Function at 0xfb230
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xd0
mov ecx, dword [0x4e73e0]
push ebx
mov ebx, dword [esp + 0xd8]
push ebp
push esi
xor esi, esi
xor eax, eax
cmp dword [ecx + 0x209c], esi
push edi
setne al
mov dword [esp + 0x7c], esi
mov dword [esp + 0x78], esi
mov dword [esp + 0x74], esi
mov dword [esp + 0x6c], 0x47
cmp eax, esi
mov dword [esp + 0x70], eax
je 0xfb27c
push esi
push esi
push esi
push 1
push 0x47
call fcn.0008dca0
mov ecx, dword [0x5271fc]
cmp ecx, esi
je 0xfb2ae
mov eax, dword [ebx + 0x1d4]
test al, 0x40
je 0xfb29a
shr eax, 7
and eax, 1
mov edx, eax
jmp 0xfb2b0
mov eax, dword [ecx + 0xb50]
mov edx, dword [ebx + 0x1c8]
cmp eax, edx
jae 0xfb2b0
mov edx, eax
jmp 0xfb2b0
xor edx, edx
mov eax, dword [ebx + 0x1d4]
test ah, 4
mov dword [esp + 0x34], edx
je 0xfb2d6
shr eax, 9
and eax, 1
cmp edx, eax
jne 0xfb2d6
mov eax, 1
sub eax, edx
mov edx, eax
mov dword [esp + 0x34], edx
mov ecx, dword [esp + 0xe8]
mov ecx, dword [ecx + 0xdc]
mov eax, dword [ecx + 0x60]
mov esi, dword [eax + 0x10]
mov ebp, dword [eax + 0x14]
mov edi, esi
or edi, ebp
jne 0xfb2fa
mov eax, dword [eax]
mov esi, dword [eax + 0x68]
mov ebp, dword [eax + 0x6c]
mov eax, dword [ecx + 0x5c]
xor ecx, ecx
add eax, esi
adc ecx, ebp
xor edi, edi
cmp dword [esp + 0xec], 0xffffffff
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
jne 0xfb326
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], edi
mov dword [esp + 0xec], edi
lea ecx, [edx*8]
sub ecx, edx
shl ecx, 5
mov edx, dword [ecx + ebx + 0x90]
lea ebp, [ecx + ebx]
mov ecx, dword [ebx + 0x1cc]
lea eax, [edx + ecx + 1]
xor edx, edx
div ecx
cmp dword [ebp + 8], edi
mov dword [esp + 0x24], edx
je 0xfbbc0
mov eax, dword [ebp + 0x7c]
cmp dword [eax + edx*4], edi
je 0xfbbc0
mov esi, dword [ebx]
push edi
push edi
push edi
push 0x4c52564f
push edi
call fcn.000fd210
cmp eax, edi
mov dword [esp + 0x1c], eax
je 0xfbbc0
mov eax, dword [0x4e73e0]
test byte [eax + 0x2484], 0x20
je 0xfb3b1
mov ecx, dword [eax + 0x360]
mov edx, dword [eax + 0x15c]
add eax, 8
mov dword [eax + ecx*4 + 0x158], edx
add dword [eax + 0x358], 1
xor ecx, ecx
call fcn.000b6350
mov ecx, dword [ebp + 8]
cmp ecx, edi
je 0xfb434
test byte [ebp + 0x14], 2
mov eax, dword [ecx]
push 1
push edi
push edi
jne 0xfb3fc
call dword [eax + 8]
mov eax, dword [ebx + 0x1d4]
test al, 0x40
je 0xfb434
shr eax, 8
and eax, 1
lea ecx, [eax*8]
sub ecx, eax
shl ecx, 5
cmp dword [ecx + ebx + 8], edi
lea eax, [ecx + ebx + 8]
je 0xfb434
mov eax, dword [eax]
mov edx, dword [eax]
push 1
push edi
push edi
mov ecx, eax
call dword [edx + 8]
jmp 0xfb434
push edi
call dword [eax + 0x18]
mov eax, dword [ebx + 0x1d4]
test al, 0x40
je 0xfb434
shr eax, 8
and eax, 1
lea ecx, [eax*8]
sub ecx, eax
shl ecx, 5
cmp dword [ecx + ebx + 8], edi
lea eax, [ecx + ebx + 8]
je 0xfb434
