Function at 0xcbd5c0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
push ecx
push esi
mov dword [ebp - 4], 0
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [ebp - 4], eax
mov esi, dword [ebp - 4]
mov dword [0x9f90e0], esi
test esi, esi
je 0xcbd7f3
call fcn.00cbd520
mov ecx, dword [0x9f8a04]
push ecx
push esi
mov dword [fcn.009f9010], eax
call eax
mov edx, dword [0x9f8dc8]
mov dword [fcn.009f8f30], eax
mov eax, dword [0x9f90e0]
push edx
push eax
call dword [fcn.009f9010]
mov ecx, dword [0x9f8e44]
mov edx, dword [0x9f90e0]
push ecx
push edx
mov dword [fcn.009f909c], eax
call dword [fcn.009f9010]
mov ecx, dword [0x9f90e0]
mov dword [0x9f8f20], eax
mov eax, dword [0x9f8a64]
push eax
push ecx
call dword [fcn.009f9010]
mov edx, dword [0x9f8a50]
mov dword [0x9f908c], eax
mov eax, dword [0x9f90e0]
push edx
push eax
call dword [fcn.009f9010]
mov ecx, dword [0x9f8af8]
mov edx, dword [0x9f90e0]
push ecx
push edx
mov dword [0x9f8f4c], eax
call dword [fcn.009f9010]
mov ecx, dword [0x9f90e0]
mov dword [0x9f8f2c], eax
mov eax, dword [0x9f8cd4]
push eax
push ecx
call dword [fcn.009f9010]
mov edx, dword [0x9f8b3c]
mov dword [0x9f90e4], eax
mov eax, dword [0x9f90e0]
push edx
push eax
call dword [fcn.009f9010]
mov ecx, dword [0x9f8da0]
mov edx, dword [0x9f90e0]
push ecx
push edx
mov dword [0x9f90d0], eax
call dword [fcn.009f9010]
mov ecx, dword [0x9f90e0]
mov dword [0x9f8f90], eax
mov eax, dword [0x9f8d48]
push eax
push ecx
call dword [fcn.009f9010]
mov edx, dword [0x9f8bbc]
mov dword [fcn.009f8fa0], eax
mov eax, dword [0x9f90e0]
push edx
push eax
call dword [fcn.009f9010]
mov ecx, dword [0x9f8ae8]
mov edx, dword [0x9f90e0]
push ecx
push edx
mov dword [0x9f9054], eax
call dword [fcn.009f9010]
mov ecx, dword [0x9f90e0]
mov dword [fcn.009f9088], eax
mov eax, dword [0x9f8e0c]
push eax
push ecx
call dword [fcn.009f9010]
mov edx, dword [0x9f88b0]
mov dword [fcn.009f907c], eax
push edx
mov eax, dword [0x9f90e0]
push eax
call dword [fcn.009f9010]
mov ecx, dword [0x9f8d98]
mov edx, dword [0x9f90e0]
push ecx
push edx
mov dword [fcn.009f9134], eax
call dword [fcn.009f9010]
mov ecx, dword [0x9f90e0]
mov dword [fcn.009f90f4], eax
mov eax, dword [0x9f8a24]
push eax
push ecx
call dword [fcn.009f9010]
mov edx, dword [0x9f8c18]
mov dword [fcn.009f910c], eax
mov eax, dword [0x9f90e0]
push edx
push eax
call dword [fcn.009f9010]
mov ecx, dword [0x9f8e34]
mov edx, dword [0x9f90e0]
push ecx
push edx
mov dword [fcn.009f8fac], eax
call dword [fcn.009f9010]
mov ecx, dword [0x9f90e0]
mov dword [0x9f901c], eax
mov eax, dword [0x9f88bc]
push eax
push ecx
call dword [fcn.009f9010]
mov edx, dword [0x9f892c]
mov dword [0x9f913c], eax
mov eax, dword [0x9f90e0]
push edx
push eax
call dword [fcn.009f9010]
mov ecx, dword [0x9f8ab0]
mov edx, dword [0x9f90e0]
push ecx
push edx
mov dword [0x9f9044], eax
call dword [fcn.009f9010]
mov dword [0x9f904c], eax
mov eax, dword [0x9f8d50]
push eax
call dword [fcn.009f8f30]
mov ecx, dword [0x9f897c]
push ecx
mov dword [0x9f8ef8], eax
call dword [fcn.009f8f30]
mov edx, dword [0x9f8904]
push edx
mov dword [0x9f9020], eax
call dword [fcn.009f8f30]
mov dword [0x9f9114], eax
mov eax, dword [0x9f89dc]
push eax
call dword [fcn.009f8f30]
mov ecx, dword [0x9f8b28]
push ecx
mov dword [0x9f8fd4], eax
call dword [fcn.009f8f30]
mov dword [0x9f9004], eax
mov eax, dword [0x9f8ef8]
pop esi
test eax, eax
je 0xcbd868
mov edx, dword [0x9f8cac]
push edx
push eax
call dword [fcn.009f9010]
mov dword [fcn.009f8fe0], eax
mov eax, dword [0x9f9020]
test eax, eax
je 0xcbd89c
mov ecx, dword [0x9f8c24]
push ecx
push eax
call dword [fcn.009f9010]
mov edx, dword [0x9f89cc]
mov dword [fcn.009f905c], eax
mov eax, dword [0x9f9020]
push edx
push eax
call dword [fcn.009f9010]
mov dword [fcn.009f9000], eax
mov eax, dword [0x9f9114]
test eax, eax
je 0xcbd8b8
mov ecx, dword [0x9f8b94]
push ecx
push eax
call dword [fcn.009f9010]
mov dword [fcn.009f90a0], eax
mov eax, dword [0x9f8fd4]
test eax, eax
je 0xcbd8d4
mov edx, dword [0x9f8928]
push edx
push eax
call dword [fcn.009f9010]
mov dword [fcn.009f9068], eax
mov eax, dword [0x9f9004]
test eax, eax
je 0xcbd907
mov ecx, dword [0x9f8c14]
push ecx
push eax
call dword [fcn.009f9010]
mov edx, dword [0x9f9004]
push 0x7f5864
push edx
mov dword [0x9f90d4], eax
call dword [fcn.009f9010]
mov dword [0x9f8f24], eax
mov esp, ebp
pop ebp
ret