Function at 0x7dd89e93
Capabilities:
Map section object

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
mov ebx, dword [ebp + 0x40]
push esi
xor esi, esi
xor eax, eax
push edi
mov edi, dword [ebp + 0x34]
mov dword [ebp + 0x40], esi
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x18], esi
mov dword [ebp + 0x34], esi
mov dword [ebp - 8], esi
mov dword [ebp - 0x14], esi
mov dword [ebp - 4], esi
mov word [ebp - 0x10], ax
mov word [ebp - 0xe], ax
cmp dword [ebp + 0x1c], esi
je 0x7dd999d2
cmp dword [ebp + 0x20], esi
je 0x7dd999d2
cmp dword [ebp + 0x24], esi
je 0x7dd999d2
mov edx, dword [ebp + 0x28]
cmp edx, esi
je 0x7dd999d2
cmp dword [ebp + 0x2c], esi
je 0x7dd999d2
cmp dword [ebp + 0x30], esi
je 0x7dd999d2
cmp edi, esi
je 0x7dd999d2
mov ecx, dword [ebp + 0x38]
cmp ecx, esi
je 0x7dd999d2
mov eax, dword [ebp + 0x3c]
cmp eax, esi
je 0x7dd999d2
cmp ebx, esi
je 0x7dd999d2
mov dword [edx], esi
mov edx, dword [ebp + 0x2c]
mov dword [edx], esi
mov edx, dword [ebp + 0x30]
mov dword [edx], esi
mov dword [edi], esi
mov dword [edi + 4], esi
mov dword [ecx], esi
mov dword [eax], esi
mov eax, dword [ebp + 0x1c]
mov dword [ebx], 1
test dword [eax], 0x100
jne 0x7dd999b0
mov eax, dword [ebp + 0x20]
mov dword [eax], esi
mov eax, dword [ebp + 0x24]
mov dword [eax], esi
call fcn.7dd817e3
test eax, eax
jne 0x7dd8a020
lea eax, [ebp - 0x1c]
push eax
call fcn.7dd8a02e
cmp eax, esi
jl 0x7dd8a022
lea eax, [ebp + 0x14]
push eax
lea eax, [ebp + 0x34]
push eax
push dword [ebp + 0x14]
call fcn.7dd823dd
test eax, eax
jge 0x7dd999c5
lea eax, [ebp - 0x10]
mov dword [ebp + 0x34], eax
mov eax, dword [ebp + 0x3c]
mov dword [eax], esi
cmp dword [ebp + 8], esi
je 0x7dd89fc0
push 2
push esi
push 2
lea eax, [ebp - 4]
push eax
push esi
push esi
push esi
lea eax, [ebp + 0x40]
push eax
push 0xffffffffffffffff
push dword [ebp + 8]
call dword [sym.imp.ntdll.dll_NtMapViewOfSection]
test eax, eax
jl 0x7dda797e
push dword [ebp + 0x38]
lea eax, [ebp - 0x14]
push edi
push dword [ebp + 0x30]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp + 0x1c]
push dword [ebp + 0x18]
push dword [ebp + 0x34]
push dword [ebp + 0x10]
push dword [ebp - 4]
push dword [ebp + 0x40]
push dword [ebp + 0xc]
call dword [ebp - 0x1c]
mov dword [ebx], eax
mov eax, dword [ebp - 8]
cmp eax, esi
je 0x7dd8a005
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp + 0x20]
mov dword [edx], ecx
mov ecx, dword [ebp + 0x24]
mov dword [ecx], eax
mov eax, dword [ebp - 0x14]
cmp eax, esi
jne 0x7dda7989
cmp dword [ebp + 0x40], esi
je 0x7dd8a020
push dword [ebp + 0x40]
push 0xffffffffffffffff
call dword [sym.imp.ntdll.dll_NtUnmapViewOfSection]
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 0x3c
mov eax, dword [ebp + 0x20]
mov eax, dword [eax]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp + 0x24]
mov eax, dword [eax]
mov dword [ebp - 8], eax
jmp 0x7dd89f4d
mov eax, dword [ebp + 0x34]
mov ecx, dword [ebp + 0x3c]
mov dword [ecx], eax
jmp 0x7dd89f98
mov eax, 0xc000000d
jmp 0x7dd8a022
mov dword [ebp + 0x40], esi
mov dword [ebp - 4], esi
jmp 0x7dd89fc0
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp + 0x28]
mov dword [edx], ecx
mov ecx, dword [ebp + 0x2c]
mov dword [ecx], eax
jmp 0x7dd8a010