Function at 0x1feb3c90
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x60
mov dword [esp + 8], 0
push ebx
push esi
push edi
push ebp
mov ebp, dword [esp + 0x74]
push pe_nt_image_headers32
push 0x8002
mov eax, dword [ebp]
push eax
call sub.LTKRN13N.dll_Ordinal_189
cmp eax, 0xffffffff
mov ebx, eax
jne 0x1feb3cca
mov eax, 0xfffffff2
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x60
ret
lea eax, [esp + 0x30]
push 6
push eax
push ebx
call sub.LTKRN13N.dll_Ordinal_190
test eax, eax
jne 0x1feb3cee
push ebx
call sub.LTKRN13N.dll_Ordinal_188
mov eax, 0xfffffff2
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x60
ret
mov ecx, dword [ebp + 0x40]
cmp ecx, 0xffffffff
mov edi, ecx
jne 0x1feb3cfd
mov edi, 0xffffffff
test byte [ebp + 0x10], 1
jne 0x1feb3d10
mov eax, dword [ebp + 0x38]
test ah, 0xc
jne 0x1feb3d18
cmp ecx, 1
jle 0x1feb3d18
mov dword [esp + 0x18], 4
mov eax, dword [esp + 0x34]
and eax, 0xffff
cmp edi, eax
jg 0x1feb3d35
cmp edi, 0xffffffff
je 0x1feb3d35
test edi, edi
jne 0x1feb3d47
mov edi, 1
jmp 0x1feb3d47
cmp dword [esp + 0x18], 0
jne 0x1feb3d44
test byte [ebp + 0x39], 8
mov edi, eax
je 0x1feb3d47
lea edi, [eax + 1]
push 0
mov eax, edi
shl eax, 4
sub eax, 0xa
push eax
push ebx
call sub.LTKRN13N.dll_Ordinal_191
lea ecx, [esp + 0x38]
push 0x10
mov dword [esp + 0x2c], eax
push ecx
push ebx
call sub.LTKRN13N.dll_Ordinal_190
lea eax, [esp + 0x1c]
mov ecx, dword [ebp + 0x18]
push eax
mov edx, dword [ebp + 0x14]
lea eax, [esp + 0x14]
push ecx
push edx
lea ecx, [ebp + 0x10]
push 1
mov edx, dword [ebp + 8]
push eax
push ecx
lea eax, [esp + 0x38]
push edx
push eax
mov ecx, dword [ebp + 4]
push ecx
call dword [ebp + 0x69e]
mov dword [esp + 0x2c], eax
cmp eax, 1
jge 0x1feb3dc6
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x10]
push eax
lea edx, [ebp + 0x10]
lea eax, [esp + 0x24]
push ecx
push edx
mov ecx, dword [ebp + 4]
push eax
push ecx
call dword [ebp + 0x6a2]
mov eax, dword [esp + 0x2c]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x60
ret
mov eax, dword [ebp + 4]
push eax
call fcn.1feb2c00
add esp, 4
mov esi, eax
test esi, esi
jne 0x1feb3e08
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x10]
push eax
lea edx, [ebp + 0x10]
lea eax, [esp + 0x24]
push ecx
push edx
mov ecx, dword [ebp + 4]
push eax
push ecx
call dword [ebp + 0x6a2]
push ebx
call sub.LTKRN13N.dll_Ordinal_188
mov eax, 0xffffffff
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x60
ret
cmp dword [esp + 0x18], 0
jne 0x1feb3e19
test byte [ebp + 0x39], 8
je 0x1feb3eef
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x28]
add eax, 0x10
push eax
push ecx
push ebx
call fcn.1feb42f0
add esp, 0xc
cmp edi, 1
jle 0x1feb3e87
mov dword [esp + 0x24], 6
lea eax, [edi - 1]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x24]
push 0
push eax
push ebx
call sub.LTKRN13N.dll_Ordinal_191
lea eax, [esp + 0x38]
push 0x10
push eax
push ebx
call sub.LTKRN13N.dll_Ordinal_190
mov eax, dword [esp + 0x24]
push 0
add dword [esp + 0x48], 0x10
push eax
push ebx
call sub.LTKRN13N.dll_Ordinal_191
lea eax, [esp + 0x38]
push 0x10
push eax
push ebx
call sub.LTKRN13N.dll_Ordinal_192
add dword [esp + 0x24], 0x10
dec dword [esp + 0x14]
jne 0x1feb3e43
inc edi
mov eax, dword [esp + 0x34]
and eax, 0xffff
inc eax
cmp eax, edi
jl 0x1feb3eef
mov eax, edi
shl eax, 4
sub eax, 0xa
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x14]
push 0
push eax
inc edi
push ebx
call sub.LTKRN13N.dll_Ordinal_191
lea eax, [esp + 0x38]
push 0x10
push eax
push ebx
call sub.LTKRN13N.dll_Ordinal_190
