Function at 0x7de9bb20
Capabilities:
Access peb ldr_data

Disassembly:
push 0x70
push 0x7de9d460
call 0x7de63eb4
mov dword [ebp - 0x1c], 0xc0000001
mov eax, dword [0x7df700b4]
test eax, eax
jne 0x7deca68e
xor edi, edi
mov eax, dword [ebp + 0x18]
cmp eax, edi
jne 0x7de9bd52
mov dword [ebp - 0x24], edi
mov ecx, dword [ebp + 8]
cmp ecx, edi
je 0x7deca792
cmp dword [ebp + 0x10], edi
je 0x7deca792
cmp dword [ebp + 0xc], edi
je 0x7deca792
test dword [ebp - 0x24], 0xfffffffc
jne 0x7deca792
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0xc]
cmp byte [eax + 0x28], 0
jne 0x7deca792
mov dword [ecx], edi
mov eax, dword [0x7df700b0]
add eax, 0x80000
mov ecx, dword fs:[0x18]
push 0x80
or eax, 8
push eax
mov eax, dword [ecx + 0x30]
push dword [eax + 0x18]
call 0x7de64026
mov esi, eax
mov dword [ebp - 0x20], esi
mov dword [ebp - 4], edi
xor ebx, ebx
inc ebx
mov dword [ebp - 0x2c], ebx
cmp esi, edi
je 0x7deca6cf
mov eax, dword [ebp + 4]
mov dword [esi + 0x64], eax
lea edi, [esi + 0x10]
push 0x7ded481c
push dword [ebp - 0x24]
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push edi
call fcn.7de8f89b
mov dword [ebp - 0x1c], eax
test eax, eax
jl 0x7de9bd6b
mov dword [ebp - 4], ebx
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp + 0x10]
mov dword [esi + 0x40], eax
xor eax, eax
cmp byte [ebp + 0x1c], al
setne al
xor eax, dword [esi + 0x78]
and eax, ebx
xor dword [esi + 0x78], eax
mov ebx, dword [ebp + 0xc]
mov dword [esi + 0x70], ebx
mov eax, dword [esi + 0x54]
mov dword [esi], 0x7ded4908
test eax, eax
je 0x7de9bc32
lea ecx, [esi + 8]
push ecx
lea ecx, [esi + 4]
push ecx
push eax
call 0x7de687e0
push dword [esi + 0x54]
push esi
push ebx
call fcn.7de9ba35
mov dword [ebp - 0x1c], eax
xor ebx, ebx
cmp eax, ebx
jl 0x7de9bc5e
mov dword [ebp - 0x1c], ebx
mov eax, dword [ebp + 0x18]
cmp eax, ebx
je 0x7de9bc55
mov eax, dword [eax + 0x18]
mov dword [edi + 0x10], eax
cmp dword [edi + 8], ebx
jne 0x7deca6db
mov dword [ebp - 4], ebx
mov dword [ebp - 0x28], 0
call fcn.7de9ba1b
mov dword [ebp - 4], 0xfffffffe
mov dword [ebp - 0x2c], 0
call fcn.7de9bcb4
cmp dword [ebp - 0x1c], edi
jl 0x7de9bc97
mov eax, dword [ebp + 8]
mov dword [eax], esi
mov eax, dword [0x7df700b4]
test eax, eax
jne 0x7deca6f0
mov eax, dword [0x7df700b4]
test eax, eax
jne 0x7deca725
mov eax, dword [ebp - 0x1c]
call 0x7de63ef9
ret 0x18
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x24], eax
jmp 0x7de9bb50
xor edi, edi
jmp 0x7de9bc6d
or eax, 0xffffffff
jmp 0x7deca1a5
mov eax, esi
pop edi
pop esi
pop ebx
pop ebp
ret 4
and dl, byte [ebp + 0x458d0003]
or byte [eax + 0x6a], dl
push ebp
push esi
call fcn.7dec3393
test eax, eax
jl 0x7df03bea
push edi
push dword [ebp + 8]
push esi
push dword [ebp + 0x14]
call fcn.7dec351c
pop edi
pop esi
pop ebx
pop ebp
ret 0x10
mov ebp, esp
mov ecx, dword [0x7df72028]
push ebx
push esi
push edi
movzx edi, word [ecx + 0xa]
xor ebx, ebx
dec edi
js 0x7dec780a
mov bh, 0x79
or dh, byte [ebx]
fisttp dword [edi + 0xf]
mov byte [ebx], ah
sar edi, 1
dec dword [ebp + 0x2b993b04]
ret 0xf08b
lea eax, [ebx + edi]
cdq
sub eax, edx
mov esi, eax
mov eax, dword [ecx + 0x18]
mov ecx, dword [ecx + 0x1c]
sar esi, 1
inc ecx
sbb byte [ebx - 0x12ee3b7], cl
movzx eax, word [eax + esi*8]
lea eax, [ecx + eax*2]
push 1
add eax, 2
push eax
push dword [ebp + 8]
call fcn.7deca16f
test eax, eax
je 0x7deca1a3
jl 0x7deca729
lea ebx, [esi + 1]
cmp ebx, edi
jg 0x7dec780a
mov ecx, dword [0x7df72028]
jmp 0x7deca6e7
idiv dword [ebp - 0x15]
mov esi, 0xebff7e8d
jmp 0x7deca6b4
lea edi, [esi - 1]
jmp 0x7deca719
add byte [eax], al
add byte [eax - 0x3fffffcc], bh
jmp 0x7deca891
pop edi
pop esi
pop ebx
leave
ret 0x10
invalid