Function at 0x49efa0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x49f2ad
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x49f2c4
call fcn.004041b0
push 0
mov ecx, 0x49f2d4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00479a30
mov edx, dword [ebx + 0x100]
mov dword [edx + 4], eax
push 0
mov ecx, 0x49f2e8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00479a30
mov edx, dword [ebx + 0x100]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x49f2fc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00479a30
mov edx, dword [ebx + 0x100]
mov dword [edx + 8], eax
push 0
mov ecx, 0x49f310
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00479a30
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x49f328
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00479a30
mov esi, dword [ebx + 0x100]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x49f338
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00479900
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.0049dae0
push 0
mov ecx, 0x49f348
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00479a30
mov esi, dword [ebx + 0x100]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x49f358
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00479900
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.0049dae0
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x49f36c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00479900
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0x100]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.0049dae0
push 0xffffffffffffffff
mov ecx, 0x49f380
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00479a30
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x49f398
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00479a30
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x49f3b0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00479a30
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x49f3c8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00479a30
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x49f3e4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00479a30
mov esi, dword [ebx + 0x100]
mov dword [esi + 0x50], eax
cmp dword [esi + 0x1c], 1
jle 0x49f16f
xor eax, eax
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x49f400
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00479900
cmp dword [ebp - 8], 0
je 0x49f197
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x54], 1
jmp 0x49f1a1
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x49f418
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00479900
cmp dword [ebp - 8], 0
je 0x49f1c9
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x55], 1
jmp 0x49f1d3
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x49f434
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00479900
cmp dword [ebp - 8], 0
je 0x49f1fb
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x56], 1
jmp 0x49f205
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x49f400
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00479900
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xb0]
mov eax, ebx
call fcn.004a03d4
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x49f418
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00479900
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xb0]
mov eax, ebx
call fcn.004a03d4
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x49f434
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00479900
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xb0]
mov eax, ebx
call fcn.004a03d4
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49f2b4
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.0040413c
ret