Function at 0xded770
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x14b6840]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 0xc]
jbe 0xdede33
sub esp, 0x7c
mov eax, dword [0x14b6840]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov eax, dword [eax + 0x58]
mov dword [esp + 0x78], eax
test eax, eax
je 0xded89e
mov ecx, dword [esp + 0x84]
cmp ecx, 0x10
jae 0xded896
mov edx, dword [eax + 0x38]
mov ebx, dword [eax + 0x3c]
lea ebp, [eax + 0x34]
test edx, edx
sete dl
test ebx, ebx
sete bl
and ebx, edx
test bl, bl
je 0xded82c
mov dword [esp + 0x6c], ebp
mov eax, dword [esp + 0x80]
test byte [eax], al
lea ecx, [eax + 8]
mov dword [esp + 0x74], ecx
nop
mov dword [esp], eax
call fcn.00dccf60
mov eax, dword [esp + 0x74]
mov dword [esp], eax
call fcn.00df22d0
lea edi, [esp + 0x54]
lea esi, [esp + 4]
call fcn.00e32b9e
mov edi, dword [esp + 0x6c]
lea esi, [esp + 0x54]
call fcn.00e32b9e
nop
nop
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call fcn.00dcd180
mov ecx, dword [esp + 0x84]
mov ebp, dword [esp + 0x6c]
mov dword [esp], ebp
mov dword [esp + 4], ecx
call fcn.00df1be0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
test eax, eax
je 0xded88e
mov edx, dword [0x14b6840]
mov edx, dword fs:[edx]
mov edx, dword [edx]
mov edx, dword [edx + 0x18]
mov edx, dword [edx + 0x58]
test edx, edx
je 0xded881
mov ebx, dword [edx + 0x708]
test ebx, ebx
je 0xded881
lea ebp, [ebx - 1]
cmp ebp, 0x80
jae 0xdede26
mov ebx, dword [edx + ebx*4 + 0x708]
mov dword [edx + 0x708], ebp
jmp 0xded883
xor ebx, ebx
test ebx, ebx
je 0xded890
xor edx, edx
jmp 0xded9c8
xor ebx, ebx
mov edx, eax
mov ebp, ecx
jmp 0xded8a4
xor edx, edx
xor ebx, ebx
xor ebp, ebp
jmp 0xded8a4
xor edx, edx
xor ebx, ebx
xor ebp, ebp
mov dword [esp + 0x34], ebp
mov dword [esp + 0x50], ebx
mov dword [esp + 0x4c], edx
mov eax, dword [esp + 0x80]
test byte [eax], al
nop
mov dword [esp], eax
call fcn.00dccf60
mov eax, dword [esp + 0x4c]
test eax, eax
je 0xded8d5
xor edx, edx
mov ecx, dword [esp + 0x34]
jmp 0xded97c
mov eax, dword [esp + 0x80]
lea ecx, [eax + 8]
mov dword [esp + 0x74], ecx
mov dword [esp], ecx
mov edx, dword [esp + 0x84]
mov dword [esp + 4], edx
call fcn.00df1100
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
test eax, eax
je 0xded906
xor edx, edx
jmp 0xded97c
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov ecx, dword [esp + 0x84]
mov dword [esp + 4], ecx
call fcn.00dee0d0
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 8]
test al, al
jne 0xded94d
nop
nop
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call fcn.00dcd180
mov dword [esp + 0x8c], 0
add esp, 0x7c
ret
mov dword [esp + 0x44], ecx
mov eax, dword [esp + 0x74]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
call fcn.00df1100
mov eax, dword [esp + 8]
test eax, eax
je 0xdede10
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x44]
mov dword [esp + 0x34], ecx
mov dword [esp + 0x4c], eax
mov dword [esp + 0x44], edx
mov ebx, dword [esp + 0x50]
test ebx, ebx
jne 0xded9a3
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call fcn.00ded690
