Function at 0x75dc4fc4
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x54
mov eax, dword [0x75e50140]
xor eax, esp
mov dword [esp + 0x50], eax
push ebx
push esi
push edi
mov eax, edx
lea edi, [esp + 0x44]
mov edx, ecx
mov dword [esp + 0x14], eax
push 5
pop ecx
mov esi, str.AppPatch_
mov dword [esp + 0x40], edx
rep movsd dword es:[edi], dword [esi]
xor ecx, ecx
mov dword [esp + 0x24], ecx
mov ebx, ecx
mov dword [esp + 0x10], ecx
movsw word es:[edi], word [esi]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x30], ecx
mov dword [esp + 0x34], ecx
mov dword [esp + 0x38], ecx
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x28], ecx
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x1c], ecx
test edx, edx
jne 0x75dc5037
mov eax, 0xc00000ef
jmp 0x75dc539b
mov dword [edx], ecx
mov esi, 0xc0000034
mov ecx, eax
call fcn.75dc42ca
mov ecx, eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x20], ecx
cmp ecx, eax
je 0x75dc5399
lea edi, [ecx - 4]
jmp 0x75dc5085
movzx ecx, word [edi]
cmp ecx, 0x5c
je 0x75dc5069
cmp ecx, 0x2f
jne 0x75dc5082
push 0xa
lea eax, [esp + 0x48]
push eax
push edi
call dword [0x75e21e54]
add esp, 0xc
test eax, eax
je 0x75dc508e
mov eax, dword [esp + 0x14]
sub edi, 2
cmp edi, eax
jae 0x75dc505c
jmp 0x75dc5399
push ecx
push ecx
push 0x80000100
mov edx, str.SoftwareMicrosoftWindows_NTCurrentVersionAppCompatFlagsSdbUpdates
lea ecx, [esp + 0x30]
call fcn.75e0ec0b
mov esi, eax
test esi, esi
jns 0x75dc50c5
cmp esi, 0xc0000034
je 0x75dc533c
push esi
push str.AslRegistryGetKey_failed_to_open_SdbUpdates_key___x_
push 0x5d8
jmp 0x75dc532d
mov edi, dword [esp + 0x20]
lea ecx, [esp + 0x10]
mov edx, dword [esp + 0x24]
push edi
call fcn.75dc4102
mov esi, eax
test esi, esi
js 0x75dc533c
push edi
push dword [esp + 0x14]
call dword [0x75e21e78]
pop ecx
pop ecx
test eax, eax
jne 0x75dc50fc
mov esi, 0xc0000034
jmp 0x75dc533c
mov edi, dword [esp + 0x14]
lea eax, [esp + 0xc]
push eax
mov ecx, edi
call fcn.75db957f
mov esi, eax
test esi, esi
jns 0x75dc5122
push esi
push str.RtlStringCchLengthW_failed___x_
push 0x5ee
jmp 0x75dc532d
mov ecx, dword [esp + 0x20]
lea eax, [esp + 0x18]
push eax
call fcn.75db957f
mov esi, eax
test esi, esi
jns 0x75dc5146
push esi
push str.RtlStringCchLengthW_failed___x_
push 0x5f5
jmp 0x75dc532d
mov eax, dword [esp + 0xc]
cmp eax, dword [esp + 0x18]
jb 0x75dc531d
sub eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], eax
lea eax, [esp + 0x18]
push eax
call fcn.75db957f
mov esi, eax
test esi, esi
jns 0x75dc5184
push esi
push str.RtlStringCchLengthW_failed___x_
push 0x606
jmp 0x75dc532d
mov edx, dword [esp + 0x18]
lea eax, [esp + 0xc]
mov ecx, dword [esp + 0x14]
push eax
call fcn.75e0f2e4
mov esi, eax
test esi, esi
jns 0x75dc51ac
push esi
push str.RtlSizeTAdd_failed___x_
push 0x60d
jmp 0x75dc532d
mov ecx, dword [esp + 0xc]
