Function at 0x7744eede
Capabilities:
Access peb ldr_data

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push ecx
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
push 4
mov dword [ebp - 4], edx
mov edi, ecx
lea eax, [esi + 0x18]
mov dword [esi + 0x10], eax
mov eax, dword [ebp + 0xc]
mov dword [esi + 0x14], eax
add esi, 0xfffffff8
pop eax
mov word [esi], ax
mov eax, edx
mov word [esi + 2], 1
mov byte [esi + 7], 3
mov edx, dword [eax + 0x18]
cmp edx, eax
jne 0x7744eff7
xor bl, bl
cmp dword [0x775384ac], 1
mov byte [esi + 6], bl
jge 0x774ae533
cmp dword [ebp + 0x10], esi
je 0x7744ef3a
mov ax, word [edi + 0x54]
mov word [esi + 4], ax
cmp dword [edi + 0x4c], 0
je 0x7744ef50
mov al, byte [esi + 1]
xor al, byte [esi + 2]
xor al, byte [esi]
mov byte [esi + 3], al
mov eax, dword [edi + 0x50]
xor dword [esi], eax
mov ebx, dword [ebp + 8]
mov edx, dword [ebx + 0x14]
test edx, edx
je 0x7744ef84
mov ecx, edi
call fcn.7744f090
mov ecx, dword [eax + 4]
cmp dword [ecx], eax
jne 0x774ae588
mov dword [ebx], eax
mov dword [ebx + 4], ecx
mov dword [ecx], ebx
mov dword [eax + 4], ebx
mov edx, dword [edi + 0xb8]
test edx, edx
jne 0x7744f064
mov al, byte [esi + 6]
test al, al
jne 0x7744f018
mov ecx, edi
add ecx, 0x38
lea eax, [ebx + 8]
mov edx, dword [ecx]
cmp dword [edx + 4], ecx
jne 0x774ae59e
mov dword [eax], edx
mov dword [eax + 4], ecx
mov dword [edx + 4], eax
mov dword [ecx], eax
mov edx, dword [ebp - 4]
inc dword [edx + 0x30]
mov eax, dword [ebx + 0x14]
shr eax, 0xc
add dword [edx + 0x2c], eax
mov eax, dword [ebx + 0x14]
sub dword [edi + 0x1e8], eax
inc dword [edi + 0x1f8]
cmp dword [edi + 0x1f8], 0xa
ja 0x7744f033
mov eax, dword [ebx + 0x14]
cmp eax, 0x7f000
jb 0x7744efe3
add dword [edi + 0x1ec], eax
sub esi, dword [ebp + 0x10]
mov eax, dword [ebp + 0x14]
sar esi, 3
pop edi
mov dword [eax], esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov ebx, esi
sub ebx, eax
shr ebx, 0x10
inc ebx
test ebx, ebx
jle 0x774ae520
cmp ebx, 0xfe
jl 0x7744ef1d
jmp 0x774ae520
movzx eax, al
mov ecx, esi
shl eax, 0x10
and ecx, 0xffff0000
sub ecx, eax
add ecx, 0x10000
jmp 0x7744ef91
cmp dword [edi + 0xb8], 0
jne 0x7744efd3
mov eax, dword [edi + 0x40]
and al, 3
cmp al, 2
sete cl
test byte [0x77538724], 1
sete al
test al, cl
je 0x7744efd3
or dword [edi + 0x48], 0x10000000
jmp 0x7744efd3
mov eax, dword [ebx + 0x14]
shr eax, 0xc
cmp eax, dword [edx + 4]
jb 0x7744f079
mov ecx, dword [edx]
test ecx, ecx
jne 0x7744f08c
mov eax, dword [edx + 4]
dec eax
push dword [ebx + 0x14]
mov ecx, edi
push eax
push ebx
push 0
call fcn.7744e8ff
jmp 0x7744ef84
mov edx, ecx
jmp 0x7744f06a
push 0
push 0
push eax
push esi
push 3
pop ecx
call fcn.774a6033
jmp 0x7744ef1d
cmp dword [ebp + 0x10], esi
jbe 0x7744ef30
mov eax, dword fs:[0x30]
cmp dword [eax + 0xc], 0
je 0x774ae565
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
add eax, 0x2c
push eax
push 0x77424db0
call fcn.7744afb0
pop ecx
jmp 0x774ae56f
push 0x77424dbc
call fcn.7744afb0
pop ecx
push 0x7743c804
call fcn.7744afb0
pop ecx
xor ecx, ecx
inc ecx
call fcn.774a6019
jmp 0x7744ef2d
push 0
push dword [ecx]
xor edx, edx
push 0
push eax
push 0xc
pop ecx
call fcn.774a6033
jmp 0x7744ef76
push 0
push 0
push dword [edx + 4]
xor edx, edx
push ecx
push 0xc
pop ecx
call fcn.774a6033
jmp 0x7744efac