Function at 0x551410
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x55171d
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x551734
call fcn.00404868
push 0
mov ecx, 0x551744
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0052b17c
mov edx, dword [ebx + 0x11c]
mov dword [edx + 4], eax
push 0
mov ecx, 0x551758
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0052b17c
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x55176c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0052b17c
mov edx, dword [ebx + 0x11c]
mov dword [edx + 8], eax
push 0
mov ecx, 0x551780
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0052b17c
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x551798
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0052b17c
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x5517a8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0052b04c
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.0054ff50
push 0
mov ecx, 0x5517b8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0052b17c
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x5517c8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0052b04c
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.0054ff50
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x5517dc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0052b04c
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0x11c]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.0054ff50
push 0xffffffffffffffff
mov ecx, 0x5517f0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0052b17c
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x551808
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0052b17c
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x551820
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0052b17c
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x551838
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0052b17c
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x551854
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0052b17c
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x50], eax
cmp dword [esi + 0x1c], 1
jle 0x5515df
xor eax, eax
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x551870
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0052b04c
cmp dword [ebp - 8], 0
je 0x551607
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x54], 1
jmp 0x551611
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x551888
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0052b04c
cmp dword [ebp - 8], 0
je 0x551639
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x55], 1
jmp 0x551643
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x5518a4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0052b04c
cmp dword [ebp - 8], 0
je 0x55166b
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x56], 1
jmp 0x551675
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x551870
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0052b04c
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.00552840
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x551888
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0052b04c
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.00552840
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x5518a4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0052b04c
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.00552840
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x551724
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.004047f4
ret