Function at 0x463e50
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x34
mov eax, dword [0x45a7c4]
lea ebx, [ebp - 0x1e]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x34], ebx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov word [eax + 0xc], 0xfc15
mov dword [eax + 8], 0x10405ff
mov dword [eax + 4], 0x751fcccc
mov dword [eax], 0xabeb5419
lea eax, [ebp - 0x38]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [0x45b42c], eax
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push 0x9385646d
push dword [0x45b42c]
call fcn.00461ce0
add esp, 8
mov dword [ebp - 0x3c], eax
mov edx, dword [ebp - 0x3c]
call edx
push 0x2d
push section..data
push 0x549
push 0x45a02d
call section..CODE
add esp, 0x10
push 0xe
push ebx
push dword [ebp + 0xc]
push dword [ebp + 8]
call section..CODE
add esp, 0x10
mov eax, 0x5e1398b1
cmp eax, 0x18478aa1
jg 0x463f1b
jmp 0x4642e0
mov eax, 0xd087b35b
nop
cmp eax, 0x18478aa1
jle 0x4642e0
cmp eax, 0x3f0339de
jle 0x463f70
cmp eax, 0x5e1398b0
jle 0x463fa1
cmp eax, 0x7f99bca5
je 0x4641c4
cmp eax, 0x700e065a
je 0x46451c
cmp eax, 0x5e1398b1
jne 0x463f10
push 0x7a9dd29
call fcn.00463940
add esp, 4
test al, al
mov eax, 0x7f99bca5
mov ecx, 0x9d37937a
mov dword [ebp - 0x40], 0
jmp 0x4642c4
cmp eax, 0x31a31fb4
jg 0x4640ae
cmp eax, 0x18478aa2
je 0x4646a7
cmp eax, 0x293a2894
je 0x463f0a
cmp eax, 0x1c82e05a
jne 0x463f10
jmp 0x464aea
cmp eax, 0x3f0339df
je 0x4647fb
cmp eax, 0x4622fb19
jne 0x463f10
mov ecx, dword [0x45b4b0]
lea eax, [ecx - 1]
imul eax, ecx
mov ecx, eax
mov esi, eax
and eax, 0x8ec8f9a7
not ecx
and esi, 1
mov edx, ecx
and ecx, 0x71370658
or eax, ecx
and edx, 0xfffffffe
mov ecx, eax
or esi, edx
xor eax, 0x71370658
and eax, esi
xor ecx, 0x8ec8f9a7
not esi
and ecx, esi
or eax, ecx
mov ecx, dword [0x45b4b4]
not eax
or eax, esi
cmp eax, 0xffffffff
sete dl
setne al
cmp ecx, 0xa
setl ah
cmp ecx, 9
mov dh, dl
setg cl
and al, ah
mov ch, cl
and dh, cl
or cl, dl
xor ch, dl
xor cl, 1
or al, dh
not ch
and ch, dl
mov bl, ch
and bl, cl
xor cl, ch
mov ch, ah
xor ah, dl
and ch, dl
or cl, bl
or ah, ch
mov dl, ah
xor dl, al
xor al, 1
or al, ah
xor dl, 1
xor al, 1
or al, dl
mov edx, eax
xor dl, 1
and al, dl
mov ah, dl
and ah, al
xor al, dl
or al, ah
mov ah, cl
xor ah, 1
mov edx, eax
mov ch, al
and cl, ah
xor dl, 1
xor cl, 1
and ch, dl
mov dh, cl
or cl, ah
xor dh, ah
xor cl, 1
or cl, dh
mov dh, ch
xor ch, al
and dh, al
mov al, ah
xor ah, dl
and al, dl
or ch, dh
mov edx, 0xa1e22916
or ah, al
xor ch, cl
mov cl, ah
xor cl, ch
test ah, 1
mov eax, 0x38c9b9e0
cmovne eax, edx
test ch, 1
cmove eax, edx
test cl, 1
mov edx, 0x38c9b9e0
jmp 0x464a7c
cmp eax, 0x31a31fb5
je 0x464830
cmp eax, 0x38c9b9e0
jne 0x463f10
mov eax, dword [0x45b4b0]
lea ecx, [eax - 1]
imul ecx, eax
mov eax, ecx
mov esi, ecx
not eax
and esi, 0x41d04a50
