Function at 0x48201c
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x482329
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x482340
call fcn.00404094
push 0
mov ecx, 0x482350
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00460fd0
mov edx, dword [ebx + 0xf8]
mov dword [edx + 4], eax
push 0
mov ecx, 0x482364
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00460fd0
mov edx, dword [ebx + 0xf8]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x482378
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00460fd0
mov edx, dword [ebx + 0xf8]
mov dword [edx + 8], eax
push 0
mov ecx, 0x48238c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00460fd0
mov edx, dword [ebx + 0xf8]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x4823a4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00460fd0
mov esi, dword [ebx + 0xf8]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x4823b4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00460ea0
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.00480b9c
push 0
mov ecx, 0x4823c4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00460fd0
mov esi, dword [ebx + 0xf8]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x4823d4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00460ea0
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.00480b9c
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x4823e8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00460ea0
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0xf8]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.00480b9c
push 0xffffffffffffffff
mov ecx, 0x4823fc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00460fd0
mov edx, dword [ebx + 0xf8]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x482414
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00460fd0
mov edx, dword [ebx + 0xf8]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x48242c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00460fd0
mov edx, dword [ebx + 0xf8]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x482444
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00460fd0
mov edx, dword [ebx + 0xf8]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x482460
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00460fd0
mov esi, dword [ebx + 0xf8]
mov dword [esi + 0x50], eax
cmp dword [esi + 0x1c], 1
jle 0x4821eb
xor eax, eax
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x48247c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00460ea0
cmp dword [ebp - 8], 0
je 0x482213
mov eax, dword [ebx + 0xf8]
mov byte [eax + 0x54], 1
jmp 0x48221d
mov eax, dword [ebx + 0xf8]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x482494
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00460ea0
cmp dword [ebp - 8], 0
je 0x482245
mov eax, dword [ebx + 0xf8]
mov byte [eax + 0x55], 1
jmp 0x48224f
mov eax, dword [ebx + 0xf8]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4824b0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00460ea0
cmp dword [ebp - 8], 0
je 0x482277
mov eax, dword [ebx + 0xf8]
mov byte [eax + 0x56], 1
jmp 0x482281
mov eax, dword [ebx + 0xf8]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x48247c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00460ea0
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xa8]
mov eax, ebx
call fcn.00483490
mov edx, dword [ebx + 0xf8]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x482494
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00460ea0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xa8]
mov eax, ebx
call fcn.00483490
mov edx, dword [ebx + 0xf8]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x4824b0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00460ea0
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xa8]
mov eax, ebx
call fcn.00483490
mov edx, dword [ebx + 0xf8]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x482330
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.00404020
ret