Function at 0x54b084
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x54b391
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x54b3a8
call fcn.0040441c
push 0
mov ecx, 0x54b3b8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524f50
mov edx, dword [ebx + 0x11c]
mov dword [edx + 4], eax
push 0
mov ecx, 0x54b3cc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524f50
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x54b3e0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524f50
mov edx, dword [ebx + 0x11c]
mov dword [edx + 8], eax
push 0
mov ecx, 0x54b3f4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524f50
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x54b40c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524f50
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x54b41c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524e20
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.00549bc4
push 0
mov ecx, 0x54b42c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524f50
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x54b43c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524e20
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.00549bc4
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x54b450
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524e20
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0x11c]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.00549bc4
push 0xffffffffffffffff
mov ecx, 0x54b464
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524f50
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x54b47c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524f50
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x54b494
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524f50
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x54b4ac
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524f50
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x54b4c8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524f50
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x50], eax
cmp dword [esi + 0x1c], 1
jle 0x54b253
xor eax, eax
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x54b4e4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524e20
cmp dword [ebp - 8], 0
je 0x54b27b
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x54], 1
jmp 0x54b285
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x54b4fc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524e20
cmp dword [ebp - 8], 0
je 0x54b2ad
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x55], 1
jmp 0x54b2b7
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x54b518
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524e20
cmp dword [ebp - 8], 0
je 0x54b2df
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x56], 1
jmp 0x54b2e9
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x54b4e4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524e20
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.0054c4b8
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x54b4fc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524e20
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.0054c4b8
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x54b518
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00524e20
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.0054c4b8
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x54b398
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.004043a8
ret