Function at 0x487b4c
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x487e59
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x487e70
call fcn.00403f14
push 0
mov ecx, 0x487e80
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004620a0
mov edx, dword [ebx + 0x114]
mov dword [edx + 4], eax
push 0
mov ecx, 0x487e94
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004620a0
mov edx, dword [ebx + 0x114]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x487ea8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004620a0
mov edx, dword [ebx + 0x114]
mov dword [edx + 8], eax
push 0
mov ecx, 0x487ebc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004620a0
mov edx, dword [ebx + 0x114]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x487ed4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004620a0
mov esi, dword [ebx + 0x114]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x487ee4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00461f70
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.0048668c
push 0
mov ecx, 0x487ef4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004620a0
mov esi, dword [ebx + 0x114]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x487f04
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00461f70
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.0048668c
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x487f18
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00461f70
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0x114]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.0048668c
push 0xffffffffffffffff
mov ecx, 0x487f2c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004620a0
mov edx, dword [ebx + 0x114]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x487f44
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004620a0
mov edx, dword [ebx + 0x114]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x487f5c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004620a0
mov edx, dword [ebx + 0x114]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x487f74
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004620a0
mov edx, dword [ebx + 0x114]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x487f90
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004620a0
mov esi, dword [ebx + 0x114]
mov dword [esi + 0x50], eax
cmp dword [esi + 0x1c], 1
jle 0x487d1b
xor eax, eax
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x487fac
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00461f70
cmp dword [ebp - 8], 0
je 0x487d43
mov eax, dword [ebx + 0x114]
mov byte [eax + 0x54], 1
jmp 0x487d4d
mov eax, dword [ebx + 0x114]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x487fc4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00461f70
cmp dword [ebp - 8], 0
je 0x487d75
mov eax, dword [ebx + 0x114]
mov byte [eax + 0x55], 1
jmp 0x487d7f
mov eax, dword [ebx + 0x114]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x487fe0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00461f70
cmp dword [ebp - 8], 0
je 0x487da7
mov eax, dword [ebx + 0x114]
mov byte [eax + 0x56], 1
jmp 0x487db1
mov eax, dword [ebx + 0x114]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x487fac
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00461f70
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xb0]
mov eax, ebx
call fcn.00488f80
mov edx, dword [ebx + 0x114]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x487fc4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00461f70
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xb0]
mov eax, ebx
call fcn.00488f80
mov edx, dword [ebx + 0x114]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x487fe0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00461f70
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xb0]
mov eax, ebx
call fcn.00488f80
mov edx, dword [ebx + 0x114]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x487e60
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.00403ea0
ret