Function at 0x5dd050
Capabilities:
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xe4]
cmp eax, dword [ecx + 8]
jbe 0x5dde2f
sub esp, 0x164
mov byte [esp + 0x17c], 0
mov dword [esp + 0x180], 0
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x16c]
mov dword [esp + 4], eax
call fcn.00470300
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
test eax, eax
je 0x5dd0b4
xor ecx, ecx
jmp 0x5dd0bc
test edx, edx
jbe 0x5dde25
mov dword [esp + 0xc0], ecx
lea edi, [esp + 0x120]
xor eax, eax
call fcn.0046278f
call fcn.005db890
lea ecx, [0x6178c0]
mov dword [esp], ecx
call fcn.0040bcc0
mov ecx, dword [esp + 4]
mov dword [esp + 0xc4], ecx
mov dword [esp + 0x120], 4
mov edx, dword [esp + 0xc0]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov byte [esp + 0x10], 0
mov dword [esp + 0x14], 0x8000004
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
lea edx, [esp + 0x120]
mov dword [esp + 0x20], edx
mov dword [esp + 0x24], ecx
call fcn.00472950
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x58], ecx
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.005dea90
mov ecx, dword [esp + 0x58]
test ecx, ecx
jne 0x5dd9d8
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax + 4]
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
lea edx, [0x5dea50]
mov dword [esp + 0x70], edx
mov dword [esp + 0x74], ecx
lea ecx, [esp + 0x70]
mov dword [esp + 0xa8], ecx
lea ecx, [esp + 0x9c]
mov dword [esp], ecx
call fcn.004341b0
test eax, eax
jne 0x5dda03
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax]
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0
lea edx, [0x5dea10]
mov dword [esp + 0x68], edx
mov dword [esp + 0x6c], ecx
lea ecx, [esp + 0x68]
mov dword [esp + 0x84], ecx
lea ecx, [esp + 0x78]
mov dword [esp], ecx
call fcn.004341b0
test eax, eax
jne 0x5dd9f7
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax]
mov dword [esp + 0x64], ecx
mov edx, dword [eax + 4]
mov dword [esp + 0x60], edx
lea ebx, [0x611e60]
mov dword [esp], ebx
call fcn.0040bcc0
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x174]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0x178]
mov dword [edi + 8], ecx
mov ecx, dword [0x81dcc0]
test ecx, ecx
jne 0x5dd26c
mov ecx, dword [esp + 0x170]
mov dword [edi], ecx
jmp 0x5dd278
mov eax, dword [esp + 0x170]
call fcn.00462500
mov dword [edi + 0xc], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xffffffff
lea eax, [0x68bb94]
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.004d6cf0
mov eax, dword [esp + 8]
mov dword [esp + 0xcc], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x3c], ecx
call fcn.005db890
mov eax, dword [esp + 0x3c]
test eax, eax
jne 0x5dd9d8
mov eax, dword [esp + 0xcc]
mov ecx, dword [eax + 0x20]
mov edx, dword [eax + 0x1c]
mov ebx, dword [eax + 0x18]
mov ebp, dword [eax + 0x14]
lea esi, [0x5eff80]
cmp ebp, esi
jne 0x5dde0f
mov dword [esp + 0xc8], edx
mov dword [esp + 0x40], ecx
mov dword [esp + 0xd8], ebx
mov eax, dword [ebx + 0x1c]
mov dword [esp + 0x54], eax
lea ecx, [0x629d00]
mov dword [esp], ecx
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [esp + 0x11c], eax
mov dword [eax], 0x100002
mov dword [esp + 0x108], eax
lea ecx, [0x5fbb20]
mov dword [esp], ecx
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x60]
mov dword [eax], ecx
mov edx, dword [esp + 0x108]
mov dword [eax + 4], edx
mov edx, dword [0x7f7c04]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.0046e080
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x5dd9d8
mov eax, dword [esp + 0x11c]
mov ecx, dword [eax + 0xa4]
mov dword [esp + 0x5c], ecx
lea edx, [0x5ff980]
mov dword [esp], edx
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [esp + 0x110], eax
lea ecx, [0x5ffa00]
mov dword [esp], ecx
