Function at 0x490408
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x490715
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x49072c
call fcn.00404800
push 0
mov ecx, 0x49073c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a9cc
mov edx, dword [ebx + 0x114]
mov dword [edx + 4], eax
push 0
mov ecx, 0x490750
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a9cc
mov edx, dword [ebx + 0x114]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x490764
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a9cc
mov edx, dword [ebx + 0x114]
mov dword [edx + 8], eax
push 0
mov ecx, 0x490778
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a9cc
mov edx, dword [ebx + 0x114]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x490790
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a9cc
mov esi, dword [ebx + 0x114]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x4907a0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a89c
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.0048ef48
push 0
mov ecx, 0x4907b0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a9cc
mov esi, dword [ebx + 0x114]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x4907c0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a89c
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.0048ef48
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x4907d4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a89c
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0x114]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.0048ef48
push 0xffffffffffffffff
mov ecx, 0x4907e8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a9cc
mov edx, dword [ebx + 0x114]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x490800
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a9cc
mov edx, dword [ebx + 0x114]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x490818
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a9cc
mov edx, dword [ebx + 0x114]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x490830
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a9cc
mov edx, dword [ebx + 0x114]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x49084c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a9cc
mov esi, dword [ebx + 0x114]
mov dword [esi + 0x50], eax
cmp dword [esi + 0x1c], 1
jle 0x4905d7
xor eax, eax
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x490868
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a89c
cmp dword [ebp - 8], 0
je 0x4905ff
mov eax, dword [ebx + 0x114]
mov byte [eax + 0x54], 1
jmp 0x490609
mov eax, dword [ebx + 0x114]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x490880
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a89c
cmp dword [ebp - 8], 0
je 0x490631
mov eax, dword [ebx + 0x114]
mov byte [eax + 0x55], 1
jmp 0x49063b
mov eax, dword [ebx + 0x114]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x49089c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a89c
cmp dword [ebp - 8], 0
je 0x490663
mov eax, dword [ebx + 0x114]
mov byte [eax + 0x56], 1
jmp 0x49066d
mov eax, dword [ebx + 0x114]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x490868
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a89c
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xb0]
mov eax, ebx
call fcn.0049183c
mov edx, dword [ebx + 0x114]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x490880
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a89c
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xb0]
mov eax, ebx
call fcn.0049183c
mov edx, dword [ebx + 0x114]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x49089c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a89c
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xb0]
mov eax, ebx
call fcn.0049183c
mov edx, dword [ebx + 0x114]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49071c
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.0040478c
ret