Function at 0x75e19161
Capabilities:
Access peb ldr_data
Check for peb beingdebugged flag

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
mov dword [ebp - 0xc], ecx
mov eax, edx
xor edx, edx
mov dword [ebp - 0x10], eax
xor ecx, ecx
mov dword [ebp - 8], edx
push esi
inc ecx
mov dword [ebp - 4], edx
mov ebx, edx
mov esi, edx
push edi
mov edi, edx
test eax, eax
je 0x75e193f0
cmp word [eax], dx
je 0x75e193f0
push str.dbRegistryDefaultName
push eax
call dword [0x75e21e78]
pop ecx
pop ecx
test eax, eax
jne 0x75e191b5
push esi
lea eax, [ebp - 0x18]
push eax
call dword [0x75e21ed4]
jmp 0x75e191d3
mov edx, dword [ebp - 0x10]
lea ecx, [ebp - 8]
call fcn.75db918f
test eax, eax
js 0x75e19235
push dword [ebp - 8]
lea eax, [ebp - 0x18]
push eax
call dword [0x75e21ed4]
xor esi, esi
lea eax, [ebp - 4]
push eax
push esi
push esi
push 1
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0xc]
call dword [0x75e22190]
test eax, eax
jns 0x75e19202
cmp eax, 0x80000005
je 0x75e19202
cmp eax, 0xc0000023
je 0x75e19202
xor edi, edi
inc edi
jmp 0x75e19427
mov eax, dword fs:[0x30]
push dword [ebp - 4]
push 8
push dword [eax + 0x18]
call dword [0x75e221e0]
mov esi, eax
test esi, esi
jne 0x75e1923c
push str.Failed_to_allocate_memory
push 0x4a5
push str.SdbpCheckMatchingRegistryValue
push 1
call fcn.75e0e6b8
add esp, 0x10
xor esi, esi
jmp 0x75e19427
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
lea eax, [ebp - 0x18]
push esi
push 1
push eax
push dword [ebp - 0xc]
call dword [0x75e22190]
test eax, eax
jns 0x75e19275
push str.Failed_to_read_value
push 0x4b0
push str.SdbpCheckMatchingRegistryValue
push 1
call fcn.75e0e6b8
add esp, 0x10
jmp 0x75e193fb
mov eax, dword [esi + 4]
cmp dword [ebp + 8], ebx
jne 0x75e1928c
mov eax, dword [ebp + 0x24]
xor ecx, ecx
inc ecx
mov edi, ecx
mov dword [eax], ecx
jmp 0x75e193fb
cmp eax, dword [ebp + 8]
je 0x75e19299
xor edi, edi
inc edi
jmp 0x75e193fb
mov ecx, dword [esi + 8]
add ecx, esi
mov dword [ebp - 0xc], ecx
sub eax, 1
je 0x75e19393
sub eax, 1
je 0x75e19393
sub eax, 1
je 0x75e19376
sub eax, 1
je 0x75e1936a
sub eax, 3
je 0x75e192ed
sub eax, 4
je 0x75e192db
push str.Unknown_registry_value_data_type
push 0x537
jmp 0x75e19261
mov eax, dword [ebp + 0x14]
cmp eax, dword [ecx]
jne 0x75e19291
mov eax, dword [ebp + 0x18]
cmp eax, dword [ecx + 4]
jmp 0x75e1936f
mov eax, dword fs:[0x30]
mov ecx, dword [eax + 0x18]
mov eax, dword [esi + 0xc]
add eax, 2
push eax
push 8
push ecx
call dword [0x75e221e0]
mov ebx, eax
test ebx, ebx
jne 0x75e1931b
push str.Failed_to_allocate_memory
push 0x4ec
jmp 0x75e19261
push dword [esi + 0xc]
push dword [ebp - 0xc]
push ebx
call fcn.75dc742d
mov eax, dword [esi + 0xc]
xor ecx, ecx
shr eax, 1
add esp, 0xc
mov word [ebx + eax*2], cx
mov ecx, ebx
mov eax, dword [esi + 0xc]
and eax, 0xfffffffe
add eax, ebx
cmp ebx, eax
jae 0x75e19366
xor edi, edi
lea eax, [ecx + 2]
cmp word [ecx], di
jne 0x75e19358
cmp word [eax], di
je 0x75e19366
push 0x3b
pop edx
mov word [ecx], dx
mov ecx, eax
mov eax, dword [esi + 0xc]
and eax, 0xfffffffe
add eax, ebx
cmp ecx, eax
jb 0x75e19345
push ecx
push ecx
jmp 0x75e193db
mov eax, dword [ebp + 0x10]
cmp eax, dword [ecx]
je 0x75e193ed
jmp 0x75e19291
mov eax, dword [ebp + 0x20]
cmp eax, dword [esi + 0xc]
jne 0x75e19291
push eax
push ecx
push dword [ebp + 0x1c]
call fcn.75dc7415
add esp, 0xc
test eax, eax
jmp 0x75e1936f
mov eax, dword fs:[0x30]
mov ecx, dword [eax + 0x18]
mov eax, dword [esi + 0xc]
add eax, 2
push eax
push 8
push ecx
call dword [0x75e221e0]
mov ebx, eax
test ebx, ebx
jne 0x75e193c1
push str.Failed_to_allocate_memory
push 0x4d5
jmp 0x75e19261
push dword [esi + 0xc]
push dword [ebp - 0xc]
push ebx
call fcn.75dc742d
mov eax, dword [esi + 0xc]
xor ecx, ecx
shr eax, 1
add esp, 4
mov word [ebx + eax*2], cx
mov ecx, dword [ebp + 0xc]
mov edx, ebx
call fcn.75dc4c61
test eax, eax
je 0x75e19291
xor ecx, ecx
inc ecx
mov eax, dword [ebp + 0x24]
mov dword [eax], ecx
mov edi, ecx
test esi, esi
je 0x75e19410
mov eax, dword fs:[0x30]
push esi
xor esi, esi
push esi
push dword [eax + 0x18]
call dword [0x75e221d0]
jmp 0x75e19412
xor esi, esi
test ebx, ebx
je 0x75e19427
mov eax, dword fs:[0x30]
push ebx
push esi
push dword [eax + 0x18]
call dword [0x75e221d0]
cmp dword [ebp - 8], 0
je 0x75e19441
push dword [ebp - 8]
mov ecx, dword fs:[0x30]
push esi
push dword [ecx + 0x18]
call dword [0x75e221d0]
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret 0x20