mov dword [esp + 4], 4
mov dword [esp + 8], 4
call fcn.00449ec0
mov eax, dword [esp + 0xc]
mov dword [esp + 0xd4], eax
mov dword [esp + 0x104], eax
mov ecx, dword [esp + 0x110]
mov dword [esp + 0x100], ecx
lea ecx, [0x5fbfa0]
mov dword [esp], ecx
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x64]
mov dword [eax], ecx
mov edx, dword [esp + 0x5c]
add edx, 8
mov dword [esp + 0x44], edx
mov dword [eax + 4], edx
mov ebx, dword [esp + 0x104]
mov dword [eax + 8], ebx
mov dword [eax + 0xc], 4
mov ebx, dword [esp + 0x100]
mov dword [eax + 0x10], ebx
mov ebx, dword [0x7f7c0c]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], 5
mov dword [esp + 0xc], 5
call fcn.0046e080
mov eax, dword [esp + 0x10]
mov dword [esp + 0x34], eax
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0
call fcn.005de750
mov eax, dword [esp + 0x34]
test eax, eax
jne 0x5dd9d8
nop
mov eax, dword [esp + 0xd4]
mov eax, dword [eax]
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 0x54]
cmp eax, ecx
jne 0x5dd500
lea eax, [0x5fbb20]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x64]
mov dword [eax], ecx
mov edx, dword [esp + 0x5c]
mov dword [eax + 4], edx
mov ebx, dword [0x7f7c18]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.0046e080
cmp dword [esp + 0x10], 1
je 0x5dd9b6
lea eax, [0x5ffa40]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [esp + 0x114], eax
lea ecx, [0x5fbfa0]
mov dword [esp], ecx
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x64]
mov dword [eax], ecx
mov edx, dword [esp + 0x54]
mov dword [eax + 4], edx
mov ebx, dword [esp + 0xd8]
mov ebp, dword [ebx + 0x38]
mov dword [eax + 8], ebp
mov dword [eax + 0xc], 0x3000
mov dword [eax + 0x10], 0x40
mov ebp, dword [0x7f7c20]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], 5
mov dword [esp + 0xc], 5
call fcn.0046e080
mov eax, dword [esp + 0x10]
mov dword [esp + 0x30], eax
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.005de4f0
mov eax, dword [esp + 0x30]
test eax, eax
je 0x5dd5cc
mov ecx, dword [esp + 0x114]
mov dword [ecx], eax
jmp 0x5dd63d
lea eax, [0x5fbfa0]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x64]
mov dword [eax], ecx
mov dword [eax + 4], 0
mov edx, dword [esp + 0xd8]
mov ebx, dword [edx + 0x38]
mov dword [eax + 8], ebx
mov dword [eax + 0xc], 0x3000
mov dword [eax + 0x10], 0x40
mov ebx, dword [0x7f7c20]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], 5
mov dword [esp + 0xc], 5
call fcn.0046e080
mov eax, dword [esp + 0x10]
test eax, eax
je 0x5dd994
mov ecx, dword [esp + 0x114]
mov dword [ecx], eax
lea eax, [0x5ffa40]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [esp + 0x10c], eax
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x114]
cmp dword [edx], ecx
je 0x5dd6da
mov dword [esp + 0xfc], edx
mov dword [esp + 0xf8], eax
lea ecx, [0x5fbfa0]
mov dword [esp], ecx
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x64]
mov dword [eax], ecx
mov edx, dword [esp + 0x44]
mov dword [eax + 4], edx
mov edx, dword [esp + 0xfc]
mov dword [eax + 8], edx
mov dword [eax + 0xc], 4
mov edx, dword [esp + 0xf8]
mov dword [eax + 0x10], edx
mov edx, dword [0x7f7c1c]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], 5
mov dword [esp + 0xc], 5
call fcn.0046e080
cmp dword [esp + 0x10], 1
je 0x5dd972
call fcn.005db890
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 0
call fcn.005de200
mov eax, dword [esp + 0xd8]
mov word [eax + 0x44], 2
mov ecx, dword [esp + 0x114]
mov edx, dword [ecx]
mov ebx, dword [esp + 0x54]
cmp edx, ebx
je 0x5dd78a
mov ebx, dword [esp + 0xcc]
movzx ebp, word [ebx + 0x12]
test bp, 1
ja 0x5dd768
mov dword [eax + 0x1c], edx
jmp 0x5dd78a
mov byte [esp + 0x17c], 0
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x180], eax
