Function at 0x4998f8
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x499c05
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x499c1c
call fcn.00405320
push 0
mov ecx, 0x499c2c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004736d0
mov edx, dword [ebx + 0x11c]
mov dword [edx + 4], eax
push 0
mov ecx, 0x499c40
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004736d0
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x499c54
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004736d0
mov edx, dword [ebx + 0x11c]
mov dword [edx + 8], eax
push 0
mov ecx, 0x499c68
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004736d0
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x499c80
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004736d0
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x499c90
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004735a0
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.00498434
push 0
mov ecx, 0x499ca0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004736d0
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x499cb0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004735a0
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.00498434
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x499cc4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004735a0
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0x11c]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.00498434
push 0xffffffffffffffff
mov ecx, 0x499cd8
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004736d0
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x499cf0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004736d0
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x499d08
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004736d0
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x499d20
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004736d0
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x499d3c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004736d0
mov esi, dword [ebx + 0x11c]
mov dword [esi + 0x50], eax
cmp dword [esi + 0x1c], 1
jle 0x499ac7
xor eax, eax
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x499d58
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004735a0
cmp dword [ebp - 8], 0
je 0x499aef
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x54], 1
jmp 0x499af9
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x499d70
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004735a0
cmp dword [ebp - 8], 0
je 0x499b21
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x55], 1
jmp 0x499b2b
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x499d8c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004735a0
cmp dword [ebp - 8], 0
je 0x499b53
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x56], 1
jmp 0x499b5d
mov eax, dword [ebx + 0x11c]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x499d58
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004735a0
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.0049ad38
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x499d70
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004735a0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.0049ad38
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x499d8c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.004735a0
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xb8]
mov eax, ebx
call fcn.0049ad38
mov edx, dword [ebx + 0x11c]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x499c0c
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.004052ac
ret