Function at 0x405b26
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x417e56
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x9c
push esi
push edi
mov dword [esp + 0x68], 0x812ae72
mov dword [esp + 0x48], 0x374ff37f
mov dword [esp + 0x24], 0x53039ceb
mov dword [esp + 0x5c], 0x26f83b54
mov dword [esp + 0x1c], 0x2c845f70
mov dword [esp + 0x74], 0x664b1a94
mov dword [esp + 0x7c], 0x2038cb82
mov dword [esp + 0x4c], 0x18f219b6
mov dword [esp + 0x38], 0x52833b47
mov dword [esp + 0x58], 0x24568fa0
mov dword [esp + 0x44], 0xc292fcb
mov dword [esp + 0x70], 0x310707b5
mov dword [esp + 0x78], 0x7eccb7a1
mov dword [esp + 0x34], 0x51beb4a8
mov dword [esp + 0x20], 0x23570ec5
mov dword [esp + 0x54], 0x13bb2b31
mov dword [esp + 0x28], 0x41e4b1e5
mov dword [esp + 0x10], 0x29829f26
mov dword [esp + 0x3c], 0x6640d5e5
mov dword [esp + 0x50], 0x2b35ebd4
mov dword [esp + 0x6c], 0x304a9f21
mov dword [esp + 0x18], 0x42da8ef7
mov dword [esp + 0x40], 0x6e9395e5
mov dword [esp + 0x14], 0x4663bccc
mov dword [esp + 0xc], 0xd57d1e7
mov dword [esp + 0x64], 0x58efb44f
mov dword [esp + 0x2c], 0x146317d6
mov dword [esp + 0x60], 0x1f0b1819
mov dword [esp + 0x30], 0x3d33338
add dword [esp + 0x68], 0x653b0d1e
sub dword [esp + 0x68], 0x1af0d3ea
add dword [esp + 0x68], 0x398a55da
sub dword [esp + 0x24], 0x684b7b80
sub dword [esp + 0x68], 0x230a939f
add dword [esp + 0x24], 0x59c55b6e
add dword [esp + 0x24], 0x3e4b2e5f
sub dword [esp + 0x24], 0x533debbd
sub dword [esp + 0x68], 0x4694b7b0
add dword [esp + 0x48], 0x64d2b886
add dword [esp + 0x24], 0x24a8487e
add dword [esp + 0x48], 0x346d58dd
sub dword [esp + 0x68], 0x41db75c6
add dword [esp + 0x48], 0x6d280e28
sub dword [esp + 0x48], 0x7da0931
add dword [esp + 0x68], 0x694bfc10
sub dword [esp + 0x48], 0xc4a1537
sub dword [esp + 0x68], 0x37c54368
sub dword [esp + 0x24], 0x2c7f8551
sub dword [esp + 0x68], 0x3fa9e949
add dword [esp + 0x48], 0x791148db
add dword [esp + 0x48], 0x138bf3c6
sub dword [esp + 0x24], 0x61a2b58f
sub dword [esp + 0x48], 0x208df69e
sub dword [esp + 0x24], 0x497a7bc8
sub dword [esp + 0x48], 0x1af05f9e
sub dword [esp + 0x48], 0x6b3af13b
add dword [esp + 0x24], 0x6fb1c642
sub dword [esp + 0x48], 0x994df12
sub dword [esp + 0x68], 0x7867e843
add dword [esp + 0x5c], 0x45a20138
sub dword [esp + 0x24], 0x4d6b8727
add dword [esp + 0x24], 0x42d16f3c
sub dword [esp + 0x24], 0x4aaeb358
sub dword [esp + 0x24], 0x5c1aa042
add dword [esp + 0x1c], 0x49af1289
add dword [esp + 0x24], 0x437c985f
add dword [esp + 0x48], 0x79b9c2a2
add dword [esp + 0x7c], 0x5b4a1592
sub dword [esp + 0x5c], 0x2ec83452
add dword [esp + 0x24], 0x437869a5
add dword [esp + 0x74], 0x3b025366
sub dword [esp + 0x5c], 0xd43d2d
add dword [esp + 0x68], 0x7d747d8a
add dword [esp + 0x4c], 0x4883c890