mov eax, dword [eax]
mov edx, dword [eax]
push 1
push edi
push edi
push edi
mov ecx, eax
call dword [edx + 0x18]
mov edx, dword [esp + 0xe8]
mov eax, edx
mov dword [ebp + 0x78], edx
call fcn.00106470
test eax, eax
je 0xfb474
mov dword [ebp + 0x68], edi
mov dword [ebp + 0x6c], edi
mov eax, dword [edx + 0x2bc]
mov dword [ebp + 0x70], eax
mov eax, dword [edx + 0x2c0]
cmp dword [ebp + 0x24], eax
mov dword [ebp + 0x74], eax
jle 0xfb469
mov dword [ebp + 0x24], eax
mov eax, dword [ebp + 0x70]
cmp dword [ebp + 0x20], eax
jle 0xfb474
mov dword [ebp + 0x20], eax
test byte [ebx + 0x1d4], 0x20
lea ecx, [ebp + 0x18]
mov edx, ecx
mov esi, dword [edx]
mov dword [esp + 0x4c], esi
mov edi, dword [edx + 4]
mov dword [esp + 0x50], edi
mov ecx, dword [edx + 8]
mov dword [esp + 0x54], ecx
mov edx, dword [edx + 0xc]
mov dword [esp + 0x58], edx
je 0xfb58d
sub ecx, esi
sub edx, edi
test ecx, ecx
mov dword [esp + 0x38], ecx
fild dword [esp + 0x38]
jge 0xfb4b7
fadd qword [0x41bcb8]
fmul qword [ebx + 0x1d8]
fnstcw word [esp + 0x10]
movzx eax, word [esp + 0x10]
fadd qword [0x41bc70]
or ah, 0xc
test edx, edx
mov dword [esp + 0x20], eax
fldcw word [esp + 0x20]
fistp qword [esp + 0x38]
mov eax, dword [esp + 0x38]
mov dword [esp + 0x38], edx
mov dword [esp + 0x20], eax
fldcw word [esp + 0x10]
fild dword [esp + 0x38]
jge 0xfb4f9
fadd qword [0x41bcb8]
fmul qword [ebx + 0x1d8]
fnstcw word [esp + 0x10]
movzx eax, word [esp + 0x10]
fadd qword [0x41bc70]
or ah, 0xc
mov dword [esp + 0x38], eax
fldcw word [esp + 0x38]
fistp qword [esp + 0x38]
mov eax, dword [esp + 0x38]
fldcw word [esp + 0x10]
mov dword [esp + 0x10], eax
mov eax, dword [ebx + 0x1d4]
shr eax, 1
and eax, 0xf
add eax, 0xfffffffe
cmp eax, 3
ja case.default.0xfb53c
jmp dword [eax*4 + 0xfbbe4]
sub ecx, dword [esp + 0x20]
add esi, ecx
jmp 0xfb575
sub edx, dword [esp + 0x10]
add edi, edx
mov dword [esp + 0x50], edi
jmp case.default.0xfb53c
sub ecx, dword [esp + 0x20]
sub edx, dword [esp + 0x10]
jmp 0xfb56d
sub ecx, dword [esp + 0x20]
sub edx, dword [esp + 0x10]
shr ecx, 1
shr edx, 1
add esi, ecx
add edi, edx
mov dword [esp + 0x50], edi
mov dword [esp + 0x4c], esi
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x10]
add ecx, esi
add edx, edi
mov dword [esp + 0x54], ecx
mov dword [esp + 0x58], edx
xor eax, eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov eax, dword [ebp + 0x30]
sub eax, dword [ebp + 0x28]
mov dword [esp + 0x64], eax
mov eax, dword [ebp + 0x34]
sub eax, dword [ebp + 0x2c]
test byte [ebx + 0x1d4], 1
mov dword [esp + 0x68], eax
je 0xfb5e3
mov eax, dword [ebx + 0x1e0]
test eax, eax
je 0xfb5c5
cmp eax, 0xb4
jne 0xfb5d3
sub ecx, esi
cmp dword [esp + 0x64], ecx
jl 0xfb5d3
mov dword [esp + 0x64], ecx
jmp 0xfb5e3
test eax, eax
je 0xfb5e3
sub edx, edi
cmp dword [esp + 0x68], edx
jl 0xfb5e3
