Function at 0x4e5320
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x4e5622
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x4e5638
call fcn.004049c8
push 0
mov ecx, 0x4e5648
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004ca9fc
mov edx, dword [ebx + 0xe8]
mov dword [edx + 4], eax
push 0
mov ecx, 0x4e565c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004ca9fc
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x4e5670
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004ca9fc
mov edx, dword [ebx + 0xe8]
mov dword [edx + 8], eax
push 0
mov ecx, 0x4e5684
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004ca9fc
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x4e569c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004ca9fc
mov esi, dword [ebx + 0xe8]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x4e56ac
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004ca8cc
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.004e3e94
push 0
mov ecx, 0x4e56bc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004ca9fc
mov esi, dword [ebx + 0xe8]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x4e56cc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004ca8cc
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.004e3e94
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x4e56e0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004ca8cc
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0xe8]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.004e3e94
push 0xffffffffffffffff
mov ecx, 0x4e56f4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004ca9fc
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x4e570c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004ca9fc
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x4e5724
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004ca9fc
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x4e573c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004ca9fc
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x4e5758
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004ca9fc
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x50], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4e5774
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004ca8cc
cmp dword [ebp - 8], 0
je 0x4e550c
mov eax, dword [ebx + 0xe8]
mov byte [eax + 0x54], 1
jmp 0x4e5516
mov eax, dword [ebx + 0xe8]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4e578c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004ca8cc
cmp dword [ebp - 8], 0
je 0x4e553e
mov eax, dword [ebx + 0xe8]
mov byte [eax + 0x55], 1
jmp 0x4e5548
mov eax, dword [ebx + 0xe8]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4e57a8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004ca8cc
cmp dword [ebp - 8], 0
je 0x4e5570
mov eax, dword [ebx + 0xe8]
mov byte [eax + 0x56], 1
jmp 0x4e557a
mov eax, dword [ebx + 0xe8]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x4e5774
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004ca8cc
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0x9c]
mov eax, ebx
call fcn.004e5e44
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4e578c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004ca8cc
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0x9c]
mov eax, ebx
call fcn.004e5e44
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x4e57a8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004ca8cc
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0x9c]
mov eax, ebx
call fcn.004e5e44
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4e5629
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.00404954
ret