Function at 0x404420
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x30
mov eax, dword [0x478534]
lea ebx, [esp + 0x1e]
mov ebp, dword [esp + 0x48]
xor eax, esp
mov dword [esp + 0x2c], eax
mov dword [esp + 8], ebx
mov eax, dword [esp + 8]
mov eax, dword [esp + 8]
mov word [eax + 0xc], 0xfc15
mov dword [eax + 8], 0x10405ff
mov dword [eax + 4], 0x751fcccc
mov dword [eax], 0xabeb5419
lea eax, [esp + 4]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xc]
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [0x479008], eax
mov eax, esp
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x10]
push 0x9385646d
push dword [0x479008]
call fcn.00401bd0
add esp, 8
mov dword [esp], eax
mov edx, dword [esp]
call edx
push 0x2d
push 0x477549
push 0x549
push section..data
call fcn.004023d0
add esp, 0x10
push 0xe
push ebx
push ebp
mov ebp, dword [esp + 0x50]
push ebp
call fcn.004023d0
add esp, 0x10
mov eax, 0x5f1f3b6b
mov esi, 0xa2ac358d
cmp eax, 0x3823c8b6
jle 0x404507
jmp 0x404540
push ebp
call fcn.00402e30
add esp, 4
mov eax, 0xb5af1f7a
nop word cs:[eax + eax]
nop
cmp eax, 0x3823c8b6
jg 0x404540
cmp eax, 0xb5af1f79
jle 0x404570
cmp eax, 0xb5af1f7a
je 0x404651
cmp eax, 0xc10a06fe
je 0x4046bf
cmp eax, 0xb2ce494
jne 0x404500
mov eax, 0x7dd7792d
cmp eax, 0x3823c8b6
jle 0x404507
nop word [eax + eax]
cmp eax, 0x5f1f3b6a
jg 0x4045b0
cmp eax, 0x3823c8b7
je 0x404733
cmp eax, 0x50ad5109
je 0x404748
cmp eax, 0x4d8b955b
jne 0x404500
jmp 0x4047b9
cmp eax, 0xa2ac358d
je 0x4044e7
cmp eax, 0xa719e59e
jne 0x404500
push edi
push dword [0x479008]
call fcn.00401bd0
add esp, 8
mov dword [esp + 0x14], eax
mov eax, 0xb2ce494
cmp eax, 0x3823c8b6
jle 0x404507
jmp 0x404540
cmp eax, 0x7dd7792d
je 0x404762
cmp eax, 0x5f1f3b6b
jne 0x404500
mov ecx, 0x712163c9
mov dword [esp + 0x18], 1
nop word cs:[eax + eax]
nop dword [eax]
cmp ecx, 0x56099bae
jg 0x404610
cmp ecx, 0x96477cc8
je 0x404640
cmp ecx, 0xb6129708
jne 0x4045e0
mov ecx, 0x56099baf
xor eax, eax
cmp ecx, 0x56099bae
jle 0x4045e8
nop word [eax + eax]
cmp ecx, 0x56099baf
je 0x404798
cmp ecx, 0x712163c9
jne 0x4045e0
cmp dword [esp + 0x18], 0
mov ecx, 0xb6129708
mov edx, 0x96477cc8
cmove ecx, edx
cmp ecx, 0x56099bae
jle 0x4045e8
jmp 0x404610
mov ecx, 0x56099baf
mov al, 1
cmp ecx, 0x56099bae
jle 0x4045e8
jmp 0x404610
push ebp
call fcn.00402e30
add esp, 4
mov eax, dword [0x479068]
mov ecx, dword [0x47906c]
lea edx, [eax - 1]
imul edx, eax
mov eax, edx
and edx, 1
not eax
mov ebx, eax
and ebx, 0xfffffffe
or edx, ebx
not edx
or edx, eax
cmp edx, 0xffffffff
setne al
sete dl
cmp ecx, 0xa
setl dh
cmp ecx, 9
setg cl
and dh, al
and dl, cl
or dh, dl
mov dl, cl
xor cl, al
and dl, al
mov eax, 0x3823c8b7
or cl, dl
mov dl, cl
xor dl, dh
test cl, cl
mov ecx, 0x3823c8b7
cmovne eax, esi
test dh, dh
cmove eax, esi
test dl, dl
jmp 0x404785
mov eax, dword [0x479068]
mov ebx, 0xb5af1f7a
lea ecx, [eax - 1]
imul ecx, eax
mov eax, ecx
and ecx, 0xfd4900eb
not eax
mov edx, eax
and edx, 0x2b6ff14
or ecx, edx
xor ecx, 0xfd4900ea
xor eax, ecx
test eax, ecx
sete al
setne cl
cmp dword [0x47906c], 0xa
mov ch, al
setl dl
xor cl, dl
xor ch, dl
or dl, al
xor cl, 1
xor dl, 1
or dl, cl
mov eax, edx
xor al, ch
mov eax, 0xb5af1f7a
cmovne ebx, esi
test dl, dl
cmovne eax, ebx
test ch, ch
cmove eax, ebx
cmp eax, 0x3823c8b6
jle 0x404507
jmp 0x404540
mov eax, 0x4d8b955b
cmp eax, 0x3823c8b6
jle 0x404507
jmp 0x404540
mov eax, 0xa719e59e
mov edi, 0x8aafdc01
cmp eax, 0x3823c8b6
jle 0x404507
jmp 0x404540
mov eax, dword [esp + 0x14]
lea ecx, [esp + 4]
push ecx
push 0x40
push 0x549
push section..data
call eax
test eax, eax
mov eax, 0xc10a06fe
mov ecx, 0x4d8b955b
cmove eax, ecx
cmp eax, 0x3823c8b6
jle 0x404507
jmp 0x404540
test al, 1
mov eax, 0x50ad5109
mov ecx, 0xa719e59e
cmovne eax, ecx
xor edi, edi
cmp eax, 0x3823c8b6
jle 0x404507
jmp 0x404540
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x2c]
xor ecx, esp
call fcn.0045f611
xor eax, eax
add esp, 0x30
pop esi
pop edi
pop ebx
pop ebp
ret