Function at 0x4902b8
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x4905c5
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x4905dc
call fcn.00404800
push 0
mov ecx, 0x4905ec
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a80c
mov edx, dword [ebx + 0x114]
mov dword [edx + 4], eax
push 0
mov ecx, 0x490600
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a80c
mov edx, dword [ebx + 0x114]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x490614
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a80c
mov edx, dword [ebx + 0x114]
mov dword [edx + 8], eax
push 0
mov ecx, 0x490628
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a80c
mov edx, dword [ebx + 0x114]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x490640
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a80c
mov esi, dword [ebx + 0x114]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x490650
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a6dc
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.0048edf8
push 0
mov ecx, 0x490660
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a80c
mov esi, dword [ebx + 0x114]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x490670
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a6dc
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.0048edf8
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x490684
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a6dc
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0x114]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.0048edf8
push 0xffffffffffffffff
mov ecx, 0x490698
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a80c
mov edx, dword [ebx + 0x114]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x4906b0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a80c
mov edx, dword [ebx + 0x114]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x4906c8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a80c
mov edx, dword [ebx + 0x114]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x4906e0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a80c
mov edx, dword [ebx + 0x114]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x4906fc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a80c
mov esi, dword [ebx + 0x114]
mov dword [esi + 0x50], eax
cmp dword [esi + 0x1c], 1
jle 0x490487
xor eax, eax
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x490718
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a6dc
cmp dword [ebp - 8], 0
je 0x4904af
mov eax, dword [ebx + 0x114]
mov byte [eax + 0x54], 1
jmp 0x4904b9
mov eax, dword [ebx + 0x114]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x490730
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a6dc
cmp dword [ebp - 8], 0
je 0x4904e1
mov eax, dword [ebx + 0x114]
mov byte [eax + 0x55], 1
jmp 0x4904eb
mov eax, dword [ebx + 0x114]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x49074c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a6dc
cmp dword [ebp - 8], 0
je 0x490513
mov eax, dword [ebx + 0x114]
mov byte [eax + 0x56], 1
jmp 0x49051d
mov eax, dword [ebx + 0x114]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x490718
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a6dc
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xb0]
mov eax, ebx
call fcn.004916ec
mov edx, dword [ebx + 0x114]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x490730
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a6dc
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xb0]
mov eax, ebx
call fcn.004916ec
mov edx, dword [ebx + 0x114]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x49074c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046a6dc
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xb0]
mov eax, ebx
call fcn.004916ec
mov edx, dword [ebx + 0x114]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4905cc
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.0040478c
ret