Function at 0x53fe68
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x54016a
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x540180
call fcn.00404b84
push 0
mov ecx, 0x540190
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524d74
mov edx, dword [ebx + 0xec]
mov dword [edx + 4], eax
push 0
mov ecx, 0x5401a4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524d74
mov edx, dword [ebx + 0xec]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x5401b8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524d74
mov edx, dword [ebx + 0xec]
mov dword [edx + 8], eax
push 0
mov ecx, 0x5401cc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524d74
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x5401e4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524d74
mov esi, dword [ebx + 0xec]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x5401f4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524c44
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.0053ea18
push 0
mov ecx, 0x540204
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524d74
mov esi, dword [ebx + 0xec]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x540214
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524c44
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.0053ea18
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x540228
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524c44
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0xec]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.0053ea18
push 0xffffffffffffffff
mov ecx, 0x54023c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524d74
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x540254
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524d74
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x54026c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524d74
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x540284
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524d74
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x5402a0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524d74
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x50], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x5402bc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524c44
cmp dword [ebp - 8], 0
je 0x540054
mov eax, dword [ebx + 0xec]
mov byte [eax + 0x54], 1
jmp 0x54005e
mov eax, dword [ebx + 0xec]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x5402d4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524c44
cmp dword [ebp - 8], 0
je 0x540086
mov eax, dword [ebx + 0xec]
mov byte [eax + 0x55], 1
jmp 0x540090
mov eax, dword [ebx + 0xec]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x5402f0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524c44
cmp dword [ebp - 8], 0
je 0x5400b8
mov eax, dword [ebx + 0xec]
mov byte [eax + 0x56], 1
jmp 0x5400c2
mov eax, dword [ebx + 0xec]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x5402bc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524c44
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xa0]
mov eax, ebx
call fcn.00540d0c
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x5402d4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524c44
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xa0]
mov eax, ebx
call fcn.00540d0c
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x5402f0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524c44
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xa0]
mov eax, ebx
call fcn.00540d0c
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x540171
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.00404b10
ret