Function at 0x85bb90
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
push ecx
push esi
mov dword [ebp - 4], 0
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [ebp - 4], eax
mov esi, dword [ebp - 4]
mov dword [0x5990e0], esi
test esi, esi
je 0x85bdc3
call fcn.0085baf0
mov ecx, dword [0x598a04]
push ecx
push esi
mov dword [fcn.00599010], eax
call eax
mov edx, dword [0x598dc8]
mov dword [fcn.00598f30], eax
mov eax, dword [0x5990e0]
push edx
push eax
call dword [fcn.00599010]
mov ecx, dword [0x598e44]
mov edx, dword [0x5990e0]
push ecx
push edx
mov dword [fcn.0059909c], eax
call dword [fcn.00599010]
mov ecx, dword [0x5990e0]
mov dword [0x598f20], eax
mov eax, dword [0x598a64]
push eax
push ecx
call dword [fcn.00599010]
mov edx, dword [0x598a50]
mov dword [0x59908c], eax
mov eax, dword [0x5990e0]
push edx
push eax
call dword [fcn.00599010]
mov ecx, dword [0x598af8]
mov edx, dword [0x5990e0]
push ecx
push edx
mov dword [0x598f4c], eax
call dword [fcn.00599010]
mov ecx, dword [0x5990e0]
mov dword [0x598f2c], eax
mov eax, dword [0x598cd4]
push eax
push ecx
call dword [fcn.00599010]
mov edx, dword [0x598b3c]
mov dword [0x5990e4], eax
mov eax, dword [0x5990e0]
push edx
push eax
call dword [fcn.00599010]
mov ecx, dword [0x598da0]
mov edx, dword [0x5990e0]
push ecx
push edx
mov dword [0x5990d0], eax
call dword [fcn.00599010]
mov ecx, dword [0x5990e0]
mov dword [0x598f90], eax
mov eax, dword [0x598d48]
push eax
push ecx
call dword [fcn.00599010]
mov edx, dword [0x598bbc]
mov dword [fcn.00598fa0], eax
mov eax, dword [0x5990e0]
push edx
push eax
call dword [fcn.00599010]
mov ecx, dword [0x598ae8]
mov edx, dword [0x5990e0]
push ecx
push edx
mov dword [0x599054], eax
call dword [fcn.00599010]
mov ecx, dword [0x5990e0]
mov dword [fcn.00599088], eax
mov eax, dword [0x598e0c]
push eax
push ecx
call dword [fcn.00599010]
mov edx, dword [0x5988b0]
mov dword [fcn.0059907c], eax
push edx
mov eax, dword [0x5990e0]
push eax
call dword [fcn.00599010]
mov ecx, dword [0x598d98]
mov edx, dword [0x5990e0]
push ecx
push edx
mov dword [fcn.00599134], eax
call dword [fcn.00599010]
mov ecx, dword [0x5990e0]
mov dword [fcn.005990f4], eax
mov eax, dword [0x598a24]
push eax
push ecx
call dword [fcn.00599010]
mov edx, dword [0x598c18]
mov dword [fcn.0059910c], eax
mov eax, dword [0x5990e0]
push edx
push eax
call dword [fcn.00599010]
mov ecx, dword [0x598e34]
mov edx, dword [0x5990e0]
push ecx
push edx
mov dword [fcn.00598fac], eax
call dword [fcn.00599010]
mov ecx, dword [0x5990e0]
mov dword [0x59901c], eax
mov eax, dword [0x5988bc]
push eax
push ecx
call dword [fcn.00599010]
mov edx, dword [0x59892c]
mov dword [0x59913c], eax
mov eax, dword [0x5990e0]
push edx
push eax
call dword [fcn.00599010]
mov ecx, dword [0x598ab0]
mov edx, dword [0x5990e0]
push ecx
push edx
mov dword [0x599044], eax
call dword [fcn.00599010]
mov dword [0x59904c], eax
mov eax, dword [0x598d50]
push eax
call dword [fcn.00598f30]
mov ecx, dword [0x59897c]
push ecx
mov dword [0x598ef8], eax
call dword [fcn.00598f30]
mov edx, dword [0x598904]
push edx
mov dword [0x599020], eax
call dword [fcn.00598f30]
mov dword [0x599114], eax
mov eax, dword [0x5989dc]
push eax
call dword [fcn.00598f30]
mov ecx, dword [0x598b28]
push ecx
mov dword [0x598fd4], eax
call dword [fcn.00598f30]
mov dword [0x599004], eax
mov eax, dword [0x598ef8]
pop esi
test eax, eax
je 0x85be38
mov edx, dword [0x598cac]
push edx
push eax
call dword [fcn.00599010]
mov dword [fcn.00598fe0], eax
mov eax, dword [0x599020]
test eax, eax
je 0x85be6c
mov ecx, dword [0x598c24]
push ecx
push eax
call dword [fcn.00599010]
mov edx, dword [0x5989cc]
mov dword [fcn.0059905c], eax
mov eax, dword [0x599020]
push edx
push eax
call dword [fcn.00599010]
mov dword [fcn.00599000], eax
mov eax, dword [0x599114]
test eax, eax
je 0x85be88
mov ecx, dword [0x598b94]
push ecx
push eax
call dword [fcn.00599010]
mov dword [fcn.005990a0], eax
mov eax, dword [0x598fd4]
test eax, eax
je 0x85bea4
mov edx, dword [0x598928]
push edx
push eax
call dword [fcn.00599010]
mov dword [fcn.00599068], eax
mov eax, dword [0x599004]
test eax, eax
je 0x85bed7
mov ecx, dword [0x598c14]
push ecx
push eax
call dword [fcn.00599010]
mov edx, dword [0x599004]
push 0x39529c
push edx
mov dword [0x5990d4], eax
call dword [fcn.00599010]
mov dword [0x598f24], eax
mov esp, ebp
pop ebp
ret