mov dword [esp + 0x68], edx
xor ecx, ecx
cmp dword [esp + 0xf4], ecx
je 0xfb5f2
xor edx, edx
jmp 0xfb604
mov edx, dword [esp + 0xfc]
or ecx, dword [esp + 0xf8]
xor eax, eax
or edx, eax
mov eax, dword [esp + 0xe8]
mov dword [eax + 0x270], ecx
mov dword [eax + 0x258], ecx
mov dword [eax + 0x274], edx
mov dword [eax + 0x25c], edx
mov esi, dword [ebp + 0xa8]
add esi, ecx
mov dword [esp + 0x10], ecx
mov ecx, dword [ebp + 0xac]
adc ecx, edx
mov dword [eax + 0x264], ecx
mov ecx, dword [esp + 0xec]
mov dword [eax + 0x260], esi
test byte [ebp + 0x14], 4
mov dword [esp + 0x14], edx
jne 0xfb65d
test cl, 8
jne 0xfb65d
xor esi, esi
jmp 0xfb662
mov esi, 1
mov edi, dword [esp + 0xe8]
mov edx, dword [edi + 0x244]
mov eax, ecx
and eax, 2
or al, 1
and esi, 1
add esi, esi
and ecx, 4
add esi, esi
and edx, 0xfffffff9
or esi, edx
add eax, eax
add eax, eax
add eax, eax
or eax, ecx
mov ecx, esi
shr ecx, 2
add eax, eax
not ecx
and ecx, 1
or eax, ecx
and esi, 0xffffffd6
or eax, esi
test al, 1
mov dword [edi + 0x244], eax
jne 0xfb6b5
test al, 4
je 0xfb6b5
or dword [edi + 0x234], 8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
call dword [edx + 0x30]
test eax, eax
je 0xfb6d0
mov eax, dword [esp + 0x1c]
and dword [edi + 0x244], 0xfffffff7
or byte [eax + 0x22], 4
mov eax, dword [ebx]
lea esi, [esp + 0xb0]
call fcn.001aae20
mov eax, dword [esp + 0xe8]
add eax, 0x204
mov edi, eax
mov ecx, 0xc
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [eax]
mov eax, dword [esp + 0xe8]
mov edx, dword [eax + 0x234]
xor edx, ecx
and edx, 3
xor dword [eax + 0x234], edx
mov ecx, dword [ebx + 0x1e0]
mov dword [eax + 0x240], ecx
mov eax, dword [ebp + 0x68]
xor esi, esi
xor edi, edi
cmp eax, 0xffff
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], esi
jne 0xfb740
mov eax, dword [esp + 0x34]
mov edx, ebx
call fcn.000fcb20
mov ecx, esi
mov eax, esi
jmp 0xfb74d
mov esi, dword [ebp + 0x70]
mov ecx, dword [ebp + 0x6c]
mov edi, dword [ebp + 0x74]
sub esi, eax
sub edi, ecx
mov edx, dword [esp + 0xe8]
add edx, 0x2d4
mov dword [edx], eax
mov eax, dword [esp + 0xe8]
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x1c]
mov dword [edx + 8], esi
mov dword [edx + 0xc], edi
mov dword [eax + 0x2d0], 1
cmp dword [ecx + 0x10], 0
je 0xfb79f
mov edx, dword [ebx]
mov edi, dword [edx + 0x4d50]
test edi, edi
je 0xfb79f
mov ecx, dword [ebp + 0x78]
lea esi, [esp + 0x5c]
lea eax, [esp + 0x4c]
call fcn.0012e660
mov dword [edi + 0x50], eax
test byte [esp + 0xef], 0x10
mov edi, dword [esp + 0x24]
jne 0xfb80e
mov edx, dword [ebp + 0x7c]
mov ecx, dword [ebp + 8]
mov edx, dword [edx + edi*4]
mov eax, dword [ecx]
push edx
call dword [eax + 0x2c]
mov eax, dword [esp + 0xf0]
mov edx, dword [ebp + 0x7c]
push eax
mov eax, dword [edx + edi*4]
mov edx, dword [esp + 0xec]
lea ecx, [esp + 0x60]
push ecx
push eax
