Function at 0x7e15c0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
push ecx
push esi
mov dword [ebp - 4], 0
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [ebp - 4], eax
mov esi, dword [ebp - 4]
mov dword [0x5190e0], esi
test esi, esi
je 0x7e17f3
call fcn.007e1520
mov ecx, dword [0x518a04]
push ecx
push esi
mov dword [fcn.00519010], eax
call eax
mov edx, dword [0x518dc8]
mov dword [fcn.00518f30], eax
mov eax, dword [0x5190e0]
push edx
push eax
call dword [fcn.00519010]
mov ecx, dword [0x518e44]
mov edx, dword [0x5190e0]
push ecx
push edx
mov dword [fcn.0051909c], eax
call dword [fcn.00519010]
mov ecx, dword [0x5190e0]
mov dword [0x518f20], eax
mov eax, dword [0x518a64]
push eax
push ecx
call dword [fcn.00519010]
mov edx, dword [0x518a50]
mov dword [0x51908c], eax
mov eax, dword [0x5190e0]
push edx
push eax
call dword [fcn.00519010]
mov ecx, dword [0x518af8]
mov edx, dword [0x5190e0]
push ecx
push edx
mov dword [0x518f4c], eax
call dword [fcn.00519010]
mov ecx, dword [0x5190e0]
mov dword [0x518f2c], eax
mov eax, dword [0x518cd4]
push eax
push ecx
call dword [fcn.00519010]
mov edx, dword [0x518b3c]
mov dword [0x5190e4], eax
mov eax, dword [0x5190e0]
push edx
push eax
call dword [fcn.00519010]
mov ecx, dword [0x518da0]
mov edx, dword [0x5190e0]
push ecx
push edx
mov dword [0x5190d0], eax
call dword [fcn.00519010]
mov ecx, dword [0x5190e0]
mov dword [0x518f90], eax
mov eax, dword [0x518d48]
push eax
push ecx
call dword [fcn.00519010]
mov edx, dword [0x518bbc]
mov dword [fcn.00518fa0], eax
mov eax, dword [0x5190e0]
push edx
push eax
call dword [fcn.00519010]
mov ecx, dword [0x518ae8]
mov edx, dword [0x5190e0]
push ecx
push edx
mov dword [0x519054], eax
call dword [fcn.00519010]
mov ecx, dword [0x5190e0]
mov dword [fcn.00519088], eax
mov eax, dword [0x518e0c]
push eax
push ecx
call dword [fcn.00519010]
mov edx, dword [0x5188b0]
mov dword [fcn.0051907c], eax
push edx
mov eax, dword [0x5190e0]
push eax
call dword [fcn.00519010]
mov ecx, dword [0x518d98]
mov edx, dword [0x5190e0]
push ecx
push edx
mov dword [fcn.00519134], eax
call dword [fcn.00519010]
mov ecx, dword [0x5190e0]
mov dword [fcn.005190f4], eax
mov eax, dword [0x518a24]
push eax
push ecx
call dword [fcn.00519010]
mov edx, dword [0x518c18]
mov dword [fcn.0051910c], eax
mov eax, dword [0x5190e0]
push edx
push eax
call dword [fcn.00519010]
mov ecx, dword [0x518e34]
mov edx, dword [0x5190e0]
push ecx
push edx
mov dword [fcn.00518fac], eax
call dword [fcn.00519010]
mov ecx, dword [0x5190e0]
mov dword [0x51901c], eax
mov eax, dword [0x5188bc]
push eax
push ecx
call dword [fcn.00519010]
mov edx, dword [0x51892c]
mov dword [0x51913c], eax
mov eax, dword [0x5190e0]
push edx
push eax
call dword [fcn.00519010]
mov ecx, dword [0x518ab0]
mov edx, dword [0x5190e0]
push ecx
push edx
mov dword [0x519044], eax
call dword [fcn.00519010]
mov dword [0x51904c], eax
mov eax, dword [0x518d50]
push eax
call dword [fcn.00518f30]
mov ecx, dword [0x51897c]
push ecx
mov dword [0x518ef8], eax
call dword [fcn.00518f30]
mov edx, dword [0x518904]
push edx
mov dword [0x519020], eax
call dword [fcn.00518f30]
mov dword [0x519114], eax
mov eax, dword [0x5189dc]
push eax
call dword [fcn.00518f30]
mov ecx, dword [0x518b28]
push ecx
mov dword [0x518fd4], eax
call dword [fcn.00518f30]
mov dword [0x519004], eax
mov eax, dword [0x518ef8]
pop esi
test eax, eax
je 0x7e1868
mov edx, dword [0x518cac]
push edx
push eax
call dword [fcn.00519010]
mov dword [fcn.00518fe0], eax
mov eax, dword [0x519020]
test eax, eax
je 0x7e189c
mov ecx, dword [0x518c24]
push ecx
push eax
call dword [fcn.00519010]
mov edx, dword [0x5189cc]
mov dword [fcn.0051905c], eax
mov eax, dword [0x519020]
push edx
push eax
call dword [fcn.00519010]
mov dword [fcn.00519000], eax
mov eax, dword [0x519114]
test eax, eax
je 0x7e18b8
mov ecx, dword [0x518b94]
push ecx
push eax
call dword [fcn.00519010]
mov dword [fcn.005190a0], eax
mov eax, dword [0x518fd4]
test eax, eax
je 0x7e18d4
mov edx, dword [0x518928]
push edx
push eax
call dword [fcn.00519010]
mov dword [fcn.00519068], eax
mov eax, dword [0x519004]
test eax, eax
je 0x7e1907
mov ecx, dword [0x518c14]
push ecx
push eax
call dword [fcn.00519010]
mov edx, dword [0x519004]
push 0x315864
push edx
mov dword [0x5190d4], eax
call dword [fcn.00519010]
mov dword [0x518f24], eax
mov esp, ebp
pop ebp
ret