call fcn.00434780
add esp, 0x164
ret
mov edx, dword [eax + 0x10]
add edx, dword [ecx]
mov ebx, dword [esp + 0x11c]
mov dword [ebx + 0xb0], edx
mov dword [esp + 0xf4], ebx
lea edx, [0x5fbb20]
mov dword [esp], edx
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x60]
mov dword [eax], ecx
mov ecx, dword [esp + 0xf4]
mov dword [eax + 4], ecx
mov ecx, dword [0x7f7c14]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.0046e080
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x5dd9d8
mov edx, dword [esp + 0x174]
test edx, edx
jbe 0x5dde06
mov eax, dword [esp + 0x170]
mov dword [esp + 0xf0], eax
mov eax, dword [esp + 0x10c]
mov dword [esp + 0xec], eax
lea ecx, [0x5fbfa0]
mov dword [esp], ecx
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x64]
mov dword [eax], ecx
mov edx, dword [esp + 0x114]
mov ebx, dword [edx]
mov dword [eax + 4], ebx
mov ebx, dword [esp + 0xf0]
mov dword [eax + 8], ebx
mov ebx, dword [esp + 0xd8]
mov ebp, dword [ebx + 0x3c]
mov dword [eax + 0xc], ebp
mov ebp, dword [esp + 0xec]
mov dword [eax + 0x10], ebp
mov ebp, dword [0x7f7c1c]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], 5
mov dword [esp + 0xc], 5
call fcn.0046e080
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x5dd9d8
lea eax, [0x5ffa40]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [esp + 0x118], eax
mov dword [esp + 0xe8], eax
lea ecx, [0x5fbfa0]
mov dword [esp], ecx
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x64]
mov dword [eax], ecx
mov edx, dword [esp + 0x114]
mov ebx, dword [edx]
mov dword [eax + 4], ebx
mov ebx, dword [esp + 0xd8]
mov ebp, dword [ebx + 0x3c]
mov dword [eax + 8], ebp
mov dword [eax + 0xc], 2
mov ebp, dword [esp + 0xe8]
mov dword [eax + 0x10], ebp
mov ebp, dword [0x7f7c08]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], 5
mov dword [esp + 0xc], 5
call fcn.0046e080
mov eax, dword [esp + 0x10]
mov dword [esp + 0x38], eax
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
call fcn.005de060
mov eax, dword [esp + 0x38]
test eax, eax
je 0x5dd950
xor eax, eax
jmp 0x5dda16
mov byte [esp + 0x17c], 0
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x180], eax
call fcn.00434780
add esp, 0x164
ret
mov byte [esp + 0x17c], 0
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x180], eax
call fcn.00434780
add esp, 0x164
ret
mov byte [esp + 0x17c], 0
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x180], eax
call fcn.00434780
add esp, 0x164
ret
mov byte [esp + 0x17c], 0
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x180], eax
call fcn.00434780
add esp, 0x164
ret
mov byte [esp + 0x17c], 0
mov dword [esp + 0x180], 0
call fcn.00434780
add esp, 0x164
ret
call fcn.00434780
add esp, 0x164
ret
call fcn.00434780
add esp, 0x164
ret
mov ecx, dword [esp + 0x48]
lea eax, [ecx + 1]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jge 0x5ddd59
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0xc8]
mov edx, dword [ecx + eax*4]
mov dword [esp + 0xd0], edx
nop
mov ebx, dword [edx + 0x3c]
mov ebp, dword [edx + 0x10]
lea esi, [0x68bcc0]
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 0xc], 0
mov dword [esp + 8], ebp
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
call fcn.004d66f0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
test eax, eax
jne 0x5ddd37
test edx, edx
jbe 0x5dddfd
mov dword [esp + 0xe4], ecx
mov eax, dword [esp + 0x10c]
mov dword [esp + 0xe0], eax
lea ecx, [0x5fbfa0]
mov dword [esp], ecx
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x64]
mov dword [eax], ecx
mov edx, dword [esp + 0xd0]
mov ebx, dword [edx + 0xc]
mov ebp, dword [esp + 0x114]
add ebx, dword [ebp]
mov dword [eax + 4], ebx
mov ebx, dword [esp + 0xe4]
mov dword [eax + 8], ebx