mov eax, dword [esp + 0x28]
lea ecx, [esp + 0x58]
push ecx
mov ecx, dword [ebx]
push edx
push eax
push ecx
xor eax, eax
call fcn.000ff210
mov edx, dword [ebp + 0x7c]
mov ecx, dword [edx + edi*4]
test ecx, ecx
je 0xfb80e
lea eax, [esp + 0x5c]
push eax
mov eax, 1
mov ebx, ecx
call fcn.00090c40
mov ebx, dword [esp + 0xe4]
test byte [ebp + 0x14], 0x40
jne 0xfb846
mov eax, dword [esp + 0xe8]
mov ecx, dword [eax + 0xdc]
cmp dword [ecx + 0x44], 0
jne 0xfb846
mov edx, dword [ebp + 0x7c]
mov ecx, dword [edx + edi*4]
or dword [ecx + 0x204], 0x20
mov ecx, dword [ebp + 0x7c]
mov ecx, dword [ecx + edi*4]
and byte [ecx + 0x204], 0x7f
jmp 0xfb8d5
mov edx, dword [esp + 0xe4]
mov eax, dword [esp + 0xe8]
mov eax, dword [eax + 0xdc]
mov edi, dword [edx]
mov esi, dword [eax + 8]
mov ecx, dword [ebp + 0x7c]
mov edx, dword [esp + 0x24]
mov eax, dword [eax + 4]
mov ecx, dword [ecx + edx*4]
mov ebx, eax
mov dword [esp + 0x38], ecx
call fcn.00109210
mov edx, eax
mov eax, dword [esp + 0x38]
shl edx, 5
xor edx, dword [eax + 0x204]
and edx, 0x20
xor dword [eax + 0x204], edx
mov eax, dword [esp + 0xe4]
mov esi, dword [eax]
call fcn.00109380
mov ecx, dword [ebp + 0x7c]
mov edx, dword [esp + 0x24]
mov ecx, dword [ecx + edx*4]
mov ebx, dword [esp + 0xe4]
mov edi, dword [esp + 0x24]
xor edx, edx
test eax, eax
mov eax, dword [esp + 0xe8]
sete dl
shl edx, 7
xor edx, dword [ecx + 0x204]
and edx, 0x80
xor dword [ecx + 0x204], edx
mov ecx, dword [esp + 0xec]
test ecx, 0x20000000
jne 0xfbb6d
test cl, 0x20
je 0xfb949
mov edx, dword [ebp + 0x94]
mov ecx, dword [ebp + 8]
mov eax, dword [ecx]
push 1
push 0
push 0
sub edx, 3
push edx
call dword [eax + 0x18]
test eax, eax
jne 0xfb949
mov esi, 0xffffd8f0
mov edi, edi
mov ecx, dword [0x4e7dbc]
lea eax, [esp + 0x38]
push eax
push ecx
mov dword [esp + 0x40], esi
mov dword [esp + 0x44], 0xffffffff
call sub.WIN32K.SYS_EngWaitForSingleObject
mov eax, dword [ebp + 0x94]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
push 1
push 0
push 0
sub eax, 3
push eax
call dword [edx + 0x18]
test eax, eax
je 0xfb910
mov eax, dword [ebx + 0x1d4]
test al, 0x40
je 0xfba66
test ah, 0x10
je 0xfba66
lea ecx, [ebp + 0x38]
push ecx
lea edx, [esp + 0xa4]
push edx
lea eax, [esp + 0x88]
push eax
lea esi, [esp + 0x9c]
lea eax, [esp + 0x44]
lea ecx, [esp + 0x68]
call fcn.000fcdc0
mov ecx, dword [esp + 0x10]
or ecx, dword [esp + 0x14]
je 0xfb999
mov eax, 1
jmp 0xfb99b
xor eax, eax
mov esi, dword [esp + 0xec]
push esi
mov esi, dword [esp + 0x30]
push esi
mov esi, dword [esp + 0x30]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
push esi
mov esi, dword [ebp + 0x98]
push esi
mov esi, dword [esp + 0x24]
push esi
mov esi, dword [esp + 0x24]
push esi
push eax
lea eax, [esp + 0x54]
push eax
lea eax, [esp + 0xa0]
push eax
mov eax, dword [ebp + 0x7c]
mov eax, dword [eax + edi*4]