mov eax, dword [esp + 0x14]
push 0
add dword [esp + 0x48], 0x10
push eax
push ebx
call sub.LTKRN13N.dll_Ordinal_191
lea eax, [esp + 0x38]
push 0x10
push eax
push ebx
call sub.LTKRN13N.dll_Ordinal_192
add dword [esp + 0x14], 0x10
mov eax, dword [esp + 0x34]
and eax, 0xffff
inc eax
cmp eax, edi
jge 0x1feb3ea2
mov ecx, dword [ebp + 8]
cmp ecx, 8
jg 0x1feb3f1b
mov word [esp + 0x56], 0
mov edi, 1
shl edi, cl
mov eax, edi
cmp edi, 1
jle 0x1feb3f1d
sar eax, 1
inc word [esp + 0x56]
cmp eax, 1
jg 0x1feb3f0c
jmp 0x1feb3f1d
xor edi, edi
cmp dword [esp + 0x18], 0
jne 0x1feb3f2a
test byte [ebp + 0x39], 8
je 0x1feb3f6f
push 0
push 0
push ebx
call sub.LTKRN13N.dll_Ordinal_191
lea eax, [esp + 0x30]
push 6
push eax
push ebx
call sub.LTKRN13N.dll_Ordinal_190
push 0
push 0
push ebx
call sub.LTKRN13N.dll_Ordinal_191
inc word [esp + 0x34]
push 6
lea eax, [esp + 0x34]
push eax
push ebx
call sub.LTKRN13N.dll_Ordinal_192
cmp eax, 6
je 0x1feb3f6f
mov eax, 0xfffffffb
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x60
ret
mov edx, dword [ebp + 4]
mov al, byte [edx + 8]
mov byte [esp + 0x38], al
mov al, 1
mov cl, byte [edx + 0xc]
mov byte [esp + 0x39], cl
mov cl, byte [edx + 0x10]
shl al, cl
mov byte [esp + 0x3a], al
xor eax, eax
mov word [esp + 0x3c], ax
mov byte [esp + 0x3b], al
mov word [esp + 0x3e], ax
mov ecx, dword [edx + 8]
add ecx, 0x1f
and ecx, 0xffffffe7
shr ecx, 3
add ecx, dword [edx + 0x14]
imul ecx, dword [edx + 0xc]
cmp dword [ebp + 8], 8
mov dword [esp + 0x14], ecx
jg 0x1feb3fbf
lea eax, [edi*4]
add eax, dword [esp + 0x14]
push 2
add eax, 0x28
push 0
mov dword [esp + 0x48], eax
push ebx
call sub.LTKRN13N.dll_Ordinal_191
mov ecx, dword [esp + 0x28]
push 0
mov dword [esp + 0x48], eax
push ecx
push ebx
call sub.LTKRN13N.dll_Ordinal_191
lea ecx, [esp + 0x38]
push 0x10
push ecx
push ebx
call sub.LTKRN13N.dll_Ordinal_192
cmp eax, 0x10
je 0x1feb403d
push ebx
call sub.LTKRN13N.dll_Ordinal_188
test esi, esi
je 0x1feb4013
push esi
call sub.LTKRN13N.dll_Ordinal_141
push esi
call sub.LTKRN13N.dll_Ordinal_125
push esi
call sub.LTKRN13N.dll_Ordinal_283
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x10]
push eax
lea edx, [ebp + 0x10]
lea eax, [esp + 0x24]
push ecx
push edx
mov ecx, dword [ebp + 4]
push eax
push ecx
call dword [ebp + 0x6a2]
mov eax, 0xfffffffb
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x60
ret
mov eax, dword [ebp + 4]
mov dword [esp + 0x48], 0x28
mov ecx, dword [eax + 8]
mov dword [esp + 0x4c], ecx
mov ecx, dword [ebp + 8]
mov eax, dword [eax + 0xc]
mov edx, dword [esp + 0x14]
mov word [esp + 0x56], cx
add eax, eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x5c], edx
mov word [esp + 0x54], 1
xor eax, eax
push 2
mov dword [esp + 0x5c], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
push eax
mov dword [esp + 0x70], eax
push ebx
mov dword [esp + 0x78], eax
call sub.LTKRN13N.dll_Ordinal_191
lea ecx, [esp + 0x48]
push 0x28
push ecx
push ebx
call sub.LTKRN13N.dll_Ordinal_192
cmp eax, 0x28
je 0x1feb40ad
mov eax, 0xfffffffb
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x60
ret
mov eax, dword [ebp + 8]
cmp eax, 1
je 0x1feb40bf
cmp eax, 4
je 0x1feb40bf
cmp eax, 8
jne 0x1feb411b
shl edi, 2
mov eax, dword [esp + 0x1c]
push edi
add eax, 8
push eax
push ebx
call sub.LTKRN13N.dll_Ordinal_192
cmp eax, edi
je 0x1feb411b
push ebx
call sub.LTKRN13N.dll_Ordinal_188
test esi, esi
je 0x1feb40f1
push esi
call sub.LTKRN13N.dll_Ordinal_141
push esi
call sub.LTKRN13N.dll_Ordinal_125
push esi
call sub.LTKRN13N.dll_Ordinal_283