add dword [esp + 0x1c], 0x289bc367
add dword [esp + 0x68], 0x798c77cb
sub dword [esp + 0x68], 0x56be1fbb
add dword [esp + 0x58], 0xdf5b30d
add dword [esp + 0x58], 0x37ed99c9
sub dword [esp + 0x7c], 0x7715dacd
sub dword [esp + 0x5c], 0x31376674
sub dword [esp + 0x38], 0x636d4c79
add dword [esp + 0x68], 0x35025f94
add dword [esp + 0x68], 0x6e30b30b
add dword [esp + 0x74], 0x14dc745e
sub dword [esp + 0x70], 0x169f63ef
add dword [esp + 0x68], 0x7c02df99
sub dword [esp + 0x7c], 0x2e59662f
add dword [esp + 0x58], 0x155c59a4
add dword [esp + 0x7c], 0x7b75a504
add dword [esp + 0x44], 0x219f47f3
sub dword [esp + 0x58], 0x67a552b
add dword [esp + 0x48], 0x4a2137a8
add dword [esp + 0x70], 0xc585413
sub dword [esp + 0x5c], 0x3a14e483
add dword [esp + 0x24], 0x5b524b4e
add dword [esp + 0x78], 0x34fb5402
sub dword [esp + 0x58], 0x34bffa78
add dword [esp + 0x38], 0x6aa55f44
add dword [esp + 0x68], 0xf4e48f
sub dword [esp + 0x4c], 0x2cd6d396
sub dword [esp + 0x5c], 0x45adcf56
add dword [esp + 0x44], 0x46ab1204
sub dword [esp + 0x44], 0x2d00c364
add dword [esp + 0x70], 0x7599e045
add dword [esp + 0x5c], 0x74eabc8d
add dword [esp + 0x44], 0x7bf0b077
add dword [esp + 0x5c], 0x5b716b01
sub dword [esp + 0x4c], 0x4d38819a
add dword [esp + 0x48], 0x278eda90
add dword [esp + 0x78], 0x1f444cf3
add dword [esp + 0x78], 0x1092cade
add dword [esp + 0x54], 0x3a66ef6d
sub dword [esp + 0x5c], 0x6fe2cb96
sub dword [esp + 0x48], 0x173e588a
add dword [esp + 0x48], 0x27245b35
add dword [esp + 0x3c], 0x441a636b
add dword [esp + 0x78], 0x5ba43329
add dword [esp + 0x10], 0x2901033c
add dword [esp + 0x34], 0x7b88cf48
add dword [esp + 0x68], 0x67a8963c
sub dword [esp + 0x24], 0x7d8997bf
sub dword [esp + 0x4c], 0x626ab517
add dword [esp + 0x44], 0x36ad816d
add dword [esp + 0x5c], 0x74cb5282
sub dword [esp + 0x58], 0x7230715d
sub dword [esp + 0x1c], 0x597545ed
sub dword [esp + 0x10], 0x3ec80e96
sub dword [esp + 0x48], 0x7fd0260
sub dword [esp + 0x28], 0x25000d89
add dword [esp + 0x10], 0x17d0d6ee
sub dword [esp + 0x54], 0x538210b7
sub dword [esp + 0x48], 0x233dd73b
add dword [esp + 0x50], 0x30220508
sub dword [esp + 0x68], 0x1cee596
sub dword [esp + 0x58], 0x2b0a7c88
add dword [esp + 0x34], 0x4ff17690
sub dword [esp + 0x70], 0xaf71342
add dword [esp + 0x58], 0x7ef27e15
add dword [esp + 0x18], 0x47928b6b
sub dword [esp + 0x48], 0x2c14997d
add dword [esp + 0x74], 0xa689404
sub dword [esp + 0x18], 0xc7d2fed
add dword [esp + 0x78], 0x7d990335
add dword [esp + 0x18], 0x77640fe7
add dword [esp + 0x48], 0x76cee0ec
sub dword [esp + 0x50], 0x8ece03b
sub dword [esp + 0x7c], 0x2b84348d
sub dword [esp + 0x74], 0x64f9c0f
sub dword [esp + 0x48], 0x8418f68
sub dword [esp + 0x70], 0x3ab9c933
add dword [esp + 0x58], 0x32b4df14
add dword [esp + 0x78], 0x189e08f
