Function at 0x4986af
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x4902e9
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x490300
call fcn.0040ca7f
push 0
mov ecx, 0x490310
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00472367
mov edx, dword [ebx + 0x11c]
mov dword [edx + 4], eax
push 0
mov ecx, 0x490324
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00472367
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x490338
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00472367
mov edx, dword [ebx + 0x11c]
mov dword [edx + 8], eax
push 0
mov ecx, 0x49034c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00472367
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x490364
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00472367
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x490374
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00472237
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.004971ef
push 0
mov ecx, 0x490384
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00472367
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x490394
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00472237
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.004971ef
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x4903a8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00472237
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0x11c]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.004971ef
push 0xffffffffffffffff
mov ecx, 0x4903bc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00472367
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x4903d4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00472367
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x4903ec
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00472367
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x490404
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00472367
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x490420
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00472367
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x50], eax
cmp dword [esi + 0x1c], 1
jle 0x49887e
xor eax, eax
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x49043c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00472237
cmp dword [ebp - 8], 0
je 0x4988a6
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x54], 1
jmp 0x4988b0
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x490454
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00472237
cmp dword [ebp - 8], 0
je 0x4988d8
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x55], 1
jmp 0x4988e2
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x490470
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00472237
cmp dword [ebp - 8], 0
je 0x49890a
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x56], 1
jmp 0x498914
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x49043c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00472237
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.00499adf
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x490454
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00472237
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.00499adf
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x490470
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00472237
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.00499adf
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4902f0
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.0040ca0b
ret