Function at 0x40a4e0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebx
push edi
push esi
sub esp, 8
mov eax, dword [0x4485e0]
xor eax, esp
mov dword [esp + 4], eax
mov eax, dword [0x448f14]
mov ecx, dword [0x448f18]
lea edx, [eax - 1]
imul edx, eax
mov eax, 0x126a1184
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete byte [esp + 2]
cmp ecx, 0xa
setl byte [esp + 3]
cmp eax, 0x26fe73a
jg 0x40a547
jmp 0x40a580
cmp edx, 0xffffffff
cmovne eax, esi
cmp ecx, 0xa
cmovge eax, esi
nop word cs:[eax + eax]
nop dword [eax + eax]
cmp eax, 0x26fe73a
jle 0x40a580
cmp eax, 0x15ffa3a4
jg 0x40a600
cmp eax, 0xc6b0c5d
jg 0x40a696
cmp eax, 0x26fe73b
je 0x40a7bd
cmp eax, 0x86a4426
jne 0x40a540
mov eax, 0xd61858d0
cmp eax, 0x26fe73a
jg 0x40a547
nop dword [eax + eax]
cmp eax, 0xd27b058f
jle 0x40a660
cmp eax, 0xe201d99f
jg 0x40a6e5
cmp eax, 0xd27b0590
je 0x40a7d2
cmp eax, 0xd61858d0
jne 0x40a540
mov eax, dword [0x448f14]
mov ecx, dword [0x448f18]
mov edi, 0x4eaa13a3
lea edx, [eax - 1]
imul edx, eax
mov esi, edx
xor esi, 0xfffffffe
test esi, edx
sete al
cmp ecx, 0xa
setl ah
xor ah, al
mov eax, 0x4eaa13a3
jne 0x40a5dc
mov edi, 0x15ffa3a5
test esi, edx
cmovne eax, edi
cmp ecx, 0xa
cmovge eax, edi
cmp eax, 0x26fe73a
jg 0x40a547
jmp 0x40a580
cmp eax, 0x4eaa13a2
jg 0x40a739
cmp eax, 0x15ffa3a5
je 0x40a810
cmp eax, 0x2900edac
jne 0x40a540
mov eax, dword [0x448f14]
mov ecx, dword [0x448f18]
mov esi, 0x661961cc
lea edx, [eax - 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl ah
xor ah, al
mov eax, 0x661961cc
jne 0x40a525
mov esi, 0xcb0f9237
jmp 0x40a525
cmp eax, 0xcb0f9236
jg 0x40a7a2
cmp eax, 0x9e92a693
je 0x40a83e
cmp eax, 0xc3a389e1
jne 0x40a540
mov eax, 0xc6b0c5e
cmp eax, 0x26fe73a
jg 0x40a547
jmp 0x40a580
cmp eax, 0xc6b0c5e
je 0x40a872
cmp eax, 0x126a1184
jne 0x40a540
movzx ecx, byte [esp + 2]
movzx edx, byte [esp + 3]
mov esi, 0xc6b0c5e
mov eax, ecx
xor al, dl
mov eax, 0xc6b0c5e
jne 0x40a6cb
mov esi, 0xc3a389e1
test dl, dl
cmove eax, esi
test cl, cl
cmove eax, esi
cmp eax, 0x26fe73a
jg 0x40a547
jmp 0x40a580
cmp eax, 0xe201d9a0
je 0x40a8b6
cmp eax, 0x184799c
jne 0x40a540
mov eax, dword [0x448f14]
mov ecx, dword [0x448f18]
mov esi, 0xd27b0590
lea edx, [eax - 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl ah
xor ah, al
mov eax, 0xd27b0590
jne 0x40a525
mov esi, 0x2900edac
jmp 0x40a525
cmp eax, 0x4eaa13a3
je 0x40a90a
cmp eax, 0x661961cc
jne 0x40a540
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [0x448ec8], eax
mov esi, 0x86a4426
mov eax, dword [0x448f14]
mov ecx, dword [0x448f18]
lea edx, [eax - 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
mov eax, 0x86a4426
mov edx, 0xcb0f9237
sete bl
je 0x40a8a3
mov esi, 0xcb0f9237
jmp 0x40a8a3
cmp eax, 0xcb0f9237
je 0x40a961
cmp eax, 0xcc1c151e
jne 0x40a540
jmp 0x40a98f
mov eax, 0x9e92a693
cmp eax, 0x26fe73a
jg 0x40a547
jmp 0x40a580
mov eax, dword [0x448f14]
mov ecx, dword [0x448f18]
mov esi, 0x9e92a693
lea edx, [eax - 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl ah
xor ah, al
mov eax, 0x9e92a693
jne 0x40a525
mov esi, 0x26fe73b
jmp 0x40a525
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [0x448ec8], eax
mov eax, 0x4eaa13a3
cmp eax, 0x26fe73a
jg 0x40a547
jmp 0x40a580
mov eax, dword [0x448f14]
mov ecx, dword [0x448f18]
mov esi, 0xcc1c151e
lea edx, [eax - 1]
imul edx, eax
mov eax, 0xcc1c151e
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
mov edx, 0x26fe73b
sete bl
je 0x40a8e7
mov esi, 0x26fe73b
jmp 0x40a8e7
mov eax, dword [0x448f14]
mov ecx, dword [0x448f18]
mov esi, 0xe201d9a0
lea edx, [eax - 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
mov eax, 0xe201d9a0
mov edx, 0xc3a389e1
sete bl
je 0x40a8a3
mov esi, 0xc3a389e1
cmp ecx, 0xa
setl cl
cmovl edx, esi
xor cl, bl
jne 0x40a540
jmp 0x40a8f8
mov eax, dword [0x448f14]
mov ecx, dword [0x448f18]
mov esi, 0xd61858d0
lea edx, [eax - 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
mov eax, 0xd61858d0
mov edx, 0x2900edac
sete bl
je 0x40a8e7
mov esi, 0x2900edac
cmp ecx, 0xa
setl cl
cmovl edx, esi
xor bl, cl
jne 0x40a540
mov eax, edx
cmp eax, 0x26fe73a
jg 0x40a547
jmp 0x40a580
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [0x448ec8], eax
mov esi, 0x184799c
mov eax, dword [0x448f14]
mov ecx, dword [0x448f18]
lea edx, [eax - 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl ah
xor ah, al
mov eax, 0x184799c
jne 0x40a525
mov esi, 0x15ffa3a5
jmp 0x40a525
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [0x448ec8], eax
mov eax, 0x661961cc
cmp eax, 0x26fe73a
jg 0x40a547
jmp 0x40a580
mov ecx, dword [esp + 4]
xor ecx, esp
call fcn.004348b2
add esp, 8
pop esi
pop edi
pop ebx
ret