Function at 0x4978dc
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x497be9
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x497c00
call fcn.0040527c
push 0
mov ecx, 0x497c10
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004716b4
mov edx, dword [ebx + 0x11c]
mov dword [edx + 4], eax
push 0
mov ecx, 0x497c24
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004716b4
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x497c38
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004716b4
mov edx, dword [ebx + 0x11c]
mov dword [edx + 8], eax
push 0
mov ecx, 0x497c4c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004716b4
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x497c64
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004716b4
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x497c74
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00471584
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.00496418
push 0
mov ecx, 0x497c84
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004716b4
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x497c94
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00471584
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.00496418
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x497ca8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00471584
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0x11c]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.00496418
push 0xffffffffffffffff
mov ecx, 0x497cbc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004716b4
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x497cd4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004716b4
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x497cec
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004716b4
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x497d04
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004716b4
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x497d20
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004716b4
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x50], eax
cmp dword [esi + 0x1c], 1
jle 0x497aab
xor eax, eax
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x497d3c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00471584
cmp dword [ebp - 8], 0
je 0x497ad3
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x54], 1
jmp 0x497add
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x497d54
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00471584
cmp dword [ebp - 8], 0
je 0x497b05
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x55], 1
jmp 0x497b0f
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x497d70
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00471584
cmp dword [ebp - 8], 0
je 0x497b37
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x56], 1
jmp 0x497b41
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x497d3c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00471584
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.00498d1c
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x497d54
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00471584
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.00498d1c
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x497d70
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00471584
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.00498d1c
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x497bf0
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.00405208
ret