Function at 0x4bef3c
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x4bf249
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x4bf260
call fcn.00404bf4
push 0
mov ecx, 0x4bf270
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004982d8
mov edx, dword [ebx + 0x11c]
mov dword [edx + 4], eax
push 0
mov ecx, 0x4bf284
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004982d8
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x4bf298
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004982d8
mov edx, dword [ebx + 0x11c]
mov dword [edx + 8], eax
push 0
mov ecx, 0x4bf2ac
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004982d8
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x4bf2c4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004982d8
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x4bf2d4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004981a8
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.004bda78
push 0
mov ecx, 0x4bf2e4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004982d8
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x4bf2f4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004981a8
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.004bda78
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x4bf308
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004981a8
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0x11c]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.004bda78
push 0xffffffffffffffff
mov ecx, 0x4bf31c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004982d8
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x4bf334
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004982d8
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x4bf34c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004982d8
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x4bf364
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004982d8
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x4bf380
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004982d8
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x50], eax
cmp dword [esi + 0x1c], 1
jle 0x4bf10b
xor eax, eax
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4bf39c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004981a8
cmp dword [ebp - 8], 0
je 0x4bf133
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x54], 1
jmp 0x4bf13d
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4bf3b4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004981a8
cmp dword [ebp - 8], 0
je 0x4bf165
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x55], 1
jmp 0x4bf16f
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4bf3d0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004981a8
cmp dword [ebp - 8], 0
je 0x4bf197
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x56], 1
jmp 0x4bf1a1
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x4bf39c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004981a8
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.004c037c
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4bf3b4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004981a8
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.004c037c
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x4bf3d0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004981a8
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.004c037c
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4bf250
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.00404b80
ret