Function at 0x4025a0
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x34
mov eax, dword [0x4225d0]
xor eax, ebp
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x1a]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov word [eax + 8], 0xeaff
mov dword [eax + 4], 0x16151401
mov dword [eax], 0x41820
lea eax, [ebp - 0x38]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [0x422fc8], eax
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push 0x9385646d
push dword [0x422fc8]
call fcn.00401340
add esp, 8
mov dword [ebp - 0x3c], eax
mov edx, dword [ebp - 0x3c]
call edx
push 0x17
push section..data
push 0x549
push 0x422017
call fcn.00401d70
add esp, 0x10
mov ecx, 0xa0605cc1
cmp ecx, 0xf47bcb3c
jg 0x402668
jmp 0x4026a0
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x38]
push ecx
push 0x40
push 0x549
push 0x422017
call eax
mov ecx, 0xf47bcb3d
nop word [eax + eax]
cmp ecx, 0xf47bcb3c
jle 0x4026a0
cmp ecx, 0x2d42363a
jle 0x4026f0
cmp ecx, 0x54cf503a
jle 0x4027db
cmp ecx, 0x54cf503b
je 0x402640
cmp ecx, 0x6b431fa2
jne 0x402660
mov ecx, 0xef3ebfc0
cmp ecx, 0xf47bcb3c
jg 0x402668
nop dword [eax]
cmp ecx, 0xebe19bc7
jg 0x402760
cmp ecx, 0x9d71e897
je 0x4027f8
cmp ecx, 0xa0605cc1
je 0x40280e
cmp ecx, 0xe9f85d5e
jne 0x402660
mov ecx, 0x26b5f4f3
mov dword [ebp - 0x40], 0x8aafdc01
cmp ecx, 0xf47bcb3c
jg 0x402668
jmp 0x4026a0
cmp ecx, 0xf47bcb3d
je 0x402890
cmp ecx, 0x210a418e
je 0x4028fa
cmp ecx, 0x26b5f4f3
jne 0x402660
push 0xa
lea eax, [ebp - 0x1a]
push eax
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.00401d70
add esp, 0x10
push dword [ebp - 0x40]
push dword [0x422fc8]
call fcn.00401340
add esp, 8
mov dword [ebp - 0x28], eax
mov ecx, 0x6b431fa2
cmp ecx, 0xf47bcb3c
jg 0x402668
jmp 0x4026a0
cmp ecx, 0xebe19bc8
je 0x402930
cmp ecx, 0xef3ebfc0
je 0x402952
cmp ecx, 0xf3506de8
jne 0x402660
mov eax, dword [0x422ffc]
mov edx, dword [0x423000]
mov esi, 0x9d71e897
lea ecx, [eax - 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete bl
cmp edx, 0xa
setl bh
xor bh, bl
mov ebx, 0x2d42363b
cmovne esi, ebx
test eax, ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov ecx, esi
cmove ecx, ebx
cmp edx, 0xa
cmovge ecx, esi
cmp ecx, 0xf47bcb3c
jg 0x402668
jmp 0x4026a0
cmp ecx, 0x2d42363b
je 0x40299c
cmp ecx, 0x51ae6d1a
jne 0x402660
jmp 0x402a0e
mov ecx, 0x2d42363b
cmp ecx, 0xf47bcb3c
jg 0x402668
jmp 0x4026a0
mov ecx, 0x1945a6a8
mov dword [ebp - 0x20], 1
nop word [eax + eax]
cmp ecx, 0x1945a6a7
jg 0x402850
cmp ecx, 0xfc382d88
je 0x40287f
cmp ecx, 0xfcd55a7f
jne 0x402820
mov ecx, 0x48670512
xor eax, eax
cmp ecx, 0x1945a6a7
jle 0x402828
nop word [eax + eax]
cmp ecx, 0x48670512
je 0x4029e7
cmp ecx, 0x1945a6a8
jne 0x402820
cmp dword [ebp - 0x20], 0
mov ecx, 0xfcd55a7f
mov edx, 0xfc382d88
cmove ecx, edx
cmp ecx, 0x1945a6a7
jle 0x402828
jmp 0x402850
mov ecx, 0x48670512
mov al, 1
cmp ecx, 0x1945a6a7
jle 0x402828
jmp 0x402850
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x38]
push ecx
push 0x40
push 0x549
push 0x422017
call eax
mov ecx, dword [0x422ffc]
mov edx, dword [0x423000]
mov edi, 0xebe19bc8
lea esi, [ecx - 1]
imul esi, ecx
mov ecx, esi
xor ecx, 0xfffffffe
test ecx, esi
sete bl
cmp edx, 0xa
setl bh
xor bh, bl
mov ebx, 0x54cf503b
cmovne ebx, edi
test ecx, esi
mov ecx, ebx
cmove ecx, edi
cmp edx, 0xa
cmovge ecx, ebx
test eax, eax
setne byte [ebp - 0x21]
cmp ecx, 0xf47bcb3c
jg 0x402668
jmp 0x4026a0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x20], eax
mov eax, 0x422017
mov esi, dword [ebp - 0x20]
push esi
mov edx, eax
mov ecx, 0x27
xor ecx, 0x1af
add edx, ecx
call edx
mov ecx, 0xf3506de8
cmp ecx, 0xf47bcb3c
jg 0x402668
jmp 0x4026a0
cmp byte [ebp - 0x21], 0
mov ecx, 0xf3506de8
mov eax, 0x210a418e
cmovne ecx, eax
cmp ecx, 0xf47bcb3c
jg 0x402668
jmp 0x4026a0
mov eax, dword [0x422ffc]
mov esi, 0xf47bcb3d
mov ebx, 0x54cf503b
lea ecx, [eax - 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x54cf503b
sete al
cmove ecx, esi
cmp dword [0x423000], 0xa
setl dl
cmovge ecx, ebx
xor dl, al
cmovne ecx, esi
cmp ecx, 0xf47bcb3c
jg 0x402668
jmp 0x4026a0
mov eax, dword [0x422ffc]
mov edi, 0x51ae6d1a
mov esi, 0x9d71e897
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x9d71e897
sete al
cmove ecx, edi
cmp dword [0x423000], 0xa
setl dl
cmovge ecx, esi
xor dl, al
cmovne ecx, edi
cmp ecx, 0xf47bcb3c
jg 0x402668
jmp 0x4026a0
test al, 1
mov ecx, 0xe9f85d5e
mov edx, 0x26b5f4f3
mov dword [ebp - 0x40], 0
cmovne ecx, edx
cmp ecx, 0xf47bcb3c
jg 0x402668
jmp 0x4026a0
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00409273
xor eax, eax
add esp, 0x34
pop esi
pop edi
pop ebx
pop ebp
ret