Function at 0x7dea7921
Capabilities:
Access peb ldr_data

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, dword [0x7df700b4]
sub esp, 0x50
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
mov esi, 0x7deb4168
test eax, eax
jne 0x7decf1b0
mov eax, dword [0x7df700b4]
mov edi, 0x7dec02f8
test eax, eax
jne 0x7decf1df
test ebx, ebx
je 0x7decf262
mov eax, dword [ebx + 0x50]
test eax, 0x30000
jne 0x7decf262
cmp dword [ebx + 4], 0x7dea2878
jne 0x7decf262
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0xc]
cmp byte [eax + 0x28], 0
jne 0x7decf262
mov eax, dword [0x7df700b4]
test eax, eax
jne 0x7decf20c
mov edi, dword [ebx + 0x20]
mov eax, dword [ebx + 0x24]
mov eax, dword [0x7df700b4]
test eax, eax
jne 0x7decf233
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret 4
mov eax, dword [0x7df700b0]
add eax, 0x180000
mov ecx, dword fs:[0x18]
push 0x68
or eax, 8
push eax
mov eax, dword [ecx + 0x30]
push dword [eax + 0x18]
call fcn.7dea1c26
mov esi, eax
mov dword [ebp - 0x20], esi
mov dword [ebp - 4], ebx
mov dword [ebp - 0x2c], edi
cmp esi, ebx
je 0x7df0b729
mov dword [esi], edi
mov dword [esi + 0x60], ebx
mov dword [esi + 0x64], ebx
lea eax, [esi + 4]
push eax
call fcn.7dea6842
mov dword [ebp - 0x1c], eax
cmp eax, ebx
jl 0x7dec9ca1
mov dword [ebp - 4], edi
mov dword [ebp - 0x28], edi
lea eax, [esi + 0x20]
push eax
push edi
call fcn.7dec9ce8
mov dword [ebp - 0x1c], eax
cmp eax, ebx
jl 0x7dec9c92
mov dword [ebp - 4], 2
mov dword [ebp - 0x24], edi
lea eax, [esi + 0x40]
push eax
push ebx
call fcn.7dec9ce8
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], edi
mov dword [ebp - 0x24], 0
call fcn.7dec9dd1
mov dword [ebp - 4], ebx
mov dword [ebp - 0x28], 0
call fcn.7dec9e11
mov dword [ebp - 4], 0xfffffffe
mov dword [ebp - 0x2c], 0
call fcn.7dec9de1
cmp dword [ebp - 0x1c], ebx
jl 0x7dec9cce
mov eax, dword [ebp + 8]
mov dword [eax], esi
mov eax, dword [0x7df700b4]
test eax, eax
jne 0x7df0b735
mov dword [ebp - 0x1c], ebx
mov eax, dword [0x7df700b4]
test eax, eax
jne 0x7df0b76a
mov eax, dword [ebp - 0x1c]
jmp 0x7decf1c8
jne 0x7dec9c08
mov eax, dword [0x7df700b4]
test eax, eax
jne 0x7df0b6f2
mov eax, 0xc0000194
call fcn.7dea1af9
ret 4
jg 0x7decf1e2
jne 0x7defa4d8
test ecx, esi
mov dl, 2
add byte [esi - 1], dl
jne 0x7decf203
push esi
push dword [ebp + 0x18]
push dword [ebp + 8]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
call fcn.7deb52d8
test byte [0x7ffe0389], 1
mov esi, eax
jne 0x7defa4ef
mov eax, esi
pop esi
pop ebp
ret 0x14
invalid
mov esi, ebx
test di, di
test edi, edi
je 0x7decf249
movzx ecx, di
cmp cx, dx
je 0x7decf255
inc esi
inc esi
movzx ecx, word [esi]
test cx, cx
jne 0x7decf23a
inc eax
inc eax
movzx edx, word [eax]
test dx, dx
jne 0x7decf230
xor eax, eax
