Function at 0x48c7b0
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov ebx, dword [0x4a0f54]
xor eax, eax
push ebp
push 0x48d09d
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x48d06d
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebx]
call fcn.004095b4
mov edx, dword [0x4a0cdc]
mov dword [edx], eax
mov eax, dword [ebx + 4]
call fcn.004095b4
mov edx, dword [0x4a1160]
mov dword [edx], eax
mov eax, dword [ebx + 8]
call fcn.004095b4
mov edx, dword [0x4a10e4]
mov dword [edx], eax
mov eax, dword [ebx + 0xc]
call fcn.004095b4
mov edx, dword [0x4a0ac8]
mov dword [edx], eax
mov eax, dword [ebx + 0x10]
call fcn.004095b4
mov edx, dword [0x4a0df4]
mov dword [edx], eax
mov eax, dword [ebx + 0x14]
call fcn.004095b4
mov edx, dword [0x4a1084]
mov dword [edx], eax
mov eax, dword [ebx + 0x18]
call fcn.004095b4
mov edx, dword [0x4a1044]
mov dword [edx], eax
mov eax, dword [ebx + 0x1c]
call fcn.004095b4
mov edx, dword [0x4a0adc]
mov dword [edx], eax
mov eax, dword [ebx + 0x20]
call fcn.004095b4
mov edx, dword [0x4a0c34]
mov dword [edx], eax
mov eax, dword [ebx + 0x24]
call fcn.004095b4
mov edx, dword [0x4a0df8]
mov dword [edx], eax
mov eax, dword [ebx + 0x28]
call fcn.004095b4
mov edx, dword [0x4a0da0]
mov dword [edx], eax
mov eax, dword [ebx + 0x2c]
call fcn.004095b4
mov edx, dword [0x4a0eb0]
mov dword [edx], eax
mov eax, dword [ebx + 0x30]
call fcn.004095b4
mov edx, dword [0x4a0d30]
mov dword [edx], eax
mov eax, dword [ebx + 0x34]
call fcn.004095b4
mov edx, dword [0x4a0b24]
mov dword [edx], eax
mov eax, dword [ebx + 0x38]
call fcn.004095b4
mov edx, dword [0x4a1024]
mov dword [edx], eax
mov eax, dword [ebx + 0x3c]
call fcn.004095b4
mov edx, dword [0x4a0ce4]
mov dword [edx], eax
mov eax, dword [ebx + 0x40]
call fcn.004095b4
mov edx, dword [0x4a116c]
mov dword [edx], eax
mov eax, dword [ebx + 0x44]
call fcn.004095b4
mov edx, dword [0x4a0b00]
mov dword [edx], eax
mov eax, dword [ebx + 0x48]
call fcn.004095b4
mov edx, dword [0x4a0fd4]
mov dword [edx], eax
mov eax, dword [ebx + 0x4c]
call fcn.004095b4
mov edx, dword [0x4a11cc]
mov dword [edx], eax
mov eax, dword [ebx + 0x50]
call fcn.004095b4
mov edx, dword [0x4a0fc8]
mov dword [edx], eax
mov eax, dword [ebx + 0x54]
call fcn.004095b4
mov edx, dword [0x4a1018]
mov dword [edx], eax
mov eax, dword [ebx + 0x58]
call fcn.004095b4
mov edx, dword [0x4a0dc4]
mov dword [edx], eax
mov eax, dword [ebx + 0x5c]
call fcn.004095b4
mov edx, dword [0x4a0ed4]
mov dword [edx], eax
mov eax, dword [ebx + 0x60]
call fcn.004095b4
mov edx, dword [0x4a0f00]
mov dword [edx], eax
mov eax, dword [ebx + 0x64]
call fcn.004095b4
mov edx, dword [0x4a0c70]
mov dword [edx], eax
mov eax, dword [ebx + 0x68]
call fcn.004095b4
mov edx, dword [0x4a0df0]
mov dword [edx], eax
mov eax, dword [ebx + 0x6c]
call fcn.004095b4
mov edx, dword [0x4a0bb8]
mov dword [edx], eax
mov eax, dword [ebx + 0x70]
call fcn.004095b4
