cmp eax, esi
jg 0x5df0f5
xor edi, edi
cmp ebp, edi
jne 0x5df106
call fcn.005e22c0
call fcn.005e6780
push 0
call fcn.005e8b87
lea edx, [esp + 0x7c]
push 0x8002
push edx
call fcn.005ec51f
add esp, 8
cmp eax, 0xffffffff
mov dword [0x418bb4], eax
jne 0x5df13a
lea eax, [esp + 0x7c]
push eax
push 0x416c28
call fcn.005e8417
add esp, 8
push edi
call fcn.005e8b87
push 0x20000
call fcn.005e7e75
mov ecx, dword [0x418bb4]
mov esi, eax
push ecx
mov dword [esp + 0x40], esi
call fcn.005e2110
mov edx, dword [0x418bb4]
mov dword [0x418a60], eax
add eax, 0xfffe0000
push edi
mov dword [0x418a74], eax
add eax, 0x1e05a
push eax
push edx
call fcn.005ea1ab
mov eax, dword [0x418bb4]
push 1
push esi
push eax
call fcn.005e84c5
mov eax, dword [0x418a74]
xor ecx, ecx
mov cl, byte [esi]
lea edx, [esp + 0x30]
mov dword [esp + 0x94], ecx
mov ecx, dword [0x418bb4]
push edx
push esi
push eax
push ecx
mov dword [0x418bb0], 0xb000
mov dword [esp + 0x40], 2
call fcn.005e2fb0
mov dword [0x418a68], eax
mov eax, dword [esp + 0x40]
push esi
push eax
mov dword [0x418a64], eax
call fcn.005e2df0
mov edx, dword [0x418a60]
add esp, 0x38
and edx, 0xffff0000
cmp edx, 0x40000
jbe 0x5df2b4
mov eax, dword [0x418bb4]
push edi
push edi
push eax
mov dword [esp + 0x1c], edi
mov dword [0x418a5c], edi
call fcn.005ea1ab
add esp, 0xc
lea ebp, [esi + 0x8000]
mov ecx, dword [0x418bb4]
push 0x8000
push esi
push ecx
call fcn.005e84c5
mov edx, dword [0x418bb4]
push 0x8000
push ebp
push edx
call fcn.005e84c5
add esp, 0x18
mov edi, 2
push 3
lea eax, [edi + esi]
push 0x416c24
push eax
call fcn.005eedd0
mov ecx, dword [esp + 0x1c]
add esp, 0xc
test eax, eax
je 0x5df262
inc edi
cmp edi, 0xfffd
jb 0x5df237
mov eax, dword [0x418a5c]
jmp 0x5df28f
mov edx, ecx
xor eax, eax
shl edx, 0x10
lea edi, [edx + edi - 2]
mov dword [0x418bb8], edi
mov al, byte [esi]
mov edx, dword [esi + 7]
lea eax, [edx + eax + 4]
cmp eax, 0x10000
jae 0x5df288
mov eax, 0x10000
add eax, edi
mov dword [0x418a5c], eax
test eax, eax
jne 0x5df31d
inc ecx
push eax
mov eax, dword [0x418bb4]
mov dword [esp + 0x14], ecx
shl ecx, 0x10
push ecx
push eax
call fcn.005ea1ab
add esp, 0xc
jmp 0x5df20b
mov ecx, dword [0x418bb4]
push edi
push edi
push ecx
call fcn.005ea1ab
mov edx, dword [0x418bb4]
push 0x20
push esi
push edx
call fcn.005e84c5
mov ax, word [esi + 0x11]
add esp, 0x18
cmp ax, 0x5000
mov dword [esp + 0x30], eax
jne 0x5df305
mov ecx, dword [esi + 7]
xor eax, eax
mov al, byte [esi]
lea eax, [ecx + eax + 4]
cmp eax, 0x10000
mov dword [0x418a5c], eax
jae 0x5df31d
mov dword [0x418a5c], 0x10000
jmp 0x5df31d
mov edx, dword [0x418a60]
mov dword [0x418a5c], edi
add edx, 0xfffe0000
mov dword [0x418bb0], edx
lea eax, [esp + 0x7c]
push 0x4167c0
push eax
call fcn.005e8404
mov ecx, dword [0x418bb0]
mov dword [0x418bac], eax
push ecx
push eax
call fcn.005e2190
mov edx, dword [0x418bac]
xor esi, esi
push esi
push esi
push edx
mov dword [0x418bd4], eax
call fcn.005e7ee9
mov eax, dword [0x418bd4]
mov ecx, dword [0x418bb0]
add esp, 0x1c
cmp eax, esi
je 0x5df379
mov edx, ecx
mov byte [0x418bc5], 1
sub edx, eax
sub edx, 0x20
mov dword [fcn.00418bd0], edx
mov eax, dword [0x418bac]
push ecx
push eax
call fcn.005e2210
add esp, 8
cmp eax, esi
mov dword [0x418bdc], eax
je 0x5df3b7
mov ecx, dword [0x418bac]
push esi
push eax
push ecx
call fcn.005e7ee9
mov edx, dword [0x418bac]
push edx
push 4
push 1
push 0x418bd8
call fcn.005e7d8d
add esp, 0x1c
mov ebp, dword [esp + 0x2c]