Function at 0x423780
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
push ecx
push esi
mov dword [ebp - 4], 0
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [ebp - 4], eax
mov esi, dword [ebp - 4]
mov dword [0xbf0068], esi
test esi, esi
je 0x4239b3
call fcn.004236e0
mov ecx, dword [0xbef9f8]
push ecx
push esi
mov dword [0xbeff9c], eax
call eax
mov edx, dword [0xbefd9c]
mov dword [0xbefec4], eax
mov eax, dword [0xbf0068]
push edx
push eax
call dword [0xbeff9c]
mov ecx, dword [0xbefe08]
mov edx, dword [0xbf0068]
push ecx
push edx
mov dword [0xbf0028], eax
call dword [0xbeff9c]
mov ecx, dword [0xbf0068]
mov dword [0xbefeb4], eax
mov eax, dword [0xbefa58]
push eax
push ecx
call dword [0xbeff9c]
mov edx, dword [0xbefa44]
mov dword [0xbf0018], eax
mov eax, dword [0xbf0068]
push edx
push eax
call dword [0xbeff9c]
mov ecx, dword [0xbefae4]
mov edx, dword [0xbf0068]
push ecx
push edx
mov dword [0xbefee0], eax
call dword [0xbeff9c]
mov ecx, dword [0xbf0068]
mov dword [0xbefec0], eax
mov eax, dword [0xbefcb0]
push eax
push ecx
call dword [0xbeff9c]
mov edx, dword [0xbefb28]
mov dword [0xbf006c], eax
mov eax, dword [0xbf0068]
push edx
push eax
call dword [0xbeff9c]
mov ecx, dword [0xbefd7c]
mov edx, dword [0xbf0068]
push ecx
push edx
mov dword [0xbf0058], eax
call dword [0xbeff9c]
mov ecx, dword [0xbf0068]
mov dword [0xbeff20], eax
mov eax, dword [0xbefd20]
push eax
push ecx
call dword [0xbeff9c]
mov edx, dword [0xbefba4]
mov dword [0xbeff30], eax
mov eax, dword [0xbf0068]
push edx
push eax
call dword [0xbeff9c]
mov ecx, dword [0xbefad8]
mov edx, dword [0xbf0068]
push ecx
push edx
mov dword [0xbeffe0], eax
call dword [0xbeff9c]
mov ecx, dword [0xbf0068]
mov dword [0xbf0014], eax
mov eax, dword [0xbefdd0]
push eax
push ecx
call dword [0xbeff9c]
mov edx, dword [0xbef8a8]
mov dword [0xbf0008], eax
push edx
mov eax, dword [0xbf0068]
push eax
call dword [0xbeff9c]
mov ecx, dword [0xbefd74]
mov edx, dword [0xbf0068]
push ecx
push edx
mov dword [0xbf00bc], eax
call dword [0xbeff9c]
mov ecx, dword [0xbf0068]
mov dword [0xbf007c], eax
mov eax, dword [0xbefa18]
push eax
push ecx
call dword [0xbeff9c]
mov edx, dword [0xbefc00]
mov dword [0xbf0094], eax
mov eax, dword [0xbf0068]
push edx
push eax
call dword [0xbeff9c]
mov ecx, dword [0xbefdf8]
mov edx, dword [0xbf0068]
push ecx
push edx
mov dword [0xbeff3c], eax
call dword [0xbeff9c]
mov ecx, dword [0xbf0068]
mov dword [0xbeffa8], eax
mov eax, dword [0xbef8b4]
push eax
push ecx
call dword [0xbeff9c]
mov edx, dword [0xbef920]
mov dword [0xbf00c0], eax
mov eax, dword [0xbf0068]
push edx
push eax
call dword [0xbeff9c]
mov ecx, dword [0xbefaa4]
mov edx, dword [0xbf0068]
push ecx
push edx
mov dword [0xbeffd0], eax
call dword [0xbeff9c]
mov dword [0xbeffd8], eax
mov eax, dword [0xbefd28]
push eax
call dword [0xbefec4]
mov ecx, dword [0xbef970]
push ecx
mov dword [0xbefe8c], eax
call dword [0xbefec4]
mov edx, dword [0xbef8f8]
push edx
mov dword [0xbeffac], eax
call dword [0xbefec4]
mov dword [0xbf009c], eax
mov eax, dword [0xbef9d0]
push eax
call dword [0xbefec4]
mov ecx, dword [0xbefb14]
push ecx
mov dword [0xbeff60], eax
call dword [0xbefec4]
mov dword [0xbeff90], eax
mov eax, dword [0xbefe8c]
pop esi
test eax, eax
je 0x423a28
mov edx, dword [0xbefc8c]
push edx
push eax
call dword [0xbeff9c]
mov dword [0xbeff6c], eax
mov eax, dword [0xbeffac]
test eax, eax
je 0x423a5c
mov ecx, dword [0xbefc0c]
push ecx
push eax
call dword [0xbeff9c]
mov edx, dword [0xbef9c0]
mov dword [0xbeffe8], eax
mov eax, dword [0xbeffac]
push edx
push eax
call dword [0xbeff9c]
mov dword [0xbeff8c], eax
mov eax, dword [0xbf009c]
test eax, eax
je 0x423a78
mov ecx, dword [0xbefb80]
push ecx
push eax
call dword [0xbeff9c]
mov dword [0xbf002c], eax
mov eax, dword [0xbeff60]
test eax, eax
je 0x423a94
mov edx, dword [0xbef91c]
push edx
push eax
call dword [0xbeff9c]
mov dword [0xbefff4], eax
mov eax, dword [0xbeff90]
test eax, eax
je 0x423ac7
mov ecx, dword [0xbefbfc]
push ecx
push eax
call dword [0xbeff9c]
mov edx, dword [0xbeff90]
push 0x9ed20c
push edx
mov dword [0xbf005c], eax
call dword [0xbeff9c]
mov dword [0xbefeb8], eax
mov esp, ebp
pop ebp
ret