Function at 0x54e184
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x54e491
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x54e4a8
call fcn.00404868
push 0
mov ecx, 0x54e4b8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00527f44
mov edx, dword [ebx + 0x11c]
mov dword [edx + 4], eax
push 0
mov ecx, 0x54e4cc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00527f44
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x54e4e0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00527f44
mov edx, dword [ebx + 0x11c]
mov dword [edx + 8], eax
push 0
mov ecx, 0x54e4f4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00527f44
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x54e50c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00527f44
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x54e51c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00527e14
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.0054ccc4
push 0
mov ecx, 0x54e52c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00527f44
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x54e53c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00527e14
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.0054ccc4
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x54e550
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00527e14
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0x11c]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.0054ccc4
push 0xffffffffffffffff
mov ecx, 0x54e564
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00527f44
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x54e57c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00527f44
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x54e594
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00527f44
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x54e5ac
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00527f44
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x54e5c8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00527f44
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x50], eax
cmp dword [esi + 0x1c], 1
jle 0x54e353
xor eax, eax
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x54e5e4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00527e14
cmp dword [ebp - 8], 0
je 0x54e37b
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x54], 1
jmp 0x54e385
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x54e5fc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00527e14
cmp dword [ebp - 8], 0
je 0x54e3ad
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x55], 1
jmp 0x54e3b7
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x54e618
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00527e14
cmp dword [ebp - 8], 0
je 0x54e3df
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x56], 1
jmp 0x54e3e9
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x54e5e4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00527e14
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.0054f5b4
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x54e5fc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00527e14
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.0054f5b4
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x54e618
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.00527e14
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.0054f5b4
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x54e498
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.004047f4
ret