Function at 0x4acb64
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x4ace71
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x4ace88
call fcn.00405340
push 0
mov ecx, 0x4ace98
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0048695c
mov edx, dword [ebx + 0x11c]
mov dword [edx + 4], eax
push 0
mov ecx, 0x4aceac
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0048695c
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x4acec0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0048695c
mov edx, dword [ebx + 0x11c]
mov dword [edx + 8], eax
push 0
mov ecx, 0x4aced4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0048695c
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x4aceec
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0048695c
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x4acefc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0048682c
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.004ab6a0
push 0
mov ecx, 0x4acf0c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0048695c
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x4acf1c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0048682c
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.004ab6a0
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x4acf30
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0048682c
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0x11c]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.004ab6a0
push 0xffffffffffffffff
mov ecx, 0x4acf44
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0048695c
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x4acf5c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0048695c
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x4acf74
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0048695c
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x4acf8c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0048695c
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x4acfa8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0048695c
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x50], eax
cmp dword [esi + 0x1c], 1
jle 0x4acd33
xor eax, eax
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4acfc4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0048682c
cmp dword [ebp - 8], 0
je 0x4acd5b
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x54], 1
jmp 0x4acd65
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4acfdc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0048682c
cmp dword [ebp - 8], 0
je 0x4acd8d
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x55], 1
jmp 0x4acd97
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4acff8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0048682c
cmp dword [ebp - 8], 0
je 0x4acdbf
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x56], 1
jmp 0x4acdc9
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x4acfc4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0048682c
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.004adfa4
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4acfdc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0048682c
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.004adfa4
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x4acff8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0048682c
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.004adfa4
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4ace78
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.004052cc
ret