Function at 0x40a560
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebx
push edi
push esi
sub esp, 8
mov eax, dword [0x48f7ac]
xor eax, esp
mov dword [esp + 4], eax
mov eax, dword [0x490474]
mov ecx, dword [0x490478]
lea edx, [eax - 1]
imul edx, eax
mov eax, 0x1553761b
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete byte [esp + 2]
cmp ecx, 0xa
setl byte [esp + 3]
cmp eax, 0xdb96b585
jg 0x40a5cb
jmp 0x40a800
test esi, edx
cmovne eax, edi
cmp ecx, 0xa
cmovge eax, edi
nop word cs:[eax + eax]
nop dword [eax]
cmp eax, 0xdb96b585
jle 0x40a800
cmp eax, 0x1553761a
jg 0x40a600
cmp eax, 0xf99eeb54
jg 0x40a658
cmp eax, 0xdb96b586
je 0x40a712
cmp eax, 0xdfc608d0
jne 0x40a5c0
mov eax, 0xaaaf368a
cmp eax, 0xdb96b585
jg 0x40a5cb
jmp 0x40a800
cmp eax, 0x1f9df133
jg 0x40a69c
cmp eax, 0x1553761b
je 0x40a727
cmp eax, 0x1d477503
jne 0x40a5c0
mov eax, dword [0x490474]
mov ecx, dword [0x490478]
mov esi, 0x1f9df134
lea edx, [eax - 1]
imul edx, eax
mov eax, 0x1f9df134
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
mov edx, 0xc2e4d295
sete bl
je 0x40a968
mov esi, 0xc2e4d295
jmp 0x40a968
cmp eax, 0xf99eeb55
je 0x40a767
cmp eax, 0x151fb0d
jne 0x40a5c0
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [0x490410], eax
mov eax, 0x22df6537
cmp eax, 0xdb96b585
jg 0x40a5cb
jmp 0x40a800
cmp eax, 0x1f9df134
je 0x40a7bd
cmp eax, 0x22df6537
jne 0x40a5c0
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [0x490410], eax
mov esi, 0x1d477503
mov eax, dword [0x490474]
mov ecx, dword [0x490478]
lea edx, [eax - 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
mov eax, 0x1d477503
mov edx, 0x151fb0d
sete bl
je 0x40a6fc
mov esi, 0x151fb0d
cmp ecx, 0xa
setl cl
cmovl edx, esi
xor bl, cl
jne 0x40a5c0
jmp 0x40a979
mov eax, 0xc0882158
cmp eax, 0xdb96b585
jg 0x40a5cb
jmp 0x40a800
movzx edx, byte [esp + 2]
movzx eax, byte [esp + 3]
mov esi, 0xaaaf368a
mov edi, 0xaaaf368a
mov ecx, eax
xor cl, dl
test al, al
mov eax, 0xdfc608d0
jne 0x40a74d
mov edi, 0xdfc608d0
test dl, dl
cmovne eax, edi
test cl, cl
cmovne eax, esi
cmp eax, 0xdb96b585
jg 0x40a5cb
jmp 0x40a800
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [0x490410], eax
mov edi, 0xb610b7f5
mov eax, dword [0x490474]
mov ecx, dword [0x490478]
lea edx, [eax - 1]
imul edx, eax
mov esi, edx
xor esi, 0xfffffffe
test esi, edx
sete al
cmp ecx, 0xa
setl ah
xor ah, al
mov eax, 0xb610b7f5
jne 0x40a5a8
mov edi, 0xbb17fb4b
jmp 0x40a5a8
mov eax, dword [0x490474]
mov ecx, dword [0x490478]
mov esi, 0xc0882158
lea edx, [eax - 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
mov eax, 0xc0882158
mov edx, 0xdb96b586
sete bl
je 0x40a968
mov esi, 0xdb96b586
jmp 0x40a968
cmp eax, 0xb610b7f4
jle 0x40a860
cmp eax, 0xc0882157
jg 0x40a8bc
cmp eax, 0xb610b7f5
je 0x40a921
cmp eax, 0xbb17fb4b
jne 0x40a5c0
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [0x490410], eax
mov eax, 0xf99eeb55
cmp eax, 0xdb96b585
jg 0x40a5cb
jmp 0x40a800
cmp eax, 0xaaaf3689
jle 0x40a906
cmp eax, 0xaaaf368a
je 0x40a936
cmp eax, 0xb1d92a8d
jne 0x40a5c0
mov eax, dword [0x490474]
mov ecx, dword [0x490478]
mov esi, 0x22df6537
lea edx, [eax - 1]
imul edx, eax
mov eax, 0x22df6537
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
mov edx, 0x151fb0d
sete bl
je 0x40a968
mov esi, 0x151fb0d
jmp 0x40a968
cmp eax, 0xc0882158
je 0x40a98b
cmp eax, 0xc2e4d295
jne 0x40a5c0
mov eax, dword [0x490474]
mov ecx, dword [0x490478]
mov esi, 0xf99eeb55
lea edx, [eax - 1]
imul edx, eax
mov eax, 0xf99eeb55
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
mov edx, 0xbb17fb4b
sete bl
je 0x40a968
mov esi, 0xbb17fb4b
jmp 0x40a968
cmp eax, 0xa07fc54a
je 0x40a9c8
cmp eax, 0x98292f70
jne 0x40a5c0
jmp 0x40aa05
mov eax, 0xb1d92a8d
cmp eax, 0xdb96b585
jg 0x40a5cb
jmp 0x40a800
mov eax, dword [0x490474]
mov ecx, dword [0x490478]
mov esi, 0xa07fc54a
lea edx, [eax - 1]
imul edx, eax
mov eax, 0xa07fc54a
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
mov edx, 0xdfc608d0
sete bl
je 0x40a968
mov esi, 0xdfc608d0
cmp ecx, 0xa
setl cl
cmovl edx, esi
xor cl, bl
jne 0x40a5c0
mov eax, edx
cmp eax, 0xdb96b585
jg 0x40a5cb
jmp 0x40a800
mov eax, dword [0x490474]
mov ecx, dword [0x490478]
mov edi, 0x98292f70
lea edx, [eax - 1]
imul edx, eax
mov esi, edx
xor esi, 0xfffffffe
test esi, edx
sete al
cmp ecx, 0xa
setl ah
xor ah, al
mov eax, 0x98292f70
jne 0x40a5a8
mov edi, 0xdb96b586
jmp 0x40a5a8
mov eax, dword [0x490474]
mov ecx, dword [0x490478]
mov edi, 0xb1d92a8d
lea edx, [eax - 1]
imul edx, eax
mov esi, edx
xor esi, 0xfffffffe
test esi, edx
sete al
cmp ecx, 0xa
setl ah
xor ah, al
mov eax, 0xb1d92a8d
jne 0x40a5a8
mov edi, 0xc2e4d295
jmp 0x40a5a8
mov ecx, dword [esp + 4]
xor ecx, esp
call fcn.00467484
add esp, 8
pop esi
pop edi
pop ebx
ret