mov edx, dword [0x4a0eb4]
mov dword [edx], eax
mov eax, dword [ebx + 0x74]
call fcn.004095b4
mov edx, dword [0x4a0cbc]
mov dword [edx], eax
mov eax, dword [ebx + 0x78]
call fcn.004095b4
mov edx, dword [0x4a0eac]
mov dword [edx], eax
mov eax, dword [ebx + 0x7c]
call fcn.004095b4
mov edx, dword [0x4a0f74]
mov dword [edx], eax
mov eax, dword [ebx + 0x80]
call fcn.004095b4
mov edx, dword [0x4a0c24]
mov dword [edx], eax
mov eax, dword [ebx + 0x84]
call fcn.004095b4
mov edx, dword [0x4a0d5c]
mov dword [edx], eax
mov eax, dword [ebx + 0x88]
call fcn.004095b4
mov edx, dword [0x4a0cb8]
mov dword [edx], eax
mov eax, dword [ebx + 0x8c]
call fcn.004095b4
mov edx, dword [0x4a0da4]
mov dword [edx], eax
mov eax, dword [ebx + 0x90]
call fcn.004095b4
mov edx, dword [0x4a0b3c]
mov dword [edx], eax
mov eax, dword [ebx + 0x94]
call fcn.004095b4
mov edx, dword [0x4a0cfc]
mov dword [edx], eax
mov eax, dword [ebx + 0x98]
call fcn.004095b4
mov edx, dword [0x4a0e44]
mov dword [edx], eax
mov eax, dword [ebx + 0x9c]
call fcn.004095b4
mov edx, dword [0x4a0d64]
mov dword [edx], eax
mov eax, dword [ebx + 0xa0]
call fcn.004095b4
mov edx, dword [0x4a0ce8]
mov dword [edx], eax
mov eax, dword [ebx + 0xa4]
call fcn.004095b4
mov edx, dword [0x4a0bec]
mov dword [edx], eax
mov eax, dword [ebx + 0xa8]
call fcn.004095b4
mov edx, dword [0x4a0ba8]
mov dword [edx], eax
mov eax, dword [ebx + 0xac]
call fcn.004095b4
mov edx, dword [0x4a0fd0]
mov dword [edx], eax
mov eax, dword [ebx + 0xb0]
call fcn.004095b4
mov edx, dword [0x4a0ebc]
mov dword [edx], eax
mov eax, dword [ebx + 0xb4]
call fcn.004095b4
mov edx, dword [0x4a0b2c]
mov dword [edx], eax
mov eax, dword [ebx + 0xb8]
call fcn.004095b4
mov edx, dword [0x4a0d4c]
mov dword [edx], eax
mov eax, dword [ebx + 0xbc]
call fcn.004095b4
mov edx, dword [0x4a0fa4]
mov dword [edx], eax
mov eax, dword [ebx + 0xc0]
call fcn.004095b4
mov edx, dword [0x4a0d90]
mov dword [edx], eax
mov eax, dword [ebx + 0xc4]
call fcn.004095b4
mov edx, dword [0x4a0e6c]
mov dword [edx], eax
mov eax, dword [ebx + 0xc8]
call fcn.004095b4
mov edx, dword [0x4a0bdc]
mov dword [edx], eax
mov eax, dword [ebx + 0xcc]
call fcn.004095b4
mov edx, dword [0x4a1174]
mov dword [edx], eax
mov eax, dword [ebx + 0xd0]
call fcn.004095b4
mov edx, dword [0x4a0cb4]
mov dword [edx], eax
mov eax, dword [ebx + 0xd4]
call fcn.004095b4
mov edx, dword [0x4a0c74]
mov dword [edx], eax
mov eax, dword [ebx + 0xd8]
call fcn.004095b4
mov edx, dword [0x4a0ae0]
mov dword [edx], eax
mov eax, dword [ebx + 0xdc]
call fcn.004095b4
mov edx, dword [0x4a0bfc]
mov dword [edx], eax
mov eax, dword [ebx + 0xe0]
call fcn.004095b4
mov edx, dword [0x4a0be0]
mov dword [edx], eax
mov eax, dword [ebx + 0xe4]
call fcn.004095b4
mov edx, dword [0x4a0d8c]
mov dword [edx], eax
mov eax, dword [ebx + 0xe8]
call fcn.004095b4
mov edx, dword [0x4a1074]
mov dword [edx], eax
mov eax, dword [ebx + 0xec]
call fcn.004095b4