mov edx, eax
and eax, 0x70255b47
and edx, 0x18223020
or esi, edx
mov edx, ecx
xor esi, 0x41d04a50
and edx, 0xa60d858f
or edx, esi
mov esi, edx
and edx, 0xae1f2400
not esi
and esi, 0x51e0dbff
or edx, esi
mov esi, edx
xor edx, 0x106
xor esi, 0xf7ed5e71
and edx, 0x70255b47
mov edi, esi
or esi, ecx
and ecx, 0x8fdaa4b8
and edi, 0x8fdaa4b8
or eax, ecx
mov ecx, dword [0x45b4b4]
not esi
or edx, edi
xor eax, edx
or esi, eax
cmp esi, 0xffffffff
setne dl
sete ah
cmp ecx, 0xa
setl dh
cmp ecx, 9
setg cl
or dh, dl
mov al, cl
xor al, ah
xor al, 1
or al, cl
or cl, ah
mov ch, al
mov dl, cl
or cl, dh
xor ch, 1
xor dl, dh
xor cl, 1
mov ah, ch
or cl, dl
and ah, al
mov edx, ecx
mov dh, ah
xor dl, 1
xor ah, ch
and dh, ch
mov ch, cl
and ch, dl
or ah, dh
mov dh, ch
xor ch, cl
mov cl, al
xor dh, 1
and cl, dl
or dh, dl
xor dl, al
xor dh, 1
or dl, cl
or dh, ch
mov al, dl
mov ecx, 0x18478aa2
xor dh, ah
xor al, dh
test al, 1
mov eax, 0xa1e22916
cmovne ecx, eax
test dl, 1
mov eax, 0x18478aa2
cmovne eax, ecx
test dh, 1
jmp 0x464694
mov ecx, dword [0x45b4b0]
lea eax, [ecx - 1]
imul eax, ecx
mov ebx, eax
mov ecx, eax
not ebx
or ecx, 0x103c1e72
mov edx, ebx
mov esi, ecx
and ebx, 0x60690743
and esi, 0x1f682b46
and edx, 0xe083c089
or edx, esi
mov esi, eax
xor esi, 0xefc3e18d
and esi, eax
and eax, 0x9f96f8bc
mov edi, esi
and esi, 0xe097d4b9
or eax, ebx
not edi
or ecx, edi
and edi, 0x1f682b46
or esi, edi
not ecx
xor esi, edx
or ecx, esi
mov esi, eax
xor eax, 0x60690743
mov edx, ecx
and ecx, 0x92e1bbc4
xor esi, 0x9f96f8bc
not edx
and edx, 0x6d1e443b
or ecx, edx
mov edx, ecx
xor ecx, 0x82dda5b7
xor edx, 0x7d225a48
and esi, ecx
and eax, edx
mov edx, dword [0x45b4b4]
or eax, esi
mov esi, 0x31a31fb5
xor ecx, eax
test ecx, eax
setne ah
sete ch
cmp edx, 0xa
setl bl
cmp edx, 9
mov dl, ch
setg al
mov cl, bl
and bl, ah
or dl, al
or cl, ah
and ch, al
xor dl, 1
xor cl, 1
or bl, ch
mov dh, dl
and dh, cl
xor cl, dl
mov dl, al
or al, ah
xor dl, ah
xor al, 1
or cl, dh
or al, dl
mov edx, ebx
xor al, 1
and dl, al
xor al, bl
or al, dl
xor al, cl
and cl, al
mov edx, eax
xor dl, cl
test al, 1
mov eax, 0x4622fb19
cmovne eax, esi
test cl, cl
not dl
mov ecx, 0x4622fb19
cmove eax, esi
test dl, 1
cmovne eax, ecx
cmp eax, 0x18478aa1
jg 0x463f1b
nop word cs:[eax + eax]
nop dword [eax]
cmp eax, 0xae78b0e3
jle 0x464340
cmp eax, 0xd087b35a
jle 0x46438a
cmp eax, 0xd087b35b
je 0x464927
cmp eax, 0x4df17d6
je 0x464a8f
cmp eax, 0x15e6fdc1
jne 0x463f10
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x38]
push ecx
push 0x40
push 0x549
push 0x45a02d
call eax
test eax, eax
mov eax, 0x3f0339df
mov ecx, 0x1c82e05a
jmp 0x464694
cmp eax, 0xa1e22915
jg 0x4644f1
cmp eax, 0x9c791cdd
je 0x464aa4
cmp eax, 0x9d37937a
jne 0x463f10
push dword [ebp - 0x40]
push dword [0x45b42c]
call fcn.00461ce0
add esp, 8
mov dword [ebp - 0x28], eax
