Function at 0x47c334
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x47c636
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x47c64c
call fcn.00404328
push 0
mov ecx, 0x47c65c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046117c
mov edx, dword [ebx + 0xec]
mov dword [edx + 4], eax
push 0
mov ecx, 0x47c670
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046117c
mov edx, dword [ebx + 0xec]
mov dword [edx + 0xc], eax
push 0
mov ecx, 0x47c684
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046117c
mov edx, dword [ebx + 0xec]
mov dword [edx + 8], eax
push 0
mov ecx, 0x47c698
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046117c
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x10], eax
push 0
mov ecx, 0x47c6b0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046117c
mov esi, dword [ebx + 0xec]
mov dword [esi + 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x47c6c0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046104c
mov ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x14]
mov eax, ebx
call fcn.0047aee4
push 0
mov ecx, 0x47c6d0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046117c
mov esi, dword [ebx + 0xec]
mov dword [esi + 0x1c], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x47c6e0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046104c
mov ecx, dword [ebp - 0x10]
mov edx, dword [esi + 0x44]
mov eax, ebx
call fcn.0047aee4
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x47c6f4
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046104c
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebx + 0xec]
mov edx, dword [eax + 0x48]
mov eax, ebx
call fcn.0047aee4
push 0xffffffffffffffff
mov ecx, 0x47c708
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046117c
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x2c], eax
push 0xffffffffffffffff
mov ecx, 0x47c720
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046117c
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x30], eax
push 0xffffffffffffffff
mov ecx, 0x47c738
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046117c
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x34], eax
push 0
mov ecx, 0x47c750
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046117c
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x4c], eax
push 0
mov ecx, 0x47c76c
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046117c
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x50], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x47c788
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046104c
cmp dword [ebp - 8], 0
je 0x47c520
mov eax, dword [ebx + 0xec]
mov byte [eax + 0x54], 1
jmp 0x47c52a
mov eax, dword [ebx + 0xec]
mov byte [eax + 0x54], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x47c7a0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046104c
cmp dword [ebp - 8], 0
je 0x47c552
mov eax, dword [ebx + 0xec]
mov byte [eax + 0x55], 1
jmp 0x47c55c
mov eax, dword [ebx + 0xec]
mov byte [eax + 0x55], 0
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x47c7bc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046104c
cmp dword [ebp - 8], 0
je 0x47c584
mov eax, dword [ebx + 0xec]
mov byte [eax + 0x56], 1
jmp 0x47c58e
mov eax, dword [ebx + 0xec]
mov byte [eax + 0x56], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x47c788
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046104c
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebx + 0xa0]
mov eax, ebx
call fcn.0047d1d8
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x38], eax
push 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x47c7a0
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046104c
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0xa0]
mov eax, ebx
call fcn.0047d1d8
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x3c], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x47c7bc
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x34]
call fcn.0046104c
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebx + 0xa0]
mov eax, ebx
call fcn.0047d1d8
mov edx, dword [ebx + 0xec]
mov dword [edx + 0x40], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x47c63d
lea eax, [ebp - 0x20]
mov edx, 8
call fcn.004042b4
ret