mov edx, dword [0x4a10bc]
mov dword [edx], eax
mov eax, dword [ebx + 0xf0]
call fcn.004095b4
mov edx, dword [0x4a0e90]
mov dword [edx], eax
mov eax, dword [ebx + 0xf4]
call fcn.004095b4
mov edx, dword [0x4a0c84]
mov dword [edx], eax
mov eax, dword [ebx + 0xf8]
call fcn.004095b4
mov edx, dword [0x4a0fc4]
mov dword [edx], eax
mov eax, dword [ebx + 0xfc]
call fcn.004095b4
mov edx, dword [0x4a0f28]
mov dword [edx], eax
mov eax, dword [ebx + 0x100]
call fcn.004095b4
mov edx, dword [0x4a0b7c]
mov dword [edx], eax
mov eax, dword [ebx + 0x104]
call fcn.004095b4
mov edx, dword [0x4a0c30]
mov dword [edx], eax
mov eax, dword [ebx + 0x108]
call fcn.004095b4
mov edx, dword [0x4a0c9c]
mov dword [edx], eax
mov eax, dword [ebx + 0x10c]
call fcn.004095b4
mov edx, dword [0x4a1150]
mov dword [edx], eax
mov eax, dword [ebx + 0x110]
call fcn.004095b4
mov edx, dword [0x4a0fb4]
mov dword [edx], eax
mov eax, dword [ebx + 0x114]
call fcn.004095b4
mov edx, dword [0x4a0e14]
mov dword [edx], eax
mov eax, dword [ebx + 0x118]
call fcn.004095b4
mov edx, dword [0x4a0bd8]
mov dword [edx], eax
mov eax, dword [ebx + 0x11c]
call fcn.004095b4
mov edx, dword [0x4a0ac4]
mov dword [edx], eax
mov eax, dword [ebx + 0x120]
call fcn.004095b4
mov edx, dword [0x4a0cd8]
mov dword [edx], eax
mov eax, dword [ebx + 0x124]
call fcn.004095b4
mov edx, dword [0x4a0e20]
mov dword [edx], eax
mov eax, dword [ebx + 0x128]
call fcn.004095b4
mov edx, dword [0x4a0bd0]
mov dword [edx], eax
mov eax, dword [ebx + 0x12c]
call fcn.004095b4
mov edx, dword [0x4a10c4]
mov dword [edx], eax
mov eax, dword [ebx + 0x130]
call fcn.004095b4
mov edx, dword [0x4a0de4]
mov dword [edx], eax
mov eax, dword [ebx + 0x134]
call fcn.004095b4
mov edx, dword [0x4a0b68]
mov dword [edx], eax
mov eax, dword [ebx + 0x138]
call fcn.004095b4
mov edx, dword [0x4a0e50]
mov dword [edx], eax
mov eax, dword [ebx + 0x13c]
call fcn.004095b4
mov edx, dword [0x4a0fdc]
mov dword [edx], eax
mov eax, dword [ebx + 0x140]
call fcn.004095b4
mov edx, dword [0x4a1020]
mov dword [edx], eax
mov eax, dword [ebx + 0x144]
call fcn.004095b4
mov edx, dword [0x4a1038]
mov dword [edx], eax
mov eax, dword [ebx + 0x148]
call fcn.004095b4
mov edx, dword [0x4a1188]
mov dword [edx], eax
mov eax, dword [ebx + 0x14c]
call fcn.004095b4
mov edx, dword [0x4a113c]
mov dword [edx], eax
mov eax, dword [ebx + 0x150]
call fcn.004095b4
mov edx, dword [0x4a0cf8]
mov dword [edx], eax
mov eax, dword [ebx + 0x154]
call fcn.004095b4
mov edx, dword [0x4a0b54]
mov dword [edx], eax
mov eax, dword [ebx + 0x158]
call fcn.004095b4
mov edx, dword [0x4a0e1c]
mov dword [edx], eax
mov eax, dword [ebx + 0x190]
call fcn.004095b4
mov edx, dword [0x4a0d1c]
mov dword [edx], eax
mov eax, dword [ebx + 0x194]
call fcn.004095b4
mov edx, dword [0x4a0d78]
mov dword [edx], eax
mov eax, dword [ebx + 0x198]
call fcn.004095b4
mov edx, dword [0x4a0ad0]
mov dword [edx], eax
mov eax, dword [ebx + 0x19c]