lea eax, [esp + 0xc]
xor edx, edx
push eax
inc edx
call fcn.75e0f2e4
mov esi, eax
test esi, esi
jns 0x75dc51d3
push esi
push str.RtlSizeTAdd_failed___x_
push 0x614
jmp 0x75dc532d
mov eax, dword fs:[0x30]
mov esi, dword [esp + 0xc]
mov ecx, dword [eax + 0x18]
lea eax, [esi + esi]
push eax
push 8
push ecx
call dword [0x75e221e0]
mov ebx, eax
test ebx, ebx
jne 0x75dc51fd
mov esi, 0xc0000017
jmp 0x75dc533c
push dword [esp + 0x14]
mov edx, esi
mov ecx, ebx
push edi
call fcn.75dc43c6
mov esi, eax
test esi, esi
jns 0x75dc5221
push esi
push str.RtlStringCchCopyNW_failed_to_copy_path___x_
push 0x623
jmp 0x75dc532d
push dword [esp + 0x10]
mov edx, dword [esp + 0x10]
mov ecx, ebx
call fcn.75dcf001
mov esi, eax
test esi, esi
jns 0x75dc5246
push esi
push str.RtlStringCchCatW_failed_to_cat_file_to_path___x_
push 0x62b
jmp 0x75dc532d
push ecx
mov edx, ebx
lea ecx, [esp + 0x34]
call fcn.75dc54d4
mov esi, eax
test esi, esi
jns 0x75dc5268
push esi
push str.Failed_to_check_timestamp___x_
push 0x635
jmp 0x75dc532d
push ecx
mov edx, edi
lea ecx, [esp + 0x3c]
call fcn.75dc54d4
mov esi, eax
test esi, esi
jns 0x75dc528a
push esi
push str.Failed_to_check_timestamp___x_
push 0x63f
jmp 0x75dc532d
mov edx, dword [esp + 0x20]
lea ecx, [esp + 0x1c]
call fcn.75dc56ce
mov esi, eax
cmp esi, 0xc0000034
jne 0x75dc52a7
xor eax, eax
xor ecx, ecx
jmp 0x75dc52e1
test esi, esi
jns 0x75dc52b8
push esi
push str.Failed_to_get_manifested_stub___x_
push 0x64d
jmp 0x75dc532d
mov edx, dword [esp + 0x1c]
push ecx
lea ecx, [esp + 0x2c]
call fcn.75dc54d4
mov esi, eax
test esi, esi
jns 0x75dc52d9
push esi
push str.Failed_to_check_timestamp___x_
push 0x657
jmp 0x75dc532d
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x28]
mov esi, dword [esp + 0x34]
cmp esi, dword [esp + 0x3c]
jb 0x75dc50f2
mov edx, dword [esp + 0x30]
ja 0x75dc52ff
cmp edx, dword [esp + 0x38]
jb 0x75dc50f2
cmp esi, ecx
jb 0x75dc50f2
ja 0x75dc5311
cmp edx, eax
jb 0x75dc50f2
mov eax, dword [esp + 0x40]
mov dword [eax], ebx
xor ebx, ebx
xor esi, esi
jmp 0x75dc533c
mov esi, 0xc0000095
push esi
push str.RtlSizeTSub_failed___x_
push 0x5fc
push str.SdbGetMergeRedirectPath
push 1
call fcn.75e0e6b8
add esp, 0x14
mov eax, dword [esp + 0x24]
test eax, eax
je 0x75dc5350
cmp eax, reloc.ntdll.dll_NtClose
je 0x75dc5350
push eax
call dword [0x75e22180]
cmp dword [esp + 0x10], 0
je 0x75dc536a
mov ecx, dword fs:[0x30]
mov edx, dword [esp + 0x10]
mov ecx, dword [ecx + 0x18]
call fcn.75db9817
test ebx, ebx
je 0x75dc537f
mov ecx, dword fs:[0x30]
mov edx, ebx
mov ecx, dword [ecx + 0x18]
call fcn.75db9817
cmp dword [esp + 0x1c], 0
je 0x75dc5399
mov ecx, dword fs:[0x30]
mov edx, dword [esp + 0x1c]
mov ecx, dword [ecx + 0x18]
call fcn.75db9817
mov eax, esi
mov ecx, dword [esp + 0x5c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.75dbdd75
mov esp, ebp
pop ebp
ret