Function at 0x47b9f8
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x47bd05
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x47bd1c
call fcn.0040413c
push 0
mov ecx, 0x47bd2c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045c808
mov edx, dword [ebx + 0xec]
mov dword [edx + 4], eax
push 0
mov ecx, 0x47bd40
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045c808
mov edx, dword [ebx + 0xec]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x47bd54
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045c808
mov edx, dword [ebx + 0xec]
mov dword [edx + 8], eax
push 0
mov ecx, 0x47bd68
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045c808
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x47bd80
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045c808
mov esi, dword [ebx + 0xec]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x47bd90
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045c6d8
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.0047a598
push 0
mov ecx, 0x47bda0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045c808
mov esi, dword [ebx + 0xec]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x47bdb0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045c6d8
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.0047a598
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x47bdc4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045c6d8
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0xec]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.0047a598
push 0xffffffffffffffff
mov ecx, 0x47bdd8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045c808
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x47bdf0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045c808
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x47be08
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045c808
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x47be20
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045c808
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x47be3c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045c808
mov esi, dword [ebx + 0xec]
mov dword [esi + 0x50], eax
cmp dword [esi + 0x1c], 1
jle 0x47bbc7
xor eax, eax
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x47be58
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045c6d8
cmp dword [ebp - 8], 0
je 0x47bbef
mov eax, dword [ebx + 0xec]
mov byte [eax + 0x54], 1
jmp 0x47bbf9
mov eax, dword [ebx + 0xec]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x47be70
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045c6d8
cmp dword [ebp - 8], 0
je 0x47bc21
mov eax, dword [ebx + 0xec]
mov byte [eax + 0x55], 1
jmp 0x47bc2b
mov eax, dword [ebx + 0xec]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x47be8c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045c6d8
cmp dword [ebp - 8], 0
je 0x47bc53
mov eax, dword [ebx + 0xec]
mov byte [eax + 0x56], 1
jmp 0x47bc5d
mov eax, dword [ebx + 0xec]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x47be58
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045c6d8
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xa0]
mov eax, ebx
call fcn.0047ca24
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x47be70
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045c6d8
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xa0]
mov eax, ebx
call fcn.0047ca24
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x47be8c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045c6d8
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xa0]
mov eax, ebx
call fcn.0047ca24
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47bd0c
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.004040c8
ret