Function at 0xc7d978
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0xc7dc85
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0xc7dc9c
call fcn.00bc416c
push 0
mov ecx, 0xc7dcac
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00c591f8
mov edx, dword [ebx + 0x100]
mov dword [edx + 4], eax
push 0
mov ecx, 0xc7dcc0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00c591f8
mov edx, dword [ebx + 0x100]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0xc7dcd4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00c591f8
mov edx, dword [ebx + 0x100]
mov dword [edx + 8], eax
push 0
mov ecx, 0xc7dce8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00c591f8
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0xc7dd00
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00c591f8
mov esi, dword [ebx + 0x100]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0xc7dd10
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00c590c8
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.00c7c4b8
push 0
mov ecx, 0xc7dd20
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00c591f8
mov esi, dword [ebx + 0x100]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0xc7dd30
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00c590c8
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.00c7c4b8
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0xc7dd44
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00c590c8
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0x100]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.00c7c4b8
push 0xffffffffffffffff
mov ecx, 0xc7dd58
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00c591f8
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0xc7dd70
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00c591f8
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0xc7dd88
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00c591f8
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0xc7dda0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00c591f8
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0xc7ddbc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00c591f8
mov esi, dword [ebx + 0x100]
mov dword [esi + 0x50], eax
cmp dword [esi + 0x1c], 1
jle 0xc7db47
xor eax, eax
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0xc7ddd8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00c590c8
cmp dword [ebp - 8], 0
je 0xc7db6f
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x54], 1
jmp 0xc7db79
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0xc7ddf0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00c590c8
cmp dword [ebp - 8], 0
je 0xc7dba1
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x55], 1
jmp 0xc7dbab
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0xc7de0c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00c590c8
cmp dword [ebp - 8], 0
je 0xc7dbd3
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x56], 1
jmp 0xc7dbdd
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0xc7ddd8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00c590c8
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xb0]
mov eax, ebx
call fcn.00c7eda8
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0xc7ddf0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00c590c8
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xb0]
mov eax, ebx
call fcn.00c7eda8
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0xc7de0c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00c590c8
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xb0]
mov eax, ebx
call fcn.00c7eda8
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0xc7dc8c
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.00bc40f8
ret