mov ebx, dword [esp + 4]
mov dword [esp + 0x50], ebx
nop
nop
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call fcn.00dcd180
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x4c]
mov ebx, dword [esp + 0x50]
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x34], ecx
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], ebx
mov dword [esp + 0x44], edx
lea ebp, [0x14b75e8]
mov dword [esp], ebp
call fcn.00dc40a0
mov eax, dword [esp + 4]
mov dword [esp + 0x24], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x30], ecx
nop
lea edx, [0x14b6dc4]
mov dword [esp], edx
call fcn.00dc3f20
movzx eax, byte [esp + 4]
test al, al
je 0xdeda14
xor eax, eax
xor ebx, ebx
jmp 0xdeda5b
nop
lea eax, [0x14b7718]
mov dword [esp], eax
call fcn.00dc4220
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x34]
add eax, edx
adc ecx, 0
mov ebx, dword [esp + 0x30]
cmp ebx, ecx
sete cl
setb bl
mov ebp, dword [esp + 0x24]
cmp eax, ebp
xchg esi, ebx
seta bl
xchg esi, ebx
and ecx, esi
or ebx, ecx
test bl, bl
je 0xdeda59
sub eax, ebp
jmp 0xdeda5b
xor eax, eax
mov byte [esp + 0x1b], bl
mov dword [esp + 0x48], eax
lea ecx, [0x14b6c80]
mov dword [esp], ecx
call fcn.00dc4220
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
cmp eax, 0xffffffff
setne dl
cmp ecx, 0xffffffff
setne bl
or ebx, edx
test bl, bl
je 0xdedb13
mov edx, dword [esp + 0x44]
test edx, edx
ja 0xdedaa3
mov ecx, dword [esp + 0x78]
test ecx, ecx
mov eax, dword [esp + 0x48]
jmp 0xdedb1d
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x20], eax
call fcn.00de6b90
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x44]
add eax, edx
adc ecx, 0
mov ebx, dword [esp + 0x2c]
cmp ebx, ecx
setb cl
sete bl
mov ebp, dword [esp + 0x20]
cmp eax, ebp
xchg esi, ebx
seta bl
xchg esi, ebx
and ebx, esi
or ebx, ecx
test bl, bl
je 0xdedb07
sub eax, ebp
cmp eax, edx
jb 0xdedae9
mov eax, edx
mov ecx, dword [esp + 0x48]
cmp ecx, eax
jae 0xdedaf9
mov ecx, dword [esp + 0x78]
test ecx, ecx
jmp 0xdedb1d
mov edx, dword [esp + 0x78]
test edx, edx
mov ecx, edx
mov eax, dword [esp + 0x48]
jmp 0xdedb1d
mov ecx, dword [esp + 0x78]
test ecx, ecx
mov eax, dword [esp + 0x48]
jmp 0xdedb1d
mov ecx, dword [esp + 0x78]
test ecx, ecx
mov eax, dword [esp + 0x48]
je 0xdedc17
test eax, eax
jbe 0xdedc17
mov dword [esp + 0x48], eax
lea eax, [ecx + 0x968]
mov dword [esp + 0x70], eax
nop
call fcn.00e33190
mov eax, dword [esp]
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x28], ecx
mov edx, dword [esp + 0x70]
mov dword [esp], edx
mov byte [esp + 4], 3
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.00ddf6e0
mov eax, dword [esp + 0x80]
test byte [eax], al
movzx ecx, byte [esp + 0x10]
mov byte [esp + 0x1a], cl
lea edx, [eax + 8]
mov dword [esp], edx
mov edx, dword [esp + 0x48]
mov dword [esp + 4], edx
lea edx, [0x12474e4]
mov dword [esp + 8], edx
movzx edx, byte [esp + 0x1b]
mov byte [esp + 0xc], dl
call fcn.00de7930
mov eax, dword [esp + 0x10]
nop
lea ecx, [0x147e4bc]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00dc4080
nop
call fcn.00e33190
mov eax, dword [esp]
