Function at 0x4a60c8
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x4a63d5
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x4a63ec
call fcn.00404444
push 0
mov ecx, 0x4a63fc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00480a4c
mov edx, dword [ebx + 0x100]
mov dword [edx + 4], eax
push 0
mov ecx, 0x4a6410
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00480a4c
mov edx, dword [ebx + 0x100]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x4a6424
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00480a4c
mov edx, dword [ebx + 0x100]
mov dword [edx + 8], eax
push 0
mov ecx, 0x4a6438
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00480a4c
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x4a6450
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00480a4c
mov esi, dword [ebx + 0x100]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x4a6460
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0048091c
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.004a4c08
push 0
mov ecx, 0x4a6470
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00480a4c
mov esi, dword [ebx + 0x100]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x4a6480
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0048091c
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.004a4c08
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x4a6494
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0048091c
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0x100]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.004a4c08
push 0xffffffffffffffff
mov ecx, 0x4a64a8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00480a4c
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x4a64c0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00480a4c
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x4a64d8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00480a4c
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x4a64f0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00480a4c
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x4a650c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00480a4c
mov esi, dword [ebx + 0x100]
mov dword [esi + 0x50], eax
cmp dword [esi + 0x1c], 1
jle 0x4a6297
xor eax, eax
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4a6528
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0048091c
cmp dword [ebp - 8], 0
je 0x4a62bf
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x54], 1
jmp 0x4a62c9
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4a6540
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0048091c
cmp dword [ebp - 8], 0
je 0x4a62f1
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x55], 1
jmp 0x4a62fb
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4a655c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0048091c
cmp dword [ebp - 8], 0
je 0x4a6323
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x56], 1
jmp 0x4a632d
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x4a6528
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0048091c
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xb0]
mov eax, ebx
call fcn.004a74f8
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4a6540
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0048091c
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xb0]
mov eax, ebx
call fcn.004a74f8
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x4a655c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0048091c
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xb0]
mov eax, ebx
call fcn.004a74f8
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4a63dc
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.004043d0
ret