call fcn.004095b4
mov edx, dword [0x4a1054]
mov dword [edx], eax
mov eax, dword [ebx + 0x1a0]
call fcn.004095b4
mov edx, dword [0x4a0c10]
mov dword [edx], eax
mov eax, dword [ebx + 0x1a4]
call fcn.004095b4
mov edx, dword [0x4a0b78]
mov dword [edx], eax
mov eax, dword [ebx + 0x1a8]
call fcn.004095b4
mov edx, dword [0x4a0f50]
mov dword [edx], eax
mov eax, dword [ebx + 0x1ac]
call fcn.004095b4
mov edx, dword [0x4a0fb0]
mov dword [edx], eax
mov eax, dword [ebx + 0x1b0]
call fcn.004095b4
mov edx, dword [0x4a0e10]
mov dword [edx], eax
mov eax, dword [ebx + 0x1b4]
call fcn.004095b4
mov edx, dword [0x4a0ed0]
mov dword [edx], eax
mov eax, dword [ebx + 0x1b8]
call fcn.004095b4
mov edx, dword [0x4a0ae8]
mov dword [edx], eax
mov eax, dword [ebx + 0x1bc]
call fcn.004095b4
mov edx, dword [0x4a0c8c]
mov dword [edx], eax
mov eax, dword [ebx + 0x1c0]
call fcn.004095b4
mov edx, dword [0x4a0e8c]
mov dword [edx], eax
mov eax, dword [ebx + 0x1c4]
call fcn.004095b4
mov edx, dword [0x4a0cc8]
mov dword [edx], eax
mov eax, dword [ebx + 0x1c8]
call fcn.004095b4
mov edx, dword [0x4a0bcc]
mov dword [edx], eax
mov eax, dword [ebx + 0x1cc]
call fcn.004095b4
mov edx, dword [0x4a0d9c]
mov dword [edx], eax
mov eax, dword [ebx + 0x1d0]
call fcn.004095b4
mov edx, dword [0x4a0dec]
mov dword [edx], eax
mov eax, dword [ebx + 0x1d4]
call fcn.004095b4
mov edx, dword [0x4a0b38]
mov dword [edx], eax
mov eax, dword [ebx + 0x1d8]
call fcn.004095b4
mov edx, dword [0x4a1090]
mov dword [edx], eax
mov eax, dword [ebx + 0x1dc]
call fcn.004095b4
mov edx, dword [0x4a0c80]
mov dword [edx], eax
mov eax, dword [ebx + 0x1e0]
call fcn.004095b4
mov edx, dword [0x4a0af4]
mov dword [edx], eax
mov eax, dword [ebx + 0x1e4]
call fcn.004095b4
mov edx, dword [0x4a0b50]
mov dword [edx], eax
mov eax, dword [ebx + 0x1e8]
call fcn.004095b4
mov edx, dword [0x4a0c54]
mov dword [edx], eax
mov eax, dword [ebx + 0x1ec]
call fcn.004095b4
mov edx, dword [0x4a0d18]
mov dword [edx], eax
mov eax, dword [ebx + 0x1f0]
call fcn.004095b4
mov edx, dword [0x4a0b64]
mov dword [edx], eax
mov eax, dword [ebx + 0x1f4]
call fcn.004095b4
mov edx, dword [0x4a1124]
mov dword [edx], eax
mov eax, dword [ebx + 0x1f8]
call fcn.004095b4
mov edx, dword [0x4a115c]
mov dword [edx], eax
mov eax, dword [ebx + 0x1fc]
call fcn.004095b4
mov edx, dword [0x4a0f24]
mov dword [edx], eax
mov eax, dword [ebx + 0x200]
call fcn.004095b4
mov edx, dword [0x4a0d60]
mov dword [edx], eax
mov eax, dword [ebx + 0x204]
call fcn.004095b4
mov edx, dword [0x4a105c]
mov dword [edx], eax
mov eax, dword [ebx + 0x208]
call fcn.004095b4
mov edx, dword [0x4a0fcc]
mov dword [edx], eax
mov edi, 0x8d
mov esi, ebx
mov eax, esi
call fcn.00404c84
add esi, 4
dec edi
jne 0x48d040
mov eax, dword [0x4a1048]
inc dword [eax]
mov byte [0x4a35dc], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48d08f
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x48d0a4
ret