Function at 0x47f56c
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x47f879
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x47f890
call fcn.00404960
push 0
mov ecx, 0x47f8a0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045bff4
mov edx, dword [ebx + 0x100]
mov dword [edx + 4], eax
push 0
mov ecx, 0x47f8b4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045bff4
mov edx, dword [ebx + 0x100]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x47f8c8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045bff4
mov edx, dword [ebx + 0x100]
mov dword [edx + 8], eax
push 0
mov ecx, 0x47f8dc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045bff4
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x47f8f4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045bff4
mov esi, dword [ebx + 0x100]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x47f904
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045bec4
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.0047e0ac
push 0
mov ecx, 0x47f914
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045bff4
mov esi, dword [ebx + 0x100]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x47f924
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045bec4
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.0047e0ac
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x47f938
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045bec4
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0x100]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.0047e0ac
push 0xffffffffffffffff
mov ecx, 0x47f94c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045bff4
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x47f964
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045bff4
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x47f97c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045bff4
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x47f994
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045bff4
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x47f9b0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045bff4
mov esi, dword [ebx + 0x100]
mov dword [esi + 0x50], eax
cmp dword [esi + 0x1c], 1
jle 0x47f73b
xor eax, eax
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x47f9cc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045bec4
cmp dword [ebp - 8], 0
je 0x47f763
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x54], 1
jmp 0x47f76d
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x47f9e4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045bec4
cmp dword [ebp - 8], 0
je 0x47f795
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x55], 1
jmp 0x47f79f
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x47fa00
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045bec4
cmp dword [ebp - 8], 0
je 0x47f7c7
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x56], 1
jmp 0x47f7d1
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x47f9cc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045bec4
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xb0]
mov eax, ebx
call fcn.004809a0
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x47f9e4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045bec4
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xb0]
mov eax, ebx
call fcn.004809a0
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x47fa00
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045bec4
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xb0]
mov eax, ebx
call fcn.004809a0
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47f880
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.004048ec
ret