Function at 0x47c8b8
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x47cbc5
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x47cbdc
call fcn.00403ef4
push 0
mov ecx, 0x47cbec
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004566c0
mov edx, dword [ebx + 0x11c]
mov dword [edx + 4], eax
push 0
mov ecx, 0x47cc00
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004566c0
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x47cc14
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004566c0
mov edx, dword [ebx + 0x11c]
mov dword [edx + 8], eax
push 0
mov ecx, 0x47cc28
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004566c0
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x47cc40
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004566c0
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x47cc50
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00456590
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.0047b3f8
push 0
mov ecx, 0x47cc60
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004566c0
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x47cc70
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00456590
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.0047b3f8
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x47cc84
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00456590
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0x11c]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.0047b3f8
push 0xffffffffffffffff
mov ecx, 0x47cc98
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004566c0
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x47ccb0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004566c0
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x47ccc8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004566c0
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x47cce0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004566c0
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x47ccfc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004566c0
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x50], eax
cmp dword [esi + 0x1c], 1
jle 0x47ca87
xor eax, eax
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x47cd18
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00456590
cmp dword [ebp - 8], 0
je 0x47caaf
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x54], 1
jmp 0x47cab9
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x47cd30
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00456590
cmp dword [ebp - 8], 0
je 0x47cae1
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x55], 1
jmp 0x47caeb
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x47cd4c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00456590
cmp dword [ebp - 8], 0
je 0x47cb13
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x56], 1
jmp 0x47cb1d
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x47cd18
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00456590
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.0047dcec
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x47cd30
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00456590
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.0047dcec
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x47cd4c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00456590
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.0047dcec
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47cbcc
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.00403e80
ret