mov ecx, dword [esp + 4]
movzx edx, byte [esp + 0x1a]
test dl, dl
je 0xdedbf5
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x38], eax
mov edx, dword [esp + 0x70]
mov dword [esp], edx
mov byte [esp + 4], 3
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.00ddf8a0
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
lea edx, [0x14b6c90]
mov dword [esp], edx
mov edx, dword [esp + 0x1c]
sub eax, edx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x28]
sbb ecx, eax
mov dword [esp + 8], ecx
call fcn.00dc40c0
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
movzx ecx, byte [esp + 0x88]
mov byte [esp + 8], cl
movzx edx, byte [esp + 0x89]
mov byte [esp + 9], dl
mov edx, dword [esp + 0x4c]
mov dword [esp + 0xc], edx
mov ebx, dword [esp + 0x84]
mov dword [esp + 0x10], ebx
call fcn.00dede40
mov eax, dword [esp + 0x84]
shl eax, 0xd
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x34]
test ecx, ecx
je 0xdedcb1
mov edx, dword [esp + 0x4c]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00dd7c00
lea eax, [0x14b76f8]
mov dword [esp], eax
xor eax, eax
mov ecx, dword [esp + 0x34]
sub eax, ecx
mov dword [esp + 4], eax
mov eax, 0
sbb eax, 0
mov dword [esp + 8], eax
call fcn.00df7220
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x34]
lea edx, [0x14b7700]
mov dword [esp], edx
sub eax, ecx
xor ebx, ebx
sub ebx, eax
mov dword [esp + 4], ebx
mov eax, 0
sbb eax, 0
mov dword [esp + 8], eax
call fcn.00df7220
movzx eax, byte [esp + 0x88]
test al, al
jne 0xdedcff
lea eax, [0x14b76f0]
mov dword [esp], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.00df7220
lea eax, [0x14bada0]
mov dword [esp], eax
call fcn.00df7340
mov eax, dword [esp + 4]
mov dword [esp + 0x68], eax
test byte [eax], al
mov dword [esp], eax
mov ecx, dword [esp + 0x34]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
call fcn.00dc40c0
mov eax, dword [esp + 0x68]
lea ecx, [eax + 8]
mov dword [esp], ecx
xor ecx, ecx
mov edx, dword [esp + 0x34]
sub ecx, edx
mov dword [esp + 4], ecx
mov ecx, 0
sbb ecx, 0
mov dword [esp + 8], ecx
call fcn.00dc40c0
movzx eax, byte [esp + 0x88]
cmp al, 1
ja 0xdedda9
test al, al
jne 0xdedd88
mov eax, dword [esp + 0x68]
add eax, 0x10
mov dword [esp], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.00dc40c0
jmp 0xdeddf3
mov eax, dword [esp + 0x68]
add eax, 0x18
mov dword [esp], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.00dc40c0
jmp 0xdeddf3
cmp al, 2
je 0xdeddd4
cmp al, 3
jne 0xdeddf3
mov eax, dword [esp + 0x68]
add eax, 0x20
mov dword [esp], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.00dc40c0
jmp 0xdeddf3
mov eax, dword [esp + 0x68]
add eax, 0x28
mov dword [esp], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 4], eax
mov dword [esp + 8], 0
call fcn.00dc40c0
lea eax, [0x14bada0]
mov dword [esp], eax
call fcn.00df7430
mov eax, dword [esp + 0x50]
mov dword [esp + 0x8c], eax
add esp, 0x7c
ret
lea eax, [0x123ae68]
mov dword [esp], eax
mov dword [esp + 4], 0x2b
call fcn.00dfd1b0
mov eax, ebp
mov ecx, pe_nt_image_headers32
call fcn.00e32490
nop
call fcn.00e2fbb0
jmp fcn.00ded770