Function at 0x566e30
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x56713d
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x567154
call fcn.0040537c
push 0
mov ecx, 0x567164
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00540db0
mov edx, dword [ebx + 0x11c]
mov dword [edx + 4], eax
push 0
mov ecx, 0x567178
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00540db0
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x56718c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00540db0
mov edx, dword [ebx + 0x11c]
mov dword [edx + 8], eax
push 0
mov ecx, 0x5671a0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00540db0
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x5671b8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00540db0
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x5671c8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00540c80
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.0056596c
push 0
mov ecx, 0x5671d8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00540db0
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x5671e8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00540c80
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.0056596c
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x5671fc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00540c80
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0x11c]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.0056596c
push 0xffffffffffffffff
mov ecx, 0x567210
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00540db0
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x567228
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00540db0
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x567240
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00540db0
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x567258
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00540db0
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x567274
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00540db0
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x50], eax
cmp dword [esi + 0x1c], 1
jle 0x566fff
xor eax, eax
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x567290
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00540c80
cmp dword [ebp - 8], 0
je 0x567027
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x54], 1
jmp 0x567031
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x5672a8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00540c80
cmp dword [ebp - 8], 0
je 0x567059
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x55], 1
jmp 0x567063
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x5672c4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00540c80
cmp dword [ebp - 8], 0
je 0x56708b
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x56], 1
jmp 0x567095
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x567290
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00540c80
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.00568270
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x5672a8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00540c80
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.00568270
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x5672c4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00540c80
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.00568270
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x567144
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.00405308
ret