Function at 0x19deede
Capabilities:
Access peb ldr_data

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push ecx
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
push 4
mov dword [ebp - 4], edx
mov edi, ecx
lea eax, [esi + 0x18]
mov dword [esi + 0x10], eax
mov eax, dword [ebp + 0xc]
mov dword [esi + 0x14], eax
add esi, 0xfffffff8
pop eax
mov word [esi], ax
mov eax, edx
mov word [esi + 2], 1
mov byte [esi + 7], 3
mov edx, dword [eax + 0x18]
cmp edx, eax
jne 0x19deff7
xor bl, bl
cmp dword [0x1ac84ac], 1
mov byte [esi + 6], bl
jge 0x1a3e533
cmp dword [ebp + 0x10], esi
je 0x19def3a
mov ax, word [edi + 0x54]
mov word [esi + 4], ax
cmp dword [edi + 0x4c], 0
je 0x19def50
mov al, byte [esi + 1]
xor al, byte [esi + 2]
xor al, byte [esi]
mov byte [esi + 3], al
mov eax, dword [edi + 0x50]
xor dword [esi], eax
mov ebx, dword [ebp + 8]
mov edx, dword [ebx + 0x14]
test edx, edx
je 0x19def84
mov ecx, edi
call fcn.019df090
mov ecx, dword [eax + 4]
cmp dword [ecx], eax
jne 0x1a3e588
mov dword [ebx], eax
mov dword [ebx + 4], ecx
mov dword [ecx], ebx
mov dword [eax + 4], ebx
mov edx, dword [edi + 0xb8]
test edx, edx
jne 0x19df064
mov al, byte [esi + 6]
test al, al
jne 0x19df018
mov ecx, edi
add ecx, 0x38
lea eax, [ebx + 8]
mov edx, dword [ecx]
cmp dword [edx + 4], ecx
jne 0x1a3e59e
mov dword [eax], edx
mov dword [eax + 4], ecx
mov dword [edx + 4], eax
mov dword [ecx], eax
mov edx, dword [ebp - 4]
inc dword [edx + 0x30]
mov eax, dword [ebx + 0x14]
shr eax, 0xc
add dword [edx + 0x2c], eax
mov eax, dword [ebx + 0x14]
sub dword [edi + 0x1e8], eax
inc dword [edi + 0x1f8]
cmp dword [edi + 0x1f8], 0xa
ja 0x19df033
mov eax, dword [ebx + 0x14]
cmp eax, 0x7f000
jb 0x19defe3
add dword [edi + 0x1ec], eax
sub esi, dword [ebp + 0x10]
mov eax, dword [ebp + 0x14]
sar esi, 3
pop edi
mov dword [eax], esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov ebx, esi
sub ebx, eax
shr ebx, 0x10
inc ebx
test ebx, ebx
jle 0x1a3e520
cmp ebx, 0xfe
jl 0x19def1d
jmp 0x1a3e520
movzx eax, al
mov ecx, esi
shl eax, 0x10
and ecx, 0xffff0000
sub ecx, eax
add ecx, 0x10000
jmp 0x19def91
cmp dword [edi + 0xb8], 0
jne 0x19defd3
mov eax, dword [edi + 0x40]
and al, 3
cmp al, 2
sete cl
test byte [0x1ac8724], 1
sete al
test al, cl
je 0x19defd3
or dword [edi + 0x48], 0x10000000
jmp 0x19defd3
mov eax, dword [ebx + 0x14]
shr eax, 0xc
cmp eax, dword [edx + 4]
jb 0x19df079
mov ecx, dword [edx]
test ecx, ecx
jne 0x19df08c
mov eax, dword [edx + 4]
dec eax
push dword [ebx + 0x14]
mov ecx, edi
push eax
push ebx
push 0
call fcn.019de8ff
jmp 0x19def84
mov edx, ecx
jmp 0x19df06a
push 0
push 0
push eax
push esi
push 3
pop ecx
call fcn.01a36033
jmp 0x19def1d
cmp dword [ebp + 0x10], esi
jbe 0x19def30
mov eax, dword fs:[0x30]
cmp dword [eax + 0xc], 0
je 0x1a3e565
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
add eax, 0x2c
push eax
push 0x19b4db0
call fcn.019dafb0
pop ecx
jmp 0x1a3e56f
push 0x19b4dbc
call fcn.019dafb0
pop ecx
push 0x19cc804
call fcn.019dafb0
pop ecx
xor ecx, ecx
inc ecx
call fcn.01a36019
jmp 0x19def2d
push 0
push dword [ecx]
xor edx, edx
push 0
push eax
push 0xc
pop ecx
call fcn.01a36033
jmp 0x19def76
push 0
push 0
push dword [edx + 4]
xor edx, edx
push ecx
push 0xc
pop ecx
call fcn.01a36033
jmp 0x19defac