Function at 0x1748b90
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
push ecx
push esi
mov dword [ebp - 4], 0
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [ebp - 4], eax
mov esi, dword [ebp - 4]
mov dword [0x14790e0], esi
test esi, esi
je 0x1748dc3
call fcn.01748af0
mov ecx, dword [0x1478a04]
push ecx
push esi
mov dword [fcn.01479010], eax
call eax
mov edx, dword [0x1478dc8]
mov dword [fcn.01478f30], eax
mov eax, dword [0x14790e0]
push edx
push eax
call dword [fcn.01479010]
mov ecx, dword [0x1478e44]
mov edx, dword [0x14790e0]
push ecx
push edx
mov dword [fcn.0147909c], eax
call dword [fcn.01479010]
mov ecx, dword [0x14790e0]
mov dword [0x1478f20], eax
mov eax, dword [0x1478a64]
push eax
push ecx
call dword [fcn.01479010]
mov edx, dword [0x1478a50]
mov dword [0x147908c], eax
mov eax, dword [0x14790e0]
push edx
push eax
call dword [fcn.01479010]
mov ecx, dword [0x1478af8]
mov edx, dword [0x14790e0]
push ecx
push edx
mov dword [0x1478f4c], eax
call dword [fcn.01479010]
mov ecx, dword [0x14790e0]
mov dword [0x1478f2c], eax
mov eax, dword [0x1478cd4]
push eax
push ecx
call dword [fcn.01479010]
mov edx, dword [0x1478b3c]
mov dword [0x14790e4], eax
mov eax, dword [0x14790e0]
push edx
push eax
call dword [fcn.01479010]
mov ecx, dword [0x1478da0]
mov edx, dword [0x14790e0]
push ecx
push edx
mov dword [0x14790d0], eax
call dword [fcn.01479010]
mov ecx, dword [0x14790e0]
mov dword [0x1478f90], eax
mov eax, dword [0x1478d48]
push eax
push ecx
call dword [fcn.01479010]
mov edx, dword [0x1478bbc]
mov dword [fcn.01478fa0], eax
mov eax, dword [0x14790e0]
push edx
push eax
call dword [fcn.01479010]
mov ecx, dword [0x1478ae8]
mov edx, dword [0x14790e0]
push ecx
push edx
mov dword [0x1479054], eax
call dword [fcn.01479010]
mov ecx, dword [0x14790e0]
mov dword [fcn.01479088], eax
mov eax, dword [0x1478e0c]
push eax
push ecx
call dword [fcn.01479010]
mov edx, dword [0x14788b0]
mov dword [fcn.0147907c], eax
push edx
mov eax, dword [0x14790e0]
push eax
call dword [fcn.01479010]
mov ecx, dword [0x1478d98]
mov edx, dword [0x14790e0]
push ecx
push edx
mov dword [fcn.01479134], eax
call dword [fcn.01479010]
mov ecx, dword [0x14790e0]
mov dword [fcn.014790f4], eax
mov eax, dword [0x1478a24]
push eax
push ecx
call dword [fcn.01479010]
mov edx, dword [0x1478c18]
mov dword [fcn.0147910c], eax
mov eax, dword [0x14790e0]
push edx
push eax
call dword [fcn.01479010]
mov ecx, dword [0x1478e34]
mov edx, dword [0x14790e0]
push ecx
push edx
mov dword [fcn.01478fac], eax
call dword [fcn.01479010]
mov ecx, dword [0x14790e0]
mov dword [0x147901c], eax
mov eax, dword [0x14788bc]
push eax
push ecx
call dword [fcn.01479010]
mov edx, dword [0x147892c]
mov dword [0x147913c], eax
mov eax, dword [0x14790e0]
push edx
push eax
call dword [fcn.01479010]
mov ecx, dword [0x1478ab0]
mov edx, dword [0x14790e0]
push ecx
push edx
mov dword [0x1479044], eax
call dword [fcn.01479010]
mov dword [0x147904c], eax
mov eax, dword [0x1478d50]
push eax
call dword [fcn.01478f30]
mov ecx, dword [0x147897c]
push ecx
mov dword [0x1478ef8], eax
call dword [fcn.01478f30]
mov edx, dword [0x1478904]
push edx
mov dword [0x1479020], eax
call dword [fcn.01478f30]
mov dword [0x1479114], eax
mov eax, dword [0x14789dc]
push eax
call dword [fcn.01478f30]
mov ecx, dword [0x1478b28]
push ecx
mov dword [0x1478fd4], eax
call dword [fcn.01478f30]
mov dword [0x1479004], eax
mov eax, dword [0x1478ef8]
pop esi
test eax, eax
je 0x1748e38
mov edx, dword [0x1478cac]
push edx
push eax
call dword [fcn.01479010]
mov dword [fcn.01478fe0], eax
mov eax, dword [0x1479020]
test eax, eax
je 0x1748e6c
mov ecx, dword [0x1478c24]
push ecx
push eax
call dword [fcn.01479010]
mov edx, dword [0x14789cc]
mov dword [fcn.0147905c], eax
mov eax, dword [0x1479020]
push edx
push eax
call dword [fcn.01479010]
mov dword [fcn.01479000], eax
mov eax, dword [0x1479114]
test eax, eax
je 0x1748e88
mov ecx, dword [0x1478b94]
push ecx
push eax
call dword [fcn.01479010]
mov dword [fcn.014790a0], eax
mov eax, dword [0x1478fd4]
test eax, eax
je 0x1748ea4
mov edx, dword [0x1478928]
push edx
push eax
call dword [fcn.01479010]
mov dword [fcn.01479068], eax
mov eax, dword [0x1479004]
test eax, eax
je 0x1748ed7
mov ecx, dword [0x1478c14]
push ecx
push eax
call dword [fcn.01479010]
mov edx, dword [0x1479004]
push 0x127529c
push edx
mov dword [0x14790d4], eax
call dword [fcn.01479010]
mov dword [0x1478f24], eax
mov esp, ebp
pop ebp
ret