mov eax, 0x700e065a
cmp eax, 0x18478aa1
jg 0x463f1b
jmp 0x4642e0
cmp eax, 0xae78b0e4
je 0x464ab9
cmp eax, 0xc74d60e9
jne 0x463f10
mov ecx, dword [0x45b4b0]
lea eax, [ecx - 1]
imul eax, ecx
mov edx, eax
mov ecx, eax
not edx
and ecx, 0x34908050
mov esi, edx
and edx, 0x215b8870
and esi, 0x4826130a
or ecx, esi
mov esi, ecx
xor ecx, 0xcb6f7faf
xor esi, 0x20900010
mov edi, ecx
and edi, 0x1c289fc3
and esi, 0x60960018
or esi, edi
mov edi, eax
xor edi, 0x7cb6935a
and edi, eax
and eax, 0xdea4778f
mov ebx, edi
and edi, 0xe3d7603c
or eax, edx
not ebx
xor eax, 0xdea4778f
or ecx, ebx
and ebx, 0x1c289fc3
or edi, ebx
not ecx
xor edi, esi
or ecx, edi
mov esi, ecx
and ecx, 0x7cb6935b
not esi
and esi, 0x83496ca4
or ecx, esi
mov esi, 0x9c791cdd
not ecx
mov edx, ecx
and edx, eax
xor eax, ecx
mov ecx, dword [0x45b4b4]
or eax, edx
mov edx, eax
and eax, 0xc243ff90
not edx
and edx, 0x3dbc006f
or eax, edx
xor eax, 0xc243ff90
setne dl
sete ah
cmp ecx, 0xa
setl dh
cmp ecx, 9
mov cl, ah
setg ch
mov al, dh
or cl, ch
or al, dl
mov ebx, ecx
xor bl, al
or al, cl
mov cl, dh
xor dh, ah
and ah, ch
or ch, dl
and cl, dl
xor al, 1
xor ch, 1
or cl, ah
or al, bl
or ch, dh
xor cl, 1
mov ah, al
mov edx, ecx
or cl, ch
xor ah, 1
xor dl, ch
xor cl, 1
mov ch, ah
mov bl, ah
or cl, dl
and ch, al
mov edx, ecx
and bl, ch
xor ch, ah
mov dh, cl
xor ah, cl
xor dl, 1
or ch, bl
mov ebx, ecx
and dh, dl
mov bh, ch
or dl, al
and bl, dh
xor dh, cl
xor bh, 1
xor dl, 1
or dh, bl
or dl, ah
mov eax, 0x4df17d6
and bh, dh
xor dh, 1
mov cl, dl
and dh, ch
or dh, bh
xor cl, dh
test dl, 1
cmovne eax, esi
test dh, 1
mov edx, 0x4df17d6
cmove eax, esi
test cl, 1
jmp 0x464a7c
cmp eax, 0xa1e22916
je 0x464ad5
cmp eax, 0xa2b12f24
jne 0x463f10
mov eax, 0x4622fb19
cmp eax, 0x18478aa1
jg 0x463f1b
jmp 0x4642e0
mov eax, dword [0x45b4b0]
lea ecx, [eax - 1]
imul ecx, eax
mov eax, ecx
mov edi, ecx
not eax
and edi, 0xeeb9f1da
mov edx, eax
and eax, 0x11460e25
and edx, ecx
or eax, edi
mov esi, edx
and edx, 0x11460e25
not esi
or ecx, esi
and esi, 0xeeb9f1da
or edx, esi
not ecx
xor edx, eax
or ecx, edx
mov eax, ecx
mov esi, ecx
and ecx, 0x61a53362
not eax
xor esi, 0xdedc12d
and esi, eax
mov edx, esi
and esi, 0x611f9a89
not edx
mov edi, edx
and edi, 0x9ee06576
or esi, edi
mov edi, eax
or edi, 0xdedc12d
mov ebx, edi
or edx, edi
and edi, 0x9ee06576
not ebx
not edx
and ebx, 0x60121a80
or ebx, edi
xor ebx, esi
or edx, ebx
mov esi, edx
and edx, 0xdedc12c
not esi
and esi, 0xf2123ed3
or edx, esi
mov esi, eax
and eax, 1
and esi, 0x9e5acc9d
or esi, ecx
mov ecx, dword [0x45b4b4]
xor esi, 0x61a53363
or eax, esi
mov esi, eax
and eax, 0x96ca619d
not esi
and esi, 0x69359e62
or eax, esi
mov esi, edx
xor eax, 0x96ca619d
and esi, eax
xor eax, edx
or eax, esi
mov edx, eax
mov esi, eax
not edx
and esi, 0xd7f7bb85
and edx, 0x2808447a
