Function at 0x4175a0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
push ecx
mov dword [ebp - 4], 0
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
mov dword [0xb39bb4], eax
test eax, eax
je 0x4177e2
mov ecx, dword [0xb28cec]
push ecx
push eax
call fcn.00406ac0
mov edx, dword [0xb28b14]
mov ecx, dword [0xb39bb4]
add esp, 8
push edx
push ecx
mov dword [0xb39ae4], eax
call eax
mov edx, dword [0xb28ea4]
mov dword [0xb39a00], eax
mov eax, dword [0xb39bb4]
push edx
push eax
call dword [0xb39ae4]
mov ecx, dword [0xb28f0c]
mov edx, dword [0xb39bb4]
push ecx
push edx
mov dword [0xb39b74], eax
call dword [0xb39ae4]
mov ecx, dword [0xb39bb4]
mov dword [0xb399ec], eax
mov eax, dword [0xb28b70]
push eax
push ecx
call dword [0xb39ae4]
mov edx, dword [0xb28b5c]
mov dword [0xb39b64], eax
mov eax, dword [0xb39bb4]
push edx
push eax
call dword [0xb39ae4]
mov ecx, dword [0xb28bfc]
mov edx, dword [0xb39bb4]
push ecx
push edx
mov dword [0xb39a20], eax
call dword [0xb39ae4]
mov ecx, dword [0xb39bb4]
mov dword [0xb399f8], eax
mov eax, dword [0xb28dc4]
push eax
push ecx
call dword [0xb39ae4]
mov edx, dword [0xb28c3c]
mov dword [0xb39bb8], eax
mov eax, dword [0xb39bb4]
push edx
push eax
call dword [0xb39ae4]
mov ecx, dword [0xb28e84]
mov edx, dword [0xb39bb4]
push ecx
push edx
mov dword [0xb39ba4], eax
call dword [0xb39ae4]
mov ecx, dword [0xb39bb4]
mov dword [0xb39a64], eax
mov eax, dword [0xb28e34]
push eax
push ecx
call dword [0xb39ae4]
mov edx, dword [0xb28cb8]
mov dword [0xb39a78], eax
mov eax, dword [0xb39bb4]
push edx
push eax
call dword [0xb39ae4]
mov ecx, dword [0xb28bf0]
mov edx, dword [0xb39bb4]
push ecx
push edx
mov dword [0xb39b2c], eax
call dword [0xb39ae4]
mov ecx, dword [0xb39bb4]
mov dword [0xb39b60], eax
mov eax, dword [0xb28ed4]
push eax
push ecx
call dword [0xb39ae4]
mov edx, dword [0xb289c8]
mov dword [0xb39b54], eax
mov eax, dword [0xb39bb4]
push edx
push eax
call dword [0xb39ae4]
mov ecx, dword [0xb28e7c]
mov edx, dword [0xb39bb4]
push ecx
push edx
mov dword [0xb39c18], eax
call dword [0xb39ae4]
mov ecx, dword [0xb39bb4]
mov dword [0xb39bd0], eax
mov eax, dword [0xb28b34]
push eax
push ecx
call dword [0xb39ae4]
mov edx, dword [0xb28d14]
mov dword [0xb39bf0], eax
mov eax, dword [0xb39bb4]
push edx
push eax
call dword [0xb39ae4]
mov ecx, dword [0xb28efc]
mov edx, dword [0xb39bb4]
push ecx
push edx
mov dword [0xb39a84], eax
call dword [0xb39ae4]
mov ecx, dword [0xb39bb4]
mov dword [0xb39af0], eax
mov eax, dword [0xb289d4]
push eax
push ecx
call dword [0xb39ae4]
mov edx, dword [0xb28a40]
mov dword [0xb39c20], eax
mov eax, dword [0xb39bb4]
push edx
push eax
call dword [0xb39ae4]
mov ecx, dword [0xb28bbc]
mov edx, dword [0xb39bb4]
push ecx
push edx
mov dword [0xb39b1c], eax
call dword [0xb39ae4]
mov dword [0xb39b24], eax
mov eax, dword [0xb28e3c]
push eax
call dword [0xb39a00]
mov ecx, dword [0xb28a90]
push ecx
mov dword [0xb399c4], eax
call dword [0xb39a00]
mov edx, dword [0xb28a18]
push edx
mov dword [0xb39af4], eax
call dword [0xb39a00]
mov dword [0xb39bf8], eax
mov eax, dword [0xb28af0]
push eax
call dword [0xb39a00]
mov ecx, dword [0xb28c2c]
push ecx
mov dword [0xb39aa8], eax
call dword [0xb39a00]
mov dword [0xb39ad8], eax
mov eax, dword [0xb399c4]
test eax, eax
je 0x417856
mov edx, dword [0xb28da0]
push edx
push eax
call dword [0xb39ae4]
mov dword [0xb39ab4], eax
mov eax, dword [0xb39af4]
test eax, eax
je 0x41788a
mov ecx, dword [0xb28d20]
push ecx
push eax
call dword [0xb39ae4]
mov edx, dword [0xb28ae0]
mov dword [0xb39b34], eax
mov eax, dword [0xb39af4]
push edx
push eax
call dword [0xb39ae4]
mov dword [0xb39ad4], eax
mov eax, dword [0xb39bf8]
test eax, eax
je 0x4178a6
mov ecx, dword [0xb28c94]
push ecx
push eax
call dword [0xb39ae4]
mov dword [0xb39b78], eax
mov eax, dword [0xb39aa8]
test eax, eax
je 0x4178c2
mov edx, dword [0xb28a3c]
push edx
push eax
call dword [0xb39ae4]
mov dword [0xb39b40], eax
mov eax, dword [0xb39ad8]
test eax, eax
je 0x4178f6
mov ecx, dword [0xb28d10]
push ecx
push eax
call dword [0xb39ae4]
mov edx, dword [0xb28c28]
mov dword [0xb39ba8], eax
mov eax, dword [0xb39ad8]
push edx
push eax
call dword [0xb39ae4]
mov dword [0xb399f0], eax
mov esp, ebp
pop ebp
ret