Function at 0x5d1da0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
push ecx
push esi
mov dword [ebp - 4], 0
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [ebp - 4], eax
mov esi, dword [ebp - 4]
mov dword [0x3090e0], esi
test esi, esi
je 0x5d1fd3
call fcn.005d1d00
mov ecx, dword [0x308a04]
push ecx
push esi
mov dword [fcn.00309010], eax
call eax
mov edx, dword [0x308dc8]
mov dword [fcn.00308f30], eax
mov eax, dword [0x3090e0]
push edx
push eax
call dword [fcn.00309010]
mov ecx, dword [0x308e44]
mov edx, dword [0x3090e0]
push ecx
push edx
mov dword [fcn.0030909c], eax
call dword [fcn.00309010]
mov ecx, dword [0x3090e0]
mov dword [0x308f20], eax
mov eax, dword [0x308a64]
push eax
push ecx
call dword [fcn.00309010]
mov edx, dword [0x308a50]
mov dword [0x30908c], eax
mov eax, dword [0x3090e0]
push edx
push eax
call dword [fcn.00309010]
mov ecx, dword [0x308af8]
mov edx, dword [0x3090e0]
push ecx
push edx
mov dword [0x308f4c], eax
call dword [fcn.00309010]
mov ecx, dword [0x3090e0]
mov dword [0x308f2c], eax
mov eax, dword [0x308cd4]
push eax
push ecx
call dword [fcn.00309010]
mov edx, dword [0x308b3c]
mov dword [0x3090e4], eax
mov eax, dword [0x3090e0]
push edx
push eax
call dword [fcn.00309010]
mov ecx, dword [0x308da0]
mov edx, dword [0x3090e0]
push ecx
push edx
mov dword [0x3090d0], eax
call dword [fcn.00309010]
mov ecx, dword [0x3090e0]
mov dword [0x308f90], eax
mov eax, dword [0x308d48]
push eax
push ecx
call dword [fcn.00309010]
mov edx, dword [0x308bbc]
mov dword [fcn.00308fa0], eax
mov eax, dword [0x3090e0]
push edx
push eax
call dword [fcn.00309010]
mov ecx, dword [0x308ae8]
mov edx, dword [0x3090e0]
push ecx
push edx
mov dword [0x309054], eax
call dword [fcn.00309010]
mov ecx, dword [0x3090e0]
mov dword [fcn.00309088], eax
mov eax, dword [0x308e0c]
push eax
push ecx
call dword [fcn.00309010]
mov edx, dword [0x3088b0]
mov dword [fcn.0030907c], eax
push edx
mov eax, dword [0x3090e0]
push eax
call dword [fcn.00309010]
mov ecx, dword [0x308d98]
mov edx, dword [0x3090e0]
push ecx
push edx
mov dword [fcn.00309134], eax
call dword [fcn.00309010]
mov ecx, dword [0x3090e0]
mov dword [fcn.003090f4], eax
mov eax, dword [0x308a24]
push eax
push ecx
call dword [fcn.00309010]
mov edx, dword [0x308c18]
mov dword [fcn.0030910c], eax
mov eax, dword [0x3090e0]
push edx
push eax
call dword [fcn.00309010]
mov ecx, dword [0x308e34]
mov edx, dword [0x3090e0]
push ecx
push edx
mov dword [fcn.00308fac], eax
call dword [fcn.00309010]
mov ecx, dword [0x3090e0]
mov dword [0x30901c], eax
mov eax, dword [0x3088bc]
push eax
push ecx
call dword [fcn.00309010]
mov edx, dword [0x30892c]
mov dword [0x30913c], eax
mov eax, dword [0x3090e0]
push edx
push eax
call dword [fcn.00309010]
mov ecx, dword [0x308ab0]
mov edx, dword [0x3090e0]
push ecx
push edx
mov dword [0x309044], eax
call dword [fcn.00309010]
mov dword [0x30904c], eax
mov eax, dword [0x308d50]
push eax
call dword [fcn.00308f30]
mov ecx, dword [0x30897c]
push ecx
mov dword [0x308ef8], eax
call dword [fcn.00308f30]
mov edx, dword [0x308904]
push edx
mov dword [0x309020], eax
call dword [fcn.00308f30]
mov dword [0x309114], eax
mov eax, dword [0x3089dc]
push eax
call dword [fcn.00308f30]
mov ecx, dword [0x308b28]
push ecx
mov dword [0x308fd4], eax
call dword [fcn.00308f30]
mov dword [0x309004], eax
mov eax, dword [0x308ef8]
pop esi
test eax, eax
je 0x5d2048
mov edx, dword [0x308cac]
push edx
push eax
call dword [fcn.00309010]
mov dword [fcn.00308fe0], eax
mov eax, dword [0x309020]
test eax, eax
je 0x5d207c
mov ecx, dword [0x308c24]
push ecx
push eax
call dword [fcn.00309010]
mov edx, dword [0x3089cc]
mov dword [fcn.0030905c], eax
mov eax, dword [0x309020]
push edx
push eax
call dword [fcn.00309010]
mov dword [fcn.00309000], eax
mov eax, dword [0x309114]
test eax, eax
je 0x5d2098
mov ecx, dword [0x308b94]
push ecx
push eax
call dword [fcn.00309010]
mov dword [fcn.003090a0], eax
mov eax, dword [0x308fd4]
test eax, eax
je 0x5d20b4
mov edx, dword [0x308928]
push edx
push eax
call dword [fcn.00309010]
mov dword [fcn.00309068], eax
mov eax, dword [0x309004]
test eax, eax
je 0x5d20e7
mov ecx, dword [0x308c14]
push ecx
push eax
call dword [fcn.00309010]
mov edx, dword [0x309004]
push 0x1052a4
push edx
mov dword [0x3090d4], eax
call dword [fcn.00309010]
mov dword [0x308f24], eax
mov esp, ebp
pop ebp
ret