Function at 0x48ba08
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x48bd0a
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x48bd20
call fcn.004041f0
push 0
mov ecx, 0x48bd30
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.00472af8
mov edx, dword [ebx + 0xe8]
mov dword [edx + 4], eax
push 0
mov ecx, 0x48bd44
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.00472af8
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x48bd58
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.00472af8
mov edx, dword [ebx + 0xe8]
mov dword [edx + 8], eax
push 0
mov ecx, 0x48bd6c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.00472af8
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x48bd84
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.00472af8
mov esi, dword [ebx + 0xe8]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x48bd94
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004729c8
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.0048a5b8
push 0
mov ecx, 0x48bda4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.00472af8
mov esi, dword [ebx + 0xe8]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x48bdb4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004729c8
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.0048a5b8
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x48bdc8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004729c8
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0xe8]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.0048a5b8
push 0xffffffffffffffff
mov ecx, 0x48bddc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.00472af8
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x48bdf4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.00472af8
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x48be0c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.00472af8
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x48be24
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.00472af8
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x48be40
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.00472af8
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x50], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x48be5c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004729c8
cmp dword [ebp - 8], 0
je 0x48bbf4
mov eax, dword [ebx + 0xe8]
mov byte [eax + 0x54], 1
jmp 0x48bbfe
mov eax, dword [ebx + 0xe8]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x48be74
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004729c8
cmp dword [ebp - 8], 0
je 0x48bc26
mov eax, dword [ebx + 0xe8]
mov byte [eax + 0x55], 1
jmp 0x48bc30
mov eax, dword [ebx + 0xe8]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x48be90
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004729c8
cmp dword [ebp - 8], 0
je 0x48bc58
mov eax, dword [ebx + 0xe8]
mov byte [eax + 0x56], 1
jmp 0x48bc62
mov eax, dword [ebx + 0xe8]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x48be5c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004729c8
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0x9c]
mov eax, ebx
call fcn.0048c52c
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x48be74
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004729c8
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0x9c]
mov eax, ebx
call fcn.0048c52c
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x48be90
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004729c8
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0x9c]
mov eax, ebx
call fcn.0048c52c
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x48bd11
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.0040417c
ret