or edx, esi
mov esi, 0x9c791cdd
xor edx, 0x2808447a
or edx, eax
cmp edx, 0xffffffff
setne dl
sete ah
cmp ecx, 0xa
setl dh
cmp ecx, 9
setg al
and dh, dl
mov ch, al
mov cl, al
xor ch, ah
or cl, ah
mov bl, ch
and ch, al
and al, ah
xor cl, 1
or al, dh
xor ch, 1
not bl
xor al, 1
mov dl, ch
and bl, ah
xor dl, al
or al, ch
mov bh, bl
xor al, 1
and bh, cl
xor cl, bl
or al, dl
or cl, bh
mov edx, eax
mov ch, al
xor cl, 1
xor dl, 1
and ch, dl
mov ah, dl
xor ch, 1
xor ah, ch
or ch, dl
mov edx, ecx
xor ch, 1
and dl, al
or ch, ah
xor ch, cl
xor cl, al
mov eax, 0xc74d60e9
or cl, dl
mov edx, ecx
xor dl, ch
test cl, 1
cmovne eax, esi
test ch, 1
mov ecx, 0xc74d60e9
cmove eax, esi
test dl, 1
cmove eax, ecx
cmp eax, 0x18478aa1
jg 0x463f1b
jmp 0x4642e0
mov eax, dword [0x45b4b0]
mov edi, 0xae78b0e4
lea ecx, [eax - 1]
imul ecx, eax
mov edx, ecx
mov eax, ecx
xor edx, 0xa86bc914
and eax, 0x282bc810
and edx, ecx
not ecx
and ecx, 0x80400104
or eax, ecx
xor eax, 0x282bc810
mov ecx, eax
and ecx, edx
xor edx, eax
or edx, ecx
mov eax, edx
and edx, 0xeea2cb25
not eax
and eax, 0x115d34da
or edx, eax
mov eax, edx
xor edx, 0x8932398c
xor eax, 0x46c90231
and edx, 0x89fb3bad
mov esi, eax
and eax, 0x558267c4
and esi, 0x7604c452
or esi, edx
mov ecx, esi
xor esi, 0x80c21005
xor ecx, 0x7604c452
and esi, 0x92c2d047
mov edx, ecx
and edx, 0xaa7d983b
or eax, edx
mov edx, eax
and eax, 0xaa7d983a
not edx
and edx, 0x558267c5
or eax, edx
mov edx, ecx
and ecx, 1
and edx, 0x6d3d2fb8
or edx, esi
xor edx, 0x92c2d046
or ecx, edx
mov edx, eax
and eax, 0x52829e90
not edx
mov esi, edx
or edx, ecx
and esi, 0xad7d616f
not edx
or eax, esi
mov esi, ecx
and ecx, 0xad7d616f
not esi
and esi, 0x52829e90
or esi, ecx
mov ecx, dword [0x45b4b4]
xor esi, eax
or edx, esi
mov esi, 0x31a31fb5
mov eax, edx
and edx, 0xee0c4805
not eax
and eax, 0x11f3b7fa
or eax, edx
xor eax, 0xee0c4805
setne al
sete dl
cmp ecx, 0xa
setl ah
cmp ecx, 9
setg cl
or al, ah
mov ch, cl
xor al, 1
xor ch, dl
xor dl, ah
and dl, ah
mov ah, al
xor cl, ch
and ah, dl
xor dl, al
and cl, ch
or dl, ah
xor dl, cl
mov ch, dl
not ch
and ch, cl
mov al, ch
xor al, dl
test al, 1
cmovne esi, edi
test dl, dl
mov eax, esi
cmovne eax, edi
test ch, ch
cmove eax, esi
cmp eax, 0x18478aa1
jg 0x463f1b
jmp 0x4642e0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x24], eax
mov eax, 0x45a02d
mov esi, dword [ebp - 0x24]
push esi
mov edx, eax
mov ecx, 0x27
xor ecx, 0x1af
add edx, ecx
call edx
mov eax, 0x1c82e05a
cmp eax, 0x18478aa1
jg 0x463f1b
jmp 0x4642e0
mov ecx, dword [0x45b4b0]
lea eax, [ecx - 1]
imul eax, ecx
mov edx, eax
mov ecx, eax
not edx
xor ecx, 0x9c776f1c
mov esi, edx
and ecx, eax
and edx, 0xbc457cde
and eax, 0x43ba8321
and esi, 0x9c776f1c
or eax, edx
mov edi, esi
mov edx, eax
xor eax, 0xbc457cde
and edi, ecx
xor ecx, esi
xor edx, 0x43ba8321