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x10]
push eax
lea edx, [ebp + 0x10]
lea eax, [esp + 0x24]
push ecx
push edx
mov ecx, dword [ebp + 4]
push eax
push ecx
call dword [ebp + 0x6a2]
mov eax, 0xfffffffb
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x60
ret
mov eax, dword [ebp + 4]
cmp dword [eax + 0x2c], 2
jne 0x1feb4137
xor edi, edi
mov eax, dword [eax + 0xc]
mov dword [esp + 0x28], 1
mov dword [esp + 0x18], eax
jmp 0x1feb4148
mov edi, dword [eax + 0xc]
mov eax, 0xffffffff
dec edi
mov dword [esp + 0x18], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x24], edi
cmp dword [esp + 0x18], edi
je 0x1feb41c0
mov eax, dword [esp + 0x1c]
mov ecx, dword [ebp + 0x18]
push eax
mov edx, dword [ebp + 0x14]
push ecx
mov eax, dword [ebp + 0x10]
mov ecx, dword [esp + 0x2c]
push edx
mov edx, dword [esp + 0x1c]
push eax
mov eax, dword [esp + 0x30]
push 1
push ecx
push edx
push eax
mov ecx, dword [ebp + 4]
push ecx
call dword [ebp + 0x6a6]
mov dword [esp + 0x2c], eax
cmp eax, 1
jne 0x1feb41c0
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0x14]
mov eax, dword [esp + 0x10]
mov dword [esp + 0x14], ecx
push ecx
push eax
push ebx
call sub.LTKRN13N.dll_Ordinal_192
cmp eax, dword [esp + 0x14]
jne 0x1feb41b8
mov eax, dword [esp + 0x28]
add dword [esp + 0x24], eax
mov ecx, dword [esp + 0x24]
cmp dword [esp + 0x18], ecx
jne 0x1feb4152
jmp 0x1feb41c0
mov dword [esp + 0x2c], 0xfffffffb
cmp dword [esp + 0x2c], 1
je 0x1feb420c
push ebx
call sub.LTKRN13N.dll_Ordinal_188
test esi, esi
je 0x1feb41e3
push esi
call sub.LTKRN13N.dll_Ordinal_141
push esi
call sub.LTKRN13N.dll_Ordinal_125
push esi
call sub.LTKRN13N.dll_Ordinal_283
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x10]
push eax
lea edx, [ebp + 0x10]
lea eax, [esp + 0x24]
push ecx
push edx
mov ecx, dword [ebp + 4]
push eax
push ecx
call dword [ebp + 0x6a2]
mov eax, dword [esp + 0x2c]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x60
ret
cmp dword [esp + 0x18], edi
je 0x1feb425d
mov eax, dword [esi + 0x14]
mov ecx, dword [esp + 0x10]
push eax
push edi
push ecx
push esi
call sub.LTKRN13N.dll_Ordinal_129
mov ecx, dword [esi + 0x14]
mov edx, dword [esp + 0x10]
mov eax, ecx
dec ecx
test eax, eax
je 0x1feb423f
mov al, byte [edx]
inc edx
not al
mov byte [edx - 1], al
mov eax, ecx
dec ecx
test eax, eax
jne 0x1feb4230
mov eax, dword [esi + 0x14]
mov ecx, dword [esp + 0x10]
push eax
push ecx
push ebx
call sub.LTKRN13N.dll_Ordinal_192
cmp eax, dword [esi + 0x14]
jne 0x1feb42a3
add edi, dword [esp + 0x28]
cmp dword [esp + 0x18], edi
jne 0x1feb4212
push ebx
call sub.LTKRN13N.dll_Ordinal_188
test esi, esi
je 0x1feb4279
push esi
call sub.LTKRN13N.dll_Ordinal_141
push esi
call sub.LTKRN13N.dll_Ordinal_125
push esi
call sub.LTKRN13N.dll_Ordinal_283
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x10]
push eax
lea edx, [ebp + 0x10]
lea eax, [esp + 0x24]
push ecx
push edx
mov ecx, dword [ebp + 4]
push eax
push ecx
call dword [ebp + 0x6a2]
mov eax, 1
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x60
ret
push ebx
call sub.LTKRN13N.dll_Ordinal_188
test esi, esi
je 0x1feb42bf
push esi
call sub.LTKRN13N.dll_Ordinal_141
push esi
call sub.LTKRN13N.dll_Ordinal_125
push esi
call sub.LTKRN13N.dll_Ordinal_283
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x10]
push eax
lea edx, [ebp + 0x10]
lea eax, [esp + 0x24]
push ecx
push edx
mov ecx, dword [ebp + 4]
push eax
push ecx
call dword [ebp + 0x6a2]
mov eax, 0xfffffffb
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x60
ret