Function at 0x4beea4
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x4bf1b1
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x4bf1c8
call fcn.00404bf4
push 0
mov ecx, 0x4bf1d8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00498240
mov edx, dword [ebx + 0x11c]
mov dword [edx + 4], eax
push 0
mov ecx, 0x4bf1ec
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00498240
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x4bf200
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00498240
mov edx, dword [ebx + 0x11c]
mov dword [edx + 8], eax
push 0
mov ecx, 0x4bf214
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00498240
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x4bf22c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00498240
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x4bf23c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00498110
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.004bd9e0
push 0
mov ecx, 0x4bf24c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00498240
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x4bf25c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00498110
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.004bd9e0
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x4bf270
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00498110
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0x11c]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.004bd9e0
push 0xffffffffffffffff
mov ecx, 0x4bf284
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00498240
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x4bf29c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00498240
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x4bf2b4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00498240
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x4bf2cc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00498240
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x4bf2e8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00498240
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x50], eax
cmp dword [esi + 0x1c], 1
jle 0x4bf073
xor eax, eax
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4bf304
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00498110
cmp dword [ebp - 8], 0
je 0x4bf09b
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x54], 1
jmp 0x4bf0a5
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4bf31c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00498110
cmp dword [ebp - 8], 0
je 0x4bf0cd
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x55], 1
jmp 0x4bf0d7
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4bf338
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00498110
cmp dword [ebp - 8], 0
je 0x4bf0ff
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x56], 1
jmp 0x4bf109
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x4bf304
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00498110
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.004c02e4
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4bf31c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00498110
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.004c02e4
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x4bf338
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00498110
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.004c02e4
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4bf1b8
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.00404b80
ret