Function at 0x48169c
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x4819a9
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x4819c0
call fcn.004042e4
push 0
mov ecx, 0x4819d0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045cfa8
mov edx, dword [ebx + 0x100]
mov dword [edx + 4], eax
push 0
mov ecx, 0x4819e4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045cfa8
mov edx, dword [ebx + 0x100]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x4819f8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045cfa8
mov edx, dword [ebx + 0x100]
mov dword [edx + 8], eax
push 0
mov ecx, 0x481a0c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045cfa8
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x481a24
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045cfa8
mov esi, dword [ebx + 0x100]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x481a34
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045ce78
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.0048021c
push 0
mov ecx, 0x481a44
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045cfa8
mov esi, dword [ebx + 0x100]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x481a54
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045ce78
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.0048021c
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x481a68
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045ce78
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0x100]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.0048021c
push 0xffffffffffffffff
mov ecx, 0x481a7c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045cfa8
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x481a94
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045cfa8
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x481aac
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045cfa8
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x481ac4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045cfa8
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x481ae0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045cfa8
mov esi, dword [ebx + 0x100]
mov dword [esi + 0x50], eax
cmp dword [esi + 0x1c], 1
jle 0x48186b
xor eax, eax
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x481afc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045ce78
cmp dword [ebp - 8], 0
je 0x481893
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x54], 1
jmp 0x48189d
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x481b14
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045ce78
cmp dword [ebp - 8], 0
je 0x4818c5
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x55], 1
jmp 0x4818cf
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x481b30
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045ce78
cmp dword [ebp - 8], 0
je 0x4818f7
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x56], 1
jmp 0x481901
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x481afc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045ce78
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xb0]
mov eax, ebx
call fcn.00482acc
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x481b14
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045ce78
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xb0]
mov eax, ebx
call fcn.00482acc
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x481b30
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045ce78
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xb0]
mov eax, ebx
call fcn.00482acc
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4819b0
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.00404270
ret