Function at 0x413fb0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x10
mov eax, dword [0x4655f0]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, dword [0x465efc]
mov ecx, dword [0x465f00]
mov edx, eax
sub edx, 0xacca1b30
sub edx, 1
add edx, 0xacca1b30
imul eax, edx
and eax, 1
cmp eax, 0
sete bl
and bl, 1
mov byte [ebp - 0x12], bl
cmp ecx, 0xa
setl bl
and bl, 1
mov byte [ebp - 0x11], bl
mov dword [ebp - 0x18], 0xe95f3584
mov eax, dword [ebp - 0x18]
mov ecx, eax
sub ecx, 0x958828cf
mov dword [ebp - 0x1c], eax
je 0x4140f3
jmp 0x41401d
mov eax, dword [ebp - 0x1c]
sub eax, 0x96bb87e1
je 0x4141d9
jmp 0x414030
mov eax, dword [ebp - 0x1c]
sub eax, 0xe829dfea
je 0x4142be
jmp 0x414043
mov eax, dword [ebp - 0x1c]
sub eax, 0xe95f3584
je 0x4140cd
jmp 0x414056
mov eax, dword [ebp - 0x1c]
sub eax, 0xf0205c50
je 0x414356
jmp 0x414069
mov eax, dword [ebp - 0x1c]
sub eax, 0xc867352
je 0x414178
jmp 0x41407c
mov eax, dword [ebp - 0x1c]
sub eax, 0x2af5a19d
je 0x41434a
jmp 0x41408f
mov eax, dword [ebp - 0x1c]
sub eax, 0x4291f0c8
je 0x414265
jmp 0x4140a2
mov eax, dword [ebp - 0x1c]
sub eax, 0x45fdfd81
je 0x41418c
jmp 0x4140b5
mov eax, dword [ebp - 0x1c]
sub eax, 0x7d5f1781
je 0x414271
jmp 0x4140c8
jmp 0x414376
mov al, byte [ebp - 0x12]
mov cl, byte [ebp - 0x11]
mov dl, al
and dl, cl
xor al, cl
or dl, al
test dl, 1
mov esi, 0x958828cf
mov edi, 0x45fdfd81
cmovne edi, esi
mov dword [ebp - 0x18], edi
jmp 0x414376
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [0x465ec8], eax
xor eax, eax
mov ecx, dword [0x465efc]
mov edx, dword [0x465f00]
sub eax, 1
mov esi, ecx
add esi, eax
imul ecx, esi
and ecx, 1
cmp ecx, 0
sete bl
cmp edx, 0xa
setl bh
mov al, bl
xor al, 0xff
mov ah, bh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov ch, al
and ch, 0
and bl, cl
mov dl, ah
and dl, 0
and bh, cl
or ch, bl
or dl, bh
xor ch, dl
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or ch, al
test ch, 1
mov esi, 0xc867352
mov edi, 0x45fdfd81
cmovne edi, esi
mov dword [ebp - 0x18], edi
jmp 0x414376
mov eax, dword [ebp - 0x10]
xor eax, ebp
mov ecx, eax
call fcn.00451311
add esp, 0x10
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [0x465efc]
mov ecx, dword [0x465f00]
mov edx, eax
sub edx, 0x5980d8a9
sub edx, 1
add edx, 0x5980d8a9
imul eax, edx
and eax, 1
cmp eax, 0
sete bl
cmp ecx, 0xa
setl bh
mov al, bl
and al, bh
xor bl, bh
or al, bl
test al, 1
mov ecx, 0x96bb87e1
mov edx, 0x7d5f1781
cmovne edx, ecx
mov dword [ebp - 0x18], edx
jmp 0x414376
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [0x465ec8], eax
mov eax, dword [0x465efc]
mov ecx, dword [0x465f00]
mov edx, eax
add edx, 0x3fa7c092
sub edx, 1
sub edx, 0x3fa7c092
imul eax, edx
and eax, 1
cmp eax, 0
sete bl
cmp ecx, 0xa
setl bh
mov al, bl
xor al, 0xff
mov ah, bh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov ch, al
and ch, 0xff
and bl, cl
mov dl, ah
and dl, 0xff
and bh, cl
or ch, bl
or dl, bh
xor ch, dl
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or ch, al
test ch, 1
mov esi, 0x4291f0c8
mov edi, 0x7d5f1781
cmovne edi, esi
mov dword [ebp - 0x18], edi
jmp 0x414376
mov dword [ebp - 0x18], 0x958828cf
jmp 0x414376
mov eax, dword [0x465efc]
mov ecx, dword [0x465f00]
mov edx, eax
add edx, 0xcb427a28
sub edx, 1
sub edx, 0xcb427a28
imul eax, edx
and eax, 1
cmp eax, 0
sete bl
cmp ecx, 0xa
setl bh
mov al, bl
and al, bh
xor bl, bh
or al, bl
test al, 1
mov ecx, 0xe829dfea
mov edx, 0xf0205c50
cmovne edx, ecx
mov dword [ebp - 0x18], edx
jmp 0x414376
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [0x465ec8], eax
mov eax, dword [0x465efc]
mov ecx, dword [0x465f00]
mov edx, eax
sub edx, 0xd1b26fe9
sub edx, 1
add edx, 0xd1b26fe9
imul eax, edx
and eax, 1
cmp eax, 0
sete bl
cmp ecx, 0xa
setl bh
mov al, bl
xor al, 0xff
mov ah, bh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov ch, al
and ch, 0xff
and bl, cl
mov dl, ah
and dl, 0xff
and bh, cl
or ch, bl
or dl, bh
xor ch, dl
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or ch, al
test ch, 1
mov esi, 0x2af5a19d
mov edi, 0xf0205c50
cmovne edi, esi
mov dword [ebp - 0x18], edi
jmp 0x414376
mov dword [ebp - 0x18], 0x96bb87e1
jmp 0x414376
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [0x465ec8], eax
mov dword [ebp - 0x18], 0xe829dfea
jmp 0x414004