Function at 0x4afff4
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x4b0301
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x4b0318
call fcn.00404030
push 0
mov ecx, 0x4b0328
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00489e0c
mov edx, dword [ebx + 0x11c]
mov dword [edx + 4], eax
push 0
mov ecx, 0x4b033c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00489e0c
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x4b0350
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00489e0c
mov edx, dword [ebx + 0x11c]
mov dword [edx + 8], eax
push 0
mov ecx, 0x4b0364
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00489e0c
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x4b037c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00489e0c
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x4b038c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00489cdc
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.004aeb34
push 0
mov ecx, 0x4b039c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00489e0c
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x4b03ac
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00489cdc
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.004aeb34
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x4b03c0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00489cdc
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0x11c]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.004aeb34
push 0xffffffffffffffff
mov ecx, 0x4b03d4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00489e0c
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x4b03ec
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00489e0c
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x4b0404
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00489e0c
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x4b041c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00489e0c
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x4b0438
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00489e0c
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x50], eax
cmp dword [esi + 0x1c], 1
jle 0x4b01c3
xor eax, eax
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4b0454
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00489cdc
cmp dword [ebp - 8], 0
je 0x4b01eb
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x54], 1
jmp 0x4b01f5
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4b046c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00489cdc
cmp dword [ebp - 8], 0
je 0x4b021d
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x55], 1
jmp 0x4b0227
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4b0488
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00489cdc
cmp dword [ebp - 8], 0
je 0x4b024f
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x56], 1
jmp 0x4b0259
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x4b0454
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00489cdc
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.004b1428
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4b046c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00489cdc
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.004b1428
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x4b0488
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00489cdc
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.004b1428
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4b0308
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.00403fbc
ret