Function at 0x511f7c
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x512289
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x5122a0
call fcn.004048f4
push 0
mov ecx, 0x5122b0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004eb4f0
mov edx, dword [ebx + 0x11c]
mov dword [edx + 4], eax
push 0
mov ecx, 0x5122c4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004eb4f0
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x5122d8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004eb4f0
mov edx, dword [ebx + 0x11c]
mov dword [edx + 8], eax
push 0
mov ecx, 0x5122ec
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004eb4f0
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x512304
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004eb4f0
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x512314
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004eb3c0
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.00510abc
push 0
mov ecx, 0x512324
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004eb4f0
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x512334
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004eb3c0
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.00510abc
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x512348
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004eb3c0
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0x11c]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.00510abc
push 0xffffffffffffffff
mov ecx, 0x51235c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004eb4f0
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x512374
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004eb4f0
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x51238c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004eb4f0
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x5123a4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004eb4f0
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x5123c0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004eb4f0
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x50], eax
cmp dword [esi + 0x1c], 1
jle 0x51214b
xor eax, eax
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x5123dc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004eb3c0
cmp dword [ebp - 8], 0
je 0x512173
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x54], 1
jmp 0x51217d
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x5123f4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004eb3c0
cmp dword [ebp - 8], 0
je 0x5121a5
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x55], 1
jmp 0x5121af
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x512410
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004eb3c0
cmp dword [ebp - 8], 0
je 0x5121d7
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x56], 1
jmp 0x5121e1
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x5123dc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004eb3c0
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.005133ac
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x5123f4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004eb3c0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.005133ac
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x512410
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004eb3c0
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.005133ac
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x512290
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.00404880
ret