mov ebx, dword [edx + 0x10]
mov dword [eax + 0xc], ebx
mov ebx, dword [esp + 0xe0]
mov dword [eax + 0x10], ebx
mov ebx, dword [0x7f7c1c]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], 5
mov dword [esp + 0xc], 5
call fcn.0046e080
cmp dword [esp + 0x10], 1
je 0x5ddd15
mov edx, dword [esp + 0xcc]
movzx ebx, word [edx + 2]
dec ebx
mov eax, dword [esp + 0x48]
cmp eax, ebx
jne 0x5ddb43
mov ebx, dword [esp + 0xd8]
mov ebp, dword [ebx + 0x38]
mov esi, dword [esp + 0xd0]
sub ebp, dword [esi + 0xc]
mov ecx, dword [esp + 0x40]
cmp eax, ecx
jmp 0x5ddb7e
lea ebx, [eax + 1]
mov ecx, dword [esp + 0x40]
cmp ecx, ebx
jbe 0x5dddf6
mov ebx, dword [esp + 0xc8]
mov ebp, dword [ebx + eax*4 + 4]
mov ebp, dword [ebp + 0xc]
cmp eax, ecx
jae 0x5dddf1
mov esi, dword [ebx + eax*4]
sub ebp, dword [esi + 0xc]
cmp eax, ecx
mov ebx, dword [esp + 0xd8]
mov esi, dword [esp + 0xd0]
jae 0x5dddec
mov dword [esp + 0x50], ebp
mov edi, dword [esp + 0xc8]
mov ebx, dword [edi + eax*4]
mov ebx, dword [ebx + 0x24]
test ebx, 0x20000000
jbe 0x5ddbed
test ebx, 0x40000000
jbe 0x5ddbbf
test ebx, 0x80000000
jbe 0x5ddbb7
mov ebx, 0x40
jmp 0x5ddc39
test ebx, 0x20000000
jmp 0x5ddbc5
test ebx, 0x20000000
jbe 0x5ddbed
test ebx, 0x40000000
jbe 0x5ddbd6
mov ebx, 0x20
jmp 0x5ddc39
test ebx, 0x20000000
jbe 0x5ddbed
test ebx, 0x80000000
jbe 0x5ddbed
mov ebx, pe_nt_image_headers32
jmp 0x5ddc39
test ebx, 0x40000000
jbe 0x5ddc04
test ebx, 0x80000000
jbe 0x5ddc04
mov ebx, 4
jmp 0x5ddc39
mov ebx, dword [esi + 0x24]
test ebx, 0x20000000
jbe 0x5ddc16
mov ebx, 0x10
jmp 0x5ddc39
test ebx, 0x40000000
jbe 0x5ddc25
mov ebx, 2
jmp 0x5ddc39
test ebx, 0x80000000
jbe 0x5ddc34
mov ebx, 8
jmp 0x5ddc39
mov ebx, 1
mov dword [esp + 0x4c], ebx
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call fcn.005dde40
mov eax, dword [esp + 0x118]
mov dword [esp + 0xdc], eax
lea ecx, [0x5fbfa0]
mov dword [esp], ecx
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x64]
mov dword [eax], ecx
mov edx, dword [esp + 0xd0]
mov edx, dword [edx + 0xc]
mov ebx, dword [esp + 0x114]
add edx, dword [ebx]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x50]
mov dword [eax + 8], edx
mov edx, dword [esp + 0x4c]
mov dword [eax + 0xc], edx
mov edx, dword [esp + 0xdc]
mov dword [eax + 0x10], edx
mov edx, dword [0x7f7c08]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], 5
mov dword [esp + 0xc], 5
call fcn.0046e080
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x5dda0f
mov byte [esp + 0x17c], 0
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x180], eax
call fcn.00434780
add esp, 0x164
ret
mov byte [esp + 0x17c], 0
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x180], eax
call fcn.00434780
add esp, 0x164
ret
mov byte [esp + 0x17c], 0
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x180], eax
call fcn.00434780
add esp, 0x164
ret
lea eax, [0x5fbb20]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xc4]
mov edx, dword [ecx + 4]
mov dword [eax], edx
mov dword [eax + 4], 0
mov edx, dword [0x7f7c10]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call fcn.0046e080
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x5dddca
mov byte [esp + 0x17c], 1
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x180], eax
call fcn.00434780
add esp, 0x164
ret
mov byte [esp + 0x17c], 0
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x180], eax
call fcn.00434780
add esp, 0x164
ret
call fcn.00462580
call fcn.00462580
mov eax, ebx
call fcn.00462580
xor eax, eax
mov ecx, eax
call fcn.00462580
xor eax, eax
mov ecx, eax
call fcn.00462580
mov dword [esp], ebp
mov dword [esp + 4], esi
lea eax, [0x5ff280]
mov dword [esp + 8], eax
call fcn.00409250
xor eax, eax
mov ecx, eax
call fcn.00462580
nop
call fcn.004610f0
jmp fcn.005dd050