Function at 0x4838b8
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x483bba
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x483bd0
call fcn.00403f20
push 0
mov ecx, 0x483be0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00468700
mov edx, dword [ebx + 0xec]
mov dword [edx + 4], eax
push 0
mov ecx, 0x483bf4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00468700
mov edx, dword [ebx + 0xec]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x483c08
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00468700
mov edx, dword [ebx + 0xec]
mov dword [edx + 8], eax
push 0
mov ecx, 0x483c1c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00468700
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x483c34
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00468700
mov esi, dword [ebx + 0xec]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x483c44
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004685d0
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.00482468
push 0
mov ecx, 0x483c54
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00468700
mov esi, dword [ebx + 0xec]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x483c64
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004685d0
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.00482468
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x483c78
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004685d0
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0xec]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.00482468
push 0xffffffffffffffff
mov ecx, 0x483c8c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00468700
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x483ca4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00468700
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x483cbc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00468700
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x483cd4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00468700
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x483cf0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00468700
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x50], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x483d0c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004685d0
cmp dword [ebp - 8], 0
je 0x483aa4
mov eax, dword [ebx + 0xec]
mov byte [eax + 0x54], 1
jmp 0x483aae
mov eax, dword [ebx + 0xec]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x483d24
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004685d0
cmp dword [ebp - 8], 0
je 0x483ad6
mov eax, dword [ebx + 0xec]
mov byte [eax + 0x55], 1
jmp 0x483ae0
mov eax, dword [ebx + 0xec]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x483d40
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004685d0
cmp dword [ebp - 8], 0
je 0x483b08
mov eax, dword [ebx + 0xec]
mov byte [eax + 0x56], 1
jmp 0x483b12
mov eax, dword [ebx + 0xec]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x483d0c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004685d0
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xa0]
mov eax, ebx
call fcn.0048475c
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x483d24
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004685d0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xa0]
mov eax, ebx
call fcn.0048475c
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x483d40
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004685d0
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xa0]
mov eax, ebx
call fcn.0048475c
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x483bc1
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.00403eac
ret