pop edi
pop esi
pop ebx
pop ebp
ret
mov ebp, esp
push esi
mov esi, dword [ebp + 8]
lea eax, [edx + 0x101f]
mov ecx, 0xfffff000
push edi
and eax, ecx
lea edi, [edx + 0x28]
mov dword [esi], eax
cmp eax, edi
je 0x7dedb3b4
movzx eax, word [edx]
mov esi, dword [esi]
lea eax, [edx + eax*8 - 0x10]
and eax, ecx
cmp eax, esi
jbe 0x7decf6fe
mov ecx, dword [ebp + 0xc]
sub eax, esi
mov dword [ecx], eax
mov al, 1
pop edi
pop esi
pop ebp
ret 8
xor al, al
jmp 0x7decf29f
add eax, 0x1000
mov dword [esi], eax
jmp 0x7decf283
and al, 8
mov edx, dword [esp + 0x10]
mov dword [edx], eax
mov eax, 3
ret
int3
aas
add dword [eax], eax
mov eax, 0xce00013f
aas
add dword [eax], eax
aas
add byte [eax - 0x7ffffff7], al
add byte [eax], al
add byte [eax], al
xor byte [ecx + eax], bh
add byte [eax], al
add byte [eax], al
add byte [edx + 0x3c], bh
add dword [eax], eax
add byte [eax], al
add byte [eax], al
push edx
cmp al, 1
add byte [eax], al
add byte [eax], al
add byte [ebx + 0x7a695305], ah
outsd dx, dword gs:[esi]
push dx
jae 0x7df0b807
jne 0x7df0b80c
arpl word [ebp], sp
add bl, ch
add dword [edi + 0x65], eax
je 0x7df0b7e7
outsd dx, dword [esi]
insd dword es:[edi], dx
insd dword es:[edi], dx
popal
outsb dx, byte [esi]
dec esp
imul ebp, dword [esi + 0x65], 0x5ee0057
push esi
imul esi, dword [edx + 0x74], 0x416c6175
insb byte es:[edi], dx
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [eax], ax
add bl, al
add dword [esi + 0x72], eax
push edx
jae 0x7df0b839
jne 0x7df0b83e
arpl word [ebp], sp
add bl, bh
add ecx, dword [edi + ebp*2 + 0x63]
imul edx, dword [edx + 0x65], 0x73
outsd dx, dword [esi]
jne 0x7df0b84e
arpl word [ebp], sp
add bh, ah
add ecx, dword [edi + ebp*2 + 0x61]
push edx
jae 0x7df0b859
jne 0x7df0b85e
arpl word [ebp], sp
add byte [edx + 0x6e694601], ch
push edx
jae 0x7df0b869
jne 0x7df0b86e
arpl word [ebp + 0x57], sp
add byte [edx + 1], dh
inc ebp
js 0x7df0b86e
je 0x7df0b857
jb 0x7df0b878
arpl word [ebp + 0x73], sp
jae 0x7df0b80e
pop dword [edx]
inc edi
je 0x7df0b861
outsd dx, dword [esi]
jne 0x7df0b884
dec eax
popal
outsb dx, byte [esi]
insb byte es:[edi], dx
push edi
add byte [eax], al
dec ebx
inc ebp
push edx
dec esi
inc ebp
dec esp
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [eax], al
or dword [eax], eax
inc ebx
outsd dx, dword [esi]
insd dword es:[edi], dx
insd dword es:[edi], dx
popal
outsb dx, byte [esi]
dec esp
dec esp
imul ebp, dword [esi + 0x65], 0x72416f54
jbe 0x7df0b89b
outsd dx, dword [esi]
inc ecx
jb 0x7df0b8a9
jbe 0x7df0b89b
add byte [eax], al
push ebx
dec eax
inc ebp
dec esp
dec esp
insb byte es:[edi], dx
je 0x7df0b8c4
popal
insb byte es:[edi], dx
imul edi, dword [edx + 0x65], 0x6c6f0000
jp 0x7df0b8c5
add byte [edi + 0x6c], ch
insb byte es:[edi], dx
dec ecx