Function at 0x48b570
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x48b87d
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x48b894
call fcn.004048d0
push 0
mov ecx, 0x48b8a4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00469b7c
mov edx, dword [ebx + 0xf8]
mov dword [edx + 4], eax
push 0
mov ecx, 0x48b8b8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00469b7c
mov edx, dword [ebx + 0xf8]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x48b8cc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00469b7c
mov edx, dword [ebx + 0xf8]
mov dword [edx + 8], eax
push 0
mov ecx, 0x48b8e0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00469b7c
mov edx, dword [ebx + 0xf8]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x48b8f8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00469b7c
mov esi, dword [ebx + 0xf8]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x48b908
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00469a4c
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.0048a0f0
push 0
mov ecx, 0x48b918
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00469b7c
mov esi, dword [ebx + 0xf8]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x48b928
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00469a4c
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.0048a0f0
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x48b93c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00469a4c
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0xf8]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.0048a0f0
push 0xffffffffffffffff
mov ecx, 0x48b950
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00469b7c
mov edx, dword [ebx + 0xf8]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x48b968
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00469b7c
mov edx, dword [ebx + 0xf8]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x48b980
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00469b7c
mov edx, dword [ebx + 0xf8]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x48b998
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00469b7c
mov edx, dword [ebx + 0xf8]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x48b9b4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00469b7c
mov esi, dword [ebx + 0xf8]
mov dword [esi + 0x50], eax
cmp dword [esi + 0x1c], 1
jle 0x48b73f
xor eax, eax
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x48b9d0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00469a4c
cmp dword [ebp - 8], 0
je 0x48b767
mov eax, dword [ebx + 0xf8]
mov byte [eax + 0x54], 1
jmp 0x48b771
mov eax, dword [ebx + 0xf8]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x48b9e8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00469a4c
cmp dword [ebp - 8], 0
je 0x48b799
mov eax, dword [ebx + 0xf8]
mov byte [eax + 0x55], 1
jmp 0x48b7a3
mov eax, dword [ebx + 0xf8]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x48ba04
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00469a4c
cmp dword [ebp - 8], 0
je 0x48b7cb
mov eax, dword [ebx + 0xf8]
mov byte [eax + 0x56], 1
jmp 0x48b7d5
mov eax, dword [ebx + 0xf8]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x48b9d0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00469a4c
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xa8]
mov eax, ebx
call fcn.0048c9e4
mov edx, dword [ebx + 0xf8]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x48b9e8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00469a4c
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xa8]
mov eax, ebx
call fcn.0048c9e4
mov edx, dword [ebx + 0xf8]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x48ba04
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00469a4c
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xa8]
mov eax, ebx
call fcn.0048c9e4
mov edx, dword [ebx + 0xf8]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x48b884
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.0040485c
ret