Function at 0x40a7e0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebx
push edi
push esi
sub esp, 8
mov eax, dword [0x4876dc]
xor eax, esp
mov dword [esp + 4], eax
mov eax, dword [0x488448]
mov ecx, dword [0x48844c]
lea edx, [eax - 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
mov eax, 0x1a6719f8
sete byte [esp + 2]
cmp ecx, 0xa
setl byte [esp + 3]
cmp eax, 0xd526c42
jle 0x40a84b
jmp 0x40aa40
cmp edx, 0xffffffff
cmovne eax, esi
cmp ecx, 0xa
cmovge eax, esi
nop word cs:[eax + eax]
nop dword [eax]
cmp eax, 0xd526c42
jg 0x40aa40
cmp eax, 0xbfda49a7
jg 0x40a880
cmp eax, 0xa4c74318
jg 0x40a8d7
cmp eax, 0x8dcff0be
je 0x40a995
cmp eax, 0x980c1503
jne 0x40a840
mov eax, 0xc335bcd4
cmp eax, 0xd526c42
jle 0x40a84b
jmp 0x40aa40
cmp eax, 0xe607ad52
jg 0x40a944
cmp eax, 0xbfda49a8
je 0x40a9cb
cmp eax, 0xc335bcd4
jne 0x40a840
mov eax, dword [0x488448]
mov ecx, dword [0x48844c]
mov esi, 0x6642e02d
lea edx, [eax - 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
mov eax, 0x6642e02d
mov edx, 0x558026aa
sete bl
je 0x40ab46
mov esi, 0x558026aa
jmp 0x40ab46
cmp eax, 0xa4c74319
je 0x40a9f6
cmp eax, 0xac46a5f6
jne 0x40a840
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [0x4883f8], eax
mov esi, 0x980c1503
mov eax, dword [0x488448]
mov ecx, dword [0x48844c]
lea edx, [eax - 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl ah
xor ah, al
mov eax, 0x980c1503
jne 0x40a827
mov esi, 0xbfda49a8
jmp 0x40a827
cmp eax, 0xe607ad53
je 0x40ab74
cmp eax, 0xff6d64ac
jne 0x40a840
mov eax, dword [0x488448]
mov ecx, dword [0x48844c]
mov esi, 0xa4c74319
lea edx, [eax - 1]
imul edx, eax
mov eax, 0xa4c74319
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
mov edx, 0x8dcff0be
sete bl
je 0x40aba5
mov esi, 0x8dcff0be
jmp 0x40aba5
mov eax, dword [0x488448]
mov ecx, dword [0x48844c]
mov edi, 0xac46a5f6
lea edx, [eax - 1]
imul edx, eax
mov esi, edx
xor esi, 0xfffffffe
test esi, edx
sete al
cmp ecx, 0xa
setl ah
xor ah, al
mov eax, 0xac46a5f6
jne 0x40aa2a
mov edi, 0xbfda49a8
jmp 0x40aa2a
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [0x4883f8], eax
mov eax, 0xac46a5f6
cmp eax, 0xd526c42
jle 0x40a84b
jmp 0x40aa40
mov eax, dword [0x488448]
mov ecx, dword [0x48844c]
mov edi, 0xe607ad53
lea edx, [eax - 1]
imul edx, eax
mov esi, edx
xor esi, 0xfffffffe
test esi, edx
sete al
cmp ecx, 0xa
setl ah
xor ah, al
mov eax, 0xe607ad53
jne 0x40aa2a
mov edi, 0x2de80e72
test esi, edx
cmovne eax, edi
cmp ecx, 0xa
cmovge eax, edi
cmp eax, 0xd526c42
jle 0x40a84b
cmp eax, 0x6642e02c
jle 0x40aab0
cmp eax, 0x6ad912ec
jg 0x40aaff
cmp eax, 0x6642e02d
je 0x40abc8
cmp eax, 0x6645aa04
jne 0x40a840
mov eax, dword [0x488448]
mov ecx, dword [0x48844c]
mov esi, 0xc335bcd4
lea edx, [eax - 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl ah
xor ah, al
mov eax, 0xc335bcd4
jne 0x40a827
mov esi, 0x8dcff0be
jmp 0x40a827
cmp eax, 0x2de80e71
jle 0x40ab59
cmp eax, 0x2de80e72
je 0x40ac1f
cmp eax, 0x558026aa
jne 0x40a840
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [0x4883f8], eax
mov eax, 0x6642e02d
cmp eax, 0xd526c42
jle 0x40a84b
jmp 0x40aa40
cmp eax, 0x6ad912ed
je 0x40ac34
cmp eax, 0x7a1522a2
jne 0x40a840
mov eax, dword [0x488448]
mov ecx, dword [0x48844c]
mov esi, 0x6645aa04
lea edx, [eax - 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
mov eax, 0x6645aa04
mov edx, 0x6ad912ed
sete bl
je 0x40ab46
mov esi, 0x6ad912ed
cmp ecx, 0xa
setl cl
cmovl edx, esi
xor bl, cl
jne 0x40a840
jmp 0x40abb6
cmp eax, 0x1a6719f8
je 0x40ac49
cmp eax, 0xd526c43
jne 0x40a840
jmp 0x40ac82
mov eax, dword [0x488448]
mov ecx, dword [0x48844c]
mov esi, 0xd526c43
lea edx, [eax - 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
mov eax, 0xd526c43
mov edx, 0x2de80e72
sete bl
je 0x40aba5
mov esi, 0x2de80e72
cmp ecx, 0xa
setl cl
cmovl edx, esi
xor cl, bl
jne 0x40a840
mov eax, edx
cmp eax, 0xd526c42
jle 0x40a84b
jmp 0x40aa40
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [0x4883f8], eax
mov esi, 0xff6d64ac
mov eax, dword [0x488448]
mov ecx, dword [0x48844c]
lea edx, [eax - 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl ah
xor ah, al
mov eax, 0xff6d64ac
jne 0x40a827
mov esi, 0x558026aa
jmp 0x40a827
mov eax, 0xe607ad53
cmp eax, 0xd526c42
jle 0x40a84b
jmp 0x40aa40
mov eax, 0x7a1522a2
cmp eax, 0xd526c42
jle 0x40a84b
jmp 0x40aa40
movzx ecx, byte [esp + 2]
movzx edx, byte [esp + 3]
mov esi, 0x7a1522a2
mov eax, ecx
xor al, dl
mov eax, 0x7a1522a2
jne 0x40ac68
mov esi, 0x6ad912ed
test dl, dl
cmove eax, esi
test cl, cl
cmove eax, esi
cmp eax, 0xd526c42
jle 0x40a84b
jmp 0x40aa40
mov ecx, dword [esp + 4]
xor ecx, esp
call fcn.0045f89c
add esp, 8
pop esi
pop edi
pop ebx
ret