Function at 0x474478
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x47477a
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x474790
call fcn.00404054
push 0
mov ecx, 0x4747a0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.0045b568
mov edx, dword [ebx + 0xe8]
mov dword [edx + 4], eax
push 0
mov ecx, 0x4747b4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.0045b568
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x4747c8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.0045b568
mov edx, dword [ebx + 0xe8]
mov dword [edx + 8], eax
push 0
mov ecx, 0x4747dc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.0045b568
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x4747f4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.0045b568
mov esi, dword [ebx + 0xe8]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x474804
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.0045b438
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.00473028
push 0
mov ecx, 0x474814
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.0045b568
mov esi, dword [ebx + 0xe8]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x474824
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.0045b438
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.00473028
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x474838
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.0045b438
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0xe8]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.00473028
push 0xffffffffffffffff
mov ecx, 0x47484c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.0045b568
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x474864
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.0045b568
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x47487c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.0045b568
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x474894
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.0045b568
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x4748b0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.0045b568
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x50], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4748cc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.0045b438
cmp dword [ebp - 8], 0
je 0x474664
mov eax, dword [ebx + 0xe8]
mov byte [eax + 0x54], 1
jmp 0x47466e
mov eax, dword [ebx + 0xe8]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4748e4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.0045b438
cmp dword [ebp - 8], 0
je 0x474696
mov eax, dword [ebx + 0xe8]
mov byte [eax + 0x55], 1
jmp 0x4746a0
mov eax, dword [ebx + 0xe8]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x474900
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.0045b438
cmp dword [ebp - 8], 0
je 0x4746c8
mov eax, dword [ebx + 0xe8]
mov byte [eax + 0x56], 1
jmp 0x4746d2
mov eax, dword [ebx + 0xe8]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x4748cc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.0045b438
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0x9c]
mov eax, ebx
call fcn.00474f9c
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4748e4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.0045b438
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0x9c]
mov eax, ebx
call fcn.00474f9c
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x474900
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.0045b438
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0x9c]
mov eax, ebx
call fcn.00474f9c
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x474781
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.00403fe0
ret