Function at 0x4b8de4
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x4b90f1
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x4b9108
call fcn.00404a60
push 0
mov ecx, 0x4b9118
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0049476c
mov edx, dword [ebx + 0x100]
mov dword [edx + 4], eax
push 0
mov ecx, 0x4b912c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0049476c
mov edx, dword [ebx + 0x100]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x4b9140
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0049476c
mov edx, dword [ebx + 0x100]
mov dword [edx + 8], eax
push 0
mov ecx, 0x4b9154
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0049476c
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x4b916c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0049476c
mov esi, dword [ebx + 0x100]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x4b917c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0049463c
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.004b7924
push 0
mov ecx, 0x4b918c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0049476c
mov esi, dword [ebx + 0x100]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x4b919c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0049463c
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.004b7924
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x4b91b0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0049463c
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0x100]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.004b7924
push 0xffffffffffffffff
mov ecx, 0x4b91c4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0049476c
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x4b91dc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0049476c
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x4b91f4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0049476c
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x4b920c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0049476c
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x4b9228
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0049476c
mov esi, dword [ebx + 0x100]
mov dword [esi + 0x50], eax
cmp dword [esi + 0x1c], 1
jle 0x4b8fb3
xor eax, eax
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4b9244
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0049463c
cmp dword [ebp - 8], 0
je 0x4b8fdb
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x54], 1
jmp 0x4b8fe5
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4b925c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0049463c
cmp dword [ebp - 8], 0
je 0x4b900d
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x55], 1
jmp 0x4b9017
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4b9278
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0049463c
cmp dword [ebp - 8], 0
je 0x4b903f
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x56], 1
jmp 0x4b9049
mov eax, dword [ebx + 0x100]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x4b9244
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0049463c
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xb0]
mov eax, ebx
call fcn.004ba218
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4b925c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0049463c
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xb0]
mov eax, ebx
call fcn.004ba218
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x4b9278
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0049463c
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xb0]
mov eax, ebx
call fcn.004ba218
mov edx, dword [ebx + 0x100]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4b90f8
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.004049ec
ret