Function at 0x483b14
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x483e21
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x483e38
call fcn.00404094
push 0
mov ecx, 0x483e48
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045f7d8
mov edx, dword [ebx + 0x100]
mov dword [edx + 4], eax
push 0
mov ecx, 0x483e5c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045f7d8
mov edx, dword [ebx + 0x100]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x483e70
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045f7d8
mov edx, dword [ebx + 0x100]
mov dword [edx + 8], eax
push 0
mov ecx, 0x483e84
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045f7d8
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x483e9c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045f7d8
mov esi, dword [ebx + 0x100]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x483eac
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045f6a8
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.00482694
push 0
mov ecx, 0x483ebc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045f7d8
mov esi, dword [ebx + 0x100]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x483ecc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045f6a8
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.00482694
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x483ee0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045f6a8
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0x100]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.00482694
push 0xffffffffffffffff
mov ecx, 0x483ef4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045f7d8
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x483f0c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045f7d8
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x483f24
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045f7d8
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x483f3c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045f7d8
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x483f58
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045f7d8
mov esi, dword [ebx + 0x100]
mov dword [esi + 0x50], eax
cmp dword [esi + 0x1c], 1
jle 0x483ce3
xor eax, eax
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x483f74
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045f6a8
cmp dword [ebp - 8], 0
je 0x483d0b
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x54], 1
jmp 0x483d15
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x483f8c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045f6a8
cmp dword [ebp - 8], 0
je 0x483d3d
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x55], 1
jmp 0x483d47
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x483fa8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045f6a8
cmp dword [ebp - 8], 0
je 0x483d6f
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x56], 1
jmp 0x483d79
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x483f74
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045f6a8
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xb0]
mov eax, ebx
call fcn.00484f88
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x483f8c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045f6a8
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xb0]
mov eax, ebx
call fcn.00484f88
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x483fa8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0045f6a8
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xb0]
mov eax, ebx
call fcn.00484f88
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x483e28
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.00404020
ret