Function at 0x4fe894
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x4feb96
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x4febac
call fcn.004049a0
push 0
mov ecx, 0x4febbc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004e5a48
mov edx, dword [ebx + 0xe8]
mov dword [edx + 4], eax
push 0
mov ecx, 0x4febd0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004e5a48
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x4febe4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004e5a48
mov edx, dword [ebx + 0xe8]
mov dword [edx + 8], eax
push 0
mov ecx, 0x4febf8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004e5a48
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x4fec10
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004e5a48
mov esi, dword [ebx + 0xe8]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x4fec20
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004e5918
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.004fd444
push 0
mov ecx, 0x4fec30
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004e5a48
mov esi, dword [ebx + 0xe8]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x4fec40
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004e5918
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.004fd444
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x4fec54
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004e5918
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0xe8]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.004fd444
push 0xffffffffffffffff
mov ecx, 0x4fec68
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004e5a48
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x4fec80
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004e5a48
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x4fec98
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004e5a48
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x4fecb0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004e5a48
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x4feccc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004e5a48
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x50], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4fece8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004e5918
cmp dword [ebp - 8], 0
je 0x4fea80
mov eax, dword [ebx + 0xe8]
mov byte [eax + 0x54], 1
jmp 0x4fea8a
mov eax, dword [ebx + 0xe8]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4fed00
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004e5918
cmp dword [ebp - 8], 0
je 0x4feab2
mov eax, dword [ebx + 0xe8]
mov byte [eax + 0x55], 1
jmp 0x4feabc
mov eax, dword [ebx + 0xe8]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4fed1c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004e5918
cmp dword [ebp - 8], 0
je 0x4feae4
mov eax, dword [ebx + 0xe8]
mov byte [eax + 0x56], 1
jmp 0x4feaee
mov eax, dword [ebx + 0xe8]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x4fece8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004e5918
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0x9c]
mov eax, ebx
call fcn.004ff3b8
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4fed00
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004e5918
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0x9c]
mov eax, ebx
call fcn.004ff3b8
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x4fed1c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x38]
call fcn.004e5918
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0x9c]
mov eax, ebx
call fcn.004ff3b8
mov edx, dword [ebx + 0xe8]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4feb9d
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.0040492c
ret