sub dword [esp + 0x78], 0x2cd1dbee
add dword [esp + 0x28], 0x7639de4a
sub dword [esp + 0x24], 0x2f37c91f
sub dword [esp + 0x40], 0x2bb22a2d
add dword [esp + 0x10], 0x6e49c677
add dword [esp + 0x14], 0x159d10e0
add dword [esp + 0x40], 0x3441d489
sub dword [esp + 0x34], 0x83f7a80
add dword [esp + 0x48], 0x48b5e129
add dword [esp + 0x2c], 0x56402792
add dword [esp + 0x38], 0xbc9365a
add dword [esp + 0x58], 0x421015e
sub dword [esp + 0xc], 0x1e00592f
sub dword [esp + 0x70], 0x15ce5b3f
add dword [esp + 0x70], 0x78fb057a
sub dword [esp + 0x2c], 0x67ec879
sub dword [esp + 0x64], 0x1bf010b5
sub dword [esp + 0x70], 0x6f1a8863
sub dword [esp + 0x24], 0x2898aad2
sub dword [esp + 0x60], 0x1e9953fd
add dword [esp + 0x40], 0x169c25d
add dword [esp + 0x54], 0x65ce6471
add dword [esp + 0x34], 0x4d7a962f
sub dword [esp + 0x4c], 0x21834542
add dword [esp + 0x54], 0x3832462b
sub dword [esp + 0x6c], 0x3743ab43
add dword [esp + 0x4c], 0x3438b52a
add dword [esp + 0x14], 0x387092fa
sub dword [esp + 0x74], 0x4cde04ab
sub dword [esp + 0x20], 0x6a02c50f
add dword [esp + 0x54], 0x52975e55
add dword [esp + 0x14], 0x16ccda85
sub dword [esp + 0x78], 0x721ba79a
add dword [esp + 0x1c], 0x3cb8b521
sub dword [esp + 0x20], 0x2772cc43
add dword [esp + 0x44], 0x83387bf
add dword [esp + 0x30], 0x530a5665
xor edi, edi
cmp dword [0x4460dc], 0x20
jne 0x4061fc
push edi
lea eax, [esp + 0x84]
push eax
push edi
push edi
push edi
call dword [sym.imp.KERNEL32.dll_WriteConsoleW]
push edi
push edi
call dword [sym.imp.KERNEL32.dll_TerminateJobObject]
push edi
push edi
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
call fcn.00404b60
lea eax, [esp + 0x84]
call fcn.0040624d
push edi
mov dword [esp + 0xb0], edi
call fcn.0040669d
pop ecx
push edi
call fcn.00406886
pop ecx
push 0x38
push edi
push 0x404968
push 0x444e10
call fcn.00406e07
push 0x404970
push 0x404974
push edi
call fcn.00406db4
add esp, 0x1c
push edi
call fcn.00406bc0
pop ecx
push edi
push edi
push edi
call fcn.00407084
pop ecx
mov eax, esp
mov dword [eax], edi
mov dword [eax + 4], edi
call fcn.00404b98
fstp st(0)
push edi
push edi
call fcn.0040672b
mov eax, esp
mov dword [eax], edi
mov dword [eax + 4], edi
call fcn.00404b75
fstp st(0)
or dword [esp + 0xac], 0xffffffff
lea esi, [esp + 0x84]
call fcn.0040626a
mov esi, 0xe3a7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push edi
call dword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
dec esi
jne 0x406201
push 0x40497c
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov eax, dword [0x42f65c]
mov dword [0x4460dc], eax
mov eax, dword [0x42e6bc]
mov dword [0x4460e0], eax
call fcn.00404f12
mov ecx, dword [esp + 0xa4]
pop edi
xor eax, eax
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret 0x10