Function at 0x412ac0
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 8
mov eax, dword [0x43d5f0]
mov esi, 0x788496a7
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, dword [0x43df4c]
mov ecx, dword [0x43df50]
lea edx, [eax - 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
mov eax, 0x3db465ed
sete byte [ebp - 0x12]
cmp ecx, 0xa
setl byte [ebp - 0x11]
cmp eax, 0x7fb4cde
jle 0x412b5b
jmp 0x412f80
mov eax, dword [0x43df4c]
mov edi, 0x74e9c762
mov ebx, 0x39559daf
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x39559daf
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, edi
cmp dword [0x43df50], 0xa
setl dl
cmovge eax, ebx
xor dl, cl
cmovne eax, edi
nop word cs:[eax + eax]
cmp eax, 0x7fb4cde
jg 0x412f80
cmp eax, 0xc266b91a
jg 0x412bb0
cmp eax, 0xb54c239e
jle 0x412c0e
cmp eax, 0xb98e4481
jg 0x412cee
cmp eax, 0xb54c239f
je 0x412d9b
cmp eax, 0xb604c9cd
jne 0x412b50
mov eax, dword [0x43df4c]
mov ecx, dword [0x43df50]
mov edi, 0x43bb64f1
mov ebx, 0xbb899488
jmp 0x412f15
cmp eax, 0xd6a8c20c
jle 0x412c55
cmp eax, 0xe71a4e9f
jg 0x412d2a
cmp eax, 0xd6a8c20d
je 0x412db0
cmp eax, 0xddb13e3c
jne 0x412b50
mov eax, dword [0x43df4c]
mov ecx, dword [0x43df50]
mov edi, 0xb98e4482
lea edx, [eax - 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x797a3edc
jmp 0x412f5b
cmp eax, 0x8546818d
je 0x412dd6
cmp eax, 0xa8ba5c10
je 0x412dfc
cmp eax, 0xaea690af
jne 0x412b50
mov eax, dword [0x43df4c]
mov edi, 0x3bcb4e8a
mov ebx, 0xa8ba5c10
lea ecx, [eax - 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xa8ba5c10
jmp 0x412b2e
cmp eax, 0xc266b91b
je 0x412e11
cmp eax, 0xc3f052fb
je 0x412e26
cmp eax, 0xcb8ed8fe
jne 0x412b50
push eax
sub esp, 0x100
mov ebx, esp
push eax
mov edi, esp
push 5
call fcn.00412770
add esp, 4
mov dword [edi], 0
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x28]
mov dword [edi], eax
push 0x104
push dword [edi]
push ebx
call fcn.0042bd87
add esp, 0xc
push ebx
call fcn.004101b0
add esp, 4
mov eax, dword [0x43df4c]
mov ecx, dword [0x43df50]
mov edi, 0xe71a4ea0
lea edx, [eax - 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xddb13e3c
jmp 0x412f5b
cmp eax, 0xb98e4482
je 0x412e9e
cmp eax, 0xbb899488
jne 0x412b50
mov eax, dword [0x43df4c]
mov ebx, 0x194cbfe9
mov edi, 0x43bb64f1
lea ecx, [eax - 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x43bb64f1
jmp 0x412f36
cmp eax, 0xe71a4ea0
je 0x412ebd
cmp eax, 0x5615bd1
jne 0x412b50
push eax
sub esp, 0x100
mov edi, esp
push eax
mov ebx, esp
push 5
call fcn.00412770
add esp, 4
mov dword [ebx], 0
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x28]
mov dword [ebx], eax
push 0x104
push dword [ebx]
push edi
call fcn.0042bd87
add esp, 0xc
push edi
call fcn.004101b0
add esp, 4
mov eax, 0xc3f052fb
cmp eax, 0x7fb4cde
jle 0x412b5b
jmp 0x412f80
mov eax, 0xbb899488
cmp eax, 0x7fb4cde
jle 0x412b5b
jmp 0x412f80
mov eax, dword [0x43df4c]
mov edi, 0xb54c239f
mov ebx, 0x3300dacb
lea ecx, [eax - 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x3300dacb
jmp 0x412b2e
mov eax, dword [0x43df4c]
mov edi, 0xcb8ed8fe
mov ebx, 0xe71a4ea0
lea ecx, [eax - 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xe71a4ea0
jmp 0x412b2e
mov eax, 0x3bcb4e8a
cmp eax, 0x7fb4cde
jle 0x412b5b
jmp 0x412f80
mov eax, 0x8546818d
cmp eax, 0x7fb4cde
jle 0x412b5b
jmp 0x412f80
push eax
sub esp, 0x100
mov edi, esp
push eax
mov ebx, esp
push 5
call fcn.00412770
add esp, 4
mov dword [ebx], 0
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x28]
mov dword [ebx], eax
push 0x104
push dword [ebx]
push edi
call fcn.0042bd87
add esp, 0xc
push edi
call fcn.004101b0
add esp, 4
mov eax, dword [0x43df4c]
mov ecx, dword [0x43df50]
mov edi, 0x5615bd1
lea edx, [eax - 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xa50bb5d
jmp 0x412f5b
mov eax, dword [0x43df4c]
mov edi, 0x30692c15
