Function at 0x1816b90
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
push ecx
push esi
mov dword [ebp - 4], 0
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [ebp - 4], eax
mov esi, dword [ebp - 4]
mov dword [0x15590e0], esi
test esi, esi
je 0x1816dc3
call fcn.01816af0
mov ecx, dword [0x1558a04]
push ecx
push esi
mov dword [fcn.01559010], eax
call eax
mov edx, dword [0x1558dc8]
mov dword [fcn.01558f30], eax
mov eax, dword [0x15590e0]
push edx
push eax
call dword [fcn.01559010]
mov ecx, dword [0x1558e44]
mov edx, dword [0x15590e0]
push ecx
push edx
mov dword [fcn.0155909c], eax
call dword [fcn.01559010]
mov ecx, dword [0x15590e0]
mov dword [0x1558f20], eax
mov eax, dword [0x1558a64]
push eax
push ecx
call dword [fcn.01559010]
mov edx, dword [0x1558a50]
mov dword [0x155908c], eax
mov eax, dword [0x15590e0]
push edx
push eax
call dword [fcn.01559010]
mov ecx, dword [0x1558af8]
mov edx, dword [0x15590e0]
push ecx
push edx
mov dword [0x1558f4c], eax
call dword [fcn.01559010]
mov ecx, dword [0x15590e0]
mov dword [0x1558f2c], eax
mov eax, dword [0x1558cd4]
push eax
push ecx
call dword [fcn.01559010]
mov edx, dword [0x1558b3c]
mov dword [0x15590e4], eax
mov eax, dword [0x15590e0]
push edx
push eax
call dword [fcn.01559010]
mov ecx, dword [0x1558da0]
mov edx, dword [0x15590e0]
push ecx
push edx
mov dword [0x15590d0], eax
call dword [fcn.01559010]
mov ecx, dword [0x15590e0]
mov dword [0x1558f90], eax
mov eax, dword [0x1558d48]
push eax
push ecx
call dword [fcn.01559010]
mov edx, dword [0x1558bbc]
mov dword [fcn.01558fa0], eax
mov eax, dword [0x15590e0]
push edx
push eax
call dword [fcn.01559010]
mov ecx, dword [0x1558ae8]
mov edx, dword [0x15590e0]
push ecx
push edx
mov dword [0x1559054], eax
call dword [fcn.01559010]
mov ecx, dword [0x15590e0]
mov dword [fcn.01559088], eax
mov eax, dword [0x1558e0c]
push eax
push ecx
call dword [fcn.01559010]
mov edx, dword [0x15588b0]
mov dword [fcn.0155907c], eax
push edx
mov eax, dword [0x15590e0]
push eax
call dword [fcn.01559010]
mov ecx, dword [0x1558d98]
mov edx, dword [0x15590e0]
push ecx
push edx
mov dword [fcn.01559134], eax
call dword [fcn.01559010]
mov ecx, dword [0x15590e0]
mov dword [fcn.015590f4], eax
mov eax, dword [0x1558a24]
push eax
push ecx
call dword [fcn.01559010]
mov edx, dword [0x1558c18]
mov dword [fcn.0155910c], eax
mov eax, dword [0x15590e0]
push edx
push eax
call dword [fcn.01559010]
mov ecx, dword [0x1558e34]
mov edx, dword [0x15590e0]
push ecx
push edx
mov dword [fcn.01558fac], eax
call dword [fcn.01559010]
mov ecx, dword [0x15590e0]
mov dword [0x155901c], eax
mov eax, dword [0x15588bc]
push eax
push ecx
call dword [fcn.01559010]
mov edx, dword [0x155892c]
mov dword [0x155913c], eax
mov eax, dword [0x15590e0]
push edx
push eax
call dword [fcn.01559010]
mov ecx, dword [0x1558ab0]
mov edx, dword [0x15590e0]
push ecx
push edx
mov dword [0x1559044], eax
call dword [fcn.01559010]
mov dword [0x155904c], eax
mov eax, dword [0x1558d50]
push eax
call dword [fcn.01558f30]
mov ecx, dword [0x155897c]
push ecx
mov dword [0x1558ef8], eax
call dword [fcn.01558f30]
mov edx, dword [0x1558904]
push edx
mov dword [0x1559020], eax
call dword [fcn.01558f30]
mov dword [0x1559114], eax
mov eax, dword [0x15589dc]
push eax
call dword [fcn.01558f30]
mov ecx, dword [0x1558b28]
push ecx
mov dword [0x1558fd4], eax
call dword [fcn.01558f30]
mov dword [0x1559004], eax
mov eax, dword [0x1558ef8]
pop esi
test eax, eax
je 0x1816e38
mov edx, dword [0x1558cac]
push edx
push eax
call dword [fcn.01559010]
mov dword [fcn.01558fe0], eax
mov eax, dword [0x1559020]
test eax, eax
je 0x1816e6c
mov ecx, dword [0x1558c24]
push ecx
push eax
call dword [fcn.01559010]
mov edx, dword [0x15589cc]
mov dword [fcn.0155905c], eax
mov eax, dword [0x1559020]
push edx
push eax
call dword [fcn.01559010]
mov dword [fcn.01559000], eax
mov eax, dword [0x1559114]
test eax, eax
je 0x1816e88
mov ecx, dword [0x1558b94]
push ecx
push eax
call dword [fcn.01559010]
mov dword [fcn.015590a0], eax
mov eax, dword [0x1558fd4]
test eax, eax
je 0x1816ea4
mov edx, dword [0x1558928]
push edx
push eax
call dword [fcn.01559010]
mov dword [fcn.01559068], eax
mov eax, dword [0x1559004]
test eax, eax
je 0x1816ed7
mov ecx, dword [0x1558c14]
push ecx
push eax
call dword [fcn.01559010]
mov edx, dword [0x1559004]
push 0x135529c
push edx
mov dword [0x15590d4], eax
call dword [fcn.01559010]
mov dword [0x1558f24], eax
mov esp, ebp
pop ebp
ret