or ecx, edi
mov esi, ecx
and ecx, 0x9c776f1d
not esi
and esi, 0x638890e2
or ecx, esi
and eax, ecx
not ecx
and edx, ecx
or eax, edx
mov edx, dword [0x45b4b4]
xor ecx, eax
test ecx, eax
sete ah
setne ch
cmp edx, 9
setg al
cmp edx, 0xa
setl dl
and al, ah
mov dh, dl
mov cl, dl
xor dh, ch
or cl, ch
not dh
xor cl, 1
and dh, ch
and ch, dl
or dl, ah
or al, ch
mov ah, dl
mov bl, dh
xor ah, al
xor al, 1
and bl, cl
xor cl, dh
or al, dl
xor ah, 1
or cl, bl
xor al, 1
or al, ah
mov edx, eax
mov ch, al
mov ah, al
xor dl, 1
and ch, dl
or dl, cl
and ah, ch
xor ch, al
xor dl, 1
or ch, ah
mov ah, ch
xor ch, 1
and ah, cl
xor cl, 1
and ch, cl
xor cl, al
or dl, cl
or ch, ah
mov eax, 0xd087b35b
mov cl, dl
xor cl, ch
test dl, 1
mov edx, 0x293a2894
cmovne eax, edx
test ch, 1
cmove eax, edx
test cl, 1
mov edx, 0xd087b35b
jmp 0x464a7c
mov eax, dword [0x45b4b0]
lea edx, [eax - 1]
imul edx, eax
mov eax, edx
and edx, 0x12a8428f
not eax
mov ecx, eax
and eax, 0xb34bcc60
and ecx, 0xed57bd70
or ecx, edx
mov esi, ecx
mov edx, ecx
xor ecx, 0xed57bd71
xor esi, 0xed57bd70
xor edx, 0x5e1c7110
and edx, esi
and esi, 1
mov edi, edx
or ecx, esi
and edi, eax
xor eax, edx
mov esi, ecx
and ecx, 0xa6ad5c67
or eax, edi
not esi
mov edx, eax
and eax, 0xcfce2474
and esi, 0x5952a398
not edx
or ecx, esi
and edx, 0x3031db8b
or eax, edx
mov edx, eax
xor eax, 0x7c85e815
xor edx, 0x1020240
mov esi, eax
and esi, 0x82fd1dbf
and edx, 0x7d02e240
or edx, esi
mov esi, ecx
xor ecx, 0x5952a398
xor esi, 0x24004040
or eax, ecx
and ecx, 0x82fd1dbf
and esi, 0x7d02e240
not eax
or esi, ecx
xor esi, edx
or eax, esi
mov esi, 0x293a2894
mov ecx, eax
mov edx, eax
and eax, 0x9d08ff19
not ecx
and edx, 0x540062
and ecx, 0x62a30084
or edx, ecx
xor edx, 0x540062
or eax, edx
mov ecx, eax
and eax, 0x62f700e6
not ecx
and ecx, 0x9d08ff19
or eax, ecx
mov ecx, eax
and eax, 0xed8b74d7
not ecx
mov edx, ecx
and edx, 0x12748b28
or eax, edx
xor eax, 0x12748b28
xor ecx, eax
test ecx, eax
mov eax, dword [0x45b4b4]
sete cl
cmp eax, 0xa
setl dl
cmp eax, 9
mov ah, dl
setg al
xor dl, cl
or ah, cl
xor al, cl
mov cl, ah
xor cl, dl
xor dl, 1
or dl, ah
xor cl, 1
xor dl, 1
or dl, cl
mov ecx, eax
xor cl, dl
or dl, al
mov eax, 0xa2b12f24
xor cl, 1
mov ch, cl
xor ch, dl
test cl, 1
cmovne eax, esi
test dl, 1
not ch
mov edx, 0xa2b12f24
cmovne eax, esi
test ch, 1
cmove eax, edx
cmp eax, 0x18478aa1
jg 0x463f1b
jmp 0x4642e0
mov eax, 0x15e6fdc1
cmp eax, 0x18478aa1
jg 0x463f1b
jmp 0x4642e0
mov eax, 0xc74d60e9
cmp eax, 0x18478aa1
jg 0x463f1b
jmp 0x4642e0
mov eax, 0x9d37937a
mov dword [ebp - 0x40], 0x8aafdc01
cmp eax, 0x18478aa1
jg 0x463f1b
jmp 0x4642e0
mov eax, 0x38c9b9e0
cmp eax, 0x18478aa1
jg 0x463f1b
jmp 0x4642e0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0042c8b1
xor eax, eax
add esp, 0x34
pop esi
pop edi
pop ebx
pop ebp
ret