Function at 0x4868f0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x486bfd
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x486c14
call fcn.004042e4
push 0
mov ecx, 0x486c24
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004605a8
mov edx, dword [ebx + 0x11c]
mov dword [edx + 4], eax
push 0
mov ecx, 0x486c38
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004605a8
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x486c4c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004605a8
mov edx, dword [ebx + 0x11c]
mov dword [edx + 8], eax
push 0
mov ecx, 0x486c60
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004605a8
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x486c78
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004605a8
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x486c88
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00460478
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.00485430
push 0
mov ecx, 0x486c98
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004605a8
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x486ca8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00460478
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.00485430
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x486cbc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00460478
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0x11c]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.00485430
push 0xffffffffffffffff
mov ecx, 0x486cd0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004605a8
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x486ce8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004605a8
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x486d00
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004605a8
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x486d18
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004605a8
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x486d34
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004605a8
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x50], eax
cmp dword [esi + 0x1c], 1
jle 0x486abf
xor eax, eax
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x486d50
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00460478
cmp dword [ebp - 8], 0
je 0x486ae7
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x54], 1
jmp 0x486af1
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x486d68
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00460478
cmp dword [ebp - 8], 0
je 0x486b19
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x55], 1
jmp 0x486b23
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x486d84
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00460478
cmp dword [ebp - 8], 0
je 0x486b4b
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x56], 1
jmp 0x486b55
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x486d50
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00460478
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.00487d20
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x486d68
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00460478
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.00487d20
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x486d84
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00460478
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.00487d20
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x486c04
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.00404270
ret