push eax
call dword [edx + 0x24]
mov dword [esp + 0x20], eax
mov eax, dword [ebx + 0x1d4]
shr eax, 8
and eax, 1
lea ecx, [eax*8]
sub ecx, eax
shl ecx, 5
cmp dword [ecx + ebx + 8], 0
lea eax, [ecx + ebx + 8]
je 0xfbb3d
mov edx, esi
or edx, dword [esp + 0x14]
je 0xfba15
mov edx, 1
jmp 0xfba17
xor edx, edx
mov ecx, dword [esp + 0xec]
or ecx, 0x8000000
push ecx
mov ecx, dword [esp + 0x30]
push ecx
mov ecx, dword [esp + 0x30]
mov eax, dword [eax]
push ecx
mov ecx, dword [ebp + 0x98]
mov esi, dword [eax]
push ecx
mov ecx, dword [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x24]
push ecx
push edx
lea edx, [esp + 0xac]
push edx
mov edx, dword [ebp + 0x7c]
lea ecx, [esp + 0xc0]
push ecx
mov ecx, dword [edx + edi*4]
push ecx
mov ecx, eax
call dword [esi + 0x24]
jmp 0xfbb3d
mov edx, dword [esp + 0x10]
or edx, dword [esp + 0x14]
mov dword [esp + 0x1c], 1
jne 0xfba80
mov dword [esp + 0x1c], 0
push dword [esp + 0xec]
mov edx, dword [ebp + 0x98]
push dword [esp + 0x30]
mov ecx, dword [ebp + 8]
push dword [esp + 0x30]
mov eax, dword [ecx]
push edx
push dword [esp + 0x24]
mov edx, dword [esp + 0x30]
push dword [esp + 0x24]
lea esi, [ebp + 0x38]
push edx
push esi
lea edx, [esp + 0x7c]
push edx
mov edx, dword [ebp + 0x7c]
mov edx, dword [edx + edi*4]
push edx
call dword [eax + 0x24]
mov dword [esp + 0x20], eax
mov eax, dword [ebx + 0x1d4]
test al, 0x40
je 0xfbb3d
shr eax, 8
and eax, 1
lea ecx, [eax*8]
sub ecx, eax
shl ecx, 5
cmp dword [ecx + ebx + 8], 0
lea eax, [ecx + ebx + 8]
je 0xfbb3d
mov edx, dword [esp + 0x10]
or edx, dword [esp + 0x14]
mov dword [esp + 0x1c], 1
jne 0xfbb00
mov dword [esp + 0x1c], 0
mov ecx, dword [eax]
mov eax, dword [esp + 0xec]
or eax, 0x8000000
push eax
push dword [esp + 0x30]
mov eax, dword [ebp + 0x98]
push dword [esp + 0x30]
mov edx, dword [ecx]
push eax
push dword [esp + 0x24]
mov eax, dword [esp + 0x30]
push dword [esp + 0x24]
push eax
push esi
lea eax, [esp + 0x7c]
push eax
mov eax, dword [ebp + 0x7c]
mov eax, dword [eax + edi*4]
push eax
call dword [edx + 0x24]
mov eax, dword [esp + 0x20]
test eax, eax
jne 0xfbb60
lea eax, [esp + 0x6c]
call fcn.00095b90
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xd0
ret 0x1c
mov dword [ebp + 0x94], eax
mov eax, dword [esp + 0xe8]
and dword [eax + 0x234], 0xfffffffc
mov dword [eax + 0x240], 0
or dword [ebp + 0x14], 2
mov dword [ebp + 0x90], edi
add dword [ebx + 0x1e4], 1
add ebx, 0x1f0
push ebx
call sub.WIN32K.SYS_EngQueryPerformanceCounter
mov eax, dword [0x4e73e0]
test byte [eax + 0x2484], 0x20
je 0xfbbb1
add eax, 8
call fcn.0006a0c0
cmp dword [esp + 0x70], 0
je 0xfbbd2
push 0
push 0
push 0
jmp 0xfbbc9
cmp dword [esp + 0x70], edi
je 0xfbbd2
push edi
push edi
push edi
push 2
push 0x47
call fcn.0008dca0
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0xd0
ret 0x1c