Function at 0x754a80
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x7e27b7
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
push esi
mov esi, dword [esp + 0x1c]
mov dword [esp + 8], esi
xor eax, eax
cmp esi, eax
mov dword [esp + 0x14], eax
je 0x754c5d
push ebx
mov ebx, dword [esp + 0x24]
push ebp
push edi
mov ecx, dword [ebx]
lea edi, [ebx + 8]
mov dword [esi], ecx
mov edx, dword [ebx + 4]
add esi, 4
mov dword [esp + 0x10], esi
mov dword [esi], edx
mov cl, byte [edi]
lea ebp, [esi + 4]
mov byte [ebp], cl
mov dword [ebp + 4], eax
mov dword [ebp + 8], eax
mov dword [ebp + 0xc], eax
mov ecx, dword [edi + 8]
mov edx, dword [0x7e565c]
mov eax, ecx
cmp edx, eax
mov dword [esp + 0x2c], eax
jae 0x754af3
mov dword [esp + 0x2c], edx
mov eax, edx
cmp ebp, edi
jne 0x754b10
push edx
push eax
mov ecx, ebp
call fcn.00404f50
push 0
push 0
mov ecx, ebp
call fcn.00404f50
jmp 0x754b9a
test eax, eax
jbe 0x754b58
cmp eax, ecx
jne 0x754b58
mov ecx, dword [edi + 4]
test ecx, ecx
jne 0x754b24
mov ecx, 0x7e5658
cmp byte [ecx - 1], 0xfe
jae 0x754b58
push 1
mov ecx, ebp
call fcn.00404e60
mov eax, dword [edi + 4]
test eax, eax
jne 0x754b3f
mov eax, 0x7e5658
mov dword [ebp + 4], eax
mov ecx, dword [edi + 8]
mov dword [ebp + 8], ecx
mov edi, dword [edi + 0xc]
mov dword [ebp + 0xc], edi
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x754b9a
push 1
push eax
mov ecx, ebp
call fcn.00401b40
test al, al
je 0x754b9a
mov esi, dword [edi + 4]
test esi, esi
jne 0x754b72
mov esi, 0x7e5658
mov ecx, dword [esp + 0x2c]
mov edi, dword [ebp + 4]
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov eax, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [esp + 0x10]
mov dword [ebp + 8], eax
mov ebp, dword [ebp + 4]
mov byte [ebp + eax], 0
add ebp, eax
mov ax, word [ebx + 0x18]
mov byte [esp + 0x20], 1
mov word [esi + 0x14], ax
mov cx, word [ebx + 0x1a]
mov word [esi + 0x16], cx
mov dx, word [ebx + 0x1c]
mov word [esi + 0x18], dx
mov ax, word [ebx + 0x1e]
mov word [esi + 0x1a], ax
mov cx, word [ebx + 0x20]
mov word [esi + 0x1c], cx
mov dx, word [ebx + 0x22]
mov word [esi + 0x1e], dx
mov ax, word [ebx + 0x24]
mov word [esi + 0x20], ax
mov cx, word [ebx + 0x26]
mov word [esi + 0x22], cx
mov dx, word [ebx + 0x28]
mov word [esi + 0x24], dx
mov ax, word [ebx + 0x2a]
mov word [esi + 0x26], ax
mov cx, word [ebx + 0x2c]
mov word [esi + 0x28], cx
mov dx, word [ebx + 0x2e]
mov word [esi + 0x2a], dx
mov ax, word [ebx + 0x30]
mov word [esi + 0x2c], ax
mov cx, word [ebx + 0x32]
mov word [esi + 0x2e], cx
mov dx, word [ebx + 0x34]
mov word [esi + 0x30], dx
mov ax, word [ebx + 0x36]
add ebx, 0x38
mov word [esi + 0x32], ax
add esi, 0x34
mov ecx, dword [ebx]
mov dword [esi], ecx
mov edx, dword [ebx + 4]
mov dword [esi + 4], edx
mov eax, dword [ebx + 8]
mov dword [esi + 8], eax
mov cx, word [ebx + 0xc]
mov word [esi + 0xc], cx
pop edi
pop ebp
mov byte [esp + 0x18], 0
pop ebx
mov dword [esp + 0x14], 0xffffffff
pop esi
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
add esp, 0x14
ret
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x14], 0xffffffff
pop esi
mov dword fs:[0], ecx
add esp, 0x14
ret