Function at 0x4b5e04
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x4b6106
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x4b611c
call fcn.0040497c
push 0
mov ecx, 0x4b612c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0047290c
mov edx, dword [ebx + 0xec]
mov dword [edx + 4], eax
push 0
mov ecx, 0x4b6140
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0047290c
mov edx, dword [ebx + 0xec]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x4b6154
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0047290c
mov edx, dword [ebx + 0xec]
mov dword [edx + 8], eax
push 0
mov ecx, 0x4b6168
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0047290c
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x4b6180
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0047290c
mov esi, dword [ebx + 0xec]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x4b6190
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004727dc
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.004b4978
push 0
mov ecx, 0x4b61a0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0047290c
mov esi, dword [ebx + 0xec]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x4b61b0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004727dc
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.004b4978
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x4b61c4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004727dc
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0xec]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.004b4978
push 0xffffffffffffffff
mov ecx, 0x4b61d8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0047290c
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x4b61f0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0047290c
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x4b6208
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0047290c
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x4b6220
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0047290c
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x4b623c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0047290c
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x50], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4b6258
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004727dc
cmp dword [ebp - 8], 0
je 0x4b5ff0
mov eax, dword [ebx + 0xec]
mov byte [eax + 0x54], 1
jmp 0x4b5ffa
mov eax, dword [ebx + 0xec]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4b6270
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004727dc
cmp dword [ebp - 8], 0
je 0x4b6022
mov eax, dword [ebx + 0xec]
mov byte [eax + 0x55], 1
jmp 0x4b602c
mov eax, dword [ebx + 0xec]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4b628c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004727dc
cmp dword [ebp - 8], 0
je 0x4b6054
mov eax, dword [ebx + 0xec]
mov byte [eax + 0x56], 1
jmp 0x4b605e
mov eax, dword [ebx + 0xec]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x4b6258
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004727dc
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xa0]
mov eax, ebx
call fcn.004b6cb0
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4b6270
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004727dc
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xa0]
mov eax, ebx
call fcn.004b6cb0
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x4b628c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004727dc
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xa0]
mov eax, ebx
call fcn.004b6cb0
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4b610d
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.00404908
ret