Function at 0x493dfc
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x494109
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x494120
call fcn.004052bc
push 0
mov ecx, 0x494130
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046d8fc
mov edx, dword [ebx + 0x11c]
mov dword [edx + 4], eax
push 0
mov ecx, 0x494144
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046d8fc
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x494158
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046d8fc
mov edx, dword [ebx + 0x11c]
mov dword [edx + 8], eax
push 0
mov ecx, 0x49416c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046d8fc
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x494184
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046d8fc
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x494194
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046d7cc
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.00492938
push 0
mov ecx, 0x4941a4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046d8fc
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x4941b4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046d7cc
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.00492938
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x4941c8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046d7cc
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0x11c]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.00492938
push 0xffffffffffffffff
mov ecx, 0x4941dc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046d8fc
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x4941f4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046d8fc
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x49420c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046d8fc
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x494224
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046d8fc
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x494240
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046d8fc
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x50], eax
cmp dword [esi + 0x1c], 1
jle 0x493fcb
xor eax, eax
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x49425c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046d7cc
cmp dword [ebp - 8], 0
je 0x493ff3
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x54], 1
jmp 0x493ffd
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x494274
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046d7cc
cmp dword [ebp - 8], 0
je 0x494025
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x55], 1
jmp 0x49402f
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x494290
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046d7cc
cmp dword [ebp - 8], 0
je 0x494057
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x56], 1
jmp 0x494061
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x49425c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046d7cc
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.0049523c
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x494274
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046d7cc
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.0049523c
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x494290
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046d7cc
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.0049523c
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x494110
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.00405248
ret