Function at 0x483b38
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x483e45
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x483e5c
call fcn.004044e0
push 0
mov ecx, 0x483e6c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045d080
mov edx, dword [ebx + 0x11c]
mov dword [edx + 4], eax
push 0
mov ecx, 0x483e80
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045d080
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x483e94
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045d080
mov edx, dword [ebx + 0x11c]
mov dword [edx + 8], eax
push 0
mov ecx, 0x483ea8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045d080
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x483ec0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045d080
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x483ed0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045cf50
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.00482678
push 0
mov ecx, 0x483ee0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045d080
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x483ef0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045cf50
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.00482678
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x483f04
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045cf50
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0x11c]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.00482678
push 0xffffffffffffffff
mov ecx, 0x483f18
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045d080
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x483f30
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045d080
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x483f48
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045d080
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x483f60
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045d080
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x483f7c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045d080
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x50], eax
cmp dword [esi + 0x1c], 1
jle 0x483d07
xor eax, eax
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x483f98
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045cf50
cmp dword [ebp - 8], 0
je 0x483d2f
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x54], 1
jmp 0x483d39
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x483fb0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045cf50
cmp dword [ebp - 8], 0
je 0x483d61
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x55], 1
jmp 0x483d6b
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x483fcc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045cf50
cmp dword [ebp - 8], 0
je 0x483d93
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x56], 1
jmp 0x483d9d
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x483f98
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045cf50
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.00484f68
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x483fb0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045cf50
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.00484f68
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x483fcc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045cf50
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.00484f68
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x483e4c
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.0040446c
ret