Function at 0x4061f0
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x38
mov eax, dword [0x44f834]
lea ebx, [ebp - 0x1f]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x34], ebx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov dword [eax + 0xb], 0x2554ff05
mov dword [eax + 8], 0x5390158
mov dword [eax + 4], 0x57254712
mov dword [eax], 0xff574511
lea eax, [ebp - 0x38]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [section..01cfg], eax
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push 0x9385646d
push dword [section..01cfg]
call fcn.00405c50
add esp, 8
mov dword [ebp - 0x3c], eax
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x406274
call edx
xor eax, eax
push 0x27
push section..data
push 0x547
push 0x44f027
call section..text
add esp, 0x10
push 0xf
push ebx
push dword [ebp + 0xc]
push dword [ebp + 8]
call section..text
add esp, 0x10
push 0
push 1
push str._d__d
call fcn.00404110
add esp, 0xc
mov ecx, 0x4512a8
push 0
call fcn.00406500
mov esi, eax
mov eax, dword [eax]
mov ecx, dword [eax + 4]
add ecx, esi
push 0xa
call fcn.0041df30
movsx eax, al
mov ecx, esi
push eax
call fcn.0041d860
mov ecx, esi
call fcn.0040b2e0
mov ebx, dword [sym.imp.KERNEL32.dll_GlobalFindAtomW]
mov eax, 0x4c3ee8ab
nop word [eax + eax]
cmp eax, 0xf135f51d
jle 0x406320
cmp eax, 0x1ebeb3fb
jg 0x406350
cmp eax, 0xf135f51e
je 0x4063e0
cmp eax, 0xa32e2f6
jne 0x4062f0
jmp 0x4064df
cmp eax, 0x8cc0349c
je 0x4063fa
cmp eax, 0x94a2c2dc
je 0x406423
cmp eax, 0xc75f329a
jne 0x4062f0
mov eax, 0x8cc0349c
mov edi, 0x8aafdc01
cmp eax, 0xf135f51d
jg 0x4062f7
jmp 0x406320
cmp eax, 0x1ebeb3fc
je 0x406453
cmp eax, 0x4c3ee8ab
jne 0x4062f0
mov ecx, 0xd519ec50
mov dword [ebp - 0x24], 1
nop
cmp ecx, 0xd519ec4f
jg 0x4063a0
cmp ecx, 0x8350ed3c
je 0x4063cf
cmp ecx, 0xa4e05440
jne 0x406370
mov ecx, 0x27c7433
xor eax, eax
cmp ecx, 0xd519ec4f
jle 0x406378
nop word [eax + eax]
cmp ecx, 0x27c7433
je 0x4064be
cmp ecx, 0xd519ec50
jne 0x406370
cmp dword [ebp - 0x24], 0
mov ecx, 0xa4e05440
mov edx, 0x8350ed3c
cmove ecx, edx
cmp ecx, 0xd519ec4f
jle 0x406378
jmp 0x4063a0
mov ecx, 0x27c7433
mov al, 1
cmp ecx, 0xd519ec4f
jle 0x406378
jmp 0x4063a0
mov eax, 0x94a2c2dc
mov esi, 0x4e4
cmp eax, 0xf135f51d
jg 0x4062f7
jmp 0x406320
push edi
push dword [section..01cfg]
call fcn.00405c50
add esp, 8
mov dword [ebp - 0x28], eax
mov eax, 0xf135f51e
xor esi, esi
cmp eax, 0xf135f51d
jg 0x4062f7
jmp 0x406320
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x38]
push ecx
push 0x40
push esi
push 0x44f027
call eax
test eax, eax
mov eax, 0x1ebeb3fc
mov ecx, 0xa32e2f6
cmove eax, ecx
cmp eax, 0xf135f51d
jg 0x4062f7
jmp 0x406320
mov eax, dword [ebp + 8]
mov dword [ebp - 0x40], edi
mov edi, 0x44f027
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x24], eax
mov esi, dword [ebp - 0x24]
push esi
mov edx, edi
mov ecx, 0x27
xor ecx, 0x1af
add edx, ecx
mov ecx, 3
sub esp, 4
loop 0x40647c
mov dword [esp + 4], 1
xor dword [esp + 4], 0xbb8
mov dword [esp], edx
mov dword [esp + 8], 0
lea eax, [ebx]
push eax
ret
test al, 1
mov eax, 0xc75f329a
mov ecx, 0x8cc0349c
cmovne eax, ecx
xor edi, edi
cmp eax, 0xf135f51d
jg 0x4062f7
jmp 0x406320
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041ede8
xor eax, eax
add esp, 0x38
pop esi
pop edi
pop ebx
pop ebp
ret