mov ebx, 0xb604c9cd
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xb604c9cd
jmp 0x412b26
push eax
sub esp, 0x100
mov edi, esp
push eax
mov ebx, esp
push 5
call fcn.00412770
add esp, 4
mov dword [ebx], 0
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x28]
mov dword [ebx], eax
push 0x104
push dword [ebx]
push edi
call fcn.0042bd87
add esp, 0xc
push edi
call fcn.004101b0
add esp, 4
mov eax, 0xcb8ed8fe
cmp eax, 0x7fb4cde
jle 0x412b5b
jmp 0x412f80
lea edx, [eax - 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl ah
xor ah, al
cmovne edi, ebx
cmp edx, 0xffffffff
jmp 0x412f60
sete cl
cmove eax, ebx
cmp dword [0x43df50], 0xa
setl dl
cmovge eax, edi
xor dl, cl
cmovne eax, ebx
cmp eax, 0x7fb4cde
jle 0x412b5b
jmp 0x412f80
cmovne edi, ebx
test eax, edx
mov eax, edi
cmove eax, ebx
cmp ecx, 0xa
cmovge eax, edi
cmp eax, 0x7fb4cde
jle 0x412b5b
nop word cs:[eax + eax]
cmp eax, 0x3d3d8544
jle 0x413000
cmp eax, 0x6044627e
jle 0x4130a4
cmp eax, 0x788496a6
jg 0x413132
cmp eax, 0x6044627f
je 0x4131a8
cmp eax, 0x74e9c762
jne 0x412b50
mov eax, dword [0x43df4c]
mov ecx, dword [0x43df50]
mov edi, 0x8546818d
lea edx, [eax - 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xb98e4482
cmovne ebx, edi
test eax, edx
mov eax, ebx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, ebx
cmp eax, 0x7fb4cde
jle 0x412b5b
jmp 0x412f80
cmp eax, 0x3300daca
jg 0x4130eb
cmp eax, 0x194cbfe8
jle 0x41318d
cmp eax, 0x194cbfe9
je 0x4131bd
cmp eax, 0x30692c15
jne 0x412b50
push eax
sub esp, 0x100
mov edi, esp
push eax
mov ebx, esp
push 5
call fcn.00412770
add esp, 4
mov dword [ebx], 0
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x28]
mov dword [ebx], eax
push 0x104
push dword [ebx]
push edi
call fcn.0042bd87
add esp, 0xc
push edi
call fcn.004101b0
add esp, 4
mov eax, dword [0x43df4c]
mov ecx, dword [0x43df50]
mov edi, 0xb604c9cd
lea edx, [eax - 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xc266b91b
jmp 0x412f5b
cmp eax, 0x3d3d8545
je 0x412b0c
cmp eax, 0x3db465ed
je 0x4131d7
cmp eax, 0x43bb64f1
jne 0x412b50
mov eax, dword [0x43df4c]
mov ebx, 0xd6a8c20d
mov edi, 0x3300dacb
lea ecx, [eax - 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x3300dacb
jmp 0x412f36
cmp eax, 0x3300dacb
je 0x413211
cmp eax, 0x39559daf
je 0x413226
cmp eax, 0x3bcb4e8a
jne 0x412b50
mov eax, dword [0x43df4c]
mov ebx, 0x6044627f
mov edi, 0xa8ba5c10
lea ecx, [eax - 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xa8ba5c10
jmp 0x412f36
cmp eax, 0x788496a7
je 0x41323b
cmp eax, 0x797a3edc
jne 0x412b50
mov eax, dword [0x43df4c]
mov edi, 0xaea690af
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xaea690af
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, esi
cmp dword [0x43df50], 0xa
setl dl
cmovge eax, edi
xor dl, cl
cmovne eax, esi
cmp eax, 0x7fb4cde
jle 0x412b5b
jmp 0x412f80
cmp eax, 0xa50bb5d
je 0x413261
cmp eax, 0x7fb4cdf
jne 0x412b50
jmp 0x413276
mov eax, 0x788496a7
cmp eax, 0x7fb4cde
jle 0x412b5b
jmp 0x412f80
mov eax, dword [0x43df4c]
mov ecx, dword [0x43df50]
mov edi, 0x5615bd1
mov ebx, 0xc3f052fb
jmp 0x412f15
movzx ecx, byte [ebp - 0x12]
movzx eax, byte [ebp - 0x11]
mov edi, 0x3d3d8545
mov ebx, 0x39559daf
mov edx, eax
xor dl, cl
test al, al
mov eax, 0x39559daf
cmovne eax, edi
test cl, cl
cmove eax, ebx
test dl, dl
cmovne eax, edi
cmp eax, 0x7fb4cde
jle 0x412b5b
jmp 0x412f80
mov eax, 0xd6a8c20d
cmp eax, 0x7fb4cde
jle 0x412b5b
jmp 0x412f80
mov eax, 0x3d3d8545
cmp eax, 0x7fb4cde
jle 0x412b5b
jmp 0x412f80
mov eax, dword [0x43df4c]
mov edi, 0x7fb4cdf
mov ebx, 0xaea690af
lea ecx, [eax - 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xaea690af
jmp 0x412b2e
mov eax, 0x30692c15
cmp eax, 0x7fb4cde
jle 0x412b5b
jmp 0x412f80
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00428df1
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret